last executing test programs:

1.421772603s ago: executing program 1 (id=197):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)

1.311687818s ago: executing program 1 (id=200):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)
preadv(r1, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x6, 0x5)

1.251258446s ago: executing program 1 (id=203):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/246, 0xf6}], 0x1}, 0x40000000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010)

1.120042909s ago: executing program 1 (id=207):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94)
sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x20000002)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8)

1.119738027s ago: executing program 0 (id=208):
socket$inet6_icmp(0xa, 0x2, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4040080)
sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)

331.100627ms ago: executing program 2 (id=230):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

330.917703ms ago: executing program 2 (id=231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a91973346900"], 0x28}}, 0xc000)

330.84983ms ago: executing program 2 (id=232):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

251.949429ms ago: executing program 2 (id=233):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x4c}}, 0x20000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

251.615741ms ago: executing program 1 (id=234):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

251.503482ms ago: executing program 0 (id=235):
unshare(0x2c020400)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, 0x0, 0x50)

161.694933ms ago: executing program 2 (id=236):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)

161.541688ms ago: executing program 0 (id=237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f00000000f0"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)

161.201914ms ago: executing program 2 (id=238):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000ffffff7f000000007c0000040042800c00018006000600800a00000c0002ffb71ae63151dd31707260d48d52"], 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000002200)=""/157, 0x9d}], 0x2}, 0x4}], 0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x38c}}, 0x8001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r4, 0x4000, r4}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r4, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x44805)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg1\x00'})

75.998649ms ago: executing program 0 (id=239):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@allocspi={0xf8, 0x16, 0x1, 0x4, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0xfb, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d3, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x3}, {0x9}, {0x0, 0x0, 0x2}, 0x70bd26, 0x10000002, 0x2}, 0x4, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000004a00012227bd7000fcdbdf1f0a"], 0x1c}}, 0x0)

75.873814ms ago: executing program 0 (id=240):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000d80)=0x55, 0x4)

75.680844ms ago: executing program 1 (id=241):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)

0s ago: executing program 0 (id=242):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44052' (ED25519) to the list of known hosts.
syzkaller login: [   48.898415][ T5755] cgroup: Unknown subsys name 'net'
[   49.029823][ T5755] cgroup: Unknown subsys name 'cpuset'
[   49.037265][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.626995][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.283503][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.295638][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.298756][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.302292][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.305683][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.328233][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.331330][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.334148][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.338203][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.341873][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.369549][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.373239][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.377254][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.380767][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.383529][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.634629][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.684156][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.740960][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   55.850688][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.853645][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.857926][ T5823] bridge_slave_0: entered allmulticast mode
[   55.861820][ T5823] bridge_slave_0: entered promiscuous mode
[   55.903171][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.907062][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.910110][ T5823] bridge_slave_1: entered allmulticast mode
[   55.913916][ T5823] bridge_slave_1: entered promiscuous mode
[   55.918246][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.921258][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.924693][ T5827] bridge_slave_0: entered allmulticast mode
[   55.930937][ T5827] bridge_slave_0: entered promiscuous mode
[   55.935232][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.938232][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.941276][ T5830] bridge_slave_0: entered allmulticast mode
[   55.946144][ T5830] bridge_slave_0: entered promiscuous mode
[   55.961616][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.964669][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.967933][ T5827] bridge_slave_1: entered allmulticast mode
[   55.971529][ T5827] bridge_slave_1: entered promiscuous mode
[   55.987201][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.990200][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.993240][ T5830] bridge_slave_1: entered allmulticast mode
[   55.997416][ T5830] bridge_slave_1: entered promiscuous mode
[   56.030881][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.062115][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.070152][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.088962][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.095933][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.109455][ T5823] team0: Port device team_slave_0 added
[   56.112929][ T5823] team0: Port device team_slave_1 added
[   56.126534][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.156545][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.158716][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.167489][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.172604][ T5827] team0: Port device team_slave_0 added
[   56.183468][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.185913][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.194046][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.202505][ T5827] team0: Port device team_slave_1 added
[   56.207230][ T5830] team0: Port device team_slave_0 added
[   56.210887][ T5830] team0: Port device team_slave_1 added
[   56.258881][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.261803][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.270631][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.275588][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.277890][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.286963][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.293961][ T5823] hsr_slave_0: entered promiscuous mode
[   56.296764][ T5823] hsr_slave_1: entered promiscuous mode
[   56.299548][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.301715][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.311774][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.316685][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.319018][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.329880][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.410515][ T5830] hsr_slave_0: entered promiscuous mode
[   56.413515][ T5830] hsr_slave_1: entered promiscuous mode
[   56.418383][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.421585][ T5830] Cannot create hsr debugfs directory
[   56.430050][ T5827] hsr_slave_0: entered promiscuous mode
[   56.432389][ T5827] hsr_slave_1: entered promiscuous mode
[   56.435082][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.437441][ T5827] Cannot create hsr debugfs directory
[   56.676217][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.683709][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.689457][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.704618][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.748960][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.758710][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.769527][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.788200][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.862715][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.868911][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.875686][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.884288][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.000722][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.029220][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.046282][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   57.053763][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.069601][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.088723][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.091962][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.098604][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.101685][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.114244][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   57.121720][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.124095][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.140372][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.142745][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.166541][  T322] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.169595][  T322] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.208554][  T322] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.211705][  T322] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.315597][   T55] Bluetooth: hci0: command tx timeout
[   57.384155][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.395361][   T55] Bluetooth: hci2: command tx timeout
[   57.398026][   T55] Bluetooth: hci1: command tx timeout
[   57.472273][ T5823] veth0_vlan: entered promiscuous mode
[   57.489812][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.497474][ T5823] veth1_vlan: entered promiscuous mode
[   57.529853][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.578895][ T5823] veth0_macvtap: entered promiscuous mode
[   57.581510][ T5827] veth0_vlan: entered promiscuous mode
[   57.592915][ T5823] veth1_macvtap: entered promiscuous mode
[   57.602375][ T5827] veth1_vlan: entered promiscuous mode
[   57.607496][ T5830] veth0_vlan: entered promiscuous mode
[   57.616263][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.627274][ T5830] veth1_vlan: entered promiscuous mode
[   57.632112][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.647735][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.650676][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653958][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.657862][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.666400][ T5827] veth0_macvtap: entered promiscuous mode
[   57.677545][ T5830] veth0_macvtap: entered promiscuous mode
[   57.687047][ T5827] veth1_macvtap: entered promiscuous mode
[   57.691180][ T5830] veth1_macvtap: entered promiscuous mode
[   57.716045][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.732663][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.740786][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.758889][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.762367][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.765922][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.768734][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.773867][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.786393][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.789250][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.792041][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.795798][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.805216][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.817255][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.839939][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.842704][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.933344][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.933827][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.943395][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.981378][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.984748][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.025628][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.028909][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.067016][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.073925][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.264264][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.272355][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.459585][ T5910] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   58.748216][ T5919] bridge0: port 3(gretap0) entered blocking state
[   58.750446][ T5919] bridge0: port 3(gretap0) entered disabled state
[   58.752748][ T5919] gretap0: entered allmulticast mode
[   58.756543][ T5919] gretap0: entered promiscuous mode
[   58.759530][ T5919] bridge0: port 3(gretap0) entered blocking state
[   58.761817][ T5919] bridge0: port 3(gretap0) entered forwarding state
[   59.484886][ T5825] Bluetooth: hci1: command tx timeout
[   59.487087][ T5825] Bluetooth: hci2: command tx timeout
[   59.890036][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   60.159768][ T5975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.38'.
[   60.256755][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.292421][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.303870][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.339663][ T5987] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   60.344169][ T5987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'.
[   60.580096][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.590416][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.713319][ T5988] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.717600][ T5988] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.721238][ T5988] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.727666][ T5988] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.064070][ T6026] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   61.072557][ T6026] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   61.139499][ T6041] netlink: 'syz.0.68': attribute type 1 has an invalid length.
[   61.199167][ T6045] gretap1: entered promiscuous mode
[   61.556092][   T55] Bluetooth: hci2: command tx timeout
[   61.558229][ T5825] Bluetooth: hci1: command tx timeout
[   61.578473][ T6071] netlink: 92 bytes leftover after parsing attributes in process `syz.0.80'.
[   61.746896][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.87'.
[   61.767457][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   61.771797][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   61.779548][ T6086] netlink: 'syz.1.87': attribute type 1 has an invalid length.
[   61.782140][ T6086] netlink: 224 bytes leftover after parsing attributes in process `syz.1.87'.
[   62.071884][ T6110] bond1: entered promiscuous mode
[   62.073848][ T6110] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.082036][ T6113] netlink: 'syz.2.99': attribute type 10 has an invalid length.
[   62.194592][ T6124] netlink: 'syz.0.104': attribute type 1 has an invalid length.
[   62.249392][ T6128] warning: `syz.0.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.634996][   T55] Bluetooth: hci2: command tx timeout
[   63.635156][ T5825] Bluetooth: hci1: command tx timeout
[   63.659683][ T6147] syz.0.110: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[   63.667906][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.0.110 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   63.667925][ T6147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.667933][ T6147] Call Trace:
[   63.667938][ T6147]  <TASK>
[   63.667944][ T6147]  dump_stack_lvl+0x189/0x250
[   63.667967][ T6147]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.667983][ T6147]  ? __pfx__printk+0x10/0x10
[   63.668001][ T6147]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   63.668019][ T6147]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   63.668037][ T6147]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   63.668056][ T6147]  warn_alloc+0x214/0x310
[   63.668078][ T6147]  ? __pfx_warn_alloc+0x10/0x10
[   63.668103][ T6147]  ? __get_vm_area_node+0x28f/0x300
[   63.668120][ T6147]  ? veth_dev_init+0x363/0x570
[   63.668143][ T6147]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   63.668180][ T6147]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   63.668195][ T6147]  ? __kasan_kmalloc_large+0x1c/0xa0
[   63.668239][ T6147]  ? rcu_is_watching+0x15/0xb0
[   63.668255][ T6147]  ? veth_dev_init+0x363/0x570
[   63.668271][ T6147]  ? veth_dev_init+0x363/0x570
[   63.668285][ T6147]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   63.668300][ T6147]  ? veth_dev_init+0x363/0x570
[   63.668322][ T6147]  veth_dev_init+0x363/0x570
[   63.668349][ T6147]  register_netdevice+0x6bf/0x1ae0
[   63.668375][ T6147]  ? snprintf+0xda/0x120
[   63.668393][ T6147]  ? __pfx_register_netdevice+0x10/0x10
[   63.668410][ T6147]  ? __pfx_snprintf+0x10/0x10
[   63.668426][ T6147]  ? __asan_memset+0x22/0x50
[   63.668439][ T6147]  ? dev_addr_mod+0x2ce/0x3d0
[   63.668459][ T6147]  veth_newlink+0x5cc/0xa50
[   63.668479][ T6147]  ? __pfx_veth_newlink+0x10/0x10
[   63.668499][ T6147]  ? __pfx_css_rstat_updated+0x10/0x10
[   63.668558][ T6147]  ? validate_linkmsg+0x765/0x950
[   63.668585][ T6147]  ? __pfx_veth_newlink+0x10/0x10
[   63.668604][ T6147]  rtnl_newlink_create+0x310/0xb00
[   63.668624][ T6147]  ? __pfx_aa_get_newest_label+0x10/0x10
[   63.668647][ T6147]  ? __pfx_rtnl_newlink_create+0x10/0x10
[   63.668660][ T6147]  ? rtnl_newlink+0x8db/0x1c70
[   63.668676][ T6147]  ? __pfx___mutex_lock+0x10/0x10
[   63.668696][ T6147]  ? ns_capable+0x8a/0xf0
[   63.668714][ T6147]  rtnl_newlink+0x16d6/0x1c70
[   63.668740][ T6147]  ? __pfx_rtnl_newlink+0x10/0x10
[   63.668752][ T6147]  ? sched_balance_rq+0x19a0/0x57a0
[   63.668771][ T6147]  ? __lock_acquire+0xab9/0xd20
[   63.668831][ T6147]  ? __lock_acquire+0xab9/0xd20
[   63.668862][ T6147]  ? __pfx_rtnl_newlink+0x10/0x10
[   63.668875][ T6147]  rtnetlink_rcv_msg+0x7cf/0xb70
[   63.668891][ T6147]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   63.668904][ T6147]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   63.668930][ T6147]  netlink_rcv_skb+0x208/0x470
[   63.668947][ T6147]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   63.668962][ T6147]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   63.668987][ T6147]  ? netlink_deliver_tap+0x2e/0x1b0
[   63.669002][ T6147]  ? netlink_deliver_tap+0x2e/0x1b0
[   63.669021][ T6147]  netlink_unicast+0x75b/0x8d0
[   63.669044][ T6147]  netlink_sendmsg+0x805/0xb30
[   63.669066][ T6147]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.669083][ T6147]  ? aa_sock_msg_perm+0x94/0x160
[   63.669103][ T6147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   63.669114][ T6147]  ? __pfx_netlink_sendmsg+0x10/0x10
[   63.669130][ T6147]  __sock_sendmsg+0x21c/0x270
[   63.669146][ T6147]  ____sys_sendmsg+0x505/0x830
[   63.669167][ T6147]  ? __pfx_____sys_sendmsg+0x10/0x10
[   63.669190][ T6147]  ? import_iovec+0x74/0xa0
[   63.669234][ T6147]  ___sys_sendmsg+0x21f/0x2a0
[   63.669255][ T6147]  ? __pfx____sys_sendmsg+0x10/0x10
[   63.669296][ T6147]  ? __fget_files+0x2a/0x420
[   63.669314][ T6147]  ? __fget_files+0x3a0/0x420
[   63.669344][ T6147]  __x64_sys_sendmsg+0x19b/0x260
[   63.669362][ T6147]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   63.669392][ T6147]  ? do_syscall_64+0xbe/0x3b0
[   63.669408][ T6147]  do_syscall_64+0xfa/0x3b0
[   63.669420][ T6147]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.669431][ T6147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.669443][ T6147]  ? exc_page_fault+0x9f/0xf0
[   63.669463][ T6147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.669475][ T6147] RIP: 0033:0x7fa13278e929
[   63.669489][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.669499][ T6147] RSP: 002b:00007fa1336df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   63.669513][ T6147] RAX: ffffffffffffffda RBX: 00007fa1329b5fa0 RCX: 00007fa13278e929
[   63.669522][ T6147] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003
[   63.669529][ T6147] RBP: 00007fa132810b39 R08: 0000000000000000 R09: 0000000000000000
[   63.669537][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.669544][ T6147] R13: 0000000000000000 R14: 00007fa1329b5fa0 R15: 00007ffd1c69d5f8
[   63.669565][ T6147]  </TASK>
[   63.669570][ T6147] Mem-Info:
[   63.868028][ T6147] active_anon:5449 inactive_anon:0 isolated_anon:0
[   63.868028][ T6147]  active_file:868 inactive_file:38204 isolated_file:0
[   63.868028][ T6147]  unevictable:1768 dirty:1456 writeback:0
[   63.868028][ T6147]  slab_reclaimable:8987 slab_unreclaimable:54697
[   63.868028][ T6147]  mapped:18119 shmem:2435 pagetables:908
[   63.868028][ T6147]  sec_pagetables:0 bounce:0
[   63.868028][ T6147]  kernel_misc_reclaimable:0
[   63.868028][ T6147]  free:300135 free_pcp:20553 free_cma:0
[   63.886075][ T6147] Node 0 active_anon:12716kB inactive_anon:0kB active_file:2636kB inactive_file:9248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37764kB dirty:5560kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2768kB pagetables:1952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   63.899450][ T6147] Node 1 active_anon:9080kB inactive_anon:0kB active_file:836kB inactive_file:143568kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34712kB dirty:264kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8508kB pagetables:1680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   63.912455][ T6147] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   63.923695][ T6147] lowmem_reserve[]: 0 812 812 812 812
[   63.926057][ T6147] Node 0 DMA32 free:419580kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12716kB inactive_anon:0kB active_file:2636kB inactive_file:9248kB unevictable:3536kB writepending:5560kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:26148kB local_pcp:5508kB free_cma:0kB
[   63.938794][ T6147] lowmem_reserve[]: 0 0 0 0 0
[   63.940836][ T6147] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   63.953000][ T6147] lowmem_reserve[]: 0 0 854 854 854
[   63.955634][ T6147] Node 1 Normal free:306792kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9080kB inactive_anon:0kB active_file:836kB inactive_file:143568kB unevictable:3536kB writepending:264kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:56272kB local_pcp:22012kB free_cma:0kB
[   63.968552][ T6147] lowmem_reserve[]: 0 0 0 0 0
[   63.970556][ T6147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   63.975888][ T6147] Node 0 DMA32: 207*4kB (M) 96*8kB (UME) 34*16kB (ME) 7*32kB (M) 7*64kB (ME) 2*128kB (UM) 1*256kB (U) 1*512kB (M) 2*1024kB (ME) 0*2048kB 101*4096kB (M) = 419580kB
[   63.982529][ T6147] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   63.989089][ T6147] Node 1 Normal: 974*4kB (UM) 300*8kB (UME) 333*16kB (UM) 329*32kB (UME) 45*64kB (UM) 29*128kB (UME) 10*256kB (UM) 8*512kB (UM) 7*1024kB (ME) 5*2048kB (UM) 62*4096kB (M) = 306760kB
[   63.996492][ T6147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   64.000375][ T6147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   64.005591][ T6147] 41507 total pagecache pages
[   64.007571][ T6147] 0 pages in swap cache
[   64.009293][ T6147] Free swap  = 124996kB
[   64.011011][ T6147] Total swap = 124996kB
[   64.012779][ T6147] 786301 pages RAM
[   64.014399][ T6147] 0 pages HighMem/MovableOnly
[   64.016490][ T6147] 241078 pages reserved
[   64.018293][ T6147] 0 pages cma reserved
[   65.004872][ T6151] __nla_validate_parse: 1 callbacks suppressed
[   65.004884][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[   65.010352][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'.
[   65.082180][ T6154] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   65.182215][ T6164] x_tables: unsorted underflow at hook 4
[   65.212545][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'.
[   65.223303][ T6167] gretap0: entered promiscuous mode
[   65.282525][ T6175] netlink: 'syz.2.124': attribute type 29 has an invalid length.
[   65.299724][ T6175] netlink: 'syz.2.124': attribute type 29 has an invalid length.
[   65.302850][ T6175] netlink: 500 bytes leftover after parsing attributes in process `syz.2.124'.
[   65.306785][ T6175] unsupported nla_type 58
[   65.346831][ T6181] netlink: 'syz.1.125': attribute type 10 has an invalid length.
[   65.385585][ T6181] team0: Port device dummy0 added
[   65.442348][ T6189] IPv6: NLM_F_CREATE should be specified when creating new route
[   65.579060][ T6198] netlink: 212 bytes leftover after parsing attributes in process `syz.1.134'.
[   65.588913][ T6198] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   65.636764][ T6202] syzkaller1: entered promiscuous mode
[   65.638561][ T6202] syzkaller1: entered allmulticast mode
[   65.743128][ T6211] netlink: 248 bytes leftover after parsing attributes in process `syz.0.140'.
[   65.827275][ T6216] xt_recent: Unsupported userspace flags (00000048)
[   66.049249][ T6230] netlink: 'syz.2.147': attribute type 11 has an invalid length.
[   66.052476][ T6230] netlink: 224 bytes leftover after parsing attributes in process `syz.2.147'.
[   66.080508][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'.
[   66.112355][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'.
[   66.212562][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'.
[   66.390800][ T6259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   66.704731][ T6255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.804686][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.843290][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.889426][ T6298] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   66.893466][ T6298] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   67.871579][ T6369] sctp: [Deprecated]: syz.2.186 (pid 6369) Use of int in max_burst socket option.
[   67.871579][ T6369] Use struct sctp_assoc_value instead
[   68.171516][ T6391] netlink: 'syz.0.194': attribute type 2 has an invalid length.
[   68.174462][ T6391] netlink: 'syz.0.194': attribute type 2 has an invalid length.
[   68.332207][ T6404] Zero length message leads to an empty skb
[   68.490361][ T6422] netlink: 'syz.0.206': attribute type 7 has an invalid length.
[   68.681018][ T6443] tipc: Enabling <ib:lo> not permitted
[   68.683061][ T6443] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   68.959951][ T6460] netlink: 'syz.2.220': attribute type 1 has an invalid length.
[   68.995891][ T6460] nbd: socks must be embedded in a SOCK_ITEM attr
[   68.999009][ T6460] block nbd0: shutting down sockets
[   69.638497][ T6496] netlink: 'syz.2.238': attribute type 13 has an invalid length.
[   69.641707][ T6496] netlink: 'syz.2.238': attribute type 17 has an invalid length.
[   69.707937][ T6496] eql: refused to change device tx_queue_len
[   69.710318][ T6496] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check.
[   69.866881][ T6521] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[   69.938069][ T6526] netlink: 'syz.0.248': attribute type 32 has an invalid length.
[   71.240013][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   81.477370][   T95] cfg80211: failed to load regulatory.db
[  132.677970][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  180.838271][ T5825] Bluetooth: hci1: command 0x0406 tx timeout
[  191.074975][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  194.117677][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.556997][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  316.996755][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
07:18:51  Registers:
info registers vcpu 0

CPU#0
RAX=66a4193202ddf300 RBX=ffffffff81975d58 RCX=66a4193202ddf300 RDX=0000000000000001
RSI=ffffffff8d996d31 RDI=ffffffff8be28fc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1dff0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563e956ca7e8 CR3=00000001107e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b55c37f0f72b7c00 RBX=ffffffff81975d58 RCX=b55c37f0f72b7c00 RDX=0000000000000001
RSI=ffffffff8d996d31 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1dff0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d1000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a0a86a6680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000028bc998 0000000000000012 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
