last executing test programs:

1.86366087s ago: executing program 1 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)

1.795198742s ago: executing program 0 (id=501):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x1c, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.794968s ago: executing program 1 (id=502):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000440)=0x7, 0x4)

1.7299321s ago: executing program 1 (id=503):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="ee1bc38a373716fd43e3f80aa6e8afdbf39594709440b769", 0x18}], 0x2)

1.729611298s ago: executing program 0 (id=504):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000})

1.65315287s ago: executing program 2 (id=505):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x5}, {&(0x7f0000000280)="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", 0x8}], 0x2}}], 0x1, 0x8000)

1.638735s ago: executing program 2 (id=506):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0x1000000}, 0x10)
recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0)

1.525216197s ago: executing program 2 (id=507):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfe, [0x0, 0x0, 0x1, 0x7, 0x6, 0xfd, 0x0, 0xfe, 0x3, 0x10], 0xfe, [0x4, 0x2, 0xfffe, 0x4e3e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

232.98312ms ago: executing program 2 (id=508):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200), 0x4)

232.833383ms ago: executing program 2 (id=509):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x11, 0x51, 0x1}}], 0x18}, 0x2004c0c1)

194.908639ms ago: executing program 1 (id=510):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x50, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b10d94fea4561a06999ebb3391718ebe"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x20)

144.157825ms ago: executing program 0 (id=511):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
recvfrom$llc(r0, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0)

143.790746ms ago: executing program 2 (id=512):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

82.9422ms ago: executing program 0 (id=513):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$rose(r0, 0x0, 0x0, 0x9637f83aea13cb50, 0x0, 0x0)

82.325845ms ago: executing program 1 (id=514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x48001)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
r2 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r2, 0x0, 0x24004001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2, 0xf}}}, 0x24}}, 0x40808c4)
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})

71.314576ms ago: executing program 1 (id=515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r0, 0x8943, &(0x7f0000000000)="a6b4046e3a")

454.376µs ago: executing program 0 (id=516):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/155, 0x9b}], 0x3}, 0xfffffffc}], 0x1, 0x2, 0x0)

0s ago: executing program 0 (id=517):
socket$igmp6(0xa, 0x3, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket(0x1, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49565' (ED25519) to the list of known hosts.
syzkaller login: [   57.377048][ T5803] cgroup: Unknown subsys name 'net'
[   57.486016][ T5803] cgroup: Unknown subsys name 'cpuset'
[   57.490377][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.260114][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.196061][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.199037][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   72.868160][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.878220][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.882143][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.887056][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.892636][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.955367][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.958938][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.962813][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.970933][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.992953][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.035262][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.041080][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.046026][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.050096][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.054163][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.437770][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   73.506694][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   73.547645][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   73.614422][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.616825][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.619399][ T5875] bridge_slave_0: entered allmulticast mode
[   73.623070][ T5875] bridge_slave_0: entered promiscuous mode
[   73.655646][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.658126][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.661107][ T5875] bridge_slave_1: entered allmulticast mode
[   73.666910][ T5875] bridge_slave_1: entered promiscuous mode
[   73.677757][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.680647][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.684080][ T5878] bridge_slave_0: entered allmulticast mode
[   73.687592][ T5878] bridge_slave_0: entered promiscuous mode
[   73.691261][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.693865][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.696515][ T5878] bridge_slave_1: entered allmulticast mode
[   73.699988][ T5878] bridge_slave_1: entered promiscuous mode
[   73.763358][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.796403][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.799504][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.802567][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.804851][ T5880] bridge_slave_0: entered allmulticast mode
[   73.807488][ T5880] bridge_slave_0: entered promiscuous mode
[   73.814172][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.837739][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.841434][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.844298][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.846735][ T5880] bridge_slave_1: entered allmulticast mode
[   73.849877][ T5880] bridge_slave_1: entered promiscuous mode
[   73.882425][ T5875] team0: Port device team_slave_0 added
[   73.918773][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.926606][ T5875] team0: Port device team_slave_1 added
[   73.940995][ T5878] team0: Port device team_slave_0 added
[   73.946914][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.968332][ T5878] team0: Port device team_slave_1 added
[   74.021396][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.024694][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.036599][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.043205][ T5880] team0: Port device team_slave_0 added
[   74.046154][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.048810][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.059361][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.075394][ T5880] team0: Port device team_slave_1 added
[   74.077716][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.079784][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.089202][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.117707][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.120440][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.130318][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.147582][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.150232][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.159702][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.181801][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.184188][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.192735][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.226656][ T5875] hsr_slave_0: entered promiscuous mode
[   74.229949][ T5875] hsr_slave_1: entered promiscuous mode
[   74.299738][ T5878] hsr_slave_0: entered promiscuous mode
[   74.302656][ T5878] hsr_slave_1: entered promiscuous mode
[   74.305274][ T5878] debugfs: 'hsr0' already exists in 'hsr'
[   74.307380][ T5878] Cannot create hsr debugfs directory
[   74.356857][ T5880] hsr_slave_0: entered promiscuous mode
[   74.359610][ T5880] hsr_slave_1: entered promiscuous mode
[   74.362031][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   74.364017][ T5880] Cannot create hsr debugfs directory
[   74.680572][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.691131][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.700042][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.717875][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.776668][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   74.784200][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.798561][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.819531][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.870081][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.886158][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.901522][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.924081][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.952500][ T5882] Bluetooth: hci0: command tx timeout
[   75.048820][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.075249][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.097948][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   75.113525][ T5882] Bluetooth: hci2: command tx timeout
[   75.116111][ T5882] Bluetooth: hci1: command tx timeout
[   75.127504][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   75.138449][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.141281][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.146734][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.148955][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.168251][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.171167][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.177970][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.180651][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.188624][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.250334][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   75.266503][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.269405][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.289254][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.292305][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.327169][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.396061][ T5878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.400657][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.567239][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.586868][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.628739][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.668785][ T5880] veth0_vlan: entered promiscuous mode
[   75.680052][ T5875] veth0_vlan: entered promiscuous mode
[   75.692977][ T5875] veth1_vlan: entered promiscuous mode
[   75.708503][ T5880] veth1_vlan: entered promiscuous mode
[   75.751452][ T5875] veth0_macvtap: entered promiscuous mode
[   75.757418][ T5878] veth0_vlan: entered promiscuous mode
[   75.766633][ T5875] veth1_macvtap: entered promiscuous mode
[   75.788931][ T5878] veth1_vlan: entered promiscuous mode
[   75.795521][ T5880] veth0_macvtap: entered promiscuous mode
[   75.807521][ T5880] veth1_macvtap: entered promiscuous mode
[   75.819059][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.827863][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.858237][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.865259][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.868931][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.878295][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.882870][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.893264][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.914655][ T5904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.930132][ T5878] veth0_macvtap: entered promiscuous mode
[   75.934884][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.953872][ T5904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.959061][ T5904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.976442][ T5878] veth1_macvtap: entered promiscuous mode
[   76.020128][ T3581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.030768][ T3581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.056338][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.077386][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.087519][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.090417][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.115045][ T5677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.119425][ T5677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.133614][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.137286][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.143044][ T5677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.148795][ T5677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.169108][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.259760][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.267958][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.312424][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.315548][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.392613][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.395707][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.420143][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   76.624541][ T5954] netlink: 'syz.1.23': attribute type 3 has an invalid length.
[   76.940504][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'.
[   77.033402][   T55] Bluetooth: hci0: command tx timeout
[   77.047864][ T5971] netlink: 7 bytes leftover after parsing attributes in process `syz.0.31'.
[   77.191504][ T5982] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.194156][   T55] Bluetooth: hci1: command tx timeout
[   77.199086][   T55] Bluetooth: hci2: command tx timeout
[   77.370792][ T5986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.38'.
[   77.388206][ T5986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.38'.
[   77.896148][ T6007] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   77.971019][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   78.284827][ T6031] syz.1.60 uses obsolete (PF_INET,SOCK_PACKET)
[   78.299016][ T6033] Bluetooth: MGMT ver 1.23
[   78.601522][ T6046] ip6gre0: Master is either lo or non-ether device
[   79.107590][ T6073] syzkaller0: entered promiscuous mode
[   79.109742][ T6073] syzkaller0: entered allmulticast mode
[   79.111934][ T5882] Bluetooth: hci0: command tx timeout
[   79.130612][ T6073] tipc: Started in network mode
[   79.145525][ T6073] tipc: Node identity 9e2e5954c3a, cluster identity 4711
[   79.148264][ T6073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.151515][ T6072] tipc: Resetting bearer <eth:syzkaller0>
[   79.207195][ T6072] tipc: Disabling bearer <eth:syzkaller0>
[   79.272388][ T5882] Bluetooth: hci2: command tx timeout
[   79.272655][ T5884] Bluetooth: hci1: command tx timeout
[   79.393906][ T6100] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   79.920952][ T6139] Zero length message leads to an empty skb
[   80.315622][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   80.332489][ T6165] netem: change failed
[   80.664673][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'.
[   80.871847][ T6205] trusted_key: syz.2.134 sent an empty control message without MSG_MORE.
[   81.151510][ T6220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.191992][   T55] Bluetooth: hci0: command tx timeout
[   81.351782][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   81.354504][   T55] Bluetooth: hci1: command tx timeout
[   81.446460][   T33] audit: type=1800 audit(1757211432.129:2): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="blkio.bfq.time_recursive" dev="tmpfs" ino=247 res=0 errno=0
[   82.441051][ T6274] netlink: 1 bytes leftover after parsing attributes in process `syz.2.166'.
[   82.569456][ T6237] syz.0.149: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.584586][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) 
[   82.584600][ T6237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.584606][ T6237] Call Trace:
[   82.584612][ T6237]  <TASK>
[   82.584618][ T6237]  dump_stack_lvl+0x189/0x250
[   82.584643][ T6237]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.584658][ T6237]  ? __pfx__printk+0x10/0x10
[   82.584677][ T6237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.584692][ T6237]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.584707][ T6237]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   82.584724][ T6237]  warn_alloc+0x214/0x310
[   82.584749][ T6237]  ? __pfx_warn_alloc+0x10/0x10
[   82.584775][ T6237]  ? __get_vm_area_node+0x28f/0x300
[   82.584795][ T6237]  ? hash_netport4_resize+0x235/0x1b60
[   82.584815][ T6237]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   82.584853][ T6237]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.584877][ T6237]  ? rcu_is_watching+0x15/0xb0
[   82.584894][ T6237]  ? hash_netport4_resize+0x235/0x1b60
[   82.584910][ T6237]  ? hash_netport4_resize+0x235/0x1b60
[   82.584924][ T6237]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   82.584944][ T6237]  ? hash_netport4_resize+0x235/0x1b60
[   82.584966][ T6237]  hash_netport4_resize+0x235/0x1b60
[   82.584982][ T6237]  ? hash_netport4_uadt+0xc97/0xf30
[   82.585003][ T6237]  ? __pfx_hash_netport4_add+0x10/0x10
[   82.585019][ T6237]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   82.585041][ T6237]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   82.585063][ T6237]  call_ad+0x44e/0xb00
[   82.585088][ T6237]  ? __pfx_call_ad+0x10/0x10
[   82.585114][ T6237]  ? __nla_parse+0x40/0x60
[   82.585128][ T6237]  ip_set_ad+0x791/0x930
[   82.585148][ T6237]  ? __pfx_ip_set_ad+0x10/0x10
[   82.585193][ T6237]  nfnetlink_rcv_msg+0xb4d/0x1130
[   82.585218][ T6237]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   82.585248][ T6237]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   82.585264][ T6237]  ? kasan_save_free_info+0x46/0x50
[   82.585346][ T6237]  netlink_rcv_skb+0x208/0x470
[   82.585363][ T6237]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   82.585385][ T6237]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.585408][ T6237]  ? bpf_lsm_capable+0x9/0x20
[   82.585427][ T6237]  ? security_capable+0x7e/0x2e0
[   82.585456][ T6237]  nfnetlink_rcv+0x26a/0x2520
[   82.585478][ T6237]  ? __dev_queue_xmit+0x1d79/0x3b50
[   82.585506][ T6237]  ? __dev_queue_xmit+0x27b/0x3b50
[   82.585532][ T6237]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   82.585552][ T6237]  ? __pfx___dev_queue_xmit+0x10/0x10
[   82.585587][ T6237]  ? ref_tracker_free+0x63a/0x7d0
[   82.585607][ T6237]  ? __asan_memcpy+0x40/0x70
[   82.585622][ T6237]  ? __pfx_ref_tracker_free+0x10/0x10
[   82.585639][ T6237]  ? __skb_clone+0x63/0x7a0
[   82.585658][ T6237]  ? __skb_clone+0x483/0x7a0
[   82.585678][ T6237]  ? skb_clone+0x246/0x3a0
[   82.585696][ T6237]  ? __netlink_deliver_tap+0x807/0x850
[   82.585710][ T6237]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.585727][ T6237]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.585746][ T6237]  netlink_unicast+0x82f/0x9e0
[   82.585773][ T6237]  ? __pfx_netlink_unicast+0x10/0x10
[   82.585794][ T6237]  ? netlink_sendmsg+0x642/0xb30
[   82.585805][ T6237]  ? skb_put+0x11b/0x210
[   82.585821][ T6237]  netlink_sendmsg+0x805/0xb30
[   82.585843][ T6237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.585860][ T6237]  ? aa_sock_msg_perm+0xf1/0x1d0
[   82.585876][ T6237]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.585892][ T6237]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.585907][ T6237]  __sock_sendmsg+0x21c/0x270
[   82.585931][ T6237]  ____sys_sendmsg+0x505/0x830
[   82.585953][ T6237]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.585977][ T6237]  ? import_iovec+0x74/0xa0
[   82.585998][ T6237]  ___sys_sendmsg+0x21f/0x2a0
[   82.586017][ T6237]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.586064][ T6237]  ? __fget_files+0x2a/0x420
[   82.586077][ T6237]  ? __fget_files+0x3a0/0x420
[   82.586098][ T6237]  __x64_sys_sendmsg+0x19b/0x260
[   82.586118][ T6237]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.586144][ T6237]  ? rcu_is_watching+0x15/0xb0
[   82.586162][ T6237]  ? do_syscall_64+0xbe/0x3b0
[   82.586184][ T6237]  do_syscall_64+0xfa/0x3b0
[   82.586198][ T6237]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.586214][ T6237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.586228][ T6237]  ? exc_page_fault+0x9f/0xf0
[   82.586244][ T6237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.586258][ T6237] RIP: 0033:0x7fac3718ebe9
[   82.586300][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.586314][ T6237] RSP: 002b:00007fac3803b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.586331][ T6237] RAX: ffffffffffffffda RBX: 00007fac373c5fa0 RCX: 00007fac3718ebe9
[   82.586341][ T6237] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007
[   82.586350][ T6237] RBP: 00007fac37211e19 R08: 0000000000000000 R09: 0000000000000000
[   82.586358][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.586366][ T6237] R13: 00007fac373c6038 R14: 00007fac373c5fa0 R15: 00007fff30f98888
[   82.586390][ T6237]  </TASK>
[   82.586397][ T6237] Mem-Info:
[   82.841766][ T6237] active_anon:5076 inactive_anon:0 isolated_anon:0
[   82.841766][ T6237]  active_file:1257 inactive_file:38231 isolated_file:0
[   82.841766][ T6237]  unevictable:1768 dirty:1451 writeback:0
[   82.841766][ T6237]  slab_reclaimable:9475 slab_unreclaimable:52135
[   82.841766][ T6237]  mapped:18040 shmem:2432 pagetables:923
[   82.841766][ T6237]  sec_pagetables:0 bounce:0
[   82.841766][ T6237]  kernel_misc_reclaimable:0
[   82.841766][ T6237]  free:303104 free_pcp:15349 free_cma:0
[   82.885179][ T6237] Node 0 active_anon:10752kB inactive_anon:0kB active_file:1700kB inactive_file:117712kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43368kB dirty:2024kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6600kB pagetables:1796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.900222][ T6237] Node 1 active_anon:9484kB inactive_anon:0kB active_file:3328kB inactive_file:35212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28792kB dirty:3780kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4816kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.937859][ T6237] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.976453][ T6237] lowmem_reserve[]: 0 811 811 811 811
[   82.978710][ T6237] Node 0 DMA32 free:319972kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10888kB inactive_anon:0kB active_file:1700kB inactive_file:117712kB unevictable:3536kB writepending:2024kB present:1556484kB managed:830868kB mlocked:0kB bounce:0kB free_pcp:25624kB local_pcp:15556kB free_cma:0kB
[   83.003865][ T6237] lowmem_reserve[]: 0 0 0 0 0
[   83.006035][ T6237] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   83.022744][ T6237] lowmem_reserve[]: 0 0 854 854 854
[   83.025526][ T6237] Node 1 Normal free:418592kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9620kB inactive_anon:0kB active_file:3328kB inactive_file:35212kB unevictable:3536kB writepending:3780kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36324kB local_pcp:18836kB free_cma:0kB
[   83.040131][ T6237] lowmem_reserve[]: 0 0 0 0 0
[   83.073437][ T6237] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.078544][ T6237] Node 0 DMA32: 683*4kB (UME) 369*8kB (UME) 297*16kB (UM) 105*32kB (UME) 115*64kB (UM) 54*128kB (UM) 18*256kB (UME) 13*512kB (UM) 6*1024kB (UM) 4*2048kB (UM) 65*4096kB (M) = 319908kB
[   83.102960][ T6237] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   83.109391][ T6237] Node 1 Normal: 14*4kB (UM) 359*8kB (UME) 305*16kB (UME) 19*32kB (UME) 23*64kB (UME) 13*128kB (UME) 2*256kB (UE) 2*512kB (ME) 0*1024kB 0*2048kB 99*4096kB (M) = 418592kB
[   83.124326][ T6237] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.128485][ T6237] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.144971][ T6237] 41920 total pagecache pages
[   83.146760][ T6237] 0 pages in swap cache
[   83.148130][ T6237] Free swap  = 124996kB
[   83.149816][ T6237] Total swap = 124996kB
[   83.151502][ T6237] 786301 pages RAM
[   83.170338][ T6237] 0 pages HighMem/MovableOnly
[   83.172574][ T6237] 241352 pages reserved
[   83.174153][ T6237] 0 pages cma reserved
[   83.353790][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'.
[   83.357363][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.180'.
[   83.362133][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'.
[   83.365016][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'.
[   83.432986][ T5884] Bluetooth: hci2: command 0x0419 tx timeout
[   83.629546][ T6320] Unsupported ieee802154 address type: 0
[   83.675964][ T6318] tipc: Started in network mode
[   83.678042][ T6318] tipc: Node identity 5eb54b9cfcf1, cluster identity 4711
[   83.685019][ T6318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.690087][ T6318] syzkaller0: entered promiscuous mode
[   83.701774][ T6318] syzkaller0: entered allmulticast mode
[   83.740632][ T6318] tipc: Resetting bearer <eth:syzkaller0>
[   83.748843][ T6317] tipc: Resetting bearer <eth:syzkaller0>
[   83.766432][ T6317] tipc: Disabling bearer <eth:syzkaller0>
[   83.909480][ T6331] netlink: 84 bytes leftover after parsing attributes in process `syz.1.192'.
[   83.978741][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   84.489916][ T6350] netlink: 220 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.494538][ T6350] netlink: 220 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.498144][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.200'.
[   84.918115][ T6359] netlink: 'syz.2.204': attribute type 3 has an invalid length.
[   85.100396][ T6365] bond0: Error: Cannot enslave bond to itself.
[   85.577667][ T6389] netlink: 'syz.2.219': attribute type 9 has an invalid length.
[   85.581060][ T6389] netlink: 'syz.2.219': attribute type 6 has an invalid length.
[   85.590988][ T6389] netlink: 'syz.2.219': attribute type 7 has an invalid length.
[   85.595336][ T6389] netlink: 'syz.2.219': attribute type 8 has an invalid length.
[   85.655759][ T6395] netlink: 'syz.0.222': attribute type 28 has an invalid length.
[   85.920806][ T6413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.977973][ T6419] netlink: 'syz.2.234': attribute type 2 has an invalid length.
[   86.501871][   T33] audit: type=1800 audit(1757211437.179:3): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.245" name="memory.events" dev="tmpfs" ino=415 res=0 errno=0
[   86.569664][ T3142] cfg80211: failed to load regulatory.db
[   86.676939][ T6462] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   86.772769][ T6466] netlink: 'syz.0.255': attribute type 3 has an invalid length.
[   86.855132][ T6471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.870511][ T6471] syzkaller0: entered promiscuous mode
[   86.874756][ T6471] syzkaller0: entered allmulticast mode
[   86.906324][ T6471] tipc: Resetting bearer <eth:syzkaller0>
[   86.917313][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   86.930335][ T6470] tipc: Disabling bearer <eth:syzkaller0>
[   87.545347][ T6512] __nla_validate_parse: 6 callbacks suppressed
[   87.545359][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'.
[   88.477534][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'.
[   89.373486][ T6618] netlink: zone id is out of range
[   89.430561][ T6624] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.919266][   T33] audit: type=1800 audit(1757211440.589:4): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="memory.events" dev="tmpfs" ino=597 res=0 errno=0
[   89.986762][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   90.082730][ T6662] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   90.204952][ T6668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.220667][ T6669] syz_tun: entered allmulticast mode
[   90.239012][ T6669] dvmrp8: entered allmulticast mode
[   90.326399][ T6668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.420857][ T6668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.437310][ T6667] syz_tun: left allmulticast mode
[   90.439094][ T6667] dvmrp8: left allmulticast mode
[   90.487385][ T6668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.699537][ T6691] netlink: 'syz.1.350': attribute type 10 has an invalid length.
[   90.724854][ T6691] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.730755][ T6691] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.751411][ T6683] netlink: 'syz.1.350': attribute type 10 has an invalid length.
[   90.756904][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'.
[   90.769817][ T6690] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.773808][ T6690] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.782540][ T6683] batadv0: entered promiscuous mode
[   90.784939][ T6683] batadv0: entered allmulticast mode
[   90.788942][ T6683] bond0: (slave batadv0): Releasing backup interface
[   90.796101][ T6683] bridge0: port 3(batadv0) entered blocking state
[   90.798978][ T6683] bridge0: port 3(batadv0) entered disabled state
[   90.804419][ T5677] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.859683][ T5677] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.863577][ T5677] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.890595][ T5677] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.063386][ T5904] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   91.066526][ T5904] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   91.177037][ T6706] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   91.244668][ T6706] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   91.431212][ T6721] Driver unsupported XDP return value 0 on prog  (id 68) dev N/A, expect packet loss!
[   91.621080][ T6732] bridge_slave_0: left allmulticast mode
[   91.623871][ T6732] bridge_slave_0: left promiscuous mode
[   91.627936][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.654910][ T6732] bridge_slave_1: left allmulticast mode
[   91.663438][ T6732] bridge_slave_1: left promiscuous mode
[   91.671468][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.687262][ T6732] bond0: (slave bond_slave_0): Releasing backup interface
[   91.700847][ T6732] bond0: (slave bond_slave_1): Releasing backup interface
[   91.713029][ T6732] team0: Port device team_slave_0 removed
[   91.720721][ T6732] team0: Port device team_slave_1 removed
[   91.724863][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.728588][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.735321][ T6732] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.738092][ T6732] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.849343][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[   91.896724][ T6732] syz.0.368 (6732) used greatest stack depth: 19864 bytes left
[   92.020243][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[   92.137343][ T6767] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   92.139611][ T6767] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   92.165284][ T6767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   92.239905][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.243657][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.247850][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.257077][ T6772] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.281018][ T6772] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   92.375522][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.387132][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.391061][ T6772] wg1 speed is unknown, defaulting to 1000
[   92.524239][ T6785] pim6reg1: entered allmulticast mode
[   92.706396][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'.
[   92.710833][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'.
[   92.774404][ T6804] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   92.786534][ T6804] netlink: 600 bytes leftover after parsing attributes in process `syz.2.402'.
[   92.955009][ T6817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'.
[   93.904093][ T6868] bridge_slave_0: left allmulticast mode
[   93.906346][ T6868] bridge_slave_0: left promiscuous mode
[   93.908919][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.921343][ T6868] bridge_slave_1: left allmulticast mode
[   93.926194][ T6868] bridge_slave_1: left promiscuous mode
[   93.928949][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.939370][ T6868] bond0: (slave bond_slave_0): Releasing backup interface
[   93.949604][ T6868] bond0: (slave bond_slave_1): Releasing backup interface
[   93.965764][ T6868] team0: Port device team_slave_0 removed
[   93.974646][ T6868] team0: Port device team_slave_1 removed
[   93.978178][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.981305][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.987249][ T6868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.990225][ T6868] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.998675][ T1268] wg1 speed is unknown, defaulting to 1000
[   94.132789][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.431'.
[   94.355939][ T6893] netlink: 'syz.2.434': attribute type 13 has an invalid length.
[   94.359273][ T6893] netlink: 'syz.2.434': attribute type 17 has an invalid length.
[   94.477015][ T6893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.670473][ T6888] wg1 speed is unknown, defaulting to 1000
[   95.761845][ T6965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'.
[   95.927158][ T6980] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[   95.944606][ T6980] netlink: 208 bytes leftover after parsing attributes in process `syz.0.461'.
[   96.185840][ T6996] netlink: 'syz.0.466': attribute type 11 has an invalid length.
[   96.252546][ T7000] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.167658][ T7034] netlink: 830 bytes leftover after parsing attributes in process `syz.1.482'.
[   98.297233][ T7079] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   98.324323][ T7081] tipc: Started in network mode
[   98.326483][ T7081] tipc: Node identity 064f0bae690c, cluster identity 4711
[   98.331122][ T7081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.402094][ T7081] syzkaller0: entered promiscuous mode
[   98.415209][ T7081] syzkaller0: entered allmulticast mode
[   98.419442][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[   98.468038][ T7080] tipc: Resetting bearer <eth:syzkaller0>
[   99.444593][ T5314] tipc: Node number set to 1866664878
[   99.757760][ T7080] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[  100.999543][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.076877][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.135621][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.186230][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.296507][   T12] bridge0: port 3(batadv0) entered disabled state
[  101.307185][   T12] bridge_slave_1: left allmulticast mode
[  101.309183][   T12] bridge_slave_1: left promiscuous mode
[  101.312424][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.318394][   T12] bridge_slave_0: left allmulticast mode
[  101.320377][   T12] bridge_slave_0: left promiscuous mode
[  101.324054][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.672218][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.678825][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.684278][   T12] bond0 (unregistering): Released all slaves
[  101.764634][   T12] tipc: Left network mode
[  101.985901][   T12] hsr_slave_0: left promiscuous mode
[  101.988902][   T12] hsr_slave_1: left promiscuous mode
[  101.991575][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.994898][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.998644][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.006324][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.024959][   T12] veth1_macvtap: left promiscuous mode
[  102.027771][   T12] veth0_macvtap: left promiscuous mode
[  102.030733][   T12] veth1_vlan: left promiscuous mode
[  102.033717][   T12] veth0_vlan: left promiscuous mode
[  102.434061][   T12] team0 (unregistering): Port device team_slave_1 removed
[  102.475447][   T12] team0 (unregistering): Port device team_slave_0 removed
[  103.196004][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.254747][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.306915][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.387503][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.509867][   T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.577268][   T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.626094][   T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.699795][   T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.067332][   T12] bond0 (unregistering): Released all slaves
[  104.300273][   T12] bond0 (unregistering): Released all slaves
[  104.317156][   T10] wg1 speed is unknown, defaulting to 1000
[  104.319209][   T10] syz0: Port: 1 Link DOWN
[  104.401154][   T12] tipc: Left network mode
[  104.426099][   T12] tipc: Left network mode
[  104.700648][   T12] hsr_slave_0: left promiscuous mode
[  104.705316][   T12] hsr_slave_1: left promiscuous mode
[  104.715522][   T12] hsr_slave_0: left promiscuous mode
[  104.718426][   T12] hsr_slave_1: left promiscuous mode
[  104.747659][   T12] veth1_macvtap: left promiscuous mode
[  104.750021][   T12] veth0_macvtap: left promiscuous mode
[  104.754225][   T12] veth1_vlan: left promiscuous mode
[  104.756510][   T12] veth0_vlan: left promiscuous mode
[  104.765617][   T12] veth1_macvtap: left promiscuous mode
[  104.767892][   T12] veth0_macvtap: left promiscuous mode
[  104.770270][   T12] veth1_vlan: left promiscuous mode
[  104.773042][   T12] veth0_vlan: left promiscuous mode

VM DIAGNOSIS:
02:17:41  Registers:
info registers vcpu 0

CPU#0
RAX=000000000347a9f5 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000347a9f5 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000000 R9 =ffffffff81ae04ee R10=0000000000000003 R11=ffffffff81703490
R12=000000001000431b R13=dffffc0000000000 R14=000000000347a9f5 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005576a2e4b600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3825d609837f9e00 RBX=ffffffff819683f8 RCX=3825d609837f9e00 RDX=0000000000000001
RSI=ffffffff8d9bb271 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39830 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcbe61f000 CR3=0000000028bbc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000009e6b4f4 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
