last executing test programs:

1m25.23054215s ago: executing program 1 (id=361):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x0)
pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f00000015c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @tail_call], 0x0, 0x7fffffff}, 0x94)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
close(r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0)

1m25.150554584s ago: executing program 2 (id=362):
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd)

1m25.149941891s ago: executing program 0 (id=363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x43c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x200009, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x1, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81)
recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff"], 0x70}}, 0x0)

1m24.811855008s ago: executing program 0 (id=364):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0x2}, {0x13}}}, 0x24}}, 0x0)

1m24.212091128s ago: executing program 2 (id=365):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}})

1m24.0427542s ago: executing program 2 (id=366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f0000000340)=""/203}, 0x20)

1m23.882601622s ago: executing program 2 (id=367):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x130)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x6, 0x0, 0x0)

1m23.690620258s ago: executing program 2 (id=368):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)

1m23.442952037s ago: executing program 1 (id=369):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

1m23.311986336s ago: executing program 1 (id=370):
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x6, 0xf989, "140d"}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0)

1m23.248568321s ago: executing program 1 (id=371):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x7800, 0x40000001, 0x6, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x862, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000)

1m23.248330164s ago: executing program 0 (id=372):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

1m23.147183424s ago: executing program 0 (id=373):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r0, 0x81)
syz_emit_ethernet(0x8d, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a8400005706fffe8000000000000000000000000000bbff0200000000000000000000000000014e214e22", @ANYRES32=0x41424344, @ANYRES64], 0x0)

1m23.146652652s ago: executing program 1 (id=374):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1m22.909863759s ago: executing program 0 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0)

1m21.174691876s ago: executing program 1 (id=376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

1m19.423504295s ago: executing program 0 (id=377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000075258f9f730892"], 0x20)

1m2.600221376s ago: executing program 2 (id=378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)

52.454861148s ago: executing program 32 (id=376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

23.899493456s ago: executing program 33 (id=377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f00000075258f9f730892"], 0x20)

0s ago: executing program 34 (id=378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63252' (ED25519) to the list of known hosts.
syzkaller login: [   56.520398][ T5814] cgroup: Unknown subsys name 'net'
[   56.673122][ T5814] cgroup: Unknown subsys name 'cpuset'
[   56.677240][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.455294][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.670839][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.674240][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.676876][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.680228][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.682754][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.785125][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.790804][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.793731][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.797686][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.800902][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.803583][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.806138][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.833042][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.839336][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.840735][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   63.842860][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.931716][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.935572][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.939483][ T5829] bridge_slave_0: entered allmulticast mode
[   63.943494][ T5829] bridge_slave_0: entered promiscuous mode
[   63.949999][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.952790][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.955672][ T5829] bridge_slave_1: entered allmulticast mode
[   63.959634][ T5829] bridge_slave_1: entered promiscuous mode
[   64.049533][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.064775][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.106046][ T5829] team0: Port device team_slave_0 added
[   64.112272][ T5829] team0: Port device team_slave_1 added
[   64.161547][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.163739][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.172487][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.195213][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.198257][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.206049][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.292406][ T5829] hsr_slave_0: entered promiscuous mode
[   64.294892][ T5829] hsr_slave_1: entered promiscuous mode
[   64.304150][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.384399][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   64.441087][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.443520][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.445856][ T5836] bridge_slave_0: entered allmulticast mode
[   64.448775][ T5836] bridge_slave_0: entered promiscuous mode
[   64.452436][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.454922][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.457556][ T5836] bridge_slave_1: entered allmulticast mode
[   64.461036][ T5836] bridge_slave_1: entered promiscuous mode
[   64.550942][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.579571][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.583632][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.586558][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.589673][ T5835] bridge_slave_0: entered allmulticast mode
[   64.593371][ T5835] bridge_slave_0: entered promiscuous mode
[   64.629672][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.633147][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.636032][ T5835] bridge_slave_1: entered allmulticast mode
[   64.640719][ T5835] bridge_slave_1: entered promiscuous mode
[   64.682406][ T5836] team0: Port device team_slave_0 added
[   64.703555][ T5836] team0: Port device team_slave_1 added
[   64.712205][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.750475][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.754298][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.757287][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.769670][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.776352][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.779942][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.791734][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.853431][ T5835] team0: Port device team_slave_0 added
[   64.859552][ T5835] team0: Port device team_slave_1 added
[   64.931729][ T5836] hsr_slave_0: entered promiscuous mode
[   64.934923][ T5836] hsr_slave_1: entered promiscuous mode
[   64.937902][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.941202][ T5836] Cannot create hsr debugfs directory
[   64.945516][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.952962][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.963450][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.971166][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.981949][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.984785][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.995553][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.021422][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.035690][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.070158][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.149020][ T5835] hsr_slave_0: entered promiscuous mode
[   65.152408][ T5835] hsr_slave_1: entered promiscuous mode
[   65.155402][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.159086][ T5835] Cannot create hsr debugfs directory
[   65.389798][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.399458][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.411081][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.429222][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.474074][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.482364][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.500411][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.506411][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.525002][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   65.532427][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.546861][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.550151][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.577691][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.580836][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.699595][ T5839] Bluetooth: hci0: command tx timeout
[   65.727321][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.746307][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.754456][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   65.772945][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.775542][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.783349][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.786118][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.803606][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.843491][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.846350][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.859830][ T5839] Bluetooth: hci2: command tx timeout
[   65.859875][ T5224] Bluetooth: hci1: command tx timeout
[   65.882890][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.885791][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.898277][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.979861][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.034937][ T5829] veth0_vlan: entered promiscuous mode
[   66.061583][ T5829] veth1_vlan: entered promiscuous mode
[   66.124452][ T5829] veth0_macvtap: entered promiscuous mode
[   66.143827][ T5829] veth1_macvtap: entered promiscuous mode
[   66.175788][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.191521][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.215156][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.231770][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.235495][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.240601][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.243847][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.263310][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.282224][ T5836] veth0_vlan: entered promiscuous mode
[   66.304907][ T5836] veth1_vlan: entered promiscuous mode
[   66.373662][ T5835] veth0_vlan: entered promiscuous mode
[   66.411818][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.413022][ T5836] veth0_macvtap: entered promiscuous mode
[   66.415040][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.422155][ T5835] veth1_vlan: entered promiscuous mode
[   66.432276][ T5836] veth1_macvtap: entered promiscuous mode
[   66.473252][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.485065][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.502329][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.505073][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.509901][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.510359][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.515748][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.518021][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.550234][ T5835] veth0_macvtap: entered promiscuous mode
[   66.582664][ T5835] veth1_macvtap: entered promiscuous mode
[   66.624508][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.628516][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.649232][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.651991][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.668569][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.730075][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.733493][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.737034][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.756784][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.768738][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.771311][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.855396][ T5900] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.922085][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   66.964584][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.967624][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.971885][ T5903] bridge_slave_1: left allmulticast mode
[   66.973720][ T5903] bridge_slave_1: left promiscuous mode
[   66.976342][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.013290][ T5903] bridge_slave_0: left allmulticast mode
[   67.015792][ T5903] bridge_slave_0: left promiscuous mode
[   67.030053][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.215827][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.229904][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.347055][ T5917] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10'.
[   67.472929][ T5925] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.691382][ T5941] Illegal XDP return value 5941 on prog  (id 4) dev N/A, expect packet loss!
[   67.778380][ T5224] Bluetooth: hci0: command tx timeout
[   67.826320][ T5948] erspan0: entered promiscuous mode
[   67.906924][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'.
[   67.939333][ T5224] Bluetooth: hci2: command tx timeout
[   67.941105][ T5224] Bluetooth: hci1: command tx timeout
[   68.014681][ T5964] netlink: 272 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.164308][ T5972] netlink: 'syz.2.33': attribute type 3 has an invalid length.
[   68.430324][ T5986] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.814969][ T6018] netlink: 212 bytes leftover after parsing attributes in process `syz.0.52'.
[   68.822356][ T6018] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   69.045908][ T6028] netlink: 92 bytes leftover after parsing attributes in process `syz.0.56'.
[   69.194819][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   69.202741][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   69.206189][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   69.416144][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.63'.
[   69.858332][ T5839] Bluetooth: hci0: command tx timeout
[   69.907700][ T6062] netlink: 'syz.1.71': attribute type 4 has an invalid length.
[   70.018135][ T5839] Bluetooth: hci1: command tx timeout
[   70.018214][ T5224] Bluetooth: hci2: command tx timeout
[   70.213296][ T6086] lo speed is unknown, defaulting to 1000
[   70.216042][ T6086] lo speed is unknown, defaulting to 1000
[   70.222322][ T6086] lo speed is unknown, defaulting to 1000
[   70.241281][ T6086] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.268587][ T6086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.313323][ T6086] lo speed is unknown, defaulting to 1000
[   70.320214][ T6086] lo speed is unknown, defaulting to 1000
[   70.324191][ T6086] lo speed is unknown, defaulting to 1000
[   70.736307][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.813507][ T6120] tipc: Started in network mode
[   70.815820][ T6120] tipc: Node identity b68e36557dcd, cluster identity 4711
[   70.822810][ T6120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.825815][ T6120] syzkaller0: entered promiscuous mode
[   70.828136][ T6120] syzkaller0: entered allmulticast mode
[   70.859955][ T6120] tipc: Resetting bearer <eth:syzkaller0>
[   70.864249][ T6119] tipc: Resetting bearer <eth:syzkaller0>
[   70.881921][ T6119] tipc: Disabling bearer <eth:syzkaller0>
[   70.992375][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.997181][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.483712][ T6162] IPVS: stopping backup sync thread 6165 ...
[   71.531228][ T6168] netlink: 'syz.0.121': attribute type 13 has an invalid length.
[   71.533736][ T6168] netlink: 'syz.0.121': attribute type 17 has an invalid length.
[   71.536293][ T6168] netlink: 'syz.0.121': attribute type 27 has an invalid length.
[   71.585588][ T6168] lo speed is unknown, defaulting to 1000
[   71.678449][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.760063][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.816249][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.938412][ T5224] Bluetooth: hci0: command tx timeout
[   72.098704][ T5224] Bluetooth: hci1: command tx timeout
[   72.098853][ T5839] Bluetooth: hci2: command tx timeout
[   72.435321][ T6191] __nla_validate_parse: 1 callbacks suppressed
[   72.435339][ T6191] netlink: 788 bytes leftover after parsing attributes in process `syz.1.128'.
[   72.925194][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[   72.932902][ T6213] syz_tun: entered promiscuous mode
[   72.940572][ T6213] macvtap1: entered promiscuous mode
[   72.946202][ T6213] macvtap1: entered allmulticast mode
[   72.950591][ T6213] syz_tun: entered allmulticast mode
[   72.957634][ T6213] syz_tun: left allmulticast mode
[   72.959988][ T6213] syz_tun: left promiscuous mode
[   73.001847][ T6215] Bluetooth: MGMT ver 1.23
[   73.246560][ T6229] netlink: 'syz.1.146': attribute type 5 has an invalid length.
[   73.256401][ T6231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.147'.
[   73.387703][ T6241] IPv6: addrconf: prefix option has invalid lifetime
[   74.116341][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[   74.268232][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'.
[   74.322265][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.337660][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.357331][ T6307] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.360518][ T6307] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.363358][ T6307] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.366611][ T6307] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.385153][ T6307] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.388287][ T6307] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.391309][ T6307] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.394248][ T6307] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.812660][ T6328] bridge_slave_0: left allmulticast mode
[   74.814665][ T6328] bridge_slave_0: left promiscuous mode
[   74.824313][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.832118][ T6328] bridge_slave_1: left allmulticast mode
[   74.833883][ T6328] bridge_slave_1: left promiscuous mode
[   74.836346][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.844092][ T6328] bond0: (slave bond_slave_0): Releasing backup interface
[   74.853733][ T6328] bond0: (slave bond_slave_1): Releasing backup interface
[   74.874253][ T6328] team0: Port device team_slave_0 removed
[   74.889037][ T6328] team0: Port device team_slave_1 removed
[   74.891805][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.894109][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.900556][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.902948][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.911818][ T5867] lo speed is unknown, defaulting to 1000
[   74.911847][ T6334] netlink: 'syz.1.189': attribute type 10 has an invalid length.
[   75.357497][ T6348] macvtap2: entered allmulticast mode
[   75.359972][ T6348] veth0_macvtap: entered allmulticast mode
[   75.399197][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.402240][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.405776][ T6350] netlink: 'syz.1.197': attribute type 1 has an invalid length.
[   75.418880][ T6350] netlink: 10 bytes leftover after parsing attributes in process `syz.1.197'.
[   75.460321][ T6350] nbd: socks must be embedded in a SOCK_ITEM attr
[   75.462654][ T6350] block nbd0: shutting down sockets
[   75.490294][ T6355] netlink: 'syz.2.200': attribute type 2 has an invalid length.
[   75.492891][ T6356] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   76.685109][ T6418] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   77.331954][ T6461] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   77.548427][ T6483] __nla_validate_parse: 4 callbacks suppressed
[   77.548438][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'.
[   77.677092][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'.
[   77.680715][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'.
[   78.062039][ T6520] syz.2.267 uses obsolete (PF_INET,SOCK_PACKET)
[   78.199765][ T6526] syzkaller0: entered promiscuous mode
[   78.209070][ T6526] syzkaller0: entered allmulticast mode
[   78.260394][ T6533] netlink: 47 bytes leftover after parsing attributes in process `syz.1.270'.
[   79.465874][ T6556] netlink: 96 bytes leftover after parsing attributes in process `syz.2.276'.
[   79.652332][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'.
[   79.688438][ T6574] tipc: Started in network mode
[   79.690763][ T6574] tipc: Node identity 7e6ca45bc1ea, cluster identity 4711
[   79.693488][ T6574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.700211][ T6574] syzkaller0: entered promiscuous mode
[   79.702158][ T6574] syzkaller0: entered allmulticast mode
[   79.730310][ T6574] tipc: Resetting bearer <eth:syzkaller0>
[   79.735777][ T6573] tipc: Resetting bearer <eth:syzkaller0>
[   79.754534][ T6573] tipc: Disabling bearer <eth:syzkaller0>
[   80.165274][ T6615] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.303'.
[   80.176591][ T6615] netlink: zone id is out of range
[   80.182686][ T6615] netlink: get zone limit has 8 unknown bytes
[   80.263181][ T6621] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.305'.
[   80.861481][ T6657] xt_CT: No such helper "netbios-ns"
[   81.245869][ T6687] lo speed is unknown, defaulting to 1000
[   81.331439][ T6692] netlink: 'syz.2.339': attribute type 11 has an invalid length.
[   81.535940][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[   81.549276][ T6687] gre0: entered promiscuous mode
[   82.055933][ T6730] netlink: 68 bytes leftover after parsing attributes in process `syz.2.355'.
[   82.625060][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[   82.898986][ T6757] lo: entered promiscuous mode
[   82.903332][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'.
[   83.647677][ T6756] lo: left promiscuous mode
[   84.526503][ T6782] netlink: 'syz.0.375': attribute type 6 has an invalid length.
[   86.876396][   T47] cfg80211: failed to load regulatory.db
[   91.076910][    C1] sched: DL replenish lagged too much
[  132.809493][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.822052][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.338254][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.349197][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  237.596358][ T6787] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  240.846644][ T6787] CPU: 0 UID: 0 PID: 6787 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  240.846671][ T6787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.846682][ T6787] Call Trace:
[  240.846689][ T6787]  <TASK>
[  240.846698][ T6787]  dump_stack_lvl+0x189/0x250
[  240.846726][ T6787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.846743][ T6787]  ? __pfx__printk+0x10/0x10
[  240.846763][ T6787]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.846784][ T6787]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  240.846804][ T6787]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  240.846825][ T6787]  warn_alloc+0x214/0x310
[  240.846851][ T6787]  ? __pfx_warn_alloc+0x10/0x10
[  240.846877][ T6787]  ? __get_vm_area_node+0x28f/0x300
[  240.846895][ T6787]  ? kcov_ioctl+0x55/0x640
[  240.846919][ T6787]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  240.846961][ T6787]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  240.846982][ T6787]  ? __pfx_kcov_ioctl+0x10/0x10
[  240.847030][ T6787]  vmalloc_user_noprof+0xad/0xf0
[  240.847045][ T6787]  ? kcov_ioctl+0x55/0x640
[  240.847060][ T6787]  kcov_ioctl+0x55/0x640
[  240.847078][ T6787]  ? bpf_lsm_file_ioctl+0x9/0x20
[  240.847093][ T6787]  ? __pfx_kcov_ioctl+0x10/0x10
[  240.847112][ T6787]  __se_sys_ioctl+0xfc/0x170
[  240.847127][ T6787]  do_syscall_64+0xfa/0x3b0
[  240.847140][ T6787]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.847162][ T6787]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.847176][ T6787]  ? exc_page_fault+0x9f/0xf0
[  240.847197][ T6787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.847212][ T6787] RIP: 0033:0x7f6fc398e52b
[  240.847227][ T6787] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  240.847240][ T6787] RSP: 002b:00007ffc63029a70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  240.847257][ T6787] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f6fc398e52b
[  240.847267][ T6787] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc
[  240.847276][ T6787] RBP: 00007f6fc3bb63b8 R08: 00000000000000da R09: 0000000000000000
[  240.847285][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.847294][ T6787] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  240.847315][ T6787]  </TASK>
[  240.847321][ T6787] Mem-Info:
[  242.663173][ T6787] active_anon:5047 inactive_anon:0 isolated_anon:0
[  242.663173][ T6787]  active_file:906 inactive_file:38252 isolated_file:0
[  242.663173][ T6787]  unevictable:1768 dirty:205 writeback:3
[  242.663173][ T6787]  slab_reclaimable:8992 slab_unreclaimable:260135
[  242.663173][ T6787]  mapped:7788 shmem:2435 pagetables:740
[  242.663173][ T6787]  sec_pagetables:0 bounce:0
[  242.663173][ T6787]  kernel_misc_reclaimable:0
[  242.663173][ T6787]  free:118830 free_pcp:19042 free_cma:0
[  244.481270][ T6787] Node 0 active_anon:10908kB inactive_anon:0kB active_file:2076kB inactive_file:23972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:18732kB dirty:360kB writeback:48kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7248kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  245.244457][ T6787] Node 1 active_anon:9376kB inactive_anon:0kB active_file:1548kB inactive_file:129036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12420kB dirty:368kB writeback:24kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4272kB pagetables:1196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  246.071195][ T6787] Node 0 DMA free:4072kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:208kB free_cma:0kB
[  246.756797][ T6787] lowmem_reserve[]: 0 812 812 812 812
[  246.773130][ T6787] Node 0 DMA32 free:82592kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11780kB inactive_anon:0kB active_file:2076kB inactive_file:23976kB unevictable:3536kB writepending:408kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:49440kB local_pcp:29536kB free_cma:0kB
[  247.423094][ T6787] lowmem_reserve[]: 0 0 0 0 0
[  247.424996][ T6787] Node 1 DMA32 free:352208kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:4072kB local_pcp:88kB free_cma:0kB
[  248.833612][ T6787] lowmem_reserve[]: 0 0 854 854 854
[  248.835387][ T6787] Node 1 Normal free:87728kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9396kB inactive_anon:0kB active_file:1548kB inactive_file:129036kB unevictable:3536kB writepending:392kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37624kB local_pcp:21208kB free_cma:0kB
[  249.873830][ T6787] lowmem_reserve[]: 0 0 0 0 0
[  249.875604][ T6787] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 4*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 4088kB
[  250.002801][ T6787] Node 0 DMA32: 296*4kB (UM) 527*8kB (UME) 879*16kB (UME) 722*32kB (UME) 686*64kB (UME) 167*128kB (UM) 8*256kB (UM) 11*512kB (UME) 3*1024kB (UM) 3*2048kB (M) 4*4096kB (M) = 141128kB
[  250.020992][ T6787] Node 1 DMA32: 18*4kB (UM) 12*8kB (UM) 6*16kB (UM) 6*32kB (UM) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 83*4096kB (M) = 352328kB
[  250.029683][ T6787] Node 1 Normal: 1177*4kB (UM) 1144*8kB (UME) 957*16kB (UME) 593*32kB (UME) 309*64kB (UME) 70*128kB (UME) 9*256kB (UM) 8*512kB (M) 10*1024kB (UME) 5*2048kB (ME) 2*4096kB (M) = 111956kB
[  250.779889][ T6787] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.782664][ T6787] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.785392][ T6787] 41598 total pagecache pages
[  250.786786][ T6787] 0 pages in swap cache
[  250.914648][ T6787] Free swap  = 124996kB
[  250.915931][ T6787] Total swap = 124996kB
[  250.917178][ T6787] 786301 pages RAM
[  251.261508][ T6787] 0 pages HighMem/MovableOnly
[  251.263140][ T6787] 241085 pages reserved
[  251.264572][ T6787] 0 pages cma reserved
[  255.510114][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.521038][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.021793][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.030253][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  345.162424][   T34] INFO: task syz-executor:5835 blocked for more than 145 seconds.
[  345.164787][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  345.190970][   T34]       Blocked by coredump.
[  345.192445][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  345.194975][   T34] task:syz-executor    state:D stack:21528 pid:5835  tgid:5835  ppid:1      task_flags:0x40054c flags:0x00004006
[  346.662048][   T34] Call Trace:
[  346.663192][   T34]  <TASK>
[  346.664181][   T34]  __schedule+0x16f5/0x4d00
[  346.665594][   T34]  ? __lock_acquire+0xab9/0xd20
[  346.667282][   T34]  ? schedule+0x165/0x360
[  352.674888][   T34]  ? __pfx___schedule+0x10/0x10
[  352.676821][   T34]  ? schedule+0x91/0x360
[  352.749567][   T34]  schedule+0x165/0x360
[  352.751251][   T34]  schedule_preempt_disabled+0x13/0x30
[  352.753329][   T34]  __mutex_lock+0x724/0xe80
[  352.755064][   T34]  ? __mutex_lock+0x51b/0xe80
[  352.756896][   T34]  ? tun_chr_close+0x3e/0x1c0
[  352.830749][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  352.832794][   T34]  ? __pfx_tun_chr_close+0x10/0x10
[  352.834767][   T34]  tun_chr_close+0x3e/0x1c0
[  352.836555][   T34]  __fput+0x44c/0xa70
[  352.898159][   T34]  task_work_run+0x1d4/0x260
[  352.907259][   T34]  ? __pfx_task_work_run+0x10/0x10
[  352.909657][   T34]  ? kmem_cache_free+0x18f/0x400
[  352.911600][   T34]  do_exit+0x6b5/0x22e0
[  352.913223][   T34]  ? do_raw_spin_lock+0x121/0x290
[  352.915158][   T34]  ? __pfx_do_exit+0x10/0x10
[  352.916927][   T34]  do_group_exit+0x21c/0x2d0
[  352.943423][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.945378][   T34]  get_signal+0x1286/0x1340
[  352.947207][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  352.977899][   T34]  ? do_sock_setsockopt+0x267/0x3e0
[  352.979697][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  352.982073][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  352.984185][   T34]  exit_to_user_mode_loop+0x75/0x110
[  352.986174][   T34]  do_syscall_64+0x2bd/0x3b0
[  353.046362][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.068583][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.071005][   T34]  ? exc_page_fault+0x9f/0xf0
[  353.072877][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.075113][   T34] RIP: 0033:0x7f84be39081a
[  353.076825][   T34] RSP: 002b:00007ffdf857cdb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  353.128463][   T34] RAX: 0000000000000000 RBX: 00007ffdf857ce40 RCX: 00007f84be39081a
[  353.131596][   T34] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  353.134694][   T34] RBP: 0000000000000003 R08: 0000000000000558 R09: ffffffffffffff00
[  353.178790][   T34] R10: 00007f84be581a60 R11: 0000000000000206 R12: 00007f84be581a00
[  353.181893][   T34] R13: 00007ffdf857cddc R14: 0000000000000000 R15: 00007f84be582e40
[  353.185007][   T34]  </TASK>
[  353.186304][   T34] 
[  353.186304][   T34] Showing all locks held in the system:
[  353.237871][   T34] 3 locks held by kworker/u8:1/13:
[  353.239915][   T34] 3 locks held by kworker/1:0/24:
[  353.241876][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  353.246662][   T34]  #1: ffffc900001c7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  353.367023][   T34]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00
[  353.408202][   T34] 1 lock held by khungtaskd/34:
[  353.410150][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  353.437851][   T34] 1 lock held by kcompactd0/38:
[  353.439901][   T34] 1 lock held by klogd/5269:
[  353.452247][   T34] 2 locks held by udevd/5280:
[  353.454195][   T34] 1 lock held by dhcpcd/5576:
[  353.489292][   T34] 2 locks held by getty/5655:
[  353.491123][   T34]  #0: ffff888021af90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  353.494988][   T34]  #1: ffffc9000292b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  353.558238][   T34] 2 locks held by syz-executor/5814:
[  353.560405][   T34] 1 lock held by syz-executor/5829:
[  353.562453][   T34]  #0: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  353.566258][   T34] 2 locks held by udevd/5830:
[  353.614423][   T34] 1 lock held by syz-executor/5836:
[  353.616492][   T34]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  353.638143][   T34] 3 locks held by kworker/0:3/5867:
[  353.640221][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  353.644438][   T34]  #1: ffffc900032a7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  353.687850][   T34]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  353.691926][   T34] 2 locks held by udevd/6501:
[  353.693760][   T34] 3 locks held by kworker/u9:7/6784:
[  353.695812][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  353.737814][   T34]  #1: ffffc90002bf7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  353.742041][   T34]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  353.745476][   T34] 3 locks held by kworker/1:8/6792:
[  353.747434][   T34]  #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  353.837915][   T34]  #1: ffffc900033e7bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  353.841998][   T34]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50
[  353.845547][   T34] 1 lock held by syz-executor/6796:
[  353.847550][   T34] 2 locks held by syz-executor/6798:
[  353.887821][   T34] 3 locks held by syz-executor/6801:
[  353.904844][   T34] 
[  353.905679][   T34] =============================================
[  353.905679][   T34] 
[  353.917795][   T34] NMI backtrace for cpu 0
[  353.917808][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  353.917819][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.917823][   T34] Call Trace:
[  353.917827][   T34]  <TASK>
[  353.917831][   T34]  dump_stack_lvl+0x189/0x250
[  353.917847][   T34]  ? __wake_up_klogd+0xd9/0x110
[  353.917860][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.917868][   T34]  ? __pfx__printk+0x10/0x10
[  353.917884][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  353.917898][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  353.917906][   T34]  ? _printk+0xcf/0x120
[  353.917918][   T34]  ? __pfx__printk+0x10/0x10
[  353.917928][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  353.917937][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  353.917948][   T34]  watchdog+0xfee/0x1030
[  353.917958][   T34]  ? watchdog+0x1de/0x1030
[  353.917968][   T34]  kthread+0x711/0x8a0
[  353.917981][   T34]  ? __pfx_watchdog+0x10/0x10
[  353.917987][   T34]  ? __pfx_kthread+0x10/0x10
[  353.917998][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.918010][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.918020][   T34]  ? __pfx_kthread+0x10/0x10
[  353.918031][   T34]  ret_from_fork+0x3fc/0x770
[  353.918042][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  353.918052][   T34]  ? __switch_to_asm+0x39/0x70
[  353.918061][   T34]  ? __switch_to_asm+0x33/0x70
[  353.918069][   T34]  ? __pfx_kthread+0x10/0x10
[  353.918080][   T34]  ret_from_fork_asm+0x1a/0x30
[  353.918095][   T34]  </TASK>
[  353.918098][   T34] Sending NMI from CPU 0 to CPUs 1:
[  353.967855][    C1] NMI backtrace for cpu 1
[  353.967881][    C1] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  353.967898][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  353.967908][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  353.967935][    C1] RIP: 0010:__queue_work+0x542/0xfe0
[  353.967954][    C1] Code: 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 32 df 98 00 44 89 6c 24 04 4d 03 37 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 14 df 98 00 4d 8b 2e e8 ac 65 e4 09 89 c3 31 ff
[  353.967967][    C1] RSP: 0018:ffffc900001e0b08 EFLAGS: 00000046
[  353.967978][    C1] RAX: 1ffffd1ffff830b1 RBX: ffff888021a6a1c8 RCX: ffff8881006a8000
[  353.967987][    C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000008
[  353.967996][    C1] RBP: 1ffff1100434d438 R08: ffffffff92a6cc27 R09: 1ffffffff254d984
[  353.968005][    C1] R10: dffffc0000000000 R11: fffffbfff254d985 R12: dffffc0000000000
[  353.968014][    C1] R13: 0000000000000001 R14: ffffe8ffffc18588 R15: ffffffff8dbbec78
[  353.968024][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  353.968034][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  353.968042][    C1] CR2: 00007ffd54080758 CR3: 0000000110034000 CR4: 00000000000006f0
[  353.968074][    C1] Call Trace:
[  353.968082][    C1]  <IRQ>
[  353.968090][    C1]  ? __queue_work+0x103/0xfe0
[  353.968109][    C1]  call_timer_fn+0x17e/0x5f0
[  353.968124][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  353.968140][    C1]  ? call_timer_fn+0xbe/0x5f0
[  353.968151][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  353.968167][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  353.968186][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  353.968202][    C1]  __run_timer_base+0x646/0x860
[  353.968221][    C1]  ? ktime_get+0x3e/0x1f0
[  353.968242][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  353.968258][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  353.968282][    C1]  run_timer_softirq+0xb7/0x180
[  353.968340][    C1]  handle_softirqs+0x286/0x870
[  353.968359][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  353.968375][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  353.968392][    C1]  __irq_exit_rcu+0xca/0x1f0
[  353.968406][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  353.968424][    C1]  irq_exit_rcu+0x9/0x30
[  353.968437][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  353.968457][    C1]  </IRQ>
[  353.968463][    C1]  <TASK>
[  353.968468][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  353.968483][    C1] RIP: 0010:stack_trace_consume_entry+0x71/0x280
[  353.968501][    C1] Code: 15 00 84 c0 0f 85 22 01 00 00 45 3b 0e 73 3a 48 8d 5f 0c 49 89 df 49 c1 ef 03 41 0f b6 04 17 84 c0 0f 85 47 01 00 00 44 8b 23 <45> 85 e4 74 21 41 ff cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44
[  353.968511][    C1] RSP: 0018:ffffc900006eeaf8 EFLAGS: 00000246
[  353.968522][    C1] RAX: 0000000000000000 RBX: ffffc900006eec0c RCX: 569200c9d57ff400
[  353.968530][    C1] RDX: dffffc0000000000 RSI: ffffffff81ad034c RDI: ffffc900006eec00
[  353.968540][    C1] RBP: 1ffff920000ddd82 R08: ffffc900006eec10 R09: 0000000000000000
[  353.968548][    C1] R10: ffffc900006eeb98 R11: ffffffff81ad03a0 R12: 0000000000000001
[  353.968556][    C1] R13: 1ffff920000ddd81 R14: ffffc900006eec08 R15: 1ffff920000ddd81
[  353.968567][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  353.968585][    C1]  ? stack_trace_save+0x9c/0xe0
[  353.968605][    C1]  ? stack_trace_save+0x9c/0xe0
[  353.968620][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  353.968637][    C1]  arch_stack_walk+0x110/0x150
[  353.968653][    C1]  ? stack_trace_save+0x9c/0xe0
[  353.968671][    C1]  stack_trace_save+0x9c/0xe0
[  353.968686][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  353.968717][    C1]  kasan_save_track+0x3e/0x80
[  353.968752][    C1]  __kasan_kmalloc+0x93/0xb0
[  353.968767][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  353.968783][    C1]  ? cfg80211_inform_single_bss_data+0x905/0x1ac0
[  353.968805][    C1]  cfg80211_inform_single_bss_data+0x905/0x1ac0
[  353.968827][    C1]  ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10
[  353.968854][    C1]  ? _ieee802_11_parse_elems_full+0x44aa/0x4550
[  353.968869][    C1]  ? arch_stack_walk+0x11c/0x150
[  353.968885][    C1]  ? cfg80211_inform_bss_data+0x1e8/0x3b20
[  353.968906][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b20
[  353.968935][    C1]  ? __pfx_cfg80211_inform_bss_data+0x10/0x10
[  353.968964][    C1]  ? __pfx__ieee802_11_parse_elems_full+0x10/0x10
[  353.968986][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  353.969007][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  353.969028][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  353.969049][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  353.969067][    C1]  ? sta_info_get+0x4f/0x2a0
[  353.969081][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0
[  353.969102][    C1]  ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0
[  353.969128][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0
[  353.969146][    C1]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  353.969167][    C1]  ? __lock_acquire+0xab9/0xd20
[  353.969193][    C1]  ieee80211_iface_work+0x806/0xfe0
[  353.969210][    C1]  cfg80211_wiphy_work+0x2df/0x460
[  353.969225][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  353.969240][    C1]  process_scheduled_works+0xae1/0x17b0
[  353.969264][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  353.969286][    C1]  worker_thread+0x8a0/0xda0
[  353.969327][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  353.969350][    C1]  ? __kthread_parkme+0x7b/0x200
[  353.969370][    C1]  kthread+0x711/0x8a0
[  353.969388][    C1]  ? __pfx_worker_thread+0x10/0x10
[  353.969402][    C1]  ? __pfx_kthread+0x10/0x10
[  353.969420][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.969436][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  353.969454][    C1]  ? __pfx_kthread+0x10/0x10
[  353.969471][    C1]  ret_from_fork+0x3fc/0x770
[  353.969486][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  353.969501][    C1]  ? __switch_to_asm+0x39/0x70
[  353.969518][    C1]  ? __switch_to_asm+0x33/0x70
[  353.969533][    C1]  ? __pfx_kthread+0x10/0x10
[  353.969550][    C1]  ret_from_fork_asm+0x1a/0x30
[  353.969572][    C1]  </TASK>
[  354.308097][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  354.310752][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  354.315355][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.318655][   T34] Call Trace:
[  354.319695][   T34]  <TASK>
[  354.320632][   T34]  dump_stack_lvl+0x99/0x250
[  354.322163][   T34]  ? __asan_memcpy+0x40/0x70
[  354.323707][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.325291][   T34]  ? __pfx__printk+0x10/0x10
[  354.326766][   T34]  panic+0x2db/0x790
[  354.328060][   T34]  ? __pfx_panic+0x10/0x10
[  354.329564][   T34]  ? __pfx_delay_tsc+0x10/0x10
[  354.331065][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  354.332981][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  354.334653][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  354.336640][   T34]  watchdog+0x102d/0x1030
[  354.338042][   T34]  ? watchdog+0x1de/0x1030
[  354.339659][   T34]  kthread+0x711/0x8a0
[  354.340949][   T34]  ? __pfx_watchdog+0x10/0x10
[  354.342501][   T34]  ? __pfx_kthread+0x10/0x10
[  354.344312][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  354.346085][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.347695][   T34]  ? __pfx_kthread+0x10/0x10
[  354.349131][   T34]  ret_from_fork+0x3fc/0x770
[  354.350543][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  354.352142][   T34]  ? __switch_to_asm+0x39/0x70
[  354.353670][   T34]  ? __switch_to_asm+0x33/0x70
[  354.355137][   T34]  ? __pfx_kthread+0x10/0x10
[  354.356563][   T34]  ret_from_fork_asm+0x1a/0x30
[  354.358034][   T34]  </TASK>
[  354.359579][   T34] Kernel Offset: disabled
[  354.360923][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:42:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88801c2dd640 RCX=6e212700129d8100 RDX=0000000000000002
RSI=ffffffff8db865b3 RDI=ffffffff8be29dc0 RBP=0000000000000000 RSP=ffffc900000070f8
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffff88801c2de1f8 R13=0000000000000000 R14=ffff88801c2de130 R15=0000000000000005
RIP=ffffffff819e28b1 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63c28ed040 CR3=00000001096d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc900001dfe3d RCX=236cafbbfbd3df00 RDX=0000000000000000
RSI=ffffffff8be29da0 RDI=ffffffff8be29d60 RBP=dffffc0000000000 RSP=ffffc900001dfd38
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc900001dfe58 R11=ffffffff81ad03a0
R12=1ffff9200003bfc1 R13=ffffc900001dfe58 R14=ffffc900001dfe08 R15=ffffffff8172aae5
RIP=ffffffff8172abc3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f63c1d5f020 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ffffffffffffffff XMM01=ffffffffffffffff ffff00ff00000000
XMM02=ffffffffffff0000 ffffffffffffffff XMM03=0000000000000000 ffff000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0036316c2f650061 642e7269662f302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ff0000000000ff00 0000000000000000 XMM09=756765722f657261 776d7269662f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
