last executing test programs:

1m16.112289439s ago: executing program 1 (id=1113):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

1m16.017671322s ago: executing program 1 (id=1116):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33fafdfffffffcdbdf2507000000080001004c00000008000300", @ANYRES32=r2, @ANYBLOB="14000400639425531fd33257a3000000000000000800050006"], 0x48}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)

1m15.936884593s ago: executing program 1 (id=1118):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x108, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0xc01b}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{<r9=>0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000017c0)={0x0, r9, "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", "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"})
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)

1m15.871117691s ago: executing program 1 (id=1121):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r0, 0x86a)
poll(&(0x7f00000003c0)=[{r0, 0x44}], 0x1, 0x3)

1m15.781561654s ago: executing program 1 (id=1123):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
mmap(&(0x7f00000a0000/0x3000)=nil, 0x3000, 0x3800000, 0x11, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
shutdown(r1, 0x1)

1m15.399935756s ago: executing program 2 (id=1130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000)

1m15.399371332s ago: executing program 0 (id=1132):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810)

1m15.281493127s ago: executing program 2 (id=1133):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4)

1m15.281279424s ago: executing program 2 (id=1134):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
mmap(&(0x7f000095b000/0x4000)=nil, 0x4000, 0x2000009, 0x25813, r0, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)

1m15.238086641s ago: executing program 0 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

1m15.229908382s ago: executing program 2 (id=1136):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x392b8a4ff77e3f7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r2], 0x38}}, 0x10)

1m15.141306831s ago: executing program 2 (id=1137):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1m15.141123138s ago: executing program 0 (id=1138):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0)

1m15.080485694s ago: executing program 0 (id=1139):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f23}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m14.480230527s ago: executing program 0 (id=1140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)

1m12.255419839s ago: executing program 1 (id=1141):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010})

1m5.029205032s ago: executing program 0 (id=1142):
socket$unix(0x1, 0x1, 0x0)
unshare(0x6020480)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

59.356277877s ago: executing program 2 (id=1143):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x10, 0x2, 0x0)
connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)

54.640549564s ago: executing program 32 (id=1141):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1a0000010})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2010})

21.452278208s ago: executing program 33 (id=1142):
socket$unix(0x1, 0x1, 0x0)
unshare(0x6020480)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

0s ago: executing program 34 (id=1143):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x10, 0x2, 0x0)
connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59376' (ED25519) to the list of known hosts.
syzkaller login: [   48.355076][ T5832] cgroup: Unknown subsys name 'net'
[   48.483093][ T5832] cgroup: Unknown subsys name 'cpuset'
[   48.486941][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.153630][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.460836][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.530247][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   62.628348][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.630981][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.633257][ T5867] bridge_slave_0: entered allmulticast mode
[   62.635949][ T5867] bridge_slave_0: entered promiscuous mode
[   62.647866][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.650250][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.652501][ T5867] bridge_slave_1: entered allmulticast mode
[   62.655172][ T5867] bridge_slave_1: entered promiscuous mode
[   62.793629][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.807061][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.852955][ T5867] team0: Port device team_slave_0 added
[   62.859101][ T5867] team0: Port device team_slave_1 added
[   62.927648][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.931931][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.941736][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.946350][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.948520][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.956869][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.984659][ T5867] hsr_slave_0: entered promiscuous mode
[   62.987809][ T5867] hsr_slave_1: entered promiscuous mode
[   63.093548][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.099219][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.104019][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.109358][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.128570][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.130916][ T5867] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.133509][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.135922][ T5867] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.168995][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.179788][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.183922][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.191963][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   63.198290][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.200593][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.210787][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.213021][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.304901][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.332433][ T5867] veth0_vlan: entered promiscuous mode
[   63.337833][ T5867] veth1_vlan: entered promiscuous mode
[   63.355871][ T5867] veth0_macvtap: entered promiscuous mode
[   63.359830][ T5867] veth1_macvtap: entered promiscuous mode
[   63.370080][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.377553][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.384486][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.387744][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.391172][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.394924][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.234619][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.237931][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.240973][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.243834][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.246567][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.266991][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.269671][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.273544][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.276441][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.279400][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.327860][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.356539][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.359442][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.363817][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.367926][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.374606][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.406503][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.480495][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.586565][ T5912] chnl_net:caif_netlink_parms(): no params data found
[   64.595700][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   64.739960][ T5917] chnl_net:caif_netlink_parms(): no params data found
[   64.753709][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.755979][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.758273][ T5912] bridge_slave_0: entered allmulticast mode
[   64.761444][ T5912] bridge_slave_0: entered promiscuous mode
[   64.768505][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.771248][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.773385][ T5912] bridge_slave_1: entered allmulticast mode
[   64.775955][ T5912] bridge_slave_1: entered promiscuous mode
[   64.778292][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.781437][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.783633][ T5915] bridge_slave_0: entered allmulticast mode
[   64.786256][ T5915] bridge_slave_0: entered promiscuous mode
[   64.791011][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.793218][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.795379][ T5915] bridge_slave_1: entered allmulticast mode
[   64.798087][ T5915] bridge_slave_1: entered promiscuous mode
[   64.841526][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.858524][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.864001][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.867858][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.893056][ T5912] team0: Port device team_slave_0 added
[   64.931022][ T5915] team0: Port device team_slave_0 added
[   64.934929][ T5912] team0: Port device team_slave_1 added
[   64.937966][ T5915] team0: Port device team_slave_1 added
[   65.006363][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.008441][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.017515][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.022939][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.025389][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.035513][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.054464][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.057315][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.060186][ T5917] bridge_slave_0: entered allmulticast mode
[   65.063905][ T5917] bridge_slave_0: entered promiscuous mode
[   65.067998][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.071914][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.079238][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.084022][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.086083][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.095740][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.115886][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.117998][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.120987][ T5917] bridge_slave_1: entered allmulticast mode
[   65.124292][ T5917] bridge_slave_1: entered promiscuous mode
[   65.178438][ T5915] hsr_slave_0: entered promiscuous mode
[   65.181224][ T5915] hsr_slave_1: entered promiscuous mode
[   65.183512][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   65.185484][ T5915] Cannot create hsr debugfs directory
[   65.189721][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.205911][ T5912] hsr_slave_0: entered promiscuous mode
[   65.208335][ T5912] hsr_slave_1: entered promiscuous mode
[   65.211099][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[   65.212760][ T5912] Cannot create hsr debugfs directory
[   65.216025][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.287002][ T5917] team0: Port device team_slave_0 added
[   65.305590][ T5917] team0: Port device team_slave_1 added
[   65.352309][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.354506][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.363032][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.389725][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.393695][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.404021][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.472615][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.483286][ T5917] hsr_slave_0: entered promiscuous mode
[   65.485620][ T5917] hsr_slave_1: entered promiscuous mode
[   65.487670][ T5917] debugfs: 'hsr0' already exists in 'hsr'
[   65.489404][ T5917] Cannot create hsr debugfs directory
[   66.290974][   T54] Bluetooth: hci1: command tx timeout
[   66.291009][ T5236] Bluetooth: hci0: command tx timeout
[   66.450872][ T5236] Bluetooth: hci2: command tx timeout
[   66.868109][ T5889] bridge_slave_1: left allmulticast mode
[   66.871201][ T5889] bridge_slave_1: left promiscuous mode
[   66.873601][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.878808][ T5889] bridge_slave_0: left allmulticast mode
[   66.882062][ T5889] bridge_slave_0: left promiscuous mode
[   66.883854][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.110785][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   67.115886][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   67.119492][ T5889] bond0 (unregistering): Released all slaves
[   67.243065][ T5889] hsr_slave_0: left promiscuous mode
[   67.245342][ T5889] hsr_slave_1: left promiscuous mode
[   67.247949][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.254287][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.257802][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.263975][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.275000][ T5889] veth1_macvtap: left promiscuous mode
[   67.276988][ T5889] veth0_macvtap: left promiscuous mode
[   67.283044][ T5889] veth1_vlan: left promiscuous mode
[   67.285085][ T5889] veth0_vlan: left promiscuous mode
[   67.523065][ T5889] team0 (unregistering): Port device team_slave_1 removed
[   67.544059][ T5889] team0 (unregistering): Port device team_slave_0 removed
[   67.862053][ T5915] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.868758][ T5915] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.881393][ T5915] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.905986][ T5915] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.971954][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.977645][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.010500][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.016952][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.071452][ T5917] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.093188][ T5917] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.102184][ T5917] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.131658][ T5917] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.181966][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.203225][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.216160][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[   68.233225][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.235460][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.245589][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   68.251096][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.253350][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.265495][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.267759][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.279651][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.281942][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.319115][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.345224][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.355509][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[   68.363110][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.365614][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.370956][ T5236] Bluetooth: hci1: command tx timeout
[   68.372907][   T54] Bluetooth: hci0: command tx timeout
[   68.392723][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.395070][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.464485][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.485941][ T5912] veth0_vlan: entered promiscuous mode
[   68.504857][ T5912] veth1_vlan: entered promiscuous mode
[   68.532678][ T5236] Bluetooth: hci2: command tx timeout
[   68.547528][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.553530][ T5912] veth0_macvtap: entered promiscuous mode
[   68.557923][ T5912] veth1_macvtap: entered promiscuous mode
[   68.580497][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.595287][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.610205][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.625536][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.634013][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.636747][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.642181][ T5915] veth0_vlan: entered promiscuous mode
[   68.648950][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.664472][ T5917] veth0_vlan: entered promiscuous mode
[   68.667816][ T5915] veth1_vlan: entered promiscuous mode
[   68.678601][ T5917] veth1_vlan: entered promiscuous mode
[   68.732261][ T5915] veth0_macvtap: entered promiscuous mode
[   68.735035][ T5917] veth0_macvtap: entered promiscuous mode
[   68.739237][ T5915] veth1_macvtap: entered promiscuous mode
[   68.744849][ T5917] veth1_macvtap: entered promiscuous mode
[   68.750631][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.753120][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.778950][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.783187][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.788634][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.792004][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.800234][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.808333][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.821350][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.833037][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.843660][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.846573][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.882706][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.885487][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.895182][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.914323][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.964086][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.971960][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.031856][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.036297][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.057589][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.066860][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.103032][ T5998] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.123311][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.125905][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.266975][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   69.276472][ T6009] vlan2: entered promiscuous mode
[   69.278208][ T6009] team0: entered promiscuous mode
[   69.279867][ T6009] team_slave_0: entered promiscuous mode
[   69.287336][ T6009] team_slave_1: entered promiscuous mode
[   69.375846][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   69.847480][ T6041] openvswitch: netlink: IP tunnel dst address not specified
[   70.293339][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.451829][ T5236] Bluetooth: hci1: command tx timeout
[   70.453563][ T5236] Bluetooth: hci0: command tx timeout
[   70.622951][   T54] Bluetooth: hci2: command tx timeout
[   71.021055][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.023152][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.736037][ T6167] netlink: 'syz.2.105': attribute type 2 has an invalid length.
[   71.739114][ T6167] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   71.766911][ T6171] netlink: 'syz.2.107': attribute type 4 has an invalid length.
[   71.879322][ T6179] v: renamed from ip6_vti0 (while UP)
[   71.895807][ T6179] Zero length message leads to an empty skb
[   72.176204][ T6194] netlink: 56 bytes leftover after parsing attributes in process `syz.0.117'.
[   72.284946][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   72.292493][ T6198] team_slave_0: entered promiscuous mode
[   72.294451][ T6198] team_slave_1: entered promiscuous mode
[   72.301541][ T6198] team_slave_0: left promiscuous mode
[   72.303241][ T6198] team_slave_1: left promiscuous mode
[   72.530426][   T54] Bluetooth: hci0: command tx timeout
[   72.533225][   T54] Bluetooth: hci1: command tx timeout
[   72.664317][ T6212] veth1_to_team: entered allmulticast mode
[   72.668200][ T6212] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   72.691297][   T54] Bluetooth: hci2: command tx timeout
[   72.733626][ T6218] Illegal XDP return value 4294967274 on prog  (id 18) dev N/A, expect packet loss!
[   72.797679][ T6222] syz.2.131 uses obsolete (PF_INET,SOCK_PACKET)
[   72.879160][ T6229] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[   72.882399][ T6229] netlink: 'syz.0.134': attribute type 2 has an invalid length.
[   72.885956][ T6229] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[   72.888515][ T6229] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.134'.
[   73.103906][ T6243] netlink: 'syz.2.139': attribute type 4 has an invalid length.
[   73.121038][ T6243] netlink: 'syz.2.139': attribute type 4 has an invalid length.
[   73.216727][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[   73.235448][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'.
[   73.528654][ T6264] IPv6: addrconf: prefix option has invalid lifetime
[   74.000083][ T6288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.035669][ T6292] netlink: 264 bytes leftover after parsing attributes in process `syz.2.158'.
[   74.039140][ T6292] netlink: 56 bytes leftover after parsing attributes in process `syz.2.158'.
[   74.260462][ T6310] netlink: 'syz.2.167': attribute type 11 has an invalid length.
[   74.888971][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.446505][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   75.501391][ T6408] netlink: 'syz.0.210': attribute type 12 has an invalid length.
[   75.604428][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   75.946623][ T6452] netlink: 'syz.0.231': attribute type 11 has an invalid length.
[   75.949190][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   76.210130][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[   76.574789][ T1280] cfg80211: failed to load regulatory.db
[   76.632171][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'.
[   76.635067][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'.
[   76.726423][ T6504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.255'.
[   76.729683][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.255'.
[   77.076254][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'.
[   77.097903][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'.
[   77.666845][ T6571] validate_nla: 2 callbacks suppressed
[   77.666878][ T6571] netlink: 'syz.2.286': attribute type 20 has an invalid length.
[   78.953906][ T6605] netem: change failed
[   79.057746][ T6611] netlink: 'syz.2.299': attribute type 16 has an invalid length.
[   79.060358][ T6611] netlink: 'syz.2.299': attribute type 17 has an invalid length.
[   79.074464][ T6611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.182998][ T6620] IPVS: length: 209 != 24
[   79.185593][ T6618] netlink: 'syz.0.306': attribute type 11 has an invalid length.
[   79.615456][ T6642] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   79.642980][ T6642] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.658659][ T6642] bond1: (slave geneve2): making interface the new active one
[   79.662192][ T6642] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   79.674997][ T6642] bond1: entered promiscuous mode
[   79.676769][ T6642] geneve2: entered promiscuous mode
[   79.785766][ T6645] tipc: Started in network mode
[   79.787954][ T6645] tipc: Node identity f63968454a26, cluster identity 4711
[   79.791451][ T6645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.794842][ T6645] syzkaller0: entered promiscuous mode
[   79.796541][ T6645] syzkaller0: entered allmulticast mode
[   79.815151][ T6645] sch_fq: defrate 257 ignored.
[   79.832279][ T6645] tipc: Resetting bearer <eth:syzkaller0>
[   79.837879][ T6644] tipc: Resetting bearer <eth:syzkaller0>
[   79.847796][ T6644] tipc: Disabling bearer <eth:syzkaller0>
[   79.969540][ T6651] __nla_validate_parse: 1 callbacks suppressed
[   79.969556][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[   79.985611][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'.
[   79.989766][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.317'.
[   79.993907][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.317'.
[   80.082585][ T6659] dummy0: entered allmulticast mode
[   80.477005][ T6703] netlink: 180 bytes leftover after parsing attributes in process `syz.2.340'.
[   80.524006][ T6707] ieee802154 phy0 wpan0: encryption failed: -22
[   80.534454][ T6706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.344'.
[   80.586865][ T6713] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.347'.
[   80.591681][ T6713] netlink: zone id is out of range
[   80.593416][ T6713] netlink: get zone limit has 8 unknown bytes
[   80.681245][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[   80.684172][ T6719] netlink: 'syz.1.350': attribute type 1 has an invalid length.
[   80.764576][ T6725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.352'.
[   81.489433][ T6742] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   81.494313][ T6742] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.360'.
[   81.681986][ T6746] netlink: 'syz.1.363': attribute type 23 has an invalid length.
[   81.693209][ T6759] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   82.044049][ T6787] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   82.091271][ T6795] block nbd0: Unsupported socket: shutdown callout must be supported.
[   82.184793][ T6804] netlink: 'syz.2.391': attribute type 27 has an invalid length.
[   82.383102][ T6825] netlink: 'syz.2.401': attribute type 11 has an invalid length.
[   82.914266][ T6883] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.965037][ T6883] bridge_slave_1: left allmulticast mode
[   82.966873][ T6883] bridge_slave_1: left promiscuous mode
[   82.973168][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.978726][ T6883] bridge_slave_0: left allmulticast mode
[   82.991196][ T6883] bridge_slave_0: left promiscuous mode
[   82.993139][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.976700][ T6972] gtp0: entered promiscuous mode
[   85.045970][ T7019] Bluetooth: MGMT ver 1.23
[   85.139109][ T7028] __nla_validate_parse: 10 callbacks suppressed
[   85.139125][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'.
[   85.144426][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   85.276948][ T7038] netlink: 'syz.2.496': attribute type 13 has an invalid length.
[   85.280175][ T7038] netlink: 'syz.2.496': attribute type 27 has an invalid length.
[   85.332613][ T7042] netlink: 56 bytes leftover after parsing attributes in process `syz.2.498'.
[   85.516825][ T7050] netlink: 240 bytes leftover after parsing attributes in process `syz.2.501'.
[   85.548560][ T7052] geneve2: entered promiscuous mode
[   85.617560][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.231674][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'.
[   86.566425][ T7138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.543'.
[   86.789250][ T7158] netlink: 'syz.2.553': attribute type 21 has an invalid length.
[   86.798428][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.888528][ T7167] netlink: 'syz.0.556': attribute type 10 has an invalid length.
[   86.898925][ T7167] team0: Port device dummy0 added
[   86.948754][ T7170] veth3: entered allmulticast mode
[   86.950306][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'.
[   87.493070][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.583194][ T7237] netlink: 'syz.2.580': attribute type 25 has an invalid length.
[   87.627920][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'.
[   87.711194][ T7253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'.
[   88.702549][ T7365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.898405][ T7374] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   89.292890][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880282d2400: rx timeout, send abort
[   89.296876][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880282d3000: rx timeout, send abort
[   89.299628][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880282d2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   89.304793][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880282d3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   90.002109][ T7423] netlink: 'syz.1.636': attribute type 13 has an invalid length.
[   90.012848][ T5889] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.012919][ T7423] netlink: 'syz.1.636': attribute type 13 has an invalid length.
[   90.015865][ T5889] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.022547][ T5889] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.025377][ T5889] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.397238][ T7447] ieee802154 phy0 wpan0: encryption failed: -90
[   90.436790][ T7451] netlink: 'syz.1.649': attribute type 10 has an invalid length.
[   90.448024][ T7451] 8021q: adding VLAN 0 to HW filter on device team0
[   90.656762][ T7479] __nla_validate_parse: 6 callbacks suppressed
[   90.656779][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'.
[   90.738644][ T7490] tipc: Started in network mode
[   90.742920][ T7490] tipc: Node identity 368381be4553, cluster identity 4711
[   90.746930][ T7490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.750317][ T7490] syzkaller0: entered promiscuous mode
[   90.752089][ T7490] syzkaller0: entered allmulticast mode
[   90.765449][ T7490] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[   90.769220][ T7493] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   90.773362][ T7490] tipc: Resetting bearer <eth:syzkaller0>
[   90.776777][ T7487] tipc: Resetting bearer <eth:syzkaller0>
[   90.787556][ T7487] tipc: Disabling bearer <eth:syzkaller0>
[   90.997755][ T7517] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[   91.015521][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.029572][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.032364][ T7517] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   91.036377][ T7517] bond2: (slave vcan1): Error -95 calling set_mac_address
[   91.082420][ T7523] gretap2: entered promiscuous mode
[   91.086490][ T7523] bond2: (slave gretap2): making interface the new active one
[   91.089260][ T7523] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   91.131618][ T7517] macvlan2: entered promiscuous mode
[   91.133442][ T7517] macvlan2: entered allmulticast mode
[   91.135597][ T7517] bond2: entered promiscuous mode
[   91.139216][ T7517] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.144625][ T7517] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[   91.150326][ T7517] bond2: left promiscuous mode
[   91.241130][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'.
[   91.463373][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'.
[   91.466157][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.695'.
[   91.468978][ T7550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.695'.
[   91.495845][ T7552] netlink: 'syz.0.696': attribute type 3 has an invalid length.
[   91.899864][ T7601] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   91.933210][ T7603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.670075][ T7617] netlink: 148 bytes leftover after parsing attributes in process `syz.0.724'.
[   93.005748][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.021828][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.149350][ T7635] bond1: left promiscuous mode
[   93.151701][ T7635] geneve2: left promiscuous mode
[   93.180090][ T5938] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.182873][ T5938] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.185904][ T5938] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.188615][ T5938] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.208901][ T5938] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.213200][ T5938] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.218527][ T5938] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.231428][ T5938] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.366771][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'.
[   93.369382][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[   93.574232][ T7679] vlan2: entered promiscuous mode
[   93.575865][ T7679] batadv0: entered promiscuous mode
[   93.763323][ T7706] netlink: 27 bytes leftover after parsing attributes in process `syz.2.763'.
[   93.932485][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'.
[   93.935310][ T7727] netlink: 'syz.1.771': attribute type 5 has an invalid length.
[   93.944798][ T7727] geneve3: entered promiscuous mode
[   93.946562][ T7727] geneve3: entered allmulticast mode
[   93.952794][ T5938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   93.957761][ T5938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   93.963863][ T5938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   93.980906][ T5938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   94.255705][ T7762] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   94.509633][ T7790] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   95.275492][ T7801] bond0: (slave bond_slave_0): Releasing backup interface
[   95.429164][ T7801] bond0: (slave bond_slave_1): Releasing backup interface
[   95.444307][ T7801] team0: Port device team_slave_0 removed
[   95.455762][ T7801] team0: Port device team_slave_1 removed
[   95.457861][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.462181][ T7801] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.465397][ T7801] bond1: (slave geneve2): Releasing active interface
[   95.588257][ T7819] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[   95.599449][ T7819] netlink: 'syz.1.810': attribute type 2 has an invalid length.
[   95.856389][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.961080][ T7863] __nla_validate_parse: 3 callbacks suppressed
[   95.961094][ T7863] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.831'.
[   96.012854][ T7636] IPVS: starting estimator thread 0...
[   96.030961][ T2286] IPVS: starting estimator thread 0...
[   96.110118][ T7870] IPVS: using max 62 ests per chain, 148800 per kthread
[   96.130040][ T7873] IPVS: using max 62 ests per chain, 148800 per kthread
[   96.430450][ T7905] block nbd0: server does not support multiple connections per device.
[   96.435091][ T7905] block nbd0: shutting down sockets
[   96.446848][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'.
[   96.535894][ T7921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   97.156308][ T7934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.858'.
[   97.224185][ T7934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.232327][ T7934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.237491][ T7934] bond0 (unregistering): Released all slaves
[   97.398585][ T7940] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[   97.405881][ T7940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.861'.
[   97.409202][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[   97.637400][ T7966] netlink: 'syz.1.874': attribute type 3 has an invalid length.
[   97.798689][ T7982] netlink: 'syz.0.882': attribute type 5 has an invalid length.
[   97.856489][ T7984] geneve3: left promiscuous mode
[   97.858125][ T7984] geneve3: left allmulticast mode
[   97.873962][ T5889] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[   97.876719][ T5889] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[   97.888090][ T5889] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[   97.901216][ T5889] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[   98.041163][ T7998] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.890'.
[   98.085841][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'.
[   98.186248][ T7999] infiniband syz1: set active
[   98.187926][ T7999] infiniband syz1: added veth1_to_bond
[   98.234707][ T7999] RDS/IB: syz1: added
[   98.236344][ T7999] smc: adding ib device syz1 with port count 1
[   98.238324][ T7999] smc:    ib device syz1 port 1 has pnetid 
[   99.037377][ T8071] ieee802154 phy0 wpan0: encryption failed: -22
[   99.434217][ T8108] vxcan2: entered promiscuous mode
[   99.814740][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.817298][ T8133] bond0: entered promiscuous mode
[   99.819558][ T8133] team0: Port device bond0 added
[   99.852997][ T8139] netlink: 'syz.0.948': attribute type 3 has an invalid length.
[   99.858064][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[   99.862502][ T8140] netlink: 120 bytes leftover after parsing attributes in process `syz.2.949'.
[   99.865865][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[  100.025568][ T8158] team0: No ports can be present during mode change
[  100.033741][ T8158] vlan0: entered promiscuous mode
[  100.046039][ T8158] team0: Port device vlan0 added
[  100.058758][ T8158] tipc: Started in network mode
[  100.062248][ T8158] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  100.064561][ T8158] tipc: Enabled bearer <eth:team0>, priority 0
[  100.284499][ T8194] syz_tun: entered allmulticast mode
[  100.294513][ T8193] syz_tun: left allmulticast mode
[  100.344682][ T8203] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[  101.061523][   T24] tipc: Node number set to 11578026
[  101.223641][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'.
[  101.253197][ T8231] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  101.259741][ T8231] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  101.300773][ T8235] macvlan2: entered promiscuous mode
[  101.302421][ T8235] macvlan2: entered allmulticast mode
[  101.304601][ T8235] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  101.699499][ T8256] netlink: 724 bytes leftover after parsing attributes in process `syz.2.1002'.
[  101.702871][ T8256] netlink: 724 bytes leftover after parsing attributes in process `syz.2.1002'.
[  102.519357][ T8291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.605592][ T8299] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  102.622266][ T8301] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1022'.
[  102.625574][ T8301] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1022'.
[  103.113739][ T8341] netlink: 'syz.1.1038': attribute type 2 has an invalid length.
[  103.367810][ T8360] netlink: 'syz.1.1047': attribute type 3 has an invalid length.
[  103.827834][ T8401] atomic_op ffff88811d4cf198 conn xmit_atomic 0000000000000000
[  103.900145][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'.
[  103.989116][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'.
[  104.353797][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.920152][ T8476] bridge1: entered allmulticast mode
[  105.545040][ T8509] syzkaller1: entered promiscuous mode
[  105.546786][ T8509] syzkaller1: entered allmulticast mode
[  105.557829][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  105.660609][ T8516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.680728][ T8516] veth0_to_team: entered promiscuous mode
[  105.682559][ T8516] veth0_to_team: entered allmulticast mode
[  105.727309][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'.
[  106.198846][ T8546] hsr0: entered promiscuous mode
[  106.202766][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'.
[  106.216340][ T8546] hsr_slave_0: left promiscuous mode
[  106.218821][ T8546] hsr_slave_1: left promiscuous mode
[  106.259802][ T8546] hsr0 (unregistering): left promiscuous mode
[  106.376471][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'.
[  107.887086][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  112.529929][    C0] sched: DL replenish lagged too much
[  132.703098][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.710521][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.036888][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.047651][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  217.859529][ T8564] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  219.952565][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  219.952581][ T8564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.952587][ T8564] Call Trace:
[  219.952591][ T8564]  <TASK>
[  219.952596][ T8564]  dump_stack_lvl+0x189/0x250
[  219.952614][ T8564]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.952624][ T8564]  ? __pfx__printk+0x10/0x10
[  219.952636][ T8564]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  219.952647][ T8564]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  219.952657][ T8564]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  219.952666][ T8564]  warn_alloc+0x214/0x310
[  219.952682][ T8564]  ? __pfx_warn_alloc+0x10/0x10
[  219.952697][ T8564]  ? __get_vm_area_node+0x28f/0x300
[  219.952708][ T8564]  ? kcov_ioctl+0x55/0x640
[  219.952721][ T8564]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  219.952744][ T8564]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  219.952758][ T8564]  ? __pfx_kcov_ioctl+0x10/0x10
[  219.952768][ T8564]  vmalloc_user_noprof+0xad/0xf0
[  219.952778][ T8564]  ? kcov_ioctl+0x55/0x640
[  219.952813][ T8564]  kcov_ioctl+0x55/0x640
[  219.952825][ T8564]  ? bpf_lsm_file_ioctl+0x9/0x20
[  219.952835][ T8564]  ? __pfx_kcov_ioctl+0x10/0x10
[  219.952845][ T8564]  __se_sys_ioctl+0xfc/0x170
[  219.952857][ T8564]  do_syscall_64+0xfa/0x3b0
[  219.952869][ T8564]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.952879][ T8564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.952887][ T8564]  ? exc_page_fault+0x9f/0xf0
[  219.952897][ T8564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.952905][ T8564] RIP: 0033:0x7f9981d8e7eb
[  219.952930][ T8564] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  219.952936][ T8564] RSP: 002b:00007ffe2239e130 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  219.952946][ T8564] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f9981d8e7eb
[  219.952951][ T8564] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db
[  219.952957][ T8564] RBP: 00007f9981fb6308 R08: 00000000000000da R09: 0000000000000000
[  219.952961][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.952966][ T8564] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  219.952977][ T8564]  </TASK>
[  219.952981][ T8564] Mem-Info:
[  227.003696][ T8564] active_anon:4749 inactive_anon:0 isolated_anon:0
[  227.003696][ T8564]  active_file:1105 inactive_file:38268 isolated_file:0
[  227.003696][ T8564]  unevictable:1768 dirty:227 writeback:0
[  227.003696][ T8564]  slab_reclaimable:9450 slab_unreclaimable:230966
[  227.003696][ T8564]  mapped:7788 shmem:2442 pagetables:679
[  227.003696][ T8564]  sec_pagetables:0 bounce:0
[  227.003696][ T8564]  kernel_misc_reclaimable:0
[  227.003696][ T8564]  free:151319 free_pcp:20404 free_cma:0
[  228.545846][ T8564] Node 0 active_anon:14348kB inactive_anon:0kB active_file:2760kB inactive_file:19100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20472kB dirty:728kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3920kB pagetables:1540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  229.652488][ T8564] Node 1 active_anon:4648kB inactive_anon:0kB active_file:1660kB inactive_file:133972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10680kB dirty:204kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7728kB pagetables:1176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  231.130933][ T8564] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.430753][ T8564] lowmem_reserve[]: 0 811 811 811 811
[  233.432469][ T8564] Node 0 DMA32 free:122860kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14348kB inactive_anon:0kB active_file:2760kB inactive_file:19100kB unevictable:3536kB writepending:728kB present:1556484kB managed:830984kB mlocked:0kB bounce:0kB free_pcp:32492kB local_pcp:17744kB free_cma:0kB
[  235.998154][ T8564] lowmem_reserve[]: 0 0 0 0 0
[  235.999716][ T8564] Node 1 DMA32 free:394064kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8788kB local_pcp:7728kB free_cma:0kB
[  239.894939][ T8564] lowmem_reserve[]: 0 0 854 854 854
[  239.896656][ T8564] Node 1 Normal free:48588kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4648kB inactive_anon:0kB active_file:1660kB inactive_file:133972kB unevictable:3536kB writepending:208kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32736kB local_pcp:19016kB free_cma:0kB
[  240.831998][ T8564] lowmem_reserve[]: 0 0 0 0 0
[  240.833515][ T8564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  240.837333][ T8564] Node 0 DMA32: 313*4kB (UME) 220*8kB (ME) 115*16kB (UME) 81*32kB (ME) 35*64kB (ME) 10*128kB (UM) 4*256kB (ME) 11*512kB (UME) 10*1024kB (UM) 3*2048kB (UME) 14*4096kB (M) = 91348kB
[  242.157511][ T8564] Node 1 DMA32: 3*4kB (UM) 197*8kB (UM) 240*16kB (UM) 84*32kB (UM) 34*64kB (UM) 12*128kB (UM) 4*256kB (UM) 41*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 82*4096kB (M) = 378932kB
[  243.149197][ T8564] Node 1 Normal: 1717*4kB (UME) 188*8kB (UME) 384*16kB (UME) 107*32kB (UME) 73*64kB (UME) 47*128kB (UME) 17*256kB (UME) 10*512kB (UM) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 51412kB
[  243.163710][ T8564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  243.166579][ T8564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  243.169370][ T8564] 41825 total pagecache pages
[  248.157979][ T8564] 0 pages in swap cache
[  248.159330][ T8564] Free swap  = 124996kB
[  248.732323][ T8564] Total swap = 124996kB
[  248.733637][ T8564] 786301 pages RAM
[  248.734767][ T8564] 0 pages HighMem/MovableOnly
[  248.736226][ T8564] 241323 pages reserved
[  248.737487][ T8564] 0 pages cma reserved
[  255.573522][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.579827][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  282.868465][ T8569] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  284.103720][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz-executor Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  284.103745][ T8569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.103754][ T8569] Call Trace:
[  284.103758][ T8569]  <TASK>
[  284.103763][ T8569]  dump_stack_lvl+0x189/0x250
[  284.103778][ T8569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.103788][ T8569]  ? __pfx__printk+0x10/0x10
[  284.103799][ T8569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.103808][ T8569]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.103817][ T8569]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  284.103827][ T8569]  warn_alloc+0x214/0x310
[  284.103841][ T8569]  ? __pfx_warn_alloc+0x10/0x10
[  284.103856][ T8569]  ? __get_vm_area_node+0x28f/0x300
[  284.103885][ T8569]  ? kcov_ioctl+0x55/0x640
[  284.103897][ T8569]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  284.103920][ T8569]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  284.103933][ T8569]  ? __pfx_kcov_ioctl+0x10/0x10
[  284.103943][ T8569]  vmalloc_user_noprof+0xad/0xf0
[  284.103954][ T8569]  ? kcov_ioctl+0x55/0x640
[  284.103964][ T8569]  kcov_ioctl+0x55/0x640
[  284.103974][ T8569]  ? bpf_lsm_file_ioctl+0x9/0x20
[  284.103983][ T8569]  ? __pfx_kcov_ioctl+0x10/0x10
[  284.103993][ T8569]  __se_sys_ioctl+0xfc/0x170
[  284.104005][ T8569]  do_syscall_64+0xfa/0x3b0
[  284.104015][ T8569]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.104025][ T8569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.104032][ T8569]  ? exc_page_fault+0x9f/0xf0
[  284.104042][ T8569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.104049][ T8569] RIP: 0033:0x7fd53658e7eb
[  284.104058][ T8569] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  284.104065][ T8569] RSP: 002b:00007ffdde06f270 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  284.104074][ T8569] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fd53658e7eb
[  284.104080][ T8569] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000df
[  284.104085][ T8569] RBP: 00007fd5367b66c8 R08: 00000000000000da R09: 0000000000000000
[  284.104089][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.104094][ T8569] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  284.104105][ T8569]  </TASK>
[  284.104108][ T8569] Mem-Info:
[  286.000049][ T8569] active_anon:4800 inactive_anon:0 isolated_anon:0
[  286.000049][ T8569]  active_file:1105 inactive_file:38278 isolated_file:0
[  286.000049][ T8569]  unevictable:1768 dirty:59 writeback:0
[  286.000049][ T8569]  slab_reclaimable:9447 slab_unreclaimable:232764
[  286.000049][ T8569]  mapped:8812 shmem:2442 pagetables:703
[  286.000049][ T8569]  sec_pagetables:0 bounce:0
[  286.000049][ T8569]  kernel_misc_reclaimable:0
[  286.000049][ T8569]  free:134352 free_pcp:25639 free_cma:0
[  286.270463][ T8569] Node 0 active_anon:13596kB inactive_anon:0kB active_file:2760kB inactive_file:19136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23560kB dirty:192kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3952kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  286.279699][ T8569] Node 1 active_anon:5740kB inactive_anon:0kB active_file:1660kB inactive_file:133976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:11688kB dirty:44kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7728kB pagetables:1228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  286.411044][ T8569] Node 0 DMA free:14432kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:348kB free_cma:0kB
[  286.419699][ T8569] lowmem_reserve[]: 0 811 811 811 811
[  286.485709][ T8569] Node 0 DMA32 free:310896kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13568kB inactive_anon:0kB active_file:2760kB inactive_file:19136kB unevictable:3536kB writepending:192kB present:1556484kB managed:830984kB mlocked:0kB bounce:0kB free_pcp:37996kB local_pcp:18356kB free_cma:0kB
[  286.550031][ T8569] lowmem_reserve[]: 0 0 0 0 0
[  286.551564][ T8569] Node 1 DMA32 free:291704kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:23016kB local_pcp:10768kB free_cma:0kB
[  286.619960][ T8569] lowmem_reserve[]: 0 0 854 854 854
[  286.649987][ T8569] Node 1 Normal free:224416kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5680kB inactive_anon:0kB active_file:1660kB inactive_file:133976kB unevictable:3536kB writepending:64kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45832kB local_pcp:28096kB free_cma:0kB
[  286.659515][ T8569] lowmem_reserve[]: 0 0 0 0 0
[  286.733889][ T8569] Node 0 DMA: 5*4kB (U) 16*8kB (U) 33*16kB (U) 16*32kB (U) 17*64kB (U) 15*128kB (U) 10*256kB (U) 5*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 14436kB
[  286.744272][ T8569] Node 0 DMA32: 1762*4kB (UME) 3508*8kB (UME) 3771*16kB (UME) 2307*32kB (UME) 1028*64kB (UME) 347*128kB (UME) 77*256kB (UME) 24*512kB (UME) 7*1024kB (UM) 4*2048kB (UME) 7*4096kB (UM) = 355512kB
[  286.856130][ T8569] Node 1 DMA32: 249*4kB (UM) 453*8kB (UM) 715*16kB (UM) 607*32kB (UM) 484*64kB (UM) 321*128kB (UM) 139*256kB (UM) 47*512kB (UM) 25*1024kB (UM) 11*2048kB (UM) 39*4096kB (UM) = 375068kB
[  286.884898][ T8569] Node 1 Normal: 46*4kB (UME) 2843*8kB (UME) 3232*16kB (UME) 1607*32kB (UME) 568*64kB (UME) 182*128kB (UME) 34*256kB (UME) 13*512kB (UM) 8*1024kB (UME) 2*2048kB (M) 0*4096kB = 213360kB
[  286.894469][ T8569] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.897356][ T8569] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  286.910050][ T8569] 41829 total pagecache pages
[  286.911524][ T8569] 0 pages in swap cache
[  286.912929][ T8569] Free swap  = 124996kB
[  286.914216][ T8569] Total swap = 124996kB
[  286.915459][ T8569] 786301 pages RAM
[  286.916599][ T8569] 0 pages HighMem/MovableOnly
[  286.918049][ T8569] 241323 pages reserved
[  286.919312][ T8569] 0 pages cma reserved
[  287.185420][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.188864][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.195751][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.198693][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.205297][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.381499][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  287.384616][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  287.390415][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  287.403012][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  287.408953][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  288.172405][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  288.180910][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  288.184023][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  288.199278][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  288.214313][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  288.248970][ T8595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.257237][ T8595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.310726][ T8595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.336537][ T8595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.354106][ T8595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.563759][   T13] bond0 (unregistering): Released all slaves
[  288.664277][   T13] bond1 (unregistering): Released all slaves
[  288.671971][   T13] bond2 (unregistering): Released all slaves
[  288.795243][   T13] tipc: Left network mode
[  289.174373][ T8584] chnl_net:caif_netlink_parms(): no params data found
[  289.252050][   T54] Bluetooth: hci0: command tx timeout
[  289.493102][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.495443][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.497784][ T8584] bridge_slave_0: entered allmulticast mode
[  289.544945][ T8584] bridge_slave_0: entered promiscuous mode
[  289.570731][   T54] Bluetooth: hci1: command tx timeout
[  289.712308][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.714654][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.716942][ T8584] bridge_slave_1: entered allmulticast mode
[  289.738950][ T8584] bridge_slave_1: entered promiscuous mode
[  289.788657][   T13] hsr_slave_0: left promiscuous mode
[  289.791888][   T13] hsr_slave_1: left promiscuous mode
[  290.371137][   T54] Bluetooth: hci2: command tx timeout
[  290.450682][   T54] Bluetooth: hci3: command tx timeout
[  290.665734][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.692679][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.824300][ T8584] team0: Port device team_slave_0 added
[  290.836336][ T8594] chnl_net:caif_netlink_parms(): no params data found
[  290.878429][ T8584] team0: Port device team_slave_1 added
[  291.018503][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.021454][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.029368][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.110447][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.112636][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.122339][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.198445][   T13] ------------[ cut here ]------------
[  291.200651][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  291.203621][   T13] Modules linked in:
[  291.206022][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  291.210552][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.213691][   T13] Workqueue: netns cleanup_net
[  291.215178][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  291.216931][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 a4 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 62 e2 f7 e8 d1 39 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 39 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  291.222943][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  291.224875][   T13] RAX: ffffffff8a2171df RBX: ffff88802f158000 RCX: ffff88801c2f8000
[  291.227395][   T13] RDX: 0000000000000000 RSI: ffffffff8dba3ab7 RDI: ffff88801c2f8000
[  291.229933][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  291.232499][   T13] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  291.234905][   T13] R13: 1ffff92000020f40 R14: ffff88802f159480 R15: dffffc0000000000
[  291.237417][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  291.240187][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.242261][   T13] CR2: 0000556baa69c950 CR3: 000000012b2b6000 CR4: 00000000000006f0
[  291.244813][   T13] Call Trace:
[  291.245897][   T13]  <TASK>
[  291.246861][   T13]  xfrm_net_exit+0x2d/0x70
[  291.248236][   T13]  ops_undo_list+0x49a/0x990
[  291.249728][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  291.251638][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  291.253339][   T13]  cleanup_net+0x4c5/0x800
[  291.254759][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  291.256356][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.257964][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  291.259772][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  291.261702][   T13]  process_scheduled_works+0xae1/0x17b0
[  291.263480][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.265360][   T13]  worker_thread+0x8a0/0xda0
[  291.266834][   T13]  kthread+0x711/0x8a0
[  291.268101][   T13]  ? __pfx_worker_thread+0x10/0x10
[  291.269735][   T13]  ? __pfx_kthread+0x10/0x10
[  291.271292][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.272937][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.274612][   T13]  ? __pfx_kthread+0x10/0x10
[  291.276087][   T13]  ret_from_fork+0x3fc/0x770
[  291.277529][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  291.279076][   T13]  ? __switch_to_asm+0x39/0x70
[  291.280711][   T13]  ? __switch_to_asm+0x33/0x70
[  291.282182][   T13]  ? __pfx_kthread+0x10/0x10
[  291.283653][   T13]  ret_from_fork_asm+0x1a/0x30
[  291.285153][   T13]  </TASK>
[  291.286156][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  291.288444][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  291.292276][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.295479][   T13] Workqueue: netns cleanup_net
[  291.297004][   T13] Call Trace:
[  291.298046][   T13]  <TASK>
[  291.298999][   T13]  dump_stack_lvl+0x99/0x250
[  291.300475][   T13]  ? __asan_memcpy+0x40/0x70
[  291.301932][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.303561][   T13]  ? __pfx__printk+0x10/0x10
[  291.305028][   T13]  vpanic+0x281/0x750
[  291.306341][   T13]  ? __pfx__printk+0x10/0x10
[  291.307785][   T13]  ? __pfx_vpanic+0x10/0x10
[  291.309184][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  291.310841][   T13]  panic+0xb9/0xc0
[  291.312011][   T13]  ? __pfx_panic+0x10/0x10
[  291.313395][   T13]  __warn+0x31b/0x4b0
[  291.314651][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  291.316139][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  291.317663][   T13]  report_bug+0x2be/0x4f0
[  291.319035][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  291.320547][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  291.322090][   T13]  ? xfrm_state_fini+0x272/0x2f0
[  291.323672][   T13]  handle_bug+0x84/0x160
[  291.325012][   T13]  exc_invalid_op+0x1a/0x50
[  291.326428][   T13]  asm_exc_invalid_op+0x1a/0x20
[  291.327932][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  291.329659][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 a4 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 62 e2 f7 e8 d1 39 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 39 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  291.335681][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  291.337539][   T13] RAX: ffffffff8a2171df RBX: ffff88802f158000 RCX: ffff88801c2f8000
[  291.340012][   T13] RDX: 0000000000000000 RSI: ffffffff8dba3ab7 RDI: ffff88801c2f8000
[  291.342467][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  291.344895][   T13] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  291.347392][   T13] R13: 1ffff92000020f40 R14: ffff88802f159480 R15: dffffc0000000000
[  291.349893][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  291.351483][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  291.353044][   T13]  xfrm_net_exit+0x2d/0x70
[  291.354474][   T13]  ops_undo_list+0x49a/0x990
[  291.355921][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  291.357557][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  291.359181][   T13]  cleanup_net+0x4c5/0x800
[  291.360612][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  291.362164][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.363826][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  291.365620][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  291.367423][   T13]  process_scheduled_works+0xae1/0x17b0
[  291.369241][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.371137][   T13]  worker_thread+0x8a0/0xda0
[  291.372572][   T13]  kthread+0x711/0x8a0
[  291.373828][   T13]  ? __pfx_worker_thread+0x10/0x10
[  291.375477][   T13]  ? __pfx_kthread+0x10/0x10
[  291.376957][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.378620][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.380179][   T13]  ? __pfx_kthread+0x10/0x10
[  291.381641][   T13]  ret_from_fork+0x3fc/0x770
[  291.383092][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  291.384728][   T13]  ? __switch_to_asm+0x39/0x70
[  291.386255][   T13]  ? __switch_to_asm+0x33/0x70
[  291.387768][   T13]  ? __pfx_kthread+0x10/0x10
[  291.389246][   T13]  ret_from_fork_asm+0x1a/0x30
[  291.390771][   T13]  </TASK>
[  291.392342][   T13] Kernel Offset: disabled
[  291.393686][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:52:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000002 RCX=ffffffff9348b888 RDX=0000000000000008
RSI=ffff88801c2fc4c0 RDI=ffff88801c2fb980 RBP=0000000000000000 RSP=ffffc900001267a8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900001269f8 R11=ffffffff81ac3890
R12=0000000000000003 R13=0000000000000001 R14=ffff88801c2fc4c0 R15=0000000000000000
RIP=ffffffff819d6589 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe8cccfff8 CR3=0000000130d08000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff8881088c0237 R9 =1ffff11021118046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48d5 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556baa69c950 CR3=000000012b2b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f6c36612e53
XMM06=0000000000000000 00007f6c36612e4d XMM07=0000000000000000 00007f6c36612e61
XMM08=0000000000000000 00007f6c36612ee7 XMM09=0000000000000000 00007f6c36612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
