last executing test programs:

2m7.392983292s ago: executing program 2 (id=4167):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x70bd28, 0xffffffff, {0xa}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRESDEC=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m7.31368765s ago: executing program 2 (id=4169):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r1, @ANYBLOB="0a003400220202020202000010009d00141000000500040016f50500"], 0x38}}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, 0x0)

2m7.311333899s ago: executing program 2 (id=4171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000e80)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='veth0_to_hsr\x00', 0x10001, 0x5, 0x4})
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[], 0x34}}, 0x20000000)

2m7.252861816s ago: executing program 2 (id=4173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffff57c7}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x4) (async)
syz_emit_ethernet(0x99, &(0x7f0000000040)={@broadcast, @random="dee65b597ce7", @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x5, 0x87, 0x2, 0x0, 0xe, 0x21, 0x0, @loopback, @multicast2, {[@end]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x4, "531f9d", 0xcf, "f668e1"}, "8d704fc70d037fcf694271c2fd8bd681e6ca2ffcdb7e9fd5e7fbe9f2290abe3a500722aac5ec5ab8c2d947dd0701c828e08492966244414e3abb14ca5b8c870069d217ea7a238c54725123703342f07442e71680d53ed0ac0e224ad06b4007"}}}}}, 0x0)

2m7.162681709s ago: executing program 2 (id=4174):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000)
close(r0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3, &(0x7f0000000400)}, 0x20)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000401200050100000000ff00000028001a00ac1414180000000000000000000000000a0101000000000000000000000000001a0006090000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10)

2m7.083193293s ago: executing program 2 (id=4175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0xc3, 0x5]}]}}}}}}}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="000000088000000017000000000000000000000073a133e0a846926b14af090fa0931209d7d14e3dfdff7c27a4aedd5f7f39643ee8"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1c167c3adb23e8b0, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000008fc0)={0x0, 0x0, &(0x7f0000008f80)={&(0x7f0000008b80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48000)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000000))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000000000e8ff0800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xf8, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x16a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xda3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff000}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8fbd}]}]}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000008010800000000000000000300000206000240dada00000900010073797a300000000004000480050003"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r10, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24000015)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000014001680100001800c0005"], 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

2m6.948463115s ago: executing program 32 (id=4175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0xc3, 0x5]}]}}}}}}}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="000000088000000017000000000000000000000073a133e0a846926b14af090fa0931209d7d14e3dfdff7c27a4aedd5f7f39643ee8"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1c167c3adb23e8b0, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000008fc0)={0x0, 0x0, &(0x7f0000008f80)={&(0x7f0000008b80)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48000)
sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000000))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000400)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000000000e8ff0800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xf8, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x16a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xda3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff000}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8fbd}]}]}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80d0}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000008010800000000000000000300000206000240dada00000900010073797a300000000004000480050003"], 0x34}, 0x1, 0x0, 0x0, 0x24018100}, 0x4000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r10, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r11, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24000015)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000014001680100001800c0005"], 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

1.931218746s ago: executing program 3 (id=5919):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="2e000300010000", 0x7)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000001380)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @empty, 0x4}}, 0x24)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendto$inet6(r6, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000045000000700010001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002000010300100000fbdbdf2502200000000000000000000008000b000300000008000b00000000020a26e50fe7e87928ef49fc695f74d7e0262a8e46f37eec7b6a8cca866836f2683c44a8e6c21103ba3ead26ac51761984ddefd46da0655af84592"], 0x2c}}, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r9, 0x50009401, &(0x7f0000001a80)={{r9}, "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"})

1.780723148s ago: executing program 3 (id=5920):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b82623", @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x112})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x401, 0x4)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008885)
r4 = socket$inet6(0xa, 0x5, 0xc)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gre0\x00'})
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
close(0x3)

1.670870061s ago: executing program 3 (id=5921):
r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) (async)
sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000000000)="b1c3e3995dd3af7f014b1ac0cf847e", 0x21, 0x40080, 0x0, 0x0) (async)
recvfrom$inet6(r0, &(0x7f0000000600)=""/232, 0xe8, 0x0, 0x0, 0x0)

1.218361613s ago: executing program 1 (id=5932):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d7000fbdbdf2507006800", @ANYRES32=r5, @ANYBLOB="000900006522020024001a8009000100766c616e0000000014000480100003800c"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8, @private2, 0x5}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x24, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, @in6={0xa, 0x4e20, 0x1, @local, 0x8}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x40, @loopback, 0x9}], 0xb0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x14, 0xdf, 0x6, 0x0, 0x0, 0x8, 0x10009}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4050)

1.157583095s ago: executing program 1 (id=5933):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x25a5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r6)

807.737773ms ago: executing program 0 (id=5935):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014)
sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x1c, 0x2b, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x11f, 0x0, 0x0, @str='wpan1\x00'}]}, 0x1c}], 0x1}, 0x0)

805.002408ms ago: executing program 3 (id=5936):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x20, 0xfc, 0xff, 0xfffff010}, {0xb1, 0xf4, 0xee, 0x7ffff020}, {0x6, 0xfc, 0x2}]}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={<r6=>r0, 0x9, 0x8000000000000001, 0x9})
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=<r7=>0x0)
write$cgroup_pid(r6, &(0x7f00000001c0)=r7, 0x12)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100fe0f00000c000200540a00001800000008000500", @ANYRES32=r8], 0x50}, 0x1, 0xba01, 0x0, 0x24008041}, 0x0)
r9 = socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800272c2611b66606c60000f8ffffff71121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
write$tun(r3, &(0x7f0000000080)=ANY=[], 0x32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
sendmsg$unix(r13, &(0x7f0000000700)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x6, 0x2, 0x1, 0x8, 0xd, 0x5, 0x0, 0x8, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x7, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4)

731.127359ms ago: executing program 0 (id=5937):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a4000000000090002"], 0xc4}, 0x1, 0x0, 0x0, 0x41}, 0x44)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c"], 0xa0}}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

671.083411ms ago: executing program 0 (id=5938):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x51, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f00000001c0)=0x14)

560.623434ms ago: executing program 0 (id=5939):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x98, 0x2d8, 0x98, 0x98, 0x2d8, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {}, 0x90, 0x1, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'dummy0\x00', {}, {0xff}, 0x62, 0x1, 0x48}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x102, 0x8}}, @common=@set={{0x40}, {{0x0, [0x0, 0x1], 0x0, 0x6}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x0, 0x3}}}, {{@uncond, 0x40000000, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x16, 0x6, @broadcast, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'nr0\x00', {}, {}, 0x1d, 0x0, 0x29}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2}, {0x1, 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490)

560.117335ms ago: executing program 3 (id=5940):
socket(0x40000000015, 0x5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, r1, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000", @ANYRES8=r0], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
getsockopt(r0, 0xb, 0x2712, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0xfffffffffffffe82)
pipe(&(0x7f0000000140))

480.494439ms ago: executing program 0 (id=5941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x60000810)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.freeze\x00', 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000400)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f0000000000)=[{r4, 0x8503}], 0x1, 0x0, 0x0, 0x0)
close(r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x40000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
accept4(r7, 0x0, 0x0, 0x80000)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001880)=ANY=[@ANYBLOB="eb08b699a7b106fd3be04c00020000000000000000", @ANYRES16=r5, @ANYBLOB="02002bbd7000fcdbdf253b0000000c009900020000004700000004006c000400870004008e0004006c000400870008002700030000000800a1000100000008009f0003000000080026008509000008002600251700000800270003000000080026006c09000008009f000600000005001801030000000800a10008000000080027000200000008002700000000000500190108000000080022016800000008002201e702000008002700030000000500190105000000"], 0xbc}, 0x1, 0x0, 0x0, 0x200080c0}, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0)
sendmmsg$sock(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)}, {&(0x7f00000002c0)="a2ba9b2c8596aff5e690b7175495826772bf1f7735f4b4da808f1cc9def38f3fd343ee1eba5ebd4bc4c65e3ed627decaeaf11ed25d5194f3eaaf", 0x3a}, {&(0x7f0000000440)}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000480)="52bf849992217c2c629d0662f0cbe5f944436488672b0563a5462849be4bbad15d832f9969d7b4e2c6ba108ac7125cd745317821bc429cec7a3536a5d9eae3", 0x3f}], 0x5}}], 0x1, 0x94)

479.302313ms ago: executing program 3 (id=5942):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x201, @empty, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4, 0x4}, 0x4}], 0x1, 0x40000002, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="7014d5ed9378448d1ae7eb0162e12513259e8b89eee961e1cacffdbaf42d9f8dbe6682c725e99c03893a7e07e97bb7295e77c4d385ad93304b24bd1bd5ab0e0e9c1f4787c55ad5d91a498b47667bdc0e7ca3942719464256c7ac7cdcc4f4e1520364320c3d25b858a24b612406699e9b0aa3562417bcc278981f9add02fda28070f69938fe4b5de0380ef7280ade816b95775454a018fb2e7a5093bc34ef1ace5c00f0e8f9b9bb0331876e3c5744f1da5c", 0xb1, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0xfffff001, @private0, 0x9}, 0x1c)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

301.043572ms ago: executing program 0 (id=5943):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="30474b949e000000", @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000080001001200000008000300", @ANYRES32=0x0, @ANYBLOB="20e89dea8d5a750bac5a17cb06fd66904b497077ef7c4cc31e1a694bf11fa0e5552751146de0913c2784a62d1d046fd936d6bee2e47bb4fabf70021ae4e37a630a9728a0b3d14688ff269b7553d906d1618b70c27398027308d9a3c6c22149d09985eae3e8f054e07a4b3c420f9d683974b26938f4752d13326cea70b16f8bf672"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000bdd000"/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffffff, 0x10}, {r3, 0x80}, {r6, 0x101}, {r3, 0x8004}, {0xffffffffffffffff, 0x18}], 0x6, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x800)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
connect$bt_l2cap(r4, 0x0, 0x0)
socket(0x10, 0x6, 0x7ffc)
unshare(0x3d048200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x7fe, 0x0, 0xceda, 0x3]}, &(0x7f0000000080)=0x54)

300.523085ms ago: executing program 1 (id=5944):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)

201.240339ms ago: executing program 1 (id=5945):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'veth0_to_batadv\x00', @random="e29234b4b08e"})

109.873771ms ago: executing program 1 (id=5946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x300000000000000}, 0x0)

0s ago: executing program 1 (id=5947):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x1c, 0x105, 0x0, 0x0, {0xfe, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@nested={0x18, 0x5e, 0x0, 0x1, [@typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3a}}]}]}]}, 0x30}}, 0x4040040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x80, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x848)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'bridge0\x00', {0x3}, 0x8})
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001f0001000000000000000000050100800c000100"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'})
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x13127d558e66aac7}, 0x808)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.3416'.
[  269.101660][ T5222] Bluetooth: hci1: command 0x0c20 tx timeout
[  269.200879][T16341] netlink: 'syz.2.3418': attribute type 1 has an invalid length.
[  269.230437][T16341] bond10: (slave bridge7): making interface the new active one
[  269.236411][T16341] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  269.344796][T16349] pim6reg1: entered promiscuous mode
[  269.346944][T16349] pim6reg1: entered allmulticast mode
[  269.456867][T16360] tipc: New replicast peer: 255.255.255.255
[  269.460300][T16360] tipc: Enabled bearer <udp:syz2>, priority 10
[  269.464483][T16360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3423'.
[  269.468490][T16360] tipc: Disabling bearer <udp:syz2>
[  269.484667][T16360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  269.489980][T16360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  269.827868][T16375] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  270.221830][   T47] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 120 sec
[  270.281052][T16396] IPVS: Unknown mcast interface: veth0_virt_wifi
[  270.336107][T16398] ipt_ECN: cannot use operation on non-tcp rule
[  270.375338][T16402] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  270.385722][T16400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.476321][T16412] netlink: 'syz.0.3437': attribute type 10 has an invalid length.
[  270.569328][T16418] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  270.572641][T16418] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  270.575783][T16418] tipc: Resetting bearer <eth:syzkaller0>
[  270.710777][T16434] bond0: entered promiscuous mode
[  270.714975][T16434] bond0: left promiscuous mode
[  270.831739][T16443] ipt_ECN: cannot use operation on non-tcp rule
[  270.894624][T16447] 8021q: adding VLAN 0 to HW filter on device bond17
[  270.915569][T16447] macvlan0: entered promiscuous mode
[  270.917412][T16447] macvlan0: entered allmulticast mode
[  270.919974][T16447] bond17: (slave macvlan0): Opening slave failed
[  270.944626][T16452] netlink: 'syz.1.3453': attribute type 15 has an invalid length.
[  270.956920][T16454] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  271.063237][T16465] netlink: 'syz.0.3456': attribute type 1 has an invalid length.
[  271.092993][T16465] 8021q: adding VLAN 0 to HW filter on device bond18
[  271.234964][T16489] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  271.374778][T16497] bond10: (slave bridge7): Releasing active interface
[  271.434415][T16502] ip6gre2: entered promiscuous mode
[  271.474098][T16497] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  271.714336][T16519] __nla_validate_parse: 17 callbacks suppressed
[  271.714347][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3473'.
[  271.916688][T16531] ipt_ECN: cannot use operation on non-tcp rule
[  271.956749][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'.
[  271.979437][T16538] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3477'.
[  272.000545][T16538] vlan4: entered allmulticast mode
[  272.002903][T16538] gretap0: entered allmulticast mode
[  272.069721][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'.
[  272.084233][T16545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  272.368899][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3489'.
[  272.372637][T16568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'.
[  272.389345][T16568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.444007][T16570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3490'.
[  272.478104][T16572] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3491'.
[  272.569731][T16579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3494'.
[  272.613553][T16579] sctp: [Deprecated]: syz.2.3494 (pid 16579) Use of int in maxseg socket option.
[  272.613553][T16579] Use struct sctp_assoc_value instead
[  272.705412][T16587] netlink: 'syz.2.3497': attribute type 2 has an invalid length.
[  272.739479][T16578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3493'.
[  272.839335][T16598] netlink: 'syz.2.3500': attribute type 11 has an invalid length.
[  273.159596][T16637] IPv6: sit1: Disabled Multicast RS
[  273.689969][T16661] lo speed is unknown, defaulting to 1000
[  274.144609][T16680] netlink: 'syz.1.3528': attribute type 2 has an invalid length.
[  274.276704][T16689] netlink: 'syz.2.3531': attribute type 3 has an invalid length.
[  274.279706][T16689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  274.849813][T16711] netlink: 'syz.2.3539': attribute type 10 has an invalid length.
[  274.858217][T16710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  274.862387][T16711] netlink: 'syz.2.3539': attribute type 5 has an invalid length.
[  274.866024][T16710] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  274.869742][T16711] netlink: 'syz.2.3539': attribute type 2 has an invalid length.
[  274.873643][T16711] netlink: 'syz.2.3539': attribute type 7 has an invalid length.
[  275.003985][T16715] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  275.818018][T16749] netlink: 'syz.0.3551': attribute type 9 has an invalid length.
[  275.830876][T16749] netlink: 'syz.0.3551': attribute type 6 has an invalid length.
[  275.943102][T16756] tipc: Resetting bearer <eth:syzkaller0>
[  276.016931][T16758] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  276.185111][T16766] netlink: 'syz.2.3556': attribute type 1 has an invalid length.
[  276.188342][T16766] netlink: 'syz.2.3556': attribute type 1 has an invalid length.
[  276.196023][T16766] block nbd1: shutting down sockets
[  276.256861][T16779] gretap0: refused to change device tx_queue_len
[  276.259572][T16779] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  276.505748][T16795] ipt_ECN: cannot use operation on non-tcp rule
[  276.558866][T16798] syzkaller0: entered promiscuous mode
[  276.561052][T16798] syzkaller0: entered allmulticast mode
[  276.592992][ T5222] Bluetooth: hci2: link tx timeout
[  276.595178][ T5222] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  276.630941][T16802] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.747671][T16808] __nla_validate_parse: 17 callbacks suppressed
[  276.747689][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'.
[  276.756782][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'.
[  277.271225][T16813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3574'.
[  277.335482][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'.
[  277.351482][T16817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3576'.
[  277.357258][T16819] syzkaller1: entered promiscuous mode
[  277.359513][T16819] syzkaller1: entered allmulticast mode
[  277.620438][T16837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3580'.
[  277.780389][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3584'.
[  277.840781][T16848] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3586'.
[  277.908356][T16851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3587'.
[  278.176891][T16866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3592'.
[  278.631541][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  279.433942][T16953] macvlan0: entered promiscuous mode
[  279.436050][T16953] bond0: entered promiscuous mode
[  279.445369][T16953] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  279.468788][T16955] veth1_to_team: entered allmulticast mode
[  279.471942][T16955] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  279.579361][T16961] ipt_ECN: cannot use operation on non-tcp rule
[  279.627624][T16963] bridge11: entered promiscuous mode
[  279.629736][T16963] bridge11: entered allmulticast mode
[  279.638813][T16963] team0: Port device bridge11 added
[  279.735862][T16972] validate_nla: 6 callbacks suppressed
[  279.735878][T16972] netlink: 'syz.1.3626': attribute type 30 has an invalid length.
[  279.875855][T16988] netlink: 'syz.1.3630': attribute type 2 has an invalid length.
[  281.120305][T17094] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  281.406147][T17121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.427777][T17124] netlink: 'syz.2.3678': attribute type 10 has an invalid length.
[  281.748373][T17144] netlink: 'syz.2.3686': attribute type 142 has an invalid length.
[  281.799017][T17153] __nla_validate_parse: 26 callbacks suppressed
[  281.799028][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3689'.
[  281.804959][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3689'.
[  281.875895][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'.
[  281.883417][T17160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3691'.
[  281.886242][T17161] ipt_ECN: cannot use operation on non-tcp rule
[  281.946326][T17166] tap0: tun_chr_ioctl cmd 1074025677
[  281.948299][T17166] tap0: linktype set to 810
[  282.215410][T17185] netlink: 'syz.0.3701': attribute type 1 has an invalid length.
[  282.220085][T17185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3701'.
[  282.537223][ T5281] udevd[5281]: worker [5831] /devices/virtual/block/nbd2 timeout; kill it
[  282.552540][ T5281] udevd[5281]: seq 10792 '/devices/virtual/block/nbd2' killed
[  282.563968][T17220] netlink: 'syz.1.3711': attribute type 2 has an invalid length.
[  282.623931][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3709'.
[  282.711676][T17222] syzkaller0: entered promiscuous mode
[  282.716856][T17222] syzkaller0: entered allmulticast mode
[  282.719724][T17228] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3713'.
[  282.729140][T17228] nbd: illegal input index 65508
[  282.732546][T17229] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3713'.
[  282.736627][T17229] nbd: illegal input index 65508
[  282.895708][T17231] lo speed is unknown, defaulting to 1000
[  283.493139][T17247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3718'.
[  283.855684][T17251] lo speed is unknown, defaulting to 1000
[  284.113024][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  284.505866][T17260] lo speed is unknown, defaulting to 1000
[  284.676103][T17308] 8021q: adding VLAN 0 to HW filter on device bond19
[  284.734948][T17308] macvlan1: entered promiscuous mode
[  284.737067][T17308] macvlan1: entered allmulticast mode
[  286.049649][T17363] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  286.071328][T17363] netlink: 'syz.1.3751': attribute type 4 has an invalid length.
[  286.074802][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 210 seconds
[  286.078889][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 210 seconds
[  286.083771][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 210 seconds
[  286.088162][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 210 seconds
[  286.167954][T17358] lo speed is unknown, defaulting to 1000
[  286.186762][T17368] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  286.816291][T17391] __nla_validate_parse: 8 callbacks suppressed
[  286.816302][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3760'.
[  286.823437][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3760'.
[  287.243693][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'.
[  287.249713][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3768'.
[  287.448353][T17432] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3774'.
[  287.466713][T17428] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3774'.
[  287.475101][T17432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3774'.
[  287.478867][T17432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3774'.
[  287.484267][T17428] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  287.485350][T17434] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3776'.
[  287.619970][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'.
[  287.816793][T17458] sctp: [Deprecated]: syz.1.3784 (pid 17458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  287.816793][T17458] Use struct sctp_sack_info instead
[  288.004290][T17465] ipt_ECN: cannot use operation on non-tcp rule
[  288.674381][T17491] netlink: 'syz.0.3795': attribute type 1 has an invalid length.
[  288.683118][T17491] netlink: 'syz.0.3795': attribute type 1 has an invalid length.
[  288.740221][T17497] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  288.766050][T17497] 8021q: adding VLAN 0 to HW filter on device bond20
[  288.785555][T17497] 8021q: adding VLAN 0 to HW filter on device bond20
[  288.788120][T17497] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  288.792736][T17497] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  288.835205][T17504] 8021q: adding VLAN 0 to HW filter on device bond20
[  288.977787][T17514] veth0_vlan: entered allmulticast mode
[  288.997552][T17514] : renamed from vlan0
[  289.027348][T17516] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  289.124131][T17522] netlink: 'syz.1.3808': attribute type 4 has an invalid length.
[  289.324983][T17540] ipt_ECN: cannot use operation on non-tcp rule
[  289.365061][T17542] netlink: 'syz.0.3815': attribute type 3 has an invalid length.
[  289.367489][T17542] netlink: 'syz.0.3815': attribute type 3 has an invalid length.
[  289.370084][T17542] netlink: 'syz.0.3815': attribute type 3 has an invalid length.
[  289.556499][T17554] tap0: tun_chr_ioctl cmd 1074025680
[  289.599552][T17560] x_tables: duplicate underflow at hook 1
[  290.854973][T17636] netlink: 'syz.2.3845': attribute type 5 has an invalid length.
[  291.139998][T17659] SET target dimension over the limit!
[  291.240446][T17668] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  291.411081][T17683] macvlan2: entered promiscuous mode
[  291.441778][T17683] macvlan5: entered promiscuous mode
[  291.618363][T17691] bond21: (slave bridge13): Enslaving as an active interface with an up link
[  291.879869][T17702] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.885725][T17702] tipc: Resetting bearer <eth:syzkaller0>
[  291.890153][T17702] __nla_validate_parse: 36 callbacks suppressed
[  291.890168][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'.
[  292.258290][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3868'.
[  292.396669][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'.
[  292.399764][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3872'.
[  292.471739][T17717] netlink: 'syz.2.3872': attribute type 10 has an invalid length.
[  292.474922][T17717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3872'.
[  292.638505][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3875'.
[  292.667903][T17684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.869641][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'.
[  292.885813][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'.
[  292.911438][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'.
[  292.914427][T17733] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'.
[  293.045971][T17750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  293.049814][T17750] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  293.821703][    T9] page_pool_release_retry() stalled pool shutdown: id 69, 3329 inflight 120 sec
[  293.851440][T17781] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.863637][T17783] ipt_ECN: cannot use operation on non-tcp rule
[  294.929295][T17847] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  295.546976][T17909] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  295.827809][T17932] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  295.834957][T17932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.882072][T17936] xt_l2tp: v2 tid > 0xffff: 4294967295
[  296.943431][ T8643] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  296.948449][T17962] ipt_ECN: cannot use operation on non-tcp rule
[  297.002880][T17966] __nla_validate_parse: 35 callbacks suppressed
[  297.002892][T17966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3935'.
[  297.200083][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'.
[  297.362073][T17989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3944'.
[  297.862015][T18029] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3959'.
[  297.866444][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3959'.
[  297.870009][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3959'.
[  297.995972][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'.
[  297.999585][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'.
[  298.056963][T18042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3964'.
[  298.242688][T18053] syz.0.3967: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  298.252128][T18053] CPU: 1 UID: 0 PID: 18053 Comm: syz.0.3967 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  298.252154][T18053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.252163][T18053] Call Trace:
[  298.252169][T18053]  <TASK>
[  298.252212][T18053]  dump_stack_lvl+0x189/0x250
[  298.252237][T18053]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.252255][T18053]  ? __pfx__printk+0x10/0x10
[  298.252274][T18053]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.252291][T18053]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  298.252310][T18053]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  298.252328][T18053]  warn_alloc+0x214/0x310
[  298.252346][T18053]  ? __pfx_warn_alloc+0x10/0x10
[  298.252364][T18053]  ? __get_vm_area_node+0x28f/0x300
[  298.252381][T18053]  ? xskq_create+0xbf/0x170
[  298.252398][T18053]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  298.252441][T18053]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  298.252468][T18053]  ? __kasan_kmalloc+0x93/0xb0
[  298.252490][T18053]  vmalloc_user_noprof+0xad/0xf0
[  298.252543][T18053]  ? xskq_create+0xbf/0x170
[  298.252558][T18053]  xskq_create+0xbf/0x170
[  298.252575][T18053]  xsk_init_queue+0xb0/0x110
[  298.252591][T18053]  xsk_setsockopt+0x4de/0x710
[  298.252614][T18053]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.252638][T18053]  ? __fget_files+0x2a/0x420
[  298.252650][T18053]  ? aa_sock_opt_perm+0x74/0x110
[  298.252667][T18053]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  298.252681][T18053]  ? __pfx_xsk_setsockopt+0x10/0x10
[  298.252702][T18053]  do_sock_setsockopt+0x17c/0x1b0
[  298.252727][T18053]  __x64_sys_setsockopt+0x13f/0x1b0
[  298.252752][T18053]  do_syscall_64+0xfa/0x3b0
[  298.252767][T18053]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.252781][T18053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.252795][T18053]  ? exc_page_fault+0x9f/0xf0
[  298.252811][T18053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.252825][T18053] RIP: 0033:0x7f072ff8e9a9
[  298.252839][T18053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.252866][T18053] RSP: 002b:00007f0730e18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  298.252881][T18053] RAX: ffffffffffffffda RBX: 00007f07301b5fa0 RCX: 00007f072ff8e9a9
[  298.252892][T18053] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b
[  298.252900][T18053] RBP: 00007f0730010d69 R08: 0000000000000004 R09: 0000000000000000
[  298.252909][T18053] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  298.252923][T18053] R13: 0000000000000000 R14: 00007f07301b5fa0 R15: 00007ffe9228e6e8
[  298.252947][T18053]  </TASK>
[  298.252953][T18053] Mem-Info:
[  298.364857][T18053] active_anon:5841 inactive_anon:0 isolated_anon:0
[  298.364857][T18053]  active_file:11029 inactive_file:38303 isolated_file:0
[  298.364857][T18053]  unevictable:1768 dirty:155 writeback:0
[  298.364857][T18053]  slab_reclaimable:10303 slab_unreclaimable:134867
[  298.364857][T18053]  mapped:18622 shmem:2483 pagetables:1032
[  298.364857][T18053]  sec_pagetables:0 bounce:0
[  298.364857][T18053]  kernel_misc_reclaimable:0
[  298.364857][T18053]  free:183872 free_pcp:23146 free_cma:0
[  298.383408][T18053] Node 0 active_anon:13996kB inactive_anon:0kB active_file:22984kB inactive_file:9212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44492kB dirty:412kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5216kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.396357][T18053] Node 1 active_anon:9368kB inactive_anon:0kB active_file:21132kB inactive_file:144000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29996kB dirty:208kB writeback:0kB shmem:4748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7992kB pagetables:1844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  298.409008][T18053] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  298.420102][T18053] lowmem_reserve[]: 0 812 812 812 812
[  298.422887][T18053] Node 0 DMA32 free:263664kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13996kB inactive_anon:0kB active_file:22984kB inactive_file:9212kB unevictable:3536kB writepending:412kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:40004kB local_pcp:16144kB free_cma:0kB
[  298.435523][T18053] lowmem_reserve[]: 0 0 0 0 0
[  298.437705][T18053] Node 1 DMA32 free:397720kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17760kB local_pcp:10924kB free_cma:0kB
[  298.449829][T18053] lowmem_reserve[]: 0 0 854 854 854
[  298.452382][T18053] Node 1 Normal free:58744kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9368kB inactive_anon:0kB active_file:21132kB inactive_file:144000kB unevictable:3536kB writepending:208kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:34744kB local_pcp:16808kB free_cma:0kB
[  298.465271][T18053] lowmem_reserve[]: 0 0 0 0 0
[  298.467224][T18053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  298.473545][T18053] Node 0 DMA32: 570*4kB (UE) 341*8kB (UE) 166*16kB (UE) 142*32kB (UE) 408*64kB (UME) 123*128kB (UM) 41*256kB (UM) 19*512kB (UME) 13*1024kB (UM) 10*2048kB (UME) 38*4096kB (UM) = 263728kB
[  298.480752][T18053] Node 1 DMA32: 8*4kB (UM) 5*8kB (U) 5*16kB (UM) 4*32kB (UM) 2*64kB (U) 2*128kB (U) 3*256kB (U) 0*512kB 3*1024kB (UM) 4*2048kB (UM) 94*4096kB (UM) = 397720kB
[  298.490767][T18053] Node 1 Normal: 3*4kB (UM) 360*8kB (UME) 197*16kB (UME) 269*32kB (UM) 147*64kB (UME) 43*128kB (UME) 34*256kB (UM) 22*512kB (UME) 9*1024kB (UM) 0*2048kB 0*4096kB = 58748kB
[  298.499734][T18053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.506929][T18053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.510603][T18053] 51808 total pagecache pages
[  298.513445][T18053] 0 pages in swap cache
[  298.515200][T18053] Free swap  = 124996kB
[  298.516806][T18053] Total swap = 124996kB
[  298.518456][T18053] 786301 pages RAM
[  298.519961][T18053] 0 pages HighMem/MovableOnly
[  298.525204][T18053] 241056 pages reserved
[  298.526867][T18053] 0 pages cma reserved
[  298.589188][T18064] sctp: [Deprecated]: syz.2.3969 (pid 18064) Use of int in max_burst socket option.
[  298.589188][T18064] Use struct sctp_assoc_value instead
[  298.590574][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'.
[  299.006952][T18089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.072104][T18094] ipt_ECN: cannot use operation on non-tcp rule
[  299.722240][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.907026][T18147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.910046][T18147] syzkaller0: entered promiscuous mode
[  299.912146][T18147] syzkaller0: entered allmulticast mode
[  299.926008][T18147] sch_fq: defrate 257 ignored.
[  299.929647][T18146] tipc: Resetting bearer <eth:syzkaller0>
[  299.941517][T18146] tipc: Disabling bearer <eth:syzkaller0>
[  300.018099][T18152] netlink: 'syz.1.4001': attribute type 1 has an invalid length.
[  300.023963][T18152] netlink: 'syz.1.4001': attribute type 3 has an invalid length.
[  300.175084][T18163] netlink: 'syz.1.4004': attribute type 21 has an invalid length.
[  300.275058][T18169] ipt_ECN: cannot use operation on non-tcp rule
[  300.561984][T18189] bridge14: entered allmulticast mode
[  300.607810][T18179] lo speed is unknown, defaulting to 1000
[  300.614316][T18191] netdevsim netdevsim1 netdevsim0: Caught tx_queue_len zero misconfig
[  300.667823][T18193] netlink: 'syz.1.4015': attribute type 1 has an invalid length.
[  300.718636][T18196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.052167][T18214] ipt_ECN: cannot use operation on non-tcp rule
[  301.104974][T18221] macvlan0: entered promiscuous mode
[  301.108629][T18221] macvlan0: entered allmulticast mode
[  301.110431][T18221] netlink: 'syz.1.4026': attribute type 2 has an invalid length.
[  301.249025][T18229] netlink: 'syz.0.4028': attribute type 8 has an invalid length.
[  301.356102][T18233] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20004
[  301.425567][T18242] xt_nat: multiple ranges no longer supported
[  301.469378][T18245] macvlan0: left promiscuous mode
[  301.472365][T18245] macvlan0: left allmulticast mode
[  301.474149][T18245] netlink: 'syz.1.4033': attribute type 2 has an invalid length.
[  301.689376][T18268] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  301.695936][T18268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.820943][T18276] openvswitch: netlink: Flow key attr not present in new flow.
[  301.955147][T18274] lo speed is unknown, defaulting to 1000
[  302.179256][T18285] netlink: 'syz.0.4049': attribute type 1 has an invalid length.
[  302.188712][T18285] netlink: 'syz.0.4049': attribute type 11 has an invalid length.
[  302.191795][T18285] __nla_validate_parse: 29 callbacks suppressed
[  302.191803][T18285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4049'.
[  302.314956][T18289] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.461804][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'.
[  302.467323][T18296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4053'.
[  302.662828][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4055'.
[  302.667130][T18304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4055'.
[  302.809568][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'.
[  302.856041][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'.
[  302.859023][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'.
[  302.903367][T18321] macvlan0: entered promiscuous mode
[  302.906953][T18321] netlink: 'syz.1.4062': attribute type 2 has an invalid length.
[  302.988764][T18328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4064'.
[  302.994992][T18328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4064'.
[  303.107551][T18340] sctp: [Deprecated]: syz.1.4069 (pid 18340) Use of int in max_burst socket option.
[  303.107551][T18340] Use struct sctp_assoc_value instead
[  303.140340][T18340] tipc: Disabling bearer <eth:macvtap0>
[  303.270636][T18353] netlink: 'syz.2.4074': attribute type 11 has an invalid length.
[  303.473843][T18366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  303.602753][T18382] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  303.615622][T18381] veth0_to_team: entered allmulticast mode
[  304.695052][T18426] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  304.779412][T18417] SET target dimension over the limit!
[  304.783156][T18416] delete_channel: no stack
[  305.776685][T18448] netlink: 'syz.0.4105': attribute type 11 has an invalid length.
[  305.779475][T18448] validate_nla: 4 callbacks suppressed
[  305.779487][T18448] netlink: 'syz.0.4105': attribute type 4 has an invalid length.
[  305.785495][T18448] netlink: 'syz.0.4105': attribute type 3 has an invalid length.
[  307.234406][T18487] __nla_validate_parse: 54 callbacks suppressed
[  307.234425][T18487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4117'.
[  307.374514][T18495] netlink: 'syz.2.4118': attribute type 2 has an invalid length.
[  307.376876][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4118'.
[  307.419321][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'.
[  307.426161][T18497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4119'.
[  307.565174][T18503] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4122'.
[  307.571246][T18503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4122'.
[  308.274506][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4134'.
[  308.278046][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4134'.
[  308.631047][T18562] ipt_ECN: cannot use operation on non-tcp rule
[  309.028807][T18576] netlink: 'syz.0.4145': attribute type 1 has an invalid length.
[  309.074690][T18576] veth33: entered promiscuous mode
[  309.078361][T18576] tipc: Resetting bearer <eth:syzkaller0>
[  309.087961][T18576] team0: Port device ip6gretap3 removed
[  309.093762][T18576] team0: Port device bond15 removed
[  309.109454][T18576] team0: Port device bridge11 removed
[  309.116111][T18576] bond21: (slave bridge13): Releasing backup interface
[  309.183925][T18582] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4146'.
[  309.186739][T18581] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4146'.
[  309.216763][T18584] netlink: 'syz.1.4147': attribute type 3 has an invalid length.
[  309.296151][T18593] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  309.484279][T18609] siw: device registration error -23
[  309.495588][T18609] netlink: 'syz.0.4154': attribute type 1 has an invalid length.
[  309.886597][T18614] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  309.924887][T18616] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  309.964721][T18618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.023550][T18619] netlink: 'syz.2.4157': attribute type 39 has an invalid length.
[  310.367282][T18630] netlink: 'syz.1.4160': attribute type 4 has an invalid length.
[  310.370006][T18631] netlink: 'syz.1.4160': attribute type 4 has an invalid length.
[  310.377349][T18631] netlink: 'syz.1.4160': attribute type 4 has an invalid length.
[  310.536112][T18641] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  310.907806][T18655] validate_nla: 63 callbacks suppressed
[  310.907829][T18655] netlink: 'syz.0.4168': attribute type 2 has an invalid length.
[  310.944297][T18657] syz.2.4169 uses old SIOCAX25GETINFO
[  311.045136][T18665] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709508551)
[  311.049576][T18665] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  311.055364][T18663] netlink: 'syz.0.4172': attribute type 1 has an invalid length.
[  311.402141][T18672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.552581][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.556759][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.560680][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.568486][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.573360][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.806902][T18683] lo speed is unknown, defaulting to 1000
[  312.144234][T18719] netlink: 'syz.0.4189': attribute type 2 has an invalid length.
[  312.229406][T18683] chnl_net:caif_netlink_parms(): no params data found
[  312.342598][T18731] __nla_validate_parse: 8 callbacks suppressed
[  312.342610][T18731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4193'.
[  312.367085][T18683] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.369556][T18683] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.383477][T18683] bridge_slave_0: entered allmulticast mode
[  312.386379][T18683] bridge_slave_0: entered promiscuous mode
[  312.390914][T18683] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.394455][T18683] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.396668][T18683] bridge_slave_1: entered allmulticast mode
[  312.399642][T18683] bridge_slave_1: entered promiscuous mode
[  312.499998][T18736] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.4195'.
[  312.510265][T18683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.522790][T18683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.590857][T18683] team0: Port device team_slave_0 added
[  312.597233][T18683] team0: Port device team_slave_1 added
[  312.608353][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'.
[  312.645609][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'.
[  312.659074][T18683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.662557][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.670934][T18683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.676302][T18683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.678439][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.686955][T18683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.764825][T18683] hsr_slave_0: entered promiscuous mode
[  312.773604][T18683] hsr_slave_1: entered promiscuous mode
[  313.258048][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'.
[  313.280032][T18683] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  313.295058][T18683] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  313.307772][T18754] netlink: 'syz.0.4202': attribute type 4 has an invalid length.
[  313.307967][T18683] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  313.324624][T18683] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  313.386707][T18764] netlink: 'syz.0.4204': attribute type 2 has an invalid length.
[  313.475145][T18683] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.497168][T18683] 8021q: adding VLAN 0 to HW filter on device team0
[  313.515565][T18766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4205'.
[  313.519225][T18766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4205'.
[  313.526280][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.528873][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.544773][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.547778][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.553599][T18766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4205'.
[  313.676766][ T5222] Bluetooth: hci1: command tx timeout
[  313.695656][T18778] No such timeout policy "syz1"
[  313.787630][T18783] bond9: entered promiscuous mode
[  313.789375][T18783] bond9: entered allmulticast mode
[  313.793855][T18783] 8021q: adding VLAN 0 to HW filter on device bond9
[  313.856777][T18683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.865309][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4212'.
[  313.873611][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4212'.
[  313.900108][T18683] veth0_vlan: entered promiscuous mode
[  313.919621][T18683] veth1_vlan: entered promiscuous mode
[  313.947670][T18683] veth0_macvtap: entered promiscuous mode
[  313.954559][T18683] veth1_macvtap: entered promiscuous mode
[  313.983291][T18683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.999921][T18683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.008100][T18683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.011589][T18683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.014399][T18683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.017755][T18683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.159573][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.164535][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.217527][ T8643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.220808][ T8643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.389029][T18815] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  314.658747][T18824] !: renamed from dummy0 (while UP)
[  314.797041][T18835] delete_channel: no stack
[  314.924144][T18846] syzkaller1: entered promiscuous mode
[  314.925907][T18846] syzkaller1: entered allmulticast mode
[  315.230494][T18863] pim6reg1: entered promiscuous mode
[  315.237010][T18863] pim6reg1: entered allmulticast mode
[  315.449911][T18851] lo speed is unknown, defaulting to 1000
[  315.741442][ T5222] Bluetooth: hci1: command tx timeout
[  316.088124][T18906] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  316.153483][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 240 seconds
[  316.158008][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 240 seconds
[  316.163332][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 240 seconds
[  316.168239][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 240 seconds
[  317.821689][ T5222] Bluetooth: hci1: command tx timeout
[  318.504572][T18960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.623142][T18967] __nla_validate_parse: 15 callbacks suppressed
[  318.623157][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'.
[  318.625426][T18968] xt_l2tp: invalid flags combination: c
[  318.628361][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'.
[  318.667868][T18972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4268'.
[  318.775472][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4273'.
[  318.878109][T18988] netlink: 'syz.1.4274': attribute type 21 has an invalid length.
[  318.885661][T18988] netlink: 'syz.1.4274': attribute type 6 has an invalid length.
[  318.888532][T18988] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4274'.
[  318.913366][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'.
[  318.920484][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'.
[  318.990301][T18987] lo speed is unknown, defaulting to 1000
[  319.068007][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'.
[  319.073160][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4277'.
[  319.272382][T19004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4279'.
[  319.914177][ T5222] Bluetooth: hci1: command tx timeout
[  319.996100][T19037] xt_CT: You must specify a L4 protocol and not use inversions on it
[  320.206886][T19055] netlink: 'syz.0.4296': attribute type 1 has an invalid length.
[  320.435363][T19063] bridge_slave_0: default FDB implementation only supports local addresses
[  320.577366][T19057] lo speed is unknown, defaulting to 1000
[  320.609670][T19075] netlink: 'syz.0.4300': attribute type 10 has an invalid length.
[  320.618016][T19075] dummy0: entered promiscuous mode
[  320.620227][T19075] dummy0: entered allmulticast mode
[  320.627048][T19075] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  320.928164][T19045] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  320.966249][T19082] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  321.380261][T19094] batadv_slave_0: entered promiscuous mode
[  321.394596][T19090] batadv_slave_0: left promiscuous mode
[  321.710726][T19110] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  321.746373][  T973] page_pool_release_retry() stalled pool shutdown: id 50, 3329 inflight 181 sec
[  321.763021][T19112] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.854408][T19118] ipt_ECN: cannot use operation on non-tcp rule
[  321.959565][T19125] netlink: 'syz.0.4318': attribute type 5 has an invalid length.
[  322.037501][T19127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.040875][T19127] veth0_to_bridge: entered promiscuous mode
[  322.062320][T19126] veth0_to_bridge: left promiscuous mode
[  322.147596][T19135] syzkaller0: entered promiscuous mode
[  322.149704][T19135] syzkaller0: entered allmulticast mode
[  322.869218][   T47] page_pool_release_retry() stalled pool shutdown: id 51, 3329 inflight 180 sec
[  325.311994][T19155] __nla_validate_parse: 8 callbacks suppressed
[  325.312008][T19155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4329'.
[  325.446006][T19166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4332'.
[  325.484369][T19168] macvlan0: left promiscuous mode
[  325.486198][T19168] macvlan0: entered allmulticast mode
[  325.490198][T19168] netlink: 'syz.0.4334': attribute type 1 has an invalid length.
[  325.494500][T19168] netlink: 'syz.0.4334': attribute type 2 has an invalid length.
[  325.513413][T19168] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  325.592737][T19172] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  325.723548][T19182] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4337'.
[  325.787665][T19187] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4340'.
[  325.895258][T19194] x_tables: duplicate underflow at hook 3
[  326.095121][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'.
[  326.342203][T19225] netlink: 452 bytes leftover after parsing attributes in process `syz.3.4352'.
[  326.360485][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4352'.
[  326.444642][T19238] IPVS: Unknown mcast interface: bave_0
[  326.536982][T19239] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4354'.
[  326.657809][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'.
[  326.669752][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4357'.
[  326.858093][T19267] xt_l2tp: invalid flags combination: c
[  327.013611][T19285] netlink: 'syz.3.4369': attribute type 2 has an invalid length.
[  328.218904][T19332] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  328.789908][T19347] lo speed is unknown, defaulting to 1000
[  329.123761][T19359] netlink: 'syz.0.4389': attribute type 1 has an invalid length.
[  329.171857][T19348] SET target dimension over the limit!
[  329.331673][T19365] tc_dump_action: action bad kind
[  329.599384][T19376] macvlan0: left allmulticast mode
[  329.610391][T19376] netlink: 'syz.0.4395': attribute type 2 has an invalid length.
[  329.852557][T19382] sctp: [Deprecated]: syz.0.4396 (pid 19382) Use of struct sctp_assoc_value in delayed_ack socket option.
[  329.852557][T19382] Use struct sctp_sack_info instead
[  329.974748][T19377] lo speed is unknown, defaulting to 1000
[  330.610145][T19423] __nla_validate_parse: 9 callbacks suppressed
[  330.610159][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4408'.
[  330.699946][T19427] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4410'.
[  330.702087][  T973] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 181 sec
[  330.703564][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'.
[  330.757376][T19429] netlink: 'syz.0.4411': attribute type 1 has an invalid length.
[  331.245776][T19439] macvlan0: left promiscuous mode
[  331.248475][T19439] netlink: 'syz.1.4415': attribute type 2 has an invalid length.
[  331.373633][T19445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4416'.
[  331.782824][T19465] 8021q: adding VLAN 0 to HW filter on device bond10
[  331.799963][T19465] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  331.806366][T19465] bond10: (slave macvlan2): Enslaving as a backup interface with a down link
[  331.814117][T19465] bond6: (slave bridge8): Removing an active aggregator
[  331.826050][T19465] bond6: (slave bridge8): Releasing backup interface
[  331.830267][T19465] bridge8: left promiscuous mode
[  331.832930][T19465] bridge8: left allmulticast mode
[  331.838677][T19465] bond10: (slave macvlan2): Releasing backup interface
[  331.915412][T19471] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  331.918129][T19471] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  331.927581][T19471] tipc: Resetting bearer <eth:syzkaller0>
[  332.006365][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4427'.
[  332.013747][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4427'.
[  332.059880][T19482] dvmrp0: left allmulticast mode
[  332.150125][T19483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.450613][T19496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4432'.
[  332.540930][T19500] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4434'.
[  332.589030][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'.
[  333.334972][T19515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4441'.
[  333.601902][T19536] Cannot find set identified by id 32 to match
[  334.126477][T19564] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  334.207301][T19570] veth0: entered promiscuous mode
[  334.220912][T19568] veth0: left promiscuous mode
[  334.747154][T19591] netdevsim netdevsim3: Direct firmware load for .
[  334.747154][T19591]  failed with error -2
[  334.751033][T19591] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  334.751033][T19591] 
[  334.767404][T19589] netlink: 'syz.0.4466': attribute type 13 has an invalid length.
[  334.770515][T19589] netlink: 'syz.0.4466': attribute type 17 has an invalid length.
[  334.811835][T19589] 8021q: adding VLAN 0 to HW filter on device team0
[  334.815259][T19589] dummy0: left promiscuous mode
[  334.818174][T19589] dummy0: left allmulticast mode
[  334.833544][T19589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.839759][ T5899] lo speed is unknown, defaulting to 1000
[  334.847929][ T5899] syz0: Port: 1 Link ACTIVE
[  334.852171][ T5899] lo speed is unknown, defaulting to 1000
[  335.054755][T19592] lo speed is unknown, defaulting to 1000
[  335.214819][T19598] xt_l2tp: invalid flags combination: c
[  335.422448][T19588] lo speed is unknown, defaulting to 1000
[  335.667562][T19611] __nla_validate_parse: 8 callbacks suppressed
[  335.667573][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'.
[  335.675140][T19611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4476'.
[  336.076251][T19619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4478'.
[  336.463601][T19622] team0 (unregistering): Port device team_slave_0 removed
[  336.481073][T19622] team0 (unregistering): Port device team_slave_1 removed
[  336.938169][T19653] netlink: 'syz.3.4488': attribute type 2 has an invalid length.
[  336.997606][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4489'.
[  337.043928][T19661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4490'.
[  337.183332][T19675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4494'.
[  337.184595][T19678] netlink: 'syz.0.4495': attribute type 11 has an invalid length.
[  337.305258][T19688] netlink: 'syz.3.4497': attribute type 2 has an invalid length.
[  337.308940][T19689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4495'.
[  337.348679][T19691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4498'.
[  337.717984][T19721] xt_l2tp: invalid flags combination: c
[  338.284618][T19753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4521'.
[  338.293422][T19755] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  338.295751][T19755] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  338.298212][T19755] tipc: Resetting bearer <eth:syzkaller0>
[  338.387617][T19761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4525'.
[  338.444982][T19765] Cannot find set identified by id 25088 to match
[  338.553385][T19771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.555867][T19771] IPv6: NLM_F_CREATE should be set when creating new route
[  338.696875][T19781] netlink: 'syz.1.4531': attribute type 29 has an invalid length.
[  338.889063][T19793] xt_hashlimit: size too large, truncated to 1048576
[  339.057258][T19808] pim6reg1: entered promiscuous mode
[  339.065776][T19808] pim6reg1: entered allmulticast mode
[  339.266744][T19823] Cannot find set identified by id 38912 to match
[  339.319499][T19818] vlan0: entered allmulticast mode
[  339.628263][T19840] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  339.636388][T19840] netlink: 'syz.1.4551': attribute type 2 has an invalid length.
[  339.653521][T19840] netlink: 'syz.1.4551': attribute type 1 has an invalid length.
[  339.656759][T19840] netlink: 'syz.1.4551': attribute type 2 has an invalid length.
[  339.794124][T19838] lo speed is unknown, defaulting to 1000
[  339.880442][T19851] netlink: 'syz.1.4555': attribute type 2 has an invalid length.
[  339.978480][T19853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.337710][T19869] netlink: 'syz.3.4562': attribute type 2 has an invalid length.
[  343.730260][T19902] __nla_validate_parse: 11 callbacks suppressed
[  343.730280][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4570'.
[  343.738355][T19902] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  343.748789][T19902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.788107][T19902] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  343.809231][T19906] netlink: 'syz.3.4571': attribute type 29 has an invalid length.
[  344.005492][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'.
[  344.013944][T19920] chnl_net:caif_netlink_parms(): no params data found
[  344.432605][T19942] x_tables: duplicate underflow at hook 2
[  344.605203][T19947] syzkaller1: entered promiscuous mode
[  344.618738][T19947] syzkaller1: entered allmulticast mode
[  344.806713][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4590'.
[  344.868785][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'.
[  344.920702][T19979] netlink: 'syz.3.4592': attribute type 2 has an invalid length.
[  345.062536][T19988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4596'.
[  345.065635][T19988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4596'.
[  345.175556][T19999] xt_l2tp: invalid flags combination: c
[  345.279959][T20005] macvlan0: entered allmulticast mode
[  345.284662][T20005] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4601'.
[  345.288866][T20004] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4601'.
[  345.376768][T20010] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4602'.
[  345.380370][T20009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4602'.
[  345.707884][T20032] netlink: 'syz.3.4610': attribute type 1 has an invalid length.
[  345.847288][T20038] syzkaller1: entered promiscuous mode
[  345.849630][T20038] syzkaller1: entered allmulticast mode
[  345.867837][T20038] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  345.912409][T20038] sctp: [Deprecated]: syz.0.4612 (pid 20038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  345.912409][T20038] Use struct sctp_sack_info instead
[  345.975742][T20047] netlink: 'syz.3.4616': attribute type 1 has an invalid length.
[  346.022904][T20047] nbd: socks must be embedded in a SOCK_ITEM attr
[  346.026276][T20047] block nbd3: shutting down sockets
[  346.037832][T20047] netlink: 'syz.3.4616': attribute type 83 has an invalid length.
[  346.125841][T20052] netlink: 'syz.0.4618': attribute type 23 has an invalid length.
[  346.234165][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 270 seconds
[  346.238012][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 270 seconds
[  346.239632][T20059] netlink: 'syz.1.4621': attribute type 1 has an invalid length.
[  346.242432][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 270 seconds
[  346.246183][T20060] netlink: 'syz.1.4621': attribute type 1 has an invalid length.
[  346.248561][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 270 seconds
[  346.326004][T20059] 8021q: adding VLAN 0 to HW filter on device bond11
[  346.347652][T20069] tunl0: entered promiscuous mode
[  346.354412][T20069] netlink: 'syz.0.4623': attribute type 4 has an invalid length.
[  346.409147][T20071] xt_TCPMSS: Only works on TCP SYN packets
[  346.415595][T20073] gretap0: entered promiscuous mode
[  346.538060][T20086] netlink: 'syz.1.4629': attribute type 1 has an invalid length.
[  346.558842][T20087] nbd: must specify at least one socket
[  346.797654][T20101] bridge_slave_1: left allmulticast mode
[  346.800008][T20101] bridge_slave_1: left promiscuous mode
[  346.802120][T20101] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.809003][T20101] bridge_slave_0: left allmulticast mode
[  346.814058][T20101] bridge_slave_0: left promiscuous mode
[  346.816583][T20101] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.607135][T20130] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  347.730382][T20140] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  347.809685][T20143] tipc: Resetting bearer <eth:syzkaller0>
[  347.818105][T20144] bond0: (slave wlan1): Opening slave failed
[  348.434367][T20192] erspan0: entered allmulticast mode
[  349.999127][T20262] ipt_ECN: cannot use operation on non-tcp rule
[  350.123527][T20268] __nla_validate_parse: 17 callbacks suppressed
[  350.123543][T20268] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4688'.
[  350.295713][T20284] xt_l2tp: invalid flags combination: c
[  350.344537][T20283] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  350.345337][  T973] IPVS: starting estimator thread 0...
[  350.350328][T20281] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  350.358184][T20291] ipt_ECN: cannot use operation on non-tcp rule
[  350.435431][T20289] IPVS: using max 52 ests per chain, 124800 per kthread
[  350.469882][T20298] validate_nla: 6 callbacks suppressed
[  350.469902][T20298] netlink: 'syz.0.4697': attribute type 2 has an invalid length.
[  350.478696][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4697'.
[  350.550274][T20304] xt_l2tp: invalid flags combination: c
[  350.774082][T20325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4707'.
[  351.015766][T20347] xt_TCPMSS: Only works on TCP SYN packets
[  351.047673][T20353] ipt_ECN: cannot use operation on non-tcp rule
[  351.173582][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4717'.
[  351.340178][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4720'.
[  351.344989][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4720'.
[  351.450031][T20368] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  351.458588][T20369] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  351.504502][ T5222] Bluetooth: hci2: command 0x0405 tx timeout
[  351.656940][T20379] netlink: 'syz.1.4723': attribute type 21 has an invalid length.
[  351.660332][T20379] netlink: 'syz.1.4723': attribute type 22 has an invalid length.
[  351.664934][T20379] netlink: 'syz.1.4723': attribute type 23 has an invalid length.
[  351.674012][T20379] netlink: 'syz.1.4723': attribute type 25 has an invalid length.
[  351.677762][T20379] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4723'.
[  351.750396][T20382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  351.925178][T20396] netlink: 'syz.1.4725': attribute type 1 has an invalid length.
[  351.992660][T20396] bond12: entered promiscuous mode
[  351.994460][T20396] bond12: entered allmulticast mode
[  351.996583][T20396] 8021q: adding VLAN 0 to HW filter on device bond12
[  352.009797][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'.
[  352.014445][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4729'.
[  352.018006][T20401] netlink: 'syz.0.4729': attribute type 6 has an invalid length.
[  352.019835][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4728'.
[  352.174863][T20411] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  352.427523][T20431] netlink: 'syz.3.4738': attribute type 2 has an invalid length.
[  353.357770][T20464] xt_l2tp: invalid flags combination: c
[  353.383402][T20451] lo speed is unknown, defaulting to 1000
[  353.954051][T20479] ipt_ECN: cannot use operation on non-tcp rule
[  354.153149][ T5899] page_pool_release_retry() stalled pool shutdown: id 69, 3329 inflight 181 sec
[  354.387849][T20497] netlink: 'syz.1.4757': attribute type 2 has an invalid length.
[  354.399479][T20496] netlink: 'syz.3.4756': attribute type 3 has an invalid length.
[  354.460847][T20502] ipt_ECN: cannot use operation on non-tcp rule
[  354.654380][T20513] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  354.671442][T20513] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  354.822031][T20521] ipt_ECN: cannot use operation on non-tcp rule
[  355.259176][T20550] __nla_validate_parse: 10 callbacks suppressed
[  355.259199][T20550] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.4779'.
[  355.304325][T20552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4780'.
[  355.400078][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'.
[  355.597744][T20552] lo speed is unknown, defaulting to 1000
[  355.659213][T20562] ipt_ECN: cannot use operation on non-tcp rule
[  355.785382][T20564] syzkaller1: entered promiscuous mode
[  355.787625][T20564] syzkaller1: entered allmulticast mode
[  355.816721][T20564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4785'.
[  355.820848][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'.
[  356.087193][T20571] validate_nla: 1 callbacks suppressed
[  356.087210][T20571] netlink: 'syz.1.4788': attribute type 1 has an invalid length.
[  356.097114][T20572] netlink: 'syz.1.4788': attribute type 1 has an invalid length.
[  356.100901][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4790'.
[  356.154353][T20581] ipt_ECN: cannot use operation on non-tcp rule
[  356.183288][T20572] 8021q: adding VLAN 0 to HW filter on device bond13
[  356.188424][T20583] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4790'.
[  356.315620][T20585] xt_CT: No such helper "syz0"
[  356.324311][T20589] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4792'.
[  356.369476][T20589] hsr_slave_0: left promiscuous mode
[  356.399296][T20589] hsr_slave_1: left promiscuous mode
[  356.539937][T20594] netlink: 'syz.1.4795': attribute type 2 has an invalid length.
[  356.602971][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4796'.
[  357.006645][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4805'.
[  357.008364][T20616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.659287][T20643] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  357.714041][T20645] xt_l2tp: invalid flags combination: c
[  358.075947][T20664] netlink: 'syz.3.4820': attribute type 5 has an invalid length.
[  358.332408][T20689] IPVS: Unknown mcast interface: dvmrp0
[  359.320917][T20734] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  362.310124][T20765] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  362.315854][T20765] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  362.321773][T20765] tipc: Resetting bearer <eth:syzkaller0>
[  362.537164][T20779] netlink: 'syz.0.4857': attribute type 1 has an invalid length.
[  362.586850][T20779] 8021q: adding VLAN 0 to HW filter on device bond24
[  362.603653][T20786] __nla_validate_parse: 8 callbacks suppressed
[  362.603675][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4856'.
[  362.646890][T20785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'.
[  362.686603][T20779] bond24: (slave bridge14): making interface the new active one
[  362.690149][T20779] bond24: (slave bridge14): Enslaving as an active interface with an up link
[  363.123330][T20797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.145265][T20797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.294937][T20797] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.298388][T20797] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.302264][T20797] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.305987][T20797] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.555902][T20820] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4867'.
[  363.675896][T20830] xt_l2tp: invalid flags combination: c
[  363.972393][T20837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4873'.
[  364.915250][T20859] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4878'.
[  364.998293][T20865] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4881'.
[  365.060307][T20870] macvlan0: left allmulticast mode
[  365.063934][T20870] netlink: 'syz.0.4882': attribute type 2 has an invalid length.
[  365.300952][T20886] netlink: 'syz.0.4889': attribute type 12 has an invalid length.
[  365.305627][T20886] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4889'.
[  365.356024][T20888] netlink: 'syz.1.4890': attribute type 2 has an invalid length.
[  365.625953][T20906] xt_l2tp: invalid flags combination: c
[  365.666508][T20908] netlink: 'syz.1.4897': attribute type 2 has an invalid length.
[  365.858767][T20916] macvlan0: entered allmulticast mode
[  365.860848][T20916] netlink: 'syz.3.4901': attribute type 1 has an invalid length.
[  365.866908][T20916] netlink: 'syz.3.4901': attribute type 2 has an invalid length.
[  365.949863][T20923] xt_TPROXY: Can be used only with -p tcp or -p udp
[  365.979334][T20923] bridge_slave_0: left promiscuous mode
[  365.988850][T20923] veth0_to_team: left allmulticast mode
[  365.994427][T20923] veth1_to_team: left allmulticast mode
[  366.001045][T20923] 0: left allmulticast mode
[  366.005889][T20923] hsr_slave_0: left allmulticast mode
[  366.008475][T20923] veth0_vlan: left allmulticast mode
[  366.027613][T20923] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  366.044001][T20923] veth19: left promiscuous mode
[  366.046577][T20923] gretap2: left promiscuous mode
[  366.048898][T20923] gretap2: left allmulticast mode
[  366.052412][T20923] geneve2: left promiscuous mode
[  366.054655][T20923] geneve2: left allmulticast mode
[  366.057409][T20923] vxlan1: left promiscuous mode
[  366.059626][T20923] vxlan1: left allmulticast mode
[  366.066347][T20923] bridge7: left promiscuous mode
[  366.068624][T20923] bridge7: left allmulticast mode
[  366.071082][T20923] macvtap1: left promiscuous mode
[  366.073428][T20923] macvtap1: left allmulticast mode
[  366.076006][T20923] bond6: left promiscuous mode
[  366.078172][T20923] bond6: left allmulticast mode
[  366.082028][T20923] vti0: left promiscuous mode
[  366.098835][T20923] vti1: left promiscuous mode
[  366.112341][T20923] ip6gre2: left promiscuous mode
[  366.123913][T20923] bridge14: left allmulticast mode
[  366.136756][T20923] bond9: left promiscuous mode
[  366.138968][T20923] bond9: left allmulticast mode
[  366.153694][T20923] bond12: left promiscuous mode
[  366.155640][T20923] bond12: left allmulticast mode
[  366.447383][T20942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4911'.
[  366.624916][T20951] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  366.686782][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'.
[  366.690491][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4917'.
[  366.764368][T20961] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  366.767390][T20961] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  366.770783][T20961] tipc: Resetting bearer <eth:syzkaller0>
[  366.794084][T20967] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (779448419)
[  366.807191][T20967] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  367.025556][T20981] delete_channel: no stack
[  367.479079][T20990] lo speed is unknown, defaulting to 1000
[  367.750291][T21023] ipt_ECN: cannot use operation on non-tcp rule
[  367.771055][T21020] __nla_validate_parse: 4 callbacks suppressed
[  367.779618][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'.
[  367.822812][T21026] sctp: [Deprecated]: syz.1.4941 (pid 21026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  367.822812][T21026] Use struct sctp_sack_info instead
[  368.010579][T21033] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  368.197418][T21039] syzkaller0: entered promiscuous mode
[  368.228589][T21039] syzkaller0: entered allmulticast mode
[  368.482717][T21046] syz.1.4949: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  368.488724][T21046] CPU: 0 UID: 0 PID: 21046 Comm: syz.1.4949 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  368.488756][T21046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.488768][T21046] Call Trace:
[  368.488780][T21046]  <TASK>
[  368.488791][T21046]  dump_stack_lvl+0x189/0x250
[  368.488819][T21046]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.488840][T21046]  ? __pfx__printk+0x10/0x10
[  368.488898][T21046]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.488925][T21046]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.488948][T21046]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  368.488973][T21046]  warn_alloc+0x214/0x310
[  368.488991][T21046]  ? stack_depot_save_flags+0x40/0x900
[  368.489014][T21046]  ? __pfx_warn_alloc+0x10/0x10
[  368.489032][T21046]  ? kasan_save_track+0x4f/0x80
[  368.489055][T21046]  ? xskq_create+0x56/0x170
[  368.489070][T21046]  ? xsk_init_queue+0xb0/0x110
[  368.489082][T21046]  ? xsk_setsockopt+0x43f/0x710
[  368.489102][T21046]  ? do_sock_setsockopt+0x17c/0x1b0
[  368.489124][T21046]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  368.489154][T21046]  ? do_syscall_64+0xfa/0x3b0
[  368.489173][T21046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.489197][T21046]  __vmalloc_node_range_noprof+0x125/0x12f0
[  368.489246][T21046]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  368.489270][T21046]  ? __kasan_kmalloc+0x93/0xb0
[  368.489294][T21046]  vmalloc_user_noprof+0xad/0xf0
[  368.489317][T21046]  ? xskq_create+0xbf/0x170
[  368.489331][T21046]  xskq_create+0xbf/0x170
[  368.489350][T21046]  xsk_init_queue+0xb0/0x110
[  368.489367][T21046]  xsk_setsockopt+0x43f/0x710
[  368.489392][T21046]  ? __pfx_xsk_setsockopt+0x10/0x10
[  368.489416][T21046]  ? __fget_files+0x2a/0x420
[  368.489431][T21046]  ? aa_sock_opt_perm+0x74/0x110
[  368.489449][T21046]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  368.489466][T21046]  ? __pfx_xsk_setsockopt+0x10/0x10
[  368.489490][T21046]  do_sock_setsockopt+0x17c/0x1b0
[  368.489518][T21046]  __x64_sys_setsockopt+0x13f/0x1b0
[  368.489546][T21046]  do_syscall_64+0xfa/0x3b0
[  368.489562][T21046]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.489578][T21046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.489592][T21046]  ? exc_page_fault+0x9f/0xf0
[  368.489608][T21046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.489623][T21046] RIP: 0033:0x7f3c2c78e9a9
[  368.489641][T21046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.489654][T21046] RSP: 002b:00007f3c2d5d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  368.489673][T21046] RAX: ffffffffffffffda RBX: 00007f3c2c9b5fa0 RCX: 00007f3c2c78e9a9
[  368.489686][T21046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  368.489696][T21046] RBP: 00007f3c2c810d69 R08: 0000000000000004 R09: 0000000000000000
[  368.489705][T21046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.489716][T21046] R13: 0000000000000000 R14: 00007f3c2c9b5fa0 R15: 00007ffee22fd098
[  368.489740][T21046]  </TASK>
[  368.489748][T21046] Mem-Info:
[  368.607626][T21046] active_anon:5397 inactive_anon:0 isolated_anon:0
[  368.607626][T21046]  active_file:11029 inactive_file:38331 isolated_file:0
[  368.607626][T21046]  unevictable:1768 dirty:131 writeback:0
[  368.607626][T21046]  slab_reclaimable:10655 slab_unreclaimable:141274
[  368.607626][T21046]  mapped:18532 shmem:2467 pagetables:906
[  368.607626][T21046]  sec_pagetables:0 bounce:0
[  368.607626][T21046]  kernel_misc_reclaimable:0
[  368.607626][T21046]  free:178092 free_pcp:22699 free_cma:0
[  368.623083][T21046] Node 0 active_anon:13144kB inactive_anon:0kB active_file:22984kB inactive_file:9212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49588kB dirty:212kB writeback:0kB shmem:5124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5360kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.633078][T21046] Node 1 active_anon:8444kB inactive_anon:0kB active_file:21132kB inactive_file:144112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24540kB dirty:312kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8112kB pagetables:1660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.643485][T21046] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  368.652898][T21046] lowmem_reserve[]: 0 812 812 812 812
[  368.655216][T21046] Node 0 DMA32 free:248356kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13144kB inactive_anon:0kB active_file:22984kB inactive_file:9212kB unevictable:3536kB writepending:212kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:37288kB local_pcp:18016kB free_cma:0kB
[  368.666506][T21046] lowmem_reserve[]: 0 0 0 0 0
[  368.668642][T21046] Node 1 DMA32 free:396160kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21316kB local_pcp:9440kB free_cma:0kB
[  368.680240][T21046] lowmem_reserve[]: 0 0 854 854 854
[  368.683039][T21046] Node 1 Normal free:52492kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8444kB inactive_anon:0kB active_file:21132kB inactive_file:144104kB unevictable:3536kB writepending:312kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:32192kB local_pcp:22396kB free_cma:0kB
[  368.696114][T21046] lowmem_reserve[]: 0 0 0 0 0
[  368.698252][T21046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  368.703882][T21046] Node 0 DMA32: 3*4kB (UME) 329*8kB (U) 407*16kB (UM) 373*32kB (UM) 305*64kB (UME) 137*128kB (UM) 45*256kB (UM) 21*512kB (UM) 14*1024kB (U) 5*2048kB (UME) 35*4096kB (UM) = 248356kB
[  368.711619][T21046] Node 1 DMA32: 12*4kB (UM) 4*8kB (UM) 5*16kB (UM) 5*32kB (UM) 5*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 6*1024kB (UM) 5*2048kB (UM) 92*4096kB (UM) = 396160kB
[  368.718322][T21046] Node 1 Normal: 1*4kB (M) 553*8kB (UME) 402*16kB (UME) 261*32kB (UME) 144*64kB (UME) 20*128kB (UM) 12*256kB (M) 8*512kB (UME) 10*1024kB (UM) 2*2048kB (U) 0*4096kB = 52492kB
[  368.726228][T21046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.730108][T21046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.734308][T21046] 51827 total pagecache pages
[  368.736667][T21046] 0 pages in swap cache
[  368.739305][T21046] Free swap  = 124996kB
[  368.743174][T21046] Total swap = 124996kB
[  368.744980][T21046] 786301 pages RAM
[  368.750198][T21046] 0 pages HighMem/MovableOnly
[  368.752700][T21046] 241056 pages reserved
[  368.754442][T21046] 0 pages cma reserved
[  369.200929][T21074] dummy0: entered allmulticast mode
[  369.210736][T21073] dummy0: left allmulticast mode
[  369.314198][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4960'.
[  369.317147][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4960'.
[  369.811725][T21113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4971'.
[  369.820450][T21113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.825886][T21113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.828520][T21113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.831405][T21113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.834645][T21113] geneve2: entered promiscuous mode
[  369.836364][T21113] geneve2: entered allmulticast mode
[  369.959294][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'.
[  369.985654][T21118] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  370.559107][T21151] xt_l2tp: invalid flags combination: c
[  370.618928][T21153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'.
[  370.680321][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'.
[  370.685840][T21155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4987'.
[  370.977171][T21157] syzkaller0: entered promiscuous mode
[  370.979422][T21157] syzkaller0: entered allmulticast mode
[  371.513030][T21176] xt_l2tp: invalid flags combination: c
[  371.587473][T21181] macvlan0: left allmulticast mode
[  371.590008][T21181] netlink: 'syz.3.4998': attribute type 2 has an invalid length.
[  371.758598][T21190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.761270][T21190] syzkaller0: entered promiscuous mode
[  371.763039][T21190] syzkaller0: entered allmulticast mode
[  371.789886][T21190] tipc: Resetting bearer <eth:syzkaller0>
[  371.796110][T21194] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5004'.
[  371.798934][T21194] ip6gretap0: entered promiscuous mode
[  371.801622][T21194] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5004'.
[  371.806296][T21189] tipc: Resetting bearer <eth:syzkaller0>
[  371.845974][T21189] tipc: Disabling bearer <eth:syzkaller0>
[  371.928273][T21200] netlink: 'syz.3.5007': attribute type 2 has an invalid length.
[  371.987153][T21204] netlink: 'syz.3.5008': attribute type 1 has an invalid length.
[  371.999468][T21204] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  372.024896][T21211] netlink: 'syz.0.5006': attribute type 1 has an invalid length.
[  372.962005][T21226] __nla_validate_parse: 4 callbacks suppressed
[  372.962019][T21226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5015'.
[  373.066727][T21236] xt_l2tp: invalid flags combination: c
[  373.192870][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5022'.
[  373.199806][T21246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5022'.
[  373.227804][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5023'.
[  373.244961][T21249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.334630][T21262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5025'.
[  373.417283][T21268] netlink: 'syz.1.5029': attribute type 11 has an invalid length.
[  373.530447][T21278] netlink: 'syz.0.5033': attribute type 2 has an invalid length.
[  374.056113][T21300] netlink: 'syz.1.5041': attribute type 2 has an invalid length.
[  374.237193][T21304] sctp: [Deprecated]: syz.1.5043 (pid 21304) Use of int in maxseg socket option.
[  374.237193][T21304] Use struct sctp_assoc_value instead
[  374.357795][T21308] syzkaller0: entered promiscuous mode
[  374.361393][T21308] syzkaller0: entered allmulticast mode
[  374.530878][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5049'.
[  374.870717][T21331] syzkaller0: entered promiscuous mode
[  374.873073][T21331] syzkaller0: entered allmulticast mode
[  374.917216][T21337] macsec1: entered promiscuous mode
[  374.919555][T21337] bridge0: entered promiscuous mode
[  374.923708][T21337] bridge0: port 1(macsec1) entered blocking state
[  374.926335][T21337] bridge0: port 1(macsec1) entered disabled state
[  374.929321][T21337] macsec1: entered allmulticast mode
[  374.933362][T21337] bridge0: entered allmulticast mode
[  374.943945][T21337] macsec1: left allmulticast mode
[  374.946051][T21337] bridge0: left allmulticast mode
[  374.950020][T21337] bridge0: left promiscuous mode
[  375.044578][T21339] tap0: tun_chr_ioctl cmd 1074025677
[  375.051475][T21339] tap0: linktype set to 776
[  375.397663][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5061'.
[  375.533186][T21360] netlink: 'syz.1.5065': attribute type 1 has an invalid length.
[  375.588876][T21360] bond14: (slave bridge15): making interface the new active one
[  375.610231][T21360] bond14: (slave bridge15): Enslaving as an active interface with an up link
[  375.704265][T21368] macvtap1: entered promiscuous mode
[  375.706581][T21368] batadv0: entered promiscuous mode
[  375.710070][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5070'.
[  375.712673][T21368] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  375.717262][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5070'.
[  375.724611][T21368] batadv0: left promiscuous mode
[  375.880660][T21376] syzkaller0: entered promiscuous mode
[  375.888371][T21376] syzkaller0: entered allmulticast mode
[  375.987187][T21385] xt_l2tp: invalid flags combination: c
[  376.311735][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 300 seconds
[  376.315450][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 300 seconds
[  376.319081][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 300 seconds
[  376.333533][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 300 seconds
[  379.019571][T21404] bond0: entered promiscuous mode
[  379.027645][T21404] bond_slave_0: entered promiscuous mode
[  379.030152][T21404] bond_slave_1: entered promiscuous mode
[  379.035910][T21404] bond0: left promiscuous mode
[  379.042620][T21404] bond_slave_0: left promiscuous mode
[  379.045229][T21404] bond_slave_1: left promiscuous mode
[  379.076137][T21403] netlink: 'syz.1.5080': attribute type 7 has an invalid length.
[  379.110719][T21407] netlink: 'syz.0.5082': attribute type 1 has an invalid length.
[  379.586291][T21442] delete_channel: no stack
[  379.756142][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'.
[  379.759355][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'.
[  379.925940][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5102'.
[  379.937850][T21463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5102'.
[  380.191027][T21476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5106'.
[  380.197665][T21476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5106'.
[  380.253828][T21479] netlink: 'syz.0.5108': attribute type 1 has an invalid length.
[  380.298831][T21479] bond25: (slave vxcan3): The slave device specified does not support setting the MAC address
[  380.305958][T21479] bond25: (slave vxcan3): Error -95 calling set_mac_address
[  380.558370][T21490] tipc: Resetting bearer <eth:syzkaller0>
[  380.720045][T21493] xt_l2tp: invalid flags combination: c
[  380.836231][T21500] nbd: couldn't find device at index 536870912
[  380.848622][T21502] netlink: 'syz.3.5115': attribute type 29 has an invalid length.
[  380.873430][T21502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5115'.
[  380.888284][T21502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5115'.
[  381.127559][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5122'.
[  381.225577][T21526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5124'.
[  381.233457][T21527] netlink: 'syz.0.5123': attribute type 29 has an invalid length.
[  381.449320][T21538] netlink: 'syz.0.5128': attribute type 1 has an invalid length.
[  382.063235][  T973] page_pool_release_retry() stalled pool shutdown: id 50, 3329 inflight 241 sec
[  382.310423][T21577] xt_l2tp: invalid flags combination: c
[  382.378725][T21579] pimreg: entered allmulticast mode
[  382.383075][T21579] pimreg: left allmulticast mode
[  382.743358][T21597] veth0_to_bridge: entered promiscuous mode
[  382.747605][T21595] veth0_to_bridge: left promiscuous mode
[  382.837551][T21605] netlink: 'syz.1.5150': attribute type 29 has an invalid length.
[  382.929535][T21613] tipc: Resetting bearer <eth:syzkaller0>
[  383.083378][T21625] ipt_ECN: cannot use operation on non-tcp rule
[  383.181745][  T973] page_pool_release_retry() stalled pool shutdown: id 51, 3329 inflight 241 sec
[  383.560085][T21654] syzkaller0: entered promiscuous mode
[  383.563198][T21654] syzkaller0: entered allmulticast mode
[  383.580528][T21656] dvmrp1: entered allmulticast mode
[  383.585581][T21656] dvmrp1: left allmulticast mode
[  383.866393][T21675] netlink: 'syz.1.5179': attribute type 3 has an invalid length.
[  383.907060][T21674] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  384.217984][T21685] netlink: 'syz.3.5184': attribute type 2 has an invalid length.
[  384.222146][T21685] netlink: 'syz.3.5184': attribute type 1 has an invalid length.
[  384.487804][T21691] syzkaller0: entered promiscuous mode
[  384.496374][T21691] syzkaller0: entered allmulticast mode
[  384.800810][T21695] __nla_validate_parse: 13 callbacks suppressed
[  384.800830][T21695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5188'.
[  384.814777][T21695] tipc: Started in network mode
[  384.816924][T21695] tipc: Node identity 3a360d9d0e39, cluster identity 4711
[  384.819938][T21695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.829619][T21695] syzkaller0: entered promiscuous mode
[  384.832661][T21695] syzkaller0: entered allmulticast mode
[  384.838827][T21695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5188'.
[  384.850977][T21695] tipc: Resetting bearer <eth:syzkaller0>
[  384.855504][T21694] tipc: Resetting bearer <eth:syzkaller0>
[  384.908358][T21694] tipc: Disabling bearer <eth:syzkaller0>
[  385.216317][T21718] syz.0.5196: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  385.228514][T21718] CPU: 1 UID: 0 PID: 21718 Comm: syz.0.5196 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  385.228562][T21718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  385.228571][T21718] Call Trace:
[  385.228578][T21718]  <TASK>
[  385.228586][T21718]  dump_stack_lvl+0x189/0x250
[  385.228616][T21718]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.228634][T21718]  ? __pfx__printk+0x10/0x10
[  385.228656][T21718]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.228678][T21718]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  385.228698][T21718]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  385.228717][T21718]  warn_alloc+0x214/0x310
[  385.228739][T21718]  ? __pfx_warn_alloc+0x10/0x10
[  385.228760][T21718]  ? __get_vm_area_node+0x28f/0x300
[  385.228781][T21718]  ? packet_set_ring+0x6f4/0x2380
[  385.228805][T21718]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  385.228862][T21718]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  385.228884][T21718]  ? alloc_pages_mpol+0x3cd/0x4a0
[  385.228908][T21718]  ? packet_set_ring+0x6f4/0x2380
[  385.228928][T21718]  vzalloc_noprof+0xb2/0xf0
[  385.228949][T21718]  ? packet_set_ring+0x6f4/0x2380
[  385.228970][T21718]  packet_set_ring+0x6f4/0x2380
[  385.229014][T21718]  ? __pfx_packet_set_ring+0x10/0x10
[  385.229051][T21718]  ? _copy_from_user+0x94/0xb0
[  385.229076][T21718]  packet_setsockopt+0xc5a/0x12c0
[  385.229100][T21718]  ? __pfx_packet_setsockopt+0x10/0x10
[  385.229126][T21718]  ? __lock_acquire+0xab9/0xd20
[  385.229147][T21718]  ? aa_sk_perm+0x81e/0x950
[  385.229176][T21718]  ? __pfx_aa_sk_perm+0x10/0x10
[  385.229201][T21718]  ? __fget_files+0x2a/0x420
[  385.229215][T21718]  ? aa_sock_opt_perm+0x74/0x110
[  385.229232][T21718]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  385.229248][T21718]  ? __pfx_packet_setsockopt+0x10/0x10
[  385.229270][T21718]  do_sock_setsockopt+0x17c/0x1b0
[  385.229338][T21718]  __x64_sys_setsockopt+0x13f/0x1b0
[  385.229365][T21718]  do_syscall_64+0xfa/0x3b0
[  385.229382][T21718]  ? lockdep_hardirqs_on+0x9c/0x150
[  385.229396][T21718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.229412][T21718]  ? exc_page_fault+0x9f/0xf0
[  385.229429][T21718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.229445][T21718] RIP: 0033:0x7f072ff8e9a9
[  385.229462][T21718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.229476][T21718] RSP: 002b:00007f0730df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  385.229494][T21718] RAX: ffffffffffffffda RBX: 00007f07301b6080 RCX: 00007f072ff8e9a9
[  385.229505][T21718] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004
[  385.229514][T21718] RBP: 00007f0730010d69 R08: 000000000000001c R09: 0000000000000000
[  385.229524][T21718] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  385.229533][T21718] R13: 0000000000000001 R14: 00007f07301b6080 R15: 00007ffe9228e6e8
[  385.229560][T21718]  </TASK>
[  385.230042][T21718] Mem-Info:
[  385.375663][T21718] active_anon:5389 inactive_anon:0 isolated_anon:0
[  385.375663][T21718]  active_file:11029 inactive_file:38337 isolated_file:0
[  385.375663][T21718]  unevictable:1768 dirty:156 writeback:0
[  385.375663][T21718]  slab_reclaimable:10779 slab_unreclaimable:142451
[  385.375663][T21718]  mapped:18477 shmem:2471 pagetables:913
[  385.375663][T21718]  sec_pagetables:0 bounce:0
[  385.375663][T21718]  kernel_misc_reclaimable:0
[  385.375663][T21718]  free:179133 free_pcp:20121 free_cma:0
[  385.400642][T21718] Node 0 active_anon:13040kB inactive_anon:0kB active_file:22968kB inactive_file:9212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49336kB dirty:476kB writeback:0kB shmem:5124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5356kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.420580][T21718] Node 1 active_anon:8516kB inactive_anon:0kB active_file:21148kB inactive_file:144136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24572kB dirty:148kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8112kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  385.442096][T21718] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  385.469119][T21718] lowmem_reserve[]: 0 812 812 812 812
[  385.469319][T21725] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5197'.
[  385.474208][T21718] Node 0 DMA32 free:262876kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13040kB inactive_anon:0kB active_file:22968kB inactive_file:9212kB unevictable:3536kB writepending:476kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:31668kB local_pcp:15360kB free_cma:0kB
[  385.488409][T21718] lowmem_reserve[]: 0 0 0 0 0
[  385.490356][T21718] Node 1 DMA32 free:392540kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:16kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14828kB local_pcp:4176kB free_cma:0kB
[  385.490436][T21725] x_tables: duplicate entry at hook 1
[  385.512934][T21718] lowmem_reserve[]: 0 0 854 854 854
[  385.514617][T21718] Node 1 Normal free:45708kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8272kB inactive_anon:0kB active_file:21132kB inactive_file:144120kB unevictable:3536kB writepending:132kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33932kB local_pcp:14540kB free_cma:0kB
[  385.525817][T21725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.527339][T21718] lowmem_reserve[]: 0 0 0 0 0
[  385.533292][T21718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  385.537799][T21718] Node 0 DMA32: 309*4kB (UME) 298*8kB (UE) 153*16kB (UME) 750*32kB (UME) 394*64kB (UME) 116*128kB (UM) 47*256kB (UM) 21*512kB (UM) 14*1024kB (U) 6*2048kB (UME) 35*4096kB (UM) = 262900kB
[  385.546073][T21718] Node 1 DMA32: 48*4kB (UM) 29*8kB (UME) 18*16kB (ME) 11*32kB (UME) 7*64kB (UM) 5*128kB (M) 5*256kB (UME) 4*512kB (UM) 4*1024kB (ME) 5*2048kB (UME) 91*4096kB (UM) = 392552kB
[  385.554174][T21718] Node 1 Normal: 659*4kB (U) 378*8kB (UM) 229*16kB (UE) 31*32kB (UME) 133*64kB (ME) 38*128kB (UME) 22*256kB (UME) 8*512kB (UM) 8*1024kB (UM) 2*2048kB (U) 0*4096kB = 45708kB
[  385.559937][T21718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.564985][T21718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  385.568190][T21718] 51835 total pagecache pages
[  385.569888][T21718] 0 pages in swap cache
[  385.573860][T21718] Free swap  = 124996kB
[  385.575475][T21718] Total swap = 124996kB
[  385.576975][T21718] 786301 pages RAM
[  385.578271][T21718] 0 pages HighMem/MovableOnly
[  385.582940][T21718] 241056 pages reserved
[  385.585003][T21718] 0 pages cma reserved
[  385.658340][T21730] nft_compat: unsupported protocol 1
[  385.849692][T21725] lo speed is unknown, defaulting to 1000
[  386.128707][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'.
[  386.407719][T21748] dvmrp1: entered allmulticast mode
[  386.418136][T21748] dvmrp1: left allmulticast mode
[  386.487131][T21738] lo speed is unknown, defaulting to 1000
[  386.807201][T21767] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5209'.
[  386.826244][T21767] IPVS: set_ctl: invalid protocol: 8345 172.30.1.4:20003
[  386.830292][T21767] Cannot find add_set index 3 as target
[  386.848713][ T8643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.855248][ T8643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.890173][T21767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.130339][T21774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5212'.
[  387.160877][T21774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5212'.
[  387.496619][T21777] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5213'.
[  387.639368][T21781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5215'.
[  387.759492][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5217'.
[  387.828899][T21787] vlan0: entered promiscuous mode
[  387.831069][T21787] bridge0: entered promiscuous mode
[  387.834376][T21787] vlan0: entered allmulticast mode
[  387.836638][T21787] bridge0: entered allmulticast mode
[  388.455299][T21826] sctp: [Deprecated]: syz.3.5232 (pid 21826) Use of int in maxseg socket option.
[  388.455299][T21826] Use struct sctp_assoc_value instead
[  388.473676][T21812] lo speed is unknown, defaulting to 1000
[  388.826797][T21840] syzkaller0: entered promiscuous mode
[  388.829022][T21840] syzkaller0: entered allmulticast mode
[  388.915230][T21846] netlink: 'syz.0.5240': attribute type 1 has an invalid length.
[  389.054219][T21851] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  389.400489][T21865] IPv6: NLM_F_REPLACE set, but no existing node found!
[  389.412394][T21864] IPv6: NLM_F_REPLACE set, but no existing node found!
[  389.469239][T21848] lo speed is unknown, defaulting to 1000
[  389.484386][T21868] ipt_ECN: cannot use operation on non-tcp rule
[  389.671999][T21847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.034973][T21889] ipt_ECN: cannot use operation on non-tcp rule
[  390.161002][T21895] __nla_validate_parse: 7 callbacks suppressed
[  390.161015][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5257'.
[  390.169880][T21895] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5257'.
[  390.248298][T21897] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5259'.
[  390.299896][T21899] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5260'.
[  390.308470][T21899] x_tables: duplicate entry at hook 1
[  390.318454][T21899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.742214][T21909] dvmrp1: entered allmulticast mode
[  390.784835][T21909] dvmrp1: left allmulticast mode
[  390.955157][T21914] ipt_ECN: cannot use operation on non-tcp rule
[  390.984945][T21917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5265'.
[  390.987783][T21917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5265'.
[  391.038506][  T973] page_pool_release_retry() stalled pool shutdown: id 57, 3329 inflight 241 sec
[  391.058879][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5266'.
[  391.063420][T21926] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  391.067008][T21926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.137873][T21931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5269'.
[  391.160456][T21933] dvmrp1: entered allmulticast mode
[  391.202656][T21935] x_tables: unsorted underflow at hook 3
[  391.238967][T21938] netlink: 'syz.1.5270': attribute type 4 has an invalid length.
[  391.249531][T21938] dvmrp1: left allmulticast mode
[  391.365384][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5276'.
[  391.369193][T21949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5276'.
[  391.478674][T21956] x_tables: duplicate entry at hook 1
[  391.482647][T21956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.201941][T21988] xt_TCPMSS: Only works on TCP SYN packets
[  392.220477][T21985] dvmrp1: entered allmulticast mode
[  392.244035][T21985] dvmrp1: left allmulticast mode
[  392.399086][T21995] x_tables: duplicate entry at hook 1
[  392.408529][T21995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.635927][T22005] syzkaller0: entered promiscuous mode
[  392.639666][T22005] syzkaller0: entered allmulticast mode
[  393.160579][T22015] netlink: 'syz.3.5294': attribute type 10 has an invalid length.
[  393.164628][T22015] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  393.346491][T22022] pim6reg: left allmulticast mode
[  393.382002][T22024] dvmrp1: entered allmulticast mode
[  393.385958][T22024] dvmrp1: left allmulticast mode
[  393.919817][T22051] ipt_ECN: cannot use operation on non-tcp rule
[  394.725261][T22087] ipt_ECN: cannot use operation on non-tcp rule
[  394.966089][T22099] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  395.204008][T22111] netlink: 'syz.3.5329': attribute type 1 has an invalid length.
[  395.206739][T22111] __nla_validate_parse: 15 callbacks suppressed
[  395.206750][T22111] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5329'.
[  395.209258][T22113] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5328'.
[  395.260165][T22117] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5329'.
[  395.286664][T22089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5321'.
[  395.446928][T22123] dvmrp1: entered allmulticast mode
[  395.579949][T22130] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5333'.
[  395.599487][T22130] x_tables: duplicate entry at hook 1
[  395.624126][T22130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.672212][T22132] xt_l2tp: invalid flags combination: c
[  396.118419][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'.
[  396.195713][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5341'.
[  396.323744][T22170] xt_l2tp: invalid flags combination: c
[  397.676240][T22195] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  397.682318][T22195] netlink: 'syz.1.5353': attribute type 9 has an invalid length.
[  397.685480][T22195] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.5353'.
[  397.780933][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'.
[  397.837416][T22204] dvmrp1: entered allmulticast mode
[  397.951286][T22208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.959142][T22208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5357'.
[  397.998879][T22207] tipc: Disabling bearer <eth:syzkaller0>
[  398.309956][T22215] ipt_ECN: cannot use operation on non-tcp rule
[  398.714942][T22238] netlink: 'syz.3.5365': attribute type 3 has an invalid length.
[  398.798243][T22243] netlink: 'syz.3.5367': attribute type 10 has an invalid length.
[  398.804553][T22242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  398.825364][T22243] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  398.874027][T22247] xt_l2tp: invalid flags combination: c
[  399.018258][T22260] x_tables: duplicate entry at hook 1
[  399.020606][T22260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.169766][T22273] netlink: 'syz.1.5376': attribute type 3 has an invalid length.
[  399.335160][T22283] xt_nat: multiple ranges no longer supported
[  399.433032][ T5222] Bluetooth: hci1: command 0x0405 tx timeout
[  399.528450][T22290] x_tables: duplicate entry at hook 1
[  399.530785][T22290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.214991][T22321] ipt_ECN: cannot use operation on non-tcp rule
[  400.305118][T22329] __nla_validate_parse: 83 callbacks suppressed
[  400.305131][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5397'.
[  400.318976][T22331] syzkaller1: entered promiscuous mode
[  400.324552][T22331] syzkaller1: entered allmulticast mode
[  400.495780][T22345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'.
[  400.533024][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5403'.
[  400.536064][T22347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5403'.
[  400.882078][T22375] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5410'.
[  400.892386][T22375] x_tables: duplicate entry at hook 1
[  400.895859][T22375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.104870][T22385] Cannot find set identified by id 0 to match
[  401.205085][T22389] batadv2: entered promiscuous mode
[  401.407479][T22392] No such timeout policy "syz1"
[  401.529244][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5422'.
[  402.252230][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'.
[  402.559178][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5432'.
[  402.564004][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5432'.
[  402.743788][T22458] ipt_ECN: cannot use operation on non-tcp rule
[  402.811758][T22461] netlink: 'syz.0.5439': attribute type 32 has an invalid length.
[  403.357044][T22477] netlink: 'syz.1.5443': attribute type 29 has an invalid length.
[  403.360727][T22477] netlink: 'syz.1.5443': attribute type 29 has an invalid length.
[  403.369133][T22477] netlink: 508 bytes leftover after parsing attributes in process `syz.1.5443'.
[  403.560234][T22486] ipt_ECN: cannot use operation on non-tcp rule
[  403.875725][T22509] netlink: 'syz.0.5453': attribute type 3 has an invalid length.
[  404.076571][T22518] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  404.937379][T22561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  404.975649][T22562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  405.045276][T22562] syzkaller0: entered promiscuous mode
[  405.047642][T22562] syzkaller0: entered allmulticast mode
[  405.051062][T22562] tipc: Resetting bearer <eth:syzkaller0>
[  405.063437][T22564] tap0: tun_chr_ioctl cmd 1074025675
[  405.065789][T22564] tap0: persist disabled
[  405.068247][T22570] netlink: 'syz.3.5475': attribute type 16 has an invalid length.
[  405.070747][T22570] netlink: 'syz.3.5475': attribute type 17 has an invalid length.
[  405.115820][T22570] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.129047][T22570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  405.171078][T22560] tipc: Resetting bearer <eth:syzkaller0>
[  406.388324][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 330 seconds
[  406.397420][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 330 seconds
[  406.402715][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 330 seconds
[  406.407205][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 330 seconds
[  407.849415][T22560] tipc: Disabling bearer <eth:syzkaller0>
[  407.919002][T22578] __nla_validate_parse: 11 callbacks suppressed
[  407.919018][T22578] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5477'.
[  407.935641][T22578] x_tables: duplicate entry at hook 1
[  407.960498][T22578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.202226][T22602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5479'.
[  408.358750][T22617] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5489'.
[  408.539804][T22629] dvmrp1: entered allmulticast mode
[  408.745824][T22639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5496'.
[  408.855961][T22641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5497'.
[  408.859663][T22641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5497'.
[  408.864223][T22643] sctp: [Deprecated]: syz.0.5497 (pid 22643) Use of int in max_burst socket option.
[  408.864223][T22643] Use struct sctp_assoc_value instead
[  408.994566][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5499'.
[  408.998082][T22650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5499'.
[  409.115147][T22662] xt_TPROXY: Can be used only with -p tcp or -p udp
[  409.183506][T22670] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5507'.
[  409.198804][T22670] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  409.255582][T22674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5510'.
[  409.800014][T22713] tipc: Enabling of bearer <ib:netdevsim0> rejected, failed to enable media
[  410.027499][T22720] tipc: Resetting bearer <eth:syzkaller0>
[  410.070364][T22722] x_tables: duplicate entry at hook 1
[  410.084671][T22724] Cannot find set identified by id 0 to match
[  410.086959][T22722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.749029][T22766] Cannot find set identified by id 0 to match
[  410.827791][T22773] x_tables: duplicate entry at hook 1
[  410.830638][T22773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.083372][T22790] netlink: 'syz.0.5550': attribute type 21 has an invalid length.
[  411.122744][T22790] syzkaller1: entered promiscuous mode
[  411.125005][T22790] syzkaller1: entered allmulticast mode
[  411.133785][T22790] netlink: 'syz.0.5550': attribute type 21 has an invalid length.
[  411.310445][T22801] sctp: [Deprecated]: syz.0.5552 (pid 22801) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.310445][T22801] Use struct sctp_sack_info instead
[  412.014596][T22817] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  412.021354][T22817] netlink: 'syz.1.5559': attribute type 11 has an invalid length.
[  412.117557][T22825] xt_l2tp: invalid flags combination: c
[  412.190332][T22829] tun0: tun_chr_ioctl cmd 2148553947
[  412.565873][T22857] x_tables: duplicate entry at hook 1
[  412.569243][T22857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.623952][T22859] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  412.725521][T22864] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  412.997927][T22879] netlink: 'syz.0.5576': attribute type 1 has an invalid length.
[  413.001897][T22879] __nla_validate_parse: 18 callbacks suppressed
[  413.001907][T22879] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5576'.
[  413.010920][T22881] xt_l2tp: invalid flags combination: c
[  413.160276][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5580'.
[  413.163677][T22888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5580'.
[  413.329016][T22896] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5582'.
[  413.337337][T22896] x_tables: duplicate entry at hook 1
[  413.344327][T22896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.639972][T22921] xt_l2tp: invalid flags combination: c
[  413.700429][T22926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5592'.
[  413.705735][T22926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5592'.
[  414.062587][ T5222] Bluetooth: hci0: command tx timeout
[  414.157212][T22957] netlink: 'syz.1.5603': attribute type 12 has an invalid length.
[  414.163991][T22957] xt_policy: too many policy elements
[  414.286890][T22960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5604'.
[  414.461404][   T95] page_pool_release_retry() stalled pool shutdown: id 69, 3329 inflight 241 sec
[  415.061416][T22990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.235910][T22999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5617'.
[  415.567809][T23016] xt_l2tp: invalid flags combination: c
[  415.645247][T23021] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  415.782667][T23028] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  415.845700][T23034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5626'.
[  416.140549][T23041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5628'.
[  416.229826][T23052] xt_l2tp: invalid flags combination: c
[  416.888502][T23076] can: request_module (can-proto-0) failed.
[  417.036795][T23081] xt_l2tp: invalid flags combination: c
[  417.157113][T23083] xt_CT: No such helper "syz0"
[  417.462492][T23097] set match dimension is over the limit!
[  417.613953][T23105] sctp: [Deprecated]: syz.3.5651 (pid 23105) Use of int in max_burst socket option.
[  417.613953][T23105] Use struct sctp_assoc_value instead
[  418.328501][T23109] __nla_validate_parse: 4 callbacks suppressed
[  418.328525][T23109] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.5653'.
[  418.544426][T23132] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5661'.
[  418.621067][T23135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5662'.
[  418.947568][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5667'.
[  419.151549][T23165] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5673'.
[  419.240402][T23174] netlink: 2640 bytes leftover after parsing attributes in process `syz.3.5676'.
[  419.248608][T23175] netlink: 2640 bytes leftover after parsing attributes in process `syz.3.5676'.
[  419.287002][T23181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5678'.
[  419.475753][T23199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5684'.
[  419.479556][T23199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5684'.
[  420.208564][T23232] lo speed is unknown, defaulting to 1000
[  420.235230][T23238] tc_dump_action: action bad kind
[  420.287382][T23240] Cannot find del_set index 4 as target
[  420.333269][T23242] set match dimension is over the limit!
[  420.798081][T23269] netlink: 'syz.0.5708': attribute type 83 has an invalid length.
[  420.946792][T23288] netlink: 'syz.3.5710': attribute type 4 has an invalid length.
[  421.020135][T23293] netlink: 'syz.3.5713': attribute type 1 has an invalid length.
[  421.289810][T23304] netlink: 'syz.3.5717': attribute type 1 has an invalid length.
[  421.293818][T23304] netlink: 'syz.3.5717': attribute type 11 has an invalid length.
[  422.630914][T23337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  422.854959][T23356] xt_l2tp: invalid flags combination: c
[  423.768791][T23395] lo speed is unknown, defaulting to 1000
[  424.053581][T23408] netlink: zone id is out of range
[  424.055492][T23408] netlink: zone id is out of range
[  424.478647][T23408] lo speed is unknown, defaulting to 1000
[  425.136080][T23437] __nla_validate_parse: 10 callbacks suppressed
[  425.136103][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5752'.
[  425.163994][T23437] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  425.177618][T23437] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  425.462573][T23446] netlink: 'syz.0.5754': attribute type 7 has an invalid length.
[  425.466088][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5754'.
[  425.516409][T23446] xt_TPROXY: Can be used only with -p tcp or -p udp
[  425.605182][T23450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'.
[  425.900319][T23464] netlink: 'syz.1.5760': attribute type 1 has an invalid length.
[  425.904248][T23464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5760'.
[  425.944875][T23464] xt_CT: No such helper "snmp"
[  425.983365][T23468] netlink: 'syz.0.5761': attribute type 30 has an invalid length.
[  425.987390][T23468] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  426.010888][T23468] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  426.018885][T23470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5762'.
[  426.027667][T23470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5762'.
[  426.128383][T23476] ipt_ECN: cannot use operation on non-tcp rule
[  426.250848][T23481] netlink: 'syz.0.5766': attribute type 1 has an invalid length.
[  426.259883][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'.
[  426.266592][T23482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5766'.
[  426.276490][T23482] netlink: 'syz.0.5766': attribute type 1 has an invalid length.
[  426.279960][T23482] netlink: 'syz.0.5766': attribute type 2 has an invalid length.
[  426.358921][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5767'.
[  426.370508][T23487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5768'.
[  426.383311][T23487] openvswitch: netlink: Actions may not be safe on all matching packets
[  426.976766][T23513] ip6t_srh: unknown srh match flags  4000
[  427.488602][T23533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.514834][T23533] syzkaller0: entered promiscuous mode
[  427.517174][T23533] syzkaller0: entered allmulticast mode
[  427.528772][T23532] tipc: Resetting bearer <eth:syzkaller0>
[  427.549516][T23532] tipc: Disabling bearer <eth:syzkaller0>
[  427.925788][T23544] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20002
[  428.356704][T23578] bond0: entered promiscuous mode
[  428.359520][T23578] bond_slave_0: entered promiscuous mode
[  428.366171][T23578] bond_slave_1: entered promiscuous mode
[  428.368777][T23578] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode
[  428.375900][T23578] batadv0: entered promiscuous mode
[  428.378615][T23578] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  428.389170][T23578] hsr0: entered allmulticast mode
[  428.390969][T23578] bond0: entered allmulticast mode
[  428.393011][T23578] bond_slave_0: entered allmulticast mode
[  428.394998][T23578] bond_slave_1: entered allmulticast mode
[  428.396948][T23578] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  428.400663][T23578] batadv0: entered allmulticast mode
[  428.407033][T23578] 8021q: adding VLAN 0 to HW filter on device hsr0
[  428.468509][T23584] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 80
[  428.578385][T23589] ipt_ECN: cannot use operation on non-tcp rule
[  428.695047][T23597] sctp: [Deprecated]: syz.3.5804 (pid 23597) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.695047][T23597] Use struct sctp_sack_info instead
[  429.094603][T23618] tipc: Resetting bearer <eth:syzkaller0>
[  429.605328][T23632] lo speed is unknown, defaulting to 1000
[  430.337172][T23647] __nla_validate_parse: 12 callbacks suppressed
[  430.337194][T23647] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5821'.
[  430.343207][T23649] ipt_ECN: cannot use operation on non-tcp rule
[  430.347852][T23647] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5821'.
[  430.607040][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5827'.
[  431.062206][T23692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  431.066238][T23692] syzkaller0: entered promiscuous mode
[  431.068877][T23692] syzkaller0: entered allmulticast mode
[  431.133097][T23692] tipc: Resetting bearer <eth:syzkaller0>
[  431.140370][T23689] tipc: Resetting bearer <eth:syzkaller0>
[  431.175574][T23689] tipc: Disabling bearer <eth:syzkaller0>
[  431.453447][T23719] xt_l2tp: invalid flags combination: c
[  431.624965][T23737] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5852'.
[  431.667040][T23742] xt_l2tp: invalid flags combination: c
[  431.812231][T23760] netlink: 'syz.0.5855': attribute type 16 has an invalid length.
[  431.815408][T23760] netlink: 'syz.0.5855': attribute type 17 has an invalid length.
[  431.839098][T23760] erspan0: entered promiscuous mode
[  431.848811][T23760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  431.940472][T23765] netlink: 'syz.3.5860': attribute type 4 has an invalid length.
[  431.956238][T23765] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  432.046211][T23776] ipt_ECN: cannot use operation on non-tcp rule
[  432.105116][   T33] audit: type=1107 audit(1752851900.597:2): pid=23779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='r=)oAz/wUKw3tqQW=}C#>L'
[  432.189107][T23784] netlink: 'syz.1.5866': attribute type 7 has an invalid length.
[  432.272235][T23789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5868'.
[  432.290327][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'.
[  432.377131][T23795] netlink: 204432 bytes leftover after parsing attributes in process `syz.3.5870'.
[  432.479309][T23805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5873'.
[  432.490470][T23805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5873'.
[  432.618063][T23813] netlink: 'syz.3.5875': attribute type 4 has an invalid length.
[  432.650542][T23813] netlink: 'syz.3.5875': attribute type 4 has an invalid length.
[  432.662909][T23814] 8021q: adding VLAN 0 to HW filter on device bond26
[  433.225987][T23835] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5884'.
[  434.107322][T23895] ipt_ECN: cannot use operation on non-tcp rule
[  434.274536][T23901] vlan4: entered promiscuous mode
[  434.276381][T23901] bridge0: entered promiscuous mode
[  434.354611][T23908] netlink: 'syz.3.5906': attribute type 1 has an invalid length.
[  434.449943][T23913] netlink: 'syz.3.5906': attribute type 1 has an invalid length.
[  434.457995][T23913] netlink: 'syz.3.5906': attribute type 2 has an invalid length.
[  434.500768][ T5899] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  434.651545][T23916] lo speed is unknown, defaulting to 1000
[  434.856941][T23918] delete_channel: no stack
[  435.004419][T23923] netlink: 'syz.0.5910': attribute type 2 has an invalid length.
[  435.020259][T23923] : entered promiscuous mode
[  435.461485][T23930] syzkaller1: entered promiscuous mode
[  435.463406][T23930] syzkaller1: entered allmulticast mode
[  435.489436][T23930] gretap0: left promiscuous mode
[  435.523299][T23932] __nla_validate_parse: 11 callbacks suppressed
[  435.523324][T23932] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5914'.
[  435.530988][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5914'.
[  435.558490][T23930] mac80211_hwsim hwsim27 wlan0: left promiscuous mode
[  435.568960][T23930] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.575565][T23930] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.578830][T23930] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.583019][T23930] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  435.586271][T23930] geneve2: left promiscuous mode
[  435.587999][T23930] geneve2: left allmulticast mode
[  435.605687][T23930] hsr0: left allmulticast mode
[  435.607390][T23930] bond0: left allmulticast mode
[  435.609125][T23930] bond_slave_0: left allmulticast mode
[  435.611022][T23930] bond_slave_1: left allmulticast mode
[  435.613027][T23930] mac80211_hwsim hwsim28 wlan1: left allmulticast mode
[  435.615332][T23930] batadv0: left allmulticast mode
[  435.629746][T23930] syzkaller1: left promiscuous mode
[  435.632041][T23930] syzkaller1: left allmulticast mode
[  436.466798][   T60] block nbd2: Possible stuck request ffff888020928000: control (read@0,1024B). Runtime 360 seconds
[  436.472998][   T60] block nbd2: Possible stuck request ffff888020928200: control (read@1024,1024B). Runtime 360 seconds
[  436.479850][   T60] block nbd2: Possible stuck request ffff888020928400: control (read@2048,1024B). Runtime 360 seconds
[  436.485980][   T60] block nbd2: Possible stuck request ffff888020928600: control (read@3072,1024B). Runtime 360 seconds
[  436.486413][   T33] audit: type=1800 audit(1752851904.967:3): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5920" name=33FFFF dev="tmpfs" ino=2893 res=0 errno=0
[  436.832727][T23968] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  436.870416][T23974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5927'.
[  436.881060][T23974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  437.456570][T23998] sch_fq: defrate 0 ignored.
[  437.460442][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5935'.
[  437.479300][T24000] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5936'.
[  437.510439][T24000] vlan4: entered promiscuous mode
[  437.518232][T24000] vlan4: entered allmulticast mode
[  437.520417][T24000] bridge0: entered allmulticast mode
[  437.622586][T24007] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5938'.
[  437.704814][T24010] ipt_ECN: cannot use operation on non-tcp rule
[  437.740694][T24012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5940'.
[  437.862475][T24018] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5942'.
[  438.050088][T24026] 4: renamed from veth0_to_batadv
[  438.165558][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5946'.
[  438.179729][T24029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5946'.
[  438.336339][T24031] validate_nla: 2 callbacks suppressed
[  438.336354][T24031] netlink: 'syz.1.5947': attribute type 1 has an invalid length.
[  438.387395][T24031] netlink: 'syz.1.5947': attribute type 12 has an invalid length.
[  438.395711][   T34] INFO: task udevd:5831 blocked for more than 143 seconds.
[  438.400006][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  438.406938][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  438.410203][   T34] task:udevd           state:D stack:21928 pid:5831  tgid:5831  ppid:1      task_flags:0x400140 flags:0x00004006
[  438.420451][T24031] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
[  438.423288][   T34] Call Trace:
[  438.424452][   T34]  <TASK>
[  438.425431][   T34]  __schedule+0x16f5/0x4d00
[  438.426927][   T34]  ? schedule+0x165/0x360
[  438.428357][   T34]  ? __pfx___schedule+0x10/0x10
[  438.429996][   T34]  ? schedule+0x91/0x360
[  438.442083][   T34]  schedule+0x165/0x360
[  438.443485][   T34]  io_schedule+0x80/0xd0
[  438.445111][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  438.447041][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  438.449152][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  438.457585][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  438.459676][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  438.461471][   T34]  do_read_cache_folio+0x1aa/0x590
[  438.463064][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  438.465619][   T34]  read_part_sector+0xb6/0x2b0
[  438.467142][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  438.468897][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  438.470627][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  438.475925][   T34]  bdev_disk_changed+0x75f/0x14b0
[  438.477700][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  438.479695][   T34]  ? wait_on_inode+0xc0/0x230
[  438.481338][   T34]  blkdev_get_whole+0x380/0x510
[  438.483083][   T34]  bdev_open+0x31e/0xd30
[  438.484925][   T34]  blkdev_open+0x3a8/0x510
[  438.486852][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  438.488555][   T34]  do_dentry_open+0xdf3/0x1970
[  438.490172][   T34]  vfs_open+0x3b/0x340
[  438.497341][   T34]  ? path_openat+0x2ecd/0x3830
[  438.499145][   T34]  path_openat+0x2ee5/0x3830
[  438.500640][   T34]  ? arch_stack_walk+0xfc/0x150
[  438.502382][   T34]  ? __pfx_path_openat+0x10/0x10
[  438.504069][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.506070][   T34]  do_filp_open+0x1fa/0x410
[  438.507658][   T34]  ? __lock_acquire+0xab9/0xd20
[  438.509418][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  438.511339][   T34]  ? _raw_spin_unlock+0x28/0x50
[  438.512985][   T34]  ? alloc_fd+0x64c/0x6c0
[  438.514717][   T34]  do_sys_openat2+0x121/0x1c0
[  438.516384][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  438.518114][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  438.519888][   T34]  ? rcu_is_watching+0x15/0xb0
[  438.521730][   T34]  __x64_sys_openat+0x138/0x170
[  438.523531][   T34]  do_syscall_64+0xfa/0x3b0
[  438.525370][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.527479][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  438.529734][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.531913][   T34] RIP: 0033:0x7f81d8b169a4
[  438.533620][   T34] RSP: 002b:00007ffc9a177cb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  438.536625][   T34] RAX: ffffffffffffffda RBX: 0000557ee7b07500 RCX: 00007f81d8b169a4
[  438.539519][   T34] RDX: 00000000000a0800 RSI: 0000557ee7b22fa0 RDI: 00000000ffffff9c
[  438.542556][   T34] RBP: 0000557ee7b22fa0 R08: 0000000000000001 R09: 7fffffffffffffff
[  438.545352][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  438.548123][   T34] R13: 0000557ee7b1dbd0 R14: 0000000000000001 R15: 0000557ee7b07910
[  438.550973][   T34]  </TASK>
[  438.552200][   T34] 
[  438.552200][   T34] Showing all locks held in the system:
[  438.555249][   T34] 1 lock held by khungtaskd/34:
[  438.556916][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  438.560260][   T34] 2 locks held by kworker/u13:0/56:
[  438.564151][   T34]  #0: ffff8880203bd148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.567825][   T34]  #1: ffffc900007efbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.571900][   T34] 2 locks held by getty/5663:
[  438.573601][   T34]  #0: ffff88810a3520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  438.577059][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  438.580428][   T34] 1 lock held by udevd/5831:
[  438.582145][   T34]  #0: ffff888020879358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  438.585907][   T34] 2 locks held by kworker/u8:2/5847:
[  438.587700][   T34]  #0: ffff888136639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  438.591078][   T34]  #1: ffff888136623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  438.595425][   T34] 2 locks held by kworker/u13:1/6519:
[  438.597363][   T34]  #0: ffff888020873148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  438.601565][   T34]  #1: ffffc900083dfbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  438.605574][   T34] 1 lock held by syz.0.5943/24024:
[  438.607287][   T34] 
[  438.608046][   T34] =============================================
[  438.608046][   T34] 
[  438.610781][   T34] NMI backtrace for cpu 0
[  438.610798][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  438.610813][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.610822][   T34] Call Trace:
[  438.610832][   T34]  <TASK>
[  438.610843][   T34]  dump_stack_lvl+0x189/0x250
[  438.610865][   T34]  ? __wake_up_klogd+0xd9/0x110
[  438.610880][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.610890][   T34]  ? __pfx__printk+0x10/0x10
[  438.610908][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  438.610923][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  438.610934][   T34]  ? _printk+0xcf/0x120
[  438.610947][   T34]  ? __pfx__printk+0x10/0x10
[  438.610959][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  438.610969][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  438.610982][   T34]  watchdog+0xfee/0x1030
[  438.610991][   T34]  ? watchdog+0x1de/0x1030
[  438.611003][   T34]  kthread+0x711/0x8a0
[  438.611017][   T34]  ? __pfx_watchdog+0x10/0x10
[  438.611025][   T34]  ? __pfx_kthread+0x10/0x10
[  438.611037][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.611051][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.611059][   T34]  ? __pfx_kthread+0x10/0x10
[  438.611071][   T34]  ret_from_fork+0x3fc/0x770
[  438.611099][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  438.611112][   T34]  ? __switch_to_asm+0x39/0x70
[  438.611123][   T34]  ? __switch_to_asm+0x33/0x70
[  438.611133][   T34]  ? __pfx_kthread+0x10/0x10
[  438.611144][   T34]  ret_from_fork_asm+0x1a/0x30
[  438.611162][   T34]  </TASK>
[  438.665803][   T34] Sending NMI from CPU 0 to CPUs 1:
[  438.667693][    C1] NMI backtrace for cpu 1
[  438.667716][    C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  438.667734][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.667744][    C1] Workqueue: bat_events batadv_nc_worker
[  438.667773][    C1] RIP: 0010:lock_release+0x89/0x3e0
[  438.667800][    C1] Code: b7 03 0e 00 0f 84 44 02 00 00 65 8b 05 90 90 01 11 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 a0 9f 92 41 83 bf ec 0a 00 00 00 <0f> 85 1e 02 00 00 49 81 3e 00 53 63 93 0f 84 11 02 00 00 48 c7 44
[  438.667813][    C1] RSP: 0018:ffffc900000f7908 EFLAGS: 00000246
[  438.667824][    C1] RAX: 0000000000000000 RBX: ffff8880327b8380 RCX: 4465a2dc013aaa00
[  438.667833][    C1] RDX: 0000000000000000 RSI: ffffffff8be28c20 RDI: ffffffff8be28be0
[  438.667843][    C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  438.667852][    C1] R10: dffffc0000000000 R11: fffff5200001ef20 R12: ffff888025b47070
[  438.667862][    C1] R13: ffffffff8b3b9198 R14: ffff8880327b8398 R15: ffff88801c2f5640
[  438.667873][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  438.667884][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  438.667892][    C1] CR2: 00007f3c2c9802d8 CR3: 000000003da46000 CR4: 00000000000006f0
[  438.667927][    C1] Call Trace:
[  438.667935][    C1]  <TASK>
[  438.667948][    C1]  ? batadv_nc_purge_paths+0x318/0x3b0
[  438.667962][    C1]  _raw_spin_unlock_bh+0x1b/0x40
[  438.667984][    C1]  ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10
[  438.667997][    C1]  batadv_nc_purge_paths+0x318/0x3b0
[  438.668016][    C1]  batadv_nc_worker+0x369/0x610
[  438.668035][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  438.668051][    C1]  process_scheduled_works+0xae1/0x17b0
[  438.668079][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  438.668101][    C1]  worker_thread+0x8a0/0xda0
[  438.668129][    C1]  kthread+0x711/0x8a0
[  438.668148][    C1]  ? __pfx_worker_thread+0x10/0x10
[  438.668162][    C1]  ? __pfx_kthread+0x10/0x10
[  438.668179][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.668198][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.668211][    C1]  ? __pfx_kthread+0x10/0x10
[  438.668268][    C1]  ret_from_fork+0x3fc/0x770
[  438.668285][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  438.668301][    C1]  ? __switch_to_asm+0x39/0x70
[  438.668318][    C1]  ? __switch_to_asm+0x33/0x70
[  438.668333][    C1]  ? __pfx_kthread+0x10/0x10
[  438.668363][    C1]  ret_from_fork_asm+0x1a/0x30
[  438.668385][    C1]  </TASK>
[  438.759715][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  438.762079][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  438.766425][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.770136][   T34] Call Trace:
[  438.771604][   T34]  <TASK>
[  438.772884][   T34]  dump_stack_lvl+0x99/0x250
[  438.774749][   T34]  ? __asan_memcpy+0x40/0x70
[  438.776460][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.778256][   T34]  ? __pfx__printk+0x10/0x10
[  438.779748][   T34]  panic+0x2db/0x790
[  438.781091][   T34]  ? __pfx_panic+0x10/0x10
[  438.782704][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  438.785014][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  438.786856][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  438.788917][   T34]  watchdog+0x102d/0x1030
[  438.790403][   T34]  ? watchdog+0x1de/0x1030
[  438.791908][   T34]  kthread+0x711/0x8a0
[  438.793270][   T34]  ? __pfx_watchdog+0x10/0x10
[  438.794851][   T34]  ? __pfx_kthread+0x10/0x10
[  438.796495][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  438.798297][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.800068][   T34]  ? __pfx_kthread+0x10/0x10
[  438.801784][   T34]  ret_from_fork+0x3fc/0x770
[  438.803536][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  438.805610][   T34]  ? __switch_to_asm+0x39/0x70
[  438.807588][   T34]  ? __switch_to_asm+0x33/0x70
[  438.809245][   T34]  ? __pfx_kthread+0x10/0x10
[  438.810803][   T34]  ret_from_fork_asm+0x1a/0x30
[  438.812368][   T34]  </TASK>
[  438.814130][   T34] Kernel Offset: disabled
[  438.815628][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:18:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108740237 R9 =1ffff110210e8046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8c9 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559cc6e367e8 CR3=0000000123938000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555565479de8 0000555565479c60 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00005555654774a0 XMM05=01209010000e8004 0100000608060601
XMM06=60b62692bed5b1e6 b5ab8e08000ee003 XMM07=0010000ed0030010 000ec0030210000e
XMM08=b003019010000d90 031408000c88030e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8e8db4e0 RCX=0000000000080000 RDX=0000000000000000
RSI=0000000000000001 RDI=ffffffff8e8db4e0 RBP=0000000000000000 RSP=ffffc900046379d0
R8 =0000000000000000 R9 =ffffffff820ab750 R10=ffffc90004637aa0 R11=fffff520008c6f5b
R12=dffffc0000000000 R13=1ffffffff1d1b69c R14=0000000000000001 R15=ffff8881227b4f64
RIP=ffffffff84f3bd64 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0730df76c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3ae754 CR3=000000003da46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0730186478 00007f0730186450 XMM03=00007f0730186488 00007f0730186480
XMM04=00007f0730ced100 00007f0730186440 XMM05=00007f0730186458 00007f07301864a0
XMM06=00007f0730186498 00007f0730186490 XMM07=00007f0730186488 00007f0730186480
XMM08=61d106d953759b26 ff8846d1b3a02897 XMM09=0000000000000000 00007f0730011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
