last executing test programs:

1.044921934s ago: executing program 1 (id=1402):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)="49cafa5156c1c07d4b6e6d5f085e49dd49a169060ab94641ae735a", 0x1b}, {&(0x7f0000000080)="70d932fe2aa44581bc5e95acd10e25424e090b23cbbaf0debe94442a3163c1ce597695346e2d6f17cabc757ab7ce94d4205d29a627ac5602b26e208a14e04eaaf89dd12dc2a240cf2bc902f24b5dfa234961c741efb5cafad117038022055ff96c15eb8658", 0x65}, {&(0x7f00000001c0)="5e179773081ec1391f2c946640621f0eff41b2fcc40cfc68ead8ea4b7a6d9c99fdd897d50815e983a208bd305e2e1f178a145a425523127df8bbc912ec1d07d2adfe922c3ea6ec20cc852e5445cb726487d3cc583e8ba914ea9aad6bff596fdb69aaa3ee3c9627dd4899ffae57b3ae1871a3cf2dbe7b03a106c69b50ccf847f1d8f8b62030e834317b15472bec423d8bad3b9368cae6e6c1f8a8", 0x9a}, {&(0x7f0000000100)="fbfd755712eb9361264014ad60e02a3ce7a7a9dc445abc83ce063590", 0x1c}, {&(0x7f00000002c0)="95f099aba8fc33d656680dee649510e98deba6786f02a3df14165e81899ada36ce4a6db134206ea5acecf70c732c6c0ffa6b70c4f2e4e8a35ebcb5cfb8007ebd8813f954fdae8e6a802fe9db5810453d8b6d3b73f846783c84b2baea4d53ec49c8898dabbb0c55a4103e2f8680988d5be5869ff254d8a52293c4baf7ec9d7ccb00c18ca585012e8d8615c6e81971b3ea51bdb3d6b6c9e05f83e5084fcc9fedb2a2ca8462b2e2970c539953e3c6e4112538b6a713419e90ffa9e0ecd541a98453d2487baa8332fb8b40f49cfc404898aeb8c621a0071582eca827cf112cee1ff8bdfb1206161739f33d24ea960bd517b62a12aa8ff0322b", 0xf7}, {&(0x7f00000003c0)="13cf00e93ea0557f37d3fd7f4ebe295183731a60c133cff13385c3d25b945e279b4809ad600a3be3ad66f6ba71113e1d75a85fd33c433cd903b3f2e294c84ad05167", 0x42}, {&(0x7f0000000140)="96b440ec2d228890b9b284ff03d8c323497778f2b8e942d8c0cd42fe4351ed45b36bfa84062f6ec12f0a19", 0x2b}, {&(0x7f0000000440)="77f914f51e8c3f19dc9769855ee8272351c550fd2555cbbb56cbf17f8de80459b3df6b80cabc5ebc88825192e60e33fe04f70be3d25811ee4e3de97e441e287c60052d14c1d883", 0x47}, {&(0x7f00000004c0)="5b184f013ebbb0308c93d550a5ebd873981493648eddfed9e281f15f05bfde7550ae527295b70a5b84ccbf98ce9f9941c09294479c975b4264c3305f99d9e26f787ee739d431b841160f99ee143a9321686d1d1f5b68009796530498a976cdad0c392df38939b6b08d2b17e30c7d7af28c7d9259175e51d84c4d796f5ba289223cf725de6d51df06593f3a4f5bc6de76f5ef8ae4fec8c6d1687e5ce9c9717d441487b9ba8fedbabab93911249ab51c192f28db3062d861d7d29f1173f309d24dd546699b117621adc85e63d0c160878144557c6a5c549060c0bb6ee948b0", 0xde}], 0x9, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0xf, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0xe0, [@rand_addr=0x64010102, @empty, @local, @local, @local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x44, 0xe3, 0x1, 0x7, [{@loopback, 0x8000}, {@rand_addr=0x64010100, 0x80000001}, {@multicast1, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x80000000}, {@remote, 0x5}, {@multicast2, 0x1}, {@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}], 0xa0}, 0x8000)
r2 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
listen(r2, 0x3)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=<r3=>0x0, &(0x7f00000007c0)=0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x40400, 0xa90}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=<r5=>0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000680), &(0x7f00000006c0)=0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
recvmsg(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)=""/241, 0xf1}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000480)=""/170, 0xaa}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f00000002c0)=""/64, 0x40}], 0x6}, 0x10000)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x24b32ca474523237, &(0x7f0000000000)=[{&(0x7f0000000740)={0x74, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @typed={0x5c, 0x114, 0x0, 0x0, @binary="8293306749331d7499bcfac1e90d6a14e697e53d6415a42352a69c98eafd2e42ab2140ec6a96ac928cd557ed215158be0a438ca97ebdc0ba718d889567303aef9358cf4d357ea5c838172479eae98a748924bd7c37629d77"}]}, 0x74}], 0x1}, 0x0)
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={r5, r7}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000800)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x8, 0x2, 0x20, 0x80, 0x2e, r3, r7}, {0xb, 0x4, 0x1a2d, 0x8, 0xffffffffffffffff, 0x80, 0x6, 0x642378b0}, {0xffff, 0x1, 0x101, 0x7}, 0x9, 0x6e6bb0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d5, 0x33}, 0x2, @in=@rand_addr=0x64010101, 0x3502, 0x4, 0x0, 0x7, 0x0, 0xded, 0x1}}, 0xe8)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r1, 0x3)
close(0x4)

566.015109ms ago: executing program 0 (id=1418):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000810000000000000013a"], 0xfdef)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x1, 0x8, 0x3, 0x1, 0x10001, {0x0, @in6={{0xa, 0x4e24, 0x1, @private2, 0x40}}, 0x0, 0x5, 0x7, 0xc09, 0x6}}, &(0x7f0000000100)=0xb0)

486.478581ms ago: executing program 2 (id=1420):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
socket(0x1, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000a40, 0x200000000a70, 0x200000000ce6], 0x0, &(0x7f0000000100), &(0x7f0000000a40)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0xfb)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r11, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)
recvmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x12, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3fb9091d0100030000000000b077cfb5f900", @ANYRES32=r5, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xa, 0x14}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000880000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80)

483.025082ms ago: executing program 0 (id=1421):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r3) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r6, 0x0, 0x4c014)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010300000000fedbdf25050000008e8d91f8b77e", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) (async)
r11 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)

386.577702ms ago: executing program 2 (id=1422):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b54300000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) (async)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fcdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="000300000000000000000000b695e66dd9ef7780497cd59ecb481004d8326117cf66e9422c49f16696f0af2d82514bbc0cb2b8735b412e3abb87d63e7ca86f23685e7cb8610c64cc78994e7d7e7fec48b48555ebb483efe720eea65ae574dfa1a4e2d448a04163211c7bb1937367a8c04329268c210db3372a0f8f664248221f5527315af2620234dc0f78a2ba29cf9c1c6ad105a9581871671bdf8ab32e2bc650fef4cb"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4040040)

226.077207ms ago: executing program 2 (id=1423):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0xb6, 0x4)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
close(r2)
listen(r3, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000000)=@xdp, 0x80, 0x0}, 0x401}], 0x1, 0x2001, 0x0)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

225.791255ms ago: executing program 0 (id=1424):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, &(0x7f0000000280), 0x0}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x10, 0x0, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f0000003ec0)=[{{&(0x7f0000000100)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000002040)=ANY=[], 0x10}}], 0x2, 0x45)

164.977729ms ago: executing program 1 (id=1425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)=ANY=[], 0x310)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$sock_int(r4, 0x1, 0x4, &(0x7f0000000040)=0xffffffff, 0x4)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x11ccbd597b59c84d)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet(r6, &(0x7f0000002d00)=[{{&(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="a40c43e534eff505185110073e64e58a7b7627a55ebcaaa2aa6c2b078ef27525ea1f66cd09f498fac4a83bf804b43d726d6bc447352c2a30f05aa467407b9c144aa95e98c8eaebe84bd47e1940a62dc004734404b678e947c15f185a69d2908861f780112b27686a81f7dcc59e901857ba07ee2334297727ae792a2cf5af2059c751358066087bc84581b645b83c4cbdfe41842351adef7e7b", 0x99}, {&(0x7f0000000400)="d4ca33464db36d8ad68029c3391cb833e4546897b6d2b81d618f3b46c4272ee676dbc99b2676af3216bc613258673f58f2b9b43f02ca632a1d69c53182473d8f0fe85db0303f0a9ea672b06d2feaff07dc41104fd5b9ad1ca8a2d848565ff8ac0808d70b00c4a713ab25279213fbdf2fd97df36ec383188ba5a190c648ec7aac817cb45faeb6c7960fd073be1286671c8eec9b6b4a8bf09b1b4ed46f0385071de99bb5a5ac5bd8bdef08", 0xaa}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f00000004c0)="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", 0xff}, {&(0x7f0000000700)="aecd6d50ca68ba6cc791d70a7b538d0f37fadf092d7a35cb977c74d4d5ec3e252332e2fbcacffda2a7ed22b1c32f71c7125f7cacd90e746ca208fcd4b990375ec5174a913faa5577494e6bc28e31e87a8879641b9d354e6a98359813522312fa2d4ab603633feda077fab573930ab58dd6dc6fb975e4ca12fd82d2c30e31c9ef97846d36303ef7d5b163ee543b7bb6240edc90db06cc04699db3285f5760f0b74205de802fdd5cf2b82fabd3f2999307171ca27bda3e4c05", 0xb8}], 0x5, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{&(0x7f0000000880)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f00000008c0)="5e550e70f7873a8c1a017bf5297b0f81c4f2ff0b121c5be0b2b555e6bc3c955f60ef4faddfc39c863e3cce62f946d22ccb", 0x31}, {&(0x7f0000000900)="ad201034ad04a0d2b7fc21a3d7c6d5b6f6c81880efe0465e4b7dc2e391a7d406ef5568ef14f20486d6346f92b04a1c638748f17ca991fe03b4682d07e4e4355f0c482da2fbdbf17a6a13d2960adb9f2a5f99c19a3538e7c0a47fee24a2102f8d9dffc8e64c48505b7ba4ac094d2c0844b1779b48", 0x74}, {&(0x7f0000000980)="22f409582bf54d0dc53665e74c783634c297113e5489d41be305c959b1fc28c61bf122e2f6981ca502ed26bb0df5b60375eca9977e44f1d84426ded38c5f912319cd74c0f124bba913f2bb91336b0fcb98ae085b589d68e265b928868aac1f2ce27d754743de06f79e74ef28b83d506840", 0x71}], 0x4, &(0x7f0000000a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000000b40)="f82d0f79f2a72b8f8764836ce729887846768735114fbfd418d4acae3cc969", 0x1f}], 0x1}}], 0x3, 0x801)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000100000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r7 = socket(0x10, 0x803, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={0xffffffffffffffff, r8}, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

163.778932ms ago: executing program 2 (id=1426):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x20, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000007000a00000a3c000000060a01040000000000000000020000010900010073797a31000000001c7860801800018008000100647570000c00001100010a00000000000000000100000ac2207cd42859314293261b318a463354655f6fb9955dd52123e1603048afc67566c6e51162f9f8b89d54a6430d041968760d39464563ed170bd417d692ecd8a1e91eaa7d81e07c9e2eae3c2fe9107a0414258faac86702430634d846cf08963688b343d4479aa8771aca8e00"/213], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000380)={@private2, r5}, 0x14) (async)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d9}, 0x20004804) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x811, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x0, 0xfff1}, {0x4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) (async)
listen(r4, 0x2) (async)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async)
listen(r10, 0x204)
r11 = socket$netlink(0x10, 0x3, 0x4)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

163.122817ms ago: executing program 0 (id=1427):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000012000000000000013a"], 0xfdef)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x1, 0x8, 0x3, 0x1, 0x10001, {0x0, @in6={{0xa, 0x4e24, 0x1, @private2, 0x40}}, 0x0, 0x5, 0x7, 0xc09, 0x6}}, &(0x7f0000000100)=0xb0)

66.899896ms ago: executing program 1 (id=1428):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000e48ea0f0e4ab83847a0000007112110000000000950000000000000052c92a48528e6bdec684a3f95e01ef1e1d1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

66.709277ms ago: executing program 0 (id=1429):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x20006, 0x0, &(0x7f0000000180))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r5, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000100001040000805b0000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000004000000001c00128009000100626f6e64000000000c0002800500110001"], 0x50}, 0x1, 0x0, 0x0, 0x600050a1}, 0x0)

65.857105ms ago: executing program 2 (id=1430):
r0 = socket$inet(0x2, 0x4, 0xbc9)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x200, 0x1, 0x7, 0xb, 0x6, 0x84]}, &(0x7f0000000080)=0x78)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r1, 0x0)
r3 = socket(0x28, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
socket$inet(0x2, 0x4, 0xbc9) (async)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x200, 0x1, 0x7, 0xb, 0x6, 0x84]}, &(0x7f0000000080)=0x78) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r1, 0x0) (async)
socket(0x28, 0x5, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0) (async)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async)

65.723602ms ago: executing program 1 (id=1431):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x110, 0x7, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0x8}, 0x8800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810)

3.011029ms ago: executing program 2 (id=1432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x7, 0x4, 0x0, 0x0, 0x2, 0x10}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xc4}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}}}, 0x108)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50)
unshare(0x26020480)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0xab00, 0x0, 0xfffffff9, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x4, 0x2b, 0x2f, 0x0, @multicast1, @multicast1}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, 0x0}, 0x20)
close(0x4)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, &(0x7f0000005300)=0x1, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x1, 0xc8, 0x9, 0x2700}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x7}}}}]}, 0x38}}, 0x0)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68)
bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8)
sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x81}]}], {0x14}}, 0x60}}, 0x40000)

1.785464ms ago: executing program 1 (id=1433):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @none}, 0x8)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r2, 0x615, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}, 0x5}, 0x0)

1.488059ms ago: executing program 0 (id=1434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000010)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400058008000640000000440900010073797a30"], 0x10c}}, 0x0)

0s ago: executing program 1 (id=1435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xd4, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "4701e4e32bd09a3f0a6d2bbacae6120a9347199abe46e5ffbb531874bea8119d371840e19cc6ae554b1126b2887ea96185d5a15bf6422cee4283d4726a6b48ef"}]}]}}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x59}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xfc}}, 0x2004c012)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24039' (ED25519) to the list of known hosts.
syzkaller login: [   49.761664][ T5833] cgroup: Unknown subsys name 'net'
[   49.910069][ T5833] cgroup: Unknown subsys name 'cpuset'
[   49.915086][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.533213][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.349845][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.354017][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.366813][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.370635][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.374613][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.381533][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.386460][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.389222][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.392775][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.397822][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.529987][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.534205][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.538112][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.541661][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.545275][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.591192][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.685401][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.716909][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.719625][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.722117][ T5845] bridge_slave_0: entered allmulticast mode
[   55.724892][ T5845] bridge_slave_0: entered promiscuous mode
[   55.752977][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.755981][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.759375][ T5845] bridge_slave_1: entered allmulticast mode
[   55.762758][ T5845] bridge_slave_1: entered promiscuous mode
[   55.805003][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.821617][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.864104][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.867566][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.870753][ T5849] bridge_slave_0: entered allmulticast mode
[   55.874799][ T5849] bridge_slave_0: entered promiscuous mode
[   55.882421][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.885489][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.889048][ T5849] bridge_slave_1: entered allmulticast mode
[   55.892891][ T5849] bridge_slave_1: entered promiscuous mode
[   55.921719][ T5845] team0: Port device team_slave_0 added
[   55.939402][ T5845] team0: Port device team_slave_1 added
[   55.944647][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.970983][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.990295][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.993277][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.004471][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.023189][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.026082][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.036918][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.050381][ T5849] team0: Port device team_slave_0 added
[   56.053810][ T5849] team0: Port device team_slave_1 added
[   56.103405][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.106025][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.116297][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.121240][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.123693][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.132350][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.166850][ T5845] hsr_slave_0: entered promiscuous mode
[   56.170022][ T5845] hsr_slave_1: entered promiscuous mode
[   56.174353][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   56.281716][ T5849] hsr_slave_0: entered promiscuous mode
[   56.284875][ T5849] hsr_slave_1: entered promiscuous mode
[   56.289993][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.292543][ T5849] Cannot create hsr debugfs directory
[   56.349781][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.352890][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.355909][ T5855] bridge_slave_0: entered allmulticast mode
[   56.360295][ T5855] bridge_slave_0: entered promiscuous mode
[   56.386188][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.389080][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.391649][ T5855] bridge_slave_1: entered allmulticast mode
[   56.394443][ T5855] bridge_slave_1: entered promiscuous mode
[   56.426245][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.447900][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.500914][ T5855] team0: Port device team_slave_0 added
[   56.511324][ T5855] team0: Port device team_slave_1 added
[   56.574395][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.579063][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.589725][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.610467][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.613278][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.624886][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.680720][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.702837][ T5855] hsr_slave_0: entered promiscuous mode
[   56.706000][ T5855] hsr_slave_1: entered promiscuous mode
[   56.709220][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   56.711616][ T5855] Cannot create hsr debugfs directory
[   56.714102][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.719164][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.743229][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.822489][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.838709][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.844563][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.853685][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.988024][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.995273][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.001875][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.007983][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.015244][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.043514][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.059823][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.062841][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.082632][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.093932][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.097103][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.116940][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.133715][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.136011][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.142539][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.145584][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.249395][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.267871][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   57.274954][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.277912][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.293490][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.296640][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.332231][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.407333][ T5236] Bluetooth: hci0: command tx timeout
[   57.409907][   T55] Bluetooth: hci1: command tx timeout
[   57.412622][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.415518][ T5845] veth0_vlan: entered promiscuous mode
[   57.432619][ T5845] veth1_vlan: entered promiscuous mode
[   57.462207][ T5845] veth0_macvtap: entered promiscuous mode
[   57.468676][ T5845] veth1_macvtap: entered promiscuous mode
[   57.493174][ T5849] veth0_vlan: entered promiscuous mode
[   57.511522][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.516279][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.540160][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.544464][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.550582][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.554340][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.564223][ T5849] veth1_vlan: entered promiscuous mode
[   57.566822][   T55] Bluetooth: hci2: command tx timeout
[   57.581742][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.634480][ T5849] veth0_macvtap: entered promiscuous mode
[   57.645692][ T5849] veth1_macvtap: entered promiscuous mode
[   57.661536][ T5855] veth0_vlan: entered promiscuous mode
[   57.668412][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.673579][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.675150][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.685955][ T5855] veth1_vlan: entered promiscuous mode
[   57.692812][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.710824][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.714278][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.714767][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.718746][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.724200][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.727907][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.783388][ T5855] veth0_macvtap: entered promiscuous mode
[   57.801520][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.811017][ T5855] veth1_macvtap: entered promiscuous mode
[   57.830481][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.833337][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.840264][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.849493][ T5911] net veth1_virt_wifi : renamed from virt_wifi0
[   57.864502][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.882755][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.885449][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.891824][ T5882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.894976][ T5882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.905258][ T5882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.909333][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.956278][ T5914] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   57.961084][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.009065][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.018232][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.041983][ T5914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4'.
[   58.083380][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.087984][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.185529][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.254139][ T5927] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   58.268342][ T5927] netlink: 'syz.0.7': attribute type 4 has an invalid length.
[   58.302705][ T5930] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.312446][ T5927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.342912][ T5932] syzkaller1: entered promiscuous mode
[   58.344759][ T5932] syzkaller1: entered allmulticast mode
[   59.309324][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.312469][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.354541][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.361030][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.461605][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.464709][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.476653][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.484861][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.488141][ T5236] Bluetooth: hci0: command tx timeout
[   59.489793][   T55] Bluetooth: hci1: command tx timeout
[   59.503976][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.522637][ T5955] syz.1.17: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   59.544022][ T5955] CPU: 0 UID: 0 PID: 5955 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(full) 
[   59.544040][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.544047][ T5955] Call Trace:
[   59.544053][ T5955]  <TASK>
[   59.544058][ T5955]  dump_stack_lvl+0x189/0x250
[   59.544080][ T5955]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.544095][ T5955]  ? __pfx__printk+0x10/0x10
[   59.544113][ T5955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.544128][ T5955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.544143][ T5955]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   59.544161][ T5955]  warn_alloc+0x214/0x310
[   59.544180][ T5955]  ? stack_depot_save_flags+0x41b/0x860
[   59.544200][ T5955]  ? __pfx_warn_alloc+0x10/0x10
[   59.544219][ T5955]  ? kasan_save_track+0x4f/0x80
[   59.544234][ T5955]  ? xskq_create+0x56/0x170
[   59.544245][ T5955]  ? xsk_init_queue+0xb0/0x110
[   59.544254][ T5955]  ? xsk_setsockopt+0x4dc/0x8d0
[   59.544270][ T5955]  ? do_sock_setsockopt+0x17c/0x1b0
[   59.544282][ T5955]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   59.544294][ T5955]  ? do_syscall_64+0xfa/0x3b0
[   59.544306][ T5955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.544324][ T5955]  __vmalloc_node_range_noprof+0x125/0x12f0
[   59.544362][ T5955]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   59.544392][ T5955]  ? __kasan_kmalloc+0x93/0xb0
[   59.544411][ T5955]  vmalloc_user_noprof+0xad/0xf0
[   59.544429][ T5955]  ? xskq_create+0xbf/0x170
[   59.544442][ T5955]  xskq_create+0xbf/0x170
[   59.544457][ T5955]  xsk_init_queue+0xb0/0x110
[   59.544471][ T5955]  xsk_setsockopt+0x4dc/0x8d0
[   59.544492][ T5955]  ? __pfx_xsk_setsockopt+0x10/0x10
[   59.544532][ T5955]  ? __pfx_aa_sk_perm+0x10/0x10
[   59.544554][ T5955]  ? aa_sock_opt_perm+0xff/0x1b0
[   59.544568][ T5955]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   59.544581][ T5955]  ? __pfx_xsk_setsockopt+0x10/0x10
[   59.544600][ T5955]  do_sock_setsockopt+0x17c/0x1b0
[   59.544642][ T5955]  __x64_sys_setsockopt+0x13f/0x1b0
[   59.544662][ T5955]  do_syscall_64+0xfa/0x3b0
[   59.544677][ T5955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.544689][ T5955]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   59.544705][ T5955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.544717][ T5955] RIP: 0033:0x7f574698eba9
[   59.544728][ T5955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.544738][ T5955] RSP: 002b:00007f574776c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   59.544752][ T5955] RAX: ffffffffffffffda RBX: 00007f5746bd5fa0 RCX: 00007f574698eba9
[   59.544760][ T5955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   59.544766][ T5955] RBP: 00007f5746a11e19 R08: 0000000000000004 R09: 0000000000000000
[   59.544773][ T5955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.544780][ T5955] R13: 00007f5746bd6038 R14: 00007f5746bd5fa0 R15: 00007ffe2cfe17a8
[   59.544801][ T5955]  </TASK>
[   59.659035][   T55] Bluetooth: hci2: command tx timeout
[   59.659378][ T5955] Mem-Info:
[   59.661797][ T5955] active_anon:5641 inactive_anon:0 isolated_anon:0
[   59.661797][ T5955]  active_file:1298 inactive_file:38238 isolated_file:0
[   59.661797][ T5955]  unevictable:1768 dirty:1557 writeback:0
[   59.661797][ T5955]  slab_reclaimable:9569 slab_unreclaimable:50624
[   59.661797][ T5955]  mapped:18207 shmem:2428 pagetables:959
[   59.661797][ T5955]  sec_pagetables:0 bounce:0
[   59.661797][ T5955]  kernel_misc_reclaimable:0
[   59.661797][ T5955]  free:305368 free_pcp:20441 free_cma:0
[   59.662720][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.676148][ T5955] Node 0 active_anon:14692kB inactive_anon:0kB active_file:1952kB inactive_file:9368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32056kB dirty:2704kB writeback:0kB shmem:5112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6568kB pagetables:1740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.689249][ T5955] Node 1 active_anon:7872kB inactive_anon:0kB active_file:3240kB inactive_file:143584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40772kB dirty:3524kB writeback:0kB shmem:4600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4848kB pagetables:2096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.699393][ T5955] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.708780][ T5955] lowmem_reserve[]: 0 811 811 811 811
[   59.710742][ T5955] Node 0 DMA32 free:437236kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14692kB inactive_anon:0kB active_file:1952kB inactive_file:9368kB unevictable:3536kB writepending:2704kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:24252kB local_pcp:4160kB free_cma:0kB
[   59.720761][ T5955] lowmem_reserve[]: 0 0 0 0 0
[   59.722549][ T5955] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.731785][ T5955] lowmem_reserve[]: 0 0 854 854 854
[   59.733638][ T5955] Node 1 Normal free:309796kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7872kB inactive_anon:0kB active_file:3240kB inactive_file:143584kB unevictable:3536kB writepending:3524kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:58084kB local_pcp:19352kB free_cma:0kB
[   59.743765][ T5955] lowmem_reserve[]: 0 0 0 0 0
[   59.745299][ T5955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   59.749382][ T5955] Node 0 DMA32: 231*4kB (UM) 207*8kB (UM) 32*16kB (UME) 6*32kB (M) 4*64kB (M) 2*128kB (UM) 3*256kB (UME) 1*512kB (E) 2*1024kB (ME) 0*2048kB 105*4096kB (M) = 437204kB
[   59.754843][ T5955] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   59.760423][ T5955] Node 1 Normal: 222*4kB (M) 350*8kB (UM) 193*16kB (UME) 34*32kB (ME) 31*64kB (ME) 17*128kB (M) 13*256kB (UM) 9*512kB (ME) 9*1024kB (UME) 3*2048kB (UME) 67*4096kB (M) = 309752kB
[   59.766550][ T5955] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.769666][ T5955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.772813][ T5955] 41964 total pagecache pages
[   59.774323][ T5955] 0 pages in swap cache
[   59.775671][ T5955] Free swap  = 124996kB
[   59.777148][ T5955] Total swap = 124996kB
[   59.778483][ T5955] 786301 pages RAM
[   59.779687][ T5955] 0 pages HighMem/MovableOnly
[   59.781333][ T5955] 241350 pages reserved
[   59.783037][ T5955] 0 pages cma reserved
[   59.944731][ T5983] netlink: 52 bytes leftover after parsing attributes in process `syz.2.26'.
[   59.979667][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.987257][ T5988] netlink: 124 bytes leftover after parsing attributes in process `syz.2.27'.
[   59.992252][   T33] audit: type=1800 audit(1757710064.619:2): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.25" name="memory.events" dev="tmpfs" ino=43 res=0 errno=0
[   60.050103][ T5990] syzkaller1: entered promiscuous mode
[   60.052071][ T5990] syzkaller1: entered allmulticast mode
[   60.099943][ T5992] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET)
[   60.572863][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   60.576204][ T6012] netlink: 23 bytes leftover after parsing attributes in process `syz.1.34'.
[   60.609708][ T6015] Bluetooth: MGMT ver 1.23
[   60.699043][ T6020] netlink: 'syz.1.36': attribute type 2 has an invalid length.
[   60.915674][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.144449][ T6049] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   61.233698][ T6052] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.290676][ T6054] bridge: RTM_NEWNEIGH with invalid ether address
[   61.368915][ T6059] syzkaller1: entered promiscuous mode
[   61.370805][ T6059] syzkaller1: entered allmulticast mode
[   61.523956][ T6063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.566599][   T55] Bluetooth: hci0: command tx timeout
[   61.576612][   T55] Bluetooth: hci1: command tx timeout
[   61.726622][   T55] Bluetooth: hci2: command tx timeout
[   62.371677][ T6075] tipc: Started in network mode
[   62.373365][ T6075] tipc: Node identity 7af96e7d358, cluster identity 4711
[   62.375941][ T6075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.381237][ T6079] syzkaller0: MTU too low for tipc bearer
[   62.383235][ T6079] tipc: Disabling bearer <eth:syzkaller0>
[   62.386037][ T6085] syzkaller0: entered promiscuous mode
[   62.396635][ T6085] syzkaller0: entered allmulticast mode
[   62.473461][ T6090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.473884][ T6092] Zero length message leads to an empty skb
[   62.564229][ T6094] ieee802154 phy0 wpan0: encryption failed: -22
[   62.570130][ T6094] ieee802154 phy0 wpan0: encryption failed: -22
[   62.588797][ T6090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.640643][ T6090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.682511][ T6107] netlink: 'syz.1.65': attribute type 1 has an invalid length.
[   62.685427][ T6107] netlink: 'syz.1.65': attribute type 2 has an invalid length.
[   62.722072][ T6090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.816350][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.823721][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.832902][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.842910][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.145672][ T6130] __nla_validate_parse: 7 callbacks suppressed
[   63.145685][ T6130] netlink: 788 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.647434][   T55] Bluetooth: hci1: command tx timeout
[   63.647478][ T5236] Bluetooth: hci0: command tx timeout
[   63.746345][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'.
[   63.781471][ T6164] netlink: 'syz.1.80': attribute type 32 has an invalid length.
[   63.794232][ T6160] warning: `syz.2.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.799417][ T6160] netlink: 'syz.2.79': attribute type 7 has an invalid length.
[   63.804507][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'.
[   63.807997][ T5236] Bluetooth: hci2: command tx timeout
[   63.893342][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'.
[   63.896106][ T6175] netlink: 'syz.1.83': attribute type 5 has an invalid length.
[   63.909802][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.83'.
[   63.938719][ T6175] geneve2: entered promiscuous mode
[   63.940842][ T6175] geneve2: entered allmulticast mode
[   63.947784][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   63.954714][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   63.963367][ T6178] syzkaller1: entered promiscuous mode
[   63.965762][ T6178] syzkaller1: entered allmulticast mode
[   63.982668][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   64.002081][ T5882] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   64.021551][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[   64.113573][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.197659][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'.
[   64.204718][ T6199] netlink: 'syz.0.91': attribute type 7 has an invalid length.
[   64.208897][ T6199] netlink: 'syz.0.91': attribute type 8 has an invalid length.
[   64.216943][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   64.222580][ T6199] netlink: 'syz.0.91': attribute type 1 has an invalid length.
[   64.238563][ T6199] netlink: 3242 bytes leftover after parsing attributes in process `syz.0.91'.
[   64.247619][ T6199] netlink: 'syz.0.91': attribute type 1 has an invalid length.
[   64.313909][ T6212] syzkaller1: entered promiscuous mode
[   64.316019][ T6212] syzkaller1: entered allmulticast mode
[   64.474332][ T6223] netlink: 'syz.0.98': attribute type 5 has an invalid length.
[   64.594887][ T6237] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   64.611257][ T6239] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   64.638471][ T6239] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.214590][ T6259] netlink: 'syz.0.110': attribute type 7 has an invalid length.
[   65.224997][ T6259] : entered promiscuous mode
[   65.587136][ T6278] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   66.687363][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.720105][ T6309] tipc: Started in network mode
[   66.721922][ T6309] tipc: Node identity 5ef2c5392cfb, cluster identity 4711
[   66.724666][ T6309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.730508][ T6309] syzkaller0: entered promiscuous mode
[   66.732345][ T6309] syzkaller0: entered allmulticast mode
[   66.745069][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   66.751563][ T6308] tipc: Resetting bearer <eth:syzkaller0>
[   66.761004][ T6308] tipc: Disabling bearer <eth:syzkaller0>
[   66.881510][ T6324] pim6reg1: entered promiscuous mode
[   66.883395][ T6324] pim6reg1: entered allmulticast mode
[   66.998268][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.001610][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.008606][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.010959][ T6340] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.013866][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.016260][ T6340] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.023573][ T6340] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   67.032700][ T6342] syzkaller1: entered promiscuous mode
[   67.034749][ T6342] syzkaller1: entered allmulticast mode
[   67.409007][ T6370] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.423413][ T6377] (unnamed net_device) (uninitialized): option coupled_control: invalid value (24)
[   67.444343][ T6371] team0: Device ipip0 is of different type
[   67.481346][ T6370] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.494436][ T6384] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[   67.571844][ T6370] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.631772][ T6370] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.717345][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.730249][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.745046][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.754941][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.829742][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.834143][ T6401] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   68.583763][ T6437] __nla_validate_parse: 12 callbacks suppressed
[   68.583776][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   68.960062][ T6459] syzkaller1: entered promiscuous mode
[   68.962576][ T6459] syzkaller1: entered allmulticast mode
[   69.463062][ T6475] syzkaller1: entered promiscuous mode
[   69.465457][ T6475] syzkaller1: entered allmulticast mode
[   69.833287][ T6494] validate_nla: 4 callbacks suppressed
[   69.833301][ T6494] netlink: 'syz.0.183': attribute type 1 has an invalid length.
[   69.854686][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.866213][ T6494] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   69.870762][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.874344][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.878983][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.882739][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.069068][ T6500] erspan0: entered promiscuous mode
[   70.073884][ T6500] erspan0: left promiscuous mode
[   70.141960][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'.
[   70.245243][ T6508] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   70.262713][ T6508] bond3: entered promiscuous mode
[   70.265278][ T6508] 8021q: adding VLAN 0 to HW filter on device bond3
[   70.766652][ T5236] Bluetooth: hci2: command tx timeout
[   70.832862][ T6522] netlink: 'syz.0.192': attribute type 1 has an invalid length.
[   70.836229][ T6522] netlink: 224 bytes leftover after parsing attributes in process `syz.0.192'.
[   70.961391][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'.
[   71.043453][ T6528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.194'.
[   71.263568][ T6536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.197'.
[   71.387154][ T6541] syz.1.198 (6541) used obsolete PPPIOCDETACH ioctl
[   71.409252][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   71.469048][ T6553] netlink: 'syz.0.201': attribute type 21 has an invalid length.
[   71.473476][ T6553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.201'.
[   71.511575][ T6555] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   71.710543][ T6568] syzkaller1: entered promiscuous mode
[   71.712854][ T6568] syzkaller1: entered allmulticast mode
[   71.941971][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.212'.
[   71.953707][ T6585] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   71.962322][ T6585] netlink: zone id is out of range
[   72.030466][ T6588] veth0: entered promiscuous mode
[   72.033138][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'.
[   72.048133][ T6588] veth0 (unregistering): left promiscuous mode
[   72.234420][ T6601] openvswitch: netlink: IP tunnel dst address not specified
[   72.420758][ T6621] syz_tun: entered promiscuous mode
[   72.423434][ T6621] vlan2: entered promiscuous mode
[   72.502658][ T6627] syz.2.226: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   72.516779][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.2.226 Not tainted syzkaller #0 PREEMPT(full) 
[   72.516797][ T6627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.516803][ T6627] Call Trace:
[   72.516808][ T6627]  <TASK>
[   72.516814][ T6627]  dump_stack_lvl+0x189/0x250
[   72.516834][ T6627]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.516849][ T6627]  ? __pfx__printk+0x10/0x10
[   72.516865][ T6627]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.516879][ T6627]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.516893][ T6627]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   72.516908][ T6627]  warn_alloc+0x214/0x310
[   72.516931][ T6627]  ? __pfx_warn_alloc+0x10/0x10
[   72.516954][ T6627]  ? __get_vm_area_node+0x28f/0x300
[   72.516970][ T6627]  ? xskq_create+0xbf/0x170
[   72.516985][ T6627]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   72.517023][ T6627]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   72.517039][ T6627]  ? xskq_create+0x56/0x170
[   72.517053][ T6627]  ? __kasan_kmalloc+0x93/0xb0
[   72.517071][ T6627]  vmalloc_user_noprof+0xad/0xf0
[   72.517087][ T6627]  ? xskq_create+0xbf/0x170
[   72.517099][ T6627]  xskq_create+0xbf/0x170
[   72.517112][ T6627]  xsk_init_queue+0xb0/0x110
[   72.517125][ T6627]  xsk_setsockopt+0x57b/0x8d0
[   72.517145][ T6627]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.517160][ T6627]  ? __pfx_aa_sk_perm+0x10/0x10
[   72.517179][ T6627]  ? __fget_files+0x2a/0x420
[   72.517188][ T6627]  ? aa_sock_opt_perm+0xff/0x1b0
[   72.517202][ T6627]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   72.517214][ T6627]  ? __pfx_xsk_setsockopt+0x10/0x10
[   72.517231][ T6627]  do_sock_setsockopt+0x17c/0x1b0
[   72.517249][ T6627]  __x64_sys_setsockopt+0x13f/0x1b0
[   72.517266][ T6627]  do_syscall_64+0xfa/0x3b0
[   72.517277][ T6627]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.517289][ T6627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.517300][ T6627]  ? exc_page_fault+0x9f/0xf0
[   72.517313][ T6627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.517324][ T6627] RIP: 0033:0x7f53e198eba9
[   72.517334][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.517344][ T6627] RSP: 002b:00007f53e278e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   72.517357][ T6627] RAX: ffffffffffffffda RBX: 00007f53e1bd5fa0 RCX: 00007f53e198eba9
[   72.517364][ T6627] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[   72.517394][ T6627] RBP: 00007f53e1a11e19 R08: 0000000000000004 R09: 0000000000000000
[   72.517407][ T6627] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   72.517414][ T6627] R13: 00007f53e1bd6038 R14: 00007f53e1bd5fa0 R15: 00007fffdfeb0c08
[   72.517434][ T6627]  </TASK>
[   72.517439][ T6627] Mem-Info:
[   72.629315][ T6627] active_anon:5696 inactive_anon:0 isolated_anon:0
[   72.629315][ T6627]  active_file:1426 inactive_file:38244 isolated_file:0
[   72.629315][ T6627]  unevictable:1768 dirty:1630 writeback:0
[   72.629315][ T6627]  slab_reclaimable:9760 slab_unreclaimable:51680
[   72.629315][ T6627]  mapped:18239 shmem:2434 pagetables:961
[   72.629315][ T6627]  sec_pagetables:0 bounce:0
[   72.629315][ T6627]  kernel_misc_reclaimable:0
[   72.629315][ T6627]  free:298090 free_pcp:21417 free_cma:0
[   72.644803][ T6627] Node 0 active_anon:14800kB inactive_anon:0kB active_file:2464kB inactive_file:9368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32312kB dirty:2880kB writeback:0kB shmem:5136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6564kB pagetables:1984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.645745][ T6634] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.658442][ T6627] Node 1 active_anon:7984kB inactive_anon:0kB active_file:3240kB inactive_file:143608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40644kB dirty:3640kB writeback:0kB shmem:4600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5016kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.673193][ T6627] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.685270][ T6627] lowmem_reserve[]: 0 811 811 811 811
[   72.688038][ T6627] Node 0 DMA32 free:403664kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14800kB inactive_anon:0kB active_file:2464kB inactive_file:9368kB unevictable:3536kB writepending:2880kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:41852kB local_pcp:15804kB free_cma:0kB
[   72.701956][ T6627] lowmem_reserve[]: 0 0 0 0 0
[   72.704002][ T6627] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.716761][ T6627] lowmem_reserve[]: 0 0 854 854 854
[   72.718985][ T6627] Node 1 Normal free:314720kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7984kB inactive_anon:0kB active_file:3240kB inactive_file:143608kB unevictable:3536kB writepending:3640kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43648kB local_pcp:28712kB free_cma:0kB
[   72.732759][ T6627] lowmem_reserve[]: 0 0 0 0 0
[   72.734793][ T6627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   72.740310][ T6627] Node 0 DMA32: 638*4kB (UM) 163*8kB (UM) 118*16kB (UME) 175*32kB (UM) 56*64kB (UM) 17*128kB (UME) 12*256kB (UME) 7*512kB (UME) 1*1024kB (M) 1*2048kB (U) 92*4096kB (UM) = 403664kB
[   72.746898][ T6627] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   72.752263][ T6627] Node 1 Normal: 2*4kB (UM) 279*8kB (U) 426*16kB (UM) 180*32kB (UM) 15*64kB (U) 5*128kB (UME) 25*256kB (UME) 14*512kB (UM) 10*1024kB (ME) 4*2048kB (ME) 65*4096kB (M) = 314656kB
[   72.758686][ T6627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.761860][ T6627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.765002][ T6627] 42104 total pagecache pages
[   72.766998][ T6627] 0 pages in swap cache
[   72.768358][ T6627] Free swap  = 124996kB
[   72.769920][ T6627] Total swap = 124996kB
[   72.771349][ T6627] 786301 pages RAM
[   72.772709][ T6627] 0 pages HighMem/MovableOnly
[   72.781850][ T6627] 241350 pages reserved
[   72.783291][ T6627] 0 pages cma reserved
[   72.885714][ T6642] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[   72.967054][ T6647] syz.1.233 uses old SIOCAX25GETINFO
[   73.202412][ T6672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.779989][   T33] audit: type=1800 audit(1757710078.409:3): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.245" name="memory.events" dev="tmpfs" ino=327 res=0 errno=0
[   73.831680][ T6712] netlink: 'syz.1.249': attribute type 7 has an invalid length.
[   73.834315][ T6712] netlink: 'syz.1.249': attribute type 8 has an invalid length.
[   73.979143][ T6716] netlink: 'syz.2.251': attribute type 29 has an invalid length.
[   74.022377][ T6726] __nla_validate_parse: 8 callbacks suppressed
[   74.022386][ T6726] netlink: 240 bytes leftover after parsing attributes in process `syz.0.253'.
[   74.033664][ T6726] netlink: 260 bytes leftover after parsing attributes in process `syz.0.253'.
[   74.039708][ T6726] netlink: 260 bytes leftover after parsing attributes in process `syz.0.253'.
[   74.348937][ T6745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.258'.
[   74.431970][ T6749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.259'.
[   74.439080][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   74.654848][ T6761] netlink: 51 bytes leftover after parsing attributes in process `syz.0.263'.
[   74.694467][ T6765] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.265'.
[   74.745041][ T6769] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   74.751826][ T6767] xt_time: invalid argument - start or stop time greater than 23:59:59
[   74.814719][   T33] audit: type=1800 audit(1757710079.439:4): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.264" name="memory.events" dev="tmpfs" ino=520 res=0 errno=0
[   74.936778][ T6784] validate_nla: 26 callbacks suppressed
[   74.936788][ T6784] netlink: 'syz.0.271': attribute type 2 has an invalid length.
[   75.043938][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'.
[   75.051770][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'.
[   75.065908][ T6795] syz_tun: entered promiscuous mode
[   75.070787][ T6795] syz_tun: left promiscuous mode
[   75.157032][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   75.405311][   T33] audit: type=1800 audit(1757710080.029:5): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.278" name="memory.events" dev="tmpfs" ino=365 res=0 errno=0
[   75.485860][ T6816] syz_tun: entered allmulticast mode
[   75.490525][ T6816] unsupported nlmsg_type 40
[   76.112299][ T6841] syzkaller1: entered promiscuous mode
[   76.114161][ T6841] syzkaller1: entered allmulticast mode
[   76.122765][ T6844] netlink: 'syz.2.288': attribute type 1 has an invalid length.
[   76.148337][ T6844] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.157356][ T6844] bond1: (slave ip6erspan0): making interface the new active one
[   76.161908][ T6844] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   76.378795][ T6860] netlink: 'syz.2.293': attribute type 30 has an invalid length.
[   76.396960][ T6860] netlink: 'syz.2.293': attribute type 30 has an invalid length.
[   76.408242][ T6860] netlink: 'syz.2.293': attribute type 30 has an invalid length.
[   76.411161][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.414948][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.430601][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.433865][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.433887][ T6860] netlink: 'syz.2.293': attribute type 30 has an invalid length.
[   76.705672][ T6870] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   76.718453][ T6870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.730495][ T6866] Driver unsupported XDP return value 0 on prog  (id 66) dev N/A, expect packet loss!
[   77.071859][ T6890] syzkaller1: entered promiscuous mode
[   77.073877][ T6890] syzkaller1: entered allmulticast mode
[   77.298911][ T6904] nbd: couldn't find device at index 536870912
[   77.653726][ T6929] syzkaller1: entered promiscuous mode
[   77.655641][ T6929] syzkaller1: entered allmulticast mode
[   77.775035][ T6936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   77.778393][ T6936] IPv6: NLM_F_CREATE should be set when creating new route
[   77.781375][ T6936] IPv6: NLM_F_CREATE should be set when creating new route
[   78.922430][ T6987] syzkaller1: entered promiscuous mode
[   78.924692][ T6987] syzkaller1: entered allmulticast mode
[   79.217424][ T7010] syzkaller1: entered promiscuous mode
[   79.219285][ T7010] syzkaller1: entered allmulticast mode
[   79.269316][ T7015] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   79.288791][ T7017] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000
[   79.336353][ T7023] syzkaller1: entered promiscuous mode
[   79.338499][ T7023] syzkaller1: entered allmulticast mode
[   79.364674][ T7025] __nla_validate_parse: 35 callbacks suppressed
[   79.364684][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'.
[   79.731668][ T7067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.333'.
[   79.874194][ T7103] netlink: 'syz.2.334': attribute type 10 has an invalid length.
[   79.903744][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'.
[   79.964302][ T7113] netlink: 'syz.1.336': attribute type 4 has an invalid length.
[   79.994161][ T7117] syzkaller1: entered promiscuous mode
[   79.996162][ T7117] syzkaller1: entered allmulticast mode
[   80.430370][ T7156] netlink: 264 bytes leftover after parsing attributes in process `syz.0.345'.
[   80.434678][ T7156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.345'.
[   80.465656][ T7158] syzkaller1: entered promiscuous mode
[   80.473085][ T7158] syzkaller1: entered allmulticast mode
[   80.509792][ T7161] netlink: 27 bytes leftover after parsing attributes in process `syz.0.345'.
[   80.530415][ T7156] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.345'.
[   80.662837][ T5314] IPVS: starting estimator thread 0...
[   80.671841][ T7178] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[   80.709464][ T7179] syzkaller1: entered promiscuous mode
[   80.711768][ T7179] syzkaller1: entered allmulticast mode
[   80.776795][ T7180] IPVS: using max 41 ests per chain, 98400 per kthread
[   80.844946][ T7194] netlink: 'syz.2.354': attribute type 11 has an invalid length.
[   80.855823][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.354'.
[   81.168663][   T47] cfg80211: failed to load regulatory.db
[  103.304740][ T7700] syzkaller1: entered promiscuous mode
[  103.311157][ T7700] syzkaller1: entered allmulticast mode
[  103.524002][ T7720] netlink: 596 bytes leftover after parsing attributes in process `syz.2.363'.
[  103.676736][ T7732] netlink: 'syz.2.366': attribute type 12 has an invalid length.
[  103.681323][ T7732] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.366'.
[  103.832761][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'.
[  103.938046][ T7743] netlink: 100 bytes leftover after parsing attributes in process `syz.0.370'.
[  104.156180][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'.
[  104.303642][ T7762] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[  104.309863][ T7762] netlink: 120 bytes leftover after parsing attributes in process `syz.0.377'.
[  104.316225][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.376'.
[  104.320777][ T7761] netlink: 7 bytes leftover after parsing attributes in process `syz.2.376'.
[  104.364115][ T7764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.368168][ T7764] syzkaller0: entered promiscuous mode
[  104.370249][ T7764] syzkaller0: entered allmulticast mode
[  104.393328][ T7764] tipc: Resetting bearer <eth:syzkaller0>
[  104.398444][ T7763] tipc: Resetting bearer <eth:syzkaller0>
[  104.411882][ T7763] tipc: Disabling bearer <eth:syzkaller0>
[  104.472908][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[  104.591819][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'.
[  105.301527][ T7787] tun0: tun_chr_ioctl cmd 1074025675
[  105.303976][ T7787] tun0: persist enabled
[  105.306035][ T7787] tun0: tun_chr_ioctl cmd 1074025675
[  105.311745][ T7787] tun0: persist enabled
[  105.314564][ T7787] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001
[  105.700203][ T7824] netlink: 'syz.1.398': attribute type 12 has an invalid length.
[  105.821523][ T7831] netlink: 'syz.1.399': attribute type 1 has an invalid length.
[  106.037754][ T7845] dvmrp0: entered allmulticast mode
[  106.545876][ T7870] : renamed from batadv_slave_1 (while UP)
[  106.641353][ T7874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.644377][ T7874] syzkaller0: entered promiscuous mode
[  106.647405][ T7874] syzkaller0: entered allmulticast mode
[  106.653220][ T7874] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  106.656778][ T5314] IPVS: starting estimator thread 0...
[  106.662692][ T7874] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  106.674983][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[  106.683104][ T7877] netlink: 'syz.1.412': attribute type 10 has an invalid length.
[  106.693965][ T7872] tipc: Resetting bearer <eth:syzkaller0>
[  106.705579][ T7872] tipc: Disabling bearer <eth:syzkaller0>
[  106.749103][ T7875] IPVS: using max 81 ests per chain, 194400 per kthread
[  106.843117][ T7893] netlink: 'syz.0.416': attribute type 10 has an invalid length.
[  106.847888][ T7893] team0: Cannot enslave team device to itself
[  106.875522][ T7895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.118221][ T7910] IPv6: sit3: Disabled Multicast RS
[  107.121456][ T7910] sit3: entered allmulticast mode
[  107.620452][ T7941] team1: entered promiscuous mode
[  107.622233][ T7941] team1: entered allmulticast mode
[  107.624143][ T7941] 8021q: adding VLAN 0 to HW filter on device team1
[  107.658727][ T7945] bond5: entered promiscuous mode
[  107.660535][ T7945] bond5: entered allmulticast mode
[  107.662442][ T7945] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.743985][ T7955] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  107.901237][ T7973] dvmrp0: entered allmulticast mode
[  107.913032][ T7975] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[  108.640213][ T8004] __nla_validate_parse: 14 callbacks suppressed
[  108.640223][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.450'.
[  108.647211][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  108.698263][ T8005] netlink: 104 bytes leftover after parsing attributes in process `syz.0.450'.
[  108.791640][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.452'.
[  108.850221][ T8015] netlink: 'syz.1.454': attribute type 1 has an invalid length.
[  108.866316][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'.
[  108.877518][ T8014] bond6: (slave veth5): Enslaving as an active interface with a down link
[  108.883403][ T8015] 8021q: adding VLAN 0 to HW filter on device bond6
[  108.908323][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[  109.282056][ T8042] netlink: 'syz.1.463': attribute type 32 has an invalid length.
[  109.285182][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'.
[  109.290194][ T8042] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  109.385981][ T8049] netlink: 'syz.1.465': attribute type 32 has an invalid length.
[  109.537324][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[  109.545234][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.470'.
[  109.649565][ T8079] netlink: 176 bytes leftover after parsing attributes in process `syz.0.474'.
[  109.834439][ T8103] netlink: 176 bytes leftover after parsing attributes in process `syz.1.481'.
[  109.913812][ T8116] vlan4: entered promiscuous mode
[  109.915853][ T8116] bond0: entered promiscuous mode
[  109.922592][ T8116] bond_slave_0: entered promiscuous mode
[  109.925431][ T8116] bond_slave_1: entered promiscuous mode
[  109.928423][ T8116] bridge0: entered promiscuous mode
[  109.930311][ T8116] vlan4: entered allmulticast mode
[  109.932170][ T8116] bond0: entered allmulticast mode
[  109.934596][ T8116] bond_slave_0: entered allmulticast mode
[  109.940218][ T8116] bond_slave_1: entered allmulticast mode
[  109.942146][ T8116] bridge0: entered allmulticast mode
[  109.945336][ T8116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.948769][ T8116] syzkaller0: entered promiscuous mode
[  109.950712][ T8116] syzkaller0: entered allmulticast mode
[  109.958109][ T8116] tipc: Resetting bearer <eth:syzkaller0>
[  109.963085][ T8115] tipc: Resetting bearer <eth:syzkaller0>
[  109.983604][ T8115] tipc: Disabling bearer <eth:syzkaller0>
[  110.121842][ T8132] netlink: 'syz.2.489': attribute type 11 has an invalid length.
[  110.788175][ T8163] netlink: 'syz.0.498': attribute type 1 has an invalid length.
[  110.973753][ T8189] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.107271][ T8195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.112064][ T8195] syzkaller0: entered promiscuous mode
[  111.114315][ T8195] syzkaller0: entered allmulticast mode
[  111.122924][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  111.131395][ T8194] tipc: Resetting bearer <eth:syzkaller0>
[  111.143387][ T8194] tipc: Disabling bearer <eth:syzkaller0>
[  111.154660][ T8203] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  111.161295][ T8192] bond0: entered promiscuous mode
[  111.163536][ T8192] bond_slave_0: entered promiscuous mode
[  111.166154][ T8192] bond_slave_1: entered promiscuous mode
[  111.170558][ T8192] batadv0: entered promiscuous mode
[  111.173702][ T8192] hsr1: entered allmulticast mode
[  111.175899][ T8192] bond0: entered allmulticast mode
[  111.178922][ T8192] bond_slave_0: entered allmulticast mode
[  111.181293][ T8192] bond_slave_1: entered allmulticast mode
[  111.183953][ T8192] batadv0: entered allmulticast mode
[  111.186734][ T8192] 8021q: adding VLAN 0 to HW filter on device hsr1
[  111.191608][ T8192] bond0: left promiscuous mode
[  111.193635][ T8192] bond_slave_0: left promiscuous mode
[  111.197773][ T8192] bond_slave_1: left promiscuous mode
[  111.202044][ T8192] batadv0: left promiscuous mode
[  111.231647][ T8205] bridge1: entered promiscuous mode
[  111.312151][ T8209] veth1_to_bond: entered allmulticast mode
[  111.335153][ T8209] bond0: (slave bond_slave_1): Releasing backup interface
[  111.363177][ T8209] veth1_to_bond (unregistering): left allmulticast mode
[  111.450602][ T8231] netlink: 'syz.0.517': attribute type 8 has an invalid length.
[  111.760715][ T8249] pim6reg: entered allmulticast mode
[  111.779868][ T8249] Bluetooth: MGMT ver 1.23
[  112.283539][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.287437][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.335502][ T8232] pim6reg: left allmulticast mode
[  112.364997][ T8293] openvswitch: netlink: Message has 16 unknown bytes.
[  112.373911][ T8293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.379439][ T8293] lo: entered allmulticast mode
[  112.383834][ T8293] tunl0: entered allmulticast mode
[  112.387484][ T8293] gre0: entered allmulticast mode
[  112.401487][ T8293] gretap0: entered allmulticast mode
[  112.409009][ T8293] erspan0: entered allmulticast mode
[  112.413804][ T8293] ip_vti0: entered allmulticast mode
[  112.417613][ T8293] ip6_vti0: entered allmulticast mode
[  112.422324][ T8293] sit0: entered allmulticast mode
[  112.430919][ T8293] ip6tnl0: entered allmulticast mode
[  112.438762][ T8293] ip6gre0: entered allmulticast mode
[  112.458635][ T8293] ip6gretap0: entered allmulticast mode
[  112.463219][ T8293] bridge0: entered allmulticast mode
[  112.465564][ T8293] vcan0: entered allmulticast mode
[  112.474355][ T8293] team0: entered allmulticast mode
[  112.476159][ T8293] team_slave_0: entered allmulticast mode
[  112.479016][ T8293] team_slave_1: entered allmulticast mode
[  112.481373][ T8296] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  112.483909][ T8296] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  112.484105][ T8293] dummy0: entered allmulticast mode
[  112.492992][ T8293] nlmon0: entered allmulticast mode
[  112.496277][ T8293] caif0: entered allmulticast mode
[  112.502987][ T8293] veth0: entered allmulticast mode
[  112.507571][ T8293] veth1: entered allmulticast mode
[  112.513046][ T8293] wg0: entered allmulticast mode
[  112.516837][ T8293] wg1: entered allmulticast mode
[  112.520392][ T8293] wg2: entered allmulticast mode
[  112.523812][ T8293] veth0_to_bridge: entered allmulticast mode
[  112.534292][ T8293] veth1_to_bridge: entered allmulticast mode
[  112.542056][ T8293] veth0_to_bond: entered allmulticast mode
[  112.547867][ T8293] veth1_to_bond: entered allmulticast mode
[  112.553917][ T8293] veth0_to_team: entered allmulticast mode
[  112.561693][ T8293] veth1_to_team: entered allmulticast mode
[  112.569386][ T8293] veth0_to_batadv: entered allmulticast mode
[  112.574139][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.576904][ T8293] batadv_slave_0: entered allmulticast mode
[  112.582116][ T8293] veth1_to_batadv: entered allmulticast mode
[  112.587557][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.590977][ T8293] batadv_slave_1: entered allmulticast mode
[  112.597793][ T8293] xfrm0: entered allmulticast mode
[  112.603201][ T8293] veth0_to_hsr: entered allmulticast mode
[  112.612890][ T8293] hsr_slave_0: entered allmulticast mode
[  112.617149][ T8293] veth1_to_hsr: entered allmulticast mode
[  112.621949][ T8293] hsr_slave_1: entered allmulticast mode
[  112.627467][ T8293] hsr0: entered allmulticast mode
[  112.637866][ T8293] veth1_virt_wifi: entered allmulticast mode
[  112.651897][ T8301] openvswitch: netlink: Key type 16144 is out of range max 32
[  112.658415][ T8293] veth0_virt_wifi: entered allmulticast mode
[  112.665205][ T8293] net veth1_virt_wifi : entered allmulticast mode
[  112.677223][ T8293] veth1_vlan: entered allmulticast mode
[  112.682777][ T8293] veth0_vlan: entered allmulticast mode
[  112.692836][ T8293] vlan0: entered allmulticast mode
[  112.694837][ T8293] vlan1: entered allmulticast mode
[  112.698440][ T8293] macvlan0: entered allmulticast mode
[  112.703337][ T8293] macvlan1: entered allmulticast mode
[  112.708333][ T8293] ipvlan0: entered allmulticast mode
[  112.710601][ T8293] ipvlan1: entered allmulticast mode
[  112.713588][ T8293] veth1_macvtap: entered allmulticast mode
[  112.719416][ T8293] veth0_macvtap: entered allmulticast mode
[  112.724857][ T8293] macvtap0: entered allmulticast mode
[  112.729590][ T8293] macsec0: entered allmulticast mode
[  112.734326][ T8293] geneve1: entered allmulticast mode
[  112.743945][ T8293] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  112.755033][ T8293] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  112.760092][ T8293] mac80211_hwsim hwsim9 wlan2: entered allmulticast mode
[  112.762631][ T8293] netdevsim netdevsim2 eth0: entered allmulticast mode
[  112.765280][ T8293] netdevsim netdevsim2 eth1: entered allmulticast mode
[  112.769101][ T8293] netdevsim netdevsim2 eth2: entered allmulticast mode
[  112.771619][ T8293] netdevsim netdevsim2 eth3: entered allmulticast mode
[  112.775337][ T8293] geneve2: entered allmulticast mode
[  112.789153][ T8293] bond1: entered allmulticast mode
[  112.791027][ T8293] ip6erspan0: entered allmulticast mode
[  112.794828][ T8293] vxlan0: entered allmulticast mode
[  112.801267][ T8293] vxlan1: entered allmulticast mode
[  112.804364][ T8293] vxlan2: entered allmulticast mode
[  112.808397][ T8293] vxlan3: entered allmulticast mode
[  112.811104][ T8293] bond2: entered allmulticast mode
[  112.812973][ T8293] mac80211_hwsim hwsim32 wlan3: entered allmulticast mode
[  112.817004][ T8293] macvlan2: entered allmulticast mode
[  112.819264][ T8293] ip6tnl1: entered allmulticast mode
[  112.821374][ T8293] ip6tnl2: entered allmulticast mode
[  112.836113][ T5695] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.840561][ T5695] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.843268][ T5695] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.846023][ T5695] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.902013][ T5695] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.904908][ T5695] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.914608][ T5695] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.923479][ T5695] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.054536][ T8324] netlink: set zone limit has 4 unknown bytes
[  113.150097][ T8334] syzkaller1: entered promiscuous mode
[  113.151984][ T8334] syzkaller1: entered allmulticast mode
[  113.271765][ T8344] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  113.350605][ T8352] netlink: 'syz.2.547': attribute type 8 has an invalid length.
[  113.373187][ T8352] bond0: entered promiscuous mode
[  113.375351][ T8352] bond_slave_0: entered promiscuous mode
[  113.389699][ T8352] bond_slave_1: entered promiscuous mode
[  113.393711][ T8352] bond0: left promiscuous mode
[  113.395748][ T8352] bond_slave_0: left promiscuous mode
[  113.398780][ T8352] bond_slave_1: left promiscuous mode
[  113.462375][ T8361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.467133][ T8363] netlink: 'syz.0.550': attribute type 14 has an invalid length.
[  113.493334][ T8361] syzkaller0: entered promiscuous mode
[  113.495701][ T8361] syzkaller0: entered allmulticast mode
[  113.572204][ T8373] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  113.621834][ T8360] tipc: Resetting bearer <eth:syzkaller0>
[  113.642745][ T8360] tipc: Disabling bearer <eth:syzkaller0>
[  113.658130][ T8378] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  113.659788][ T8379] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  113.693983][ T8373] __nla_validate_parse: 20 callbacks suppressed
[  113.693996][ T8373] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.551'.
[  113.771752][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'.
[  113.790756][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'.
[  113.795173][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.896015][ T8406] netlink: 176 bytes leftover after parsing attributes in process `syz.2.557'.
[  113.905510][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[  114.029133][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'.
[  114.039806][ T8418] syzkaller1: entered promiscuous mode
[  114.041863][ T8418] syzkaller1: entered allmulticast mode
[  114.125120][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'.
[  114.129237][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'.
[  114.179009][ T8428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.183416][ T8428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  114.271363][ T8428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.275408][ T8428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  114.324440][ T8428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.331600][ T8428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  114.409904][ T8428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.413285][ T8428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  114.480066][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  114.482886][ T5882] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  114.490910][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  114.494499][ T5882] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  114.503685][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  114.508162][ T5882] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  114.518096][ T5695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  114.520767][ T5695] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  114.553954][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'.
[  114.557775][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'.
[  114.658829][ T8437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.706193][ T8437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.767550][ T8437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.831801][ T8437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.944546][ T5695] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.964310][ T5695] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.002407][ T5695] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.012757][ T5695] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.176943][ T8445] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.732112][ T8465] validate_nla: 3 callbacks suppressed
[  115.732121][ T8465] netlink: 'syz.1.574': attribute type 3 has an invalid length.
[  115.812843][ T8470] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  115.920217][ T8482] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  116.958020][ T8507] netlink: 'syz.1.587': attribute type 5 has an invalid length.
[  117.123929][ T8522] syz.2.592: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  117.129403][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(full) 
[  117.129419][ T8522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.129425][ T8522] Call Trace:
[  117.129430][ T8522]  <TASK>
[  117.129435][ T8522]  dump_stack_lvl+0x189/0x250
[  117.129457][ T8522]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.129470][ T8522]  ? __pfx__printk+0x10/0x10
[  117.129485][ T8522]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.129498][ T8522]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.129511][ T8522]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  117.129526][ T8522]  warn_alloc+0x214/0x310
[  117.129543][ T8522]  ? stack_depot_save_flags+0x40/0x860
[  117.129587][ T8522]  ? __pfx_warn_alloc+0x10/0x10
[  117.129606][ T8522]  ? kasan_save_track+0x4f/0x80
[  117.129621][ T8522]  ? xskq_create+0x56/0x170
[  117.129634][ T8522]  ? xsk_init_queue+0xb0/0x110
[  117.129644][ T8522]  ? xsk_setsockopt+0x4dc/0x8d0
[  117.129659][ T8522]  ? do_sock_setsockopt+0x17c/0x1b0
[  117.129671][ T8522]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  117.129682][ T8522]  ? do_syscall_64+0xfa/0x3b0
[  117.129693][ T8522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.129709][ T8522]  __vmalloc_node_range_noprof+0x125/0x12f0
[  117.129745][ T8522]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  117.129765][ T8522]  ? __kasan_kmalloc+0x93/0xb0
[  117.129784][ T8522]  vmalloc_user_noprof+0xad/0xf0
[  117.129800][ T8522]  ? xskq_create+0xbf/0x170
[  117.129812][ T8522]  xskq_create+0xbf/0x170
[  117.129826][ T8522]  xsk_init_queue+0xb0/0x110
[  117.129838][ T8522]  xsk_setsockopt+0x4dc/0x8d0
[  117.129855][ T8522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.129870][ T8522]  ? __pfx_aa_sk_perm+0x10/0x10
[  117.129890][ T8522]  ? aa_sock_opt_perm+0xff/0x1b0
[  117.129903][ T8522]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  117.129915][ T8522]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.129933][ T8522]  do_sock_setsockopt+0x17c/0x1b0
[  117.129950][ T8522]  __x64_sys_setsockopt+0x13f/0x1b0
[  117.129967][ T8522]  do_syscall_64+0xfa/0x3b0
[  117.129979][ T8522]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.130010][ T8522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.130023][ T8522]  ? exc_page_fault+0x9f/0xf0
[  117.130037][ T8522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.130048][ T8522] RIP: 0033:0x7f53e198eba9
[  117.130059][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.130068][ T8522] RSP: 002b:00007f53e278e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  117.130082][ T8522] RAX: ffffffffffffffda RBX: 00007f53e1bd5fa0 RCX: 00007f53e198eba9
[  117.130090][ T8522] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  117.130097][ T8522] RBP: 00007f53e1a11e19 R08: 0000000000000004 R09: 0000000000000000
[  117.130104][ T8522] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  117.130111][ T8522] R13: 00007f53e1bd6038 R14: 00007f53e1bd5fa0 R15: 00007fffdfeb0c08
[  117.130131][ T8522]  </TASK>
[  117.130156][ T8522] Mem-Info:
[  117.181531][ T8529] netlink: 'syz.1.594': attribute type 83 has an invalid length.
[  117.183418][ T8522] active_anon:7085 inactive_anon:0 isolated_anon:0
[  117.183418][ T8522]  active_file:1578 inactive_file:38261 isolated_file:0
[  117.183418][ T8522]  unevictable:1768 dirty:121 writeback:0
[  117.183418][ T8522]  slab_reclaimable:11168 slab_unreclaimable:58834
[  117.183418][ T8522]  mapped:18498 shmem:2481 pagetables:1043
[  117.183418][ T8522]  sec_pagetables:0 bounce:0
[  117.183418][ T8522]  kernel_misc_reclaimable:0
[  117.183418][ T8522]  free:289913 free_pcp:21940 free_cma:0
[  117.190086][ T8524] netlink: 'syz.2.592': attribute type 4 has an invalid length.
[  117.218806][ T8522] Node 0 active_anon:14596kB inactive_anon:0kB active_file:2768kB inactive_file:9416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32508kB dirty:268kB writeback:0kB shmem:5236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7008kB pagetables:1776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.297234][ T8522] Node 1 active_anon:10344kB inactive_anon:0kB active_file:3544kB inactive_file:143628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41280kB dirty:216kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5268kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.316489][ T8522] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.330466][ T8522] lowmem_reserve[]: 0 811 811 811 811
[  117.332788][ T8522] Node 0 DMA32 free:363984kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14460kB inactive_anon:0kB active_file:2768kB inactive_file:9416kB unevictable:3536kB writepending:200kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:53176kB local_pcp:19552kB free_cma:0kB
[  117.348699][ T8522] lowmem_reserve[]: 0 0 0 0 0
[  117.350706][ T8522] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.370044][ T8522] lowmem_reserve[]: 0 0 854 854 854
[  117.371945][ T8522] Node 1 Normal free:321692kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10344kB inactive_anon:0kB active_file:3544kB inactive_file:143628kB unevictable:3536kB writepending:216kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38648kB local_pcp:18104kB free_cma:0kB
[  117.383278][ T8522] lowmem_reserve[]: 0 0 0 0 0
[  117.385365][ T8522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.390946][ T8522] Node 0 DMA32: 400*4kB (ME) 580*8kB (UM) 211*16kB (UME) 140*32kB (UME) 59*64kB (UM) 6*128kB (UME) 7*256kB (UM) 3*512kB (ME) 0*1024kB 1*2048kB (M) 83*4096kB (M) = 363984kB
[  117.397436][ T8522] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  117.403543][ T8522] Node 1 Normal: 907*4kB (UM) 948*8kB (UME) 623*16kB (UME) 333*32kB (UME) 128*64kB (UM) 23*128kB (UM) 11*256kB (UM) 3*512kB (UM) 12*1024kB (UM) 2*2048kB (UE) 63*4096kB (M) = 321756kB
[  117.410326][ T8522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.413409][ T8522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.416940][ T8522] 42324 total pagecache pages
[  117.418646][ T8522] 0 pages in swap cache
[  117.420591][ T8522] Free swap  = 124996kB
[  117.437883][ T8522] Total swap = 124996kB
[  117.439636][ T8522] 786301 pages RAM
[  117.441170][ T8522] 0 pages HighMem/MovableOnly
[  117.443104][ T8522] 241350 pages reserved
[  117.444828][ T8522] 0 pages cma reserved
[  117.494218][ T8535] 8021q: VLANs not supported on ip6gre0
[  117.496306][ T5909] IPVS: starting estimator thread 0...
[  117.588220][ T8543] IPVS: using max 55 ests per chain, 132000 per kthread
[  117.661857][ T8547] tipc: Cannot configure node identity twice
[  117.738487][ T8559] netlink: 'syz.0.603': attribute type 10 has an invalid length.
[  117.741590][ T8559] team0: Cannot enslave team device to itself
[  117.762900][ T8559] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  117.855269][ T8573] netlink: 'syz.0.609': attribute type 6 has an invalid length.
[  118.134656][ T8615] tipc: Started in network mode
[  118.137936][ T8615] tipc: Node identity dad9213dfe55, cluster identity 4711
[  118.141058][ T8615] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.163698][ T8624] tipc: Disabling bearer <eth:syzkaller0>
[  118.171315][ T8621] netlink: 'syz.0.622': attribute type 1 has an invalid length.
[  118.173930][ T8621] NCSI netlink: No device for ifindex 0
[  118.215576][ T8628] netlink: 'syz.0.624': attribute type 101 has an invalid length.
[  118.248082][ T8630] nftables ruleset with unbound set
[  118.367253][ T8635] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  118.409197][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.417712][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.434372][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.443799][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.585834][ T8656] bond3: entered promiscuous mode
[  118.588964][ T8656] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.594945][ T8656] batadv1: entered promiscuous mode
[  118.597413][ T8656] batadv1: entered allmulticast mode
[  118.601613][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv1
[  118.608364][ T8656] bond3: (slave batadv1): making interface the new active one
[  118.613608][ T8656] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  118.627095][ T8647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.705178][ T8666] nftables ruleset with unbound chain
[  118.901818][ T8676] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  119.071253][ T8683] __nla_validate_parse: 13 callbacks suppressed
[  119.071269][ T8683] netlink: 220 bytes leftover after parsing attributes in process `syz.1.639'.
[  119.362646][ T8686] infiniband syz0: set active
[  119.364764][ T8686] infiniband syz0: added veth1_to_hsr
[  119.397905][ T8691] sctp: [Deprecated]: syz.1.640 (pid 8691) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.397905][ T8691] Use struct sctp_sack_info instead
[  119.506839][ T8686] RDS/IB: syz0: added
[  119.509054][ T8686] smc: adding ib device syz0 with port count 1
[  119.512703][ T8686] smc:    ib device syz0 port 1 has no pnetid
[  119.678716][ T8696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.687734][ T8696] syzkaller0: entered promiscuous mode
[  119.690313][ T8696] syzkaller0: entered allmulticast mode
[  119.711339][ T8696] tipc: Resetting bearer <eth:syzkaller0>
[  119.722127][ T8696] tipc: Disabling bearer <eth:syzkaller0>
[  119.905706][ T5882] bond0: (slave bond_slave_0): interface is now down
[  119.905877][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.910702][ T5882] bond0: (slave bond_slave_1): interface is now down
[  119.921836][ T5882] bond0: now running without any active interface!
[  120.007352][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'.
[  120.066946][ T8718] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  120.294978][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'.
[  120.301025][ T8747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'.
[  120.468721][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[  120.481920][ T5882] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.481995][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[  120.485353][ T5882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.494565][ T5882] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.499800][ T5882] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.714758][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.662'.
[  120.960237][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.667'.
[  121.003156][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[  121.034395][ T8785] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  121.047653][ T8784] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  121.063184][ T8784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.066856][ T8784] syzkaller0: entered promiscuous mode
[  121.069624][ T8784] syzkaller0: entered allmulticast mode
[  121.089246][ T8787] bridge2: entered allmulticast mode
[  121.094355][ T8783] tipc: Resetting bearer <eth:syzkaller0>
[  121.110789][ T8783] tipc: Disabling bearer <eth:syzkaller0>
[  121.306891][ T8801] validate_nla: 8 callbacks suppressed
[  121.306905][ T8801] netlink: 'syz.2.674': attribute type 1 has an invalid length.
[  121.365407][ T8801] bond4: (slave bridge1): making interface the new active one
[  121.375888][ T8801] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  121.409081][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[  121.502921][ T8817] veth0_to_bridge: entered promiscuous mode
[  121.507292][ T8817] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  122.201155][ T8845] netlink: zone id is out of range
[  122.202944][ T8845] netlink: zone id is out of range
[  122.204691][ T8845] netlink: zone id is out of range
[  122.206813][ T8845] netlink: zone id is out of range
[  122.208613][ T8845] netlink: zone id is out of range
[  122.210767][ T8845] netlink: zone id is out of range
[  122.286348][ T8855] netlink: 'syz.2.687': attribute type 10 has an invalid length.
[  122.295449][ T8855] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  122.299760][ T8855] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  122.303188][ T8855] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  123.049674][ T8890] netlink: 'syz.0.697': attribute type 19 has an invalid length.
[  123.059817][ T5882] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.059856][ T8890] netlink: 'syz.0.697': attribute type 19 has an invalid length.
[  123.063528][ T5882] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.070504][ T5882] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.074020][ T5882] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.121941][ T8893] vlan0: entered promiscuous mode
[  123.124031][ T8893] macvtap0: entered promiscuous mode
[  123.343483][ T8913] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  123.595427][ T8930] delete_channel: no stack
[  123.741504][   T33] audit: type=1800 audit(1757710128.369:6): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.711" name="memory.events" dev="tmpfs" ino=1230 res=0 errno=0
[  123.758223][   T33] audit: type=1804 audit(1757710128.369:7): pid=8938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.711" name="memory.events" dev="tmpfs" ino=1230 res=1 errno=0
[  123.889599][ T8946] netlink: 'syz.0.713': attribute type 5 has an invalid length.
[  123.892732][ T8946] netlink: 'syz.0.713': attribute type 5 has an invalid length.
[  124.034801][ T8965] sctp: [Deprecated]: syz.0.719 (pid 8965) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.034801][ T8965] Use struct sctp_sack_info instead
[  124.100210][ T8972] netlink: 'syz.0.722': attribute type 2 has an invalid length.
[  124.113036][ T8972] k*]: entered promiscuous mode
[  124.133387][ T8974] net_ratelimit: 12 callbacks suppressed
[  124.133396][ T8974] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  124.161180][ T8972] 8021q: adding VLAN 0 to HW filter on device team0
[  124.170749][ T8972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.190785][ T8972] veth0_to_team: entered promiscuous mode
[  124.192682][ T8972] veth0_to_team: entered allmulticast mode
[  124.300797][ T8983] netlink: 'syz.0.725': attribute type 12 has an invalid length.
[  124.346252][ T8985] __nla_validate_parse: 19 callbacks suppressed
[  124.346264][ T8985] netlink: 44 bytes leftover after parsing attributes in process `syz.2.727'.
[  124.398925][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'.
[  124.606755][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  125.000401][ T8996] syzkaller1: entered promiscuous mode
[  125.002864][ T8996] syzkaller1: entered allmulticast mode
[  125.121655][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'.
[  125.129483][ T8998] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  125.138005][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'.
[  125.144178][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'.
[  125.148199][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'.
[  125.281130][ T9007] syzkaller1: entered promiscuous mode
[  125.283120][ T9007] syzkaller1: entered allmulticast mode
[  125.522516][ T9023] tun0: tun_chr_ioctl cmd 1074025672
[  125.524298][ T9023] tun0: ignored: set checksum disabled
[  125.526312][ T9023] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  125.530527][ T9023] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  125.535223][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  125.699398][ T9029] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  125.819875][ T9037] tap0: tun_chr_ioctl cmd 1074025678
[  125.822121][ T9037] tap0: group set to 0
[  125.829648][ T9037] vlan0: entered allmulticast mode
[  126.021264][ T9056] netlink: 128 bytes leftover after parsing attributes in process `syz.2.747'.
[  126.025240][ T9056] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.041208][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'.
[  126.047641][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.747'.
[  126.054044][ T9061] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.358902][ T9094] validate_nla: 1 callbacks suppressed
[  126.358912][ T9094] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  126.363285][ T9094] netlink: 'syz.2.760': attribute type 2 has an invalid length.
[  126.365697][ T9094] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  126.479137][ T9111] openvswitch: netlink: Message has 16 unknown bytes.
[  126.482136][ T9111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.486363][ T9112] geneve0: entered promiscuous mode
[  126.489803][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.492928][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.499017][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.502919][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.615490][ T9119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.736299][ T9131] netlink: 'syz.2.775': attribute type 1 has an invalid length.
[  126.798605][ T9136] bridge0: port 3(batadv2) entered blocking state
[  126.801248][ T9136] bridge0: port 3(batadv2) entered disabled state
[  126.803955][ T9136] batadv2: entered allmulticast mode
[  126.811364][ T9136] batadv2: entered promiscuous mode
[  126.824578][ T9136] netlink: 'syz.2.777': attribute type 1 has an invalid length.
[  127.122927][ T9171] netlink: 'syz.0.788': attribute type 1 has an invalid length.
[  127.126631][ T9171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.298290][   T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  127.302403][   T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  127.602153][ T9203] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  127.995822][ T9234] netlink: 'syz.2.807': attribute type 1 has an invalid length.
[  127.998935][ T9234] netlink: 'syz.2.807': attribute type 3 has an invalid length.
[  128.002468][ T9234] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  128.031024][ T9236] netlink: 'syz.2.808': attribute type 10 has an invalid length.
[  128.347756][ T9243] netlink: 'syz.0.811': attribute type 11 has an invalid length.
[  128.688332][   T55] Bluetooth: hci1: command tx timeout
[  128.714601][ T9277] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  129.168643][ T9305] team0: No ports can be present during mode change
[  129.176129][ T9305] vlan0: entered promiscuous mode
[  129.178896][ T9305] vlan0: left allmulticast mode
[  129.196883][ T9305] tipc: Enabled bearer <eth:team0>, priority 0
[  129.309835][ T9317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.313331][ T9317] syzkaller0: entered promiscuous mode
[  129.315656][ T9317] syzkaller0: entered allmulticast mode
[  129.324453][ T9317] tipc: Resetting bearer <eth:syzkaller0>
[  129.337496][ T9315] tipc: Resetting bearer <eth:syzkaller0>
[  129.356294][ T9315] tipc: Disabling bearer <eth:syzkaller0>
[  129.521868][ T9330] __nla_validate_parse: 36 callbacks suppressed
[  129.521878][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'.
[  129.560581][ T9336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.841'.
[  129.563797][ T9336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.841'.
[  130.317736][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'.
[  130.321174][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'.
[  130.321192][   T47] tipc: Node number set to 613163325
[  130.331290][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.333840][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.343569][ T9389] bond0: (slave bridge0): Releasing backup interface
[  130.346705][ T9389] bridge0: left promiscuous mode
[  130.348488][ T9389] bridge0: left allmulticast mode
[  130.372007][ T9389] net_ratelimit: 1 callbacks suppressed
[  130.372018][ T9389] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  130.380902][ T9394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.852'.
[  131.074975][ T9380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.212971][ T9414] macsec1: entered promiscuous mode
[  131.215822][ T9414] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  131.224578][ T9414] macsec1: entered allmulticast mode
[  131.237111][ T9418] netlink: 48 bytes leftover after parsing attributes in process `syz.1.864'.
[  131.242987][ T9418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.282704][ T9418] syzkaller0: entered promiscuous mode
[  131.285137][ T9418] syzkaller0: entered allmulticast mode
[  131.298832][ T9418] tipc: Resetting bearer <eth:syzkaller0>
[  131.305505][ T9417] tipc: Resetting bearer <eth:syzkaller0>
[  131.337212][ T9417] tipc: Disabling bearer <eth:syzkaller0>
[  131.382606][ T9430] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  131.542646][ T9443] validate_nla: 3 callbacks suppressed
[  131.542655][ T9443] netlink: 'syz.1.873': attribute type 2 has an invalid length.
[  131.630401][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'.
[  131.640753][ T9455] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  131.772245][ T9473] netlink: 164 bytes leftover after parsing attributes in process `syz.2.882'.
[  132.033718][ T9486] lo: left allmulticast mode
[  132.427318][ T9451] delete_channel: no stack
[  132.444461][ T9494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'.
[  132.582482][ T9509] netlink: 'syz.1.890': attribute type 16 has an invalid length.
[  132.585590][ T9509] netlink: 'syz.1.890': attribute type 17 has an invalid length.
[  132.692471][ T9520] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.709812][ T9509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.722857][ T9509] batman_adv: batadv0: Interface deactivated: 26
[  132.831831][  T793] syz0: Port: 1 Link DOWN
[  132.837104][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.841525][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  132.844327][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  132.849085][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.852088][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  132.854940][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  132.860062][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.863059][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  132.868192][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  132.871204][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.874127][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  132.878358][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  132.892825][ T9529] syz_tun: entered allmulticast mode
[  132.895482][ T9528] syz_tun: left allmulticast mode
[  132.995151][ T9537] bond0: (slave wlan1): Releasing backup interface
[  133.002240][ T9537] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode
[  133.384908][ T9562] netlink: 'syz.1.908': attribute type 25 has an invalid length.
[  133.393205][ T9567] veth0_to_bridge: entered promiscuous mode
[  133.395430][ T9567] veth0_to_bridge: left allmulticast mode
[  133.401626][ T9567] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  133.477172][ T9579] IPv6: Can't replace route, no match found
[  133.494318][ T9583] IPv6: Can't replace route, no match found
[  134.929138][ T9639] openvswitch: netlink: Missing key (keys=40, expected=80)
[  135.744855][ T9685] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  135.813533][ T9690] __nla_validate_parse: 6 callbacks suppressed
[  135.813546][ T9690] netlink: 76 bytes leftover after parsing attributes in process `syz.0.941'.
[  135.826601][ T9688] netlink: 76 bytes leftover after parsing attributes in process `syz.0.941'.
[  135.845014][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'.
[  135.854811][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'.
[  135.916939][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.941'.
[  136.088655][ T9692] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  136.281630][ T9712] can: request_module (can-proto-3) failed.
[  136.310196][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.947'.
[  136.314795][ T9709] netlink: 560 bytes leftover after parsing attributes in process `syz.2.947'.
[  136.658499][ T9748] xt_l2tp: unknown flags: 51
[  136.692125][ T9753] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.749940][ T9753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'.
[  137.116146][ T9783] geneve3: entered promiscuous mode
[  137.119384][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  137.124671][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  137.129603][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  137.133294][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  137.233270][ T9788] netlink: 44 bytes leftover after parsing attributes in process `syz.1.969'.
[  137.238939][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'.
[  137.307768][ T9798] netlink: 'syz.1.972': attribute type 6 has an invalid length.
[  137.451621][ T9802] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  137.711563][ T9829] bond0: option resend_igmp: invalid value (6225920)
[  137.721850][ T9829] bond0: option resend_igmp: allowed values 0 - 255
[  137.728012][ T9830] bond0: option resend_igmp: invalid value (6225920)
[  137.730972][ T9830] bond0: option resend_igmp: allowed values 0 - 255
[  137.779919][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.788740][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.141853][ T9852] netlink: 'syz.2.992': attribute type 10 has an invalid length.
[  138.339101][ T9807] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  138.413247][ T9879] netlink: 'syz.1.997': attribute type 10 has an invalid length.
[  138.416089][ T9879] veth0_vlan: left promiscuous mode
[  138.418870][ T9879] veth0_vlan: entered promiscuous mode
[  138.421787][ T9879] team0: Device veth0_vlan failed to register rx_handler
[  138.429617][ T9879] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  138.497389][ T9881] netlink: 'syz.1.998': attribute type 22 has an invalid length.
[  138.500559][ T9881] netlink: 'syz.1.998': attribute type 22 has an invalid length.
[  140.271696][ T9922] veth7: entered promiscuous mode
[  140.346811][ T9937] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  140.395706][   T47] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  140.402569][   T47] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  140.405955][   T47] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe
[  140.430713][   T47] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  140.802232][ T9974] netlink: 'syz.2.1023': attribute type 10 has an invalid length.
[  140.807598][ T9974] bond0: (slave macvlan0): Enslaving as an active interface with a down link
[  141.097078][ T9991] __nla_validate_parse: 20 callbacks suppressed
[  141.097094][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'.
[  141.190623][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'.
[  141.244343][T10004] : renamed from veth0_to_bond
[  141.821627][T10040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.824906][T10040] syzkaller0: entered promiscuous mode
[  141.827196][T10040] syzkaller0: entered allmulticast mode
[  141.835060][T10039] tipc: Resetting bearer <eth:syzkaller0>
[  141.845594][T10039] tipc: Disabling bearer <eth:syzkaller0>
[  142.108011][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'.
[  142.186081][T10060] netlink: 'syz.0.1046': attribute type 3 has an invalid length.
[  142.256029][T10063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1047'.
[  142.355313][ T5882] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.361831][ T5882] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.365272][ T5882] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.369793][ T5882] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.441201][T10078] netlink: 'syz.2.1052': attribute type 11 has an invalid length.
[  142.448580][T10078] netlink: 'syz.2.1052': attribute type 11 has an invalid length.
[  142.451566][T10078] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1052'.
[  142.593036][T10089] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1055'.
[  142.725561][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.824287][T10097] netlink: 'syz.2.1058': attribute type 21 has an invalid length.
[  142.828202][T10097] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1058'.
[  142.853800][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1058'.
[  143.015863][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1062'.
[  143.119074][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'.
[  143.154155][T10128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.160049][T10128] syzkaller0: entered promiscuous mode
[  143.162122][T10128] syzkaller0: entered allmulticast mode
[  143.169309][T10127] tipc: Resetting bearer <eth:syzkaller0>
[  143.180772][T10127] tipc: Disabling bearer <eth:syzkaller0>
[  143.309249][T10133] netlink: 'syz.2.1067': attribute type 5 has an invalid length.
[  143.624131][T10161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  143.743750][T10167] gretap2: entered promiscuous mode
[  143.790960][T10171] erspan0: entered promiscuous mode
[  143.991903][T10187] macsec1: entered allmulticast mode
[  143.996286][T10187] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  144.535167][T10191] netlink: 'syz.0.1084': attribute type 2 has an invalid length.
[  144.540312][T10191] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  144.715145][T10208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  144.728945][T10208] syzkaller0: entered promiscuous mode
[  144.730863][T10208] syzkaller0: entered allmulticast mode
[  144.845922][T10219] xt_limit: Overflow, try lower: 604147548/4200216962
[  145.160475][T10273] batadv_slave_1: entered promiscuous mode
[  145.164413][T10272] batadv_slave_1: left promiscuous mode
[  145.214653][ T5236] Bluetooth: hci2: link tx timeout
[  145.218985][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.270538][   T55] Bluetooth: hci2: link tx timeout
[  145.272608][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.288002][T10285] dvmrp1: tun_chr_ioctl cmd 1074025677
[  145.290161][T10285] dvmrp1: linktype set to 805
[  145.298758][   T55] Bluetooth: hci2: link tx timeout
[  145.300835][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.359715][T10292] batadv1: entered promiscuous mode
[  145.701352][   T55] Bluetooth: hci2: link tx timeout
[  145.704027][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.830928][   T55] Bluetooth: hci2: link tx timeout
[  145.833335][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.006195][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.050653][   T55] Bluetooth: hci2: link tx timeout
[  146.053000][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  146.798734][T10345] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  146.804119][T10345] __nla_validate_parse: 17 callbacks suppressed
[  146.804130][T10345] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1119'.
[  146.870829][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'.
[  146.874681][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'.
[  147.043708][T10393] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1133'.
[  147.048884][T10393] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  147.052766][T10393] openvswitch: netlink: Message has 1 unknown bytes.
[  147.059601][T10393] netlink: 'syz.1.1133': attribute type 1 has an invalid length.
[  147.063268][T10391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.068738][T10391] syzkaller0: entered promiscuous mode
[  147.071109][T10391] syzkaller0: entered allmulticast mode
[  147.082848][T10391] tipc: Resetting bearer <eth:syzkaller0>
[  147.086049][T10390] tipc: Resetting bearer <eth:syzkaller0>
[  147.094232][T10390] tipc: Disabling bearer <eth:syzkaller0>
[  147.101936][   T55] Bluetooth: hci2: link tx timeout
[  147.104071][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.110597][   T55] Bluetooth: hci2: link tx timeout
[  147.112793][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.247338][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  147.520406][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'.
[  147.523973][T10437] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  147.546532][T10437] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1144'.
[  147.586203][T10440] syz_tun: entered allmulticast mode
[  147.594959][T10440] dvmrp8: entered allmulticast mode
[  147.601566][T10439] syz_tun: left allmulticast mode
[  147.603961][T10439] dvmrp8: left allmulticast mode
[  148.008754][T10462] netlink: 'syz.1.1153': attribute type 1 has an invalid length.
[  148.041285][T10462] bond9: (slave gretap2): making interface the new active one
[  148.044466][T10462] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  148.057297][T10462] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  148.109027][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  148.112098][T10469] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1155'.
[  148.142027][T10471] netlink: 'syz.1.1156': attribute type 21 has an invalid length.
[  148.245278][T10478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1159'.
[  148.249478][T10478] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1159'.
[  148.391850][T10490] dvmrp8: entered allmulticast mode
[  148.591514][T10489] dvmrp8: left allmulticast mode
[  148.746258][T10514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.752946][T10514] syzkaller0: entered promiscuous mode
[  148.755394][T10514] syzkaller0: entered allmulticast mode
[  148.784147][T10513] tipc: Resetting bearer <eth:syzkaller0>
[  148.826025][T10513] tipc: Disabling bearer <eth:syzkaller0>
[  149.101969][T10548] netlink: 'syz.2.1178': attribute type 1 has an invalid length.
[  149.319340][ T7075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.322620][ T7075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.336900][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  149.961956][T10597] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  149.962089][ T5882] bond0: (slave bond_slave_0): interface is now down
[  150.010141][ T5882] bond0: (slave bond_slave_0): interface is now down
[  150.014900][ T5882] bond0: now running without any active interface!
[  150.078071][T10597] netlink: 'syz.0.1189': attribute type 3 has an invalid length.
[  150.081026][T10597] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  150.359323][T10610] bond5: entered promiscuous mode
[  150.361466][T10610] bond5: entered allmulticast mode
[  150.363815][T10610] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.653730][T10647] syzkaller1: entered promiscuous mode
[  150.656168][T10647] syzkaller1: entered allmulticast mode
[  150.855196][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  150.960488][T10662] bond6: entered promiscuous mode
[  150.964379][T10662] bond6: entered allmulticast mode
[  150.968535][T10662] 8021q: adding VLAN 0 to HW filter on device bond6
[  151.416646][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  151.740103][T10703] vlan0: entered promiscuous mode
[  151.741886][T10703] vlan0: entered allmulticast mode
[  151.743581][T10703] hsr_slave_1: entered allmulticast mode
[  151.874811][T10709] 8021q: VLANs not supported on syzkaller1
[  151.880854][T10709] raw_sendmsg: syz.0.1219 forgot to set AF_INET. Fix it!
[  152.533349][T10716] __nla_validate_parse: 15 callbacks suppressed
[  152.533358][T10716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1221'.
[  152.538970][T10716] nbd: illegal input index 65508
[  152.583804][T10718] netlink: 'syz.2.1222': attribute type 13 has an invalid length.
[  152.587118][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'.
[  152.644803][T10720] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.666346][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'.
[  152.732898][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'.
[  152.785977][T10736] netlink: 'syz.2.1228': attribute type 3 has an invalid length.
[  152.832775][T10742] netlink: 'syz.2.1230': attribute type 10 has an invalid length.
[  152.845294][T10742] bridge0: left allmulticast mode
[  152.851622][T10742] bridge0: entered allmulticast mode
[  152.853863][T10742] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  152.967544][T10759] sctp: [Deprecated]: syz.2.1236 (pid 10759) Use of int in max_burst socket option.
[  152.967544][T10759] Use struct sctp_assoc_value instead
[  153.269951][T10781] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1243'.
[  153.273308][T10781] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1243'.
[  153.755185][T10806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.759714][T10805] tipc: Resetting bearer <eth:syzkaller0>
[  154.632140][T10805] tipc: Disabling bearer <eth:syzkaller0>
[  154.897072][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  154.900705][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'.
[  154.910123][T10844] geneve3: entered promiscuous mode
[  154.911959][T10844] geneve3: entered allmulticast mode
[  154.914514][ T5695] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.919214][ T5695] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.926485][ T5695] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.929434][ T5695] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.993620][T10850] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  155.001962][T10850] batman_adv: batadv0: Adding interface: gretap4
[  155.004715][T10850] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.016058][T10850] batman_adv: batadv0: Interface activated: gretap4
[  155.183518][T10855] xt_limit: Overflow, try lower: 604147548/4200216962
[  155.741946][T10865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1265'.
[  155.742316][T10866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1265'.
[  155.823073][T10869] trusted_key: syz.1.1266 sent an empty control message without MSG_MORE.
[  156.158966][T10883] netlink: 'syz.0.1270': attribute type 4 has an invalid length.
[  156.171425][T10883] netlink: 'syz.0.1270': attribute type 4 has an invalid length.
[  156.725724][T10907] geneve2: left promiscuous mode
[  156.728504][T10907] geneve2: left allmulticast mode
[  156.732741][T10907] bond3: left promiscuous mode
[  156.736315][T10907] team1: left promiscuous mode
[  156.740755][T10907] team1: left allmulticast mode
[  156.743013][T10907] bond5: left promiscuous mode
[  156.745086][T10907] bond5: left allmulticast mode
[  156.750248][T10907] vlan4: left promiscuous mode
[  156.752489][T10907] bond0: left promiscuous mode
[  156.754669][T10907] bond_slave_0: left promiscuous mode
[  156.760553][T10907] bond_slave_1: left promiscuous mode
[  156.763127][T10907] vlan4: left allmulticast mode
[  156.765460][T10907] bond0: left allmulticast mode
[  156.770012][T10907] bond_slave_0: left allmulticast mode
[  156.772513][T10907] bond_slave_1: left allmulticast mode
[  156.775900][T10907] bridge2: left allmulticast mode
[  156.789516][T10907] batman_adv: batadv0: Interface deactivated: gretap4
[  157.154738][T10918] netlink: 'syz.2.1279': attribute type 7 has an invalid length.
[  157.164757][T10918] netlink: 'syz.2.1279': attribute type 7 has an invalid length.
[  157.655758][T10939] netlink: 'syz.1.1284': attribute type 6 has an invalid length.
[  157.699937][T10942] __nla_validate_parse: 5 callbacks suppressed
[  157.699946][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  157.705192][T10942] bridge_slave_1: left allmulticast mode
[  157.707532][T10942] bridge_slave_1: left promiscuous mode
[  157.710093][T10942] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.715200][T10942] bridge_slave_0: left allmulticast mode
[  157.719207][T10942] bridge_slave_0: left promiscuous mode
[  157.721058][T10942] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.895788][T10952] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1291'.
[  157.899258][T10948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.903035][T10949] syzkaller0: entered promiscuous mode
[  157.905520][T10949] syzkaller0: entered allmulticast mode
[  157.932638][T10950] tipc: Resetting bearer <eth:syzkaller0>
[  157.946198][T10950] tipc: Disabling bearer <eth:syzkaller0>
[  157.975654][T10956] dummy0: entered promiscuous mode
[  158.094713][T10966] pim6reg1: entered promiscuous mode
[  158.096762][T10966] pim6reg1: entered allmulticast mode
[  158.099707][T10966] netlink: 'syz.0.1294': attribute type 64 has an invalid length.
[  158.153807][T10970] syzkaller1: entered promiscuous mode
[  158.155710][T10970] syzkaller1: entered allmulticast mode
[  158.253388][T10982] netlink: 'syz.2.1299': attribute type 7 has an invalid length.
[  158.257793][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  158.269963][T10977] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.286209][T10982] 8021q: adding VLAN 0 to HW filter on device bond7
[  158.321612][T10987] netlink: 'syz.0.1302': attribute type 3 has an invalid length.
[  158.381557][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'.
[  158.808747][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'.
[  158.828074][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'.
[  158.862575][T11047] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1314'.
[  159.080674][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'.
[  159.496502][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'.
[  160.211957][T11125] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[  160.270112][T11125] bond10: entered promiscuous mode
[  160.272274][T11125] 8021q: adding VLAN 0 to HW filter on device bond10
[  160.353804][T11130] 8021q: adding VLAN 0 to HW filter on device bond11
[  160.360281][T11130] bond10: (slave bond11): making interface the new active one
[  160.362793][T11130] bond11: entered promiscuous mode
[  160.365177][T11130] bond10: (slave bond11): Enslaving as an active interface with an up link
[  160.500639][T11144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1335'.
[  160.820625][T11155] netlink: 'syz.0.1338': attribute type 6 has an invalid length.
[  161.104487][T11169] openvswitch: netlink: nsh attr 20 is out of range max 3
[  161.109180][T11169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.691041][ T5882] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.694511][ T5882] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.699934][ T5882] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.703600][ T5882] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.041661][T11247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  162.048472][T11247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.151920][T11264] validate_nla: 1 callbacks suppressed
[  162.151934][T11264] netlink: 'syz.1.1371': attribute type 4 has an invalid length.
[  162.444476][T11291] netlink: 'syz.1.1381': attribute type 25 has an invalid length.
[  162.652326][T11305] netlink: 'syz.0.1385': attribute type 11 has an invalid length.
[  162.865975][T11324] __nla_validate_parse: 17 callbacks suppressed
[  162.865984][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'.
[  162.904263][T11330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1391'.
[  162.908515][T11330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1391'.
[  162.912412][T11330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1391'.
[  162.927548][T11330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1391'.
[  162.930486][T11330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1391'.
[  162.933366][T11330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1391'.
[  163.114935][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'.
[  163.132935][T11351] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  163.463740][T11368] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1402'.
[  163.665813][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'.
[  164.058977][T11431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  164.658486][ T9942] ==================================================================
[  164.661547][ T9942] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  164.664001][ T9942] Read of size 8 at addr ffff8880241d80a0 by task khidpd_15c25505/9942
[  164.667957][ T9942] 
[  164.668955][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: khidpd_15c25505 Not tainted syzkaller #0 PREEMPT(full) 
[  164.668969][ T9942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.668976][ T9942] Call Trace:
[  164.668981][ T9942]  <TASK>
[  164.668985][ T9942]  dump_stack_lvl+0x189/0x250
[  164.669000][ T9942]  ? __kasan_check_byte+0x12/0x40
[  164.669015][ T9942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.669025][ T9942]  ? lock_release+0x4b/0x3e0
[  164.669039][ T9942]  ? __virt_addr_valid+0x4a5/0x5c0
[  164.669052][ T9942]  print_report+0xca/0x240
[  164.669061][ T9942]  ? __mutex_lock+0x801/0x1350
[  164.669071][ T9942]  kasan_report+0x118/0x150
[  164.669084][ T9942]  ? __mutex_lock+0x801/0x1350
[  164.669096][ T9942]  __mutex_lock+0x801/0x1350
[  164.669107][ T9942]  ? __mutex_lock+0x5bb/0x1350
[  164.669118][ T9942]  ? l2cap_unregister_user+0x6a/0x1b0
[  164.669133][ T9942]  ? __pfx___mutex_lock+0x10/0x10
[  164.669144][ T9942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.669157][ T9942]  l2cap_unregister_user+0x6a/0x1b0
[  164.669171][ T9942]  hidp_session_thread+0x3c9/0x410
[  164.669187][ T9942]  ? __pfx_hidp_session_thread+0x10/0x10
[  164.669199][ T9942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.669208][ T9942]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  164.669223][ T9942]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  164.669236][ T9942]  ? __kthread_parkme+0x7b/0x200
[  164.669247][ T9942]  ? __kthread_parkme+0x1a1/0x200
[  164.669258][ T9942]  kthread+0x711/0x8a0
[  164.669269][ T9942]  ? __pfx_hidp_session_thread+0x10/0x10
[  164.669282][ T9942]  ? __pfx_kthread+0x10/0x10
[  164.669294][ T9942]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.669302][ T9942]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.669312][ T9942]  ? __pfx_kthread+0x10/0x10
[  164.669324][ T9942]  ret_from_fork+0x3fc/0x770
[  164.669335][ T9942]  ? __pfx_ret_from_fork+0x10/0x10
[  164.669345][ T9942]  ? __switch_to_asm+0x39/0x70
[  164.669358][ T9942]  ? __switch_to_asm+0x33/0x70
[  164.669368][ T9942]  ? __pfx_kthread+0x10/0x10
[  164.669379][ T9942]  ret_from_fork_asm+0x1a/0x30
[  164.669395][ T9942]  </TASK>
[  164.669399][ T9942] 
[  164.742034][ T9942] Allocated by task 5855:
[  164.743461][ T9942]  kasan_save_track+0x3e/0x80
[  164.745101][ T9942]  __kasan_kmalloc+0x93/0xb0
[  164.746709][ T9942]  __kmalloc_noprof+0x27a/0x4f0
[  164.748352][ T9942]  hci_alloc_dev_priv+0x28/0x2060
[  164.750249][ T9942]  vhci_create_device+0x120/0x650
[  164.752105][ T9942]  vhci_write+0x3ce/0x4a0
[  164.753714][ T9942]  vfs_write+0x5c9/0xb30
[  164.755286][ T9942]  ksys_write+0x145/0x250
[  164.756915][ T9942]  do_syscall_64+0xfa/0x3b0
[  164.758609][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.760801][ T9942] 
[  164.761719][ T9942] Freed by task 5855:
[  164.763189][ T9942]  kasan_save_track+0x3e/0x80
[  164.764939][ T9942]  kasan_save_free_info+0x46/0x50
[  164.766792][ T9942]  __kasan_slab_free+0x5b/0x80
[  164.768546][ T9942]  kfree+0x18e/0x440
[  164.770004][ T9942]  bt_host_release+0x82/0x90
[  164.771747][ T9942]  device_release+0x9c/0x1c0
[  164.773440][ T9942]  kobject_put+0x22b/0x480
[  164.775080][ T9942]  vhci_release+0x15a/0x1a0
[  164.776770][ T9942]  __fput+0x44c/0xa70
[  164.778218][ T9942]  task_work_run+0x1d4/0x260
[  164.779936][ T9942]  do_exit+0x6b5/0x2300
[  164.781471][ T9942]  do_group_exit+0x21c/0x2d0
[  164.783165][ T9942]  __x64_sys_exit_group+0x3f/0x40
[  164.785718][ T9942]  x64_sys_call+0x21f7/0x2200
[  164.787360][ T9942]  do_syscall_64+0xfa/0x3b0
[  164.788972][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.791189][ T9942] 
[  164.792125][ T9942] Last potentially related work creation:
[  164.794416][ T9942]  kasan_save_stack+0x3e/0x60
[  164.796370][ T9942]  kasan_record_aux_stack+0xbd/0xd0
[  164.798311][ T9942]  insert_work+0x3d/0x330
[  164.799754][ T9942]  __queue_work+0xcd2/0xfb0
[  164.801254][ T9942]  queue_work_on+0x181/0x270
[  164.802947][ T9942]  hci_cmd_sync_submit+0x285/0x2b0
[  164.805033][ T9942]  process_scheduled_works+0xae1/0x17b0
[  164.807301][ T9942]  worker_thread+0x8a0/0xda0
[  164.809076][ T9942]  kthread+0x711/0x8a0
[  164.810401][ T9942]  ret_from_fork+0x3fc/0x770
[  164.811923][ T9942]  ret_from_fork_asm+0x1a/0x30
[  164.813486][ T9942] 
[  164.814292][ T9942] Second to last potentially related work creation:
[  164.816388][ T9942]  kasan_save_stack+0x3e/0x60
[  164.817932][ T9942]  kasan_record_aux_stack+0xbd/0xd0
[  164.819591][ T9942]  insert_work+0x3d/0x330
[  164.821048][ T9942]  __queue_work+0xbaf/0xfb0
[  164.822528][ T9942]  queue_work_on+0x181/0x270
[  164.824029][ T9942]  hci_cmd_sync_submit+0x285/0x2b0
[  164.825593][ T9942]  process_scheduled_works+0xae1/0x17b0
[  164.827287][ T9942]  worker_thread+0x8a0/0xda0
[  164.828767][ T9942]  kthread+0x711/0x8a0
[  164.830100][ T9942]  ret_from_fork+0x3fc/0x770
[  164.831611][ T9942]  ret_from_fork_asm+0x1a/0x30
[  164.833279][ T9942] 
[  164.834067][ T9942] The buggy address belongs to the object at ffff8880241d8000
[  164.834067][ T9942]  which belongs to the cache kmalloc-8k of size 8192
[  164.838471][ T9942] The buggy address is located 160 bytes inside of
[  164.838471][ T9942]  freed 8192-byte region [ffff8880241d8000, ffff8880241da000)
[  164.842829][ T9942] 
[  164.843610][ T9942] The buggy address belongs to the physical page:
[  164.845784][ T9942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x241d8
[  164.848503][ T9942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  164.851108][ T9942] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  164.853508][ T9942] page_type: f5(slab)
[  164.855071][ T9942] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  164.858176][ T9942] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  164.861242][ T9942] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  164.864356][ T9942] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  164.867171][ T9942] head: 00fff00000000003 ffffea0000907601 00000000ffffffff 00000000ffffffff
[  164.870019][ T9942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  164.872885][ T9942] page dumped because: kasan: bad access detected
[  164.875244][ T9942] page_owner tracks the page as allocated
[  164.877444][ T9942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5855, tgid 5855 (syz-executor), ts 55519245499, free_ts 55310858180
[  164.884399][ T9942]  post_alloc_hook+0x240/0x2a0
[  164.886097][ T9942]  get_page_from_freelist+0x21e4/0x22c0
[  164.888186][ T9942]  __alloc_frozen_pages_noprof+0x181/0x370
[  164.890249][ T9942]  alloc_pages_mpol+0x232/0x4a0
[  164.892069][ T9942]  allocate_slab+0x8a/0x370
[  164.893816][ T9942]  ___slab_alloc+0xbeb/0x1420
[  164.895377][ T9942]  __kmalloc_noprof+0x305/0x4f0
[  164.896922][ T9942]  hci_alloc_dev_priv+0x28/0x2060
[  164.898555][ T9942]  vhci_create_device+0x120/0x650
[  164.900182][ T9942]  vhci_write+0x3ce/0x4a0
[  164.901675][ T9942]  vfs_write+0x5c9/0xb30
[  164.903314][ T9942]  ksys_write+0x145/0x250
[  164.905072][ T9942]  do_syscall_64+0xfa/0x3b0
[  164.906609][ T9942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.908669][ T9942] page last free pid 5830 tgid 5830 stack trace:
[  164.910832][ T9942]  __free_frozen_pages+0xbc4/0xd30
[  164.912641][ T9942]  __folio_put+0x21b/0x2c0
[  164.914522][ T9942]  skb_release_data+0x49a/0x7c0
[  164.916409][ T9942]  napi_consume_skb+0x158/0x1e0
[  164.918068][ T9942]  net_rx_action+0x51b/0xe30
[  164.919605][ T9942]  handle_softirqs+0x286/0x870
[  164.921215][ T9942]  do_softirq+0xec/0x180
[  164.922641][ T9942]  __local_bh_enable_ip+0x17d/0x1c0
[  164.924440][ T9942]  __dev_queue_xmit+0x1d79/0x3b50
[  164.926153][ T9942]  ip_finish_output2+0xd03/0x1160
[  164.927940][ T9942]  ip_output+0x29f/0x450
[  164.929310][ T9942]  __ip_queue_xmit+0x118d/0x1c30
[  164.930853][ T9942]  __tcp_transmit_skb+0x2215/0x3680
[  164.932469][ T9942]  tcp_write_xmit+0x1862/0x67f0
[  164.934081][ T9942]  __tcp_push_pending_frames+0x97/0x360
[  164.935950][ T9942]  tcp_sendmsg_locked+0x4afd/0x5620
[  164.937714][ T9942] 
[  164.938564][ T9942] Memory state around the buggy address:
[  164.940472][ T9942]  ffff8880241d7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  164.943307][ T9942]  ffff8880241d8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.946585][ T9942] >ffff8880241d8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.949391][ T9942]                                ^
[  164.951299][ T9942]  ffff8880241d8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.954010][ T9942]  ffff8880241d8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  164.956726][ T9942] ==================================================================
[  164.959937][ T9942] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.962612][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: khidpd_15c25505 Not tainted syzkaller #0 PREEMPT(full) 
[  164.965851][ T9942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.969182][ T9942] Call Trace:
[  164.970556][ T9942]  <TASK>
[  164.971774][ T9942]  dump_stack_lvl+0x99/0x250
[  164.973382][ T9942]  ? __asan_memcpy+0x40/0x70
[  164.974985][ T9942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.976684][ T9942]  ? __pfx__printk+0x10/0x10
[  164.978462][ T9942]  vpanic+0x281/0x750
[  164.979809][ T9942]  ? __pfx_vpanic+0x10/0x10
[  164.981310][ T9942]  ? irqentry_exit+0x74/0x90
[  164.982923][ T9942]  panic+0xb9/0xc0
[  164.984428][ T9942]  ? __pfx_panic+0x10/0x10
[  164.986035][ T9942]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  164.988149][ T9942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.990270][ T9942]  ? __mutex_lock+0x801/0x1350
[  164.991926][ T9942]  check_panic_on_warn+0x89/0xb0
[  164.993552][ T9942]  ? __mutex_lock+0x801/0x1350
[  164.995077][ T9942]  end_report+0x78/0x160
[  164.996479][ T9942]  kasan_report+0x129/0x150
[  164.998231][ T9942]  ? __mutex_lock+0x801/0x1350
[  165.000219][ T9942]  __mutex_lock+0x801/0x1350
[  165.001937][ T9942]  ? __mutex_lock+0x5bb/0x1350
[  165.003758][ T9942]  ? l2cap_unregister_user+0x6a/0x1b0
[  165.005679][ T9942]  ? __pfx___mutex_lock+0x10/0x10
[  165.007370][ T9942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  165.009271][ T9942]  l2cap_unregister_user+0x6a/0x1b0
[  165.010952][ T9942]  hidp_session_thread+0x3c9/0x410
[  165.012569][ T9942]  ? __pfx_hidp_session_thread+0x10/0x10
[  165.014393][ T9942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  165.016312][ T9942]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  165.018623][ T9942]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  165.020797][ T9942]  ? __kthread_parkme+0x7b/0x200
[  165.022591][ T9942]  ? __kthread_parkme+0x1a1/0x200
[  165.024305][ T9942]  kthread+0x711/0x8a0
[  165.025632][ T9942]  ? __pfx_hidp_session_thread+0x10/0x10
[  165.027490][ T9942]  ? __pfx_kthread+0x10/0x10
[  165.029018][ T9942]  ? _raw_spin_unlock_irq+0x23/0x50
[  165.030730][ T9942]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.032365][ T9942]  ? __pfx_kthread+0x10/0x10
[  165.033929][ T9942]  ret_from_fork+0x3fc/0x770
[  165.035486][ T9942]  ? __pfx_ret_from_fork+0x10/0x10
[  165.037201][ T9942]  ? __switch_to_asm+0x39/0x70
[  165.038778][ T9942]  ? __switch_to_asm+0x33/0x70
[  165.040348][ T9942]  ? __pfx_kthread+0x10/0x10
[  165.041892][ T9942]  ret_from_fork_asm+0x1a/0x30
[  165.043466][ T9942]  </TASK>
[  165.045143][ T9942] Kernel Offset: disabled
[  165.046519][ T9942] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:49:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007237370
R8 =ffff88801fc50237 R9 =1ffff11003f8a046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018f6 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c47e30d000 CR3=0000000026f6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888107c7b980 RCX=ffffffff934fb1e0 RDX=0000000000000006
RSI=ffff888107c7c470 RDI=ffff888107c7b980 RBP=ffffc9000383fa70 RSP=ffffc9000383f930
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=fffffbfff1f47207
R12=ffff888107c7c4c0 R13=dffffc0000000000 R14=ffff888107c7c470 R15=0000000000000000
RIP=ffffffff819d8d61 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4053b64270 CR3=000000010e3a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff00000000ffff ffff00ff00000000 XMM05=0000000000000241 000000002a003000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00ff00ff XMM09=0000000000000241 0000000037003000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
