last executing test programs:

50.381989638s ago: executing program 1 (id=835):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)

50.3814054s ago: executing program 1 (id=836):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000010400000000000000000a0000000000100000000000140011006c766d727031000000000100000000000000464868e822d32cb592a056f4d787f9bba6100c0097cec916"], 0x38}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x8c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xec, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x82}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xa0, 0x2, [@TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x40, 0x1f, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '/^\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}, @m_nat={0x58, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x2f, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b436361246e3000e13"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
ioctl(r1, 0x0, &(0x7f0000000340)="53e82531fbe0d0077ee8ebb2a7276372a7")
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000001840)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000110000001000000230a89b768ad", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x400c880}}], 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2}, 0x10)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1a000000020000000000003c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r8, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10)

50.274961295s ago: executing program 1 (id=837):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)='Xv', 0x2}], 0x1}}], 0x1, 0x200001c0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)

50.27444552s ago: executing program 1 (id=838):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x1000, 0x20000, 0x1}, 0x20)

44.615424594s ago: executing program 1 (id=838):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x1000, 0x20000, 0x1}, 0x20)

40.599515387s ago: executing program 0 (id=917):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0xfffffffc, 0x4, 0x81, 0xffff2da8}, 0x3c)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r2=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
sendto$packet(r11, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=<r14=>0x0, &(0x7f0000000580)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl0\x00', <r16=>0x0, 0x29, 0x1, 0x8, 0x5, 0x20, @private1, @empty, 0x8000, 0x20, 0x6, 0x4}})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4040000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff0a000008000100", @ANYRES32=r2, @ANYBLOB="c400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004002000000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ca01000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="ec00028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000440004007f00ed02b0050000190500400400000000080206050000003300095c580000000000adff07000000020001070f000000040003200080000002650f0e0400000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB], 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r17, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0xcb, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0)

40.423905883s ago: executing program 0 (id=918):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {0x340}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)

40.423316295s ago: executing program 0 (id=919):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000300)=""/29, &(0x7f0000000240)=0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
sendmmsg(r2, &(0x7f0000000940), 0x0, 0x20040010)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000)
sendto$inet6(r2, &(0x7f0000000040)="eca727e4a7d0dacebece68d033d58d05dede71cd8afe590897aa78ccb16ced4442e5718559a35326b93d5b8d6f99019c853ad34b8255226e135cdf5de5b00bc2a13edb6103fb5a8fabb4daa9f5d61ce0899fa0556cb837e776fc10f55abb4897c3b98af3a565c0b899a0346f2102ec0d44054410ed5fc07e11d0df271c64d273db575b7642f1d1818ee61021b9eb894324643940b2f4c544edc0ea0bb3aa79dea2b8220a0f1c117dc748c628ceadd8138de9858e057bd39716a264aaac576a10f5143b31839d163794b5db767e199d5d728d", 0xd2, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @private0, 0x74}, 0x1c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b7050000000000007910bd0000000800fd09000000009500000000000000f76073811ba9ca12100cae156ce58eb018bc249a425fde7c2fcb4c119c2f1de0d251c093deffe29e5dfe95a3afc3b40f4857ff8617f34c187200000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
recvmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x22, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0xa, 0x7}, {0xc, 0xffff}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

39.516040075s ago: executing program 0 (id=921):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x670, 0x5, 0x304, 0xa4, 0x16c, 0xfeffffff, 0x0, 0xa4, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0x0, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x364)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}}, 0x0)

39.515187957s ago: executing program 0 (id=922):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$llc(r1, &(0x7f0000000180)={0x1a, 0x313, 0xa6, 0x2, 0x81, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r5, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, 0x0, &(0x7f00000000c0))
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r8 = socket(0x2, 0xa, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5)
setsockopt$inet6_tcp_int(r9, 0x6, 0x18, &(0x7f0000000000)=0x8, 0x4)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r9], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x24004044)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000ebffffffff130012800900010076657468000000000400028008000a00b6f5de681d1522c8e45d000ad839aec7f30c5602f300dc450799c3b6777d9e38a47ddb39a0581fcd254266b0a6c40b0e4c86c935e3fbe3aa0290cfc270f9a9dafaea", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000100005ff0000000000000000000001010000fb109a04ec154cf2deac8de4684ce3350bc734773c8b32e0cf1bf68aaf910cbcc143739a600e3b2d7fe033a987497ac9d4d1209f195824f0a735a04cc8c05d3bad5d2c5d261e86249a447605e28587eefc4caf5fa1a2b145989b9f7cfba5096bafecd555c51f45b7c8d606ed2c5b56b998d1184ac3c4e56dcafd51a8bd0e5973eba38637af8f1495ed03ff6af88950a5810ae39662be9e4b81927e6f84fdaf387f4142f2a4ac8e877ab71483e458c11780a79e073fb0b5bfd6e8cda5bec049953f19ac9ad2283f49355f6d690c7b", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0)

38.995253978s ago: executing program 2 (id=924):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xc, 0x400}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000140)={0x0, 0x58c3, [0x10001, 0x5, 0x8, 0x9, 0x5]}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

38.83575334s ago: executing program 2 (id=925):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {0x4003}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)

38.835111674s ago: executing program 2 (id=926):
r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200))
bind$alg(r1, &(0x7f0000000880)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0xfff9, @any, 0x9e2}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

38.705732453s ago: executing program 2 (id=927):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000440)={0x6}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@fwd={0xf}, @restrict={0x5, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x30, 0x51, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001540)=""/173, 0x39, 0xad, 0x1, 0x4}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x89, 0x0, r6, 0xce23, '\x00', 0x0, r8, 0x0, 0x4, 0x2}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0xd, 0x8, 0x0, 0x4, 0xffff}}, {0x4}}]}]}, 0x58}}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r12, r12, 0x2e}, 0x20)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

38.646187339s ago: executing program 2 (id=928):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x200}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)

38.585419515s ago: executing program 2 (id=929):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d61637365630000", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabbf5ff090002"], 0x54}}, 0x0)
r7 = accept(r0, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
tee(0xffffffffffffffff, r8, 0x8f5, 0x100000000000000)
write$cgroup_type(r8, &(0x7f0000000180), 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff})
pipe(&(0x7f0000019480)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, &(0x7f0000001080)=[{&(0x7f0000001f00)="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", 0xc41}], 0x1, 0x3)
close(r11)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
splice(r10, 0x0, r11, 0x0, 0x10500, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x9c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'bond\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)

38.584236033s ago: executing program 0 (id=930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000003000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c003a80f8ff070014000700000000000000000000a6f0ff000000011400030073697430"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

23.076509131s ago: executing program 32 (id=930):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r6], 0x1c}}, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b703000003000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c003a80f8ff070014000700000000000000000000a6f0ff000000011400030073697430"], 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000000))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

23.053745694s ago: executing program 33 (id=929):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d61637365630000", @ANYRES32, @ANYBLOB="0a000100aaaaaaaaaabbf5ff090002"], 0x54}}, 0x0)
r7 = accept(r0, 0x0, &(0x7f0000000080))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
tee(0xffffffffffffffff, r8, 0x8f5, 0x100000000000000)
write$cgroup_type(r8, &(0x7f0000000180), 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff})
pipe(&(0x7f0000019480)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, &(0x7f0000001080)=[{&(0x7f0000001f00)="f122454251b03cc23cbf344b382d8e9905bd232770b2cd6d24c841d54d9e1d2d03ca0b21a33d58d3e17c586b9a0a1fab3aff7779af9802a3d3820edc30b6fbe190bae652bc95e3775d31805b9e350c6b7271370e14cb595dc2e25b13fcc608fe2cc39e10badbe600b9fb9598095d6293e769395bec343c93ca99428151e4aee5d6af0842ef88f31f44b6d807ef4e506f01fbaabbfff6782a6dbcac1b62e0da6a0510c7c3b0d6f309dc58010180c9d74f603a234df2ce3a4cb4764fd9af5cd60a74a0211b5132e19cd6c8ba8fca1a4dd8df747d658b3a8d9f7c540a90823a8de09c2fed18e70bba26b1cf577dbae10b88a92ad5e9147d3cffa7e80d7afad8b4176205b02b331ab637bddfe9b76db520a820ff60d7aefbabe59fafcf2107a2cf48ee27235e874428bcc88a265d51f492612f79c30af783ff3aaa51d5ba1723448ca7411c95eb12463b0cc0a5629cfb511b3882fa75cd9359c78f4c62ccf2eba38c1e5e2b39d2f0407eb9163e74e58cb3a8ff6d077112fc9465d4b94816686c242371a8df9214464862bd29b21fdefebdfc9a2db0371f3e3f6c54e6e2f4089f6396c3ea29f5d6b7780a9d45d1d3b90a90d60df378203b3e73222425bf0dc1d74d9d8466908489369cee87c2943ed2f718045a6a94b39a05392435209f3a768874aa22a440cebfbbe7e7d8646684e50f65b9d4c4485266531ea835a479b8b0be756069b7fc47d6c65dd48f2a771b36b729b6d6b5f2e911c9d931b1fcac8afbbf862235e5a6a4189b6dbbc15f7a2116ad3d71067f12880108dfb34f48d16a9ed102cc10a8513ab562b75431f04422339147a526a0fdbfdbdd4ccc640b3a6b77fab4433e7dc54b250a559586c4979afa8085a84942869beb9f5d6447faec8b1303bab7730b8eabae6bd075e12c24e32088175f22e9228e2a16e91ce5cb05e2d6dae04db780806dcc02b59c9ed5418029140bd508faf83dc130153bedf958cd99c109bc9aac0433fb223e2c1eb9bec96b236b3506bdc27cb8c5c96687c944e62280ddefb363ac843b8e247edb0e288e89c7f876a6cc6040c437e555a48580c965bf7a6aca9b87f8295a5cfa0036a6fa81880ed59a8d05ef161112124ade0326770dc19e57f8d0431cf265b0f96c8b76a449986696b24b31dfa53aea10cbf0fc5ba48ddaa0f498fa94bb2f9182a7c58b4ca959acf6e69266b8f1625f3d3e6b3ffae8a8aaabd7cc31da91140aab4ec2a72097a3d5429e547347d0f0f54555e59f3dc9c974d06da00ee0135c25ef6e583e80a664e9303715862eada57ac6b7e73c066514bfa03f7e0da07152f6dd8a2da1de27f518d0b2f54e0025ca44e800a2336ccda02a343333cb2d02aece512b6e3e594d6a0929a11d162f8f8713e667cf27358f46dcdee64fd6c30128869039e822e4e07d771d649bccc27afa7965bd02312eec5ebb61cfc236f73d42839b755839d3f596875e42bcc2379c7c8120c04467d2cf25923c2b118f25b3ff99d5de1dd51e8f111c08ebab6b4856179bd098a602fe19f3ba0ad6800bedc78d124f7650d50cc05e629ee946ff4db2636535fc5f7649c209c363f32d682c15c5f189b459a1f6249f7f5f9dc0ddfab3c3c60757d8be67a6b9d8bbe9436d0eb58cb255c077fb4c7b3ad0f3e2f5a117c0c6ab6ec0d9f70f827275918272cbe9e601d66b0bda1acd4d0a3b609eff5aeaed3db70117f5a49c926a339595fe1b5856bb5009809b9cb4f275ea6cbacf1f6b8b66f6c93eb781411305de14b84ccb81ff04693f0b4bf0b04dee68c500747aedad1d0d51951cbefcc42d34f79dd268ce7817994ea63e2c463ac266b5590c84660d782f7cf342f1fbddb130336275b7e476c99b3adf89af8a3d052c50fea7c955ee19876219c44056fb7fc47fb56fe7f96dd5f3a9f9272fc9f78f9a876b164542d21c3197cf40b695862b28fd25e26f59aaad649cdbf7e1ff5797a45068e344793e2810d08cdbd1afb8c2f67730e1ddd06063bc3392ce7d07ff0c4f8b071a231249a09c7d45bcd3a0da55dbc48cdd895c46514952344b25a1682e695c23e82abc4b463e15d64ad40375f8b6122dcfd9ebfff8e806c4be153b3f67add2ea0946ec494c01a6ee20d9667d6645570cc9b032c7b05665217c3827a6fc35152a3f7b78277acb2027475156c50d8fa8440d14eb3fa3fa977f37fae6f1dcfee7edebd28d99bd0099f0d9abf9e764f69ae9243a8615dbca5beb329b3f66e6dbd15078a5476b89af020a06bf3ed01ae312a0d56bca7d75a9c14b3ba820d4729c291a813261f4e63ab0ac2a561c28b2f0694aa10e838456b7a6ef0814ab2b0d8a6bb9e8190cd52bcd24e043cab024ead4cf61f808f779d7fdefed62f961c0d4cbe2239c2933e8fc3455da94cd96fbb917260b1208eaa05bef12ce1bc894ff3cf4c50b8b2a3cbfac8646b2aa95e7ab2b925d8a8c1440823dcff36f7841f9a2f55854d30aca8dafc6ff40de8325bcf5172396155718fb78fba1c11dea6c54a14d5a284dade070f9731e163e188cba9a1c8eb888f629627afee5d6fb41149f61006d2ea79ef70228f7a5118c23d48c50257193e508442949e9c681358c8e9d6ed1d0b16a0890c5ed0ca509136c74af4445fb941e1cfaa54cd5c9ba4dfbb60d2d39e0e4861ac218e88ac73fdd0a376d4e086a39fb8250aa798d34e0efd87190de8e684a76ce081bfcb4d3abe9e104f15d5b41ece071cc90d57166adad90cd07b6503bd2772b4df711013a16b42db9f5e0855380520a969608dba62e7c0a5ec4259541823c5154da07d2f3be5385b04fbf273a1aa77be4d5e92348623e93aaed7f4f7bfb41ce065368930d5cce4027f9bb986c8835b0db2bf16bf9910f5c8a25c945a32ab1386a619c1479e67ef08a47aa7d12e605d60a27c142c6536264baf4e90478b2a0b2b275a8b913bc20d0448a9817139bfe818af7fa11fd6ad0a25f13f4fef75b9c2bf48d754b90b4a10ef30b03b429dc7a1b3b57764371c6854b941aac7a5b26d39a95211f17f6f0019f517b1abde124f19b0602bce2214677d8f029494cf05725ce10e968792725ba9ad158f4d529516fb0551ef7c610bedd85206bd7392d926586b93819847370b36dce9d229963dba8e3f6ca6cbbc285525d4e8d677cae6e01846c8a7c428c5258d227867716fe8b244bd5d931bf79e3c76730dc5c4a93f402c087ba01b74829a50844ced7531fddf349c67f2a6582fbbfc8a2e8cd867b90255fe4c32826c1d426dcf286dfe06baf3cb9230abd8c27470147848a849e421d723013c9d3488878fef74c65207b62023eb5f235b278ac833461c9e780f06be7a5c90e39bdf952dcedf65e552b17940db2b4276d88160dad9f0e6394595edd768a5b8b34cb9459b0df12062f373b32e31cfdfd101f05edf132163fb27c88eb89c3e99d2ef962f3ae6a4b65414ebae0d56069f75ad32efb5db248374029c486945aff76422a9ccf232b523465b0d2cd4cae5f2b050de33fc16b6a7afcd6027deaf66afbde5433fba08f89ca9c96d2b6aaf0512fe518b1237b2aca630515df61755a2d66d18e046a62c4cc588e389d367466cf515c2b6764f6b97310fa1f122697094040d780657c362979bd826d2106cd9abbf5ec9ece543ede85a1181b2063a80091942addb04a7accb29644b1bfb9e9985605fced1babc70ca8e4cbb59c76a3d144085ac8c0d57bc45c5a8580ec78a19781f400a5b78b6138781b279ace4245461d16c48101fd8b9e29550d116c45e24d94824d7691e8bc149906ef33b0edd395cf72a6c933c10ec177a1d7c99023e90a4de0973ff7ccc450ca5f593f45157d0155f66da563e39c6ba5543bf553a101af9557ec859c63556fbf6ce0df0cf9a1e744804b1d04d34161bde694b9b8276f85fc6db8c17679727880b213e9862adc78013b975f3fd6de16fc2257db3f30d025af4b5e979ec248e7e5372fc7662f9bfa1f086ae19fd718638810329382eece7aff0aac9343ebce93780625ff1c8f08520745722f2a21ad11050c182f1aac88f3d56bc5e9569312e1fd8ff38e45b4bbaa201106b4364550cf5076bc1fd4796aec97c433c04bbc94436644280cfb7d9e007c441d26668bb13e2afefa08067d7efe6927d350a849ffd323b4daac538ab713605e5595ff0ae6b460ff276b96b22c888804241f76b6f66f8a5e21c73577c9b319879e9091d3babaaf1f8a71d353c83128c27e83b31182abce39ae9ad2c92c5c3ac92281df4c436775efa41b11ef159ee554a0510bf50658a06f631ca541ea59232a671ab424e4beddc101cdc95c8a456f5b0ec65a9d88264d3d4c1b61d38ad09bf176fb67c2ed9a1c4ae80295b3defa2625164e20614383dd84e734116de43976de5fe08ee47a585e149df7b6c6805a82ec5e2453a64b77740b21f7908f06b65aa7f9c953b958de3a8bc790c5b91a", 0xc41}], 0x1, 0x3)
close(r11)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
splice(r10, 0x0, r11, 0x0, 0x10500, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x9c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'bond\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0)

0s ago: executing program 1 (id=838):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x800, 0x1000, 0x20000, 0x1}, 0x20)

kernel console output (not intermixed with test programs):

) entered blocking state
[   56.662619][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.675710][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.678726][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.707833][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.710958][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.800961][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.845375][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   56.850674][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.852994][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.870369][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.872756][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.966195][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.976115][ T5840] Bluetooth: hci1: command tx timeout
[   56.979259][ T5219] Bluetooth: hci0: command tx timeout
[   57.027308][ T5833] veth0_vlan: entered promiscuous mode
[   57.031938][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.036803][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.052579][ T5833] veth1_vlan: entered promiscuous mode
[   57.054693][ T5219] Bluetooth: hci2: command tx timeout
[   57.092107][ T5842] veth0_vlan: entered promiscuous mode
[   57.105933][ T5833] veth0_macvtap: entered promiscuous mode
[   57.110703][ T5833] veth1_macvtap: entered promiscuous mode
[   57.125178][ T5842] veth1_vlan: entered promiscuous mode
[   57.130132][ T5837] veth0_vlan: entered promiscuous mode
[   57.139894][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.149170][ T5837] veth1_vlan: entered promiscuous mode
[   57.155670][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.171102][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.175180][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.178695][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.182094][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.211525][ T5842] veth0_macvtap: entered promiscuous mode
[   57.227999][ T5837] veth0_macvtap: entered promiscuous mode
[   57.231882][ T5837] veth1_macvtap: entered promiscuous mode
[   57.248684][ T5842] veth1_macvtap: entered promiscuous mode
[   57.261910][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.277969][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.283464][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.298582][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.301249][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.306175][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309010][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.311787][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.323058][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.326584][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.329308][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.332092][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.340731][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.343593][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.377737][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.382616][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.426772][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.428568][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.431980][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.437936][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.449889][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.468321][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.471001][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.492435][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.501383][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.526540][ T5899] : entered promiscuous mode
[   57.605314][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.706046][ T5912] Zero length message leads to an empty skb
[   57.756482][ T5921] tc_dump_action: action bad kind
[   57.759036][ T5922] tc_dump_action: action bad kind
[   57.831924][ T5921] xt_CT: No such helper "syz0"
[   57.835664][ T5921] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   57.838586][ T5922] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   58.470072][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.470620][ T5927] syz.2.8: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   58.499518][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.2.8 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   58.499537][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.499545][ T5927] Call Trace:
[   58.499551][ T5927]  <TASK>
[   58.499556][ T5927]  dump_stack_lvl+0x189/0x250
[   58.499577][ T5927]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   58.499599][ T5927]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.499614][ T5927]  ? __pfx__printk+0x10/0x10
[   58.499632][ T5927]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   58.499648][ T5927]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   58.499671][ T5927]  warn_alloc+0x214/0x310
[   58.499688][ T5927]  ? stack_depot_save_flags+0x429/0x900
[   58.499710][ T5927]  ? __pfx_warn_alloc+0x10/0x10
[   58.499730][ T5927]  ? kasan_save_track+0x4f/0x80
[   58.499745][ T5927]  ? xskq_create+0x56/0x170
[   58.499757][ T5927]  ? xsk_init_queue+0xb0/0x110
[   58.499774][ T5927]  ? xsk_setsockopt+0x43f/0x710
[   58.499789][ T5927]  ? do_sock_setsockopt+0x25a/0x3e0
[   58.499803][ T5927]  ? __x64_sys_setsockopt+0x18b/0x220
[   58.499817][ T5927]  ? do_syscall_64+0xfa/0x3b0
[   58.499829][ T5927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.499846][ T5927]  __vmalloc_node_range_noprof+0x125/0x12f0
[   58.499885][ T5927]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   58.499906][ T5927]  ? __kasan_kmalloc+0x93/0xb0
[   58.499923][ T5927]  vmalloc_user_noprof+0xad/0xf0
[   58.499948][ T5927]  ? xskq_create+0xbf/0x170
[   58.499960][ T5927]  xskq_create+0xbf/0x170
[   58.499974][ T5927]  xsk_init_queue+0xb0/0x110
[   58.499994][ T5927]  xsk_setsockopt+0x43f/0x710
[   58.500014][ T5927]  ? __pfx_xsk_setsockopt+0x10/0x10
[   58.500041][ T5927]  ? __pfx_xsk_setsockopt+0x10/0x10
[   58.500060][ T5927]  do_sock_setsockopt+0x25a/0x3e0
[   58.500077][ T5927]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   58.500097][ T5927]  ? __fget_files+0x2a/0x420
[   58.500120][ T5927]  __x64_sys_setsockopt+0x18b/0x220
[   58.500141][ T5927]  do_syscall_64+0xfa/0x3b0
[   58.500174][ T5927]  ? lockdep_hardirqs_on+0x9c/0x150
[   58.500187][ T5927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.500227][ T5927]  ? exc_page_fault+0x9f/0xf0
[   58.500248][ T5927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.500260][ T5927] RIP: 0033:0x7fdf4238e929
[   58.500273][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.500283][ T5927] RSP: 002b:00007fdf4326f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   58.500296][ T5927] RAX: ffffffffffffffda RBX: 00007fdf425b5fa0 RCX: 00007fdf4238e929
[   58.500305][ T5927] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   58.500312][ T5927] RBP: 00007fdf42410b39 R08: 0000000000000004 R09: 0000000000000000
[   58.500319][ T5927] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.500326][ T5927] R13: 0000000000000000 R14: 00007fdf425b5fa0 R15: 00007ffc14939ae8
[   58.500347][ T5927]  </TASK>
[   58.500451][ T5927] Mem-Info:
[   58.632511][ T5927] active_anon:5401 inactive_anon:0 isolated_anon:0
[   58.632511][ T5927]  active_file:765 inactive_file:38204 isolated_file:0
[   58.632511][ T5927]  unevictable:1768 dirty:1429 writeback:0
[   58.632511][ T5927]  slab_reclaimable:9151 slab_unreclaimable:51609
[   58.632511][ T5927]  mapped:17986 shmem:2433 pagetables:904
[   58.632511][ T5927]  sec_pagetables:0 bounce:0
[   58.632511][ T5927]  kernel_misc_reclaimable:0
[   58.632511][ T5927]  free:305398 free_pcp:20714 free_cma:0
[   58.633744][ T5935] netlink: 'syz.1.10': attribute type 13 has an invalid length.
[   58.651784][ T5927] Node 0 active_anon:8860kB inactive_anon:0kB active_file:2676kB inactive_file:23796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47256kB dirty:4888kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7692kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   58.656470][ T5935] netlink: 'syz.1.10': attribute type 17 has an invalid length.
[   58.675471][ T5927] Node 1 active_anon:12744kB inactive_anon:0kB active_file:384kB inactive_file:129020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24688kB dirty:828kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3700kB pagetables:1028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   58.689627][ T5927] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   58.701999][ T5927] lowmem_reserve[]: 0 812 812 812 812
[   58.705653][ T5927] Node 0 DMA32 free:387824kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8860kB inactive_anon:0kB active_file:2676kB inactive_file:23796kB unevictable:3536kB writepending:4888kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:23180kB local_pcp:19236kB free_cma:0kB
[   58.719749][ T5927] lowmem_reserve[]: 0 0 0 0 0
[   58.721927][ T5927] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   58.735412][ T5927] lowmem_reserve[]: 0 0 854 854 854
[   58.737843][ T5927] Node 1 Normal free:359600kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12744kB inactive_anon:0kB active_file:384kB inactive_file:129020kB unevictable:3536kB writepending:828kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:60536kB local_pcp:39000kB free_cma:0kB
[   58.751456][ T5927] lowmem_reserve[]: 0 0 0 0 0
[   58.753654][ T5927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   58.760165][ T5927] Node 0 DMA32: 2*4kB (ME) 3*8kB (UME) 1*16kB (M) 14*32kB (UM) 11*64kB (UM) 0*128kB 2*256kB (UM) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (U) 83*4096kB (M) = 346800kB
[   58.767971][ T5927] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   58.784811][ T5927] Node 1 Normal: 54*4kB (ME) 85*8kB (M) 153*16kB (UM) 21*32kB (UME) 11*64kB (UM) 12*128kB (UME) 6*256kB (UM) 7*512kB (UM) 4*1024kB (ME) 4*2048kB (UM) 82*4096kB (M) = 359536kB
[   58.792755][ T5927] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   58.799928][ T5927] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   58.820409][ T5927] 41402 total pagecache pages
[   58.825737][ T5927] 0 pages in swap cache
[   58.830552][ T5927] Free swap  = 124996kB
[   58.832500][ T5927] Total swap = 124996kB
[   58.855731][ T5927] 786301 pages RAM
[   58.858810][ T5927] 0 pages HighMem/MovableOnly
[   58.871595][ T5927] 241078 pages reserved
[   58.873416][ T5927] 0 pages cma reserved
[   58.973578][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.038909][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   59.054606][ T5219] Bluetooth: hci1: command tx timeout
[   59.056957][ T5219] Bluetooth: hci0: command tx timeout
[   59.135544][ T5219] Bluetooth: hci2: command tx timeout
[   59.250726][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   59.265880][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   59.315725][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.417431][ T5971] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[   60.808553][ T6030] bridge2: entered promiscuous mode
[   60.810878][ T6030] bridge2: entered allmulticast mode
[   60.817467][ T6030] team0: Port device bridge2 added
[   60.822767][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[   60.882392][ T6030] team0 (unregistering): Port device team_slave_0 removed
[   60.890032][ T6030] team0 (unregistering): Port device team_slave_1 removed
[   60.899772][ T6030] team0 (unregistering): Port device bridge2 removed
[   61.045990][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[   61.134012][ T5219] Bluetooth: hci1: command tx timeout
[   61.145378][ T5219] Bluetooth: hci0: command tx timeout
[   61.214360][ T5219] Bluetooth: hci2: command tx timeout
[   61.298292][ T6042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.44'.
[   61.302580][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.347921][ T6046] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.45'.
[   61.421300][ T6050] netlink: 'syz.2.47': attribute type 21 has an invalid length.
[   61.870542][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.978115][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88810f882c00: rx timeout, send abort
[   62.326080][ T6095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.426865][ T6107] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET)
[   62.444985][ T6107] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   62.448613][ T6107] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   62.456073][ T6107] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   62.478752][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88810f882400: rx timeout, send abort
[   62.481934][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88810f882c00: abort rx timeout. Force session deactivation
[   62.540618][ T6112] syzkaller0: entered promiscuous mode
[   62.546680][ T6112] syzkaller0: entered allmulticast mode
[   62.831902][ T6139] tipc: Enabling <ib:lo> not permitted
[   62.844876][ T6139] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   62.910047][ T6146] __nla_validate_parse: 6 callbacks suppressed
[   62.910062][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   62.922067][ T6146] syz_tun: entered promiscuous mode
[   62.937777][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'.
[   62.981502][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88810f882400: abort rx timeout. Force session deactivation
[   62.986894][ T6153] warning: `syz.2.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.992985][ T6154] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   63.010993][ T6153] bridge_slave_0: left allmulticast mode
[   63.013532][ T6153] bridge_slave_0: left promiscuous mode
[   63.019678][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.030325][ T6153] bridge_slave_1: left allmulticast mode
[   63.032767][ T6153] bridge_slave_1: left promiscuous mode
[   63.041339][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.051568][ T6153] bond0: (slave bond_slave_0): Releasing backup interface
[   63.068280][ T6153] bond0: (slave bond_slave_1): Releasing backup interface
[   63.075324][ T6157] netlink: 'syz.2.80': attribute type 10 has an invalid length.
[   63.078444][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.081875][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.090771][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.094377][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.132494][ T6157] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.214313][ T5219] Bluetooth: hci0: command tx timeout
[   63.214888][ T5840] Bluetooth: hci1: command tx timeout
[   63.304878][ T5840] Bluetooth: hci2: command tx timeout
[   63.334971][ T6172] netlink: 'syz.2.86': attribute type 15 has an invalid length.
[   63.342304][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.348926][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.390022][ T6176] netlink: 2 bytes leftover after parsing attributes in process `syz.1.88'.
[   63.396442][ T6176] batadv_slave_1: entered promiscuous mode
[   63.575928][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   63.580196][ T6181] netlink: 'syz.1.90': attribute type 1 has an invalid length.
[   63.695941][ T6183] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.798491][ T6189] netlink: 'syz.1.94': attribute type 1 has an invalid length.
[   63.810930][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.813676][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.889620][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.899879][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.931676][ T6187] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.936477][ T6187] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.940233][ T6187] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.943942][ T6187] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.996708][ T6193] bond1: entered promiscuous mode
[   63.998648][ T6193] bond1: entered allmulticast mode
[   64.000485][ T6193] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.010292][ T6195] bridge1: entered promiscuous mode
[   64.012050][ T6195] bridge1: entered allmulticast mode
[   64.014481][ T6195] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   64.104746][ T6092] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.222295][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'.
[   64.227933][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.246453][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   64.364779][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.368474][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.587908][ T6231] netlink: 'syz.2.104': attribute type 39 has an invalid length.
[   64.871309][ T6243] IPVS: length: 209 != 24
[   65.141882][ T6260] veth2: entered allmulticast mode
[   65.149287][ T6260] veth3: entered promiscuous mode
[   65.926815][ T6306] x_tables: unsorted entry at hook 1
[   66.248834][ T6339] netlink: 'syz.2.132': attribute type 1 has an invalid length.
[   66.277114][ T6339] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.282616][ T6344] syzkaller1: entered promiscuous mode
[   66.285507][ T6344] syzkaller1: entered allmulticast mode
[   66.344486][ T6354] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   66.718166][ T6381] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   67.359534][ T6401] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   67.391751][ T6401] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.396816][ T6400] gretap1: entered promiscuous mode
[   67.975995][ T6428] __nla_validate_parse: 7 callbacks suppressed
[   67.976009][ T6428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[   68.133293][ T6424] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   68.230978][ T6444] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   68.307093][ T6448] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   68.573623][ T6453] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.578033][ T6460] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.166'.
[   68.581879][ T6458] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.166'.
[   68.588704][ T6453] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.608322][  T790] IPVS: starting estimator thread 0...
[   68.642328][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.649442][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.661696][ T6458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.714195][ T6461] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.772542][ T6463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.167'.
[   69.283173][ T6476] trusted_key: syz.0.171 sent an empty control message without MSG_MORE.
[   69.292700][ T6476] IPv6: sit1: Disabled Multicast RS
[   69.436662][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'.
[   69.445458][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'.
[   69.510777][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   69.515377][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'.
[   69.570402][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   69.675421][ T6502] veth0: entered promiscuous mode
[   69.680958][ T6502] warn_alloc: 3 callbacks suppressed
[   69.680970][ T6502] syz.1.179: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   69.702100][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.1.179 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   69.702121][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.702129][ T6502] Call Trace:
[   69.702135][ T6502]  <TASK>
[   69.702141][ T6502]  dump_stack_lvl+0x189/0x250
[   69.702163][ T6502]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.702177][ T6502]  ? __pfx__printk+0x10/0x10
[   69.702194][ T6502]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.702234][ T6502]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   69.702253][ T6502]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   69.702272][ T6502]  warn_alloc+0x214/0x310
[   69.702289][ T6502]  ? stack_depot_save_flags+0x40/0x900
[   69.702311][ T6502]  ? __pfx_warn_alloc+0x10/0x10
[   69.702338][ T6502]  ? kasan_save_track+0x4f/0x80
[   69.702353][ T6502]  ? xskq_create+0x56/0x170
[   69.702365][ T6502]  ? xsk_init_queue+0xb0/0x110
[   69.702382][ T6502]  ? xsk_setsockopt+0x43f/0x710
[   69.702398][ T6502]  ? do_sock_setsockopt+0x25a/0x3e0
[   69.702413][ T6502]  ? __x64_sys_setsockopt+0x18b/0x220
[   69.702427][ T6502]  ? do_syscall_64+0xfa/0x3b0
[   69.702438][ T6502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.702456][ T6502]  __vmalloc_node_range_noprof+0x125/0x12f0
[   69.702496][ T6502]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   69.702518][ T6502]  ? __kasan_kmalloc+0x93/0xb0
[   69.702536][ T6502]  vmalloc_user_noprof+0xad/0xf0
[   69.702552][ T6502]  ? xskq_create+0xbf/0x170
[   69.702564][ T6502]  xskq_create+0xbf/0x170
[   69.702578][ T6502]  xsk_init_queue+0xb0/0x110
[   69.702598][ T6502]  xsk_setsockopt+0x43f/0x710
[   69.702617][ T6502]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.702644][ T6502]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.702662][ T6502]  do_sock_setsockopt+0x25a/0x3e0
[   69.702680][ T6502]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   69.702699][ T6502]  ? __fget_files+0x2a/0x420
[   69.702722][ T6502]  __x64_sys_setsockopt+0x18b/0x220
[   69.702749][ T6502]  do_syscall_64+0xfa/0x3b0
[   69.702761][ T6502]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.702774][ T6502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.702786][ T6502]  ? exc_page_fault+0x9f/0xf0
[   69.702807][ T6502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.702820][ T6502] RIP: 0033:0x7f0da2d8e929
[   69.702833][ T6502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.702843][ T6502] RSP: 002b:00007f0da0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   69.702858][ T6502] RAX: ffffffffffffffda RBX: 00007f0da2fb5fa0 RCX: 00007f0da2d8e929
[   69.702867][ T6502] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   69.702874][ T6502] RBP: 00007f0da2e10b39 R08: 0000000000000004 R09: 0000000000000000
[   69.702882][ T6502] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.702890][ T6502] R13: 0000000000000000 R14: 00007f0da2fb5fa0 R15: 00007ffc9b0e8858
[   69.702909][ T6502]  </TASK>
[   69.703000][ T6502] Mem-Info:
[   69.828951][ T6502] active_anon:5452 inactive_anon:0 isolated_anon:0
[   69.828951][ T6502]  active_file:1010 inactive_file:38208 isolated_file:0
[   69.828951][ T6502]  unevictable:1768 dirty:1480 writeback:0
[   69.828951][ T6502]  slab_reclaimable:9030 slab_unreclaimable:68630
[   69.828951][ T6502]  mapped:18103 shmem:2435 pagetables:918
[   69.828951][ T6502]  sec_pagetables:0 bounce:0
[   69.828951][ T6502]  kernel_misc_reclaimable:0
[   69.828951][ T6502]  free:285658 free_pcp:21991 free_cma:0
[   69.844281][ T6502] Node 0 active_anon:8540kB inactive_anon:0kB active_file:3400kB inactive_file:23812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47652kB dirty:5064kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7652kB pagetables:2196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.859444][ T6502] Node 1 active_anon:13268kB inactive_anon:0kB active_file:640kB inactive_file:129020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24760kB dirty:856kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3752kB pagetables:1476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   69.870188][ T6502] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.885883][ T6502] lowmem_reserve[]: 0 812 812 812 812
[   69.888314][ T6502] Node 0 DMA32 free:296680kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8608kB inactive_anon:0kB active_file:3400kB inactive_file:23812kB unevictable:3536kB writepending:5064kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:50004kB local_pcp:19216kB free_cma:0kB
[   69.902189][ T6502] lowmem_reserve[]: 0 0 0 0 0
[   69.909823][ T6502] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.922066][ T6502] lowmem_reserve[]: 0 0 854 854 854
[   69.924451][ T6502] Node 1 Normal free:371688kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13268kB inactive_anon:0kB active_file:708kB inactive_file:129020kB unevictable:3536kB writepending:856kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38176kB local_pcp:16116kB free_cma:0kB
[   69.939992][ T6502] lowmem_reserve[]: 0 0 0 0 0
[   69.945156][ T6502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   69.949511][ T6502] Node 0 DMA32: 4*4kB (ME) 327*8kB (UME) 78*16kB (UME) 348*32kB (UME) 85*64kB (UM) 22*128kB (U) 0*256kB 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 65*4096kB (M) = 296680kB
[   69.962722][ T6502] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   69.970822][ T6502] Node 1 Normal: 498*4kB (UME) 64*8kB (UM) 14*16kB (UM) 12*32kB (ME) 23*64kB (ME) 26*128kB (UME) 13*256kB (UM) 14*512kB (UM) 3*1024kB (ME) 1*2048kB (M) 85*4096kB (M) = 371688kB
[   69.977862][ T6502] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.981903][ T6502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   69.988245][ T6502] 41670 total pagecache pages
[   69.990539][ T6502] 0 pages in swap cache
[   69.992645][ T6502] Free swap  = 124996kB
[   69.994794][ T6502] Total swap = 124996kB
[   70.004842][ T6502] 786301 pages RAM
[   70.011605][ T6502] 0 pages HighMem/MovableOnly
[   70.014219][ T6502] 241078 pages reserved
[   70.015865][ T6502] 0 pages cma reserved
[   70.022328][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   70.029601][ T6501] veth0: left promiscuous mode
[   70.038447][ T6509] gtp0: entered promiscuous mode
[   70.041303][ T6509] gtp0: entered allmulticast mode
[   70.292545][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.298313][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.302192][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.304897][ T6534] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.549305][ T6549] veth0: entered promiscuous mode
[   70.553155][ T6548] veth0: left promiscuous mode
[   70.980315][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.262514][ T6569] netlink: 'syz.2.202': attribute type 4 has an invalid length.
[   71.695348][ T6590] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 44970 - 0
[   71.698221][ T6590] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 44970 - 0
[   71.701080][ T6590] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 44970 - 0
[   71.704059][ T6590] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 44970 - 0
[   71.707222][ T6590] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 40576 - 0
[   71.710035][ T6590] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 40576 - 0
[   71.712846][ T6590] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 40576 - 0
[   71.715786][ T6590] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 40576 - 0
[   71.718664][ T6590] geneve2: entered promiscuous mode
[   71.720416][ T6590] geneve2: entered allmulticast mode
[   71.941425][ T6608] ieee802154 phy1 wpan1: encryption failed: -22
[   72.069166][ T6619] veth0: entered promiscuous mode
[   72.071650][ T6618] veth0: left promiscuous mode
[   72.128199][ T6622] netlink: 'syz.2.215': attribute type 4 has an invalid length.
[   72.146510][ T6622] netlink: 'syz.2.215': attribute type 4 has an invalid length.
[   72.221838][ T6627] netlink: 'syz.2.217': attribute type 1 has an invalid length.
[   72.431338][ T6636] netlink: 'syz.2.221': attribute type 1 has an invalid length.
[   72.447251][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.452184][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.528342][ T6640] 8021q: adding VLAN 0 to HW filter on device bond3
[   72.533178][ T6640] bond2: (slave bond3): making interface the new active one
[   72.537357][ T6640] bond2: (slave bond3): Enslaving as an active interface with an up link
[   72.554198][ T6092] bond1: (slave bridge1): link status up again after 0 ms
[   72.574544][ T5863] bond1: (slave bridge1): link status up again after 0 ms
[   72.594916][ T5863] bond1: (slave bridge1): link status up again after 0 ms
[   72.614105][ T5863] bond1: (slave bridge1): link status up again after 0 ms
[   72.634050][ T6092] bond1: (slave bridge1): link status up again after 0 ms
[   72.664881][   T13] bond1: (slave bridge1): link status up again after 0 ms
[   72.684267][ T6092] bond1: (slave bridge1): link status up again after 0 ms
[   72.704490][ T6092] bond1: (slave bridge1): link status up again after 0 ms
[   72.708151][ T6638] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.712194][ T6638] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.718462][ T6638] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.722343][ T6638] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.734285][ T6092] bond1: (slave bridge1): link status up again after 0 ms
[   72.772849][ T6636] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.005055][ T6656] __nla_validate_parse: 12 callbacks suppressed
[   73.005066][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   73.043339][ T6662] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.232'.
[   73.083463][ T6670] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.230'.
[   73.971023][ T6704] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   74.062351][ T6711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.248'.
[   74.066019][ T6712] netlink: 14 bytes leftover after parsing attributes in process `syz.2.248'.
[   74.181936][ T6712] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   74.199314][ T6712] bond0 (unregistering): Released all slaves
[   74.256120][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.306141][ T6726] vlan2: entered promiscuous mode
[   74.308684][ T6726] vlan2: entered allmulticast mode
[   74.311194][ T6726] hsr_slave_1: entered allmulticast mode
[   74.515677][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[   74.866579][ T6753] netlink: 'syz.0.262': attribute type 1 has an invalid length.
[   74.942192][ T6753] bond2: (slave gretap2): making interface the new active one
[   74.955738][ T6753] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   74.970980][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.262'.
[   74.973496][ T6758] nbd: must specify at least one socket
[   74.976898][ T6753] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.205702][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'.
[   75.209005][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   75.221041][ T6774] netlink: 'syz.0.270': attribute type 10 has an invalid length.
[   75.225255][ T6774] bridge0: port 3(team0) entered blocking state
[   75.234268][ T6774] bridge0: port 3(team0) entered disabled state
[   75.236847][ T6774] team0: entered allmulticast mode
[   75.238927][ T6774] team_slave_0: entered allmulticast mode
[   75.241274][ T6774] team_slave_1: entered allmulticast mode
[   75.262975][ T6774] team0: entered promiscuous mode
[   75.265535][ T6774] team_slave_0: entered promiscuous mode
[   75.267495][ T6774] team_slave_1: entered promiscuous mode
[   75.527874][ T6800] bond0: entered promiscuous mode
[   75.535137][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.169276][ T6834] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[   76.196748][ T6834] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.243377][ T6834] bond4: (slave veth3): Enslaving as an active interface with a down link
[   76.283509][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv1
[   76.288568][ T6834] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   77.008672][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'.
[   77.020150][ T6850] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   77.472037][ T6891] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   77.536848][ T6898] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   77.649673][ T6910] Cannot find del_set index 0 as target
[   78.197941][ T6942] vlan0: entered allmulticast mode
[   78.407875][ T6954] __nla_validate_parse: 10 callbacks suppressed
[   78.407888][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'.
[   78.423326][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   78.612717][ T6967] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   78.616606][ T6967] team0: Device ipvlan0 is already an upper device of the team interface
[   78.699109][ T6971] tipc: Started in network mode
[   78.700713][ T6971] tipc: Node identity 4adb75f9a17e, cluster identity 4711
[   78.703613][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.707627][ T6971] syzkaller0: entered promiscuous mode
[   78.709840][ T6971] syzkaller0: entered allmulticast mode
[   78.727539][ T6971] tipc: Resetting bearer <eth:syzkaller0>
[   78.732600][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'.
[   78.738785][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   78.748472][ T6971] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.752119][ T6971] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.754937][ T6971] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.758181][ T6971] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.763699][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'.
[   78.768159][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   78.775829][ T6970] tipc: Resetting bearer <eth:syzkaller0>
[   78.785357][ T6970] tipc: Disabling bearer <eth:syzkaller0>
[   79.346613][ T6983] vlan0: entered promiscuous mode
[   79.349153][ T6983] vlan0: entered allmulticast mode
[   79.351306][ T6983] hsr_slave_1: entered allmulticast mode
[   79.366106][ T6983] unsupported nla_type 52263
[   79.368431][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.371653][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.374101][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.378536][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.612690][ T7015] netlink: 'syz.0.348': attribute type 1 has an invalid length.
[   79.615462][ T5840] Bluetooth: hci0: command tx timeout
[   79.826319][ T7030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.835936][ T7030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.839836][ T7030] bond0 (unregistering): Released all slaves
[   80.404633][ T7055] bond0 (unregistering): Released all slaves
[   80.525606][ T7073] syzkaller1: entered promiscuous mode
[   80.527778][ T7073] syzkaller1: entered allmulticast mode
[   80.684681][ T7091] netlink: 'syz.2.367': attribute type 21 has an invalid length.
[   80.690219][ T7077] netlink: 'syz.2.367': attribute type 13 has an invalid length.
[   80.692698][ T7077] netlink: 'syz.2.367': attribute type 17 has an invalid length.
[   81.148285][ T7108] tipc: Started in network mode
[   81.150061][ T7108] tipc: Node identity 7297b1dd0e16, cluster identity 4711
[   81.152694][ T7108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.155297][ T7108] syzkaller0: entered promiscuous mode
[   81.157146][ T7108] syzkaller0: entered allmulticast mode
[   81.167896][ T7108] tipc: Resetting bearer <eth:syzkaller0>
[   81.170616][ T7107] tipc: Resetting bearer <eth:syzkaller0>
[   81.182453][ T7107] tipc: Disabling bearer <eth:syzkaller0>
[   81.219775][  T971] cfg80211: failed to load regulatory.db
[   81.519298][ T7112] tc_dump_action: action bad kind
[   81.576372][ T7114] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.580828][ T7114] team0: Port device batadv0 added
[   81.740922][ T7125] netlink: 'syz.1.383': attribute type 13 has an invalid length.
[   81.747460][ T7127] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   82.623734][ T6092] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   82.635607][ T6092] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   82.644094][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   82.656573][ T7156] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   82.769916][ T7166] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[   82.919618][ T7174] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[   82.920777][ T7176] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   83.067510][ T7188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.106023][ T7188] tipc: Disabling bearer <eth:syzkaller0>
[   83.294597][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   83.614464][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   83.774315][ T5219] Bluetooth: hci0: command tx timeout
[   84.349888][ T7239] netlink: 'syz.2.412': attribute type 13 has an invalid length.
[   84.353417][ T7239] netlink: 'syz.2.412': attribute type 17 has an invalid length.
[   84.415331][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.501070][ T7246] veth0: entered promiscuous mode
[   84.503801][ T7245] veth0: left promiscuous mode
[   84.519602][ T7248] warn_alloc: 3 callbacks suppressed
[   84.519613][ T7248] syz.2.417: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.528831][  T790] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.532578][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.2.417 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   84.532589][ T7248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.532594][ T7248] Call Trace:
[   84.532597][ T7248]  <TASK>
[   84.532601][ T7248]  dump_stack_lvl+0x189/0x250
[   84.532617][ T7248]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.532626][ T7248]  ? __pfx__printk+0x10/0x10
[   84.532637][ T7248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.532648][ T7248]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.532658][ T7248]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   84.532669][ T7248]  warn_alloc+0x214/0x310
[   84.532681][ T7248]  ? stack_depot_save_flags+0x40/0x900
[   84.532695][ T7248]  ? __pfx_warn_alloc+0x10/0x10
[   84.532708][ T7248]  ? kasan_save_track+0x4f/0x80
[   84.532717][ T7248]  ? xskq_create+0x56/0x170
[   84.532724][ T7248]  ? xsk_init_queue+0xb0/0x110
[   84.532733][ T7248]  ? xsk_setsockopt+0x43f/0x710
[   84.532742][ T7248]  ? do_sock_setsockopt+0x25a/0x3e0
[   84.532752][ T7248]  ? __x64_sys_setsockopt+0x18b/0x220
[   84.532760][ T7248]  ? do_syscall_64+0xfa/0x3b0
[   84.532767][ T7248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.532777][ T7248]  __vmalloc_node_range_noprof+0x125/0x12f0
[   84.532798][ T7248]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.532833][ T7248]  ? __kasan_kmalloc+0x93/0xb0
[   84.532844][ T7248]  vmalloc_user_noprof+0xad/0xf0
[   84.532854][ T7248]  ? xskq_create+0xbf/0x170
[   84.532861][ T7248]  xskq_create+0xbf/0x170
[   84.532868][ T7248]  xsk_init_queue+0xb0/0x110
[   84.532880][ T7248]  xsk_setsockopt+0x43f/0x710
[   84.532892][ T7248]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.532901][ T7248]  ? __lock_acquire+0xab9/0xd20
[   84.532914][ T7248]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   84.532921][ T7248]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.532931][ T7248]  do_sock_setsockopt+0x25a/0x3e0
[   84.532941][ T7248]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   84.532952][ T7248]  ? __fget_files+0x2a/0x420
[   84.532970][ T7248]  __x64_sys_setsockopt+0x18b/0x220
[   84.532982][ T7248]  do_syscall_64+0xfa/0x3b0
[   84.532988][ T7248]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.532996][ T7248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.533002][ T7248]  ? exc_page_fault+0x9f/0xf0
[   84.533014][ T7248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.533021][ T7248] RIP: 0033:0x7fdf4238e929
[   84.533028][ T7248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.533035][ T7248] RSP: 002b:00007fdf4326f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.533044][ T7248] RAX: ffffffffffffffda RBX: 00007fdf425b5fa0 RCX: 00007fdf4238e929
[   84.533049][ T7248] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[   84.533053][ T7248] RBP: 00007fdf42410b39 R08: 0000000000000004 R09: 0000000000000000
[   84.533057][ T7248] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.533061][ T7248] R13: 0000000000000000 R14: 00007fdf425b5fa0 R15: 00007ffc14939ae8
[   84.533072][ T7248]  </TASK>
[   84.533075][ T7248] Mem-Info:
[   84.649214][ T7248] active_anon:5376 inactive_anon:0 isolated_anon:0
[   84.649214][ T7248]  active_file:1061 inactive_file:38215 isolated_file:0
[   84.649214][ T7248]  unevictable:1768 dirty:189 writeback:0
[   84.649214][ T7248]  slab_reclaimable:9282 slab_unreclaimable:81551
[   84.649214][ T7248]  mapped:18137 shmem:2447 pagetables:913
[   84.649214][ T7248]  sec_pagetables:0 bounce:0
[   84.649214][ T7248]  kernel_misc_reclaimable:0
[   84.649214][ T7248]  free:272393 free_pcp:21507 free_cma:0
[   84.666521][ T7248] Node 0 active_anon:8216kB inactive_anon:0kB active_file:3400kB inactive_file:23840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47596kB dirty:556kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7792kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.677802][ T7248] Node 1 active_anon:13288kB inactive_anon:0kB active_file:844kB inactive_file:129020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24952kB dirty:200kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3704kB pagetables:1304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.689860][ T7248] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.700357][ T7248] lowmem_reserve[]: 0 812 812 812 812
[   84.702500][ T7248] Node 0 DMA32 free:230556kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8216kB inactive_anon:0kB active_file:3400kB inactive_file:23840kB unevictable:3536kB writepending:556kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:58028kB local_pcp:14500kB free_cma:0kB
[   84.716418][ T7248] lowmem_reserve[]: 0 0 0 0 0
[   84.718258][ T7248] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.730098][ T7248] lowmem_reserve[]: 0 0 854 854 854
[   84.731955][ T7248] Node 1 Normal free:385040kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13288kB inactive_anon:0kB active_file:844kB inactive_file:129020kB unevictable:3536kB writepending:200kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:28180kB local_pcp:11864kB free_cma:0kB
[   84.744414][ T7248] lowmem_reserve[]: 0 0 0 0 0
[   84.746271][ T7248] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.752390][ T7248] Node 0 DMA32: 887*4kB (UME) 478*8kB (UME) 121*16kB (UME) 429*32kB (UME) 115*64kB (UME) 40*128kB (UME) 26*256kB (M) 20*512kB (UM) 16*1024kB (ME) 9*2048kB (M) 35*4096kB (M) = 230588kB
[   84.760323][ T7248] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   84.767934][ T7248] Node 1 Normal: 554*4kB (UME) 587*8kB (UME) 370*16kB (UM) 242*32kB (UM) 72*64kB (UME) 15*128kB (UME) 6*256kB (UM) 2*512kB (UE) 1*1024kB (M) 1*2048kB (M) 86*4096kB (M) = 384992kB
[   84.773773][ T7248] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.777238][ T7248] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.780792][ T7248] 41723 total pagecache pages
[   84.784974][ T7248] 0 pages in swap cache
[   84.786644][ T7248] Free swap  = 124996kB
[   84.787985][ T7248] Total swap = 124996kB
[   84.789366][ T7248] 786301 pages RAM
[   84.791066][ T7248] 0 pages HighMem/MovableOnly
[   84.792782][ T7248] 241078 pages reserved
[   84.795011][ T7248] 0 pages cma reserved
[   84.818159][ T7258] netlink: 'syz.1.420': attribute type 2 has an invalid length.
[   84.827533][ T7258] pim6reg1: entered promiscuous mode
[   84.829315][ T7258] pim6reg1: entered allmulticast mode
[   84.839489][ T7261] __nla_validate_parse: 22 callbacks suppressed
[   84.839499][ T7261] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.421'.
[   84.908064][ T7266] netlink: 52 bytes leftover after parsing attributes in process `syz.2.423'.
[   85.196019][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'.
[   85.291123][ T7284] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.428'.
[   85.342438][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'.
[   85.441831][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.454400][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   85.550412][ T7292] veth1_macvtap: entered allmulticast mode
[   85.553560][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'.
[   85.558659][ T7296] netlink: 'syz.2.431': attribute type 21 has an invalid length.
[   85.561922][ T7296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.431'.
[   85.567918][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[   85.570664][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[   85.597530][ T7292] bridge2: entered promiscuous mode
[   85.600239][ T7292] bridge2: entered allmulticast mode
[   85.732218][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.435'.
[   85.906561][ T7319] netlink: 'syz.0.440': attribute type 1 has an invalid length.
[   86.537735][ T7319] bond4: entered promiscuous mode
[   86.540053][ T7319] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.713610][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.728574][ T7340] gtp0: entered promiscuous mode
[   86.730483][ T7340] gtp0: entered allmulticast mode
[   86.814761][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   86.991740][   T47] hid-generic 0005:0B57:0007.0001: collection stack underflow
[   86.999420][   T47] hid-generic 0005:0B57:0007.0001: item 0 0 0 12 parsing failed
[   87.004443][   T47] hid-generic 0005:0B57:0007.0001: probe with driver hid-generic failed with error -22
[   87.014280][ T7358] netem: incorrect ge model size
[   87.017020][ T7358] netem: change failed
[   87.153803][ T7375] pim6reg: entered allmulticast mode
[   87.185316][ T7367] netlink: 'syz.1.454': attribute type 13 has an invalid length.
[   87.187878][ T7367] netlink: 'syz.1.454': attribute type 17 has an invalid length.
[   87.370716][ T7392] netlink: 'syz.0.458': attribute type 2 has an invalid length.
[   87.373134][ T7392] netlink: 'syz.0.458': attribute type 1 has an invalid length.
[   87.435112][ T7394] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   87.599795][ T7400] netlink: 'syz.0.462': attribute type 3 has an invalid length.
[   89.220107][ T7415] veth0: entered promiscuous mode
[   89.222867][ T7414] veth0: left promiscuous mode
[   89.260848][ T7417] netlink: 'syz.1.467': attribute type 5 has an invalid length.
[   89.276829][ T7417] ip6erspan0: entered allmulticast mode
[   89.383595][ T7431] vlan0: renamed from gretap0
[   89.458173][ T5840] Bluetooth: hci0: command tx timeout
[   89.726189][ T7466] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.730588][ T7466] macsec1: entered promiscuous mode
[   89.736370][ T7466] macsec1: entered allmulticast mode
[   89.738171][ T7466] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   89.744315][ T7468] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.784345][ T7468] tipc: Started in network mode
[   89.786242][ T7468] tipc: Node identity 4, cluster identity 4711
[   89.788465][ T7468] tipc: Node number set to 4
[   89.809221][ T7472] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   89.817261][ T7472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.821102][ T7472] syzkaller0: entered promiscuous mode
[   89.822936][ T7472] syzkaller0: entered allmulticast mode
[   89.871166][ T7472] tipc: Resetting bearer <eth:syzkaller0>
[   89.891614][ T7480] tipc: New replicast peer: 255.255.255.255
[   89.894843][ T7480] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.897175][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[   89.905377][ T7471] tipc: Disabling bearer <eth:syzkaller0>
[   90.310475][ T7522] batadv_slave_1: left promiscuous mode
[   90.316402][ T7522] bond1: left promiscuous mode
[   90.318182][ T7522] bridge1: left promiscuous mode
[   90.320111][ T7522] bond1: left allmulticast mode
[   90.321858][ T7522] bridge1: left allmulticast mode
[   90.324227][ T7522] veth2: left allmulticast mode
[   90.326291][ T7522] veth3: left promiscuous mode
[   90.329337][ T7522] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.332455][ T7522] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.335885][ T7522] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.338765][ T7522] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.348367][ T7522] gtp0: left promiscuous mode
[   90.350151][ T7522] gtp0: left allmulticast mode
[   90.353714][ T7522] ip6erspan0: left allmulticast mode
[   90.485553][ T7531] pim6reg: entered allmulticast mode
[   90.489428][ T7531] __nla_validate_parse: 19 callbacks suppressed
[   90.489437][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'.
[   90.571152][ T7539] netlink: 'syz.1.505': attribute type 2 has an invalid length.
[   90.575862][ T7539] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[   90.605594][ T7541] netlink: 'syz.1.506': attribute type 1 has an invalid length.
[   90.621105][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.662985][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[   90.672772][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[   90.712827][ T7542] netlink: 156 bytes leftover after parsing attributes in process `syz.0.504'.
[   90.724682][ T7548] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.508'.
[   90.876080][ T7554] netlink: 208 bytes leftover after parsing attributes in process `syz.1.510'.
[   91.089521][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'.
[   91.164960][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   91.172626][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'.
[   91.252900][ T7569] veth0: entered promiscuous mode
[   91.256410][ T7568] veth0: left promiscuous mode
[   91.317146][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.517'.
[   91.742807][ T7586] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   91.950851][ T7598] ip6gre1: entered promiscuous mode
[   92.022936][ T7603] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096)
[   92.063318][ T7607] netlink: 'syz.1.524': attribute type 99 has an invalid length.
[   92.410281][ T7640] batman_adv: batadv0: Adding interface: dummy0
[   92.412558][ T7640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.421115][ T7640] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   92.633673][ T7655] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.641903][ T7655] tipc: Resetting bearer <eth:syzkaller0>
[   92.649336][ T7654] tipc: Disabling bearer <eth:syzkaller0>
[   92.703370][ T7657] Bluetooth: MGMT ver 1.23
[   92.786802][ T7663] netlink: 'syz.2.545': attribute type 16 has an invalid length.
[   92.866894][ T7671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.870436][ T7671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[   92.874072][ T7671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 40576 - 0
[   92.945159][ T7671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.949448][ T7671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[   92.954157][ T7671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 40576 - 0
[   92.998955][ T7671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.002527][ T7671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[   93.006925][ T7671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 40576 - 0
[   93.040796][ T7671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.045598][ T7671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[   93.049361][ T7671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 40576 - 0
[   93.114744][ T7671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 40576 - 0
[   93.117830][ T7671] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 44970 - 0
[   93.120499][ T7671] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[   93.129300][ T7671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 40576 - 0
[   93.131992][ T7671] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 44970 - 0
[   93.136261][ T7671] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[   93.144022][ T7671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 40576 - 0
[   93.146900][ T7671] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 44970 - 0
[   93.149564][ T7671] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[   93.159141][ T7671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 40576 - 0
[   93.161875][ T7671] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 44970 - 0
[   93.164705][ T7671] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[   93.172064][ T7683] netlink: 'syz.0.553': attribute type 1 has an invalid length.
[   93.467462][ T7704] dvmrp0: entered allmulticast mode
[   93.579901][ T7712] batman_adv: batadv0: Removing interface: dummy0
[   93.583489][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.588553][ T7712] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.741445][ T7724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.746342][ T7724] syzkaller0: entered promiscuous mode
[   93.748443][ T7724] syzkaller0: entered allmulticast mode
[   93.767496][ T7724] tipc: Resetting bearer <eth:syzkaller0>
[   93.806660][ T7724] tipc: Resetting bearer <eth:syzkaller0>
[   93.815306][ T7724] tipc: Disabling bearer <eth:syzkaller0>
[   93.991761][ T7746] vlan0: entered promiscuous mode
[   93.993663][ T7746] vlan0: entered allmulticast mode
[   93.996371][ T7746] hsr_slave_1: entered allmulticast mode
[   94.296327][ T7770] syzkaller0: entered allmulticast mode
[   94.480992][ T7781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.602336][ T7786] netlink: 'syz.1.588': attribute type 10 has an invalid length.
[   94.751577][ T7791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.760946][ T7791] tipc: Resetting bearer <eth:syzkaller0>
[   94.767809][ T7790] tipc: Disabling bearer <eth:syzkaller0>
[   95.464682][ T7795] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[   95.549037][ T7800] syzkaller1: entered promiscuous mode
[   95.551325][ T7800] syzkaller1: entered allmulticast mode
[   95.786743][ T7812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.790320][ T7812] tipc: Resetting bearer <eth:syzkaller0>
[   95.800115][ T7814] ip6gre1: entered allmulticast mode
[   95.805309][ T7811] tipc: Disabling bearer <eth:syzkaller0>
[   95.885739][ T7822] netlink: 'syz.0.600': attribute type 1 has an invalid length.
[   95.885741][ T7820] netlink: 'syz.0.600': attribute type 1 has an invalid length.
[   95.888219][ T7822] netlink: 'syz.0.600': attribute type 11 has an invalid length.
[   95.891466][ T7820] netlink: 'syz.0.600': attribute type 11 has an invalid length.
[   95.897294][ T7820] __nla_validate_parse: 26 callbacks suppressed
[   95.897305][ T7820] netlink: 220 bytes leftover after parsing attributes in process `syz.0.600'.
[   95.903988][ T7822] netlink: 220 bytes leftover after parsing attributes in process `syz.0.600'.
[   95.908913][ T7822] netlink: 'syz.0.600': attribute type 1 has an invalid length.
[   95.934046][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   95.972009][ T7820] bond5: (slave ip6gretap1): making interface the new active one
[   95.979064][ T7820] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[   95.985562][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'.
[   95.992243][ T7820] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.115626][ T7828] IPVS: length: 151 != 24
[   96.268729][ T7849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.274111][ T7849] tipc: Resetting bearer <eth:syzkaller0>
[   96.280980][ T7848] tipc: Disabling bearer <eth:syzkaller0>
[   96.360488][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.608'.
[   96.501127][ T7857] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[   96.661733][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'.
[   96.667456][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'.
[   96.670363][ T7863] netlink: 'syz.1.612': attribute type 7 has an invalid length.
[   96.672752][ T7863] netlink: 'syz.1.612': attribute type 8 has an invalid length.
[   96.675239][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[   96.761352][ T7870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.767214][ T7870] tipc: Resetting bearer <eth:syzkaller0>
[   96.775427][ T7869] tipc: Disabling bearer <eth:syzkaller0>
[   96.932678][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.618'.
[   96.938672][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.618'.
[   97.534151][ T5840] Bluetooth: hci0: command tx timeout
[   97.927477][ T7898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.933035][ T7898] tipc: Resetting bearer <eth:syzkaller0>
[   97.944333][ T7897] tipc: Disabling bearer <eth:syzkaller0>
[   98.232008][ T7921] netlink: 'syz.2.633': attribute type 1 has an invalid length.
[   98.258186][ T7926] netlink: 'syz.1.631': attribute type 9 has an invalid length.
[   98.261683][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.273212][ T7926] macvlan0: entered promiscuous mode
[   98.277542][ T7926] hsr0: entered promiscuous mode
[   98.279893][ T7926] macvlan0: entered allmulticast mode
[   98.282258][ T7926] hsr0: entered allmulticast mode
[   98.287522][ T7926] hsr_slave_0: entered allmulticast mode
[   99.131374][ T7987] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   99.559179][ T8020] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.582773][ T8020] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.588561][ T8020] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.596684][ T8020] bond7: (slave vxcan3): Error -95 calling set_mac_address
[   99.677252][ T8031] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.682147][ T8031] bond2: (slave bond3): making interface the new active one
[   99.686362][ T8031] bond2: (slave bond3): Enslaving as an active interface with an up link
[   99.695143][ T8039] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   99.701289][ T8031] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.166379][ T8076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.170229][ T8076] mac80211_hwsim hwsim7 D: renamed from syzkaller0
[  100.175869][ T8076] tipc: Disabling bearer <eth:syzkaller0>
[  100.467919][ T8085] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.471196][ T8084] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6)
[  100.501339][ T8087] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.505615][ T8087] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.510889][ T8087] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  100.640760][ T8091] ip_vti0: Master is either lo or non-ether device
[  100.853294][ T8101] veth0: entered promiscuous mode
[  100.856725][ T8100] veth0: left promiscuous mode
[  101.017965][ T8117] __nla_validate_parse: 16 callbacks suppressed
[  101.017976][ T8117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'.
[  101.113354][ T8117] bond6: entered promiscuous mode
[  101.117631][ T8117] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.134633][ T8121] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.683'.
[  101.219657][ T8117] bond6 (unregistering): Released all slaves
[  101.236976][ T8125] veth0: entered promiscuous mode
[  101.255112][ T8124] veth0: left promiscuous mode
[  101.288842][ T8129] validate_nla: 4 callbacks suppressed
[  101.288854][ T8129] netlink: 'syz.1.687': attribute type 1 has an invalid length.
[  101.320914][ T8129] bond4: (slave gretap2): making interface the new active one
[  101.325187][ T8129] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  101.400245][ T8142] pim6reg: entered allmulticast mode
[  101.415165][ T8142] macvlan0: entered allmulticast mode
[  101.418293][ T8142] veth1_vlan: entered allmulticast mode
[  101.453383][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  101.459401][ T8142] veth1_vlan: left allmulticast mode
[  101.472841][ T8142] macvlan0 (unregistering): left allmulticast mode
[  101.559765][ T8154] netlink: 'syz.2.695': attribute type 1 has an invalid length.
[  101.636822][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'.
[  101.644257][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'.
[  101.655537][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  102.136675][ T5840] Bluetooth: hci2: link tx timeout
[  102.139176][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.159122][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.699'.
[  102.218766][ T8165] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  102.236424][ T8165] netlink: 232 bytes leftover after parsing attributes in process `syz.0.699'.
[  102.275423][ T8168] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  102.313602][ T8168] veth0: entered promiscuous mode
[  102.327652][ T8167] veth0: left promiscuous mode
[  102.331191][ T8170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.380886][ T8170] tipc: Resetting bearer <eth:syzkaller0>
[  102.431441][ T8170] tipc: Disabling bearer <eth:syzkaller0>
[  102.548589][ T8174] netlink: 'syz.0.703': attribute type 1 has an invalid length.
[  102.618846][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.705'.
[  102.715636][ T8193] veth0: entered promiscuous mode
[  102.717624][ T8192] veth0: left promiscuous mode
[  102.801457][ T8199] syzkaller0: entered promiscuous mode
[  102.803240][ T8199] syzkaller0: entered allmulticast mode
[  102.827390][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'.
[  104.085419][  T971] IPVS: starting estimator thread 0...
[  104.177732][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  104.193925][ T8237] IPVS: using max 80 ests per chain, 192000 per kthread
[  104.743751][ T8265] veth0: entered promiscuous mode
[  104.763053][ T8265] veth0 (unregistering): left promiscuous mode
[  104.982253][ T8280] vlan0: entered promiscuous mode
[  104.984246][ T8280] bridge0: entered promiscuous mode
[  104.986032][ T8280] vlan0: entered allmulticast mode
[  104.987746][ T8280] bridge0: entered allmulticast mode
[  105.237828][ T8292] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  105.240892][ T8292] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  105.490234][ T8304] netlink: 'syz.1.744': attribute type 3 has an invalid length.
[  106.530335][ T8331] __nla_validate_parse: 7 callbacks suppressed
[  106.530344][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  106.648224][ T8339] veth0: entered promiscuous mode
[  106.650959][ T8338] veth0: left promiscuous mode
[  107.322194][ T8353] netlink: 'syz.1.763': attribute type 39 has an invalid length.
[  107.452338][ T8356] veth0: entered promiscuous mode
[  107.458702][ T8355] veth0: left promiscuous mode
[  107.615512][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.618505][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.621446][ T8369] netlink: 'syz.0.769': attribute type 15 has an invalid length.
[  107.624842][ T8369] netlink: 'syz.0.769': attribute type 18 has an invalid length.
[  107.630346][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.630410][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.633240][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.641655][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.646051][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.649154][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.649404][ T8369] netlink: 'syz.0.769': attribute type 15 has an invalid length.
[  107.655082][ T8369] netlink: 'syz.0.769': attribute type 18 has an invalid length.
[  107.662897][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  107.667720][ T8370] netlink: 'syz.0.769': attribute type 15 has an invalid length.
[  107.671245][ T8370] netlink: 'syz.0.769': attribute type 18 has an invalid length.
[  107.786560][ T8378] netlink: 'syz.1.771': attribute type 13 has an invalid length.
[  107.789739][ T8378] netlink: 'syz.1.771': attribute type 17 has an invalid length.
[  108.001118][ T8396] 8021q: adding VLAN 0 to HW filter on device bond9
[  108.040764][ T8396] 8021q: adding VLAN 0 to HW filter on device bond9
[  108.043448][ T8396] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  108.049046][ T8396] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  108.069354][ T8400] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.072089][ T8400] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.075334][ T8400] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.077981][ T8400] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.112995][ T8401] macvlan0: entered promiscuous mode
[  108.120547][ T8401] macvlan0: entered allmulticast mode
[  108.122644][ T8401] bond9: (slave macvlan0): Error -98 calling set_mac_address
[  108.166027][ T8404] veth0: entered promiscuous mode
[  108.170265][ T8403] veth0: left promiscuous mode
[  108.197500][ T8392] netlink: 'syz.2.777': attribute type 4 has an invalid length.
[  108.261843][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.529199][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.560259][ T8422] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  108.912424][ T8430] dvmrp0: entered allmulticast mode
[  108.974730][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  109.545372][ T8442] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  109.601712][ T8448] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.605385][ T8448] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.608666][ T8448] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.612107][ T8448] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.657793][ T8452] x_tables: duplicate underflow at hook 2
[  109.955914][ T8475] bond5: entered promiscuous mode
[  109.958192][ T8475] bond5: entered allmulticast mode
[  109.960712][ T8475] 8021q: adding VLAN 0 to HW filter on device bond5
[  110.287323][ T8502] erspan0: entered promiscuous mode
[  110.295765][ T8502] batadv_slave_1: entered promiscuous mode
[  110.303241][ T8502] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  110.309750][ T8502] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  110.423512][ T3576] wlan0: Trigger new scan to find an IBSS to join
[  110.481744][ T8508] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20004
[  110.659312][ T8527] 8021q: VLANs not supported on vxcan1
[  111.121092][ T8540] pim6reg1: entered promiscuous mode
[  111.123465][ T8540] pim6reg1: entered allmulticast mode
[  111.625049][ T8548] pim6reg1: entered promiscuous mode
[  111.627227][ T8548] pim6reg1: entered allmulticast mode
[  111.676515][ T8558] __nla_validate_parse: 22 callbacks suppressed
[  111.676524][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.828'.
[  111.694049][ T8556] 8021q: adding VLAN 0 to HW filter on device team0
[  111.697661][ T8556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.714989][ T8554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.825662][ T8569] bridge0: entered promiscuous mode
[  111.828247][ T8569] macsec0: entered promiscuous mode
[  111.831104][ T8569] bridge0: port 3(macsec0) entered blocking state
[  111.834238][ T8569] bridge0: port 3(macsec0) entered disabled state
[  111.837078][ T8569] macsec0: entered allmulticast mode
[  111.839290][ T8569] bridge0: entered allmulticast mode
[  111.843581][ T8569] macsec0: left allmulticast mode
[  111.846240][ T8569] bridge0: left allmulticast mode
[  111.850060][ T8569] bridge0: left promiscuous mode
[  112.021671][ T8572] bond0 (unregistering): Released all slaves
[  112.179088][ T8583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.186076][ T8583] tipc: Resetting bearer <eth:syzkaller0>
[  112.190497][ T8582] tipc: Disabling bearer <eth:syzkaller0>
[  112.311192][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  112.418090][ T5845] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.491059][ T5845] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.537820][   T32] wlan0: failed to finalize CSA on link 0, disconnecting
[  112.560218][ T5845] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.574054][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.607955][ T5845] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.631744][ T8595] netlink: 212 bytes leftover after parsing attributes in process `syz.2.840'.
[  112.785271][ T5845] bridge_slave_1: left allmulticast mode
[  112.787513][ T5845] bridge_slave_1: left promiscuous mode
[  112.790227][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.806344][ T5845] bridge_slave_0: left allmulticast mode
[  112.808505][ T5845] bridge_slave_0: left promiscuous mode
[  112.811382][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.941902][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.956061][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.959450][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.963682][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.976889][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.098214][ T5845] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  113.110677][ T5845] bond4 (unregistering): (slave gretap2): Releasing active interface
[  113.153136][ T5845] dvmrp0 (unregistering): left allmulticast mode
[  113.255711][ T5845] bond1 (unregistering): (slave bridge1): Removing an active aggregator
[  113.260422][ T5845] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  113.414965][ T5845] bond1 (unregistering): Released all slaves
[  113.454752][   T36] wlan0: Trigger new scan to find an IBSS to join
[  113.480370][ T5845] bond2 (unregistering): (slave bond3): Releasing backup interface
[  113.483480][ T5845] bond2 (unregistering): Released all slaves
[  113.544487][ T5845] bond3 (unregistering): Released all slaves
[  113.553539][ T5845] bond4 (unregistering): Released all slaves
[  113.618064][ T5845] bond5 (unregistering): Released all slaves
[  113.635585][ T8609] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.639818][ T8609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40576 - 0
[  113.643071][ T8609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[  113.646474][ T8609] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  113.718740][ T8609] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.722626][ T8609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40576 - 0
[  113.731501][ T8609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[  113.741185][ T8609] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  113.765676][ T5845] tipc: Left network mode
[  113.877530][ T8609] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.881844][ T8609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40576 - 0
[  113.886132][ T8609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[  113.890154][ T8609] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  113.942135][ T8609] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.952497][ T8609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40576 - 0
[  113.957307][ T8609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44970 - 0
[  113.961607][ T8609] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  114.065560][ T5845] hsr_slave_0: left promiscuous mode
[  114.073492][ T5845] hsr0: left allmulticast mode
[  114.078648][ T5845] hsr0: left promiscuous mode
[  114.121258][ T5845] pim6reg (unregistering): left allmulticast mode
[  114.121755][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  114.127466][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  114.131462][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  114.137666][ T5845] team0 (unregistering): Port device batadv0 removed
[  114.278040][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  114.301090][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  114.611277][ T8609] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.621408][ T8609] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 40576 - 0
[  114.625154][ T8609] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 44970 - 0
[  114.628751][ T8609] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  114.646152][ T8609] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.654309][ T8609] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 40576 - 0
[  114.657667][ T8609] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 44970 - 0
[  114.661036][ T8609] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  114.667515][ T8614] chnl_net:caif_netlink_parms(): no params data found
[  114.686936][ T8609] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.690309][ T8609] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 40576 - 0
[  114.693723][ T8609] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 44970 - 0
[  114.697971][ T8609] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  114.722755][ T8609] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.727083][ T8609] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 40576 - 0
[  114.730490][ T8609] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 44970 - 0
[  114.735190][ T8609] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  114.787125][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'.
[  114.815638][ T8614] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.819264][ T8614] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.822634][ T8614] bridge_slave_0: entered allmulticast mode
[  114.831857][ T8614] bridge_slave_0: entered promiscuous mode
[  114.839963][ T8614] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.847805][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.859257][ T8614] bridge_slave_1: entered allmulticast mode
[  114.870818][ T8614] bridge_slave_1: entered promiscuous mode
[  114.891161][ T8614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.902312][ T8614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.921133][ T5845] IPVS: stop unused estimator thread 0...
[  114.937649][ T8614] team0: Port device team_slave_0 added
[  114.942547][ T8614] team0: Port device team_slave_1 added
[  114.986383][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.988806][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.998917][ T8614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.004630][ T8614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.008479][ T8614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.018290][ T8614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.054348][ T5219] Bluetooth: hci1: command tx timeout
[  115.064264][ T8614] hsr_slave_0: entered promiscuous mode
[  115.066655][ T8614] hsr_slave_1: entered promiscuous mode
[  115.069484][ T8614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.072021][ T8614] Cannot create hsr debugfs directory
[  115.129904][ T8660] team0: left allmulticast mode
[  115.132478][ T8660] team_slave_0: left allmulticast mode
[  115.137901][ T8660] team_slave_1: left allmulticast mode
[  115.140424][ T8660] team0: left promiscuous mode
[  115.142472][ T8660] team_slave_0: left promiscuous mode
[  115.144722][ T8660] team_slave_1: left promiscuous mode
[  115.146787][ T8660] bridge0: port 3(team0) entered disabled state
[  115.150440][ T8660] bridge_slave_0: left promiscuous mode
[  115.152524][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.157610][ T8660] bridge_slave_1: left allmulticast mode
[  115.159575][ T8660] bridge_slave_1: left promiscuous mode
[  115.162153][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.168994][ T8660] bond0: (slave bond_slave_0): Releasing backup interface
[  115.173428][ T8660] bond0: (slave bond_slave_1): Releasing backup interface
[  115.181744][ T8660] team0: Port device team_slave_0 removed
[  115.185907][ T8660] team0: Port device team_slave_1 removed
[  115.189196][ T8660] bond2: (slave gretap2): Releasing backup interface
[  115.196581][ T8660] bond5: (slave ip6gretap1): Releasing active interface
[  115.207283][ T8664] team0: Mode changed to "broadcast"
[  115.231010][ T8660] vlan0: entered promiscuous mode
[  115.238266][ T8660] team0: Device vlan0 failed to register rx_handler
[  115.750055][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.856'.
[  115.763335][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  115.769393][ T5845] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  115.784078][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  115.819922][ T8614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  115.826558][ T8614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  115.840147][ T8614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  115.852913][ T8614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  115.972170][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  115.992910][ T8614] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.028867][ T8614] 8021q: adding VLAN 0 to HW filter on device team0
[  116.049311][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.052319][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.070745][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.073571][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.180731][ T8731] validate_nla: 8 callbacks suppressed
[  116.180744][ T8731] netlink: 'syz.2.863': attribute type 1 has an invalid length.
[  116.202164][ T8731] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  116.325313][ T8614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.325475][ T8751] netlink: 'syz.2.864': attribute type 64 has an invalid length.
[  116.347918][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[  116.418153][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'.
[  116.501024][  T790] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  116.544240][ T8614] veth0_vlan: entered promiscuous mode
[  116.550836][ T8614] veth1_vlan: entered promiscuous mode
[  116.576237][ T8614] veth0_macvtap: entered promiscuous mode
[  116.582993][ T8614] veth1_macvtap: entered promiscuous mode
[  116.600028][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.610957][ T8614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.621895][ T8614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.628530][ T8614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.631374][ T8614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.635498][ T8614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.697973][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.700502][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.735500][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.738430][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.932671][ T8790] netlink: 'syz.0.871': attribute type 5 has an invalid length.
[  116.999487][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'.
[  118.086182][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.241736][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'.
[  118.287939][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'.
[  118.352306][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'.
[  118.388397][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.391528][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.395936][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.400647][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.405200][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.615694][ T8833] chnl_net:caif_netlink_parms(): no params data found
[  118.699168][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.702220][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.705445][ T8833] bridge_slave_0: entered allmulticast mode
[  118.709650][ T8833] bridge_slave_0: entered promiscuous mode
[  118.714616][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.717715][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.721079][ T8833] bridge_slave_1: entered allmulticast mode
[  118.725296][ T8833] bridge_slave_1: entered promiscuous mode
[  118.756387][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.762886][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.797402][ T8833] team0: Port device team_slave_0 added
[  118.802431][ T8833] team0: Port device team_slave_1 added
[  118.841585][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.848194][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.862191][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.881005][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.896641][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.917417][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.042765][ T8833] hsr_slave_0: entered promiscuous mode
[  119.055547][ T8833] hsr_slave_1: entered promiscuous mode
[  119.058488][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.062188][ T8833] Cannot create hsr debugfs directory
[  119.333069][ T8880] netlink: 'syz.2.890': attribute type 1 has an invalid length.
[  119.358489][ T8880] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.411808][ T8886] pim6reg1: entered promiscuous mode
[  119.413795][ T8886] pim6reg1: entered allmulticast mode
[  119.442001][ T8889] bond6: (slave veth5): Enslaving as an active interface with a down link
[  119.454687][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.456988][ T8888] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  119.516542][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.720820][ T8909] netlink: 'syz.2.897': attribute type 1 has an invalid length.
[  119.758671][ T8909] bond7: (slave gretap1): making interface the new active one
[  119.762123][ T8909] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  119.792631][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.871903][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[  119.877800][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.906190][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.901'.
[  120.039781][   T13] bridge_slave_1: left allmulticast mode
[  120.041661][   T13] bridge_slave_1: left promiscuous mode
[  120.043515][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.052375][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'.
[  120.057808][   T13] bridge_slave_0: left allmulticast mode
[  120.059884][   T13] bridge_slave_0: left promiscuous mode
[  120.068629][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.184195][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  120.363131][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.370219][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.378073][   T13] bond0 (unregistering): Released all slaves
[  120.501845][ T5219] Bluetooth: hci1: command tx timeout
[  120.818982][   T13] hsr_slave_0: left promiscuous mode
[  120.822347][   T13] hsr_slave_1: left promiscuous mode
[  120.825642][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.828853][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.832693][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.844758][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.862127][   T13] veth1_macvtap: left promiscuous mode
[  120.865614][   T13] veth0_macvtap: left promiscuous mode
[  120.868179][   T13] veth1_vlan: left promiscuous mode
[  120.870520][   T13] veth0_vlan: left promiscuous mode
[  120.907125][ T8954] netlink: 'syz.0.907': attribute type 1 has an invalid length.
[  121.137608][   T13] team0 (unregistering): Port device team_slave_1 removed
[  121.158669][   T13] team0 (unregistering): Port device team_slave_0 removed
[  121.509170][ T8956] 8021q: adding VLAN 0 to HW filter on device bond10
[  121.619637][ T8833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  121.643207][ T8833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  121.656663][ T8833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  121.672412][ T8833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  121.801371][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.811300][ T8833] 8021q: adding VLAN 0 to HW filter on device team0
[  121.864670][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.867324][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.930832][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.933132][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.119684][ T9007] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.917'.
[  122.152735][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.181202][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'.
[  122.185569][ T8833] veth0_vlan: entered promiscuous mode
[  122.198299][ T8833] veth1_vlan: entered promiscuous mode
[  122.237709][ T8833] veth0_macvtap: entered promiscuous mode
[  122.242800][ T8833] veth1_macvtap: entered promiscuous mode
[  122.262646][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.275298][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.282013][ T8833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.286992][ T8833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.290569][ T8833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.295143][ T8833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.357636][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.360178][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.382611][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.388959][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.574447][ T5840] Bluetooth: hci1: command tx timeout
[  123.235431][ T9025] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  123.253756][ T9025] 8021q: adding VLAN 0 to HW filter on device bond11
[  123.707569][ T9031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.710836][ T9032] syzkaller0: entered promiscuous mode
[  123.713194][ T9032] syzkaller0: entered allmulticast mode
[  123.724395][ T9033] tipc: Resetting bearer <eth:syzkaller0>
[  123.727842][ T9030] tipc: Resetting bearer <eth:syzkaller0>
[  123.739481][ T9030] tipc: Disabling bearer <eth:syzkaller0>
[  123.972883][ T9041] netlink: 14 bytes leftover after parsing attributes in process `syz.2.927'.
[  124.109645][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  124.113294][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'.
[  124.124549][ T9045] nbd2: detected capacity change from 0 to 63
[  124.190724][ T9045] bond8: entered promiscuous mode
[  124.191200][ T9051] netlink: 'syz.0.930': attribute type 58 has an invalid length.
[  124.192485][ T9045] bond8: entered allmulticast mode
[  124.198280][ T9045] 8021q: adding VLAN 0 to HW filter on device bond8
[  124.256294][ T9052] netlink: 'syz.0.930': attribute type 1 has an invalid length.
[  124.277132][ T9052] bond12: entered promiscuous mode
[  124.279711][ T9052] 8021q: adding VLAN 0 to HW filter on device bond12
[  124.294107][ T9052] bond12: (slave bridge9): making interface the new active one
[  124.297239][ T9052] bridge9: entered promiscuous mode
[  124.300029][ T9052] bond12: (slave bridge9): Enslaving as an active interface with an up link
[  124.886175][   T57] block nbd2: Receive control failed (result -104)
[  129.214090][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  132.419056][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  139.737707][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  139.741767][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  139.745168][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  139.748570][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  139.751590][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  139.792666][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  139.796015][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  139.798892][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  139.801774][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  139.805220][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  139.918535][ T9057] chnl_net:caif_netlink_parms(): no params data found
[  139.997510][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.000047][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.002386][ T9057] bridge_slave_0: entered allmulticast mode
[  140.005592][ T9057] bridge_slave_0: entered promiscuous mode
[  140.017004][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.019405][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.021765][ T9057] bridge_slave_1: entered allmulticast mode
[  140.025113][ T9057] bridge_slave_1: entered promiscuous mode
[  140.067968][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.079125][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.100842][ T9057] team0: Port device team_slave_0 added
[  140.108891][ T9057] team0: Port device team_slave_1 added
[  140.111066][ T9059] chnl_net:caif_netlink_parms(): no params data found
[  140.137274][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.139469][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.148664][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.159618][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.161819][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.171284][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.236757][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.239810][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.242802][ T9059] bridge_slave_0: entered allmulticast mode
[  140.247313][ T9059] bridge_slave_0: entered promiscuous mode
[  140.258742][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.261791][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.265106][ T9059] bridge_slave_1: entered allmulticast mode
[  140.268960][ T9059] bridge_slave_1: entered promiscuous mode
[  140.275892][ T9057] hsr_slave_0: entered promiscuous mode
[  140.278218][ T9057] hsr_slave_1: entered promiscuous mode
[  140.280677][ T9057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.283955][ T9057] Cannot create hsr debugfs directory
[  140.323568][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.333144][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.383283][ T9059] team0: Port device team_slave_0 added
[  140.394901][ T9059] team0: Port device team_slave_1 added
[  140.432705][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.435414][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.444481][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.458355][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.460925][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.470941][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.527209][ T9059] hsr_slave_0: entered promiscuous mode
[  140.530435][ T9059] hsr_slave_1: entered promiscuous mode
[  140.533025][ T9059] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.536227][ T9059] Cannot create hsr debugfs directory
[  141.775818][ T5835] Bluetooth: hci3: command tx timeout
[  141.854219][ T5835] Bluetooth: hci4: command tx timeout
[  143.864457][ T5835] Bluetooth: hci3: command tx timeout
[  143.934051][ T5835] Bluetooth: hci4: command tx timeout
[  145.855895][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.934653][ T5835] Bluetooth: hci3: command tx timeout
[  146.014096][ T5835] Bluetooth: hci4: command tx timeout
[  146.494054][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  148.014532][ T5835] Bluetooth: hci3: command tx timeout
[  148.094106][ T5835] Bluetooth: hci4: command tx timeout
[  154.184726][  T127] block nbd2: Possible stuck request ffff8880209c8000: control (read@0,1024B). Runtime 30 seconds
[  154.188535][  T127] block nbd2: Possible stuck request ffff8880209c8200: control (read@1024,1024B). Runtime 30 seconds
[  154.192277][  T127] block nbd2: Possible stuck request ffff8880209c8400: control (read@2048,1024B). Runtime 30 seconds
[  154.195939][  T127] block nbd2: Possible stuck request ffff8880209c8600: control (read@3072,1024B). Runtime 30 seconds
[  162.701416][ T8211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.751348][ T8211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.806916][ T8211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.852799][ T8211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.961193][ T8211] bridge_slave_1: left allmulticast mode
[  162.963381][ T8211] bridge_slave_1: left promiscuous mode
[  162.968612][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.975672][ T8211] bridge_slave_0: left allmulticast mode
[  162.977962][ T8211] bridge_slave_0: left promiscuous mode
[  162.984243][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.016591][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.019692][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.022925][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.026258][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.033723][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.232843][ T8211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.238739][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.243745][ T8211] bond0 (unregistering): Released all slaves
[  163.414573][ T9075] chnl_net:caif_netlink_parms(): no params data found
[  163.494792][ T8211] hsr_slave_0: left promiscuous mode
[  163.497589][ T8211] hsr_slave_1: left promiscuous mode
[  163.499988][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.502867][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.508629][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.511691][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.526845][ T8211] veth1_macvtap: left promiscuous mode
[  163.529142][ T8211] veth0_macvtap: left promiscuous mode
[  163.531721][ T8211] veth1_vlan: left promiscuous mode
[  163.534305][ T8211] veth0_vlan: left promiscuous mode
[  163.865075][ T8211] team0 (unregistering): Port device team_slave_1 removed
[  163.893308][ T8211] team0 (unregistering): Port device team_slave_0 removed
[  164.185992][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.188383][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.190754][ T9075] bridge_slave_0: entered allmulticast mode
[  164.193485][ T9075] bridge_slave_0: entered promiscuous mode
[  164.199289][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.201832][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.205103][ T9075] bridge_slave_1: entered allmulticast mode
[  164.208228][ T9075] bridge_slave_1: entered promiscuous mode
[  164.235995][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.240563][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.260960][ T9075] team0: Port device team_slave_0 added
[  164.264981][ T9075] team0: Port device team_slave_1 added
[  164.284570][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.286770][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.295862][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.300128][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.302292][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.310551][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.341912][ T9075] hsr_slave_0: entered promiscuous mode
[  164.344514][ T9075] hsr_slave_1: entered promiscuous mode
[  164.346878][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.349379][ T9075] Cannot create hsr debugfs directory
[  165.054212][ T5219] Bluetooth: hci1: command tx timeout
[  167.134320][ T5219] Bluetooth: hci1: command tx timeout
[  169.214074][ T5219] Bluetooth: hci1: command tx timeout
[  171.294346][ T5219] Bluetooth: hci1: command tx timeout
[  180.424175][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.264519][  T127] block nbd2: Possible stuck request ffff8880209c8000: control (read@0,1024B). Runtime 60 seconds
[  184.269025][  T127] block nbd2: Possible stuck request ffff8880209c8200: control (read@1024,1024B). Runtime 60 seconds
[  184.273452][  T127] block nbd2: Possible stuck request ffff8880209c8400: control (read@2048,1024B). Runtime 60 seconds
[  184.277991][  T127] block nbd2: Possible stuck request ffff8880209c8600: control (read@3072,1024B). Runtime 60 seconds
[  185.683235][ T5279] udevd[5279]: worker [8604] /devices/virtual/block/nbd2 is taking a long time
[  193.858177][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  199.759528][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.763217][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  199.766186][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  199.769895][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  199.772841][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.787771][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  199.791525][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  199.804088][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  199.807915][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  199.810637][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.884152][ T9085] chnl_net:caif_netlink_parms(): no params data found
[  199.970033][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.972936][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.977973][ T9085] bridge_slave_0: entered allmulticast mode
[  199.981081][ T9085] bridge_slave_0: entered promiscuous mode
[  199.986663][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.989574][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.992625][ T9085] bridge_slave_1: entered allmulticast mode
[  199.998390][ T9085] bridge_slave_1: entered promiscuous mode
[  200.045368][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.055473][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.123212][ T9085] team0: Port device team_slave_0 added
[  200.128833][ T9085] team0: Port device team_slave_1 added
[  200.131622][ T9087] chnl_net:caif_netlink_parms(): no params data found
[  200.168285][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.171244][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.182085][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.196151][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.198909][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.209603][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.271472][ T9085] hsr_slave_0: entered promiscuous mode
[  200.274946][ T9085] hsr_slave_1: entered promiscuous mode
[  200.277801][ T9085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.280941][ T9085] Cannot create hsr debugfs directory
[  200.283510][ T9087] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.286207][ T9087] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.288537][ T9087] bridge_slave_0: entered allmulticast mode
[  200.291288][ T9087] bridge_slave_0: entered promiscuous mode
[  200.297275][ T9087] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.299596][ T9087] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.301864][ T9087] bridge_slave_1: entered allmulticast mode
[  200.304857][ T9087] bridge_slave_1: entered promiscuous mode
[  200.337467][ T9087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.348922][ T9087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.379587][ T9087] team0: Port device team_slave_0 added
[  200.385592][ T9087] team0: Port device team_slave_1 added
[  200.421890][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.424668][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.433009][ T9087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.441178][ T9087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.443427][ T9087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.452006][ T9087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.505483][ T9087] hsr_slave_0: entered promiscuous mode
[  200.508649][ T9087] hsr_slave_1: entered promiscuous mode
[  200.510812][ T9087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.513179][ T9087] Cannot create hsr debugfs directory
[  201.854129][ T5835] Bluetooth: hci5: command tx timeout
[  201.864677][ T5835] Bluetooth: hci6: command tx timeout
[  203.934154][ T5219] Bluetooth: hci5: command tx timeout
[  203.936247][ T5835] Bluetooth: hci6: command tx timeout
[  206.014266][ T5835] Bluetooth: hci6: command tx timeout
[  206.016359][ T5835] Bluetooth: hci5: command tx timeout
[  208.095098][ T5219] Bluetooth: hci5: command tx timeout
[  208.095275][ T5835] Bluetooth: hci6: command tx timeout
[  214.334347][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  214.344650][  T127] block nbd2: Possible stuck request ffff8880209c8000: control (read@0,1024B). Runtime 90 seconds
[  214.349141][  T127] block nbd2: Possible stuck request ffff8880209c8200: control (read@1024,1024B). Runtime 90 seconds
[  214.353642][  T127] block nbd2: Possible stuck request ffff8880209c8400: control (read@2048,1024B). Runtime 90 seconds
[  214.358424][  T127] block nbd2: Possible stuck request ffff8880209c8600: control (read@3072,1024B). Runtime 90 seconds
[  224.176242][ T5219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  224.180697][ T5219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  224.185684][ T5219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  224.189408][ T5219] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  224.193028][ T5219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  224.300464][ T9102] chnl_net:caif_netlink_parms(): no params data found
[  224.352562][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.355560][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.357901][ T9102] bridge_slave_0: entered allmulticast mode
[  224.360962][ T9102] bridge_slave_0: entered promiscuous mode
[  224.364551][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.366934][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.369402][ T9102] bridge_slave_1: entered allmulticast mode
[  224.372433][ T9102] bridge_slave_1: entered promiscuous mode
[  224.391768][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.396493][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.418903][ T9102] team0: Port device team_slave_0 added
[  224.423569][ T9102] team0: Port device team_slave_1 added
[  224.440338][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.443199][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.452601][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.457224][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.459532][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.468351][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.506119][ T9102] hsr_slave_0: entered promiscuous mode
[  224.509314][ T9102] hsr_slave_1: entered promiscuous mode
[  224.512129][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.515763][ T9102] Cannot create hsr debugfs directory
[  226.254109][ T5835] Bluetooth: hci7: command tx timeout
[  228.334027][ T5835] Bluetooth: hci7: command tx timeout
[  230.414089][ T5835] Bluetooth: hci7: command tx timeout
[  232.494110][ T5835] Bluetooth: hci7: command tx timeout
[  244.415317][  T127] block nbd2: Possible stuck request ffff8880209c8000: control (read@0,1024B). Runtime 120 seconds
[  244.419806][  T127] block nbd2: Possible stuck request ffff8880209c8200: control (read@1024,1024B). Runtime 120 seconds
[  244.424876][  T127] block nbd2: Possible stuck request ffff8880209c8400: control (read@2048,1024B). Runtime 120 seconds
[  244.429695][  T127] block nbd2: Possible stuck request ffff8880209c8600: control (read@3072,1024B). Runtime 120 seconds
[  245.054000][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  255.300346][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  260.779511][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  260.782869][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  260.786716][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  260.789709][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  260.792765][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  260.830496][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  260.835414][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  260.838823][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  260.842889][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  260.846811][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  260.961386][ T9113] chnl_net:caif_netlink_parms(): no params data found
[  261.078139][ T9113] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.081177][ T9113] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.084582][ T9113] bridge_slave_0: entered allmulticast mode
[  261.088615][ T9113] bridge_slave_0: entered promiscuous mode
[  261.097952][ T9116] chnl_net:caif_netlink_parms(): no params data found
[  261.107272][ T9113] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.110401][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.113396][ T9113] bridge_slave_1: entered allmulticast mode
[  261.121398][ T9113] bridge_slave_1: entered promiscuous mode
[  261.171312][ T9113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.184554][ T9113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.229420][ T9113] team0: Port device team_slave_0 added
[  261.250517][ T9113] team0: Port device team_slave_1 added
[  261.252690][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.260750][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.264607][ T9116] bridge_slave_0: entered allmulticast mode
[  261.268511][ T9116] bridge_slave_0: entered promiscuous mode
[  261.280881][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.284484][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.287489][ T9116] bridge_slave_1: entered allmulticast mode
[  261.291215][ T9116] bridge_slave_1: entered promiscuous mode
[  261.325902][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.328778][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.339325][ T9113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.345740][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.349678][ T9113] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.352536][ T9113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.363026][ T9113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.370003][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.399531][ T9116] team0: Port device team_slave_0 added
[  261.404171][ T9116] team0: Port device team_slave_1 added
[  261.443804][ T9113] hsr_slave_0: entered promiscuous mode
[  261.447049][ T9113] hsr_slave_1: entered promiscuous mode
[  261.449136][ T9113] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.451707][ T9113] Cannot create hsr debugfs directory
[  261.454853][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.457487][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.466739][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.471411][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.474157][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.482876][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.534999][ T9116] hsr_slave_0: entered promiscuous mode
[  261.537305][ T9116] hsr_slave_1: entered promiscuous mode
[  261.539422][ T9116] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.541753][ T9116] Cannot create hsr debugfs directory
[  262.494098][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  262.494303][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  262.814089][ T5219] Bluetooth: hci8: command tx timeout
[  262.894090][ T5219] Bluetooth: hci9: command tx timeout
[  264.894295][ T5219] Bluetooth: hci8: command tx timeout
[  264.974365][ T5219] Bluetooth: hci9: command tx timeout
[  266.974088][ T5219] Bluetooth: hci8: command tx timeout
[  267.054322][ T5219] Bluetooth: hci9: command tx timeout
[  269.054345][ T5219] Bluetooth: hci8: command tx timeout
[  269.134269][ T5219] Bluetooth: hci9: command tx timeout
[  273.855038][   T34] INFO: task syz.2.929:9047 blocked for more than 143 seconds.
[  273.857534][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  273.862203][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  273.865840][   T34] task:syz.2.929       state:D stack:24904 pid:9047  tgid:9044  ppid:5842   task_flags:0x480140 flags:0x00004004
[  273.869727][   T34] Call Trace:
[  273.870836][   T34]  <TASK>
[  273.871825][   T34]  __schedule+0x16f5/0x4d00
[  273.873338][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.875684][   T34]  ? schedule+0x165/0x360
[  273.877159][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.878778][   T34]  ? __pfx___schedule+0x10/0x10
[  273.880394][   T34]  ? schedule+0x91/0x360
[  273.881807][   T34]  schedule+0x165/0x360
[  273.883198][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  273.894062][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  273.896141][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  273.898167][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  273.900163][   T34]  queue_limits_commit_update_frozen+0x5e/0x360
[  273.902195][   T34]  ? nbd_set_size+0x2bb/0x6c0
[  273.903786][   T34]  nbd_set_size+0x494/0x6c0
[  273.906294][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  273.907946][   T34]  ? __mutex_trylock_common+0x153/0x260
[  273.909721][   T34]  ? __mutex_lock+0x330/0xe80
[  273.911227][   T34]  ? nla_memcpy+0x5b/0xc0
[  273.912650][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  273.914619][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  273.916393][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  273.918423][   T34]  ? bpf_lsm_capable+0x9/0x20
[  273.919916][   T34]  ? security_capable+0x7e/0x2e0
[  273.921477][   T34]  ? radix_tree_lookup+0x240/0x290
[  273.923136][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  273.926295][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  273.928108][   T34]  ? __nla_parse+0x40/0x60
[  273.929548][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  273.931634][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  273.933440][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  273.935905][   T34]  genl_rcv_msg+0x60e/0x790
[  273.937437][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.939032][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  273.940847][   T34]  netlink_rcv_skb+0x208/0x470
[  273.942416][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  273.944352][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  273.946141][   T34]  ? down_read+0x1ad/0x2e0
[  273.947585][   T34]  genl_rcv+0x28/0x40
[  273.948876][   T34]  netlink_unicast+0x75b/0x8d0
[  273.951171][   T34]  netlink_sendmsg+0x805/0xb30
[  273.952723][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.954582][   T34]  ? __lock_acquire+0xab9/0xd20
[  273.956187][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  273.957784][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.959611][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.961364][   T34]  __sock_sendmsg+0x21c/0x270
[  273.962842][   T34]  ____sys_sendmsg+0x505/0x830
[  273.964468][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.966145][   T34]  ? import_iovec+0x74/0xa0
[  273.967716][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  273.969306][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.971102][   T34]  ? __fget_files+0x2a/0x420
[  273.972565][   T34]  ? __fget_files+0x3a0/0x420
[  273.974198][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  273.975834][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.977711][   T34]  ? rcu_is_watching+0x15/0xb0
[  273.979236][   T34]  ? do_syscall_64+0xbe/0x3b0
[  273.980695][   T34]  do_syscall_64+0xfa/0x3b0
[  273.982151][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.984067][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.985961][   T34]  ? exc_page_fault+0x9f/0xf0
[  273.987687][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.989565][   T34] RIP: 0033:0x7fdf4238e929
[  273.991040][   T34] RSP: 002b:00007fdf4324e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.993606][   T34] RAX: ffffffffffffffda RBX: 00007fdf425b6080 RCX: 00007fdf4238e929
[  273.996174][   T34] RDX: 0000000000000090 RSI: 00002000000001c0 RDI: 0000000000000005
[  273.998652][   T34] RBP: 00007fdf42410b39 R08: 0000000000000000 R09: 0000000000000000
[  274.001112][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.003577][   T34] R13: 0000000000000000 R14: 00007fdf425b6080 R15: 00007ffc14939ae8
[  274.006429][   T34]  </TASK>
[  274.007569][   T34] INFO: task syz.0.930:9049 blocked for more than 143 seconds.
[  274.009931][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  274.012390][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.015860][   T34] task:syz.0.930       state:D stack:27456 pid:9049  tgid:9048  ppid:5833   task_flags:0x400140 flags:0x00004004
[  274.020178][   T34] Call Trace:
[  274.021405][   T34]  <TASK>
[  274.022587][   T34]  __schedule+0x16f5/0x4d00
[  274.024441][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.026260][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.028072][   T34]  ? schedule+0x165/0x360
[  274.029732][   T34]  ? __pfx___schedule+0x10/0x10
[  274.031533][   T34]  ? schedule+0x91/0x360
[  274.033150][   T34]  schedule+0x165/0x360
[  274.036394][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.038515][   T34]  __mutex_lock+0x724/0xe80
[  274.040156][   T34]  ? unwind_get_return_address+0x4d/0x90
[  274.041956][   T34]  ? __mutex_lock+0x51b/0xe80
[  274.043579][   T34]  ? genl_rcv_msg+0x10d/0x790
[  274.045288][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.047061][   T34]  ? stack_trace_save+0x9c/0xe0
[  274.048644][   T34]  ? radix_tree_lookup+0x240/0x290
[  274.050228][   T34]  genl_rcv_msg+0x10d/0x790
[  274.051638][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.053148][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.054812][   T34]  netlink_rcv_skb+0x208/0x470
[  274.056307][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.057950][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.059621][   T34]  ? down_read+0x1ad/0x2e0
[  274.061027][   T34]  genl_rcv+0x28/0x40
[  274.062289][   T34]  netlink_unicast+0x75b/0x8d0
[  274.063799][   T34]  netlink_sendmsg+0x805/0xb30
[  274.065426][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.067340][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  274.069376][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.071595][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.074036][   T34]  __sock_sendmsg+0x21c/0x270
[  274.076034][   T34]  __sys_sendto+0x3bd/0x520
[  274.077950][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  274.080021][   T34]  ? do_futex+0x333/0x420
[  274.081808][   T34]  ? rcu_is_watching+0x15/0xb0
[  274.083763][   T34]  __x64_sys_sendto+0xde/0x100
[  274.085880][   T34]  do_syscall_64+0xfa/0x3b0
[  274.087771][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.089948][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.092489][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.094765][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.097100][   T34] RIP: 0033:0x7fe2ab5907bc
[  274.098865][   T34] RSP: 002b:00007fe2ac460ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  274.102347][   T34] RAX: ffffffffffffffda RBX: 00007fe2ac460fc0 RCX: 00007fe2ab5907bc
[  274.105589][   T34] RDX: 0000000000000028 RSI: 00007fe2ac461010 RDI: 0000000000000008
[  274.108876][   T34] RBP: 0000000000000000 R08: 00007fe2ac460f14 R09: 000000000000000c
[  274.112154][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  274.115442][   T34] R13: 00007fe2ac460f68 R14: 00007fe2ac461010 R15: 0000000000000000
[  274.118644][   T34]  </TASK>
[  274.119938][   T34] INFO: task syz.0.930:9051 blocked for more than 143 seconds.
[  274.123060][   T34]       Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0
[  274.126362][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.129963][   T34] task:syz.0.930       state:D stack:24440 pid:9051  tgid:9048  ppid:5833   task_flags:0x400140 flags:0x00004004
[  274.134919][   T34] Call Trace:
[  274.136292][   T34]  <TASK>
[  274.137560][   T34]  __schedule+0x16f5/0x4d00
[  274.139530][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.141505][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.143472][   T34]  ? schedule+0x165/0x360
[  274.145415][   T34]  ? __pfx___schedule+0x10/0x10
[  274.147416][   T34]  ? schedule+0x91/0x360
[  274.149132][   T34]  schedule+0x165/0x360
[  274.150837][   T34]  schedule_preempt_disabled+0x13/0x30
[  274.153024][   T34]  __mutex_lock+0x724/0xe80
[  274.155147][   T34]  ? unwind_get_return_address+0x4d/0x90
[  274.157488][   T34]  ? __mutex_lock+0x51b/0xe80
[  274.159414][   T34]  ? genl_rcv_msg+0x10d/0x790
[  274.161310][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  274.163383][   T34]  ? stack_trace_save+0x9c/0xe0
[  274.165467][   T34]  ? radix_tree_lookup+0x240/0x290
[  274.167556][   T34]  genl_rcv_msg+0x10d/0x790
[  274.169399][   T34]  ? __lock_acquire+0xab9/0xd20
[  274.171409][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.173496][   T34]  netlink_rcv_skb+0x208/0x470
[  274.175642][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  274.177703][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.179876][   T34]  ? down_read+0x1ad/0x2e0
[  274.181750][   T34]  genl_rcv+0x28/0x40
[  274.183446][   T34]  netlink_unicast+0x75b/0x8d0
[  274.185638][   T34]  netlink_sendmsg+0x805/0xb30
[  274.187597][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.189900][   T34]  ? aa_sock_msg_perm+0x94/0x160
[  274.191984][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  274.198013][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.200193][   T34]  __sock_sendmsg+0x21c/0x270
[  274.202180][   T34]  __sys_sendto+0x3bd/0x520
[  274.204943][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  274.207093][   T34]  ? fd_install+0x97/0x540
[  274.209026][   T34]  ? fd_install+0x30d/0x540
[  274.210961][   T34]  __x64_sys_sendto+0xde/0x100
[  274.212968][   T34]  do_syscall_64+0xfa/0x3b0
[  274.218474][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.220589][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.223082][   T34]  ? exc_page_fault+0x9f/0xf0
[  274.225672][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.227604][   T34] RIP: 0033:0x7fe2ab5907bc
[  274.229055][   T34] RSP: 002b:00007fe2ac43fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  274.231687][   T34] RAX: ffffffffffffffda RBX: 00007fe2ac43ffc0 RCX: 00007fe2ab5907bc
[  274.236295][   T34] RDX: 0000000000000020 RSI: 00007fe2ac440010 RDI: 0000000000000011
[  274.239078][   T34] RBP: 0000000000000000 R08: 00007fe2ac43ff14 R09: 000000000000000c
[  274.241542][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011
[  274.244370][   T34] R13: 00007fe2ac43ff68 R14: 00007fe2ac440010 R15: 0000000000000000
[  274.246923][   T34]  </TASK>
[  274.248036][   T34] 
[  274.248036][   T34] Showing all locks held in the system:
[  274.250418][   T34] 1 lock held by khungtaskd/34:
[  274.251973][   T34]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  274.257135][   T34] 2 locks held by dhcpcd/5575:
[  274.258667][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.261379][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.264278][   T34] 2 locks held by getty/5658:
[  274.265752][   T34]  #0: ffff88810db610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.268812][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  274.272164][   T34] 1 lock held by udevd/8604:
[  274.273945][   T34]  #0: ffff8880208df358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  274.277332][   T34] 6 locks held by syz.2.929/9047:
[  274.279020][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.281590][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.284655][   T34]  #2: ffff8880208e5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  274.287931][   T34]  #3: ffff8881091390c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a2/0x6c0
[  274.291052][   T34]  #4: ffff888109138a70 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  274.295825][   T34]  #5: ffff888109138aa8 (&q->q_usage_counter(queue)#3){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360
[  274.299746][   T34] 2 locks held by syz.0.930/9049:
[  274.301345][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.304634][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.307970][   T34] 2 locks held by syz.0.930/9051:
[  274.309584][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.312330][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.315373][   T34] 2 locks held by syz-executor/9057:
[  274.317111][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.319778][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.322670][   T34] 2 locks held by syz-executor/9059:
[  274.324477][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.327055][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.330041][   T34] 2 locks held by syz-executor/9075:
[  274.332019][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.335087][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.337946][   T34] 2 locks held by syz-executor/9085:
[  274.339787][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.342759][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.346090][   T34] 2 locks held by syz-executor/9087:
[  274.347783][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.350371][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.353181][   T34] 2 locks held by syz-executor/9102:
[  274.354939][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.357515][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.360377][   T34] 2 locks held by syz-executor/9113:
[  274.362059][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.365239][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.368368][   T34] 2 locks held by syz-executor/9116:
[  274.370041][   T34]  #0: ffffffff8f582b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  274.372602][   T34]  #1: ffffffff8f582988 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  274.375783][   T34] 
[  274.376588][   T34] =============================================
[  274.376588][   T34] 
[  274.379446][   T34] NMI backtrace for cpu 1
[  274.379453][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  274.379461][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.379466][   T34] Call Trace:
[  274.379469][   T34]  <TASK>
[  274.379473][   T34]  dump_stack_lvl+0x189/0x250
[  274.379483][   T34]  ? __wake_up_klogd+0xd9/0x110
[  274.379495][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.379503][   T34]  ? __pfx__printk+0x10/0x10
[  274.379517][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  274.379529][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.379537][   T34]  ? _printk+0xcf/0x120
[  274.379548][   T34]  ? __pfx__printk+0x10/0x10
[  274.379558][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.379566][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  274.379577][   T34]  watchdog+0xfee/0x1030
[  274.379585][   T34]  ? watchdog+0x1de/0x1030
[  274.379594][   T34]  kthread+0x711/0x8a0
[  274.379605][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.379611][   T34]  ? __pfx_kthread+0x10/0x10
[  274.379622][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.379632][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.379638][   T34]  ? __pfx_kthread+0x10/0x10
[  274.379648][   T34]  ret_from_fork+0x3fc/0x770
[  274.379657][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.379666][   T34]  ? __switch_to_asm+0x39/0x70
[  274.379674][   T34]  ? __switch_to_asm+0x33/0x70
[  274.379683][   T34]  ? __pfx_kthread+0x10/0x10
[  274.379692][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.379711][   T34]  </TASK>
[  274.379714][   T34] Sending NMI from CPU 1 to CPUs 0:
[  274.430558][    C0] NMI backtrace for cpu 0
[  274.430575][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  274.430588][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.430595][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  274.430617][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 45 19 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  274.430626][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  274.430636][    C0] RAX: 069b6abea3910100 RBX: ffffffff81975d58 RCX: 069b6abea3910100
[  274.430643][    C0] RDX: 0000000000000001 RSI: ffffffff8d996dd0 RDI: ffffffff8be28fc0
[  274.430649][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  274.430658][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1dff0
[  274.430665][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  274.430671][    C0] FS:  0000000000000000(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  274.430680][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.430687][    C0] CR2: 000055eebc7855c8 CR3: 000000010808e000 CR4: 00000000000006f0
[  274.430723][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  274.430731][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  274.430739][    C0] Call Trace:
[  274.430743][    C0]  <TASK>
[  274.430748][    C0]  default_idle+0x13/0x20
[  274.430761][    C0]  default_idle_call+0x74/0xb0
[  274.430773][    C0]  do_idle+0x1e8/0x510
[  274.430788][    C0]  ? __pfx_do_idle+0x10/0x10
[  274.430806][    C0]  cpu_startup_entry+0x44/0x60
[  274.430818][    C0]  rest_init+0x2de/0x300
[  274.430831][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  274.430848][    C0]  start_kernel+0x47d/0x500
[  274.430862][    C0]  x86_64_start_reservations+0x24/0x30
[  274.430876][    C0]  x86_64_start_kernel+0x143/0x1c0
[  274.430891][    C0]  common_startup_64+0x13e/0x147
[  274.430912][    C0]  </TASK>
[  274.431587][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  274.500141][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  274.503886][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.507102][   T34] Call Trace:
[  274.508229][   T34]  <TASK>
[  274.509164][   T34]  dump_stack_lvl+0x99/0x250
[  274.510620][   T34]  ? __asan_memcpy+0x40/0x70
[  274.512144][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.513753][   T34]  ? __pfx__printk+0x10/0x10
[  274.515262][   T34]  panic+0x2db/0x790
[  274.516555][   T34]  ? __pfx_panic+0x10/0x10
[  274.518048][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  274.519937][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  274.521615][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  274.523523][   T34]  watchdog+0x102d/0x1030
[  274.524892][   T34]  ? watchdog+0x1de/0x1030
[  274.526493][   T34]  kthread+0x711/0x8a0
[  274.528194][   T34]  ? __pfx_watchdog+0x10/0x10
[  274.530105][   T34]  ? __pfx_kthread+0x10/0x10
[  274.531899][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  274.533917][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.536009][   T34]  ? __pfx_kthread+0x10/0x10
[  274.537885][   T34]  ret_from_fork+0x3fc/0x770
[  274.539743][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  274.541731][   T34]  ? __switch_to_asm+0x39/0x70
[  274.543609][   T34]  ? __switch_to_asm+0x33/0x70
[  274.545495][   T34]  ? __pfx_kthread+0x10/0x10
[  274.547336][   T34]  ret_from_fork_asm+0x1a/0x30
[  274.549289][   T34]  </TASK>
[  274.551386][   T34] Kernel Offset: disabled
[  274.553131][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:59:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000001 RCX=608a53ec202e2c00 RDX=ffff888021ba3980
RSI=ffffffff8be28fa0 RDI=ffffffff8be28f60 RBP=ffff8880329a1918 RSP=ffffc900097ffa20
R8 =0000000000000000 R9 =ffffffff8b3cb3d2 R10=dffffc0000000000 R11=ffffffff8b3cb300
R12=dffffc0000000000 R13=ffffffff8b3cb3d2 R14=ffff88803a618d80 R15=0000000000000323
RIP=ffffffff8b3cb40c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc19031cf8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000019d 0000000038316c25
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=00000000000001d1 0000000038316c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108150237 R9 =1ffff1102102a046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af791a R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff0f06e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f3f73f85d00
XMM02=0000000500000007 8004010800000001 XMM03=1008018003028808 000a100014100006
XMM04=0000000000000000 0000000000000013 XMM05=0000000000000000 000000000001df8a
XMM06=000992a4c992a4c9 98ce100000000007 XMM07=0000000800000000 b810100001800422
XMM08=0800028808000100 0002080600000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
