last executing test programs:

2.261713459s ago: executing program 2 (id=1384):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r1, 0x72b}, 0x14}}, 0x0)

2.204602782s ago: executing program 2 (id=1386):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.154556105s ago: executing program 2 (id=1388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

2.153937952s ago: executing program 2 (id=1390):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

2.08394058s ago: executing program 2 (id=1391):
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8)

1.913592807s ago: executing program 2 (id=1398):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100)=0x8, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0)

1.413617913s ago: executing program 1 (id=1405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.413492625s ago: executing program 1 (id=1406):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r1, 0x1)

1.350830435s ago: executing program 1 (id=1407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x80000}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x1}]}}}]}, 0x44}}, 0x0)

1.005304066s ago: executing program 1 (id=1410):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0x2, 0x9}, 0x20)

914.182728ms ago: executing program 1 (id=1411):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x1}, 0x8)

233.689188ms ago: executing program 0 (id=1424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

161.321389ms ago: executing program 0 (id=1425):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r0}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

161.10595ms ago: executing program 0 (id=1426):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x1a4, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@etimer_thresh={0x8, 0xc, 0xca1e}, @algo_comp={0x9a, 0x3, {{'deflate\x00'}, 0x290, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c"}}, @tfcpad={0x8, 0x16, 0x6}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

93.871809ms ago: executing program 0 (id=1427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)

93.694457ms ago: executing program 0 (id=1428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000b40)="0b03", 0x2, 0x0, &(0x7f00000004c0)={0x11, 0x0, r3, 0x1, 0xf, 0x6, @remote}, 0x14)

92.002744ms ago: executing program 1 (id=1429):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)

0s ago: executing program 0 (id=1430):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36110' (ED25519) to the list of known hosts.
syzkaller login: [   48.752451][ T5758] cgroup: Unknown subsys name 'net'
[   48.872626][ T5758] cgroup: Unknown subsys name 'cpuset'
[   48.880466][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.563912][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.164403][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.171329][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.173880][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.177317][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.181331][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.185133][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.188656][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.212339][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.216193][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.219513][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.259257][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.268143][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.271730][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.275144][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.278876][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.392917][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.574750][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.578808][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.582085][ T5826] bridge_slave_0: entered allmulticast mode
[   55.586022][ T5826] bridge_slave_0: entered promiscuous mode
[   55.592678][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.596352][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.599317][ T5826] bridge_slave_1: entered allmulticast mode
[   55.603003][ T5826] bridge_slave_1: entered promiscuous mode
[   55.606854][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   55.650524][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.662216][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.672157][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.742757][ T5826] team0: Port device team_slave_0 added
[   55.762437][ T5826] team0: Port device team_slave_1 added
[   55.790604][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.793672][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.796692][ T5830] bridge_slave_0: entered allmulticast mode
[   55.800766][ T5830] bridge_slave_0: entered promiscuous mode
[   55.819093][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.821635][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.830855][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.835895][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.841246][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.844287][ T5830] bridge_slave_1: entered allmulticast mode
[   55.848512][ T5830] bridge_slave_1: entered promiscuous mode
[   55.869163][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.871513][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.880299][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.900399][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.903555][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.906672][ T5835] bridge_slave_0: entered allmulticast mode
[   55.913126][ T5835] bridge_slave_0: entered promiscuous mode
[   55.917706][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.922088][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.925163][ T5835] bridge_slave_1: entered allmulticast mode
[   55.931299][ T5835] bridge_slave_1: entered promiscuous mode
[   55.943431][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.977352][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.995617][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.000963][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.025154][ T5826] hsr_slave_0: entered promiscuous mode
[   56.027911][ T5826] hsr_slave_1: entered promiscuous mode
[   56.064836][ T5835] team0: Port device team_slave_0 added
[   56.070754][ T5830] team0: Port device team_slave_0 added
[   56.076716][ T5835] team0: Port device team_slave_1 added
[   56.084657][ T5830] team0: Port device team_slave_1 added
[   56.142309][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.145330][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.157191][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.173523][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.176127][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.186931][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.205120][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.207477][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.217685][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.222457][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.224891][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.234456][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.294244][ T5835] hsr_slave_0: entered promiscuous mode
[   56.297354][ T5835] hsr_slave_1: entered promiscuous mode
[   56.300285][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.303064][ T5835] Cannot create hsr debugfs directory
[   56.331292][ T5830] hsr_slave_0: entered promiscuous mode
[   56.334127][ T5830] hsr_slave_1: entered promiscuous mode
[   56.336857][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.347617][ T5830] Cannot create hsr debugfs directory
[   56.490435][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.497000][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.514223][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.539430][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.627128][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.635406][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.644345][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.651536][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.710860][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.719948][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.726152][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.737655][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.795442][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.820598][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.843726][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.853980][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.859972][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.862562][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.876834][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.879342][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.884815][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.887250][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.906932][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.909840][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.933264][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.989414][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   57.006362][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.010888][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.031464][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.034468][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.073277][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.076836][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.167152][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.253787][ T5834] Bluetooth: hci1: command tx timeout
[   57.256193][ T5834] Bluetooth: hci0: command tx timeout
[   57.273676][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.343251][ T5834] Bluetooth: hci2: command tx timeout
[   57.348677][ T5826] veth0_vlan: entered promiscuous mode
[   57.353174][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.377383][ T5826] veth1_vlan: entered promiscuous mode
[   57.393860][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.432263][ T5826] veth0_macvtap: entered promiscuous mode
[   57.440001][ T5835] veth0_vlan: entered promiscuous mode
[   57.444707][ T5826] veth1_macvtap: entered promiscuous mode
[   57.462408][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.471334][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.477035][ T5835] veth1_vlan: entered promiscuous mode
[   57.484209][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.487494][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.491471][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.495191][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.541011][ T5830] veth0_vlan: entered promiscuous mode
[   57.554834][ T5835] veth0_macvtap: entered promiscuous mode
[   57.566814][ T5830] veth1_vlan: entered promiscuous mode
[   57.591149][ T5835] veth1_macvtap: entered promiscuous mode
[   57.644373][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.653455][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.663407][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.670095][ T5830] veth0_macvtap: entered promiscuous mode
[   57.681393][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.701929][ T5830] veth1_macvtap: entered promiscuous mode
[   57.723491][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.727043][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.732069][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.736373][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.749985][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.760067][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.775667][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.782895][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.826874][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.832141][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.835674][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.839931][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.852259][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.931367][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.935607][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.994480][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.998651][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.079727][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.091483][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.096417][ T5905] Zero length message leads to an empty skb
[   58.140402][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.144801][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.328167][ T5218] Bluetooth: hci1: command tx timeout
[   59.330859][ T5834] Bluetooth: hci0: command tx timeout
[   59.409513][ T5834] Bluetooth: hci2: command tx timeout
[   59.491692][ T5975] netlink: 'syz.2.15': attribute type 6 has an invalid length.
[   60.793592][ T6072] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.099477][ T6108] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.103829][ T6108] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET)
[   61.395881][ T6134] pim6reg: entered allmulticast mode
[   61.407955][ T5218] Bluetooth: hci1: command tx timeout
[   61.410031][ T5834] Bluetooth: hci0: command tx timeout
[   61.489146][ T5834] Bluetooth: hci2: command tx timeout
[   61.687564][ T5836] IPVS: starting estimator thread 0...
[   61.810430][ T6152] IPVS: using max 79 ests per chain, 189600 per kthread
[   61.831260][ T6164] openvswitch: netlink: IP tunnel dst address not specified
[   61.975326][ T6172] netlink: 'syz.2.71': attribute type 30 has an invalid length.
[   62.718372][ T6185] tap0: tun_chr_ioctl cmd 1074025677
[   62.721041][ T6185] tap0: linktype set to 0
[   62.997338][ T6204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.87'.
[   63.004007][ T6202] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   63.148607][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[   63.489164][ T5834] Bluetooth: hci0: command tx timeout
[   63.491650][ T5834] Bluetooth: hci1: command tx timeout
[   63.513837][ T6247] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.568031][ T5218] Bluetooth: hci2: command tx timeout
[   63.684186][ T6263] xt_hashlimit: max too large, truncated to 1048576
[   64.446376][ T6323] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   64.515759][ T6327] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.520224][ T6327] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.523311][ T6327] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.526804][ T6327] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.544983][ T6334] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   64.620348][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'.
[   64.764498][ T6347] netlink: 348 bytes leftover after parsing attributes in process `syz.2.148'.
[   64.984371][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   65.366195][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   65.640279][ T6420] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   65.694525][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   65.699711][ T6426] netlink: 'syz.2.185': attribute type 1 has an invalid length.
[   66.583978][ T6511] tipc: Started in network mode
[   66.586377][ T6511] tipc: Node identity 8a3df570459f, cluster identity 4711
[   66.592042][ T6511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.625809][ T6511] syzkaller0: entered promiscuous mode
[   66.628005][ T6511] syzkaller0: entered allmulticast mode
[   66.630282][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   66.658608][ T1090] tipc: Resetting bearer <eth:syzkaller0>
[   66.662911][ T6510] tipc: Resetting bearer <eth:syzkaller0>
[   67.419387][ T6510] tipc: Disabling bearer <eth:syzkaller0>
[   68.359812][ T6547] netlink: 724 bytes leftover after parsing attributes in process `syz.2.239'.
[   68.362851][ T6547] netlink: 83 bytes leftover after parsing attributes in process `syz.2.239'.
[   68.805403][ T6587] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   69.344767][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'.
[   69.567386][ T6642] tipc: Can't bind to reserved service type 2
[   69.732309][ T6652] ieee802154 phy0 wpan0: encryption failed: -22
[   70.976254][ T6683] ip6gretap0: entered promiscuous mode
[   70.992701][ T6683] ip6gretap0: left promiscuous mode
[   71.182067][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.184446][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.285008][ T6699] trusted_key: syz.2.290 sent an empty control message without MSG_MORE.
[   72.110714][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'.
[   72.204208][ T6743] netlink: 272 bytes leftover after parsing attributes in process `syz.1.310'.
[   72.855465][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.329'.
[   72.864096][ T6788] netlink: 'syz.1.329': attribute type 10 has an invalid length.
[   72.870466][ T6788] syz_tun: entered promiscuous mode
[   72.880676][ T6788] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   73.898719][ T6854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'.
[   75.441062][ T6914] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   75.444140][ T6914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.387'.
[   75.526449][ T6922] xt_CT: No such helper "snmp"
[   75.697754][ T6935] ieee802154 phy1 wpan1: encryption failed: -22
[   76.034535][ T6957] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[   76.037758][ T6957] netlink: 220 bytes leftover after parsing attributes in process `syz.0.406'.
[   76.056214][ T6957] netlink: 'syz.0.406': attribute type 1 has an invalid length.
[   76.416533][ T6984] Cannot find add_set index 2 as target
[   76.740258][ T7003] netlink: 'syz.2.428': attribute type 2 has an invalid length.
[   76.921912][ T7013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.433'.
[   77.382193][ T7039] dummy0: mtu less than device minimum
[   77.520844][ T7043] vlan2: entered promiscuous mode
[   77.522830][ T7043] macvlan1: entered promiscuous mode
[   77.658118][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'.
[   77.834830][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'.
[   78.331071][ T7126] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   78.796491][ T7143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.707501][ T7256] netlink: 'syz.2.545': attribute type 3 has an invalid length.
[   82.317456][ T7293] netlink: 'syz.2.562': attribute type 13 has an invalid length.
[   82.321302][ T7293] netlink: 'syz.2.562': attribute type 17 has an invalid length.
[   82.326716][ T7293] gretap0: refused to change device tx_queue_len
[   82.329449][ T7293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   83.022284][ T7343] Bluetooth: MGMT ver 1.23
[   83.366629][ T7372] IPVS: Scheduler module ip_vs_ not found
[   83.430101][ T7378] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[   83.542753][ T7391] netlink: 428 bytes leftover after parsing attributes in process `syz.1.599'.
[   83.546046][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'.
[   83.616577][ T7396] netlink: 'syz.0.600': attribute type 1 has an invalid length.
[   83.628653][ T7396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.600'.
[   83.762874][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.606'.
[   84.112907][ T7425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.613'.
[   84.475501][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[   84.676522][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'.
[   85.090974][ T5218] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   85.091925][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[   85.573327][ T7518] netlink: 'syz.0.652': attribute type 6 has an invalid length.
[   85.575913][ T7518] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.652'.
[   85.609742][   T24] IPVS: starting estimator thread 0...
[   85.697921][ T7521] IPVS: using max 76 ests per chain, 182400 per kthread
[   86.277297][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'.
[   86.440455][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'.
[   86.539039][  T792] cfg80211: failed to load regulatory.db
[   86.710431][ T7567] batadv_slave_1: entered promiscuous mode
[   86.713162][ T7566] batadv_slave_1: left promiscuous mode
[   88.089130][ T7670] dummy0: entered promiscuous mode
[   88.092061][ T7670] vlan2: entered promiscuous mode
[   88.387755][ T7686] netlink: 'syz.0.724': attribute type 1 has an invalid length.
[   88.865419][ T7704] infiniband syz0: set down
[   88.868531][ T7704] infiniband syz0: added ipvlan1
[   88.893720][ T7704] RDS/IB: syz0: added
[   88.897286][ T7704] smc: adding ib device syz0 with port count 1
[   88.899952][ T7704] smc:    ib device syz0 port 1 has pnetid SYZ2 (user defined)
[   89.227188][ T7718] Cannot find add_set index 2 as target
[   89.907902][ T7751] wireguard0: entered promiscuous mode
[   89.910006][ T7751] wireguard0: entered allmulticast mode
[   90.726301][ T7796] dummy0: entered promiscuous mode
[   90.734381][ T7796] macsec2: entered promiscuous mode
[   90.738058][ T7796] macsec2: entered allmulticast mode
[   90.740542][ T7796] dummy0: entered allmulticast mode
[   90.747379][ T7796] dummy0: left allmulticast mode
[   90.750025][ T7796] dummy0: left promiscuous mode
[   91.085859][ T7833] __nla_validate_parse: 6 callbacks suppressed
[   91.085873][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'.
[   91.198368][ T7829] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[   91.201160][ T7829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.788'.
[   91.578264][ T7872] nbd0: detected capacity change from 0 to 127
[   91.586532][   T57] block nbd0: Receive control failed (result -104)
[   91.592655][ T5828] block nbd0: Send control failed (result -32)
[   91.594959][ T5828] block nbd0: Request send failed, requeueing
[   91.599377][   T98] block nbd0: Dead connection, failed to find a fallback
[   91.601826][   T98] block nbd0: shutting down sockets
[   91.603820][   T98] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   91.607027][   T98] Buffer I/O error on dev nbd0, logical block 3, async page read
[   91.774435][ T7902] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   91.781459][ T7902] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   91.860945][ T7911] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.822'.
[   91.989594][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'.
[   92.184327][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'.
[   92.682520][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'.
[   92.981635][ T8018] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.871'.
[   93.181018][ T8034] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   93.805432][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[   93.818854][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'.
[   93.843483][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'.
[   94.295598][ T8115] SET target dimension over the limit!
[   94.470594][ T8119] nbd: socks must be embedded in a SOCK_ITEM attr
[   94.476185][ T8119] block nbd1: shutting down sockets
[   94.526913][ T8125] netlink: 'syz.2.921': attribute type 1 has an invalid length.
[   95.098747][ T8150] netlink: 'syz.0.931': attribute type 10 has an invalid length.
[   95.103241][ T8150] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   95.362159][ T8170] bridge1: port 1(veth3) entered blocking state
[   95.364404][ T8170] bridge1: port 1(veth3) entered disabled state
[   95.366760][ T8170] veth3: entered allmulticast mode
[   95.369735][ T8170] veth3: entered promiscuous mode
[   95.376775][ T8170] bridge1: port 2(veth0_to_bond) entered blocking state
[   95.383408][ T8170] bridge1: port 2(veth0_to_bond) entered disabled state
[   95.385820][ T8170] veth0_to_bond: entered allmulticast mode
[   95.398931][ T8170] veth0_to_bond: entered promiscuous mode
[   95.407369][ T8170] vlan2: entered allmulticast mode
[   95.410558][ T8170] veth1: entered allmulticast mode
[   95.419314][ T8170] bridge1: port 3(vlan2) entered blocking state
[   95.421394][ T8170] bridge1: port 3(vlan2) entered disabled state
[   95.424627][ T8170] vlan2: entered promiscuous mode
[   95.426356][ T8170] veth1: entered promiscuous mode
[   96.214280][ T8222] __nla_validate_parse: 3 callbacks suppressed
[   96.214290][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'.
[   96.295448][ T8233] netlink: 'syz.2.963': attribute type 11 has an invalid length.
[   96.359391][ T8239] tipc: Enabled bearer <eth:vlan0>, priority 18
[   96.682266][ T8267] netlink: 300 bytes leftover after parsing attributes in process `syz.1.976'.
[   96.754078][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'.
[   97.381592][ T8309] tipc: Started in network mode
[   97.388212][ T8309] tipc: Node identity 5a1d32d2174d, cluster identity 4711
[   97.390605][ T8309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.419743][ T8309] syzkaller0: entered promiscuous mode
[   97.421645][ T8309] syzkaller0: entered allmulticast mode
[   97.461905][ T8309] tipc: Resetting bearer <eth:syzkaller0>
[   97.469013][  T791] tipc: Node number set to 3483563376
[   97.472930][ T8306] tipc: Resetting bearer <eth:syzkaller0>
[   97.510091][ T8306] tipc: Disabling bearer <eth:syzkaller0>
[   97.760373][ T8335] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1003'.
[   98.207246][ T8383] netlink: 'syz.2.1027': attribute type 6 has an invalid length.
[   98.213785][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'.
[   99.110899][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'.
[   99.113987][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'.
[   99.493345][ T8436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.788534][ T8451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.899639][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'.
[  100.489733][ T8479] netlink: 'syz.2.1065': attribute type 10 has an invalid length.
[  100.492272][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1065'.
[  100.496689][ T8479] batman_adv: batadv0: Adding interface: virt_wifi0
[  100.528058][ T8479] batman_adv: batadv0: Interface activated: virt_wifi0
[  101.210543][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  101.224353][ T8510] : entered promiscuous mode
[  101.315142][ T8517] netlink: 'syz.1.1081': attribute type 1 has an invalid length.
[  101.320467][ T8517] netlink: 'syz.1.1081': attribute type 2 has an invalid length.
[  101.599837][ T8549] netlink: 'syz.2.1097': attribute type 8 has an invalid length.
[  101.982617][ T8583] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1114'.
[  102.107705][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  102.111674][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  103.791730][ T8672] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1154'.
[  103.879540][ T8676] vlan0: entered promiscuous mode
[  103.999931][ T8680] syzkaller0: entered promiscuous mode
[  104.002290][ T8680] syzkaller0: entered allmulticast mode
[  104.181507][ T8684] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1160'.
[  104.192277][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1160'.
[  104.633564][ T8714] raw_sendmsg: syz.0.1176 forgot to set AF_INET. Fix it!
[  104.731570][ T8719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.742768][   T33] audit: type=1804 audit(1752240775.613:2): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1179" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1728 res=1 errno=0
[  104.767512][   T33] audit: type=1800 audit(1752240775.623:3): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1179" name="cgroup.controllers" dev="tmpfs" ino=1728 res=0 errno=0
[  104.850641][ T8719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.929746][ T8719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.012277][ T8719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.142322][ T8719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.169224][ T8719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.197643][ T8719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.213865][ T8719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.340732][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'.
[  105.344681][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  105.780078][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'.
[  105.893411][ T8805] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1217'.
[  106.281582][ T8822] netlink: 'syz.0.1224': attribute type 11 has an invalid length.
[  107.095523][ T8852] gretap0: entered promiscuous mode
[  107.100467][ T8852] vlan2: entered promiscuous mode
[  107.265754][ T8864] bridge2: entered promiscuous mode
[  107.269283][ T8864] bridge2: entered allmulticast mode
[  107.548258][ T8893] netlink: 'syz.0.1252': attribute type 25 has an invalid length.
[  107.603001][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'.
[  107.639882][ T8903] xt_CT: You must specify a L4 protocol and not use inversions on it
[  107.686736][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'.
[  107.878442][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'.
[  107.957630][ T8934] netdevsim netdevsim1: Direct firmware load for .
[  107.957630][ T8934]  failed with error -2
[  107.962367][ T8934] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  107.962367][ T8934] 
[  108.192161][ T8958] erspan0: entered promiscuous mode
[  108.195572][ T8958] erspan0: left promiscuous mode
[  108.694629][ T8981] Bluetooth: MGMT ver 1.23
[  109.257410][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1305'.
[  110.266186][ T9046] bond0: option lp_interval: invalid value (18446744073709551604)
[  110.277931][ T9046] bond0: option lp_interval: allowed values 1 - 2147483647
[  110.442434][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1319'.
[  110.762014][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'.
[  110.798083][ T9080] macvlan2: entered promiscuous mode
[  110.799920][ T9080] macvlan2: entered allmulticast mode
[  110.802547][ T9080] bond1: entered promiscuous mode
[  110.804996][ T9080] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  110.812019][ T9080] bond1: left promiscuous mode
[  110.957226][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'.
[  110.961551][ T9091] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  110.964981][ T9091] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.100024][ T9146] ip6gretap1: entered promiscuous mode
[  112.229547][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1367'.
[  112.453371][ T9167] ip6tnl2: entered promiscuous mode
[  112.455658][ T9167] ip6tnl2: entered allmulticast mode
[  113.503666][ T5839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.556433][ T5839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.613946][ T5839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.683635][ T5839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.815255][ T5839] bridge_slave_1: left allmulticast mode
[  113.820898][ T5839] bridge_slave_1: left promiscuous mode
[  113.823754][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.851574][ T5839] bridge_slave_0: left allmulticast mode
[  113.853803][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.859280][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.863033][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.865961][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.871669][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.874268][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.304322][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.304641][ T9252] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1408'.
[  114.312156][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'.
[  114.316541][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.323039][ T5839] bond0 (unregistering): Released all slaves
[  114.412098][ T5839] : left promiscuous mode
[  114.469453][ T5839] tipc: Disabling bearer <eth:vlan0>
[  114.493155][ T5839] tipc: Left network mode
[  114.798072][ T9234] chnl_net:caif_netlink_parms(): no params data found
[  114.941426][ T5839] hsr_slave_0: left promiscuous mode
[  114.943839][ T5839] hsr_slave_1: left promiscuous mode
[  114.953996][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.956404][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.965260][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.967598][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.975360][ T5839] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  114.977571][ T5839] batman_adv: batadv0: Removing interface: virt_wifi0
[  114.987699][ T5839] veth1_macvtap: left promiscuous mode
[  114.990325][ T5839] veth0_macvtap: left promiscuous mode
[  114.992162][ T5839] veth1_vlan: left promiscuous mode
[  114.994161][ T5839] veth0_vlan: left promiscuous mode
[  115.105250][ T1088] smc: removing ib device syz0
[  115.355632][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  115.370717][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1430'.
[  115.386846][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  115.694680][   T10] ==================================================================
[  115.697935][   T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  115.701481][   T10] Read of size 8 at addr ffff888029fae2e8 by task kworker/0:1/10
[  115.705537][   T10] 
[  115.706580][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  115.706595][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.706603][   T10] Workqueue: events smc_ib_port_event_work
[  115.706623][   T10] Call Trace:
[  115.706629][   T10]  <TASK>
[  115.706635][   T10]  dump_stack_lvl+0x189/0x250
[  115.706651][   T10]  ? __virt_addr_valid+0x1c8/0x5c0
[  115.706665][   T10]  ? rcu_is_watching+0x15/0xb0
[  115.706680][   T10]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.706692][   T10]  ? rcu_is_watching+0x15/0xb0
[  115.706705][   T10]  ? lock_release+0x4b/0x3e0
[  115.706719][   T10]  ? __virt_addr_valid+0x1c8/0x5c0
[  115.706731][   T10]  ? __virt_addr_valid+0x4a5/0x5c0
[  115.706746][   T10]  print_report+0xd2/0x2b0
[  115.706756][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  115.706773][   T10]  kasan_report+0x118/0x150
[  115.706812][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  115.706828][   T10]  __ethtool_get_link_ksettings+0x6e/0x190
[  115.706846][   T10]  ib_get_eth_speed+0x15e/0x7b0
[  115.706862][   T10]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  115.706881][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  115.706899][   T10]  rxe_query_port+0x93/0x3b0
[  115.706912][   T10]  ib_query_port+0x170/0x830
[  115.706930][   T10]  smc_ib_port_event_work+0x15a/0x940
[  115.706947][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.706964][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  115.706976][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  115.706989][   T10]  process_scheduled_works+0xae1/0x17b0
[  115.707009][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  115.707025][   T10]  worker_thread+0x8a0/0xda0
[  115.707038][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.707056][   T10]  ? __kthread_parkme+0x7b/0x200
[  115.707073][   T10]  kthread+0x711/0x8a0
[  115.707089][   T10]  ? __pfx_worker_thread+0x10/0x10
[  115.707101][   T10]  ? __pfx_kthread+0x10/0x10
[  115.707116][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.707132][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.707148][   T10]  ? __pfx_kthread+0x10/0x10
[  115.707163][   T10]  ret_from_fork+0x3fc/0x770
[  115.707175][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  115.707189][   T10]  ? __switch_to_asm+0x39/0x70
[  115.707203][   T10]  ? __switch_to_asm+0x33/0x70
[  115.707216][   T10]  ? __pfx_kthread+0x10/0x10
[  115.707231][   T10]  ret_from_fork_asm+0x1a/0x30
[  115.707250][   T10]  </TASK>
[  115.707255][   T10] 
[  115.803646][   T10] Allocated by task 5826:
[  115.805384][   T10]  kasan_save_track+0x3e/0x80
[  115.807286][   T10]  __kasan_kmalloc+0x93/0xb0
[  115.809201][   T10]  __kvmalloc_node_noprof+0x30d/0x5f0
[  115.811335][   T10]  alloc_netdev_mqs+0xa6/0x11e0
[  115.813258][   T10]  rtnl_create_link+0x31f/0xd10
[  115.815160][   T10]  rtnl_newlink_create+0x25c/0xb00
[  115.817147][   T10]  rtnl_newlink+0x16d6/0x1c70
[  115.819020][   T10]  rtnetlink_rcv_msg+0x7cf/0xb70
[  115.820957][   T10]  netlink_rcv_skb+0x208/0x470
[  115.822904][   T10]  netlink_unicast+0x75c/0x8e0
[  115.824927][   T10]  netlink_sendmsg+0x805/0xb30
[  115.826931][   T10]  __sock_sendmsg+0x21c/0x270
[  115.828876][   T10]  __sys_sendto+0x3bd/0x520
[  115.830662][   T10]  __x64_sys_sendto+0xde/0x100
[  115.832603][   T10]  do_syscall_64+0xfa/0x3b0
[  115.834410][   T10]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.836775][   T10] 
[  115.837776][   T10] Freed by task 5839:
[  115.839372][   T10]  kasan_save_track+0x3e/0x80
[  115.841322][   T10]  kasan_save_free_info+0x46/0x50
[  115.843409][   T10]  __kasan_slab_free+0x62/0x70
[  115.845358][   T10]  kfree+0x18e/0x440
[  115.846984][   T10]  device_release+0x9c/0x1c0
[  115.848841][   T10]  kobject_put+0x22b/0x480
[  115.850626][   T10]  netdev_run_todo+0xd2e/0xea0
[  115.852542][   T10]  default_device_exit_batch+0x81e/0x890
[  115.854730][   T10]  ops_undo_list+0x525/0x990
[  115.856672][   T10]  cleanup_net+0x4c5/0x800
[  115.858659][   T10]  process_scheduled_works+0xae1/0x17b0
[  115.861044][   T10]  worker_thread+0x8a0/0xda0
[  115.862868][   T10]  kthread+0x711/0x8a0
[  115.864457][   T10]  ret_from_fork+0x3fc/0x770
[  115.866236][   T10]  ret_from_fork_asm+0x1a/0x30
[  115.868099][   T10] 
[  115.869053][   T10] The buggy address belongs to the object at ffff888029fae000
[  115.869053][   T10]  which belongs to the cache kmalloc-cg-4k of size 4096
[  115.874559][   T10] The buggy address is located 744 bytes inside of
[  115.874559][   T10]  freed 4096-byte region [ffff888029fae000, ffff888029faf000)
[  115.880388][   T10] 
[  115.881504][   T10] The buggy address belongs to the physical page:
[  115.884188][   T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29fa8
[  115.887570][   T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  115.888086][ T5834] Bluetooth: hci0: command tx timeout
[  115.890863][   T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  115.890881][   T10] page_type: f5(slab)
[  115.897744][   T10] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  115.901080][   T10] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  115.904452][   T10] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  115.908585][   T10] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  115.912165][   T10] head: 00fff00000000003 ffffea0000a7ea01 00000000ffffffff 00000000ffffffff
[  115.915531][   T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  115.918904][   T10] page dumped because: kasan: bad access detected
[  115.921535][   T10] page_owner tracks the page as allocated
[  115.923807][   T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 56081935700, free_ts 56074742230
[  115.932387][   T10]  post_alloc_hook+0x240/0x2a0
[  115.934475][   T10]  get_page_from_freelist+0x21e4/0x22c0
[  115.936658][   T10]  __alloc_frozen_pages_noprof+0x181/0x370
[  115.938948][   T10]  alloc_pages_mpol+0x232/0x4a0
[  115.940870][   T10]  allocate_slab+0x8a/0x3b0
[  115.942693][   T10]  ___slab_alloc+0xbfc/0x1480
[  115.944583][   T10]  __kmalloc_cache_noprof+0x296/0x3d0
[  115.946704][   T10]  ipv6_add_dev+0x6ca/0x1370
[  115.948590][   T10]  addrconf_notify+0x794/0x1010
[  115.950671][   T10]  notifier_call_chain+0x1b6/0x3e0
[  115.952862][   T10]  register_netdevice+0x1608/0x1ae0
[  115.954930][   T10]  virt_wifi_newlink+0x428/0x860
[  115.956886][   T10]  rtnl_newlink_create+0x310/0xb00
[  115.958956][   T10]  rtnl_newlink+0x16d6/0x1c70
[  115.960901][   T10]  rtnetlink_rcv_msg+0x7cf/0xb70
[  115.962931][   T10]  netlink_rcv_skb+0x208/0x470
[  115.964873][   T10] page last free pid 5835 tgid 5835 stack trace:
[  115.967366][   T10]  __free_frozen_pages+0xc71/0xe70
[  115.969423][   T10]  __slab_free+0x326/0x400
[  115.971325][   T10]  qlist_free_all+0x97/0x140
[  115.973228][   T10]  kasan_quarantine_reduce+0x148/0x160
[  115.975559][   T10]  __kasan_slab_alloc+0x22/0x80
[  115.977540][   T10]  __kmalloc_cache_noprof+0x1be/0x3d0
[  115.979687][   T10]  netdevice_event+0x3a1/0x8a0
[  115.981601][   T10]  notifier_call_chain+0x1b6/0x3e0
[  115.983587][   T10]  netif_open+0xfd/0x170
[  115.985358][   T10]  dev_open+0x125/0x260
[  115.987090][   T10]  team_add_slave+0xb36/0x2840
[  115.989071][   T10]  do_set_master+0x533/0x6d0
[  115.990900][   T10]  do_setlink+0xcf0/0x41c0
[  115.992694][   T10]  rtnl_newlink+0x160b/0x1c70
[  115.994617][   T10]  rtnetlink_rcv_msg+0x7cf/0xb70
[  115.996603][   T10]  netlink_rcv_skb+0x208/0x470
[  115.998516][   T10] 
[  115.999479][   T10] Memory state around the buggy address:
[  116.001751][   T10]  ffff888029fae180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.005034][   T10]  ffff888029fae200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.008248][   T10] >ffff888029fae280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.011360][   T10]                                                           ^
[  116.014326][   T10]  ffff888029fae300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.017515][   T10]  ffff888029fae380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.020754][   T10] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  116.033186][   T10] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  116.036381][   T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  116.041257][   T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.045280][   T10] Workqueue: events smc_ib_port_event_work
[  116.047693][   T10] Call Trace:
[  116.049207][   T10]  <TASK>
[  116.050546][   T10]  dump_stack_lvl+0x99/0x250
[  116.052446][   T10]  ? __asan_memcpy+0x40/0x70
[  116.054323][   T10]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.056363][   T10]  ? __pfx__printk+0x10/0x10
[  116.058212][   T10]  panic+0x2db/0x790
[  116.059816][   T10]  ? __pfx_panic+0x10/0x10
[  116.061706][   T10]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  116.064258][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.066814][   T10]  ? print_memory_metadata+0x314/0x400
[  116.068930][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.071308][   T10]  check_panic_on_warn+0x89/0xb0
[  116.073252][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.075587][   T10]  end_report+0x78/0x160
[  116.077384][   T10]  kasan_report+0x129/0x150
[  116.079588][   T10]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.082096][   T10]  __ethtool_get_link_ksettings+0x6e/0x190
[  116.084396][   T10]  ib_get_eth_speed+0x15e/0x7b0
[  116.086347][   T10]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  116.088486][   T10]  ? do_raw_spin_unlock+0x4d/0x240
[  116.090519][   T10]  rxe_query_port+0x93/0x3b0
[  116.092349][   T10]  ib_query_port+0x170/0x830
[  116.094277][   T10]  smc_ib_port_event_work+0x15a/0x940
[  116.096547][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.098705][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  116.101005][   T10]  ? process_scheduled_works+0x9ef/0x17b0
[  116.103200][   T10]  process_scheduled_works+0xae1/0x17b0
[  116.105393][   T10]  ? __pfx_process_scheduled_works+0x10/0x10
[  116.107751][   T10]  worker_thread+0x8a0/0xda0
[  116.109634][   T10]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.112199][   T10]  ? __kthread_parkme+0x7b/0x200
[  116.114175][   T10]  kthread+0x711/0x8a0
[  116.115807][   T10]  ? __pfx_worker_thread+0x10/0x10
[  116.117845][   T10]  ? __pfx_kthread+0x10/0x10
[  116.119869][   T10]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.122085][   T10]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.124182][   T10]  ? __pfx_kthread+0x10/0x10
[  116.126083][   T10]  ret_from_fork+0x3fc/0x770
[  116.127936][   T10]  ? __pfx_ret_from_fork+0x10/0x10
[  116.129957][   T10]  ? __switch_to_asm+0x39/0x70
[  116.131908][   T10]  ? __switch_to_asm+0x33/0x70
[  116.133916][   T10]  ? __pfx_kthread+0x10/0x10
[  116.135841][   T10]  ret_from_fork_asm+0x1a/0x30
[  116.137819][   T10]  </TASK>
[  116.139885][   T10] Kernel Offset: disabled
[  116.141595][   T10] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:33:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000d7090
R8 =ffff8881085e0237 R9 =1ffff110210bc046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98a4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2dcdd9 CR3=00000000272cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faaa9585478 00007faaa9585450 XMM03=00007faaa9585488 00007faaa9585480
XMM04=00007faaaa0ed100 00007faaa9585440 XMM05=00007faaa9585458 00007faaa95854a0
XMM06=00007faaa9585498 00007faaa9585490 XMM07=00007faaa9585488 00007faaa9585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007faaa9411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fa87ac612ef95400 RBX=ffffffff81976c78 RCX=fa87ac612ef95400 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c2043db000 CR3=0000000028580000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
