last executing test programs:

1.072847059s ago: executing program 0 (id=993):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x8}, &(0x7f00000000c0)=0x8)

1.072689357s ago: executing program 0 (id=994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x24}}, 0x0)

1.001959568s ago: executing program 0 (id=995):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

1.000923318s ago: executing program 0 (id=997):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

749.267477ms ago: executing program 1 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}}, 0x4020000)

749.012682ms ago: executing program 1 (id=1006):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0)

672.577873ms ago: executing program 1 (id=1007):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

613.334103ms ago: executing program 1 (id=1009):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000)

612.793626ms ago: executing program 1 (id=1011):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0)

531.824174ms ago: executing program 1 (id=1013):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff000)
socket(0xa, 0x3, 0x3a)
connect$phonet_pipe(r0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)

475.734713ms ago: executing program 2 (id=1014):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)

353.510942ms ago: executing program 2 (id=1015):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf250500000008000600", @ANYRES32=r3, @ANYBLOB="08002c0001000000080039000700000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40040)

282.762648ms ago: executing program 2 (id=1016):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

203.412454ms ago: executing program 2 (id=1017):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80)

93.959635ms ago: executing program 0 (id=1018):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000000000008000100000000001c000200010081ffffff"], 0x44}}, 0x0)

93.776052ms ago: executing program 2 (id=1019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)

244.558µs ago: executing program 0 (id=1020):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18)
unshare(0x2a020400)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

0s ago: executing program 2 (id=1021):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4112, 0x1010}], 0x1)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49856' (ED25519) to the list of known hosts.
syzkaller login: [   48.423612][ T5808] cgroup: Unknown subsys name 'net'
[   48.588848][ T5808] cgroup: Unknown subsys name 'cpuset'
[   48.593000][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.309351][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.503957][ T5835] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.752852][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.756534][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.759502][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.762504][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.765037][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.796338][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.799208][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.802419][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.807556][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.810646][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.894964][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.903689][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.906495][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.911808][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.914453][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.101228][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   61.164327][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   61.211671][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.214243][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.216804][ T5845] bridge_slave_0: entered allmulticast mode
[   61.219655][ T5845] bridge_slave_0: entered promiscuous mode
[   61.223577][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.226571][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.228772][ T5845] bridge_slave_1: entered allmulticast mode
[   61.231960][ T5845] bridge_slave_1: entered promiscuous mode
[   61.287465][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.289753][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.292193][ T5848] bridge_slave_0: entered allmulticast mode
[   61.295136][ T5848] bridge_slave_0: entered promiscuous mode
[   61.300458][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.329002][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.331564][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.333834][ T5848] bridge_slave_1: entered allmulticast mode
[   61.337726][ T5848] bridge_slave_1: entered promiscuous mode
[   61.341890][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.401465][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.407354][ T5845] team0: Port device team_slave_0 added
[   61.412200][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.416467][ T5845] team0: Port device team_slave_1 added
[   61.421685][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   61.488575][ T5848] team0: Port device team_slave_0 added
[   61.496781][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.501455][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.512018][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.518548][ T5848] team0: Port device team_slave_1 added
[   61.524662][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.527013][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.534343][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.577436][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.579779][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.589654][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.617529][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.620165][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.622423][ T5850] bridge_slave_0: entered allmulticast mode
[   61.625417][ T5850] bridge_slave_0: entered promiscuous mode
[   61.630531][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.633288][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.643349][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.653866][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.656390][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.658609][ T5850] bridge_slave_1: entered allmulticast mode
[   61.661319][ T5850] bridge_slave_1: entered promiscuous mode
[   61.692717][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.710472][ T5845] hsr_slave_0: entered promiscuous mode
[   61.713684][ T5845] hsr_slave_1: entered promiscuous mode
[   61.719059][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.784802][ T5850] team0: Port device team_slave_0 added
[   61.789748][ T5850] team0: Port device team_slave_1 added
[   61.798238][ T5848] hsr_slave_0: entered promiscuous mode
[   61.801352][ T5848] hsr_slave_1: entered promiscuous mode
[   61.804277][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   61.807813][ T5848] Cannot create hsr debugfs directory
[   61.844253][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.846631][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.854232][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.862665][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.864862][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.873249][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.941893][ T5850] hsr_slave_0: entered promiscuous mode
[   61.944316][ T5850] hsr_slave_1: entered promiscuous mode
[   61.947170][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   61.949134][ T5850] Cannot create hsr debugfs directory
[   62.128541][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.137332][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.142536][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.155330][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.189811][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.201917][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.219686][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.224110][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.267338][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.273736][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.281308][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.289773][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.337465][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.372453][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   62.391953][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.400460][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.402724][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.409015][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.411193][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.443168][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   62.450121][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.462533][ T2260] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.464814][ T2260] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.480486][ T2260] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.482782][ T2260] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.487544][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   62.502892][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.505150][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.518947][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.521559][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.621698][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.652943][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.684093][ T5845] veth0_vlan: entered promiscuous mode
[   62.695571][ T5845] veth1_vlan: entered promiscuous mode
[   62.729528][ T5845] veth0_macvtap: entered promiscuous mode
[   62.738421][ T5845] veth1_macvtap: entered promiscuous mode
[   62.750989][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.757135][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.767816][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.777231][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.789323][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.792450][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.800927][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.803571][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.853495][ T5848] veth0_vlan: entered promiscuous mode
[   62.856990][ T5211] Bluetooth: hci0: command tx timeout
[   62.856995][   T55] Bluetooth: hci1: command tx timeout
[   62.884611][ T5848] veth1_vlan: entered promiscuous mode
[   62.890358][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.892745][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.905153][ T5850] veth0_vlan: entered promiscuous mode
[   62.923813][ T5850] veth1_vlan: entered promiscuous mode
[   62.926217][ T5211] Bluetooth: hci2: command tx timeout
[   62.934868][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.939462][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.965681][ T5850] veth0_macvtap: entered promiscuous mode
[   62.980634][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.988056][ T5850] veth1_macvtap: entered promiscuous mode
[   62.992232][ T5848] veth0_macvtap: entered promiscuous mode
[   63.002614][ T5848] veth1_macvtap: entered promiscuous mode
[   63.018138][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.025088][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.039465][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.043595][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.053364][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.057574][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.066905][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.080481][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.085665][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.093811][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.096874][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.102902][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.181363][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.183818][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.214161][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.222299][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.239796][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.242249][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.265712][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.274640][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.849074][ T5959] Bluetooth: MGMT ver 1.23
[   63.956690][ T5968] Zero length message leads to an empty skb
[   64.926120][ T5211] Bluetooth: hci1: command tx timeout
[   64.937120][ T5211] Bluetooth: hci0: command tx timeout
[   65.006093][ T5211] Bluetooth: hci2: command tx timeout
[   65.090290][ T6062] netlink: 'syz.2.81': attribute type 10 has an invalid length.
[   65.098193][ T6062] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.144192][ T6070] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.181572][ T6062] syz.2.81 (6062) used greatest stack depth: 20920 bytes left
[   65.333574][ T6082] tipc: Started in network mode
[   65.335253][ T6082] tipc: Node identity 6eb2422dcfce, cluster identity 4711
[   65.355603][ T6082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.412703][ T6082] syzkaller0: entered promiscuous mode
[   65.435655][ T6082] syzkaller0: entered allmulticast mode
[   65.620572][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[   65.682935][ T6081] tipc: Resetting bearer <eth:syzkaller0>
[   65.760801][ T6081] tipc: Disabling bearer <eth:syzkaller0>
[   66.091091][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.095366][ T6097] netlink: 'syz.1.92': attribute type 12 has an invalid length.
[   66.098333][ T6097] netlink: 'syz.1.92': attribute type 29 has an invalid length.
[   66.100929][ T6097] netlink: 148 bytes leftover after parsing attributes in process `syz.1.92'.
[   66.103633][ T6097] netlink: 59 bytes leftover after parsing attributes in process `syz.1.92'.
[   66.257025][ T6107] netlink: 'syz.1.96': attribute type 4 has an invalid length.
[   66.675588][ T6144] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET)
[   66.796976][ T6150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.117'.
[   66.861411][ T6156] netlink: 40 bytes leftover after parsing attributes in process `syz.0.120'.
[   66.872907][ T6154] syz.1.119 (6154) used greatest stack depth: 20744 bytes left
[   66.903280][ T6160] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   66.911346][ T6160] team0: Port device dummy0 added
[   66.915560][ T6160] netlink: 'syz.1.121': attribute type 10 has an invalid length.
[   66.935012][ T6160] team0: Port device dummy0 removed
[   66.940119][ T6160] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.956852][ T6160] syz.1.121 (6160) used greatest stack depth: 20104 bytes left
[   67.006323][ T5211] Bluetooth: hci0: command tx timeout
[   67.008783][   T55] Bluetooth: hci1: command tx timeout
[   67.086316][   T55] Bluetooth: hci2: command tx timeout
[   67.691204][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[   67.707356][ T6229] tipc: Started in network mode
[   67.709008][ T6229] tipc: Node identity c238a3b1844c, cluster identity 4711
[   67.711233][ T6229] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   67.752335][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[   67.769168][ T6228] tipc: Resetting bearer <eth:syzkaller0>
[   68.424511][ T6228] tipc: Disabling bearer <eth:syzkaller0>
[   69.079943][ T6287] netlink: 96 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.087062][   T55] Bluetooth: hci0: command tx timeout
[   69.088820][   T55] Bluetooth: hci1: command tx timeout
[   69.137411][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[   69.141970][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'.
[   69.145634][ T6291] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   69.151243][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   69.166120][ T5211] Bluetooth: hci2: command tx timeout
[   69.386730][ T6313] netlink: 248 bytes leftover after parsing attributes in process `syz.0.195'.
[   69.399222][ T6313] lo speed is unknown, defaulting to 1000
[   69.405648][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.414722][ T6315] bond0: (slave rose0): Enslaving as an active interface with an up link
[   69.424425][ T6313] lo speed is unknown, defaulting to 1000
[   69.436421][ T6313] lo speed is unknown, defaulting to 1000
[   69.498514][ T6320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.715228][ T5289] lo speed is unknown, defaulting to 1000
[   69.726016][ T6313] infiniband syz0: set active
[   69.727591][ T6313] infiniband syz0: added lo
[   69.777880][ T6313] RDS/IB: syz0: added
[   69.779554][ T6313] smc: adding ib device syz0 with port count 1
[   69.781513][ T6313] smc:    ib device syz0 port 1 has pnetid 
[   69.784269][ T5289] lo speed is unknown, defaulting to 1000
[   69.790290][ T6313] lo speed is unknown, defaulting to 1000
[   69.972933][ T6346] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   70.059692][ T6313] lo speed is unknown, defaulting to 1000
[   70.228718][ T6313] lo speed is unknown, defaulting to 1000
[   70.368222][ T6366] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   70.597841][ T6378] nbd: socks must be embedded in a SOCK_ITEM attr
[   70.605724][ T6378] block nbd0: shutting down sockets
[   70.673567][ T6392] 8021q: VLANs not supported on ipvlan1
[   70.929341][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.931829][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.060844][   T33] audit: type=1800 audit(1754562300.830:2): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.227" name="memory.events" dev="tmpfs" ino=421 res=0 errno=0
[   71.367950][  T790] tipc: Node number set to 2709275181
[   71.414366][   T24] cfg80211: failed to load regulatory.db
[   71.561897][ T6446] netlink: 'syz.2.242': attribute type 11 has an invalid length.
[   71.564399][ T6446] netlink: 'syz.2.242': attribute type 12 has an invalid length.
[   71.572183][ T6446] __nla_validate_parse: 4 callbacks suppressed
[   71.572192][ T6446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.242'.
[   71.964206][ T6478] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   72.099119][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'.
[   72.436450][ T6503] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.265'.
[   72.525668][ T6511] nbd: must specify at least one socket
[   73.056353][ T6545] syzkaller0: entered promiscuous mode
[   73.058068][ T6545] syzkaller0: entered allmulticast mode
[   73.061090][ T6545] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   73.317297][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   73.322633][ T6555] netlink: 830 bytes leftover after parsing attributes in process `syz.1.290'.
[   73.433865][ T6562] tipc: Started in network mode
[   73.436123][ T6562] tipc: Node identity 92a8f3e9948d, cluster identity 4711
[   73.439046][ T6562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.442600][ T6562] syzkaller0: entered promiscuous mode
[   73.444745][ T6562] syzkaller0: entered allmulticast mode
[   73.458425][ T6562] tipc: Resetting bearer <eth:syzkaller0>
[   73.462946][ T6561] tipc: Resetting bearer <eth:syzkaller0>
[   73.470035][ T6561] tipc: Disabling bearer <eth:syzkaller0>
[   73.686108][ T6571] syzkaller0: entered promiscuous mode
[   73.687867][ T6571] syzkaller0: entered allmulticast mode
[   74.512812][ T6590] lo speed is unknown, defaulting to 1000
[   74.717013][ T6601] lo speed is unknown, defaulting to 1000
[   75.395673][ T6666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.451249][ T6650] tipc: Resetting bearer <eth:syzkaller0>
[   75.502053][ T6650] tipc: Disabling bearer <eth:syzkaller0>
[   75.795972][ T6711] nbd0: detected capacity change from 0 to 63
[   75.814812][   T57] block nbd0: Receive control failed (result -104)
[   75.855300][ T6720] netlink: 'syz.2.327': attribute type 41 has an invalid length.
[   75.903239][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.328'.
[   76.169645][ T6744] netlink: 136 bytes leftover after parsing attributes in process `syz.2.337'.
[   76.203594][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'.
[   76.214233][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'.
[   76.218071][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'.
[   76.280399][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.283213][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.295445][   T52] lo speed is unknown, defaulting to 1000
[   76.308293][   T52] syz0: Port: 1 Link DOWN
[   76.310877][   T52] lo speed is unknown, defaulting to 1000
[   77.244538][ T6773] syzkaller1: entered promiscuous mode
[   77.249001][ T6773] syzkaller1: entered allmulticast mode
[   77.270470][ T6775] syzkaller0: entered promiscuous mode
[   77.272233][ T6775] syzkaller0: entered allmulticast mode
[   77.275135][   T13] syzkaller0: tun_net_xmit 70
[   77.278387][ T6775] syzkaller0: tun_chr_ioctl cmd 1074025677
[   77.280317][ T6775] syzkaller0: Linktype set failed because interface is up
[   77.388435][ T6781] __nla_validate_parse: 23 callbacks suppressed
[   77.388446][ T6781] netlink: 96 bytes leftover after parsing attributes in process `syz.0.354'.
[   77.614198][ T6804] bridge_slave_0: left allmulticast mode
[   77.620122][ T6804] bridge_slave_0: left promiscuous mode
[   77.622498][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.641757][ T6804] bridge_slave_1: left allmulticast mode
[   77.643523][ T6804] bridge_slave_1: left promiscuous mode
[   77.645342][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.662168][ T6804] bond0: (slave bond_slave_0): Releasing backup interface
[   77.673609][ T6804] bond0: (slave bond_slave_1): Releasing backup interface
[   77.682254][ T6804] team0: Port device team_slave_0 removed
[   77.687763][ T6804] team0: Port device team_slave_1 removed
[   77.690163][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.692348][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.700437][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.703122][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.772581][ T6804] syz.0.366 (6804) used greatest stack depth: 19832 bytes left
[   77.847761][ T6821] lo speed is unknown, defaulting to 1000
[   77.937159][ T6826] syzkaller0: entered promiscuous mode
[   77.938921][ T6826] syzkaller0: entered allmulticast mode
[   77.974142][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.377'.
[   77.979767][ T6830] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   78.075587][ T5892] IPVS: starting estimator thread 0...
[   78.123848][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[   78.172253][ T6834] IPVS: using max 62 ests per chain, 148800 per kthread
[   78.179554][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   78.433698][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   78.459699][ T6858] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[   78.467998][ T6858] batman_adv: batadv0: Adding interface: team0
[   78.473709][ T6858] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.493882][ T6858] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   78.502531][ T6858] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[   78.508396][ T6858] netlink: 2 bytes leftover after parsing attributes in process `syz.0.388'.
[   78.513752][ T6858] team0: entered promiscuous mode
[   78.519190][ T6858] 8021q: adding VLAN 0 to HW filter on device team0
[   78.524553][ T6858] batman_adv: batadv0: Interface activated: team0
[   78.527327][ T6858] batman_adv: batadv0: Interface deactivated: team0
[   78.529536][ T6858] batman_adv: batadv0: Removing interface: team0
[   78.532779][ T6858] bridge0: port 1(team0) entered blocking state
[   78.534922][ T6858] bridge0: port 1(team0) entered disabled state
[   78.540509][ T6858] team0: entered allmulticast mode
[   78.685578][ T6866] tipc: New replicast peer: 255.255.255.255
[   78.691901][ T6866] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.695911][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'.
[   78.698946][ T6866] tipc: Disabling bearer <udp:syz2>
[   78.938718][ T6877] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   79.773882][ T6928] netlink: 830 bytes leftover after parsing attributes in process `syz.1.420'.
[   79.825901][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   79.831367][ T6928] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.834224][ T6928] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.144592][ T6934] tap0: tun_chr_ioctl cmd 1074025677
[   80.147784][ T6934] tap0: linktype set to 800
[   80.312697][ T6940] lo speed is unknown, defaulting to 1000
[   80.376334][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'.
[   80.481564][    C0] Unknown status report in ack skb
[   80.664153][ T6961] IPv6: NLM_F_REPLACE set, but no existing node found!
[   80.849822][ T6973] netlink: 'syz.0.438': attribute type 30 has an invalid length.
[   81.248239][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   81.600300][ T7031] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   81.685304][ T7026] netlink: 'syz.1.461': attribute type 13 has an invalid length.
[   81.691367][ T7026] netlink: 'syz.1.461': attribute type 17 has an invalid length.
[   81.794177][ T7026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.819785][ T7026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.874799][ T7026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.932314][ T7026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.974589][ T7059] netlink: 'syz.2.474': attribute type 10 has an invalid length.
[   81.983833][ T7059] batman_adv: batadv0: Adding interface: virt_wifi0
[   81.987852][ T7059] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.997444][ T7059] batman_adv: batadv0: Interface activated: virt_wifi0
[   82.076623][ T7069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.086678][ T7069] syzkaller0: entered promiscuous mode
[   82.088413][ T7069] syzkaller0: entered allmulticast mode
[   82.102556][ T7069] tipc: Resetting bearer <eth:syzkaller0>
[   82.114925][ T7066] tipc: Resetting bearer <eth:syzkaller0>
[   82.124823][ T7066] tipc: Disabling bearer <eth:syzkaller0>
[   82.154807][ T7075] nbd: couldn't find device at index 536870912
[   82.464360][ T7097] __nla_validate_parse: 3 callbacks suppressed
[   82.464376][ T7097] netlink: 104 bytes leftover after parsing attributes in process `syz.0.492'.
[   82.612308][ T5855] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.640369][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.498'.
[   82.692479][ T7113] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.498'.
[   82.777526][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[   82.998981][ T7134] IPVS: Scheduler module ip_vs_sip not found
[   83.078429][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'.
[   83.274001][ T7154] lo speed is unknown, defaulting to 1000
[   83.894393][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   83.897388][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[   83.908145][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   83.929932][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[   83.946200][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   83.964536][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[   83.974984][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   83.989254][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[   83.992265][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   83.994622][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'.
[   84.013200][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   84.037130][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   84.039985][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   84.042831][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   84.045367][ T7207] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   84.427337][  T790] IPVS: starting estimator thread 0...
[   84.517206][ T7247] IPVS: using max 62 ests per chain, 148800 per kthread
[   84.580686][ T7255] lo speed is unknown, defaulting to 1000
[   84.995053][ T7276] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   86.922693][ T7404] unsupported nlmsg_type 40
[   88.179066][ T7533] __nla_validate_parse: 77 callbacks suppressed
[   88.179078][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[   88.183721][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[   88.438953][   T10] IPVS: starting estimator thread 0...
[   88.470626][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'.
[   88.536912][ T7564] IPVS: using max 62 ests per chain, 148800 per kthread
[   88.633921][ T7588] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   88.643480][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.646769][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.729112][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.699'.
[   89.136860][ T7637] nbd2: detected capacity change from 0 to 63
[   89.143035][ T7642] block nbd2: NBD_DISCONNECT
[   89.149917][ T7642] block nbd2: Disconnected due to user request.
[   89.152254][ T7642] block nbd2: shutting down sockets
[   89.169794][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.174530][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   89.177225][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.180046][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   89.182448][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.185417][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   89.188117][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.190897][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   89.194343][ T6987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.202742][ T6987] Buffer I/O error on dev nbd2, logical block 0, async page read
[   89.205496][ T6987] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.213530][ T6987] Buffer I/O error on dev nbd2, logical block 1, async page read
[   89.216499][ T6987] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.219315][ T6987] Buffer I/O error on dev nbd2, logical block 2, async page read
[   89.225145][ T6987] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.230820][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'.
[   89.235127][ T6987] Buffer I/O error on dev nbd2, logical block 3, async page read
[   89.238110][ T6987] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.241061][ T6987] Buffer I/O error on dev nbd2, logical block 0, async page read
[   89.243656][ T6987] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.247534][ T6987] Buffer I/O error on dev nbd2, logical block 1, async page read
[   89.261441][ T6987] ldm_validate_partition_table(): Disk read failed.
[   89.269371][ T6987] Dev nbd2: unable to read RDB block 0
[   89.275203][ T6987]  nbd2: unable to read partition table
[   89.289145][ T6987] ldm_validate_partition_table(): Disk read failed.
[   89.292202][ T6987] Dev nbd2: unable to read RDB block 0
[   89.294968][ T6987]  nbd2: unable to read partition table
[   89.924230][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'.
[   89.928474][ T7637] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   89.939305][ T7646] batman_adv: batadv0: Adding interface: ipvlan2
[   89.941292][ T7646] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.950461][ T7646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.959213][ T7646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.963218][ T7646] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   90.087389][ T7656] validate_nla: 72 callbacks suppressed
[   90.087420][ T7656] netlink: 'syz.0.726': attribute type 3 has an invalid length.
[   90.098917][ T7656] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.726'.
[   90.227805][ T7667] tipc: New replicast peer: 255.255.255.255
[   90.230015][ T7667] tipc: Enabled bearer <udp:syz2>, priority 10
[   90.256072][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.729'.
[   90.259028][ T7667] tipc: Disabling bearer <udp:syz2>
[   91.026844][ T7669] netlink: 'syz.0.732': attribute type 4 has an invalid length.
[   91.039317][ T7669] netlink: 'syz.0.732': attribute type 4 has an invalid length.
[   91.044734][  T790] lo speed is unknown, defaulting to 1000
[   91.047937][  T790] syz0: Port: 1 Link ACTIVE
[   91.049489][  T790] lo speed is unknown, defaulting to 1000
[   91.099581][ T7676] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[   91.207083][ T7685] netlink: 'syz.0.739': attribute type 8 has an invalid length.
[   91.316751][ T7697] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.745'.
[   91.435684][ T7713] veth0_to_bridge: entered promiscuous mode
[   91.440898][ T7711] veth0_to_bridge: left promiscuous mode
[   91.515534][ T7723] openvswitch: netlink: Actions may not be safe on all matching packets
[   91.809409][ T7739] netlink: 124 bytes leftover after parsing attributes in process `syz.2.765'.
[   91.949940][ T7762] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[   91.969282][ T7762] nbd: socks must be embedded in a SOCK_ITEM attr
[   91.974443][ T7762] block nbd1: shutting down sockets
[   92.083446][ T7772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.191006][ T7784] netlink: 'syz.2.785': attribute type 1 has an invalid length.
[   92.288753][ T7788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.929623][ T7834] IPVS: Scheduler module ip_vs_sip not found
[   92.932381][ T7834] IPVS: length: 8 != 446622349272
[   93.007376][ T7847] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   93.251884][ T7870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.254855][ T7870] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.259055][ T7870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.261947][ T7870] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.265423][ T7870] batman_adv: batadv0: Removing interface: ipvlan2
[   93.520971][ T5904] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   93.651666][ T7907] __nla_validate_parse: 8 callbacks suppressed
[   93.651706][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[   93.873068][ T7922] netlink: 256 bytes leftover after parsing attributes in process `syz.1.843'.
[   93.983706][ T7927] netlink: 'syz.1.844': attribute type 3 has an invalid length.
[   93.987727][ T7927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.756372][ T7984] nft_compat: unsupported protocol 0
[   94.786397][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'.
[   94.804424][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'.
[   94.990946][ T8011] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.878'.
[   95.088440][ T8016] lo speed is unknown, defaulting to 1000
[   95.414838][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[   95.523792][ T8035] Illegal XDP return value 4294967289 on prog  (id 169) dev N/A, expect packet loss!
[   95.684961][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.893'.
[   96.314005][ T8117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.341328][ T8121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.346986][ T8121] syzkaller0: entered promiscuous mode
[   96.348693][ T8121] syzkaller0: entered allmulticast mode
[   96.380720][ T8121] tipc: Resetting bearer <eth:syzkaller0>
[   96.387786][ T8120] tipc: Resetting bearer <eth:syzkaller0>
[   96.397014][ T8120] tipc: Disabling bearer <eth:syzkaller0>
[   96.519008][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'.
[   96.943051][ T8162] netlink: 152 bytes leftover after parsing attributes in process `syz.0.941'.
[   97.023767][ T8170] vlan2: entered allmulticast mode
[   97.025509][ T8170] veth1: entered allmulticast mode
[   97.028913][ T8170] batman_adv: batadv0: Adding interface: vlan2
[   97.030931][ T8170] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.039362][ T8170] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   97.066846][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[   97.371222][ T8179] netlink: 'syz.2.948': attribute type 7 has an invalid length.
[   97.377016][ T8179] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.848289][ T8223] trusted_key: syz.2.969 sent an empty control message without MSG_MORE.
[   97.893203][ T8227] sctp: [Deprecated]: syz.1.971 (pid 8227) Use of int in max_burst socket option.
[   97.893203][ T8227] Use struct sctp_assoc_value instead
[   98.317748][ T8273] sctp: [Deprecated]: syz.0.993 (pid 8273) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.317748][ T8273] Use struct sctp_sack_info instead
[   98.669556][ T8300] tc_dump_action: action bad kind
[   98.720289][ T8302] __nla_validate_parse: 8 callbacks suppressed
[   98.720301][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'.
[   99.427512][ T8333] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.430448][ T8333] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.914790][ T5904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.971080][ T5904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.058061][ T5904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.187755][ T5904] team0: left allmulticast mode
[  100.190037][ T5904] bridge0: port 1(team0) entered disabled state
[  100.449632][ T5904] bond0 (unregistering): Released all slaves
[  100.509832][ T5904] tipc: Left network mode
[  100.863316][ T5904] hsr_slave_0: left promiscuous mode
[  100.865528][ T5904] hsr_slave_1: left promiscuous mode
[  100.868058][ T5904] batman_adv: batadv0: Removing interface: vlan2
[  100.881868][ T5904] veth1_macvtap: left promiscuous mode
[  100.883856][ T5904] veth0_macvtap: left promiscuous mode
[  100.894469][ T5904] veth1_vlan: left promiscuous mode
[  100.897113][ T5904] veth0_vlan: left promiscuous mode
[  101.407219][ T6689] smc: removing ib device syz0
[  101.441356][   T52] lo speed is unknown, defaulting to 1000
[  101.443205][   T52] syz0: Port: 1 Link DOWN
[  101.851288][ T5904] IPVS: stop unused estimator thread 0...
[  106.138291][  T128] block nbd0: Possible stuck request ffff888022cf8000: control (read@0,1024B). Runtime 30 seconds
[  106.141816][  T128] block nbd0: Possible stuck request ffff888022cf8200: control (read@1024,1024B). Runtime 30 seconds
[  106.145045][  T128] block nbd0: Possible stuck request ffff888022cf8400: control (read@2048,1024B). Runtime 30 seconds
[  106.151570][  T128] block nbd0: Possible stuck request ffff888022cf8600: control (read@3072,1024B). Runtime 30 seconds
[  106.804242][ T5904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.869768][ T5904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.950520][ T5904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.008470][ T5904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.115234][ T5904] bridge_slave_1: left allmulticast mode
[  107.118675][ T5904] bridge_slave_1: left promiscuous mode
[  107.120536][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.123889][ T5904] bridge_slave_0: left allmulticast mode
[  107.125632][ T5904] bridge_slave_0: left promiscuous mode
[  107.127940][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.380129][ T5904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.384424][ T5904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.388797][ T5904] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  107.392738][ T5904] bond0 (unregistering): Released all slaves
[  107.470003][ T5904] tipc: Left network mode
[  107.655227][ T5904] hsr_slave_0: left promiscuous mode
[  107.657504][ T5904] hsr_slave_1: left promiscuous mode
[  107.663559][ T5904] veth1_macvtap: left promiscuous mode
[  107.665323][ T5904] veth0_macvtap: left promiscuous mode
[  107.667541][ T5904] veth1_vlan: left promiscuous mode
[  107.669260][ T5904] veth0_vlan: left promiscuous mode
[  107.929389][ T5904] team0 (unregistering): Port device team_slave_1 removed
[  107.949836][ T5904] team0 (unregistering): Port device team_slave_0 removed
[  108.360830][ T5904] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
10:25:39  Registers:
info registers vcpu 0

CPU#0
RAX=a51dc827baa9cc00 RBX=ffffffff81969b18 RCX=a51dc827baa9cc00 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07af0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b2de5df680 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000000000002f 000000003065612f
XMM06=ffffffffffffff00 ffffffff00000000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000041 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7bf5a6d4ba91f400 RBX=ffffffff81969b18 RCX=7bf5a6d4ba91f400 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07af0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2cef945580 CR3=0000000128c3e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ff0000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=000000000000002f 000000003065612f
XMM06=ffffffffffffff00 ffffffff00000000 XMM07=00000000000000ff 00000000000000ff
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000041 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
