last executing test programs:

1.13837692s ago: executing program 0 (id=412):
unshare(0x24020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, 0x0, 0x0)

1.060220986s ago: executing program 0 (id=413):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0xb31}, 0x1c)
getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="c13c06001b14bf262000128008000100736974001400028008000100e00000020500050081"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

988.272234ms ago: executing program 0 (id=417):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0)

897.97893ms ago: executing program 0 (id=419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000020605000000000000000000fe1500070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001c000000004080008400000005c05000500020000000500010006"], 0x6c}}, 0x8000)

830.089124ms ago: executing program 0 (id=423):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000080)="05000000010001", 0x7)
close(0x4)

759.653182ms ago: executing program 0 (id=424):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

596.548594ms ago: executing program 1 (id=429):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

519.464862ms ago: executing program 1 (id=431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

518.901378ms ago: executing program 1 (id=432):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(0x0, r1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x18, r2, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000080)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0)

442.289781ms ago: executing program 1 (id=434):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

304.290659ms ago: executing program 1 (id=437):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010300000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x38}}, 0x0)

190.71413ms ago: executing program 1 (id=440):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x0, @private1, 0x80000009}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1}, &(0x7f0000000180)=0x8)

190.583259ms ago: executing program 2 (id=441):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

117.834092ms ago: executing program 2 (id=442):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000022, 0x0)

60.732738ms ago: executing program 2 (id=443):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x4, 0x4)

60.561452ms ago: executing program 2 (id=444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000104050000000000000000000a0000000a0002009e6fb3df16"], 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)

507.372µs ago: executing program 2 (id=445):
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)
listen(r1, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

0s ago: executing program 2 (id=446):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000000c00008008"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

0s ago: executing program 2 (id=447):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50294' (ED25519) to the list of known hosts.
syzkaller login: [   55.409089][ T5547] cgroup: Unknown subsys name 'net'
[   55.495648][ T5547] cgroup: Unknown subsys name 'cpuset'
[   55.500282][ T5547] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.220055][ T5547] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.691145][ T5000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.694979][ T5000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.698788][ T5000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.703645][ T5000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.707053][ T5000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.786963][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.791557][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.795171][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.802775][ T5659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.808631][ T5659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.812158][ T5659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.816913][ T5659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.821370][ T5659] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.828859][ T5667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.839870][ T5667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.599084][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.602816][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.605125][ T5658] bridge_slave_0: entered allmulticast mode
[   70.608294][ T5658] bridge_slave_0: entered promiscuous mode
[   70.636145][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.638803][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.641673][ T5658] bridge_slave_1: entered allmulticast mode
[   70.645272][ T5658] bridge_slave_1: entered promiscuous mode
[   70.714472][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.729390][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.782106][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.784892][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.787315][ T5664] bridge_slave_0: entered allmulticast mode
[   70.790495][ T5664] bridge_slave_0: entered promiscuous mode
[   70.795599][ T5658] team0: Port device team_slave_0 added
[   70.807214][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.810094][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.812801][ T5664] bridge_slave_1: entered allmulticast mode
[   70.815848][ T5664] bridge_slave_1: entered promiscuous mode
[   70.820655][ T5658] team0: Port device team_slave_1 added
[   70.886448][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.890649][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.892754][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.901939][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.913388][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.917391][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.919502][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.927600][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.977665][ T5664] team0: Port device team_slave_0 added
[   70.980883][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.983123][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.985818][ T5662] bridge_slave_0: entered allmulticast mode
[   70.989771][ T5662] bridge_slave_0: entered promiscuous mode
[   70.996144][ T5664] team0: Port device team_slave_1 added
[   71.010509][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.013185][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.015871][ T5662] bridge_slave_1: entered allmulticast mode
[   71.019478][ T5662] bridge_slave_1: entered promiscuous mode
[   71.058519][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.061624][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.071122][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.098461][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.101439][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.111736][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.122831][ T5658] hsr_slave_0: entered promiscuous mode
[   71.126114][ T5658] hsr_slave_1: entered promiscuous mode
[   71.132426][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.144374][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.203840][ T5662] team0: Port device team_slave_0 added
[   71.233117][ T5662] team0: Port device team_slave_1 added
[   71.241169][ T5664] hsr_slave_0: entered promiscuous mode
[   71.244155][ T5664] hsr_slave_1: entered promiscuous mode
[   71.247005][ T5664] debugfs: 'hsr0' already exists in 'hsr'
[   71.249297][ T5664] Cannot create hsr debugfs directory
[   71.294738][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.297401][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.306754][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.319148][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.321640][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.330002][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.437732][ T5662] hsr_slave_0: entered promiscuous mode
[   71.442094][ T5662] hsr_slave_1: entered promiscuous mode
[   71.444830][ T5662] debugfs: 'hsr0' already exists in 'hsr'
[   71.446990][ T5662] Cannot create hsr debugfs directory
[   71.619288][ T5658] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.634185][ T5658] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.651367][ T5658] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.665315][ T5658] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.719135][ T5664] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.727517][ T5664] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.737919][ T5664] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.747009][ T5664] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.761284][   T55] Bluetooth: hci0: command tx timeout
[   71.818918][ T5662] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.830761][ T5662] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.839606][ T5662] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.840010][   T55] Bluetooth: hci1: command tx timeout
[   71.854709][ T5662] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.903314][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.920791][   T55] Bluetooth: hci2: command tx timeout
[   71.948737][ T5658] 8021q: adding VLAN 0 to HW filter on device team0
[   71.967808][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.970734][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.993038][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.995831][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.018575][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.059372][ T5664] 8021q: adding VLAN 0 to HW filter on device team0
[   72.089048][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.091886][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.100093][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.105435][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.107888][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.124878][ T5662] 8021q: adding VLAN 0 to HW filter on device team0
[   72.166892][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.169757][ T4372] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.184979][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.187743][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.445392][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.503816][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.519529][ T5664] veth0_vlan: entered promiscuous mode
[   72.561776][ T5664] veth1_vlan: entered promiscuous mode
[   72.585626][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.593681][ T5658] veth0_vlan: entered promiscuous mode
[   72.603645][ T5658] veth1_vlan: entered promiscuous mode
[   72.638335][ T5664] veth0_macvtap: entered promiscuous mode
[   72.646251][ T5658] veth0_macvtap: entered promiscuous mode
[   72.663674][ T5658] veth1_macvtap: entered promiscuous mode
[   72.677236][ T5664] veth1_macvtap: entered promiscuous mode
[   72.702334][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.705033][ T5662] veth0_vlan: entered promiscuous mode
[   72.719421][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.728041][ T5662] veth1_vlan: entered promiscuous mode
[   72.734813][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.750795][ T5714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.760213][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.765264][ T5714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.773647][ T5714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.785858][ T5714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.794062][ T5714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.798219][ T5714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.804300][ T5714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.807755][ T5714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.872292][ T5662] veth0_macvtap: entered promiscuous mode
[   72.901441][ T5662] veth1_macvtap: entered promiscuous mode
[   72.913805][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.920219][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.967991][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.968124][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.971406][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.981203][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.986381][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.007401][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.033171][ T5714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.046991][ T5658] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.058419][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.068900][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.076190][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.088716][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.109932][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.218066][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.233127][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.308779][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.314453][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.842665][   T55] Bluetooth: hci0: command tx timeout
[   73.922141][   T55] Bluetooth: hci1: command tx timeout
[   74.000095][   T55] Bluetooth: hci2: command tx timeout
[   74.584638][ T5838] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET)
[   74.585502][ T5839] netlink: 'syz.1.59': attribute type 4 has an invalid length.
[   74.610376][ T5839] netlink: 'syz.1.59': attribute type 4 has an invalid length.
[   75.431532][ T5889] syzkaller0: entered promiscuous mode
[   75.433359][ T5889] syzkaller0: entered allmulticast mode
[   75.920458][   T55] Bluetooth: hci0: command tx timeout
[   76.000440][   T55] Bluetooth: hci1: command tx timeout
[   76.089776][   T55] Bluetooth: hci2: command tx timeout
[   76.324934][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'.
[   76.458378][ T5935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'.
[   76.847858][ T5960] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   76.848366][ T5958] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.850800][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.105'.
[   76.910673][ T5958] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.968831][ T5958] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.010852][ T5968] SET target dimension over the limit!
[   77.032665][ T5958] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.043206][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   77.045846][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   77.146163][ T5714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.171794][ T5714] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.202422][ T5714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.226568][ T5714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.548986][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   77.934278][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   77.997944][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888112484400: rx timeout, send abort
[   78.001676][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888112484400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   78.010671][   T55] Bluetooth: hci0: command tx timeout
[   78.090972][   T55] Bluetooth: hci1: command tx timeout
[   78.171980][   T55] Bluetooth: hci2: command tx timeout
[   78.708670][ T6039] Zero length message leads to an empty skb
[   79.430641][ T6079] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[   79.501283][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'.
[   79.774160][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[   79.777552][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[   79.789106][ T6102] netlink: 'syz.0.171': attribute type 3 has an invalid length.
[   80.209007][ T6135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'.
[   80.697292][ T6162] syzkaller1: entered promiscuous mode
[   80.699529][ T6162] syzkaller1: entered allmulticast mode
[   81.129298][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[   81.367208][ T6194] bridge2: entered promiscuous mode
[   81.368860][ T6194] bridge2: entered allmulticast mode
[   81.376099][ T6194] team0: Port device bridge2 added
[   81.384624][ T6194] bridge0: port 3(team0) entered blocking state
[   81.387091][ T6194] bridge0: port 3(team0) entered disabled state
[   81.389234][ T6194] team0: entered allmulticast mode
[   81.392754][ T6194] team_slave_0: entered allmulticast mode
[   81.395855][ T6194] team_slave_1: entered allmulticast mode
[   81.404080][ T6194] team0: entered promiscuous mode
[   81.405869][ T6194] team_slave_0: entered promiscuous mode
[   81.407665][ T6194] team_slave_1: entered promiscuous mode
[   81.411006][ T6194] bridge0: port 3(team0) entered blocking state
[   81.413739][ T6194] bridge0: port 3(team0) entered forwarding state
[   81.422697][ T6198] netlink: 632 bytes leftover after parsing attributes in process `syz.0.216'.
[   81.526681][ T6207] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   81.635140][ T6216] pim6reg1: entered promiscuous mode
[   81.637209][ T6216] pim6reg1: entered allmulticast mode
[   82.293325][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'.
[   82.332879][ T6262] Bluetooth: MGMT ver 1.23
[   82.595384][ T6273] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   82.605571][ T6273] bond1 (unregistering): Released all slaves
[   82.789548][ T6285] warning: `syz.2.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.810022][ T6286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   83.031302][ T6286] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[   83.095812][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.256'.
[   83.197229][ T6299] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check.
[   83.804914][ T6321] netlink: 'syz.0.265': attribute type 4 has an invalid length.
[   83.831740][ T6321] netlink: 'syz.0.265': attribute type 4 has an invalid length.
[   83.842385][ T6327] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   84.234348][ T6341] netlink: 10 bytes leftover after parsing attributes in process `syz.1.275'.
[   84.366189][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'.
[   84.671372][ T6363] ip6t_srh: unknown srh invflags 4000
[   84.861481][ T6375] netlink: 'syz.2.289': attribute type 3 has an invalid length.
[   84.945738][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'.
[   85.138893][ T6393] netlink: 47 bytes leftover after parsing attributes in process `syz.2.295'.
[   85.766403][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'.
[   85.769286][ T6415] netlink: 'syz.2.306': attribute type 7 has an invalid length.
[   85.777452][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'.
[   86.366467][ T6445] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[   86.385205][ T6448] netlink: 'syz.1.315': attribute type 8 has an invalid length.
[   86.539090][ T6457] xt_limit: Overflow, try lower: 324382443/0
[   86.978499][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz.1.326'.
[   86.982357][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'.
[   87.204803][ T6488] netlink: 'syz.2.334': attribute type 1 has an invalid length.
[   87.210292][ T6488] netlink: 'syz.2.334': attribute type 2 has an invalid length.
[   87.759851][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'.
[   87.903562][    T9] IPVS: starting estimator thread 0...
[   87.961231][ T6532] netlink: 'syz.2.349': attribute type 1 has an invalid length.
[   88.005030][ T6532] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   88.008660][ T6532] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   88.026566][ T6530] IPVS: using max 62 ests per chain, 148800 per kthread
[   88.112811][ T6538] bond1: (slave gretap1): making interface the new active one
[   88.117677][ T6538] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   88.185295][ T6532] macvlan2: entered promiscuous mode
[   88.187425][ T6532] macvlan2: entered allmulticast mode
[   88.209439][ T6532] bond1: entered promiscuous mode
[   88.211585][ T6532] gretap1: entered promiscuous mode
[   88.215324][ T6532] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.221070][ T6532] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   88.225359][ T6532] bond1: left promiscuous mode
[   88.226960][ T6532] gretap1: left promiscuous mode
[   88.617241][ T6569] netlink: 'syz.0.365': attribute type 4 has an invalid length.
[   88.620826][ T6569] netlink: 17 bytes leftover after parsing attributes in process `syz.0.365'.
[   88.637394][ T6569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.365'.
[   88.642755][ T6564] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   88.648488][ T6564] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   88.718320][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'.
[   88.723007][ T6575] : renamed from team_slave_1 (while UP)
[   88.808782][ T6582] netlink: 'syz.0.371': attribute type 1 has an invalid length.
[   88.858787][ T6582] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   88.874592][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   88.879473][ T6588] xt_TCPMSS: Only works on TCP SYN packets
[   88.891696][ T6582] macvlan2: entered promiscuous mode
[   88.893383][ T6582] macvlan2: entered allmulticast mode
[   88.896506][ T6582] bond1: entered promiscuous mode
[   88.898440][ T6582] bridge1: entered promiscuous mode
[   88.903310][ T6582] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.922750][ T6582] bond1: left promiscuous mode
[   88.924426][ T6582] bridge1: left promiscuous mode
[   89.042465][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'.
[   89.084457][ T6596] xt_CT: No such helper "pptp"
[   89.161631][ T6588] bridge_slave_1: left allmulticast mode
[   89.163895][ T6588] bridge_slave_1: left promiscuous mode
[   89.166851][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.199068][ T6588] bridge_slave_0: left allmulticast mode
[   89.203064][ T6588] bridge_slave_0: left promiscuous mode
[   89.205191][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.317455][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[   90.341968][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'.
[   90.453631][ T6634] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   90.477167][ T6634] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.504429][ T6634] bond2: (slave veth3): Enslaving as an active interface with a down link
[   90.533721][ T6634] bond2: (slave veth5): Enslaving as an active interface with a down link
[   90.540547][ T6634] bond2: entered allmulticast mode
[   90.706176][ T6654] netlink: 'syz.2.402': attribute type 2 has an invalid length.
[   90.708488][ T6654] netlink: 'syz.2.402': attribute type 2 has an invalid length.
[   90.752858][ T6658] sctp: [Deprecated]: syz.2.404 (pid 6658) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.752858][ T6658] Use struct sctp_sack_info instead
[   91.186235][ T6695] Bluetooth: MGMT ver 1.23
[   91.691201][ T6725] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   92.065662][ T6751] ------------[ cut here ]------------
[   92.067902][ T6751] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xeffffbf0, 0xd00000d0] s64=[0xeffffbf0, 0xd00000d0] u32=[0xeffffbf0, 0xd00000d0] s32=[0xeffffbf0, 0xfffffff0] var_off=(0xc0000030, 0x3fffffc0)
[   92.077031][ T6751] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#0: syz.2.447/6751
[   92.081030][ T6751] Modules linked in:
[   92.082621][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.2.447 Not tainted syzkaller #0 PREEMPT(full) 
[   92.086573][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.090713][ T6751] RIP: 0010:reg_bounds_sanity_check+0x3c5/0xbf0
[   92.093295][ T6751] Code: 48 8b 4c 24 68 4c 8b 44 24 60 4c 8b 4c 24 50 41 ff 34 24 41 57 55 41 55 ff b4 24 e8 00 00 00 ff 74 24 70 ff b4 24 88 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[   92.101036][ T6751] RSP: 0018:ffffc90003a96ef0 EFLAGS: 00010246
[   92.103417][ T6751] RAX: dffffc0000000000 RBX: 1ffff1102e70b42e RCX: 00000000effffbf0
[   92.106485][ T6751] RDX: ffffffff8b9451a0 RSI: ffffffff8b94db00 RDI: ffffffff8fca9bf0
[   92.109536][ T6751] RBP: 00000000fffffff0 R08: 00000000d00000d0 R09: 00000000effffbf0
[   92.112813][ T6751] R10: dffffc0000000000 R11: 00000000ffffffc0 R12: ffff88817385a170
[   92.116524][ T6751] R13: 00000000effffbf0 R14: 1ffff1102e70b42d R15: 00000000c0000030
[   92.119423][ T6751] FS:  00007fcb2d70d6c0(0000) GS:ffff88818e448000(0000) knlGS:0000000000000000
[   92.122893][ T6751] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.125423][ T6751] CR2: 00007fcb2c84f270 CR3: 00000001ba050000 CR4: 00000000000006f0
[   92.128511][ T6751] Call Trace:
[   92.130010][ T6751]  <TASK>
[   92.131236][ T6751]  reg_set_min_max+0x264/0x340
[   92.133098][ T6751]  check_cond_jmp_op+0x1e1a/0x3230
[   92.135142][ T6751]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   92.137182][ T6751]  ? push_jmp_history+0x1e3/0x690
[   92.139178][ T6751]  ? bpf_reset_stack_write_marks+0x1f2/0x260
[   92.141786][ T6751]  do_check+0x5f36/0xebf0
[   92.143586][ T6751]  ? __pfx_do_check+0x10/0x10
[   92.145508][ T6751]  ? __asan_memset+0x22/0x50
[   92.147364][ T6751]  ? init_func_state+0x1abf/0x2900
[   92.149398][ T6751]  do_check_common+0x1a20/0x2600
[   92.151651][ T6751]  bpf_check+0x1712c/0x1c5c0
[   92.153583][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.155343][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.156960][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.158851][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.160802][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.162758][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.164849][ T6751]  ? __pfx_bpf_check+0x10/0x10
[   92.166705][ T6751]  ? seqcount_lockdep_reader_access+0x129/0x1e0
[   92.169071][ T6751]  ? lockdep_hardirqs_on+0x97/0x140
[   92.171191][ T6751]  ? ktime_get_with_offset+0x93/0x2a0
[   92.173966][ T6751]  ? seqcount_lockdep_reader_access+0x18f/0x1e0
[   92.176531][ T6751]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   92.179028][ T6751]  ? __asan_memset+0x22/0x50
[   92.181453][ T6751]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   92.183529][ T6751]  ? security_bpf_prog_load+0x125/0x3c0
[   92.185655][ T6751]  bpf_prog_load+0x14b9/0x1b20
[   92.187530][ T6751]  ? __pfx_bpf_prog_load+0x10/0x10
[   92.189546][ T6751]  ? bpf_lsm_bpf+0x9/0x20
[   92.191371][ T6751]  ? security_bpf+0x7e/0x2d0
[   92.193215][ T6751]  __sys_bpf+0x570/0x920
[   92.194923][ T6751]  ? __pfx___sys_bpf+0x10/0x10
[   92.196854][ T6751]  __x64_sys_bpf+0x7c/0x90
[   92.198670][ T6751]  do_syscall_64+0xf0/0xf80
[   92.200719][ T6751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.203288][ T6751]  ? exc_page_fault+0xa7/0xf0
[   92.205242][ T6751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.207582][ T6751] RIP: 0033:0x7fcb2c79ce59
[   92.209376][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.216867][ T6751] RSP: 002b:00007fcb2d70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   92.219802][ T6751] RAX: ffffffffffffffda RBX: 00007fcb2ca15fa0 RCX: 00007fcb2c79ce59
[   92.223031][ T6751] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[   92.226221][ T6751] RBP: 00007fcb2c832e6f R08: 0000000000000000 R09: 0000000000000000
[   92.229362][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.232463][ T6751] R13: 00007fcb2ca16038 R14: 00007fcb2ca15fa0 R15: 00007ffc271726b8
[   92.235414][ T6751]  </TASK>
[   92.236665][ T6751] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   92.239092][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.2.447 Not tainted syzkaller #0 PREEMPT(full) 
[   92.241947][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.245778][ T6751] Call Trace:
[   92.247059][ T6751]  <TASK>
[   92.248200][ T6751]  dump_stack_lvl+0x91/0x280
[   92.250006][ T6751]  ? __asan_memcpy+0x40/0x70
[   92.251784][ T6751]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.253726][ T6751]  ? __pfx__printk+0x10/0x10
[   92.255266][ T6751]  vpanic+0x249/0x6f0
[   92.256543][ T6751]  ? __pfx__printk+0x10/0x10
[   92.257971][ T6751]  ? __pfx_vpanic+0x10/0x10
[   92.259619][ T6751]  ? is_bpf_text_address+0x292/0x2b0
[   92.261505][ T6751]  ? is_bpf_text_address+0x26/0x2b0
[   92.263218][ T6751]  panic+0xc5/0xd0
[   92.264476][ T6751]  ? __pfx_panic+0x10/0x10
[   92.265938][ T6751]  __warn+0x315/0x4a0
[   92.267248][ T6751]  __report_bug+0x28e/0x530
[   92.268857][ T6751]  ? __pfx___report_bug+0x10/0x10
[   92.270313][ T6751]  ? bpf_prog_load+0x14b9/0x1b20
[   92.271849][ T6751]  report_bug_entry+0x16a/0x220
[   92.273463][ T6751]  ? reg_bounds_sanity_check+0x3c5/0xbf0
[   92.275575][ T6751]  ? reg_bounds_sanity_check+0x3ca/0xbf0
[   92.277753][ T6751]  handle_bug+0xca/0x200
[   92.279337][ T6751]  exc_invalid_op+0x1a/0x50
[   92.281059][ T6751]  asm_exc_invalid_op+0x1a/0x20
[   92.282916][ T6751] RIP: 0010:reg_bounds_sanity_check+0x3c5/0xbf0
[   92.285343][ T6751] Code: 48 8b 4c 24 68 4c 8b 44 24 60 4c 8b 4c 24 50 41 ff 34 24 41 57 55 41 55 ff b4 24 e8 00 00 00 ff 74 24 70 ff b4 24 88 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[   92.291467][ T6751] RSP: 0018:ffffc90003a96ef0 EFLAGS: 00010246
[   92.293731][ T6751] RAX: dffffc0000000000 RBX: 1ffff1102e70b42e RCX: 00000000effffbf0
[   92.296628][ T6751] RDX: ffffffff8b9451a0 RSI: ffffffff8b94db00 RDI: ffffffff8fca9bf0
[   92.299259][ T6751] RBP: 00000000fffffff0 R08: 00000000d00000d0 R09: 00000000effffbf0
[   92.302061][ T6751] R10: dffffc0000000000 R11: 00000000ffffffc0 R12: ffff88817385a170
[   92.304436][ T6751] R13: 00000000effffbf0 R14: 1ffff1102e70b42d R15: 00000000c0000030
[   92.306774][ T6751]  reg_set_min_max+0x264/0x340
[   92.308334][ T6751]  check_cond_jmp_op+0x1e1a/0x3230
[   92.309945][ T6751]  ? __pfx_check_cond_jmp_op+0x10/0x10
[   92.312058][ T6751]  ? push_jmp_history+0x1e3/0x690
[   92.313978][ T6751]  ? bpf_reset_stack_write_marks+0x1f2/0x260
[   92.315838][ T6751]  do_check+0x5f36/0xebf0
[   92.317268][ T6751]  ? __pfx_do_check+0x10/0x10
[   92.318808][ T6751]  ? __asan_memset+0x22/0x50
[   92.320289][ T6751]  ? init_func_state+0x1abf/0x2900
[   92.322307][ T6751]  do_check_common+0x1a20/0x2600
[   92.323994][ T6751]  bpf_check+0x1712c/0x1c5c0
[   92.325524][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.327301][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.329136][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.330990][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.332905][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.334863][ T6751]  ? __lock_acquire+0x683/0x2cd0
[   92.336424][ T6751]  ? __pfx_bpf_check+0x10/0x10
[   92.337939][ T6751]  ? seqcount_lockdep_reader_access+0x129/0x1e0
[   92.339852][ T6751]  ? lockdep_hardirqs_on+0x97/0x140
[   92.341371][ T6751]  ? ktime_get_with_offset+0x93/0x2a0
[   92.343009][ T6751]  ? seqcount_lockdep_reader_access+0x18f/0x1e0
[   92.344902][ T6751]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[   92.346907][ T6751]  ? __asan_memset+0x22/0x50
[   92.348301][ T6751]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[   92.349899][ T6751]  ? security_bpf_prog_load+0x125/0x3c0
[   92.351594][ T6751]  bpf_prog_load+0x14b9/0x1b20
[   92.353249][ T6751]  ? __pfx_bpf_prog_load+0x10/0x10
[   92.354943][ T6751]  ? bpf_lsm_bpf+0x9/0x20
[   92.356428][ T6751]  ? security_bpf+0x7e/0x2d0
[   92.357976][ T6751]  __sys_bpf+0x570/0x920
[   92.359521][ T6751]  ? __pfx___sys_bpf+0x10/0x10
[   92.361236][ T6751]  __x64_sys_bpf+0x7c/0x90
[   92.363027][ T6751]  do_syscall_64+0xf0/0xf80
[   92.364891][ T6751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.367341][ T6751]  ? exc_page_fault+0xa7/0xf0
[   92.369254][ T6751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.371591][ T6751] RIP: 0033:0x7fcb2c79ce59
[   92.373368][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.380751][ T6751] RSP: 002b:00007fcb2d70d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   92.383878][ T6751] RAX: ffffffffffffffda RBX: 00007fcb2ca15fa0 RCX: 00007fcb2c79ce59
[   92.386891][ T6751] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[   92.389960][ T6751] RBP: 00007fcb2c832e6f R08: 0000000000000000 R09: 0000000000000000
[   92.393030][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.396070][ T6751] R13: 00007fcb2ca16038 R14: 00007fcb2ca15fa0 R15: 00007ffc271726b8
[   92.399293][ T6751]  </TASK>
[   92.401257][ T6751] Kernel Offset: disabled
[   92.402923][ T6751] Rebooting in 86400 seconds..
