last executing test programs:

3.305126014s ago: executing program 2 (id=2386):
r0 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0)

3.236204454s ago: executing program 2 (id=2387):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="8c7e9846", 0x4}], 0x1}}], 0x2, 0xc8040)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)

1.131839074s ago: executing program 0 (id=2433):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.131472836s ago: executing program 1 (id=2434):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

1.086115586s ago: executing program 0 (id=2435):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xfffc, 0x1, 0x0, 0xfffffffd}, 0x1c)

1.085885752s ago: executing program 1 (id=2436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0x9}]}})

1.085731886s ago: executing program 0 (id=2437):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7d1068a4", 0x4)

1.01775265s ago: executing program 1 (id=2438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1.017465036s ago: executing program 0 (id=2439):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000940)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000400010002", 0x7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc23b, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x14}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000980)='GPL\x00', 0x9, 0xe1, &(0x7f00000009c0)=""/225, 0x41100, 0xc, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x5, 0x3, 0x5}, 0x10, 0x2f48a, r3, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10)
sendfile(r7, r8, &(0x7f0000000c00), 0x1d)
sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)=ANY=[@ANYBLOB], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xaf}, @ldst={0x1, 0x0, 0x6, 0x5, 0xf, 0x80, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

957.341288ms ago: executing program 1 (id=2440):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r1, 0x0, 0x0)

956.934897ms ago: executing program 1 (id=2441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f80080001"], 0x88}}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='sched_process_wait\x00', 0xffffffffffffffff, 0x0, 0x8001}, 0x3cb29757ad25225b)
ppoll(&(0x7f00000003c0)=[{r3, 0x1204}, {0xffffffffffffffff, 0x410}, {r3, 0x410}, {0xffffffffffffffff, 0x2200}, {r1, 0x8020}, {r3, 0x8000}], 0x6, 0x0, 0x0, 0x0)

206.431687ms ago: executing program 2 (id=2442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000001801000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

206.185917ms ago: executing program 2 (id=2443):
r0 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x10, 0x0, 0x45, 0xce, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})

161.668612ms ago: executing program 2 (id=2444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

148.042574ms ago: executing program 0 (id=2445):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfffffffffffffd8f, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000955ad9b34f2c96825323e36b05484eaaad3ca4f701e06ec9853e7dae970072acaf62da5aac9d7588e7f28cc1a1936b4fd9198322608b7c6593207468a34a29f93190d0ebe93c401a9e2339be61052905a5c66128cb350a77052ab4db0f4c6dc34b6219e351b65007f8790ceb146589fcaf9661f39e63bb928b76b6952ab38767e9a4fe54bc2cb67f978d21822f012b63068cac24e247edae0aaece2bfba5f4bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000ec0)={0x4, {{0xa, 0x4e23, 0x8, @mcast1, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}}, {{0xa, 0x4e21, 0x2, @loopback, 0xfffffffb}}]}, 0x190)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xf, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0xb}, {0x3, 0x6, 0x1}, {0x0, 0x1, 0x1}, 0xc, 0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010000000c0000000c000000070000000f000000000000090500000000615f002e5f00"], &(0x7f0000000640)=""/21, 0x2b, 0x15, 0x1, 0x600}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

93.304393ms ago: executing program 2 (id=2446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40)

91.690011ms ago: executing program 1 (id=2447):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000800)={0xfffffffffffffffd, 0x0, &(0x7f0000000740)={&(0x7f00000012c0)=ANY=[], 0x174c}, 0x1, 0x0, 0x0, 0x84}, 0x400c080)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)

0s ago: executing program 0 (id=2448):
unshare(0x2c020680)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa000001c})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44537' (ED25519) to the list of known hosts.
Setting up swapspace version 1, size = 127995904 bytes
syzkaller login: [   55.386085][ T5819] cgroup: Unknown subsys name 'net'
[   55.514611][ T5819] cgroup: Unknown subsys name 'cpuset'
[   55.521140][ T5819] cgroup: Unknown subsys name 'rlimit'
[   57.052892][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.217979][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.225206][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.230882][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.233672][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.237004][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.242429][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.246309][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.250045][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.259116][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.262656][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.339497][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.350721][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.354499][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.358603][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.363137][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.610341][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   61.670754][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   61.711792][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   61.805851][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.809097][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.812007][ T5837] bridge_slave_0: entered allmulticast mode
[   61.814802][ T5837] bridge_slave_0: entered promiscuous mode
[   61.818970][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.822325][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.824590][ T5837] bridge_slave_1: entered allmulticast mode
[   61.827238][ T5837] bridge_slave_1: entered promiscuous mode
[   61.830643][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.833255][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.835933][ T5833] bridge_slave_0: entered allmulticast mode
[   61.840559][ T5833] bridge_slave_0: entered promiscuous mode
[   61.848426][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.851125][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.853457][ T5833] bridge_slave_1: entered allmulticast mode
[   61.856181][ T5833] bridge_slave_1: entered promiscuous mode
[   61.901591][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.917151][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.922102][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.926334][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.980235][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.983868][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.986700][ T5842] bridge_slave_0: entered allmulticast mode
[   61.989659][ T5842] bridge_slave_0: entered promiscuous mode
[   61.993830][ T5833] team0: Port device team_slave_0 added
[   62.012127][ T5833] team0: Port device team_slave_1 added
[   62.014716][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.017204][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.019634][ T5842] bridge_slave_1: entered allmulticast mode
[   62.023864][ T5842] bridge_slave_1: entered promiscuous mode
[   62.028473][ T5837] team0: Port device team_slave_0 added
[   62.066142][ T5837] team0: Port device team_slave_1 added
[   62.080306][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.082798][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.092588][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.113664][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.117491][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.120502][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.130114][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.149212][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.160712][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.163498][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.174674][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.194534][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.197300][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.207707][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.222028][ T5842] team0: Port device team_slave_0 added
[   62.225619][ T5842] team0: Port device team_slave_1 added
[   62.256724][ T5833] hsr_slave_0: entered promiscuous mode
[   62.259023][ T5833] hsr_slave_1: entered promiscuous mode
[   62.263086][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.265281][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.274353][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.305206][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.307708][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.317038][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.333291][ T5837] hsr_slave_0: entered promiscuous mode
[   62.335980][ T5837] hsr_slave_1: entered promiscuous mode
[   62.338707][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.342513][ T5837] Cannot create hsr debugfs directory
[   62.462894][ T5842] hsr_slave_0: entered promiscuous mode
[   62.465592][ T5842] hsr_slave_1: entered promiscuous mode
[   62.467726][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.470850][ T5842] Cannot create hsr debugfs directory
[   62.604673][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.612454][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.635282][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.650501][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.689359][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.695624][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.721677][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.728415][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.798416][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.805666][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.811316][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.819581][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.862548][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.885972][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   62.904959][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.908173][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.925934][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.928226][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.943199][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.985743][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   62.994264][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.004816][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.007480][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.024683][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.027121][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.047259][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   63.070802][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.073554][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.089715][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.094598][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.113365][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.116335][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.212160][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.266205][ T5833] veth0_vlan: entered promiscuous mode
[   63.282260][ T5833] veth1_vlan: entered promiscuous mode
[   63.302530][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.310598][ T5840] Bluetooth: hci0: command tx timeout
[   63.313111][ T5224] Bluetooth: hci1: command tx timeout
[   63.325486][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.330181][ T5833] veth0_macvtap: entered promiscuous mode
[   63.340552][ T5833] veth1_macvtap: entered promiscuous mode
[   63.378508][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.382574][ T5840] Bluetooth: hci2: command tx timeout
[   63.400921][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.406410][ T5837] veth0_vlan: entered promiscuous mode
[   63.424906][ T5842] veth0_vlan: entered promiscuous mode
[   63.432498][ T5837] veth1_vlan: entered promiscuous mode
[   63.436010][ T5863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.448316][ T5863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.453202][ T5863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.463608][ T5842] veth1_vlan: entered promiscuous mode
[   63.473126][ T5863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.539669][ T5837] veth0_macvtap: entered promiscuous mode
[   63.558721][ T5837] veth1_macvtap: entered promiscuous mode
[   63.568461][ T5842] veth0_macvtap: entered promiscuous mode
[   63.601984][ T5842] veth1_macvtap: entered promiscuous mode
[   63.613876][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.632745][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.633631][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.636056][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.658754][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.668937][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.687981][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.706658][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.709834][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.727608][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.733712][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.733773][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.737006][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.757424][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.762080][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.773317][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.881711][  T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.884300][  T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.902968][  T163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.903544][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.905495][  T163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.918885][  T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.922076][  T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.947196][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.950704][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.242248][ T5921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'.
[   64.263931][ T5921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'.
[   64.739800][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'.
[   64.897469][ T5972] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET)
[   65.166566][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'.
[   65.171684][ T6000] nbd: couldn't find a device at index 65546
[   65.380594][ T5840] Bluetooth: hci0: command tx timeout
[   65.393198][ T5840] Bluetooth: hci1: command tx timeout
[   65.405209][ T6012] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.460354][ T5840] Bluetooth: hci2: command tx timeout
[   65.535801][ T6022] pimreg: entered allmulticast mode
[   65.557514][ T6022] pimreg: left allmulticast mode
[   65.600682][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'.
[   65.648273][ T6037] netlink: 'syz.2.65': attribute type 2 has an invalid length.
[   65.736132][ T6047] netlink: 'syz.1.66': attribute type 4 has an invalid length.
[   65.837577][ T6049] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   65.843520][ T5300] IPVS: starting estimator thread 0...
[   65.950279][ T6057] IPVS: using max 78 ests per chain, 187200 per kthread
[   66.054326][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   66.284850][ T6101] Zero length message leads to an empty skb
[   66.350138][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.353973][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.438251][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.449007][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.566301][ T5863] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.572578][ T5863] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.576800][ T5863] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.590883][ T5863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.764877][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.843195][  T373] IPVS: starting estimator thread 0...
[   66.853177][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.108'.
[   66.952196][ T6132] IPVS: using max 46 ests per chain, 110400 per kthread
[   67.061895][ T6151] netlink: 'syz.2.117': attribute type 8 has an invalid length.
[   67.462220][ T5840] Bluetooth: hci1: command tx timeout
[   67.463104][ T5224] Bluetooth: hci0: command tx timeout
[   67.486774][ T6178] netlink: 'syz.2.128': attribute type 1 has an invalid length.
[   67.540995][ T5224] Bluetooth: hci2: command tx timeout
[   67.789783][ T6213] tipc: Started in network mode
[   67.792532][ T6213] tipc: Node identity , cluster identity 4711
[   67.795247][ T6213] tipc: Failed to obtain node identity
[   67.797621][ T6213] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   68.639263][ T6250] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.979448][ T6283] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   69.540559][ T5224] Bluetooth: hci0: command tx timeout
[   69.540699][ T5840] Bluetooth: hci1: command tx timeout
[   69.630144][ T5840] Bluetooth: hci2: command tx timeout
[   69.934382][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[   70.238077][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'.
[   70.416251][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'.
[   70.623504][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'.
[   70.628094][ T6375] netlink: 120 bytes leftover after parsing attributes in process `syz.0.214'.
[   70.633588][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'.
[   71.313566][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.315826][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.434900][ T6398] tipc: Started in network mode
[   71.437124][ T6398] tipc: Node identity 064f829555d3, cluster identity 4711
[   71.441098][ T6398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.444912][ T6398] syzkaller0: entered promiscuous mode
[   71.447306][ T6398] syzkaller0: entered allmulticast mode
[   71.461318][ T6398] tipc: Resetting bearer <eth:syzkaller0>
[   71.466987][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[   71.476559][ T6397] tipc: Disabling bearer <eth:syzkaller0>
[   71.689533][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.229'.
[   71.955785][ T6444] netlink: 'syz.2.245': attribute type 10 has an invalid length.
[   71.958458][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.245'.
[   71.962198][ T6444] dummy0: entered promiscuous mode
[   71.965082][ T6444] bridge0: port 3(dummy0) entered blocking state
[   71.967578][ T6444] bridge0: port 3(dummy0) entered disabled state
[   71.970633][ T6444] dummy0: entered allmulticast mode
[   71.973970][ T6444] bridge0: port 3(dummy0) entered blocking state
[   71.976165][ T6444] bridge0: port 3(dummy0) entered forwarding state
[   71.996915][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[   72.000053][ T6446] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   72.002740][ T6446] netlink: 92 bytes leftover after parsing attributes in process `syz.1.244'.
[   72.052632][ T6452] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   72.108437][ T6456] netlink: 'syz.2.250': attribute type 30 has an invalid length.
[   72.499743][ T6473] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.747508][ T6485] ip6tnl1: entered promiscuous mode
[   72.750095][ T6485] ip6tnl1: entered allmulticast mode
[   72.754069][ T6485] team0: Device ip6tnl1 is of different type
[   72.877063][ T6491] vxcan1: entered allmulticast mode
[   72.885475][ T6491] vxcan1: left allmulticast mode
[   72.956265][ T6499] raw_sendmsg: syz.0.267 forgot to set AF_INET. Fix it!
[   73.615201][ T6542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.619451][ T6542] syzkaller0: entered promiscuous mode
[   73.622464][ T6542] syzkaller0: entered allmulticast mode
[   73.639211][ T6542] tipc: Resetting bearer <eth:syzkaller0>
[   73.646568][ T6541] tipc: Resetting bearer <eth:syzkaller0>
[   73.657633][ T6541] tipc: Disabling bearer <eth:syzkaller0>
[   73.666587][ T6546] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   73.669854][ T6546] netlink: 'syz.0.293': attribute type 11 has an invalid length.
[   74.544010][ T6607] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   75.271794][ T6622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.343221][ T6622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.394720][ T6622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.495267][ T6622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.587169][ T5663] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.616079][ T5663] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.629165][ T5663] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.658390][ T5663] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.700093][ T6631] netlink: zone id is out of range
[   75.702400][ T6631] netlink: zone id is out of range
[   75.715824][ T6631] netlink: set zone limit has 4 unknown bytes
[   75.744978][ T6634] __nla_validate_parse: 8 callbacks suppressed
[   75.744994][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'.
[   75.758803][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'.
[   75.863927][ T6644] netlink: 244 bytes leftover after parsing attributes in process `syz.2.335'.
[   75.981113][ T6654] tipc: Started in network mode
[   75.983329][ T6654] tipc: Node identity fed3e3a30fbc, cluster identity 4711
[   75.986533][ T6654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.991249][ T6654] syzkaller0: entered promiscuous mode
[   75.993761][ T6654] syzkaller0: entered allmulticast mode
[   76.013174][ T6654] tipc: Resetting bearer <eth:syzkaller0>
[   76.015094][ T6654] syzkaller0: tun_net_xmit 90
[   76.020379][ T6651] tipc: Resetting bearer <eth:syzkaller0>
[   76.035253][ T6651] tipc: Disabling bearer <eth:syzkaller0>
[   76.138178][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'.
[   76.175261][ T6666] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   76.178625][ T6666] team0: Device ipvlan2 is already an upper device of the team interface
[   76.204176][ T6672] netlink: 'syz.2.349': attribute type 13 has an invalid length.
[   76.323581][ T6680] batadv_slave_1: entered promiscuous mode
[   76.343103][ T6679] batadv_slave_1: left promiscuous mode
[   76.597937][ T6699] netlink: 'syz.0.362': attribute type 15 has an invalid length.
[   76.770876][ T6713] IPv6: addrconf: prefix option has invalid lifetime
[   76.776480][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'.
[   76.823046][ T6707] hsr_slave_1 (unregistering): left promiscuous mode
[   76.887781][ T6717] netlink: 'syz.2.370': attribute type 11 has an invalid length.
[   76.892332][ T6717] netlink: 140 bytes leftover after parsing attributes in process `syz.2.370'.
[   77.605955][ T6763] netlink: 'syz.1.390': attribute type 21 has an invalid length.
[   77.617872][ T6763] netlink: 'syz.1.390': attribute type 6 has an invalid length.
[   77.641154][ T6763] netlink: 64 bytes leftover after parsing attributes in process `syz.1.390'.
[   77.653792][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   77.666289][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   77.746050][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[   78.377488][ T6799] lo speed is unknown, defaulting to 1000
[   78.384578][ T6799] lo speed is unknown, defaulting to 1000
[   78.402564][ T6802] macsec1: entered allmulticast mode
[   78.404646][ T6802] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   78.412793][ T6802] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   78.444075][ T6799] lo speed is unknown, defaulting to 1000
[   78.452819][ T6803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.745176][ T6799] infiniband syz0: set active
[   78.747721][ T6799] infiniband syz0: added lo
[   78.758799][ T5300] lo speed is unknown, defaulting to 1000
[   78.797868][ T6799] RDS/IB: syz0: added
[   78.800873][ T6799] smc: adding ib device syz0 with port count 1
[   78.803954][ T6799] smc:    ib device syz0 port 1 has pnetid 
[   78.811358][ T6799] lo speed is unknown, defaulting to 1000
[   78.856462][ T6824] vlan0: entered promiscuous mode
[   78.867644][ T5300] lo speed is unknown, defaulting to 1000
[   79.028473][ T6799] lo speed is unknown, defaulting to 1000
[   79.218868][ T6799] lo speed is unknown, defaulting to 1000
[   79.333210][ T6852] team_slave_0: entered promiscuous mode
[   79.335322][ T6852] team_slave_1: entered promiscuous mode
[   79.348861][ T6852] vlan2: entered promiscuous mode
[   79.350878][ T6852] team0: entered promiscuous mode
[   79.419508][ T6799] syz.2.407 (6799) used greatest stack depth: 19296 bytes left
[   79.509679][ T6860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.529318][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv1
[   79.534889][ T6865] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   79.538938][ T6865] team0: Failed to send options change via netlink (err -105)
[   79.547163][ T6865] team0: Port device batadv1 added
[   79.616531][ T6860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.708133][ T6860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.773873][ T6860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.908832][ T5862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.919103][ T5862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.931999][ T5862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.955893][ T5862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.816597][ T6939] netlink: 'syz.1.464': attribute type 4 has an invalid length.
[   82.133206][ T6963] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   82.136359][ T6963] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   82.139136][ T6963] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   82.254895][ T6973] batadv0: entered promiscuous mode
[   82.259064][ T6973] macvtap1: entered promiscuous mode
[   82.259150][ T6975] openvswitch: netlink: IP tunnel dst address not specified
[   82.264872][ T6973] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   82.286949][ T6973] batadv0: left promiscuous mode
[   82.790593][ T7010] netlink: 'syz.0.495': attribute type 8 has an invalid length.
[   83.012033][ T7030] netlink: 'syz.0.505': attribute type 18 has an invalid length.
[   83.289412][ T7045] __nla_validate_parse: 5 callbacks suppressed
[   83.289426][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[   83.301234][ T7045] team1 (uninitialized): Failed to send options change via netlink (err -105)
[   83.312745][ T7045] team1: entered promiscuous mode
[   83.314467][ T7045] team1: entered allmulticast mode
[   83.332740][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[   83.404904][ T7055] bridge_slave_0: left allmulticast mode
[   83.407186][ T7055] bridge_slave_0: left promiscuous mode
[   83.410435][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.417405][ T7055] bridge_slave_1: left allmulticast mode
[   83.422287][ T7055] bridge_slave_1: left promiscuous mode
[   83.425495][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.432545][ T7055] bond0: (slave bond_slave_0): Releasing backup interface
[   83.436470][ T7055] bond0: (slave bond_slave_1): Releasing backup interface
[   83.442672][ T7055] team0: Port device team_slave_0 removed
[   83.446034][ T7055] team0: Port device team_slave_1 removed
[   83.448731][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.454571][ T7055] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.473863][ T7062] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.519'.
[   83.474370][ T7055] team0: Mode changed to "activebackup"
[   83.634935][ T7077] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'.
[   83.793713][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[   84.097932][ T7105] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   84.547851][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   85.002938][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'.
[   85.185850][ T7157] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   85.242503][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'.
[   85.398641][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'.
[   85.488376][ T7177] netlink: 270 bytes leftover after parsing attributes in process `syz.2.569'.
[   85.854090][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'.
[   85.888612][ T7202] syzkaller0: entered promiscuous mode
[   85.904679][ T7202] syzkaller0: entered allmulticast mode
[   86.011065][ T7215] sctp: [Deprecated]: syz.1.587 (pid 7215) Use of struct sctp_assoc_value in delayed_ack socket option.
[   86.011065][ T7215] Use struct sctp_sack_info instead
[   86.674346][   T24] cfg80211: failed to load regulatory.db
[   87.029245][ T7251] openvswitch: netlink: IP tunnel TTL not specified.
[   87.252815][ T7271] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   87.273122][ T7275] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   87.417591][ T7291] netlink: 'syz.1.623': attribute type 322 has an invalid length.
[   87.448730][   T24] lo speed is unknown, defaulting to 1000
[   87.658736][ T7317] gretap0: entered promiscuous mode
[   87.664099][ T7317] vlan2: entered promiscuous mode
[   88.058783][ T7349] Bluetooth: MGMT ver 1.23
[   88.162871][ T7361] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[   88.191084][ T7363] lo speed is unknown, defaulting to 1000
[   88.878191][ T7413] dvmrp0: entered allmulticast mode
[   89.117458][ T7436] __nla_validate_parse: 3 callbacks suppressed
[   89.117473][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   89.126188][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[   89.339535][ T7453] netlink: 732 bytes leftover after parsing attributes in process `syz.2.697'.
[   89.548168][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.558956][ T7461] bond0: (slave rose0): Enslaving as an active interface with an up link
[   90.064689][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[   90.106107][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[   90.300525][ T7518] netlink: 'syz.0.717': attribute type 1 has an invalid length.
[   90.303097][ T7518] netlink: 232 bytes leftover after parsing attributes in process `syz.0.717'.
[   90.308470][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'.
[   90.556879][ T7543] vxcan3: entered allmulticast mode
[   90.801880][ T7568] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   90.922845][ T7580] netlink: del zone limit has 8 unknown bytes
[   91.052294][ T7593] lo speed is unknown, defaulting to 1000
[   91.054380][ T7593] lo speed is unknown, defaulting to 1000
[   91.057433][ T7593] lo speed is unknown, defaulting to 1000
[   91.071735][ T7593] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   91.079156][ T7593] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.118565][ T7593] lo speed is unknown, defaulting to 1000
[   91.122924][ T7593] lo speed is unknown, defaulting to 1000
[   91.125701][ T7593] lo speed is unknown, defaulting to 1000
[   91.182376][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[   91.186109][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'.
[   91.189619][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.758'.
[   91.470290][ T7630] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   91.555226][ T7641] netlink: 'syz.1.777': attribute type 4 has an invalid length.
[   91.559018][ T7641] netlink: 'syz.1.777': attribute type 4 has an invalid length.
[   91.564511][  T970] lo speed is unknown, defaulting to 1000
[   91.566961][  T970] syz1: Port: 1 Link ACTIVE
[   91.924330][ T7669] netlink: 'syz.1.789': attribute type 1 has an invalid length.
[   92.263374][ T7690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.585745][ T7704] lo speed is unknown, defaulting to 1000
[   92.649784][ T7708] netlink: 'syz.1.806': attribute type 15 has an invalid length.
[   92.755208][ T7704] lo speed is unknown, defaulting to 1000
[   92.818246][ T7709] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   92.829245][ T7709] bridge_slave_0: left allmulticast mode
[   92.831341][ T7709] bridge_slave_0: left promiscuous mode
[   92.833370][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.857162][ T7709] bridge_slave_1: left allmulticast mode
[   92.859556][ T7709] bridge_slave_1: left promiscuous mode
[   92.863043][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.868701][ T7709] bond0: (slave bond_slave_0): Releasing backup interface
[   92.877577][ T7709] bond0: (slave bond_slave_1): Releasing backup interface
[   92.884289][ T7709] team_slave_0: left promiscuous mode
[   92.891208][ T7709] team0: Port device team_slave_0 removed
[   92.897861][ T7709] team_slave_1: left promiscuous mode
[   92.913348][ T7709] team0: Port device team_slave_1 removed
[   92.916759][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.929535][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.933987][ T7709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.936726][ T7709] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.119455][ T7717] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[   93.145732][ T7717] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.162237][ T7717] bond1: (slave gretap1): making interface the new active one
[   93.166754][ T7717] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   93.329814][ T7733] pim6reg1: entered promiscuous mode
[   93.336402][ T7733] pim6reg1: entered allmulticast mode
[   93.494341][ T7743] syzkaller0: MTU too low for tipc bearer
[   93.496405][ T7743] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.592352][ T7758] sctp: [Deprecated]: syz.2.825 (pid 7758) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.592352][ T7758] Use struct sctp_sack_info instead
[   93.609742][ T7753] netlink: 'syz.1.823': attribute type 12 has an invalid length.
[   93.636844][ T7760] netlink: 'syz.2.827': attribute type 1 has an invalid length.
[   93.639447][ T7760] netlink: 'syz.2.827': attribute type 2 has an invalid length.
[   93.924831][ T7781] lo speed is unknown, defaulting to 1000
[   93.978761][ T7785] syzkaller1: tun_chr_ioctl cmd 1074025673
[   94.103434][ T7781] lo speed is unknown, defaulting to 1000
[   94.243944][ T7802] __nla_validate_parse: 11 callbacks suppressed
[   94.243960][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'.
[   94.317157][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.835'.
[   95.146383][ T7867] tipc: Started in network mode
[   95.148564][ T7867] tipc: Node identity 1eadd18b435d, cluster identity 4711
[   95.155443][ T7867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.159384][ T7867] syzkaller0: entered promiscuous mode
[   95.162730][ T7867] syzkaller0: entered allmulticast mode
[   95.177946][ T7867] tipc: Resetting bearer <eth:syzkaller0>
[   95.182858][ T7866] tipc: Resetting bearer <eth:syzkaller0>
[   95.191144][ T7866] tipc: Disabling bearer <eth:syzkaller0>
[   95.324353][ T7871] "syz.0.875" (7871) uses obsolete ecb(arc4) skcipher
[   95.492741][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'.
[   95.496515][ T7887] dummy0: left allmulticast mode
[   95.498322][ T7887] dummy0: left promiscuous mode
[   95.500598][ T7887] bridge0: port 3(dummy0) entered disabled state
[   95.505690][ T7887] bridge_slave_1: left allmulticast mode
[   95.508334][ T7887] bridge_slave_1: left promiscuous mode
[   95.513212][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.524626][ T7887] bridge_slave_0: left allmulticast mode
[   95.527344][ T7887] bridge_slave_0: left promiscuous mode
[   95.530574][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.768803][ T7901] syzkaller1: tun_chr_ioctl cmd 1074025677
[   95.772331][ T7901] syzkaller1: linktype set to 6
[   96.040522][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[   96.083517][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.899'.
[   96.134205][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.164170][ T7934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.168155][ T7934] syzkaller0: entered promiscuous mode
[   96.170879][ T7934] syzkaller0: entered allmulticast mode
[   96.187684][ T7934] tipc: Resetting bearer <eth:syzkaller0>
[   96.205365][ T7933] tipc: Resetting bearer <eth:syzkaller0>
[   96.216496][ T7933] tipc: Disabling bearer <eth:syzkaller0>
[   96.276110][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.908'.
[   96.287766][ T7944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.908'.
[   96.316659][ T7951] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[   96.319786][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'.
[   96.476444][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[   96.589470][ T7988] netlink: 704 bytes leftover after parsing attributes in process `syz.1.931'.
[   96.880498][ T8021] syz_tun: entered allmulticast mode
[   96.885106][ T8020] syz_tun: left allmulticast mode
[   96.894834][ T8022] netlink: 'syz.0.942': attribute type 1 has an invalid length.
[   96.897418][ T8022] netlink: 'syz.0.942': attribute type 3 has an invalid length.
[   97.556462][ T8064] ieee802154 phy0 wpan0: encryption failed: -22
[   97.821219][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   98.695572][ T8104] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[   99.626146][ T8147] netlink: 'syz.1.994': attribute type 1 has an invalid length.
[   99.664224][ T8149] __nla_validate_parse: 5 callbacks suppressed
[   99.664239][ T8149] netlink: 72 bytes leftover after parsing attributes in process `syz.1.995'.
[   99.745671][ T8153] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[   99.749152][ T8153] netlink: 'syz.1.997': attribute type 2 has an invalid length.
[   99.786615][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[   99.790502][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'.
[  100.032537][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'.
[  100.039759][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'.
[  100.219728][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'.
[  100.348251][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'.
[  100.354170][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'.
[  100.649650][ T8245] ieee802154 phy0 wpan0: encryption failed: -22
[  100.747204][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'.
[  100.946159][ T8262] netlink: 'syz.1.1046': attribute type 1 has an invalid length.
[  100.948793][ T8262] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1046'.
[  100.952225][ T8262] NCSI netlink: No device for ifindex 813332851
[  101.658147][ T8309] netlink: 'syz.1.1069': attribute type 16 has an invalid length.
[  101.667685][ T8309] netlink: 'syz.1.1069': attribute type 1 has an invalid length.
[  101.677837][ T8309] netlink: 'syz.1.1069': attribute type 2 has an invalid length.
[  101.945407][ T8340] syz_tun: entered allmulticast mode
[  101.953019][ T8339] syz_tun: left allmulticast mode
[  102.736780][ T8362] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.742458][ T8362] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.177393][ T8393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.264067][ T8401] syzkaller1: entered promiscuous mode
[  103.266493][ T8401] syzkaller1: entered allmulticast mode
[  103.406029][ T8409] lo speed is unknown, defaulting to 1000
[  103.948168][ T8436] chnl_net:caif_netlink_parms(): no params data found
[  104.039902][ T5840] Bluetooth: hci2: command tx timeout
[  104.949303][ T8544] __nla_validate_parse: 9 callbacks suppressed
[  104.949313][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'.
[  104.956452][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'.
[  105.008771][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1183'.
[  105.535589][ T8595] tipc: Cannot configure node identity twice
[  106.164544][ T8662] netlink: 'syz.0.1205': attribute type 15 has an invalid length.
[  106.167933][ T8662] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1205'.
[  106.726328][ T8693] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1219'.
[  106.829264][ T8701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.836910][ T8701] syzkaller0: entered promiscuous mode
[  106.839236][ T8701] syzkaller0: entered allmulticast mode
[  106.880650][ T8701] tipc: Resetting bearer <eth:syzkaller0>
[  106.890755][ T8699] tipc: Resetting bearer <eth:syzkaller0>
[  106.912068][ T8699] tipc: Disabling bearer <eth:syzkaller0>
[  106.990588][ T8719] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1233'.
[  107.023529][ T5884] IPVS: starting estimator thread 0...
[  107.031977][ T8723] ieee802154 phy0 wpan0: encryption failed: -22
[  107.034328][ T8723] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1235'.
[  107.099677][ T8730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1236'.
[  107.123079][ T8724] IPVS: using max 78 ests per chain, 187200 per kthread
[  107.152596][ T8735] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  107.165718][ T8735] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.186261][ T8735] bond2: (slave ip6erspan0): making interface the new active one
[  107.192078][ T8735] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  107.662362][ T8755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.823944][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  107.877299][ T8787] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  107.880927][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'.
[  107.921354][ T8789] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  107.925550][ T8789] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  108.000949][ T8795] netlink: 'syz.1.1267': attribute type 1 has an invalid length.
[  108.003796][ T8795] netlink: 'syz.1.1267': attribute type 4 has an invalid length.
[  108.129713][ T8813] netlink: 'syz.2.1276': attribute type 1 has an invalid length.
[  108.152156][ T8813] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.178862][ T8813] 8021q: adding VLAN 0 to HW filter on device bond2
[  108.183176][ T8813] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  108.188936][ T8813] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  108.493558][ T8846] openvswitch: netlink: IPv4 tun info is not correct
[  109.078667][ T8914] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  109.093195][ T8911] lo speed is unknown, defaulting to 1000
[  109.158549][ T8918] erspan0: entered promiscuous mode
[  109.166404][ T8918] erspan0: left promiscuous mode
[  110.801323][ T9011] __nla_validate_parse: 4 callbacks suppressed
[  110.801333][ T9011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'.
[  111.033177][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1375'.
[  111.082474][ T9034] syz.2.1376: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  111.089196][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.2.1376 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  111.089216][ T9034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.089225][ T9034] Call Trace:
[  111.089230][ T9034]  <TASK>
[  111.089237][ T9034]  dump_stack_lvl+0x189/0x250
[  111.089256][ T9034]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  111.089303][ T9034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.089317][ T9034]  ? __pfx__printk+0x10/0x10
[  111.089353][ T9034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.089378][ T9034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  111.089400][ T9034]  warn_alloc+0x214/0x310
[  111.089421][ T9034]  ? stack_depot_save_flags+0x40/0x900
[  111.089436][ T9034]  ? __pfx_warn_alloc+0x10/0x10
[  111.089457][ T9034]  ? kasan_save_track+0x4f/0x80
[  111.089472][ T9034]  ? xskq_create+0x56/0x170
[  111.089489][ T9034]  ? xsk_init_queue+0xb0/0x110
[  111.089504][ T9034]  ? xsk_setsockopt+0x4dc/0x8d0
[  111.089520][ T9034]  ? do_sock_setsockopt+0x17c/0x1b0
[  111.089533][ T9034]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  111.089546][ T9034]  ? do_syscall_64+0xfa/0x3b0
[  111.089558][ T9034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.089576][ T9034]  __vmalloc_node_range_noprof+0x125/0x12f0
[  111.089616][ T9034]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.089639][ T9034]  ? __kasan_kmalloc+0x93/0xb0
[  111.089657][ T9034]  vmalloc_user_noprof+0xad/0xf0
[  111.089674][ T9034]  ? xskq_create+0xbf/0x170
[  111.089692][ T9034]  xskq_create+0xbf/0x170
[  111.089712][ T9034]  xsk_init_queue+0xb0/0x110
[  111.089730][ T9034]  xsk_setsockopt+0x4dc/0x8d0
[  111.089748][ T9034]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.089766][ T9034]  ? __pfx_aa_sk_perm+0x10/0x10
[  111.089789][ T9034]  ? aa_sock_opt_perm+0x74/0x110
[  111.089802][ T9034]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  111.089814][ T9034]  ? __pfx_xsk_setsockopt+0x10/0x10
[  111.089831][ T9034]  do_sock_setsockopt+0x17c/0x1b0
[  111.089870][ T9034]  __x64_sys_setsockopt+0x13f/0x1b0
[  111.089889][ T9034]  do_syscall_64+0xfa/0x3b0
[  111.089901][ T9034]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.089912][ T9034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.089923][ T9034]  ? exc_page_fault+0x9f/0xf0
[  111.089942][ T9034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.089954][ T9034] RIP: 0033:0x7fd6a6d8e9a9
[  111.089965][ T9034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.089975][ T9034] RSP: 002b:00007fd6a7c5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.089989][ T9034] RAX: ffffffffffffffda RBX: 00007fd6a6fb5fa0 RCX: 00007fd6a6d8e9a9
[  111.089997][ T9034] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  111.090006][ T9034] RBP: 00007fd6a6e10d69 R08: 0000000000000004 R09: 0000000000000000
[  111.090014][ T9034] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.090021][ T9034] R13: 0000000000000000 R14: 00007fd6a6fb5fa0 R15: 00007ffe58830748
[  111.090042][ T9034]  </TASK>
[  111.259957][ T9034] Mem-Info:
[  111.261540][ T9034] active_anon:5096 inactive_anon:0 isolated_anon:0
[  111.261540][ T9034]  active_file:975 inactive_file:38226 isolated_file:0
[  111.261540][ T9034]  unevictable:1768 dirty:392 writeback:0
[  111.261540][ T9034]  slab_reclaimable:9698 slab_unreclaimable:54695
[  111.261540][ T9034]  mapped:18195 shmem:2445 pagetables:981
[  111.261540][ T9034]  sec_pagetables:0 bounce:0
[  111.261540][ T9034]  kernel_misc_reclaimable:0
[  111.261540][ T9034]  free:285971 free_pcp:25927 free_cma:0
[  111.279034][ T9034] Node 0 active_anon:11220kB inactive_anon:0kB active_file:3104kB inactive_file:144220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27872kB dirty:1328kB writeback:0kB shmem:4716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5048kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.291054][ T9034] Node 1 active_anon:9164kB inactive_anon:0kB active_file:796kB inactive_file:8684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44908kB dirty:240kB writeback:0kB shmem:5064kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6840kB pagetables:1900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.307764][ T9034] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.325103][ T9034] lowmem_reserve[]: 0 812 812 812 812
[  111.328963][ T9034] Node 0 DMA32 free:279744kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11288kB inactive_anon:0kB active_file:3104kB inactive_file:144220kB unevictable:3536kB writepending:1328kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:44920kB local_pcp:30424kB free_cma:0kB
[  111.342080][ T9034] lowmem_reserve[]: 0 0 0 0 0
[  111.343879][ T9034] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.355050][ T9034] lowmem_reserve[]: 0 0 854 854 854
[  111.357993][ T9034] Node 1 Normal free:389052kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9300kB inactive_anon:0kB active_file:796kB inactive_file:8684kB unevictable:3536kB writepending:240kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:59112kB local_pcp:36824kB free_cma:0kB
[  111.377330][ T9034] lowmem_reserve[]: 0 0 0 0 0
[  111.379472][ T9034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.385470][ T9034] Node 0 DMA32: 1574*4kB (UME) 545*8kB (UM) 172*16kB (UM) 235*32kB (UME) 112*64kB (UM) 56*128kB (UM) 22*256kB (UM) 16*512kB (UME) 11*1024kB (ME) 3*2048kB (ME) 52*4096kB (M) = 279488kB
[  111.392751][ T9034] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  111.399220][ T9034] Node 1 Normal: 771*4kB (U) 546*8kB (UME) 346*16kB (U) 195*32kB (UME) 28*64kB (UE) 19*128kB (UM) 14*256kB (UM) 11*512kB (UM) 6*1024kB (UME) 3*2048kB (M) 84*4096kB (M) = 389020kB
[  111.406636][ T9034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.410933][ T9034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.414283][ T9034] 41646 total pagecache pages
[  111.415914][ T9034] 0 pages in swap cache
[  111.417538][ T9034] Free swap  = 124996kB
[  111.419351][ T9034] Total swap = 124996kB
[  111.421556][ T9034] 786301 pages RAM
[  111.423018][ T9034] 0 pages HighMem/MovableOnly
[  111.425053][ T9034] 241056 pages reserved
[  111.426614][ T9034] 0 pages cma reserved
[  111.685402][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  111.696964][ T9058] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  111.702358][ T9058] macvtap1: entered allmulticast mode
[  111.704817][ T9058] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  112.005391][ T9073] netlink: 'syz.1.1394': attribute type 2 has an invalid length.
[  112.477940][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1399'.
[  112.482216][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'.
[  112.486073][ T9084] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  112.918887][ T9111] syz_tun: entered promiscuous mode
[  112.924996][ T9111] macsec1: entered allmulticast mode
[  112.927077][ T9111] syz_tun: entered allmulticast mode
[  112.935715][ T9111] syz_tun: left allmulticast mode
[  112.940153][ T9111] syz_tun: left promiscuous mode
[  113.156365][ T9135] tipc: Cannot configure node identity twice
[  113.158930][ T9135] tipc: Cannot configure node identity twice
[  113.203547][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'.
[  113.206919][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'.
[  113.420582][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.423937][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.534200][ T9182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.537038][ T9182] syzkaller0: entered promiscuous mode
[  113.538928][ T9182] syzkaller0: entered allmulticast mode
[  113.544233][ T9182] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  113.556357][ T9182] tipc: Resetting bearer <eth:syzkaller0>
[  113.560782][ T9181] tipc: Resetting bearer <eth:syzkaller0>
[  113.574392][ T9181] tipc: Disabling bearer <eth:syzkaller0>
[  114.152187][ T9222] netlink: 410 bytes leftover after parsing attributes in process `syz.2.1464'.
[  114.212623][ T9226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.216250][ T9226] syzkaller0: entered promiscuous mode
[  114.218672][ T9226] syzkaller0: entered allmulticast mode
[  114.246830][ T9226] tipc: Resetting bearer <eth:syzkaller0>
[  114.259123][ T9225] tipc: Resetting bearer <eth:syzkaller0>
[  114.272214][ T9225] tipc: Disabling bearer <eth:syzkaller0>
[  114.859036][ T9262] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1483'.
[  115.596763][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'.
[  115.872692][ T9338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.283160][ T9366] __nla_validate_parse: 1 callbacks suppressed
[  116.283174][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'.
[  116.289631][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1532'.
[  117.237804][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  117.475770][ T9407] netlink: 'syz.1.1549': attribute type 12 has an invalid length.
[  117.584674][ T9416] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1550'.
[  117.600422][ T9409] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1550'.
[  118.511543][ T9440] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1564'.
[  118.514969][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1564'.
[  118.545817][ T9444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'.
[  118.584040][ T9448] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1567'.
[  118.617684][ T9453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  118.754741][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1574'.
[  119.093271][ T9495] netlink: 'syz.0.1584': attribute type 83 has an invalid length.
[  119.517974][ T9542] netlink: 'syz.2.1601': attribute type 4 has an invalid length.
[  119.783847][ T9570] netlink: 'syz.0.1614': attribute type 1 has an invalid length.
[  120.409410][ T9632] netlink: 'syz.0.1645': attribute type 13 has an invalid length.
[  120.769756][ T5863] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.773936][ T5863] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.777724][ T5863] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.787865][ T5863] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.901897][ T9653] lo speed is unknown, defaulting to 1000
[  120.942057][ T9656] netlink: 'syz.2.1653': attribute type 29 has an invalid length.
[  120.962068][ T9658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.967719][ T9656] netlink: 'syz.2.1653': attribute type 29 has an invalid length.
[  121.050774][ T9662] netlink: 'syz.0.1656': attribute type 13 has an invalid length.
[  121.054133][ T9662] netlink: 'syz.0.1656': attribute type 17 has an invalid length.
[  121.167364][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.174802][ T9662] 8021q: adding VLAN 0 to HW filter on device team0
[  121.184970][ T9662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.212463][ T9670] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  121.258736][ T9668] lo speed is unknown, defaulting to 1000
[  121.290473][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.757546][ T9707] gtp0: entered promiscuous mode
[  121.759365][ T9707] gtp0: entered allmulticast mode
[  121.813431][ T9714] __nla_validate_parse: 7 callbacks suppressed
[  121.813440][ T9714] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1678'.
[  121.827317][ T9714] bond0 (unregistering): Released all slaves
[  121.867394][ T9716] macsec0: entered promiscuous mode
[  121.939350][ T9722] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1681'.
[  122.036380][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.039541][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.071531][ T9729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.315841][ T9746] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1693'.
[  122.318917][ T9746] netlink: 'syz.1.1693': attribute type 1 has an invalid length.
[  122.364472][ T9750] @: renamed from bond_slave_0
[  122.599175][ T9763] netlink: 'syz.1.1701': attribute type 1 has an invalid length.
[  122.702858][ T9774] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1707'.
[  123.522656][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'.
[  123.534008][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'.
[  123.558597][ T9823] lo speed is unknown, defaulting to 1000
[  123.601712][ T9826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.607812][ T9826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.740950][ T9828] lo speed is unknown, defaulting to 1000
[  125.044485][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'.
[  125.048354][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'.
[  125.052668][ T9912] netlink: 'syz.2.1762': attribute type 5 has an invalid length.
[  125.055928][ T9912] netlink: 'syz.2.1762': attribute type 6 has an invalid length.
[  125.267254][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'.
[  125.749103][ T9947] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1777'.
[  127.198749][T10011] netlink: 'syz.1.1804': attribute type 21 has an invalid length.
[  127.201562][T10011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1804'.
[  127.553651][T10050] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1821'.
[  127.558065][T10050] batadv_slave_1: entered promiscuous mode
[  127.960795][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'.
[  127.982715][T10065] macvlan4: entered promiscuous mode
[  127.984540][T10065] macvlan4: entered allmulticast mode
[  127.986826][T10065] bond3: (slave macvlan4): Opening slave failed
[  128.653420][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'.
[  128.781190][T10115] netlink: 'syz.1.1847': attribute type 1 has an invalid length.
[  128.783992][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'.
[  129.991913][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1861'.
[  130.127105][T10157] netlink: 'syz.1.1866': attribute type 1 has an invalid length.
[  130.192762][T10157] bond0: entered promiscuous mode
[  130.198685][T10157] bond0: entered allmulticast mode
[  130.208168][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'.
[  130.220780][T10157] bridge1: the hash_elasticity option has been deprecated and is always 16
[  130.524895][T10195] syzkaller1: entered promiscuous mode
[  130.527063][T10195] syzkaller1: entered allmulticast mode
[  130.545874][T10195] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  131.580501][T10255] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1910'.
[  132.437760][T10318] infiniband syz2: set down
[  132.441723][T10318] infiniband syz2: added team_slave_0
[  132.480074][T10318] RDS/IB: syz2: added
[  132.483336][T10318] smc: adding ib device syz2 with port count 1
[  132.486174][T10318] smc:    ib device syz2 port 1 has pnetid 
[  132.742566][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.064662][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'.
[  133.496610][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'.
[  133.535802][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'.
[  133.683979][T10355] siw: device registration error -23
[  134.376762][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'.
[  135.050112][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1982'.
[  135.157826][T10433] sctp: [Deprecated]: syz.1.1991 (pid 10433) Use of int in max_burst socket option.
[  135.157826][T10433] Use struct sctp_assoc_value instead
[  135.211688][T10441] lo speed is unknown, defaulting to 1000
[  135.213880][T10441] lo speed is unknown, defaulting to 1000
[  135.217097][T10441] lo speed is unknown, defaulting to 1000
[  135.234164][T10441] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  135.272048][T10441] lo speed is unknown, defaulting to 1000
[  135.279609][T10441] lo speed is unknown, defaulting to 1000
[  135.285336][T10441] lo speed is unknown, defaulting to 1000
[  135.296400][T10444] ipvlan2: entered promiscuous mode
[  135.406733][T10451] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  135.476783][T10451] netlink: 'syz.1.1999': attribute type 10 has an invalid length.
[  135.495520][T10451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.499710][T10451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.807343][T10466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2005'.
[  135.874179][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2007'.
[  136.100459][T10484] netlink: 'syz.2.2014': attribute type 1 has an invalid length.
[  136.297198][T10493] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2017'.
[  136.421555][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'.
[  136.496721][T10512] netlink: 424 bytes leftover after parsing attributes in process `syz.2.2027'.
[  136.565926][T10517] siw: device registration error -23
[  136.682936][T10531] netlink: 'syz.1.2037': attribute type 21 has an invalid length.
[  136.687944][T10531] netlink: 'syz.1.2037': attribute type 5 has an invalid length.
[  136.776153][T10535] lo speed is unknown, defaulting to 1000
[  137.112336][T10535] lo speed is unknown, defaulting to 1000
[  137.512809][T10569] block nbd0: server does not support multiple connections per device.
[  137.529109][T10569] block nbd0: shutting down sockets
[  137.723402][T10583] block nbd2: not configured, cannot reconfigure
[  138.112684][T10596] __nla_validate_parse: 11 callbacks suppressed
[  138.112699][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'.
[  138.281698][T10604] bond0: (slave bond_slave_0): Releasing backup interface
[  138.298173][T10604] bond0: (slave bond_slave_1): Releasing backup interface
[  138.312775][T10604] team0: Port device team_slave_0 removed
[  138.323557][T10604] team0: Port device team_slave_1 removed
[  138.326113][T10604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.328946][T10604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.347381][T10604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.353682][T10604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.368334][T10604] team0: Port device batadv1 removed
[  138.375911][T10604] bond1: (slave gretap1): Releasing active interface
[  138.537594][T10611] netlink: 'syz.0.2072': attribute type 4 has an invalid length.
[  138.555950][T10611] netlink: 'syz.0.2072': attribute type 4 has an invalid length.
[  138.709480][T10627] netlink: 'syz.0.2077': attribute type 1 has an invalid length.
[  138.812371][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2082'.
[  138.816293][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2082'.
[  138.822948][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2082'.
[  138.962267][T10647] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  139.514531][T10706] hsr0: entered allmulticast mode
[  139.516778][T10706] hsr_slave_0: entered allmulticast mode
[  139.519186][T10706] hsr_slave_1: entered allmulticast mode
[  139.537189][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'.
[  139.547845][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'.
[  139.553070][T10708] netlink: 'syz.2.2113': attribute type 18 has an invalid length.
[  139.930678][T10742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'.
[  140.365817][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'.
[  140.710379][T10789] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2147'.
[  141.104246][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2159'.
[  141.135913][T10821] syzkaller0: entered promiscuous mode
[  141.138319][T10821] syzkaller0: entered allmulticast mode
[  142.422425][T10892] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.664446][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  142.673851][T10917] netlink: 'syz.1.2204': attribute type 15 has an invalid length.
[  142.789589][T10927] tipc: Can't bind to reserved service type 2
[  143.157351][T10947] netlink: 'syz.0.2216': attribute type 13 has an invalid length.
[  143.161014][T10947] netlink: 'syz.0.2216': attribute type 17 has an invalid length.
[  143.188471][T10947] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.192739][T10947] 8021q: adding VLAN 0 to HW filter on device team0
[  143.199682][T10947] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.272488][T10947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.276831][T10947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.281646][T10947] hsr0: left allmulticast mode
[  143.283942][T10947] hsr_slave_0: left allmulticast mode
[  143.286224][T10947] hsr_slave_1: left allmulticast mode
[  143.314047][T10947] veth1_vlan: left promiscuous mode
[  143.321805][T10947] vlan0: left promiscuous mode
[  143.327285][T10947] veth1_vlan: entered promiscuous mode
[  143.338179][T10947] veth1_macvtap: left promiscuous mode
[  143.342845][T10947] veth0_macvtap: left promiscuous mode
[  143.346740][T10947] veth0_macvtap: entered promiscuous mode
[  143.359062][T10947] veth1_macvtap: entered promiscuous mode
[  143.487838][T10947] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.507057][T10947] A link change request failed with some changes committed already. Interface macvlan3 may have been left with an inconsistent configuration, please check.
[  143.518634][T10955] __nla_validate_parse: 3 callbacks suppressed
[  143.518649][T10955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2219'.
[  143.557825][  T970] syz2: Port: 1 Link ACTIVE
[  143.560360][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.567683][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.584619][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.598572][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.606864][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  143.834832][T10961] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2221'.
[  144.181878][T10986] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  144.185442][T10986] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2232'.
[  144.189449][T10986] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  144.312371][T10993] tc_dump_action: action bad kind
[  144.436613][T10999] netlink: 'syz.2.2239': attribute type 4 has an invalid length.
[  144.962260][T11042] netlink: 'syz.0.2257': attribute type 16 has an invalid length.
[  144.964966][T11042] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2257'.
[  145.524028][T11075] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2272'.
[  145.527922][T11075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  145.574122][T11078] delete_channel: no stack
[  145.613851][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2276'.
[  145.639102][T11083] nbd: socks must be embedded in a SOCK_ITEM attr
[  145.644054][ T9491] block nbd64: NBD_DISCONNECT
[  145.651611][T11085] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.887411][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'.
[  145.943078][T11104] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2285'.
[  146.104674][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.438147][T11147] tap0: tun_chr_ioctl cmd 1074025677
[  146.442352][T11147] tap0: linktype set to 0
[  146.650884][T11164] veth1_to_bond: entered allmulticast mode
[  146.657636][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'.
[  146.696459][T11164] veth1_to_bond (unregistering): left allmulticast mode
[  146.708330][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2316'.
[  146.785605][T11176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.928395][T11182] team0: Mode changed to "activebackup"
[  146.933301][T11182] vlan0: entered promiscuous mode
[  146.958479][T11182] team0: Port device vlan0 added
[  146.967370][T11182] tipc: Enabled bearer <eth:team0>, priority 0
[  147.110623][T11209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.113152][T11209] syzkaller0: entered promiscuous mode
[  147.115015][T11209] syzkaller0: entered allmulticast mode
[  147.128214][T11209] tipc: Resetting bearer <eth:syzkaller0>
[  147.132202][T11207] tipc: Resetting bearer <eth:syzkaller0>
[  147.139396][T11207] tipc: Disabling bearer <eth:syzkaller0>
[  147.541417][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  148.223929][  T373] tipc: Node number set to 1402765973
[  148.610675][T11290] __nla_validate_parse: 3 callbacks suppressed
[  148.610690][T11290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2369'.
[  148.701740][T11296] ipvlan3: entered promiscuous mode
[  149.968223][T11343] ieee802154 phy0 wpan0: encryption failed: -22
[  149.971746][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'.
[  149.983708][T11344] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  149.988839][T11344] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  150.194025][T11357] dvmrp8: entered allmulticast mode
[  150.219475][T11349] dvmrp8: left allmulticast mode
[  150.419618][T11370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.435062][T11369] tipc: Disabling bearer <eth:syzkaller0>
[  151.275729][T11439] netlink: 'syz.1.2438': attribute type 9 has an invalid length.
[  151.279265][T11439] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.2438'.
[  151.355095][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2441'.
Connection to localhost closed by remote host.
[  155.781253][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!

VM DIAGNOSIS:
23:13:56  Registers:
info registers vcpu 0

CPU#0
RAX=f2bbd95c8d063000 RBX=ffffffff81976a18 RCX=f2bbd95c8d063000 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f925c4e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=61986ff33fb8be00 RBX=ffffffff81976a18 RCX=61986ff33fb8be00 RDX=0000000000000001
RSI=ffffffff8d999894 RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b6d24f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f02353bd440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
