last executing test programs:

1.454606113s ago: executing program 2 (id=4574):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r1, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000084000000070000000300000000000000"], 0x18, 0x4005}], 0x1, 0x8008) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20000800)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

1.114509045s ago: executing program 1 (id=4577):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) (async)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00ea00001041ab37d8bc2ab6cf000000000000", @ANYRES32=0x0, @ANYBLOB="000d000000000400028008000a040000000000000000f8df0eaa2406bc9d695b50b35804042777e14987c3a7e76de46570e8a7bd5023252d6ffe6ad796b14d5dbab80ab86f2fc1bccba04cefb0253908b77680d62846db7c44d3e5280ab3d7f5c4b0338bdc2270da8555ac5d24dbd12bdf6d3f19ad0742f6", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x40881)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket(0x11, 0x800000003, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38)

1.024635713s ago: executing program 1 (id=4578):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {0x11000000}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0)

1.02400925s ago: executing program 1 (id=4579):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7919d8c1a084855cc312bc04f13fdf4bc5cca4"}}]}, 0x150}}, 0x804)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080088000a00", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0)

945.098994ms ago: executing program 1 (id=4580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

934.235088ms ago: executing program 1 (id=4581):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
listen(r4, 0x1006)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6409000000050104000000000000000000000007540201000200000005000000080100800600040073797a30000000000000000000000000000000000000000000000000000000002a14db608116d5d8d423c23d56cc25c4a99d4c0be6a3eb83df7b63a53aeaa8d4eeec34291a1f215f4c750f13ca9d1f0ac3acf8601702c33395da259b7ea1d318f1ff030001000000cf0200000700008001000000f8ffffff0900080002000000000000000100020002000000cc00000000000e000100000008000000040009000100000008000000cf3b090001000000000000000500c00c02000000e0db0000000002000000000003000000080009000200000038000000ff0306000300000008000000050003000200000007000000ca6c290a0300000003000000fdffef040100000001000000fbff550003000000080000000500020002000000010000009ad24c000100000002000000010005000200000000000000ff7f0000020000000100008006000e0001000000ffff000000080c000300000008000000f9ffcacb00000000ff070000184e050001000000030000000200090003000000000200003f080000010000000600000004000300020000005aec0000830f040001000000fc8400000e000900030000000500000007000000010000008000000009000c00000000005d9000002e2a09000200000010bb0080050059000300000006000000fffffbff0300000056000000abb60f0000000000060000000900070002000000000000000400080003000000090000000500090000000000000000000000c14f010000000c000000000002000200000094650000ff01070002000000000000005402010002000000000000006f00060003000f0073797a31000000000000000000000000000000000000000000000000000000002d4ebe8d8bb16b1a1825df9dd005ece29d92dfbc190c142dac2c2d3c410ae3cb9277c07785f0e90b09c27ad051c7b321fe26d868f7d16b134f8cc64a56780060c50b0600010000000600000001010100020000000000000049270100010000000e000000ffff08000000000008000000ff038f030000000002000000481e0500020000000400000006001a0f01000000090000000700ff7f030000000100000041a1010000000000060000000500f6ff010000000300000000000700010000005a020000d611030000000000e2e7000088c7080001000000090000000010070003000000010000800200d4000100000069d600000a00010003000000ff7f0000000b4000010000000200000001000002010000000900000002000200020000007f0000000600ff7f01000000060000000800010001000000070000001117080002000000f70000000800ffff0200000005000000000009000000000063000000e405010003000000790500000900070002000000080000003300000001000000040000000c000300010000000200000006000200010000000600000074000600030000000e000000ff005d0503000000070000000f00ffff020000000800000080ff000003000000080000000600ff0703000000f5000000feff000001000000590000000100020000000000050000000100010000000000550e000005007f00000000007a3c58680d00060003000000c60000001000020000000000050000005402010003000000090000000b059e000600090073797a31000000000000000000000000000000000000000000000000000000006272e5b7b2d3e935b6f7de476e557bd8616d43725013fe041e4e2b16c28354253e28f4f3736154cf5bd8d5201c6550ed837cb7f30d52ad9e7ccd912243b9f448010008000100000005000000fcff0b0001000000000000060400050002000000a21200000300060002000000519300000200060003000000070000008000004803000000020000000200070003000000090000000700090003000000050000000600090003000000030000003eff400000000000070000000300060001000000a5040000040001800300000001000080ffff04000000000000000000fcffbe56030000000100000001800600020000000000ffff0900060002000000060000000700000000000000050000000200050002000000080000000001000001000000ff0000001d98080003000000060000000100740000000000090000000200800302000000090000002bca0800000000000c00000004000800000000000a0000001000080003000000eb000000720c00000200000036ef00000c000600000000000600000008000500020000000a000000f70c0500000000000300000006000800010000000000000c0300ad00000000000000008000800f00010000000500000069fb810002000000030000000a0008000100000022000000ff07070002000000ff7f0000feff010001000000040000000100070001000000010000800800050002000000080000000400050000000000060000007f00f30001000000040000005402010001000000080000000e01060080001a0073797a3000000000000000000000000000000000000000000000000000000000ab812d02b43157b31ec2d119d0423bca8843e9765a7fb24349426c3a32ed1e0a9e156d9786262251f12aea4927581844272e1a6df4a08569adbec599da2fdc2c0400008001000000090000000800ff0703000000640700000300050003000000ffffffffe8032e0500000000710000000080080001000000dbba00007f0007000000000009000000419d010403000000040000008100010002000000050000000400e418030000000300000072c1090000000000ec0000000900030001000000070000001308080003000000070000000c000300030000000008000005000a0000000000050000000004000400000000ff07000002000104030000007f00000004000100010000000900000000ff0b00020000000100000001008100000000000100000001000f00000000000001000001007b0003000000bba1000004000c0001000000090000000500030000000000070000000400db00020000000200000002000f0003000000400000000600ff0001000000810000000200ffff01000000ff0f0000ff030500010000009c000000ffff0800020000000200000001800000010000000a060000c6ed00000100000009000000020004000100000000000000bc00800003000000090000004000b0ac01000000ff0f0100030005000300000040000000020006000200000007000000c66b010003000000fdffffffd90e37b601000000000000000400feff000000000300000092070101030000000f000000"], 0x964}, 0x1, 0x0, 0x0, 0x4011}, 0x20000010)
close(r0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

545.269664ms ago: executing program 2 (id=4582):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'geneve1\x00'}})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r3 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000980)=""/209, 0xd1}], 0x2}, 0x2}], 0x2, 0x2101, 0x0)
socket(0x10, 0x803, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r1, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x7fff}], 0x10, 0x8800}, 0x4000000) (async)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) (async)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'geneve1\x00'}}) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
accept$alg(r0, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000980)=""/209, 0xd1}], 0x2}, 0x2}], 0x2, 0x2101, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)

414.835455ms ago: executing program 2 (id=4583):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50000000df250efa0c4b00000200000000000000", @ANYRES32=0x0, @ANYRESHEX=r0], 0x50}}, 0x4008000)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80)

356.01858ms ago: executing program 2 (id=4585):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {0x19000000}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0)

355.440415ms ago: executing program 2 (id=4587):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008810}, 0x30000800)

295.423041ms ago: executing program 2 (id=4589):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000340)=""/232, 0xe8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/182, 0xb6}], 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xf}]}, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x400)
unshare(0x6a040000)
socket(0x2, 0x3, 0xff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, 0x0}}], 0x1, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x24}}, 0x0)
r9 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})

290.839886ms ago: executing program 0 (id=4590):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x430, 0x238, 0x0, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdda27f907a03732da3acbc650000010000000000f9d2f413b94a105f4bdf01425ce81c5d000000020000000500fffffffffcffffff00"}}}, {{@arp={@private, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 'wg2\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5cc9, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="fefaaf180786", @empty, @multicast1, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$inet(0x2, 0x800, 0x8001)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9000911", 0x19}, {&(0x7f00000004c0)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9a", 0x21}], 0x2)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r2, &(0x7f00000002c0)={0xa, 0x0, 0xddf, @mcast2, 0x8b}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)

185.298119ms ago: executing program 0 (id=4591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x14, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

135.044287ms ago: executing program 0 (id=4592):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0xfffc}, 0x4cc00)

134.70187ms ago: executing program 0 (id=4593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500300012800b00010065727370616e0000200002800400120006001800f7ff00000500160002"], 0x50}}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

65.60814ms ago: executing program 0 (id=4594):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {0x1a000000}, {0x10, 0xd29, 0xfffff9b0}, 0x0, 0x0, 0xa, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x6}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x148}}, 0x0)

3.266907ms ago: executing program 1 (id=4595):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 64)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000100)=0x327b, 0x2) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', <r8=>0x0, 0x4, 0x7, 0x10, 0x722a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7, 0x20, 0x10000, 0x93}})
sendmsg$nl_route_sched_retired(r7, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000002ac0)=@newchain={0x209c, 0x64, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {0xb, 0x2}, {0xc, 0x3}}, [@f_rsvp6={{0xa}, {0xc74, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_RSVP_POLICE={0xc48, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x2a, 0x0, 0x877c, 0x9, 0x9, 0x2, 0x1, 0x0, 0x2, 0x2, 0x10000, 0x8, 0x10, 0x4, 0x7f, 0x10000, 0x800, 0x7, 0xf3c, 0x35, 0xb, 0x800, 0x7, 0x40, 0x10001, 0x1, 0x1, 0xf1e, 0x7, 0x0, 0x4, 0x8, 0x400, 0x3, 0x400, 0x0, 0x3, 0x6, 0x40, 0x4, 0x1, 0x1, 0xdd, 0xf95c, 0xfffffffe, 0x1, 0xfffffffe, 0x4, 0xe137, 0xc, 0x9, 0x1ff, 0x5, 0x5, 0x1ff, 0x2, 0x84, 0x5, 0x7f, 0x5, 0x57a, 0x6b06, 0xc30, 0x93, 0xffffffff, 0x9, 0x5, 0x1, 0x7ff800, 0x7, 0xf, 0x8, 0xfa, 0x0, 0x8, 0xbdb3, 0x100, 0x8000, 0x1, 0x7d3b, 0x2, 0x5, 0x8, 0x2, 0xf9a9, 0x400, 0x0, 0x100, 0x800, 0x3, 0xad7, 0xffff, 0x2, 0x6648, 0x66d1, 0x80, 0x2, 0x8001, 0x7f, 0x8, 0xb0da, 0x0, 0xf3, 0x1, 0x0, 0x3ff, 0x1a, 0x5, 0x0, 0xf4, 0xffff, 0xffffffff, 0x5, 0x10001, 0xa1e, 0x21fae7b4, 0x1, 0x2, 0x9, 0x5, 0x8, 0x8, 0x8, 0xd, 0x9, 0x8, 0x200, 0x401, 0x200, 0x2, 0x7, 0x1, 0x7a7, 0x1, 0xddd, 0x10001, 0xffffffc0, 0x0, 0xd, 0x0, 0x7, 0x4, 0x0, 0xfba, 0xff, 0x3, 0x3, 0x8, 0x6, 0x4, 0xc, 0x200, 0x8, 0xfffffffe, 0x8001, 0x7f, 0x1, 0x3, 0xfffffffd, 0x400, 0x8, 0xa, 0x5, 0x3, 0x0, 0x6, 0x7f, 0x7fffffff, 0x3, 0x80000000, 0x3, 0x5aa, 0xca, 0xad, 0xfffffffa, 0x41ef, 0x8, 0x180, 0x4, 0x4, 0x4, 0x0, 0x2, 0xd, 0x2, 0x6, 0x3, 0x0, 0x7, 0xa, 0x86, 0xc, 0x2, 0x400, 0x4d, 0x7, 0x80000001, 0x0, 0xffffffff, 0x0, 0x472, 0x80000001, 0x7, 0x1ff, 0x9, 0x4, 0xef0, 0x4, 0xcd59, 0x8, 0xc6c, 0x8, 0x2, 0x2, 0x3, 0x5, 0x401, 0x2, 0x7, 0x5, 0x6, 0x10000, 0x3, 0xe9a, 0x5, 0x3ff, 0x9, 0x81, 0x1, 0x7, 0xf7bb, 0x0, 0x8000, 0x3, 0x5, 0x0, 0x1, 0x0, 0xfa, 0x4, 0x7, 0x6, 0x7, 0x3, 0x1, 0xf, 0xfffffe00, 0x101, 0x3, 0xf66, 0xc4, 0x6, 0x134a, 0xc, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4000000, 0x10001, 0x5, 0xd1d, 0x7, 0x49, 0x7, 0x6, 0x0, 0x7ff, 0x81, 0x6, 0x16e, 0x3ff, 0x80000000, 0x3, 0x7f, 0x4, 0x8, 0x2, 0x100, 0x10001, 0x0, 0x1, 0xfe7a, 0x6, 0x3, 0x89e, 0x1, 0x9, 0x10000, 0x6, 0xa8c, 0x7, 0x3, 0xa19, 0xffff8001, 0x3, 0xf, 0x6, 0x3c, 0x6, 0xfffffffa, 0x3, 0x6, 0x6, 0x400, 0x66, 0x8, 0x8, 0x953f, 0x88, 0x5, 0x1, 0x9, 0x613, 0x63e7, 0x27, 0x80, 0x0, 0x80, 0x7fffffff, 0x3, 0x2400, 0xffff, 0x5, 0x2, 0x3d6d0b03, 0x8, 0x3, 0x7, 0x4, 0x7, 0x1a3, 0x10001, 0x2, 0x4, 0x5, 0x6bc8bbf1, 0xfffffff7, 0x9, 0x3ff, 0x55, 0x8, 0x1, 0x0, 0xa000, 0x6, 0x6, 0x18, 0x3, 0xf1, 0x4, 0x8, 0x0, 0x9, 0x9, 0x3, 0x7, 0x7, 0x2, 0x100, 0x7c, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x1000, 0x2, 0x100, 0x8, 0x9, 0x7, 0xfffffffb, 0x4, 0x4, 0x3, 0x6, 0x6, 0x2, 0x3, 0xf, 0x1, 0x2, 0x5, 0x8000, 0x2d, 0x1, 0x569, 0x10000, 0xcbd, 0x6, 0x5, 0x1, 0x4, 0x40, 0x6, 0x7, 0x8, 0x5, 0xfffffe01, 0x4, 0x6, 0x1ff, 0xfffffff9, 0x8, 0x8, 0x1000, 0x0, 0xffff, 0x9, 0xfc7, 0x10001, 0x80, 0xde, 0x1004, 0x1, 0x15, 0xfffffffa, 0x81, 0x4, 0x8, 0x9, 0x9, 0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x800, 0x4, 0x5, 0x3, 0xff, 0x8, 0x6, 0x6, 0x5, 0x4, 0x10001, 0x7f, 0x9, 0x2, 0x7fff, 0x10001, 0x5faf, 0x6, 0xaf00, 0x10001, 0xe9, 0x2, 0x6, 0x3e6, 0x9, 0xfc, 0xb88e, 0x5, 0x5, 0x2, 0x5, 0x7, 0x5, 0x2, 0xac000000, 0x1000, 0x9, 0x3, 0x1, 0x8, 0x9, 0x5, 0x8, 0x8, 0x0, 0x0, 0x64, 0x5, 0x7f, 0x5c, 0x0, 0x2, 0x7ff, 0x3, 0x1321, 0x6, 0x6b, 0x5, 0xcc1, 0x5, 0x4, 0x7, 0x9, 0xfffffff9, 0xfffffff7, 0xfffffff1, 0x7, 0x4, 0x9, 0x8, 0x5ba, 0x8, 0x3, 0xffffffff, 0x20, 0x4, 0x5, 0x400000, 0x2, 0x1, 0x80000001, 0xfffff7cd, 0x81, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x5a, 0xfb5c, 0x80, 0x9, 0x1, 0x6, 0x8, 0x0, 0x900, 0x0, 0xfff, 0x6, 0x80000000, 0xf7c2, 0x704996c1, 0x40, 0x24, 0x0, 0x3317, 0x0, 0x0, 0x7ff, 0x4, 0x47, 0x800, 0xfe2, 0x1, 0xd, 0x400, 0x8bd, 0x8, 0x5, 0xb, 0xb, 0x401, 0x81, 0x9, 0x5, 0xa0, 0x1, 0x9, 0x4, 0x80000001, 0x71, 0x9, 0x4, 0x3, 0x0, 0x3, 0x8, 0x4, 0x4, 0xffff, 0xffffff80, 0x200, 0x8, 0xf, 0x7, 0x9, 0x9, 0x9, 0xf07, 0x1, 0x1, 0x80, 0x9, 0xfffffff8, 0x401, 0x4, 0x101, 0x1, 0x5, 0x3, 0x5, 0xfffffff8, 0x1000, 0xae2b, 0x4, 0x4, 0x4, 0xfffffff1, 0xde3, 0x101, 0x3f, 0x1, 0x7, 0x8001, 0x800, 0x8001, 0x2, 0x3ff, 0x1, 0x2, 0x6a08cb0c, 0x1, 0x8, 0x0, 0x5, 0x1, 0x40, 0x3, 0x7, 0x1, 0x41b945c0, 0xffffff02, 0x9, 0x5, 0xea, 0x60b6, 0x7ff, 0x0, 0x4, 0x2, 0x8, 0x3, 0x6, 0x0, 0x80000000, 0x8, 0x1, 0x2, 0x8, 0xffff, 0x3, 0x2, 0x400, 0x3ff, 0x0, 0x8, 0x401, 0x10001, 0x5, 0x8, 0x8000, 0xcccd, 0x2, 0x3, 0x4, 0x40, 0x0, 0x4, 0xc, 0xfb, 0x101, 0x8000, 0x3, 0x1, 0xffffff81, 0xa5a, 0x6, 0x2, 0xfffffff7, 0x4, 0x800, 0x401, 0x5, 0x100, 0x78, 0xa188, 0x6, 0x6, 0x6, 0xa, 0x5, 0x6, 0x4, 0x6, 0x4, 0x100, 0x3f34, 0x0, 0x10, 0x8, 0x6, 0x3, 0x3, 0x10001, 0x6, 0x4, 0x10000, 0x8, 0xfffffffc, 0xe00000, 0x3, 0x7, 0x6, 0x7, 0xcb69, 0x6, 0x3, 0x5, 0x1000, 0xc4, 0x1, 0x2, 0x7, 0x40000000, 0x521, 0x80000000, 0x67f, 0xf, 0x7, 0xdc, 0x2, 0x5, 0x6, 0x10001, 0xffffff4d, 0x2, 0xfffffff7, 0x2c, 0x5, 0x1000, 0x200, 0x0, 0x40, 0x9, 0x7, 0xf, 0x8, 0xc, 0x7, 0x48b2, 0x6, 0x8, 0xffffffff, 0x6, 0x3, 0x4, 0x6, 0x1000, 0x80000001, 0x2, 0x9862, 0x9, 0x7576ffc7, 0x1, 0x1ff, 0x1, 0x2, 0x1ff, 0x88, 0x9, 0xf, 0x545, 0x2, 0x4, 0x8, 0x0, 0xb, 0xb5e, 0x16, 0x200, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}, @f_tcindex={{0xc}, {0x44, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x435c}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xfff7}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xb5ea}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp={{0x9}, {0x1354, 0x2, [@TCA_RSVP_ACT={0x1350, 0x6, [@m_bpf={0x88, 0x5, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x9, 0x9, 0x1d, 0xfffffff7}, {0x6, 0xf, 0x22, 0xd1}, {0x81, 0x80, 0x2, 0x9}, {0x3, 0xf, 0x7f, 0xc}, {0x40, 0x7, 0x5, 0x10001}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x29, 0x6, "42fc2a63091b1540ad5a03eba7349c3f5927f711e44d6d94c99e2b87565564ce7acaba9aa7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0xe4, 0x6, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x8, 0x4bba, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffb, 0x800, 0x10000000, 0x14, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x5e8, 0x4}}]}, {0x7c, 0x6, "2c9872102eff1f7f1a6c59e4b5c385597b716a5d2f6216188743d4f2c0b9935aeee8bb3f98b028aefb002b6e096f74d8c4db4ab2c788acd64290deb3037e014ef1ab9a039ed651c30aba7412db31bd0e0b888f6680578f489b6d4648dd7cb9e5022a17dfe7b2da3f8d2829311ff32c7d02e53bfbbe022088"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}, @m_simple={0xf8, 0x16, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'kfree\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x0, 0x3, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x7, 0xffffffffdffffff8, 0x8, 0x2}}]}, {0x7f, 0x6, "b8cd28d39da29cc41297a0f02fb76d68cb77c149b4e3f8de11553beeb00f48d00d85b6a7f44e0339375d197b8a0ce2dd165799c3b5f6086d88420d5146ec7b4e2a6c90231b6b31b970a155d463b662a2e549a9a8fb4cdc893a83d84528687094aa481bc72401e5a875787e04e3011cff79f95e466fe544cb3649fd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x10e8, 0x17, 0x0, 0x0, {{0xb}, {0xbc, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x400, 0xfffffffa, 0x4, 0x12c, 0x5}}, @TCA_DEF_DATA={0x6, 0x3, ':\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x9, 0x4, 0x1, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x81, 0x5, 0x36b1, 0x800}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0xafe9, 0xffffffffffffffff, 0x400, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, './[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x8, 0x20000000, 0x3, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd23d, 0xffff, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x2, 0x37, 0xfffffff7}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x2c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xeff0}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0xe}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xf}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xe212}]}}, @f_rsvp6={{0xa}, {0x4}}]}, 0x209c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x400000, @private1={0xfc, 0x1, '\x00', 0xfe}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="0b960f2000003208346ab69f5b993e66f9125e3caed261455642ee9c084d7d0f7477d141b9be94e489893e810cb2b2e89f5303993d39cede88eca17d8bfd1815", 0x40}], 0x1, 0x0, 0xfffffffffffffeed}}, {{&(0x7f0000000240)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004)
shutdown(0xffffffffffffffff, 0x1) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001480)={<r9=>0x0, 0x1c, "a399f0e26e5c423b3242a571330e5ac3e571cb631e20c9e90a5ff6b9"}, &(0x7f0000000040)=0x24)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000c40)={<r11=>0x0, 0xa9a, 0x8000000000000000}) (rerun: 32)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000280)={{r10}, {@val={r11}, @actul_num={@void, 0x7ff, 0x67}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @func_proto]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0x61]}}, 0x0, 0x47, 0x0, 0x1, 0x1}, 0x28) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async)
recvmsg$unix(r3, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x103) (async)
r12 = socket$netlink(0x10, 0x3, 0x0) (async)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000005c0)={<r15=>r9, 0x2}, &(0x7f0000000600)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, &(0x7f0000000780)={r15, @in={{0x2, 0x4e24, @loopback}}, 0x7ff, 0x6, 0x4, 0x0, 0x10, 0x7fffffff}, 0x9c)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r16=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbf8, {0x7, r16}, [@MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x1, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

0s ago: executing program 0 (id=4596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000081000000200067747000140002800500060010000000080003000000002000000000000077fbcb86e4b60e24c3395eabf4a396294222e896f59fcac14b9ee99e3b3622cc9c7c115a3e5726da994d7f08b39d214675bebb769aec3dbbbe8b95a491150d41e994243665abb3eec6c17f96f2f16f5b251f11381a5f7bd001dbc3fc48a8d0baec05cb84ef471eb6d0b1afbd0e7e939b0087383c112714cff7cb38ef9bd234ec2eede470f639aa98e55a454627cfa143c4a49498bc641b8d1a9fd4ea516e724ccf9f6fe4eaae31d495da0e96d5d44cf878dee4ea5203c126d5987a9ba91d427d0a4f67e83f95d125e1fd"], 0x40}}, 0x28000000)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r7)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000b00)={0x24c, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1b34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xace}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x71f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb978}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc16f}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff7, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c810)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r9, 0x1, 0x70bd2d, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8a5}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x10)
write$nci(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

kernel console output (not intermixed with test programs):

 347.428222][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.433631][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.437634][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.442821][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.450002][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.457523][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.463092][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.471260][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.476430][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.480438][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.490341][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.495743][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.501657][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.290292][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.463417][T16448] netlink: 'syz.2.3319': attribute type 5 has an invalid length.
[  349.342161][T16462] syzkaller1: entered promiscuous mode
[  349.344415][T16462] syzkaller1: entered allmulticast mode
[  350.005191][T16480] __nla_validate_parse: 12 callbacks suppressed
[  350.005236][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'.
[  350.014236][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3330'.
[  350.051952][T16482] netlink: 'syz.1.3328': attribute type 10 has an invalid length.
[  350.085601][T16484] tipc: Invalid UDP bearer configuration
[  350.085650][T16484] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  350.103406][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'.
[  350.289627][T16493] macvlan0: entered promiscuous mode
[  350.292057][T16493] macvlan0: left promiscuous mode
[  350.427748][T16504] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  350.436233][T16504] macsec0: entered promiscuous mode
[  350.438343][T16504] macsec0: entered allmulticast mode
[  350.440367][T16504] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[  350.468056][T16506] netlink: 'syz.0.3339': attribute type 6 has an invalid length.
[  350.488488][T16506] netlink: 'syz.0.3339': attribute type 12 has an invalid length.
[  350.493312][T16506] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3339'.
[  350.656929][T16514] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3340'.
[  350.728023][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3343'.
[  350.891427][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'.
[  350.910352][T16532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3349'.
[  351.192814][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  351.195836][T16557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3357'.
[  351.455924][T16573] netlink: 'syz.0.3364': attribute type 1 has an invalid length.
[  351.536855][T16580] netlink: 'syz.0.3367': attribute type 2 has an invalid length.
[  351.538560][T16583] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  351.841393][T16601] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  352.244035][T16631] IPVS: Unknown mcast interface: 
[  352.244792][T16634] netlink: 'syz.0.3385': attribute type 12 has an invalid length.
[  352.249147][T16634] netlink: 'syz.0.3385': attribute type 11 has an invalid length.
[  352.602104][   T25] block nbd0: Possible stuck request ffff8880374f0000: control (read@0,1024B). Runtime 210 seconds
[  352.606412][   T25] block nbd0: Possible stuck request ffff8880374f0200: control (read@1024,1024B). Runtime 210 seconds
[  352.613343][   T25] block nbd0: Possible stuck request ffff8880374f0400: control (read@2048,1024B). Runtime 210 seconds
[  352.617743][   T25] block nbd0: Possible stuck request ffff8880374f0600: control (read@3072,1024B). Runtime 210 seconds
[  352.748904][T16665] netlink: 'syz.1.3398': attribute type 2 has an invalid length.
[  352.833192][T16671] IPVS: Error connecting to the multicast addr
[  352.995505][T16681] openvswitch: netlink: IP tunnel dst address not specified
[  353.589153][T16699] ip6gretap0: Device is already in use.
[  353.820113][T16709] sctp: [Deprecated]: syz.0.3417 (pid 16709) Use of int in max_burst socket option deprecated.
[  353.820113][T16709] Use struct sctp_assoc_value instead
[  353.917057][T16718] macvlan1 (unregistering): left allmulticast mode
[  354.198046][T16737] netlink: 'syz.0.3424': attribute type 4 has an invalid length.
[  354.784484][T16771] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  355.016438][T16779] __nla_validate_parse: 26 callbacks suppressed
[  355.016457][T16779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3437'.
[  355.046761][T16782] IPv6: Can't replace route, no match found
[  355.064694][T16782] delete_channel: no stack
[  355.266099][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.
[  355.269464][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.
[  355.273934][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.
[  355.306384][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'.
[  355.309468][T16794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3442'.
[  355.369453][T16798] xt_l2tp: invalid flags combination: 8
[  355.375551][T16798] netlink: 664 bytes leftover after parsing attributes in process `syz.2.3444'.
[  355.379148][T16798] netlink: 664 bytes leftover after parsing attributes in process `syz.2.3444'.
[  355.386905][T16798] xt_l2tp: invalid flags combination: 8
[  355.422403][T16803] tipc: Trying to set illegal importance in message
[  355.435385][T16803] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3445'.
[  355.443506][T16803] macvlan0: entered promiscuous mode
[  355.446070][T16803] batadv0: entered promiscuous mode
[  355.448322][T16803] debugfs: 'hsr0' already exists in 'hsr'
[  355.452384][T16803] Cannot create hsr debugfs directory
[  355.455590][T16803] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  355.458971][T16803] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  355.463142][T16803] hsr0: entered allmulticast mode
[  355.466282][T16803] macvlan0: left promiscuous mode
[  355.469004][T16803] batadv0: left promiscuous mode
[  355.712503][T16813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3448'.
[  355.750767][T16815] netlink: 'syz.2.3449': attribute type 2 has an invalid length.
[  355.858284][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  355.864657][   T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  355.881088][ T5896] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  355.963383][T16832] netlink: 'syz.0.3456': attribute type 2 has an invalid length.
[  356.145821][T16844] netlink: 'syz.0.3461': attribute type 10 has an invalid length.
[  356.154325][T16845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.240743][T16849] pim6reg: left allmulticast mode
[  356.300798][ T5896] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  356.390869][ T5896] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  356.472659][T16862] tipc: Enabled bearer <ib:caif0>, priority 14
[  356.515385][T16864] netlink: 'syz.0.3468': attribute type 1 has an invalid length.
[  356.655314][T16864] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  356.657697][T16864] bond13: left promiscuous mode
[  356.659517][T16864] bridge8: left promiscuous mode
[  356.667461][T16864] team1: left promiscuous mode
[  356.862372][T16876] netlink: 'syz.0.3472': attribute type 1 has an invalid length.
[  356.894605][T16876] 8021q: adding VLAN 0 to HW filter on device bond16
[  356.914896][T16876] bond16: (slave gretap4): making interface the new active one
[  356.919297][T16876] bond16: (slave gretap4): Enslaving as an active interface with an up link
[  356.931892][T16841] tipc: Disabling bearer <eth:syzkaller0>
[  357.065608][T16887] dvmrp1: left allmulticast mode
[  357.120262][T16890] lo speed is unknown, defaulting to 1000
[  357.126920][T16890] lo speed is unknown, defaulting to 1000
[  357.130360][T16890] lo speed is unknown, defaulting to 1000
[  357.264435][T16887] 8021q: adding VLAN 0 to HW filter on device team0
[  357.300397][T16887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.409259][T16890] infiniband syz0: set active
[  357.412123][   T47] lo speed is unknown, defaulting to 1000
[  357.414395][   T47] syz0: Port: 1 Link ACTIVE
[  357.414488][T16890] infiniband syz0: added lo
[  357.438783][T16890] RDS/IB: syz0: added
[  357.440445][T16890] smc: adding ib device syz0 with port count 1
[  357.442483][T16890] smc:    ib device syz0 port 1 has no pnetid
[  357.444813][   T10] lo speed is unknown, defaulting to 1000
[  357.447687][T16890] lo speed is unknown, defaulting to 1000
[  357.508950][   T13] erspan0: left promiscuous mode
[  357.611052][T16890] lo speed is unknown, defaulting to 1000
[  357.640002][T16906] netlink: 'syz.2.3481': attribute type 13 has an invalid length.
[  357.647522][T16906] netlink: 'syz.2.3481': attribute type 17 has an invalid length.
[  357.659434][T16906] erspan0: left allmulticast mode
[  357.672822][T16906] tipc: Resetting bearer <eth:team0>
[  357.675106][T16906] tipc: Resetting bearer <eth:team0>
[  357.685501][T16906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.701773][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.758570][T16903] lo speed is unknown, defaulting to 1000
[  357.767895][T16903] lo speed is unknown, defaulting to 1000
[  357.799630][T16890] lo speed is unknown, defaulting to 1000
[  357.803725][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.877645][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.961226][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.964317][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.979172][T16903] lo speed is unknown, defaulting to 1000
[  358.255479][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.742467][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.908460][T16927] netlink: 'syz.1.3490': attribute type 2 has an invalid length.
[  358.955719][T16929] netlink: 'syz.2.3491': attribute type 4 has an invalid length.
[  358.981573][   T47] lo speed is unknown, defaulting to 1000
[  358.992138][   T47] syz2: Port: 1 Link DOWN
[  359.382662][T16950] netlink: 'syz.1.3499': attribute type 4 has an invalid length.
[  359.795500][T16984] sit5: entered promiscuous mode
[  359.812897][T16986] pim6reg1: entered promiscuous mode
[  359.815479][T16986] pim6reg1: entered allmulticast mode
[  359.858706][T16729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.864167][T16729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.878864][T16988] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.886400][T16988] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  360.146172][T17006] __nla_validate_parse: 16 callbacks suppressed
[  360.146190][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3519'.
[  360.340480][T17011] ip6gre3: entered allmulticast mode
[  360.389930][T17013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3522'.
[  360.466848][T17020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.475067][T17020] syzkaller0: entered promiscuous mode
[  360.476904][T17020] syzkaller0: entered allmulticast mode
[  360.503091][T17020] tipc: Resetting bearer <eth:syzkaller0>
[  360.506535][T17019] tipc: Resetting bearer <eth:syzkaller0>
[  360.522707][T17019] tipc: Disabling bearer <eth:syzkaller0>
[  360.598666][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3529'.
[  360.768558][T17041] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3535'.
[  360.793812][T17041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.795270][T17046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3537'.
[  360.804230][T17040] tipc: Disabling bearer <eth:syzkaller0>
[  360.933775][T17057] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3541'.
[  361.035003][T17065] validate_nla: 4 callbacks suppressed
[  361.035017][T17065] netlink: 'syz.2.3543': attribute type 2 has an invalid length.
[  361.629336][T17111] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  361.634482][T17111] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  361.727607][T17115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.893082][T17121] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3560'.
[  361.897686][T17120] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3560'.
[  361.944167][T17123] netlink: 'syz.0.3561': attribute type 1 has an invalid length.
[  361.971589][T17123] 8021q: adding VLAN 0 to HW filter on device bond17
[  361.979724][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'.
[  361.987498][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.990480][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.078637][T17134] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  362.090337][T17133] only policy match revision 0 supported
[  362.090361][T17133] unable to load match
[  362.158035][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3566'.
[  362.189140][T17140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.193726][T17140] syzkaller0: entered promiscuous mode
[  362.195636][T17140] syzkaller0: entered allmulticast mode
[  362.216048][T17140] tipc: Resetting bearer <eth:syzkaller0>
[  362.219016][T17140] syzkaller0: tun_net_xmit 134
[  362.225714][T17139] tipc: Resetting bearer <eth:syzkaller0>
[  362.249881][T17139] tipc: Disabling bearer <eth:syzkaller0>
[  362.278521][ T1092] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  362.342215][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  362.342245][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.477228][T17155] netlink: 'syz.0.3573': attribute type 10 has an invalid length.
[  362.609623][T17155] tipc: Disabling bearer <eth:syzkaller0>
[  362.622295][T17159] batadv_slave_1: entered promiscuous mode
[  362.815675][T17158] batadv_slave_1: left promiscuous mode
[  362.998420][T17184] pimreg3: entered allmulticast mode
[  363.015467][T17186] netlink: 'syz.2.3584': attribute type 1 has an invalid length.
[  363.033446][T17187] ..0: renamed from hsr0
[  363.039254][T17187] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.043674][T17187] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.047944][T17187] ..0: entered allmulticast mode
[  363.049788][T17187] hsr_slave_0: entered allmulticast mode
[  363.052275][T17187] hsr_slave_1: entered allmulticast mode
[  363.056696][T17187] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  363.759092][T17226] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  363.759144][T17227] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  363.858512][T17231] netlink: 'syz.0.3602': attribute type 3 has an invalid length.
[  363.863207][T17231] netlink: 'syz.0.3602': attribute type 16 has an invalid length.
[  364.190209][T17260] netlink: 'syz.0.3611': attribute type 1 has an invalid length.
[  364.196183][T17260] netlink: 'syz.0.3611': attribute type 21 has an invalid length.
[  364.445608][T17282] netlink: 'syz.1.3617': attribute type 25 has an invalid length.
[  364.461898][T17282] netlink: 'syz.1.3617': attribute type 10 has an invalid length.
[  364.491584][T17282] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  364.517260][T17284] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  364.523089][T17284] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  364.574400][T17289] bond18: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  364.578673][T17289] bond18: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  364.583231][T17289] bond18: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  364.639876][T17284] bond17: (slave bridge14): Enslaving as an active interface with a down link
[  365.168216][T17326] lo speed is unknown, defaulting to 1000
[  365.177348][T17326] lo speed is unknown, defaulting to 1000
[  365.179286][T17328] __nla_validate_parse: 35 callbacks suppressed
[  365.179306][T17328] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3635'.
[  365.189126][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3635'.
[  365.191767][T17326] lo speed is unknown, defaulting to 1000
[  365.193393][T17328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3635'.
[  365.212488][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  365.428518][T17336] syz_tun: left promiscuous mode
[  365.430420][T17336] syz_tun: left allmulticast mode
[  365.435362][T17336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.449209][T17336] xfrm0: entered promiscuous mode
[  365.451832][T17336] xfrm0: entered allmulticast mode
[  365.477383][T17336] lo speed is unknown, defaulting to 1000
[  365.481827][T17336] lo speed is unknown, defaulting to 1000
[  365.533747][T17336] lo speed is unknown, defaulting to 1000
[  366.009444][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'.
[  366.037682][T17347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3640'.
[  366.092272][T17356] validate_nla: 6 callbacks suppressed
[  366.092287][T17356] netlink: 'syz.0.3642': attribute type 1 has an invalid length.
[  366.128435][T17361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3643'.
[  366.151852][T17355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3642'.
[  366.186000][T17356] 8021q: adding VLAN 0 to HW filter on device bond19
[  366.322929][T17369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.336831][T17369] syzkaller0: entered promiscuous mode
[  366.338791][T17369] syzkaller0: entered allmulticast mode
[  366.370048][T17369] tipc: Resetting bearer <eth:syzkaller0>
[  366.381125][T17369] syzkaller0: tun_net_xmit 134
[  366.384837][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3647'.
[  366.389912][T17368] tipc: Resetting bearer <eth:syzkaller0>
[  366.406868][T17368] tipc: Disabling bearer <eth:syzkaller0>
[  366.418151][T17375] chnl_net:caif_netlink_parms(): no params data found
[  366.498888][T17386] netlink: 'syz.1.3649': attribute type 1 has an invalid length.
[  366.538641][T17386] 8021q: adding VLAN 0 to HW filter on device bond24
[  366.553845][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3649'.
[  366.611598][T17393] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  366.615551][T17393] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  366.814282][T17409] ip6gretap0: entered promiscuous mode
[  366.816737][T17409] macsec2: entered promiscuous mode
[  366.818610][T17409] macsec2: entered allmulticast mode
[  366.820354][T17409] ip6gretap0: entered allmulticast mode
[  366.883929][T17417] netlink: 'syz.2.3660': attribute type 30 has an invalid length.
[  367.300741][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  367.383379][T17451] netlink: 'syz.2.3671': attribute type 13 has an invalid length.
[  367.386063][T17451] netlink: 'syz.2.3671': attribute type 17 has an invalid length.
[  367.389285][T17452] netlink: 'syz.2.3671': attribute type 13 has an invalid length.
[  367.393358][T17452] netlink: 'syz.2.3671': attribute type 17 has an invalid length.
[  367.408805][T17451] tipc: Resetting bearer <eth:team0>
[  367.412798][T17451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.419156][ T5912] lo speed is unknown, defaulting to 1000
[  367.421803][ T5912] syz2: Port: 1 Link ACTIVE
[  367.425252][T17452] tipc: Resetting bearer <eth:team0>
[  367.431584][T17452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.462565][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  367.516989][T17452] lo speed is unknown, defaulting to 1000
[  367.524919][T17452] lo speed is unknown, defaulting to 1000
[  367.528657][T17452] lo speed is unknown, defaulting to 1000
[  367.592437][T17451] lo speed is unknown, defaulting to 1000
[  367.598104][T17451] lo speed is unknown, defaulting to 1000
[  367.779470][T17451] lo speed is unknown, defaulting to 1000
[  367.830987][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.765960][T17501] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  368.774681][T17501] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  368.947628][T17511] netlink: 'syz.1.3689': attribute type 10 has an invalid length.
[  368.951210][T17512] netlink: 'syz.1.3689': attribute type 10 has an invalid length.
[  369.588514][T17556] bond25: (slave vxcan3): The slave device specified does not support setting the MAC address
[  369.597280][T17556] bond25: (slave vxcan3): Error -95 calling set_mac_address
[  369.824606][T17574] netlink: 'syz.1.3707': attribute type 1 has an invalid length.
[  370.043937][T17584] nbd: device at index 2 is going down
[  370.115517][T17585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.473092][T17598] __nla_validate_parse: 93 callbacks suppressed
[  370.473116][T17598] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3716'.
[  370.581500][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3717'.
[  370.586712][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'.
[  370.590324][T17607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3717'.
[  370.595062][T17607] tipc: Invalid UDP bearer configuration
[  370.595110][T17607] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  370.603903][T17607] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3717'.
[  371.053947][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3727'.
[  371.140748][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.432037][T17655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3734'.
[  371.663746][T17676] validate_nla: 5 callbacks suppressed
[  371.663761][T17676] netlink: 'syz.0.3742': attribute type 5 has an invalid length.
[  371.814297][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3746'.
[  371.818843][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3746'.
[  371.861084][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  374.165429][T17723] lo speed is unknown, defaulting to 1000
[  374.168989][T17723] lo speed is unknown, defaulting to 1000
[  374.172677][T17723] lo speed is unknown, defaulting to 1000
[  374.436140][T17736] lo speed is unknown, defaulting to 1000
[  374.440178][T17736] lo speed is unknown, defaulting to 1000
[  374.464880][T17736] lo speed is unknown, defaulting to 1000
[  374.956957][T17749] syzkaller1: entered promiscuous mode
[  374.959349][T17749] syzkaller1: entered allmulticast mode
[  375.037550][T17751] nbd: device at index 2 is going down
[  375.193665][T17755] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  375.235005][T17757] nbd: device at index 2 is going down
[  375.325477][T17766] netlink: 'syz.2.3773': attribute type 1 has an invalid length.
[  375.350638][T17766] 8021q: adding VLAN 0 to HW filter on device bond18
[  375.358222][T17768] netlink: 'syz.0.3772': attribute type 1 has an invalid length.
[  375.519836][T17781] __nla_validate_parse: 15 callbacks suppressed
[  375.519859][T17781] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3778'.
[  375.615866][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3780'.
[  375.675349][T17793] lo speed is unknown, defaulting to 1000
[  375.677299][T17795] syzkaller1: entered promiscuous mode
[  375.680088][T17795] syzkaller1: entered allmulticast mode
[  375.685505][T17793] lo speed is unknown, defaulting to 1000
[  375.699148][T17793] lo speed is unknown, defaulting to 1000
[  375.850798][T17800] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3784'.
[  375.900840][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'.
[  375.994332][T17806] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3786'.
[  376.464094][T17816] bond15: (slave erspan0): Releasing active interface
[  376.471735][T17816] tipc: Resetting bearer <eth:team0>
[  376.475631][T17816] bond11: (slave ip6gretap2): Releasing backup interface
[  376.487807][T17816] bond15: (slave veth1): Releasing active interface
[  376.503330][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.514236][T17816] bond17: (slave bridge14): Releasing active interface
[  376.518112][T17817] syz.2.3788: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  376.526127][T17817] CPU: 1 UID: 0 PID: 17817 Comm: syz.2.3788 Not tainted syzkaller #0 PREEMPT(full) 
[  376.526152][T17817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.526162][T17817] Call Trace:
[  376.526171][T17817]  <TASK>
[  376.526179][T17817]  dump_stack_lvl+0x189/0x250
[  376.526209][T17817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.526228][T17817]  ? __pfx__printk+0x10/0x10
[  376.526259][T17817]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  376.526279][T17817]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  376.526300][T17817]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  376.526322][T17817]  warn_alloc+0x214/0x310
[  376.526349][T17817]  ? stack_depot_save_flags+0x40/0x860
[  376.526376][T17817]  ? __pfx_warn_alloc+0x10/0x10
[  376.526399][T17817]  ? kasan_save_track+0x4f/0x80
[  376.526420][T17817]  ? xskq_create+0x56/0x170
[  376.526436][T17817]  ? xsk_init_queue+0xb0/0x110
[  376.526448][T17817]  ? xsk_setsockopt+0x4dc/0x8d0
[  376.526460][T17817]  ? do_sock_setsockopt+0x17c/0x1b0
[  376.526480][T17817]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  376.526499][T17817]  ? do_syscall_64+0xfa/0x3b0
[  376.526515][T17817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.526537][T17817]  __vmalloc_node_range_noprof+0x125/0x12f0
[  376.526581][T17817]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  376.526607][T17817]  ? __kasan_kmalloc+0x93/0xb0
[  376.526629][T17817]  vmalloc_user_noprof+0xad/0xf0
[  376.526649][T17817]  ? xskq_create+0xbf/0x170
[  376.526665][T17817]  xskq_create+0xbf/0x170
[  376.526682][T17817]  xsk_init_queue+0xb0/0x110
[  376.526699][T17817]  xsk_setsockopt+0x4dc/0x8d0
[  376.526715][T17817]  ? __pfx_xsk_setsockopt+0x10/0x10
[  376.526729][T17817]  ? __pfx_aa_sk_perm+0x10/0x10
[  376.526753][T17817]  ? aa_sock_opt_perm+0xff/0x1b0
[  376.526770][T17817]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  376.526786][T17817]  ? __pfx_xsk_setsockopt+0x10/0x10
[  376.526801][T17817]  do_sock_setsockopt+0x17c/0x1b0
[  376.526823][T17817]  __x64_sys_setsockopt+0x13f/0x1b0
[  376.526844][T17817]  do_syscall_64+0xfa/0x3b0
[  376.526861][T17817]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.526876][T17817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.526917][T17817]  ? exc_page_fault+0x9f/0xf0
[  376.526943][T17817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.526959][T17817] RIP: 0033:0x7f660b38ec29
[  376.526974][T17817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.526988][T17817] RSP: 002b:00007f660c265038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  376.527006][T17817] RAX: ffffffffffffffda RBX: 00007f660b5d6090 RCX: 00007f660b38ec29
[  376.527019][T17817] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  376.527029][T17817] RBP: 00007f660b411e41 R08: 0000000000000004 R09: 0000000000000000
[  376.527039][T17817] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.527049][T17817] R13: 00007f660b5d6128 R14: 00007f660b5d6090 R15: 00007ffdbd99e348
[  376.527074][T17817]  </TASK>
[  376.527113][T17817] Mem-Info:
[  376.586691][T17816] netlink: 'syz.2.3788': attribute type 4 has an invalid length.
[  376.587658][ T5912] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  376.640220][T17817] active_anon:13116 inactive_anon:0 isolated_anon:0
[  376.640220][T17817]  active_file:1626 inactive_file:38356 isolated_file:0
[  376.640220][T17817]  unevictable:1768 dirty:18 writeback:0
[  376.640220][T17817]  slab_reclaimable:11179 slab_unreclaimable:95824
[  376.640220][T17817]  mapped:18529 shmem:2443 pagetables:1143
[  376.640220][T17817]  sec_pagetables:0 bounce:0
[  376.640220][T17817]  kernel_misc_reclaimable:0
[  376.640220][T17817]  free:237937 free_pcp:22348 free_cma:0
[  376.653558][T17818] netlink: 'syz.2.3788': attribute type 4 has an invalid length.
[  376.660999][T17817] Node 0 active_anon:14600kB inactive_anon:0kB active_file:4328kB inactive_file:131548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33336kB dirty:52kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:2132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  376.676711][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.691418][T17817] Node 1 active_anon:37864kB inactive_anon:0kB active_file:2176kB inactive_file:21876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40780kB dirty:20kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4560kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  376.702443][T17817] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB
[  376.718913][T17817] lowmem_reserve[]: 0 811 811 811 811
[  376.721803][T17817] Node 0 DMA32 free:177616kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14600kB inactive_anon:0kB active_file:4328kB inactive_file:131548kB unevictable:3536kB writepending:52kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:29128kB local_pcp:14688kB free_cma:0kB
[  376.734987][T17817] lowmem_reserve[]: 0 0 0 0 0
[  376.736914][T17817] Node 1 DMA32 free:436736kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17576kB local_pcp:7576kB free_cma:0kB
[  376.747661][T17817] lowmem_reserve[]: 0 0 854 854 854
[  376.749620][T17817] Node 1 Normal free:322536kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37860kB inactive_anon:0kB active_file:2176kB inactive_file:21868kB unevictable:3536kB writepending:20kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42552kB local_pcp:26176kB free_cma:0kB
[  376.759828][T17817] lowmem_reserve[]: 0 0 0 0 0
[  376.761815][T17817] Node 0 DMA: 7*4kB (U) 7*8kB (U) 7*16kB (U) 6*32kB (U) 6*64kB (U) 7*128kB (U) 6*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (UM) 0*4096kB = 14980kB
[  376.770993][T17817] Node 0 DMA32: 664*4kB (UME) 504*8kB (UME) 651*16kB (UME) 226*32kB (UME) 97*64kB (UME) 75*128kB (UME) 89*256kB (UM) 44*512kB (UM) 42*1024kB (UM) 4*2048kB (UM) 10*4096kB (UM) = 177616kB
[  376.776989][ T5912] lo speed is unknown, defaulting to 1000
[  376.778835][  T792] lo speed is unknown, defaulting to 1000
[  376.783117][T17817] Node 1 DMA32: 50*4kB (U) 47*8kB (UM) 46*16kB (UM) 47*32kB (UM) 46*64kB (UM) 43*128kB (U) 44*256kB (U) 41*512kB (U) 44*1024kB (U) 0*2048kB 85*4096kB (M) = 436736kB
[  376.788317][T17817] Node 1 Normal: 1253*4kB (UME) 1078*8kB (UME) 891*16kB (UME) 718*32kB (UME) 366*64kB (UME) 221*128kB (UME) 67*256kB (UM) 138*512kB (UME) 129*1024kB (UME) 0*2048kB 0*4096kB = 322484kB
[  376.794508][T17817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  376.797496][T17817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  376.800445][T17817] 42425 total pagecache pages
[  376.802525][T17817] 0 pages in swap cache
[  376.804105][T17817] Free swap  = 124996kB
[  376.805625][T17817] Total swap = 124996kB
[  376.807038][T17817] 786301 pages RAM
[  376.808307][T17817] 0 pages HighMem/MovableOnly
[  376.809847][T17817] 241367 pages reserved
[  376.811738][T17817] 0 pages cma reserved
[  377.133244][T17820] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  377.157837][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'.
[  377.161792][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3795'.
[  377.396896][T17850] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3799'.
[  377.403547][T17850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3799'.
[  377.474042][T17853] nbd: device at index 2 is going down
[  377.585126][T17866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.588749][T17866] syzkaller0: entered promiscuous mode
[  377.593393][T17866] syzkaller0: entered allmulticast mode
[  377.620935][T17866] tipc: Resetting bearer <eth:syzkaller0>
[  377.626471][T17864] tipc: Resetting bearer <eth:syzkaller0>
[  377.639134][T17864] tipc: Disabling bearer <eth:syzkaller0>
[  377.797323][T17875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3806'.
[  377.861734][T17879] netlink: 'syz.1.3807': attribute type 10 has an invalid length.
[  377.888402][T17881] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  378.049109][T17893] syz.2.3811 (17893) used obsolete PPPIOCDETACH ioctl
[  378.141367][T17897] 8021q: adding VLAN 0 to HW filter on device bond20
[  378.169371][T17897] bond20: (slave macsec0): Error -34 calling dev_set_mtu
[  378.207911][T17904] netlink: 'syz.2.3811': attribute type 4 has an invalid length.
[  378.758270][T17928] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  379.176909][T17944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.180221][T17944] syzkaller0: entered promiscuous mode
[  379.182344][T17944] syzkaller0: entered allmulticast mode
[  379.188852][T17944] tipc: Resetting bearer <eth:syzkaller0>
[  379.194123][T17943] tipc: Resetting bearer <eth:syzkaller0>
[  379.213858][T17943] tipc: Disabling bearer <eth:syzkaller0>
[  379.309378][T17949] netlink: 'syz.0.3829': attribute type 21 has an invalid length.
[  379.389339][T17954] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  379.396257][T17954] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  379.399387][T17954] netlink: 'syz.2.3832': attribute type 2 has an invalid length.
[  379.499925][T17958] netlink: 'syz.1.3833': attribute type 2 has an invalid length.
[  379.704258][T17977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  379.718261][T17974] netlink: 'syz.0.3838': attribute type 19 has an invalid length.
[  379.841064][T17990] netlink: 'syz.1.3839': attribute type 10 has an invalid length.
[  380.110795][T17996] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  380.123486][   T10] lo speed is unknown, defaulting to 1000
[  380.125931][   T10] syz1: Port: 1 Link DOWN
[  380.632186][T18027] 8021q: adding VLAN 0 to HW filter on device bond22
[  380.658294][T18027] gretap5: entered promiscuous mode
[  380.680761][T18027] bond22: (slave gretap5): Enslaving as an active interface with an up link
[  380.696431][T18027] macvlan2: entered promiscuous mode
[  380.698823][T18027] macvlan2: entered allmulticast mode
[  380.706037][T18027] bond22: entered promiscuous mode
[  380.709249][T18027] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  380.717061][T18027] bond22: left promiscuous mode
[  380.734560][T18036] __nla_validate_parse: 16 callbacks suppressed
[  380.734576][T18036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3859'.
[  380.830980][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3859'.
[  380.939819][T18045] batadv_slave_1: entered promiscuous mode
[  380.945305][T18043] batadv_slave_1: left promiscuous mode
[  380.977246][T18049] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3863'.
[  380.994665][T18049] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3863'.
[  381.062044][T18055] lo speed is unknown, defaulting to 1000
[  381.066259][T18055] lo speed is unknown, defaulting to 1000
[  381.070084][T18055] lo speed is unknown, defaulting to 1000
[  381.137334][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'.
[  381.147222][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3865'.
[  381.189625][T18060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3867'.
[  381.221812][T18063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3868'.
[  381.224878][T18063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3868'.
[  381.454810][T18071] tipc: Resetting bearer <eth:team0>
[  381.471518][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.511975][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.531464][   T47] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  381.547159][T18076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.592938][T18072] syzkaller0: entered promiscuous mode
[  381.594863][T18072] syzkaller0: entered allmulticast mode
[  381.678688][T18080] kthread_run failed with err -4
[  381.692043][T17820] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  381.776122][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'.
[  381.848398][T18098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  382.020886][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  382.209813][T18119] bond20: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  382.216377][T18119] bond20: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  382.221376][T18119] bond20: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode
[  382.258894][T18120] 8021q: adding VLAN 0 to HW filter on device bond20
[  382.337725][T18126] gretap0: entered promiscuous mode
[  382.341793][T18126] gretap0: left promiscuous mode
[  382.663158][   T25] block nbd0: Possible stuck request ffff8880374f0000: control (read@0,1024B). Runtime 240 seconds
[  382.667797][   T25] block nbd0: Possible stuck request ffff8880374f0200: control (read@1024,1024B). Runtime 240 seconds
[  382.674230][   T25] block nbd0: Possible stuck request ffff8880374f0400: control (read@2048,1024B). Runtime 240 seconds
[  382.679279][   T25] block nbd0: Possible stuck request ffff8880374f0600: control (read@3072,1024B). Runtime 240 seconds
[  383.782810][T18163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.788485][T18163] tipc: Resetting bearer <eth:syzkaller0>
[  383.793832][T18161] tipc: Disabling bearer <eth:syzkaller0>
[  383.895388][T18170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.955625][T18170] syzkaller0: entered promiscuous mode
[  383.959808][T18170] syzkaller0: entered allmulticast mode
[  384.055469][T18169] tipc: Resetting bearer <eth:syzkaller0>
[  384.074619][T18169] tipc: Disabling bearer <eth:syzkaller0>
[  384.080449][T18175] syzkaller1: entered promiscuous mode
[  384.082750][T18175] syzkaller1: entered allmulticast mode
[  384.163470][T18179] tc_dump_action: action bad kind
[  384.372015][T18197] validate_nla: 9 callbacks suppressed
[  384.372030][T18197] netlink: 'syz.0.3908': attribute type 8 has an invalid length.
[  384.390835][T18196] nbd: device at index 2 is going down
[  384.409282][T18198] macsec1: entered promiscuous mode
[  384.413874][T18198] bridge0: entered promiscuous mode
[  384.417085][T18198] bridge0: port 1(macsec1) entered blocking state
[  384.419725][T18198] bridge0: port 1(macsec1) entered disabled state
[  384.422464][T18198] macsec1: entered allmulticast mode
[  384.424558][T18198] bridge0: entered allmulticast mode
[  384.429464][T18198] macsec1: left allmulticast mode
[  384.439861][T18198] bridge0: left allmulticast mode
[  384.455737][T18198] bridge0: left promiscuous mode
[  384.459773][T18202] sctp: [Deprecated]: syz.1.3907 (pid 18202) Use of struct sctp_assoc_value in delayed_ack socket option.
[  384.459773][T18202] Use struct sctp_sack_info instead
[  384.703160][T18215] netlink: 'syz.2.3914': attribute type 5 has an invalid length.
[  384.960435][T18234] nbd: must specify a size in bytes for the device
[  385.669542][T18261] IPv6: sit6: Disabled Multicast RS
[  385.673518][T18261] sit6: entered allmulticast mode
[  385.922319][T18277] lo speed is unknown, defaulting to 1000
[  385.926250][T18277] lo speed is unknown, defaulting to 1000
[  385.930804][T18277] lo speed is unknown, defaulting to 1000
[  386.039082][T18294] __nla_validate_parse: 28 callbacks suppressed
[  386.039108][T18294] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3937'.
[  386.236120][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'.
[  386.241051][T18299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'.
[  386.244999][T18299] netlink: 'syz.0.3939': attribute type 4 has an invalid length.
[  386.580110][T18320] netlink: 'syz.1.3943': attribute type 25 has an invalid length.
[  386.592717][T18320] netlink: 'syz.1.3943': attribute type 10 has an invalid length.
[  386.596040][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3943'.
[  386.599752][T18320] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  386.712228][T18282] delete_channel: no stack
[  386.835170][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'.
[  387.012138][T18346] xfrm2: entered allmulticast mode
[  387.092059][T18348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3953'.
[  387.315974][T18378] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3961'.
[  387.562388][T18388] netlink: 'syz.1.3964': attribute type 3 has an invalid length.
[  387.565097][T18388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'.
[  387.703675][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'.
[  387.711819][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3968'.
[  387.780809][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.889730][T18413] netlink: 'syz.1.3974': attribute type 4 has an invalid length.
[  387.897305][T18413] netlink: 'syz.1.3974': attribute type 4 has an invalid length.
[  387.907148][ T5896] lo speed is unknown, defaulting to 1000
[  387.909651][ T5896] syz1: Port: 1 Link ACTIVE
[  388.024840][T18424] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  388.306175][T18439] netlink: 'syz.2.3981': attribute type 1 has an invalid length.
[  388.327603][T18439] bond21: entered promiscuous mode
[  388.330385][T18439] 8021q: adding VLAN 0 to HW filter on device bond21
[  388.389056][T18439] 8021q: adding VLAN 0 to HW filter on device bond21
[  388.392838][T18439] bond21: (slave wireguard1): The slave device specified does not support setting the MAC address
[  388.397413][T18439] bond21: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  388.405770][T18439] bond21: (slave wireguard1): making interface the new active one
[  388.409455][T18439] wireguard1: entered promiscuous mode
[  388.413719][T18439] bond21: (slave wireguard1): Enslaving as an active interface with an up link
[  388.433059][T18439] netlink: 'syz.2.3981': attribute type 4 has an invalid length.
[  388.437468][T18439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.440649][T18439] IPv6: NLM_F_CREATE should be set when creating new route
[  388.443614][T18439] IPv6: NLM_F_CREATE should be set when creating new route
[  388.448711][T18439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  389.301540][T18478] lo speed is unknown, defaulting to 1000
[  389.307540][T18478] lo speed is unknown, defaulting to 1000
[  389.311484][T18478] lo speed is unknown, defaulting to 1000
[  389.389907][T18481] veth11: entered promiscuous mode
[  389.982695][T18509] validate_nla: 1 callbacks suppressed
[  389.982707][T18509] netlink: 'syz.0.4003': attribute type 1 has an invalid length.
[  390.850359][T18565] tap0: tun_chr_ioctl cmd 1074025681
[  391.316660][T18583] __nla_validate_parse: 16 callbacks suppressed
[  391.316680][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4025'.
[  391.394325][T18585] lo speed is unknown, defaulting to 1000
[  391.422042][T18585] lo speed is unknown, defaulting to 1000
[  391.461814][T18585] lo speed is unknown, defaulting to 1000
[  391.593921][T18604] syz_tun: entered allmulticast mode
[  391.609307][T18604] dvmrp8: entered allmulticast mode
[  391.611883][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4032'.
[  391.614911][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4032'.
[  391.618100][T18606] netlink: 'syz.1.4032': attribute type 4 has an invalid length.
[  391.664021][T18604] lo speed is unknown, defaulting to 1000
[  391.666858][T18604] lo speed is unknown, defaulting to 1000
[  391.732533][T18604] lo speed is unknown, defaulting to 1000
[  391.860310][T18614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.873723][T18614] syzkaller0: entered promiscuous mode
[  391.876630][T18614] syzkaller0: entered allmulticast mode
[  391.891518][T18618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4035'.
[  391.907678][T18614] tipc: Resetting bearer <eth:syzkaller0>
[  391.920961][T18617] syz.1.4035: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  391.928050][T18617] CPU: 0 UID: 0 PID: 18617 Comm: syz.1.4035 Not tainted syzkaller #0 PREEMPT(full) 
[  391.928072][T18617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  391.928081][T18617] Call Trace:
[  391.928088][T18617]  <TASK>
[  391.928096][T18617]  dump_stack_lvl+0x189/0x250
[  391.928140][T18617]  ? __pfx_dump_stack_lvl+0x10/0x10
[  391.928157][T18617]  ? __pfx__printk+0x10/0x10
[  391.928176][T18617]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  391.928192][T18617]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  391.928209][T18617]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  391.928226][T18617]  warn_alloc+0x214/0x310
[  391.928252][T18617]  ? __pfx_warn_alloc+0x10/0x10
[  391.928278][T18617]  ? __get_vm_area_node+0x28f/0x300
[  391.928303][T18617]  ? xskq_create+0xbf/0x170
[  391.928321][T18617]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  391.928364][T18617]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  391.928388][T18617]  ? __kasan_kmalloc+0x93/0xb0
[  391.928409][T18617]  vmalloc_user_noprof+0xad/0xf0
[  391.928428][T18617]  ? xskq_create+0xbf/0x170
[  391.928442][T18617]  xskq_create+0xbf/0x170
[  391.928459][T18617]  xsk_init_queue+0xb0/0x110
[  391.928476][T18617]  xsk_setsockopt+0x57b/0x8d0
[  391.928492][T18617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  391.928505][T18617]  ? __pfx_aa_sk_perm+0x10/0x10
[  391.928528][T18617]  ? __fget_files+0x2a/0x420
[  391.928539][T18617]  ? aa_sock_opt_perm+0xff/0x1b0
[  391.928555][T18617]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  391.928569][T18617]  ? __pfx_xsk_setsockopt+0x10/0x10
[  391.928584][T18617]  do_sock_setsockopt+0x17c/0x1b0
[  391.928607][T18617]  __x64_sys_setsockopt+0x13f/0x1b0
[  391.928629][T18617]  do_syscall_64+0xfa/0x3b0
[  391.928645][T18617]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.928659][T18617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.928672][T18617]  ? exc_page_fault+0x9f/0xf0
[  391.928689][T18617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.928702][T18617] RIP: 0033:0x7faad558ec29
[  391.928716][T18617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.928727][T18617] RSP: 002b:00007faad64ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  391.928742][T18617] RAX: ffffffffffffffda RBX: 00007faad57d5fa0 RCX: 00007faad558ec29
[  391.928751][T18617] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  391.928759][T18617] RBP: 00007faad5611e41 R08: 0000000000000004 R09: 0000000000000000
[  391.928767][T18617] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  391.928775][T18617] R13: 00007faad57d6038 R14: 00007faad57d5fa0 R15: 00007ffcbd804288
[  391.928798][T18617]  </TASK>
[  391.929254][T18613] tipc: Resetting bearer <eth:syzkaller0>
[  391.951980][T18617] Mem-Info:
[  392.047453][T18617] active_anon:13106 inactive_anon:0 isolated_anon:0
[  392.047453][T18617]  active_file:1626 inactive_file:38362 isolated_file:0
[  392.047453][T18617]  unevictable:1768 dirty:143 writeback:0
[  392.047453][T18617]  slab_reclaimable:11253 slab_unreclaimable:106749
[  392.047453][T18617]  mapped:18530 shmem:2443 pagetables:1151
[  392.047453][T18617]  sec_pagetables:0 bounce:0
[  392.047453][T18617]  kernel_misc_reclaimable:0
[  392.047453][T18617]  free:222363 free_pcp:25246 free_cma:0
[  392.066148][T18617] Node 0 active_anon:14676kB inactive_anon:0kB active_file:4316kB inactive_file:131548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33328kB dirty:276kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8480kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.079040][T18617] Node 1 active_anon:37748kB inactive_anon:0kB active_file:2188kB inactive_file:21900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40792kB dirty:296kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4624kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.092052][T18617] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:356kB local_pcp:0kB free_cma:0kB
[  392.102263][T18617] lowmem_reserve[]: 0 811 811 811 811
[  392.102832][T18613] tipc: Disabling bearer <eth:syzkaller0>
[  392.104043][T18617] Node 0 DMA32 free:142252kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14676kB inactive_anon:0kB active_file:4316kB inactive_file:131548kB unevictable:3536kB writepending:276kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:34144kB local_pcp:15728kB free_cma:0kB
[  392.117804][T18617] lowmem_reserve[]: 0 0 0 0 0
[  392.119792][T18617] Node 1 DMA32 free:425068kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16956kB local_pcp:7576kB free_cma:0kB
[  392.131346][T18617] lowmem_reserve[]: 0 0 854 854 854
[  392.133243][T18617] Node 1 Normal free:307152kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37744kB inactive_anon:0kB active_file:2188kB inactive_file:21892kB unevictable:3536kB writepending:296kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49564kB local_pcp:27148kB free_cma:0kB
[  392.146478][T18617] lowmem_reserve[]: 0 0 0 0 0
[  392.149738][T18617] Node 0 DMA: 7*4kB (U) 7*8kB (U) 7*16kB (U) 6*32kB (U) 6*64kB (U) 7*128kB (U) 6*256kB (U) 5*512kB (U) 5*1024kB (U) 2*2048kB (UM) 0*4096kB = 14980kB
[  392.164463][T18617] Node 0 DMA32: 1*4kB (E) 7*8kB (UE) 49*16kB (UME) 243*32kB (UME) 142*64kB (UE) 89*128kB (UME) 89*256kB (UM) 44*512kB (UM) 42*1024kB (UM) 4*2048kB (UM) 4*4096kB (UM) = 141996kB
[  392.210721][T18617] Node 1 DMA32: 63*4kB (UM) 56*8kB (U) 45*16kB (U) 45*32kB (U) 45*64kB (U) 44*128kB (UM) 44*256kB (U) 42*512kB (U) 44*1024kB (U) 0*2048kB 82*4096kB (M) = 425068kB
[  392.217507][T18617] Node 1 Normal: 208*4kB (UME) 40*8kB (U) 530*16kB (UE) 752*32kB (UME) 350*64kB (UE) 215*128kB (UE) 77*256kB (UME) 140*512kB (UM) 127*1024kB (UME) 1*2048kB (M) 0*4096kB = 307104kB
[  392.222855][T18622] netlink: 'syz.2.4036': attribute type 10 has an invalid length.
[  392.232641][T18617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.236560][T18617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  392.240448][T18617] 42431 total pagecache pages
[  392.243308][T18617] 0 pages in swap cache
[  392.244989][T18617] Free swap  = 124996kB
[  392.246665][T18617] Total swap = 124996kB
[  392.248372][T18617] 786301 pages RAM
[  392.249974][T18617] 0 pages HighMem/MovableOnly
[  392.252892][T18617] 241367 pages reserved
[  392.254682][T18617] 0 pages cma reserved
[  392.286825][T18603] syz_tun: left allmulticast mode
[  392.307127][T18603] dvmrp8: left allmulticast mode
[  392.395892][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4039'.
[  392.398861][T18632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4039'.
[  392.415286][ T5911] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  392.417531][T18632] netlink: 'syz.1.4039': attribute type 4 has an invalid length.
[  392.478699][T18625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.623938][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'.
[  392.712993][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'.
[  392.724485][T18656] netlink: 'syz.0.4044': attribute type 5 has an invalid length.
[  392.872739][T18663] netlink: 'syz.0.4045': attribute type 303 has an invalid length.
[  392.881599][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'.
[  392.898597][T18658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  392.910431][T18658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  393.045335][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'.
[  393.117726][T18681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.122577][T18681] syzkaller0: entered promiscuous mode
[  393.124435][T18681] syzkaller0: entered allmulticast mode
[  393.133636][T18681] macsec1: entered promiscuous mode
[  393.135661][T18681] macsec1: entered allmulticast mode
[  393.137662][T18681] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[  393.152211][T18681] tipc: Resetting bearer <eth:syzkaller0>
[  393.156474][T18680] tipc: Resetting bearer <eth:syzkaller0>
[  393.169504][T18680] tipc: Disabling bearer <eth:syzkaller0>
[  393.266925][T18683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.295172][T18683] syzkaller0: entered promiscuous mode
[  393.296957][T18683] syzkaller0: entered allmulticast mode
[  393.299240][T18683] tipc: Resetting bearer <eth:syzkaller0>
[  393.305752][T18683] tipc: Resetting bearer <eth:syzkaller0>
[  394.616818][ T3554] tipc: Resetting bearer <eth:syzkaller0>
[  394.622164][T18682] tipc: Resetting bearer <eth:syzkaller0>
[  394.636336][T18682] tipc: Disabling bearer <eth:syzkaller0>
[  394.679786][T18694] IPv6: sit4: Disabled Multicast RS
[  394.683602][T18694] sit4: entered allmulticast mode
[  394.853150][T18704] lo speed is unknown, defaulting to 1000
[  394.856032][T18704] lo speed is unknown, defaulting to 1000
[  394.859022][T18704] lo speed is unknown, defaulting to 1000
[  394.952255][T18705] lo speed is unknown, defaulting to 1000
[  394.992316][T18705] lo speed is unknown, defaulting to 1000
[  395.145634][T18705] lo speed is unknown, defaulting to 1000
[  395.833865][T18722] netlink: 'syz.1.4065': attribute type 3 has an invalid length.
[  395.837329][T18722] netlink: 'syz.1.4065': attribute type 1 has an invalid length.
[  395.845539][T18724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.153534][T18743] netlink: 'syz.0.4072': attribute type 4 has an invalid length.
[  396.162981][   T47] lo speed is unknown, defaulting to 1000
[  396.165430][   T47] syz0: Port: 1 Link DOWN
[  396.168113][T18743] netlink: 'syz.0.4072': attribute type 4 has an invalid length.
[  396.176065][   T47] lo speed is unknown, defaulting to 1000
[  396.179070][   T47] syz0: Port: 1 Link ACTIVE
[  396.189243][T17820] lo speed is unknown, defaulting to 1000
[  396.276808][T18750] netlink: 'syz.1.4074': attribute type 2 has an invalid length.
[  396.289638][T18750] netlink: 'syz.1.4074': attribute type 1 has an invalid length.
[  396.394805][T18754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.395139][T18758] __nla_validate_parse: 11 callbacks suppressed
[  396.395153][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'.
[  396.403140][T18754] syzkaller0: entered promiscuous mode
[  396.405293][T18754] syzkaller0: entered allmulticast mode
[  396.484409][T18754] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  396.593178][T18760] tipc: Resetting bearer <eth:syzkaller0>
[  396.619239][T18760] tipc: Disabling bearer <eth:syzkaller0>
[  396.896229][T18776] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  397.066020][T18787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4084'.
[  397.076351][T18788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4084'.
[  397.172609][T18791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4086'.
[  397.176122][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4086'.
[  397.502730][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4091'.
[  397.528504][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4091'.
[  397.734923][T18816] nbd: must specify a size in bytes for the device
[  397.745869][T18815] lo speed is unknown, defaulting to 1000
[  397.749838][T18815] lo speed is unknown, defaulting to 1000
[  397.763235][T18815] lo speed is unknown, defaulting to 1000
[  398.032330][T18830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4099'.
[  398.124106][T18835] Unsupported ieee802154 address type: 0
[  398.128085][T18834] Unsupported ieee802154 address type: 0
[  398.233919][T18837] vti2: entered promiscuous mode
[  398.521246][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'.
[  398.531690][T18853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4108'.
[  399.384946][T18913] lo speed is unknown, defaulting to 1000
[  399.393518][T18913] lo speed is unknown, defaulting to 1000
[  399.398803][T18913] lo speed is unknown, defaulting to 1000
[  399.433961][T18916] netlink: 'syz.2.4127': attribute type 5 has an invalid length.
[  399.449847][T18916] geneve4: entered promiscuous mode
[  399.453666][T18916] geneve4: entered allmulticast mode
[  399.833483][T18927] nbd: nbd0 already in use
[  399.978740][T18936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.982265][T18936] syzkaller0: entered promiscuous mode
[  399.984408][T18936] syzkaller0: entered allmulticast mode
[  400.005715][ T5911] syzkaller0: tun_net_xmit 70
[  400.014134][T18936] tipc: Resetting bearer <eth:syzkaller0>
[  400.016554][T18936] syzkaller0: tun_net_xmit 90
[  400.032627][T18935] tipc: Resetting bearer <eth:syzkaller0>
[  400.066672][T18935] tipc: Disabling bearer <eth:syzkaller0>
[  400.390076][T18950] lo speed is unknown, defaulting to 1000
[  400.442282][T18950] lo speed is unknown, defaulting to 1000
[  400.458056][T18950] lo speed is unknown, defaulting to 1000
[  400.473363][T18959] tc_dump_action: action bad kind
[  400.709887][T18969] netlink: 'syz.1.4141': attribute type 4 has an invalid length.
[  400.858786][T18980] syzkaller0: entered promiscuous mode
[  400.862606][T18980] syzkaller0: entered allmulticast mode
[  401.177289][T18990] lo speed is unknown, defaulting to 1000
[  401.184465][T18990] lo speed is unknown, defaulting to 1000
[  401.188467][T18990] lo speed is unknown, defaulting to 1000
[  401.231541][ T5896] lo speed is unknown, defaulting to 1000
[  401.233475][ T5896] syz1: Port: 1 Link DOWN
[  401.388032][T19021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.391887][T19021] syzkaller0: entered promiscuous mode
[  401.394802][T19021] syzkaller0: entered allmulticast mode
[  401.408476][T19021] tipc: Resetting bearer <eth:syzkaller0>
[  401.421029][T19021] syzkaller0: tun_net_xmit 90
[  401.425105][T19020] tipc: Resetting bearer <eth:syzkaller0>
[  401.445945][T19020] tipc: Disabling bearer <eth:syzkaller0>
[  401.456543][T19025] __nla_validate_parse: 110 callbacks suppressed
[  401.456556][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4155'.
[  401.464775][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4155'.
[  401.467805][T19025] netlink: 'syz.1.4155': attribute type 4 has an invalid length.
[  401.516227][T19027] nftables ruleset with unbound set
[  401.877751][T19058] lo speed is unknown, defaulting to 1000
[  401.886547][T19058] lo speed is unknown, defaulting to 1000
[  401.911835][T19058] lo speed is unknown, defaulting to 1000
[  402.135896][T19069] IPVS: Scheduler module ip_vs_sip not found
[  402.377486][T19087] netem: change failed
[  402.492661][T19087] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4171'.
[  402.646968][T19103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4175'.
[  402.654544][T19103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4175'.
[  402.658348][T19103] netlink: 'syz.2.4175': attribute type 4 has an invalid length.
[  402.698191][T19105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4176'.
[  402.756063][T19111] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4178'.
[  402.761646][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4178'.
[  403.058401][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4180'.
[  403.064219][T19119] netlink: 'syz.0.4180': attribute type 20 has an invalid length.
[  403.066752][T19119] netlink: 'syz.0.4180': attribute type 21 has an invalid length.
[  403.087284][T19119] syzkaller0: entered promiscuous mode
[  403.089605][T19119] syzkaller0: entered allmulticast mode
[  403.089736][T19123] netlink: 'syz.2.4181': attribute type 1 has an invalid length.
[  403.092880][   T13] syzkaller0: tun_net_xmit 70
[  403.168931][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4184'.
[  403.241733][   T47] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  403.249834][   T47] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  403.296766][T19134] netlink: 'syz.1.4186': attribute type 1 has an invalid length.
[  403.346676][T19136] netlink: 'syz.2.4187': attribute type 3 has an invalid length.
[  403.505393][T19150] netlink: 'syz.1.4193': attribute type 1 has an invalid length.
[  403.524547][T19150] 8021q: adding VLAN 0 to HW filter on device bond26
[  403.554786][T19150] 8021q: adding VLAN 0 to HW filter on device bond26
[  403.557858][T19150] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address
[  403.564305][T19150] bond26: (slave vxcan3): Error -95 calling set_mac_address
[  403.574714][T19153] netlink: 'syz.2.4194': attribute type 4 has an invalid length.
[  403.596546][T19154] veth15: entered promiscuous mode
[  403.604064][T19154] bond26: (slave veth15): Enslaving as an active interface with a down link
[  403.618664][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.621598][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.634458][T19156] netlink: 'syz.2.4195': attribute type 4 has an invalid length.
[  404.056552][T19195] rdma_rxe: rxe_newlink: failed to add macsec0
[  404.686777][T19219] bond24: (slave geneve3): making interface the new active one
[  404.692104][T19219] bond24: (slave geneve3): Enslaving as an active interface with an up link
[  404.695623][ T5716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  404.698879][ T5716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  404.702762][ T5716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  404.706244][ T5716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  404.715294][T19219] 8021q: adding VLAN 0 to HW filter on device bond24
[  404.759694][T19222] lo: entered allmulticast mode
[  404.774096][T19222] tunl0: entered allmulticast mode
[  404.779377][T19222] gre0: entered allmulticast mode
[  404.788282][T19222] gretap0: entered allmulticast mode
[  404.796342][T19222] erspan0: entered allmulticast mode
[  404.799775][T19222] ip_vti0: entered allmulticast mode
[  404.804668][T19222] ip6_vti0: entered allmulticast mode
[  404.811577][T19222] sit0: entered allmulticast mode
[  404.829009][T19222] ip6tnl0: entered allmulticast mode
[  404.837873][T19222] ip6gre0: entered allmulticast mode
[  404.845744][T19222] syz_tun: entered allmulticast mode
[  404.854166][T19222] ip6gretap0: entered allmulticast mode
[  404.861930][T19222] team0: entered allmulticast mode
[  404.863801][T19222] geneve0: entered allmulticast mode
[  404.865740][T19222] macvlan0: entered allmulticast mode
[  404.871850][T19222] !: entered allmulticast mode
[  404.877513][T19222] nlmon0: entered allmulticast mode
[  404.881593][T19222] caif0: entered allmulticast mode
[  404.883923][T19222] batadv0: entered allmulticast mode
[  404.886272][T19222] vxcan0: entered allmulticast mode
[  404.888585][T19222] vxcan1: entered allmulticast mode
[  404.891242][T19222] veth0: entered allmulticast mode
[  404.893530][T19222] veth1: entered allmulticast mode
[  404.896994][T19222] wg1: entered allmulticast mode
[  404.901055][T19222] wg2: entered allmulticast mode
[  404.903239][T19222] veth0_to_bridge: entered allmulticast mode
[  404.905725][T19222] bridge_slave_0: entered allmulticast mode
[  404.908249][T19222] veth1_to_bridge: entered allmulticast mode
[  404.911822][T19222] bridge_slave_1: entered allmulticast mode
[  404.914276][T19222] veth0_to_bond: entered allmulticast mode
[  404.916690][T19222] bond_slave_0: entered allmulticast mode
[  404.918995][T19222] veth1_to_bond: entered allmulticast mode
[  404.921680][T19222] bond_slave_1: entered allmulticast mode
[  404.923974][T19222] veth1_to_team: entered allmulticast mode
[  404.926365][T19222] team_slave_1: entered allmulticast mode
[  404.928718][T19222] veth0_to_batadv: entered allmulticast mode
[  404.932330][T19222] batadv_slave_0: entered allmulticast mode
[  404.934724][T19222] xfrm0: entered allmulticast mode
[  404.936828][T19222] veth0_to_hsr: entered allmulticast mode
[  404.939283][T19222] veth1_to_hsr: entered allmulticast mode
[  404.944858][T19222] veth1_virt_wifi: entered allmulticast mode
[  404.947299][T19222] veth0_virt_wifi: entered allmulticast mode
[  404.949759][T19222] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  404.952857][T19222] veth1_vlan: entered allmulticast mode
[  404.955181][T19222] veth0_vlan: entered allmulticast mode
[  404.957443][T19222] vlan1: entered allmulticast mode
[  404.959543][T19222] macvlan1: entered allmulticast mode
[  404.962081][T19222] ipvlan0: entered allmulticast mode
[  404.964495][T19222] ipvlan1: entered allmulticast mode
[  404.966804][T19222] geneve1: entered allmulticast mode
[  404.968840][T19222] bond1: entered allmulticast mode
[  404.970603][T19222] erspan1: entered allmulticast mode
[  404.972350][T19222] mac80211_hwsim hwsim9 wlan2: entered allmulticast mode
[  404.974537][T19222] bond2: entered allmulticast mode
[  404.976197][T19222] mac80211_hwsim hwsim10 wlan3: entered allmulticast mode
[  404.978418][T19222] mac80211_hwsim hwsim11 wlan4: entered allmulticast mode
[  404.981235][T19222] @: entered allmulticast mode
[  404.983304][T19222] bond3: entered allmulticast mode
[  404.985303][T19222] ip6gretap1: entered allmulticast mode
[  404.987401][T19222] veth5: entered allmulticast mode
[  404.989507][T19222] ip6tnl1: entered allmulticast mode
[  404.991814][T19222] veth2: entered allmulticast mode
[  404.993966][T19222] veth3: entered allmulticast mode
[  404.996103][T19222] bridge1: entered allmulticast mode
[  404.998502][T19222] bond4: entered allmulticast mode
[  405.000789][T19222] vti0: entered allmulticast mode
[  405.002875][T19222] bond5: entered allmulticast mode
[  405.005095][T19222] veth4: entered allmulticast mode
[  405.007370][T19222] _Z`Ԁ@S!: entered allmulticast mode
[  405.009716][T19222] ip6tnl2: entered allmulticast mode
[  405.012617][T19222] ieee802154 phy1 wpan1: entered allmulticast mode
[  405.015282][T19222] hsr1: entered allmulticast mode
[  405.017381][T19222] k*: entered allmulticast mode
[  405.019367][T19222] vxcan2: entered allmulticast mode
[  405.021561][T19222] vxcan3: entered allmulticast mode
[  405.023508][T19222] ip6gre1: entered allmulticast mode
[  405.025307][T19222] bridge2: entered allmulticast mode
[  405.027177][T19222] bridge3: entered allmulticast mode
[  405.029144][T19222] gre1: entered allmulticast mode
[  405.031289][T19222] bridge4: entered allmulticast mode
[  405.033041][T19222] ip6gre2: entered allmulticast mode
[  405.034961][T19222] veth6: entered allmulticast mode
[  405.036987][T19222] veth7: entered allmulticast mode
[  405.039134][T19222] bridge5: entered allmulticast mode
[  405.041380][T19222] ip6tnl3: entered allmulticast mode
[  405.043060][T19222] bond6: entered allmulticast mode
[  405.044855][T19222] veth8: entered allmulticast mode
[  405.046677][T19222] veth9: entered allmulticast mode
[  405.048633][T19222] bond7: entered allmulticast mode
[  405.050679][T19222] bridge6: entered allmulticast mode
[  405.052573][T19222] bond8: entered allmulticast mode
[  405.054192][T19222] bond9: entered allmulticast mode
[  405.055968][T19222] bond10: entered allmulticast mode
[  405.058094][T19222] bond11: entered allmulticast mode
[  405.060242][T19222] bond12: entered allmulticast mode
[  405.062721][T19222] gretap1: entered allmulticast mode
[  405.064914][T19222] sit1: entered allmulticast mode
[  405.067343][T19222] syztnl0: entered allmulticast mode
[  405.069591][T19222] bridge7: entered allmulticast mode
[  405.072250][T19222] bond13: entered allmulticast mode
[  405.074583][T19222] mac80211_hwsim hwsim33 wlan5: entered allmulticast mode
[  405.077588][T19222] mac80211_hwsim hwsim3 pimreg: entered allmulticast mode
[  405.080675][T19222] bond0: entered allmulticast mode
[  405.082758][T19222] bridge9: entered allmulticast mode
[  405.084996][T19222] bridge10: entered allmulticast mode
[  405.087237][T19222] veth0_vlan.0: entered allmulticast mode
[  405.089613][T19222] bond14: entered allmulticast mode
[  405.092073][T19222] bond15: entered allmulticast mode
[  405.094244][T19222] netdevsim netdevsim0 eth0: entered allmulticast mode
[  405.096963][T19222] netdevsim netdevsim0 eth1: entered allmulticast mode
[  405.099595][T19222] netdevsim netdevsim0 eth2: entered allmulticast mode
[  405.102608][T19222] netdevsim netdevsim0 eth3: entered allmulticast mode
[  405.105462][T19222] bridge11: entered allmulticast mode
[  405.107669][T19222] mac80211_hwsim hwsim35 wlan6: entered allmulticast mode
[  405.110861][T19222] gre2: entered allmulticast mode
[  405.112995][T19222] gre3: entered allmulticast mode
[  405.115133][T19222] mac80211_hwsim hwsim38 wlan7: entered allmulticast mode
[  405.117990][T19222] gretap2: entered allmulticast mode
[  405.120146][T19222] xfrm1: entered allmulticast mode
[  405.122509][T19222] bridge12: entered allmulticast mode
[  405.124757][T19222] sit2: entered allmulticast mode
[  405.126990][T19222] vti1: entered allmulticast mode
[  405.129169][T19222] gre4: entered allmulticast mode
[  405.131809][T19222] ipip0: entered allmulticast mode
[  405.133927][T19222] gretap3: entered allmulticast mode
[  405.142264][T19222] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode
[  405.155378][T19222] sit3: entered allmulticast mode
[  405.157557][T19222] sit4: entered allmulticast mode
[  405.159703][T19222] mac80211_hwsim hwsim42 wlan8: entered allmulticast mode
[  405.167821][T19222] bond16: entered allmulticast mode
[  405.170089][T19222] gretap4: entered allmulticast mode
[  405.184050][T19222] sit5: left promiscuous mode
[  405.185974][T19222] sit5: entered allmulticast mode
[  405.194215][T19222] bond17: entered allmulticast mode
[  405.200010][T19222] bond18: entered allmulticast mode
[  405.203685][T19222] bond19: entered allmulticast mode
[  405.209668][T19222] syztnl1: entered allmulticast mode
[  405.212905][T19222] gre5: entered allmulticast mode
[  405.219444][T19222] geneve2: entered allmulticast mode
[  405.221998][T19222] bridge13: entered allmulticast mode
[  405.225245][T19222] bridge14: entered allmulticast mode
[  405.233702][T19222] syztnl2: entered allmulticast mode
[  405.237303][T19222] bond20: entered allmulticast mode
[  405.242566][T19222] bond21: entered allmulticast mode
[  405.249771][T19222] bond22: entered allmulticast mode
[  405.252226][T19222] gretap5: entered allmulticast mode
[  405.260048][T19222] gretap5: left promiscuous mode
[  405.264921][T19222] batadv1: entered allmulticast mode
[  405.267970][T19222] veth10: entered allmulticast mode
[  405.270231][T19222] veth11: left promiscuous mode
[  405.273154][T19222] veth11: entered allmulticast mode
[  405.276066][T19222] gre6: entered allmulticast mode
[  405.282634][T19222] veth0_vlan.3: entered allmulticast mode
[  405.285453][T19222] bond23: entered allmulticast mode
[  405.288370][T19222] vti2: left promiscuous mode
[  405.290423][T19222] vti2: entered allmulticast mode
[  405.301833][T19222] vxlan0: entered allmulticast mode
[  405.311439][T19222] bond24: entered allmulticast mode
[  405.313449][T19222] geneve3: entered allmulticast mode
[  405.322655][   T10] lo speed is unknown, defaulting to 1000
[  405.333915][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  405.337273][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  405.340501][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  405.341045][   T10] syz0: Port: 1 Link DOWN
[  405.350640][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  405.360711][   T10] lo speed is unknown, defaulting to 1000
[  405.545525][ T5716] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  405.804541][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.808022][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.813597][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.817331][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.057520][T19253] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  406.063167][T19253] CPU: 0 UID: 0 PID: 19253 Comm: syz.0.4223 Not tainted syzkaller #0 PREEMPT(full) 
[  406.063206][T19253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  406.063216][T19253] Call Trace:
[  406.063224][T19253]  <TASK>
[  406.063233][T19253]  dump_stack_lvl+0x189/0x250
[  406.063260][T19253]  ? __pfx_dump_stack_lvl+0x10/0x10
[  406.063279][T19253]  ? __pfx__printk+0x10/0x10
[  406.063304][T19253]  ? kernfs_path_from_node+0x2f/0x290
[  406.063320][T19253]  ? kernfs_path_from_node+0x250/0x290
[  406.063334][T19253]  ? kernfs_path_from_node+0x2f/0x290
[  406.063353][T19253]  sysfs_warn_dup+0x8e/0xa0
[  406.063376][T19253]  sysfs_do_create_link_sd+0xc0/0x110
[  406.063397][T19253]  device_add_class_symlinks+0x1cf/0x240
[  406.063420][T19253]  device_add+0x475/0xb50
[  406.063443][T19253]  wiphy_register+0x1c81/0x2aa0
[  406.063479][T19253]  ? __pfx_wiphy_register+0x10/0x10
[  406.063498][T19253]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  406.063519][T19253]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  406.063544][T19253]  ieee80211_register_hw+0x3442/0x40a0
[  406.063573][T19253]  ? ieee80211_register_hw+0x1461/0x40a0
[  406.063595][T19253]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  406.063613][T19253]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  406.063636][T19253]  ? __hrtimer_setup+0x187/0x210
[  406.063651][T19253]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  406.063672][T19253]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  406.063725][T19253]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  406.063747][T19253]  ? trace_kmalloc+0x1f/0xd0
[  406.063764][T19253]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  406.063783][T19253]  ? kstrndup+0xbf/0x160
[  406.063804][T19253]  hwsim_new_radio_nl+0xea4/0x1b10
[  406.063819][T19253]  ? __pfx___nla_validate_parse+0x10/0x10
[  406.063844][T19253]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  406.063870][T19253]  ? __nla_parse+0x40/0x60
[  406.063889][T19253]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  406.063909][T19253]  genl_family_rcv_msg_doit+0x215/0x300
[  406.063931][T19253]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  406.063955][T19253]  ? bpf_lsm_capable+0x9/0x20
[  406.063974][T19253]  ? security_capable+0x7e/0x2e0
[  406.063998][T19253]  genl_rcv_msg+0x60e/0x790
[  406.064018][T19253]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.064031][T19253]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  406.064088][T19253]  netlink_rcv_skb+0x208/0x470
[  406.064124][T19253]  ? __lock_acquire+0xab9/0xd20
[  406.064150][T19253]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.064167][T19253]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  406.064204][T19253]  ? down_read+0x1ad/0x2e0
[  406.064227][T19253]  genl_rcv+0x28/0x40
[  406.064238][T19253]  netlink_unicast+0x82f/0x9e0
[  406.064265][T19253]  ? __pfx_netlink_unicast+0x10/0x10
[  406.064284][T19253]  ? netlink_sendmsg+0x642/0xb30
[  406.064300][T19253]  ? skb_put+0x11b/0x210
[  406.064320][T19253]  netlink_sendmsg+0x805/0xb30
[  406.064342][T19253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.064359][T19253]  ? aa_sock_msg_perm+0xf1/0x1d0
[  406.064380][T19253]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  406.064394][T19253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.064413][T19253]  __sock_sendmsg+0x21c/0x270
[  406.064432][T19253]  ____sys_sendmsg+0x505/0x830
[  406.064458][T19253]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.064489][T19253]  ? import_iovec+0x74/0xa0
[  406.064507][T19253]  ___sys_sendmsg+0x21f/0x2a0
[  406.064526][T19253]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.064579][T19253]  ? __fget_files+0x2a/0x420
[  406.064591][T19253]  ? __fget_files+0x3a0/0x420
[  406.064612][T19253]  __x64_sys_sendmsg+0x19b/0x260
[  406.064634][T19253]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.064665][T19253]  ? rcu_is_watching+0x15/0xb0
[  406.064684][T19253]  ? do_syscall_64+0xbe/0x3b0
[  406.064703][T19253]  do_syscall_64+0xfa/0x3b0
[  406.064719][T19253]  ? lockdep_hardirqs_on+0x9c/0x150
[  406.064736][T19253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.064751][T19253]  ? exc_page_fault+0x9f/0xf0
[  406.064767][T19253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.064780][T19253] RIP: 0033:0x7fd12438ec29
[  406.064793][T19253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.064805][T19253] RSP: 002b:00007fd125254038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.064822][T19253] RAX: ffffffffffffffda RBX: 00007fd1245d5fa0 RCX: 00007fd12438ec29
[  406.064832][T19253] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  406.064842][T19253] RBP: 00007fd124411e41 R08: 0000000000000000 R09: 0000000000000000
[  406.064852][T19253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.064860][T19253] R13: 00007fd1245d6038 R14: 00007fd1245d5fa0 R15: 00007ffed51652c8
[  406.064886][T19253]  </TASK>
[  406.243089][T19254] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  406.244302][T19236] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  406.547151][T19273] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700)
[  406.554086][T19273] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  406.587680][T19275] validate_nla: 4 callbacks suppressed
[  406.587695][T19275] netlink: 'syz.1.4230': attribute type 13 has an invalid length.
[  406.593420][T19275] netlink: 'syz.1.4230': attribute type 17 has an invalid length.
[  406.608233][T19275] ip6gretap0: entered promiscuous mode
[  406.613904][T19275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.621908][ T5896] lo speed is unknown, defaulting to 1000
[  406.624044][ T5896] syz1: Port: 1 Link ACTIVE
[  406.760059][T19280] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  406.769210][   T10] lo speed is unknown, defaulting to 1000
[  406.772953][   T10] syz1: Port: 1 Link DOWN
[  406.819596][T19285] vlan0: entered promiscuous mode
[  406.821516][T19285] bond0: entered promiscuous mode
[  406.823327][T19285] vlan0: entered allmulticast mode
[  406.824900][T19285] bond0: entered allmulticast mode
[  406.988226][T19294] lo speed is unknown, defaulting to 1000
[  406.993398][T19294] lo speed is unknown, defaulting to 1000
[  406.996613][T19294] lo speed is unknown, defaulting to 1000
[  407.460756][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  408.046052][T19312] __nla_validate_parse: 18 callbacks suppressed
[  408.046076][T19312] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4239'.
[  408.063251][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4239'.
[  408.066953][T19312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4239'.
[  408.130961][T19317] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  408.177178][T19321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'.
[  408.182284][T19321] smc: net device bond0 applied user defined pnetid SYZ
[  408.396544][T19341] lo speed is unknown, defaulting to 1000
[  408.399843][T19341] lo speed is unknown, defaulting to 1000
[  408.403071][T19341] lo speed is unknown, defaulting to 1000
[  409.142712][T19350] netlink: 'syz.0.4250': attribute type 1 has an invalid length.
[  409.317431][T19357] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  409.374275][T19359] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  409.379584][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.385584][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.403513][T19360] team0: Device gtp0 is of different type
[  409.538739][ T5849] Bluetooth: hci2: link tx timeout
[  409.544061][ T5849] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  409.720032][T19382] netlink: 'syz.1.4260': attribute type 39 has an invalid length.
[  409.776571][T19384] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  409.779974][T19384] macsec2: entered promiscuous mode
[  409.783065][T19384] macsec2: entered allmulticast mode
[  409.785461][T19384] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[  409.811664][T19386] team0: Device gtp0 is of different type
[  409.934288][T19393] lo speed is unknown, defaulting to 1000
[  409.939439][T19393] lo speed is unknown, defaulting to 1000
[  409.944727][T19393] lo speed is unknown, defaulting to 1000
[  409.990499][T19396] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  410.028363][T19396] IPVS: set_ctl: invalid protocol: 47 172.20.20.40:20000
[  410.095238][T19396] rdma_rxe: rxe_newlink: failed to add vxcan1
[  410.260073][T19404] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4267'.
[  410.460277][T19407] tipc: Resetting bearer <eth:team0>
[  410.483213][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  410.490885][ T5896] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  410.581170][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  410.686109][T19418] netlink: 'syz.2.4273': attribute type 10 has an invalid length.
[  410.782301][T19422] netlink: 'syz.2.4274': attribute type 1 has an invalid length.
[  410.820861][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  410.839529][T19423] lo speed is unknown, defaulting to 1000
[  410.862438][T19423] lo speed is unknown, defaulting to 1000
[  410.883043][T19423] lo speed is unknown, defaulting to 1000
[  410.894730][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'.
[  411.227045][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'.
[  411.460882][ T5896] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  411.550060][T19444] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4279'.
[  411.605768][T19448] netlink: 'syz.0.4281': attribute type 1 has an invalid length.
[  411.608923][T19450] netlink: 'syz.0.4281': attribute type 1 has an invalid length.
[  411.614877][T19448] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4281'.
[  411.618183][T19450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4281'.
[  411.633594][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  411.843565][T19460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.857718][T19460] syzkaller0: entered promiscuous mode
[  411.860004][T19460] syzkaller0: entered allmulticast mode
[  411.987928][T19460] tipc: Resetting bearer <eth:syzkaller0>
[  411.993030][T19459] tipc: Resetting bearer <eth:syzkaller0>
[  412.033014][T19459] tipc: Disabling bearer <eth:syzkaller0>
[  412.228443][T19487] netlink: 'syz.1.4290': attribute type 21 has an invalid length.
[  412.313693][T19489] netlink: 'syz.1.4291': attribute type 4 has an invalid length.
[  412.686595][ T5716] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  412.742061][   T25] block nbd0: Possible stuck request ffff8880374f0000: control (read@0,1024B). Runtime 270 seconds
[  412.746376][   T25] block nbd0: Possible stuck request ffff8880374f0200: control (read@1024,1024B). Runtime 270 seconds
[  412.752234][   T25] block nbd0: Possible stuck request ffff8880374f0400: control (read@2048,1024B). Runtime 270 seconds
[  412.756902][   T25] block nbd0: Possible stuck request ffff8880374f0600: control (read@3072,1024B). Runtime 270 seconds
[  413.549134][T19526] netlink: 'syz.0.4298': attribute type 16 has an invalid length.
[  413.553007][T19526] __nla_validate_parse: 9 callbacks suppressed
[  413.553028][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4298'.
[  413.561384][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'.
[  413.562126][T19526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4298'.
[  413.570214][T19527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4299'.
[  413.661941][T19533] netlink: 'syz.2.4301': attribute type 29 has an invalid length.
[  413.668385][T19535] netlink: 'syz.0.4302': attribute type 12 has an invalid length.
[  413.749789][T19538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4303'.
[  416.261513][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'.
[  416.265923][T19560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4307'.
[  416.579925][T19568] netlink: 'syz.1.4310': attribute type 7 has an invalid length.
[  416.583315][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4310'.
[  416.645340][T19579] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4312'.
[  416.737655][T19586] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4314'.
[  416.742690][T19586] 8021q: VLANs not supported on ipvlan1
[  416.755141][T19586] macsec0: entered promiscuous mode
[  416.757456][T19586] macsec0: entered allmulticast mode
[  416.847490][T19594] netlink: 'syz.0.4315': attribute type 1 has an invalid length.
[  416.900070][T19597] openvswitch: netlink: Flow actions attr not present in new flow.
[  416.969601][T19605] netlink: 'syz.0.4319': attribute type 3 has an invalid length.
[  416.974536][T19605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.247979][T19620] netlink: 'syz.2.4325': attribute type 4 has an invalid length.
[  417.513093][T19642] bridge0: entered allmulticast mode
[  417.519297][T19644] netlink: 'syz.2.4332': attribute type 29 has an invalid length.
[  417.531801][T19644] netlink: 'syz.2.4332': attribute type 29 has an invalid length.
[  417.656865][T19653] netlink: 'syz.1.4334': attribute type 1 has an invalid length.
[  417.849659][T19669] veth15: entered promiscuous mode
[  417.853051][T19669] netlink: 'syz.0.4340': attribute type 4 has an invalid length.
[  417.859113][T19669] netlink: 'syz.0.4340': attribute type 4 has an invalid length.
[  417.872481][ T5896] lo speed is unknown, defaulting to 1000
[  417.874948][ T5896] syz0: Port: 1 Link ACTIVE
[  417.876514][ T5847] lo speed is unknown, defaulting to 1000
[  418.113792][T19694] team0: No ports can be present during mode change
[  418.116533][T19697] lo speed is unknown, defaulting to 1000
[  418.118547][T19696] IPVS: Unknown mcast interface: vcan0
[  418.124350][T19697] lo speed is unknown, defaulting to 1000
[  418.131796][T19697] lo speed is unknown, defaulting to 1000
[  418.289719][T19703] ip6tnl4: entered promiscuous mode
[  418.484242][T19722] netlink: 'syz.2.4353': attribute type 15 has an invalid length.
[  418.554115][T19722] netlink: 'syz.2.4353': attribute type 15 has an invalid length.
[  418.594457][T19724] __nla_validate_parse: 14 callbacks suppressed
[  418.594478][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4354'.
[  418.675086][T19726] lo speed is unknown, defaulting to 1000
[  418.677896][T19726] lo speed is unknown, defaulting to 1000
[  418.683104][T19726] lo speed is unknown, defaulting to 1000
[  418.745184][T19728] geneve4: entered promiscuous mode
[  418.747320][T19728] geneve4: entered allmulticast mode
[  418.775689][T19731] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4357'.
[  418.810060][T19735] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4358'.
[  419.011427][T19737] nbd: error processing sock list
[  419.015353][T19737] block nbd3: shutting down sockets
[  419.050483][T19746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4361'.
[  419.092782][T19747] sctp: [Deprecated]: syz.1.4362 (pid 19747) Use of int in max_burst socket option.
[  419.092782][T19747] Use struct sctp_assoc_value instead
[  419.119649][T19746] 8021q: adding VLAN 0 to HW filter on device bond23
[  419.124916][T19746] bond22: (slave bond23): Enslaving as a backup interface with a down link
[  419.255788][T19760] syzkaller1: entered promiscuous mode
[  419.257574][T19760] syzkaller1: entered allmulticast mode
[  419.494127][T19777] veth0_to_bond: entered allmulticast mode
[  419.714419][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4370'.
[  419.832249][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'.
[  420.181734][T19796] lo speed is unknown, defaulting to 1000
[  420.190159][T19796] lo speed is unknown, defaulting to 1000
[  420.198570][T19796] lo speed is unknown, defaulting to 1000
[  420.278578][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'.
[  420.293517][T19801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4375'.
[  420.357277][T19806] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  420.491792][T19811] netlink: 308 bytes leftover after parsing attributes in process `syz.1.4378'.
[  421.064698][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.079735][T19832] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4383'.
[  421.197979][T19840] syz.1.4384: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  421.223443][T19840] CPU: 1 UID: 0 PID: 19840 Comm: syz.1.4384 Not tainted syzkaller #0 PREEMPT(full) 
[  421.223461][T19840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  421.223468][T19840] Call Trace:
[  421.223473][T19840]  <TASK>
[  421.223478][T19840]  dump_stack_lvl+0x189/0x250
[  421.223501][T19840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.223511][T19840]  ? __pfx__printk+0x10/0x10
[  421.223525][T19840]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  421.223536][T19840]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  421.223547][T19840]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  421.223560][T19840]  warn_alloc+0x214/0x310
[  421.223574][T19840]  ? stack_depot_save_flags+0x40/0x860
[  421.223589][T19840]  ? __pfx_warn_alloc+0x10/0x10
[  421.223603][T19840]  ? kasan_save_track+0x4f/0x80
[  421.223617][T19840]  ? xskq_create+0x56/0x170
[  421.223627][T19840]  ? xsk_init_queue+0xb0/0x110
[  421.223634][T19840]  ? xsk_setsockopt+0x4dc/0x8d0
[  421.223641][T19840]  ? do_sock_setsockopt+0x17c/0x1b0
[  421.223652][T19840]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  421.223661][T19840]  ? do_syscall_64+0xfa/0x3b0
[  421.223671][T19840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.223682][T19840]  __vmalloc_node_range_noprof+0x125/0x12f0
[  421.223709][T19840]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  421.223724][T19840]  ? __kasan_kmalloc+0x93/0xb0
[  421.223736][T19840]  vmalloc_user_noprof+0xad/0xf0
[  421.223748][T19840]  ? xskq_create+0xbf/0x170
[  421.223757][T19840]  xskq_create+0xbf/0x170
[  421.223767][T19840]  xsk_init_queue+0xb0/0x110
[  421.223777][T19840]  xsk_setsockopt+0x4dc/0x8d0
[  421.223787][T19840]  ? __pfx_xsk_setsockopt+0x10/0x10
[  421.223794][T19840]  ? __pfx_aa_sk_perm+0x10/0x10
[  421.223809][T19840]  ? aa_sock_opt_perm+0xff/0x1b0
[  421.223818][T19840]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  421.223827][T19840]  ? __pfx_xsk_setsockopt+0x10/0x10
[  421.223835][T19840]  do_sock_setsockopt+0x17c/0x1b0
[  421.223848][T19840]  __x64_sys_setsockopt+0x13f/0x1b0
[  421.223861][T19840]  do_syscall_64+0xfa/0x3b0
[  421.223870][T19840]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.223879][T19840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.223886][T19840]  ? exc_page_fault+0x9f/0xf0
[  421.223895][T19840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.223903][T19840] RIP: 0033:0x7faad558ec29
[  421.223912][T19840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.223919][T19840] RSP: 002b:00007faad64ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  421.223929][T19840] RAX: ffffffffffffffda RBX: 00007faad57d6180 RCX: 00007faad558ec29
[  421.223935][T19840] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  421.223940][T19840] RBP: 00007faad5611e41 R08: 0000000000000004 R09: 0000000000000000
[  421.223944][T19840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  421.223949][T19840] R13: 00007faad57d6218 R14: 00007faad57d6180 R15: 00007ffcbd804288
[  421.223962][T19840]  </TASK>
[  421.223966][T19840] Mem-Info:
[  421.337035][T19840] active_anon:13120 inactive_anon:0 isolated_anon:0
[  421.337035][T19840]  active_file:1626 inactive_file:38372 isolated_file:0
[  421.337035][T19840]  unevictable:1768 dirty:78 writeback:0
[  421.337035][T19840]  slab_reclaimable:11319 slab_unreclaimable:108658
[  421.337035][T19840]  mapped:19580 shmem:2443 pagetables:1186
[  421.337035][T19840]  sec_pagetables:0 bounce:0
[  421.337035][T19840]  kernel_misc_reclaimable:0
[  421.337035][T19840]  free:222632 free_pcp:23834 free_cma:0
[  421.352494][T19840] Node 0 active_anon:14764kB inactive_anon:0kB active_file:4280kB inactive_file:131548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37408kB dirty:228kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8400kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  421.364453][T19840] Node 1 active_anon:37716kB inactive_anon:0kB active_file:2224kB inactive_file:21940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40912kB dirty:84kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4872kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  421.387155][T19840] Node 0 DMA free:14672kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:640kB local_pcp:312kB free_cma:0kB
[  421.399872][T19844] bond25 (unregistering): Released all slaves
[  421.417137][T19840] lowmem_reserve[]: 0 811 811 811 811
[  421.421559][T19840] Node 0 DMA32 free:144172kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14764kB inactive_anon:0kB active_file:4280kB inactive_file:131548kB unevictable:3536kB writepending:228kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:32596kB local_pcp:13980kB free_cma:0kB
[  421.435917][T19840] lowmem_reserve[]: 0 0 0 0 0
[  421.437659][T19840] Node 1 DMA32 free:426288kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15716kB local_pcp:7576kB free_cma:0kB
[  421.453647][T19840] lowmem_reserve[]: 0 0 854 854 854
[  421.456264][T19840] Node 1 Normal free:305396kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37644kB inactive_anon:0kB active_file:2224kB inactive_file:21932kB unevictable:3536kB writepending:84kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46920kB local_pcp:27720kB free_cma:0kB
[  421.458951][T19842] bond25: entered promiscuous mode
[  421.483024][T19842] 8021q: adding VLAN 0 to HW filter on device bond25
[  421.485775][T19840] lowmem_reserve[]: 0 0 0 0 0
[  421.491489][T19840] Node 0 DMA: 9*4kB (UM) 6*8kB (U) 10*16kB (U) 13*32kB (U) 11*64kB (U) 10*128kB (UM) 11*256kB (UM) 10*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 14676kB
[  421.509460][   T47] lo speed is unknown, defaulting to 1000
[  421.509638][T19840] Node 0 DMA32: 511*4kB (UME) 954*8kB (UME) 656*16kB (UME) 446*32kB (UME) 140*64kB (UME) 48*128kB (UE) 45*256kB (UM) 40*512kB (UM) 33*1024kB (UM) 4*2048kB (UM) 5*4096kB (UM) = 144012kB
[  421.512226][   T47] syz1: Port: 1 Link ACTIVE
[  421.518304][T19840] Node 1 DMA32: 63*4kB (UM) 57*8kB (UM) 46*16kB (UM) 45*32kB (U) 46*64kB (UM) 43*128kB (U) 45*256kB (UM) 42*512kB (U) 45*1024kB (UM) 0*2048kB 82*4096kB (UM) = 426308kB
[  421.531046][T19840] Node 1 Normal: 1807*4kB (UM) 967*8kB (UM) 766*16kB (UME) 335*32kB (UME) 409*64kB (UME) 163*128kB (UME) 83*256kB (UME) 129*512kB (UM) 128*1024kB (UME) 1*2048kB (M) 0*4096kB = 305396kB
[  421.554332][T19840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  421.558319][T19840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  421.568606][T19840] 42443 total pagecache pages
[  421.574954][T19840] 0 pages in swap cache
[  421.576644][T19840] Free swap  = 124996kB
[  421.578240][T19840] Total swap = 124996kB
[  421.579938][T19840] 786301 pages RAM
[  421.585660][T19840] 0 pages HighMem/MovableOnly
[  421.587591][T19840] 241367 pages reserved
[  421.589404][T19840] 0 pages cma reserved
[  421.726136][ T5896] lo speed is unknown, defaulting to 1000
[  421.728461][ T5896] syz1: Port: 1 Link DOWN
[  421.732444][   T47] lo speed is unknown, defaulting to 1000
[  421.734670][   T47] syz1: Port: 1 Link ACTIVE
[  422.034842][T19875] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  422.348301][T19887] ..1: renamed from ..0
[  422.353575][T19887] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  422.357793][T19887] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  422.364900][T19887] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  422.392592][T19889] syzkaller1: entered promiscuous mode
[  422.394767][T19889] syzkaller1: entered allmulticast mode
[  422.923854][T19923] validate_nla: 11 callbacks suppressed
[  422.923870][T19923] netlink: 'syz.1.4409': attribute type 13 has an invalid length.
[  422.929259][T19923] netlink: 'syz.1.4409': attribute type 17 has an invalid length.
[  422.947170][T19923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.092563][T19932] sctp: [Deprecated]: syz.1.4411 (pid 19932) Use of int in max_burst socket option deprecated.
[  423.092563][T19932] Use struct sctp_assoc_value instead
[  423.685375][T19964] __nla_validate_parse: 9 callbacks suppressed
[  423.685391][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'.
[  423.762626][T19969] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4423'.
[  423.817146][T19969] netlink: 'syz.2.4423': attribute type 5 has an invalid length.
[  423.824250][T19969] nbd: must specify at least one socket
[  423.826791][T19969] nbd: couldn't find device at index 2
[  423.843561][T19973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4425'.
[  423.875640][T19975] netlink: 'syz.0.4426': attribute type 1 has an invalid length.
[  423.943072][T19975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4426'.
[  423.950027][T19975] 8021q: adding VLAN 0 to HW filter on device bond26
[  423.971890][T19981] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  424.066293][T19997] netlink: 'syz.0.4432': attribute type 1 has an invalid length.
[  424.486669][T20011] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4434'.
[  424.491690][T20011] netlink: 'syz.0.4434': attribute type 5 has an invalid length.
[  424.540404][T20026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'.
[  424.899529][T20042] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4442'.
[  425.185373][T20045] lo speed is unknown, defaulting to 1000
[  425.193527][T20045] lo speed is unknown, defaulting to 1000
[  425.196512][T20045] lo speed is unknown, defaulting to 1000
[  425.207109][T20055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.209547][T20057] syzkaller0: entered promiscuous mode
[  425.213435][T20057] syzkaller0: entered allmulticast mode
[  425.233500][T20057] tipc: Resetting bearer <eth:syzkaller0>
[  425.247687][T20057] tipc: Disabling bearer <eth:syzkaller0>
[  425.281458][T20060] netlink: 'syz.0.4445': attribute type 12 has an invalid length.
[  425.832280][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4451'.
[  425.905250][T20080] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4453'.
[  425.908424][T20080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4453'.
[  425.914932][T20081] Unsupported ieee802154 address type: 0
[  425.974983][T20084] netlink: 'syz.2.4454': attribute type 30 has an invalid length.
[  425.985199][ T5911] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  425.988673][T20084] netlink: 'syz.2.4454': attribute type 30 has an invalid length.
[  425.991418][ T5911] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  425.995104][ T5911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  426.003331][ T5911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  442.821629][   T25] block nbd0: Possible stuck request ffff8880374f0000: control (read@0,1024B). Runtime 300 seconds
[  442.825893][   T25] block nbd0: Possible stuck request ffff8880374f0200: control (read@1024,1024B). Runtime 300 seconds
[  442.830054][   T25] block nbd0: Possible stuck request ffff8880374f0400: control (read@2048,1024B). Runtime 300 seconds
[  442.834867][   T25] block nbd0: Possible stuck request ffff8880374f0600: control (read@3072,1024B). Runtime 300 seconds
[  461.921523][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.946639][T20109] netlink: 'syz.0.4462': attribute type 10 has an invalid length.
[  461.949860][T20109] __nla_validate_parse: 2 callbacks suppressed
[  461.949873][T20109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4462'.
[  462.268483][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'.
[  462.323468][T20144] vlan1: entered promiscuous mode
[  462.325353][T20144] vlan1: entered allmulticast mode
[  462.327079][T20144] hsr_slave_1: entered allmulticast mode
[  462.345964][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4470'.
[  462.415580][T20148] netlink: 'syz.2.4472': attribute type 2 has an invalid length.
[  462.418667][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4472'.
[  462.424348][T20148] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.4472'.
[  462.428069][T20148] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.4472'.
[  462.520099][T20157] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.4476'.
[  462.525242][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4475'.
[  462.579045][T20166] netlink: 'syz.2.4477': attribute type 1 has an invalid length.
[  462.583094][T20166] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4477'.
[  462.599493][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4478'.
[  462.788510][T20191] netlink: 'syz.0.4484': attribute type 4 has an invalid length.
[  462.809498][T20188] lo speed is unknown, defaulting to 1000
[  462.821847][T20188] lo speed is unknown, defaulting to 1000
[  462.824857][T20188] lo speed is unknown, defaulting to 1000
[  463.066746][T20214] netlink: 'syz.0.4486': attribute type 10 has an invalid length.
[  463.601738][T20228] lo speed is unknown, defaulting to 1000
[  463.606578][T20228] lo speed is unknown, defaulting to 1000
[  463.610341][T20228] lo speed is unknown, defaulting to 1000
[  463.890063][T20234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.904820][T20234] tipc: Disabling bearer <eth:syzkaller0>
[  464.257705][T20255] veth0_to_bond: left allmulticast mode
[  464.260726][T20255] xfrm0: left promiscuous mode
[  464.262595][T20255] xfrm0: left allmulticast mode
[  464.270322][T20255] ipvlan3: left allmulticast mode
[  464.273214][T20255] bond22: left allmulticast mode
[  464.276379][T20256] netlink: 'syz.0.4500': attribute type 13 has an invalid length.
[  464.276695][T20255] ipvlan4: left allmulticast mode
[  464.281345][T20255] bond23: left allmulticast mode
[  464.283297][T20255] gretap4: left allmulticast mode
[  464.286137][T20255] macsec0: left promiscuous mode
[  464.287845][T20255] macsec0: left allmulticast mode
[  464.289717][T20256] netlink: 'syz.0.4500': attribute type 17 has an invalid length.
[  464.290351][T20255] xfrm2: left allmulticast mode
[  464.295173][T20255] macsec1: left promiscuous mode
[  464.296924][T20255] macsec1: left allmulticast mode
[  464.298961][T20255] veth15: left promiscuous mode
[  464.300883][T20255] vlan0: left promiscuous mode
[  464.302667][T20255] bond0: left promiscuous mode
[  464.304382][T20255] vlan0: left allmulticast mode
[  464.305949][T20255] bond0: left allmulticast mode
[  464.307837][T20255] macsec2: left promiscuous mode
[  464.309625][T20255] macsec2: left allmulticast mode
[  464.316448][   T10] lo speed is unknown, defaulting to 1000
[  464.316497][T20256] lo: left allmulticast mode
[  464.318725][   T10] syz1: Port: 1 Link DOWN
[  464.331012][T20256] tunl0: left allmulticast mode
[  464.333291][T20256] gre0: left allmulticast mode
[  464.340269][T20256] ip_vti0: left allmulticast mode
[  464.344134][T20256] ip6_vti0: left allmulticast mode
[  464.348018][T20256] sit0: left allmulticast mode
[  464.351258][T20256] ip6tnl0: left allmulticast mode
[  464.353639][T20256] ip6gre0: left allmulticast mode
[  464.356061][T20256] syz_tun: left allmulticast mode
[  464.358940][T20256] team0: left allmulticast mode
[  464.361227][T20256] geneve0: left allmulticast mode
[  464.363377][T20256] 8021q: adding VLAN 0 to HW filter on device team0
[  464.365832][T20256] !: left allmulticast mode
[  464.369490][T20256] nlmon0: left allmulticast mode
[  464.380976][T20256] caif0: left allmulticast mode
[  464.382505][T20256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  464.448875][T20258] lo speed is unknown, defaulting to 1000
[  464.456290][T20258] lo speed is unknown, defaulting to 1000
[  464.462387][T20258] lo speed is unknown, defaulting to 1000
[  464.465061][T20256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  464.551497][T20256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  465.463734][T20277] netlink: 'syz.2.4505': attribute type 4 has an invalid length.
[  465.473046][ T5896] lo speed is unknown, defaulting to 1000
[  465.475990][ T5896] syz2: Port: 1 Link DOWN
[  465.506192][T20279] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  465.850321][T20299] netlink: 'syz.0.4512': attribute type 83 has an invalid length.
[  465.850467][T20301] netlink: 'syz.0.4512': attribute type 83 has an invalid length.
[  465.941958][T20299] lo speed is unknown, defaulting to 1000
[  465.944617][T20299] lo speed is unknown, defaulting to 1000
[  465.965673][T20301] lo speed is unknown, defaulting to 1000
[  465.969423][T20299] lo speed is unknown, defaulting to 1000
[  465.986277][T20301] lo speed is unknown, defaulting to 1000
[  466.091102][T20310] 8021q: adding VLAN 0 to HW filter on device bond25
[  466.226504][T20301] lo speed is unknown, defaulting to 1000
[  467.424184][T20349] __nla_validate_parse: 13 callbacks suppressed
[  467.424204][T20349] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4524'.
[  467.460125][T20348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.463418][T20348] syzkaller0: entered promiscuous mode
[  467.465131][T20348] syzkaller0: entered allmulticast mode
[  467.504167][T20348] tipc: Resetting bearer <eth:syzkaller0>
[  467.512214][T20347] tipc: Resetting bearer <eth:syzkaller0>
[  467.552660][T20347] tipc: Disabling bearer <eth:syzkaller0>
[  467.669943][T20358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4526'.
[  467.790465][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4528'.
[  467.844828][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4528'.
[  467.867844][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4531'.
[  467.892043][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4531'.
[  467.988658][T20383] lo speed is unknown, defaulting to 1000
[  467.992019][T20383] lo speed is unknown, defaulting to 1000
[  467.995308][T20383] lo speed is unknown, defaulting to 1000
[  468.208524][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4537'.
[  468.215240][T20396] validate_nla: 1 callbacks suppressed
[  468.215251][T20396] netlink: 'syz.2.4537': attribute type 7 has an invalid length.
[  468.219607][T20396] netlink: 'syz.2.4537': attribute type 8 has an invalid length.
[  468.223446][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'.
[  468.227460][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4537'.
[  468.232035][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'.
[  468.353357][T20407] netlink: 'syz.1.4542': attribute type 13 has an invalid length.
[  468.358708][T20407] netlink: 'syz.1.4542': attribute type 17 has an invalid length.
[  468.409525][T20407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.415485][   T47] lo speed is unknown, defaulting to 1000
[  468.417241][   T47] syz1: Port: 1 Link ACTIVE
[  468.519815][T20424] netlink: 'syz.2.4545': attribute type 1 has an invalid length.
[  468.605545][T20430] pimreg: left allmulticast mode
[  468.809343][T20446] macvlan0: entered promiscuous mode
[  468.813333][T20446] macvlan0: left promiscuous mode
[  469.092586][T20467] netlink: 'syz.2.4557': attribute type 1 has an invalid length.
[  469.101881][T20468] netlink: 'syz.2.4557': attribute type 1 has an invalid length.
[  469.149099][T20468] 8021q: adding VLAN 0 to HW filter on device bond27
[  469.231033][T20470] syz.1.4559: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  469.249380][T20470] CPU: 0 UID: 0 PID: 20470 Comm: syz.1.4559 Not tainted syzkaller #0 PREEMPT(full) 
[  469.249405][T20470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.249413][T20470] Call Trace:
[  469.249419][T20470]  <TASK>
[  469.249425][T20470]  dump_stack_lvl+0x189/0x250
[  469.249453][T20470]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.249470][T20470]  ? __pfx__printk+0x10/0x10
[  469.249491][T20470]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  469.249509][T20470]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  469.249527][T20470]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  469.249547][T20470]  warn_alloc+0x214/0x310
[  469.249573][T20470]  ? __pfx_warn_alloc+0x10/0x10
[  469.249603][T20470]  ? __get_vm_area_node+0x28f/0x300
[  469.249623][T20470]  ? xskq_create+0xbf/0x170
[  469.249643][T20470]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  469.249690][T20470]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  469.249716][T20470]  ? __kasan_kmalloc+0x93/0xb0
[  469.249739][T20470]  vmalloc_user_noprof+0xad/0xf0
[  469.249759][T20470]  ? xskq_create+0xbf/0x170
[  469.249775][T20470]  xskq_create+0xbf/0x170
[  469.249792][T20470]  xsk_init_queue+0xb0/0x110
[  469.249818][T20470]  xsk_setsockopt+0x57b/0x8d0
[  469.249836][T20470]  ? __pfx_xsk_setsockopt+0x10/0x10
[  469.249850][T20470]  ? __pfx_aa_sk_perm+0x10/0x10
[  469.249875][T20470]  ? __fget_files+0x2a/0x420
[  469.249887][T20470]  ? aa_sock_opt_perm+0xff/0x1b0
[  469.249905][T20470]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  469.249921][T20470]  ? __pfx_xsk_setsockopt+0x10/0x10
[  469.249937][T20470]  do_sock_setsockopt+0x17c/0x1b0
[  469.249961][T20470]  __x64_sys_setsockopt+0x13f/0x1b0
[  469.249985][T20470]  do_syscall_64+0xfa/0x3b0
[  469.250002][T20470]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.250018][T20470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.250033][T20470]  ? exc_page_fault+0x9f/0xf0
[  469.250051][T20470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.250065][T20470] RIP: 0033:0x7faad558ec29
[  469.250079][T20470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.250092][T20470] RSP: 002b:00007faad64ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  469.250109][T20470] RAX: ffffffffffffffda RBX: 00007faad57d5fa0 RCX: 00007faad558ec29
[  469.250150][T20470] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  469.250158][T20470] RBP: 00007faad5611e41 R08: 0000000000000004 R09: 0000000000000000
[  469.250167][T20470] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  469.250176][T20470] R13: 00007faad57d6038 R14: 00007faad57d5fa0 R15: 00007ffcbd804288
[  469.250202][T20470]  </TASK>
[  469.250209][T20470] Mem-Info:
[  469.360957][T20470] active_anon:13149 inactive_anon:0 isolated_anon:0
[  469.360957][T20470]  active_file:1626 inactive_file:38388 isolated_file:0
[  469.360957][T20470]  unevictable:1768 dirty:128 writeback:0
[  469.360957][T20470]  slab_reclaimable:11418 slab_unreclaimable:93642
[  469.360957][T20470]  mapped:18480 shmem:2443 pagetables:1233
[  469.360957][T20470]  sec_pagetables:0 bounce:0
[  469.360957][T20470]  kernel_misc_reclaimable:0
[  469.360957][T20470]  free:234718 free_pcp:23806 free_cma:0
[  469.379461][T20470] Node 0 active_anon:14756kB inactive_anon:0kB active_file:4236kB inactive_file:131612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32948kB dirty:292kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8328kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  469.391988][T20470] Node 1 active_anon:37840kB inactive_anon:0kB active_file:2268kB inactive_file:21940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40972kB dirty:220kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5020kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  469.405263][T20470] Node 0 DMA free:14736kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:576kB local_pcp:328kB free_cma:0kB
[  469.416823][T20470] lowmem_reserve[]: 0 811 811 811 811
[  469.418601][T20470] Node 0 DMA32 free:190484kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14756kB inactive_anon:0kB active_file:4236kB inactive_file:131612kB unevictable:3536kB writepending:292kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:39520kB local_pcp:19524kB free_cma:0kB
[  469.431468][T20470] lowmem_reserve[]: 0 0 0 0 0
[  469.433591][T20489] netlink: 'syz.2.4562': attribute type 12 has an invalid length.
[  469.438678][T20470] Node 1 DMA32 free:423948kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16028kB local_pcp:8452kB free_cma:0kB
[  469.451383][T20470] lowmem_reserve[]: 0 0 854 854 854
[  469.454645][T20470] Node 1 Normal free:309704kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37836kB inactive_anon:0kB active_file:2268kB inactive_file:21932kB unevictable:3536kB writepending:220kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39328kB local_pcp:20512kB free_cma:0kB
[  469.468982][T20470] lowmem_reserve[]: 0 0 0 0 0
[  469.472870][T20470] Node 0 DMA: 9*4kB (UM) 6*8kB (U) 10*16kB (U) 13*32kB (U) 10*64kB (U) 11*128kB (UM) 11*256kB (UM) 10*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 14740kB
[  469.493035][T20470] Node 0 DMA32: 139*4kB (UME) 93*8kB (ME) 132*16kB (UME) 232*32kB (UM) 217*64kB (UME) 55*128kB (UM) 46*256kB (UM) 41*512kB (UM) 33*1024kB (UM) 3*2048kB (UM) 21*4096kB (UM) = 190484kB
[  469.500706][T20470] Node 1 DMA32: 63*4kB (UM) 56*8kB (U) 45*16kB (U) 46*32kB (UM) 45*64kB (U) 43*128kB (U) 44*256kB (U) 42*512kB (U) 45*1024kB (UM) 1*2048kB (M) 81*4096kB (M) = 423948kB
[  469.507536][T20470] Node 1 Normal: 498*4kB (UM) 816*8kB (UM) 832*16kB (UM) 487*32kB (UM) 400*64kB (UME) 201*128kB (UME) 91*256kB (UME) 126*512kB (UM) 128*1024kB (UME) 1*2048kB (M) 0*4096kB = 309672kB
[  469.514852][T20470] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  469.518879][T20470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  469.523344][T20470] 42457 total pagecache pages
[  469.543448][T20470] 0 pages in swap cache
[  469.568228][T20470] Free swap  = 124996kB
[  469.570041][T20470] Total swap = 124996kB
[  469.573573][T20470] 786301 pages RAM
[  469.575172][T20470] 0 pages HighMem/MovableOnly
[  469.577468][T20470] 241367 pages reserved
[  469.584227][T20470] 0 pages cma reserved
[  469.748853][T20515] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  469.753993][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.761035][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.775752][T20515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  469.780854][T20515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  470.159982][T20535] netlink: 'syz.1.4577': attribute type 1 has an invalid length.
[  470.191612][T20535] 8021q: adding VLAN 0 to HW filter on device bond28
[  470.350833][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  470.385159][T20545] netlink: 'syz.1.4581': attribute type 10 has an invalid length.
[  470.486959][   T47] lo speed is unknown, defaulting to 1000
[  470.491154][   T47] syz1: Port: 1 Link DOWN
[  471.058062][T20572] lo speed is unknown, defaulting to 1000
[  471.062108][T20572] lo speed is unknown, defaulting to 1000
[  471.065929][T20572] lo speed is unknown, defaulting to 1000
[  471.482835][T20590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.008733][T20594] team0: Port device macvlan0 removed
[  472.394034][   T13] veth9: left allmulticast mode
[  472.396276][   T13] veth9: left promiscuous mode
[  472.399503][   T13] bridge14: port 1(veth9) entered disabled state
[  472.467702][   T13] bond4 (unregistering): (slave ip6erspan0): Releasing active interface
[  472.694260][   T13] bond14 (unregistering): (slave gretap2): Releasing backup interface
[  472.712283][   T13] bond19 (unregistering): (slave gretap3): Releasing active interface
[  472.740796][   T13] bond23 (unregistering): (slave gretap4): Releasing active interface
[  472.839661][   T13] bond15 (unregistering): (slave geneve4): Releasing active interface
[  472.906133][   T25] block nbd0: Possible stuck request ffff8880374f0000: control (read@0,1024B). Runtime 330 seconds
[  472.910365][   T25] block nbd0: Possible stuck request ffff8880374f0200: control (read@1024,1024B). Runtime 330 seconds
[  472.915378][   T25] block nbd0: Possible stuck request ffff8880374f0400: control (read@2048,1024B). Runtime 330 seconds
[  472.919596][   T25] block nbd0: Possible stuck request ffff8880374f0600: control (read@3072,1024B). Runtime 330 seconds
[  474.149598][   T13] bond1 (unregistering): Released all slaves
[  474.159776][   T13] bond2 (unregistering): Released all slaves
[  474.171152][   T13] bond3 (unregistering): Released all slaves
[  474.254389][   T13] bond4 (unregistering): Released all slaves
[  474.332046][   T13] bond5 (unregistering): Released all slaves
[  474.339459][   T13] bond6 (unregistering): Released all slaves
[  474.418867][   T13] bond7 (unregistering): Released all slaves
[  474.500102][   T13] bond8 (unregistering): Released all slaves
[  474.511976][   T13] bond9 (unregistering): Released all slaves
[  474.523104][   T13] bond10 (unregistering): Released all slaves
[  474.623914][   T13] bond11 (unregistering): Released all slaves
[  474.631369][   T13] bond12 (unregistering): Released all slaves
[  474.735177][   T13] bond0 (unregistering): (slave bond13): Releasing active interface
[  474.738164][   T13] bond0 (unregistering): Released all slaves
[  474.818609][   T13] bond13 (unregistering): Released all slaves
[  474.896848][   T13] bond14 (unregistering): Released all slaves
[  474.984465][   T13] bond15 (unregistering): Released all slaves
[  475.065854][   T13] bond16 (unregistering): Released all slaves
[  475.153127][   T13] bond17 (unregistering): (slave bond18): Releasing backup interface
[  475.156968][   T13] bond17 (unregistering): Released all slaves
[  475.249371][   T13] bond18 (unregistering): Released all slaves
[  475.256952][   T13] bond19 (unregistering): Released all slaves
[  475.336925][   T13] bond20 (unregistering): Released all slaves
[  475.417266][   T13] bond21 (unregistering): Released all slaves
[  475.502340][   T13] bond22 (unregistering): Released all slaves
[  475.585432][   T13] bond23 (unregistering): Released all slaves
[  475.669446][   T13] bond24 (unregistering): Released all slaves
[  475.677653][   T13] bond25 (unregistering): Released all slaves
[  475.761576][   T13] bond26 (unregistering): (slave veth15): Releasing active interface
[  475.764931][   T13] bond26 (unregistering): Released all slaves
[  475.772850][   T13] bond27 (unregistering): Released all slaves
[  475.861307][   T13] bond28 (unregistering): Released all slaves
[  476.096819][   T13] : left promiscuous mode
[  476.163300][   T13] _Z`Ԁ@S!: left promiscuous mode
[  476.202004][   T13] : left promiscuous mode
[  476.267161][   T13] tipc: Left network mode
[  476.929900][   T13] hsr_slave_0: left promiscuous mode
[  476.971484][   T13] pimreg3 (unregistering): left allmulticast mode
[  477.830063][   T13] IPVS: stop unused estimator thread 0...
[  486.341678][   T34] INFO: task udevd:5850 blocked for more than 143 seconds.
[  486.344419][   T34]       Not tainted syzkaller #0
[  486.346225][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  486.349353][   T34] task:udevd           state:D stack:21160 pid:5850  tgid:5850  ppid:1      task_flags:0x400140 flags:0x00004006
[  486.354281][   T34] Call Trace:
[  486.355536][   T34]  <TASK>
[  486.356624][   T34]  __schedule+0x1798/0x4cc0
[  486.358303][   T34]  ? __pfx___schedule+0x10/0x10
[  486.359893][   T34]  ? schedule+0x91/0x360
[  486.361873][   T34]  schedule+0x165/0x360
[  486.363239][   T34]  io_schedule+0x80/0xd0
[  486.364633][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  486.366337][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  486.368153][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  486.369930][   T34]  ? __filemap_get_folio+0x6e0/0xaf0
[  486.372188][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  486.373904][   T34]  do_read_cache_folio+0x1aa/0x590
[  486.375542][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  486.377416][   T34]  read_part_sector+0xb6/0x2b0
[  486.379101][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  486.381454][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  486.386475][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  486.388550][   T34]  bdev_disk_changed+0x75f/0x14b0
[  486.391703][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  486.398626][   T34]  ? wait_on_inode+0xc0/0x230
[  486.400276][   T34]  blkdev_get_whole+0x380/0x510
[  486.405355][   T34]  bdev_open+0x31e/0xd30
[  486.406855][   T34]  blkdev_open+0x457/0x600
[  486.411967][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  486.416822][   T34]  do_dentry_open+0x953/0x13f0
[  486.418494][   T34]  vfs_open+0x3b/0x340
[  486.423585][   T34]  ? path_openat+0x2ecd/0x3830
[  486.428354][   T34]  path_openat+0x2ee5/0x3830
[  486.429969][   T34]  ? arch_stack_walk+0xfc/0x150
[  486.435792][   T34]  ? stack_depot_save_flags+0x40/0x860
[  486.439031][   T34]  ? __pfx_path_openat+0x10/0x10
[  486.441180][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.443489][   T34]  do_filp_open+0x1fa/0x410
[  486.444999][   T34]  ? __lock_acquire+0xab9/0xd20
[  486.449067][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  486.451868][   T34]  ? _raw_spin_unlock+0x28/0x50
[  486.453526][   T34]  ? alloc_fd+0x64c/0x6c0
[  486.454764][   T34]  do_sys_openat2+0x121/0x1c0
[  486.456134][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  486.458097][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  486.460075][   T34]  ? rcu_is_watching+0x15/0xb0
[  486.462146][   T34]  __x64_sys_openat+0x138/0x170
[  486.463879][   T34]  do_syscall_64+0xfa/0x3b0
[  486.465566][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.467829][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.470031][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.472601][   T34] RIP: 0033:0x7efcfe1169a4
[  486.474282][   T34] RSP: 002b:00007ffc4fd98270 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  486.477500][   T34] RAX: ffffffffffffffda RBX: 000056043c7a0500 RCX: 00007efcfe1169a4
[  486.480401][   T34] RDX: 00000000000a0800 RSI: 000056043c7a12c0 RDI: 00000000ffffff9c
[  486.483864][   T34] RBP: 000056043c7a12c0 R08: 0000000000000001 R09: 7fffffffffffffff
[  486.486793][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  486.489672][   T34] R13: 000056043c7b4800 R14: 0000000000000001 R15: 000056043c7a0910
[  486.493305][   T34]  </TASK>
[  486.494594][   T34] 
[  486.494594][   T34] Showing all locks held in the system:
[  486.497391][   T34] 1 lock held by khungtaskd/34:
[  486.499301][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  486.503791][   T34] 2 locks held by kworker/u10:4/3528:
[  486.505828][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  486.510069][   T34]  #1: ffffc9000301fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  486.515344][   T34] 2 locks held by getty/5673:
[  486.516996][   T34]  #0: ffff8880201380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  486.520343][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  486.524474][   T34] 1 lock held by udevd/5850:
[  486.526230][   T34]  #0: ffff888011d2a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  486.529709][   T34] 
[  486.531333][   T34] =============================================
[  486.531333][   T34] 
[  486.534485][   T34] NMI backtrace for cpu 1
[  486.534498][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  486.534512][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.534521][   T34] Call Trace:
[  486.534527][   T34]  <TASK>
[  486.534534][   T34]  dump_stack_lvl+0x189/0x250
[  486.534555][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.534570][   T34]  ? __pfx__printk+0x10/0x10
[  486.534596][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  486.534617][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  486.534637][   T34]  ? __pfx__printk+0x10/0x10
[  486.534656][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  486.534676][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  486.534696][   T34]  watchdog+0xf93/0xfe0
[  486.534714][   T34]  ? watchdog+0x1de/0xfe0
[  486.534731][   T34]  kthread+0x711/0x8a0
[  486.534747][   T34]  ? __pfx_watchdog+0x10/0x10
[  486.534761][   T34]  ? __pfx_kthread+0x10/0x10
[  486.534775][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.534787][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.534800][   T34]  ? __pfx_kthread+0x10/0x10
[  486.534814][   T34]  ret_from_fork+0x439/0x7d0
[  486.534829][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  486.534845][   T34]  ? __switch_to_asm+0x39/0x70
[  486.534859][   T34]  ? __switch_to_asm+0x33/0x70
[  486.534872][   T34]  ? __pfx_kthread+0x10/0x10
[  486.534886][   T34]  ret_from_fork_asm+0x1a/0x30
[  486.534912][   T34]  </TASK>
[  486.534917][   T34] Sending NMI from CPU 1 to CPUs 0:
[  486.586874][    C0] NMI backtrace for cpu 0
[  486.586900][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  486.586915][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.586924][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  486.586948][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 79 0c 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  486.586958][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  486.586971][    C0] RAX: 18e7db72c4f38400 RBX: ffffffff819683f8 RCX: 18e7db72c4f38400
[  486.586981][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba64d RDI: ffffffff8be33f00
[  486.586990][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  486.586998][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39230
[  486.587006][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  486.587013][    C0] FS:  0000000000000000(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  486.587023][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.587031][    C0] CR2: 00007ffdf6adde7c CR3: 000000000df36000 CR4: 00000000000006f0
[  486.587096][    C0] Call Trace:
[  486.587107][    C0]  <TASK>
[  486.587113][    C0]  default_idle+0x13/0x20
[  486.587131][    C0]  default_idle_call+0x74/0xb0
[  486.587149][    C0]  do_idle+0x1e8/0x510
[  486.587166][    C0]  ? __pfx_do_idle+0x10/0x10
[  486.587220][    C0]  ? do_idle+0x5/0x510
[  486.587255][    C0]  cpu_startup_entry+0x44/0x60
[  486.587266][    C0]  rest_init+0x2de/0x300
[  486.587286][    C0]  start_kernel+0x3a9/0x410
[  486.587310][    C0]  x86_64_start_reservations+0x24/0x30
[  486.587327][    C0]  x86_64_start_kernel+0x143/0x1c0
[  486.587340][    C0]  common_startup_64+0x13e/0x147
[  486.587366][    C0]  </TASK>
[  486.587870][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  486.651289][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  486.654192][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.657480][   T34] Call Trace:
[  486.658497][   T34]  <TASK>
[  486.659426][   T34]  dump_stack_lvl+0x99/0x250
[  486.660827][   T34]  ? __asan_memcpy+0x40/0x70
[  486.662233][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.664170][   T34]  ? __pfx__printk+0x10/0x10
[  486.665898][   T34]  vpanic+0x281/0x750
[  486.667474][   T34]  ? __pfx_vpanic+0x10/0x10
[  486.669000][   T34]  ? preempt_schedule+0xae/0xc0
[  486.670679][   T34]  ? preempt_schedule_common+0x83/0xd0
[  486.672529][   T34]  panic+0xb9/0xc0
[  486.673781][   T34]  ? __pfx_panic+0x10/0x10
[  486.675292][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  486.677158][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  486.679171][   T34]  watchdog+0xfd2/0xfe0
[  486.680601][   T34]  ? watchdog+0x1de/0xfe0
[  486.682214][   T34]  kthread+0x711/0x8a0
[  486.683757][   T34]  ? __pfx_watchdog+0x10/0x10
[  486.685438][   T34]  ? __pfx_kthread+0x10/0x10
[  486.686961][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.688650][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.690538][   T34]  ? __pfx_kthread+0x10/0x10
[  486.692121][   T34]  ret_from_fork+0x439/0x7d0
[  486.693677][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  486.695503][   T34]  ? __switch_to_asm+0x39/0x70
[  486.697125][   T34]  ? __switch_to_asm+0x33/0x70
[  486.698658][   T34]  ? __pfx_kthread+0x10/0x10
[  486.700215][   T34]  ret_from_fork_asm+0x1a/0x30
[  486.701904][   T34]  </TASK>
[  486.703630][   T34] Kernel Offset: disabled
[  486.705101][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:58:02  Registers:
info registers vcpu 0

CPU#0
RAX=18e7db72c4f38400 RBX=ffffffff819683f8 RCX=18e7db72c4f38400 RDX=0000000000000001
RSI=ffffffff8d9ba64d RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7bb3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdf6adde7c CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d8b2a31845a2ff00 RBX=ffffffff819683f8 RCX=d8b2a31845a2ff00 RDX=0000000000000001
RSI=ffffffff8d9ba64d RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7bb3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb545487e20 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
