last executing test programs:

543.466598ms ago: executing program 2 (id=809):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc)
bind$netlink(r0, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc)

478.121724ms ago: executing program 2 (id=811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0)

476.409672ms ago: executing program 2 (id=814):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8)
close(r0)

419.839369ms ago: executing program 2 (id=815):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4)

350.406546ms ago: executing program 2 (id=819):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000040000000a00000003"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x8001, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240), 0x0}, 0x20)

289.180024ms ago: executing program 1 (id=821):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32)
close(r1)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d)

288.897954ms ago: executing program 2 (id=823):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x3, 0xfffffffe, 0x40, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0xe}, 0x50)

288.710016ms ago: executing program 1 (id=824):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)

239.17911ms ago: executing program 0 (id=826):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10)

237.86591ms ago: executing program 1 (id=827):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, r1})

112.889893ms ago: executing program 1 (id=828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x14000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x40800)

112.640623ms ago: executing program 0 (id=829):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)

112.330189ms ago: executing program 1 (id=830):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

112.127079ms ago: executing program 0 (id=831):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040)

58.649901ms ago: executing program 0 (id=832):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x2000, 0x4)

309.477µs ago: executing program 1 (id=833):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0)

172.082µs ago: executing program 0 (id=834):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)

0s ago: executing program 0 (id=835):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket(0x2b, 0x80801, 0x1)
socket$key(0xf, 0x3, 0x2)
epoll_create1(0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1916}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64193' (ED25519) to the list of known hosts.
syzkaller login: [   47.923487][ T5821] cgroup: Unknown subsys name 'net'
[   48.005429][ T5821] cgroup: Unknown subsys name 'cpuset'
[   48.009275][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.264129][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.128137][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.131334][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.134392][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.137081][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.139642][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.154894][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.163087][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.166115][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.172841][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.177546][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.206887][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.209895][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.213526][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.216584][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.220392][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.422538][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   53.443675][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   53.489899][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   53.569437][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.572288][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.576410][ T5829] bridge_slave_0: entered allmulticast mode
[   53.580031][ T5829] bridge_slave_0: entered promiscuous mode
[   53.584552][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.586921][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.589309][ T5833] bridge_slave_0: entered allmulticast mode
[   53.592012][ T5833] bridge_slave_0: entered promiscuous mode
[   53.595573][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.597869][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.600190][ T5833] bridge_slave_1: entered allmulticast mode
[   53.602805][ T5833] bridge_slave_1: entered promiscuous mode
[   53.611618][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.614865][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.617690][ T5829] bridge_slave_1: entered allmulticast mode
[   53.621276][ T5829] bridge_slave_1: entered promiscuous mode
[   53.686520][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.694409][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.697586][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.700167][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.702506][ T5837] bridge_slave_0: entered allmulticast mode
[   53.705839][ T5837] bridge_slave_0: entered promiscuous mode
[   53.709830][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.721937][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.725686][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.728215][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.730547][ T5837] bridge_slave_1: entered allmulticast mode
[   53.734206][ T5837] bridge_slave_1: entered promiscuous mode
[   53.745853][ T5833] team0: Port device team_slave_0 added
[   53.771126][ T5833] team0: Port device team_slave_1 added
[   53.782115][ T5829] team0: Port device team_slave_0 added
[   53.801140][ T5829] team0: Port device team_slave_1 added
[   53.805281][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.809234][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.811692][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.821258][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.833721][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.844182][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.846475][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.855814][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.867125][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.869369][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.877902][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.902110][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.904653][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.913100][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.928769][ T5837] team0: Port device team_slave_0 added
[   53.933885][ T5837] team0: Port device team_slave_1 added
[   53.946236][ T5833] hsr_slave_0: entered promiscuous mode
[   53.948596][ T5833] hsr_slave_1: entered promiscuous mode
[   53.967516][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.969745][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.978601][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.003678][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.006510][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.015223][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.022270][ T5829] hsr_slave_0: entered promiscuous mode
[   54.026487][ T5829] hsr_slave_1: entered promiscuous mode
[   54.028908][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.031868][ T5829] Cannot create hsr debugfs directory
[   54.084706][ T5837] hsr_slave_0: entered promiscuous mode
[   54.087031][ T5837] hsr_slave_1: entered promiscuous mode
[   54.089678][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.092123][ T5837] Cannot create hsr debugfs directory
[   54.254338][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.260190][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.272025][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.281100][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.311793][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.325296][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.330432][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.335684][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.356535][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.358973][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.361817][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.364281][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.378531][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.382742][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.406937][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.421542][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.426896][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.437112][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.456571][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.482132][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   54.491118][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.493810][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.501928][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.504532][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.567086][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.590500][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   54.599172][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.615030][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.617431][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.620845][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.623277][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.651295][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   54.665680][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.676322][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.678732][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.691498][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.694074][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.747534][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.751750][ T5833] veth0_vlan: entered promiscuous mode
[   54.772213][ T5833] veth1_vlan: entered promiscuous mode
[   54.804930][ T5833] veth0_macvtap: entered promiscuous mode
[   54.817089][ T5833] veth1_macvtap: entered promiscuous mode
[   54.832392][ T5829] veth0_vlan: entered promiscuous mode
[   54.847898][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.852224][ T5829] veth1_vlan: entered promiscuous mode
[   54.859957][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.874704][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.877553][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.880262][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.883834][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.930694][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.935830][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.957299][ T5829] veth0_macvtap: entered promiscuous mode
[   54.962014][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.970882][ T5829] veth1_macvtap: entered promiscuous mode
[   54.970921][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.978159][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.996798][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.009960][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.016522][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.019625][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.024478][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.027215][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.029982][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.036714][ T5837] veth0_vlan: entered promiscuous mode
[   55.042030][ T5837] veth1_vlan: entered promiscuous mode
[   55.119867][ T5837] veth0_macvtap: entered promiscuous mode
[   55.139757][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.140548][ T5837] veth1_macvtap: entered promiscuous mode
[   55.142267][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.164601][   T54] Bluetooth: hci0: command tx timeout
[   55.171295][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.175130][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.175178][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.187316][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.196519][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.199389][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.202208][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.206163][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.254256][   T54] Bluetooth: hci2: command tx timeout
[   55.257080][   T54] Bluetooth: hci1: command tx timeout
[   55.265633][ T4575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.268161][ T4575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.294947][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.301325][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.323781][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   55.326569][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   55.336671][ T5900] netlink: 'syz.0.6': attribute type 13 has an invalid length.
[   55.339203][ T5900] netlink: 'syz.0.6': attribute type 11 has an invalid length.
[   55.597111][ T5928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'.
[   55.693518][ T5939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.870379][ T5961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35'.
[   55.876752][ T5961] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   55.962630][ T5972] pimreg: entered allmulticast mode
[   55.979423][ T5972] pimreg: left allmulticast mode
[   56.596361][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.609114][ T6020] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET)
[   56.667298][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   56.914082][ T6041] tipc: Started in network mode
[   56.915910][ T6041] tipc: Node identity 2a7b0cc9cbb, cluster identity 4711
[   56.918739][ T6041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.924559][ T6041] syzkaller0: entered promiscuous mode
[   56.926452][ T6041] syzkaller0: entered allmulticast mode
[   56.931922][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[   56.937749][ T6040] tipc: Resetting bearer <eth:syzkaller0>
[   56.963690][ T6040] tipc: Disabling bearer <eth:syzkaller0>
[   57.151609][ T6054] netlink: 'syz.2.75': attribute type 7 has an invalid length.
[   57.158776][ T6054] netlink: 'syz.2.75': attribute type 8 has an invalid length.
[   57.168829][ T6054] netlink: 'syz.2.75': attribute type 15 has an invalid length.
[   57.253940][ T5832] Bluetooth: hci0: command tx timeout
[   57.275626][ T6066] netlink: 248 bytes leftover after parsing attributes in process `syz.1.80'.
[   57.323359][ T5832] Bluetooth: hci1: command tx timeout
[   57.325256][ T5832] Bluetooth: hci2: command tx timeout
[   57.702153][ T6110] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   57.794958][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.99'.
[   58.042275][ T5858] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[   58.127624][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   58.130850][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   58.140811][ T6161] netlink: 'syz.1.115': attribute type 12 has an invalid length.
[   58.144996][ T6161] netlink: 'syz.1.115': attribute type 14 has an invalid length.
[   58.230880][ T6172] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   58.275127][ T6175] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   58.285213][ T6176] warning: `syz.0.121' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.527524][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'.
[   59.193607][ T6257] vlan0: entered promiscuous mode
[   59.195817][ T6257] macvlan2: entered promiscuous mode
[   59.198855][ T6259] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   59.323862][ T5832] Bluetooth: hci0: command tx timeout
[   59.413691][   T54] Bluetooth: hci1: command tx timeout
[   59.415689][ T5832] Bluetooth: hci2: command tx timeout
[   59.690139][ T6300] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   59.692731][ T2224] IPVS: starting estimator thread 0...
[   59.825595][ T6306] IPVS: using max 78 ests per chain, 187200 per kthread
[   60.079915][ T6339] TCP: TCP_TX_DELAY enabled
[   60.399560][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'.
[   61.104448][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'.
[   61.404786][   T54] Bluetooth: hci0: command tx timeout
[   61.493450][   T54] Bluetooth: hci2: command tx timeout
[   61.499461][   T54] Bluetooth: hci1: command tx timeout
[   61.589076][ T6482] netlink: 'syz.0.263': attribute type 15 has an invalid length.
[   61.591733][ T6482] netlink: 'syz.0.263': attribute type 7 has an invalid length.
[   61.599281][ T6482] netlink: 52 bytes leftover after parsing attributes in process `syz.0.263'.
[   61.951559][ T6490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.958548][ T6490] syzkaller0: entered promiscuous mode
[   61.960526][ T6490] syzkaller0: entered allmulticast mode
[   61.973963][ T6490] tipc: Resetting bearer <eth:syzkaller0>
[   61.977544][ T6489] tipc: Resetting bearer <eth:syzkaller0>
[   61.983923][ T6489] tipc: Disabling bearer <eth:syzkaller0>
[   62.093207][ T6494] bridge_slave_0: left allmulticast mode
[   62.095300][ T6494] bridge_slave_0: left promiscuous mode
[   62.097833][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.107643][ T6494] bridge_slave_1: left allmulticast mode
[   62.109735][ T6494] bridge_slave_1: left promiscuous mode
[   62.111822][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.126471][ T6494] bond0: (slave bond_slave_0): Releasing backup interface
[   62.131952][ T6494] bond0: (slave bond_slave_1): Releasing backup interface
[   62.149093][ T6494] team0: Port device team_slave_0 removed
[   62.155455][ T6494] team0: Port device team_slave_1 removed
[   62.158189][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.160846][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.166672][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.169138][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.281895][ T6494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.268'.
[   62.356193][ T6494] bond0 (unregistering): Released all slaves
[   62.512490][ T6502] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   62.519624][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[   62.668823][ T6516] netlink: 'syz.1.277': attribute type 1 has an invalid length.
[   62.677348][ T6516] netlink: 232 bytes leftover after parsing attributes in process `syz.1.277'.
[   62.682657][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'.
[   62.735211][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   62.895252][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   62.936293][ T6541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.944203][ T6533] block nbd0: shutting down sockets
[   62.999541][ T6543] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   63.025680][ T6551] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'.
[   63.141937][ T6563] Bluetooth: MGMT ver 1.23
[   63.178122][ T6561] syzkaller0: entered promiscuous mode
[   63.180687][ T6561] syzkaller0: entered allmulticast mode
[   63.574783][ T6476] Bluetooth: hci2: command 0x0405 tx timeout
[   63.971891][ T6584] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[   64.040104][ T6590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.126301][ T6602] netlink: 'syz.2.317': attribute type 1 has an invalid length.
[   64.170544][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.225807][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.228342][ T6602] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   64.232624][ T6602] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   64.252727][ T6615] gretap1: entered promiscuous mode
[   64.257254][ T6615] bond1: (slave gretap1): making interface the new active one
[   64.260334][ T6615] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   64.274959][ T6615] macvlan3: entered promiscuous mode
[   64.276811][ T6615] macvlan3: entered allmulticast mode
[   64.278975][ T6615] bond1: entered promiscuous mode
[   64.281297][ T6615] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   64.306671][ T6615] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   64.312213][ T6615] bond1: left promiscuous mode
[   64.412885][ T6615] syz.2.317 (6615) used greatest stack depth: 19896 bytes left
[   64.479680][ T6632] IPv6: addrconf: prefix option has invalid lifetime
[   64.571112][ T6627] infiniband syz!: set active
[   64.573656][ T6627] infiniband syz!: added team_slave_0
[   64.626026][ T6627] RDS/IB: syz!: added
[   64.630803][ T6627] smc: adding ib device syz! with port count 1
[   64.636735][ T6627] smc:    ib device syz! port 1 has pnetid 
[   64.636903][ T6645] tipc: Started in network mode
[   64.640913][ T6645] tipc: Node identity 080211, cluster identity 4711
[   64.651142][ T6645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.661664][ T6645] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   64.664859][ T6645] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   64.670052][ T6645] tipc: Resetting bearer <eth:syzkaller0>
[   65.406546][ T6711] __nla_validate_parse: 10 callbacks suppressed
[   65.406556][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'.
[   65.469816][ T6716] netlink: 410 bytes leftover after parsing attributes in process `syz.2.369'.
[   65.556866][ T6725] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.011930][ T6763] rdma_rxe: rxe_newlink: failed to add team_slave_0
[   66.034367][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'.
[   66.297815][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[   66.301453][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[   66.478688][ T6781] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   66.623615][  T971] tipc: Node number set to 134353152
[   66.650731][ T6786] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   66.821100][   T24] cfg80211: failed to load regulatory.db
[   66.940814][ T6809] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   66.944898][ T6809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.131278][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'.
[   67.176137][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'.
[   67.359516][ T6835] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   67.438501][ T6841] vxcan3: entered allmulticast mode
[   67.646843][ T6869] xt_connbytes: Forcing CT accounting to be enabled
[   67.649380][ T6869] set match dimension is over the limit!
[   67.760214][ T6885] openvswitch: netlink: IPv4 tun info is not correct
[   68.391729][ T6918] netlink: 'syz.0.454': attribute type 3 has an invalid length.
[   68.483558][ T6920] Illegal XDP return value 3927828460 on prog  (id 68) dev N/A, expect packet loss!
[   68.829875][ T6935] geneve2: entered promiscuous mode
[   68.839577][ T6937] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   68.890997][ T6941] Bluetooth: MGMT ver 1.23
[   68.928010][ T6937] batadv_slave_0: entered promiscuous mode
[   68.948122][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'.
[   68.956310][ T6937] netlink: 428 bytes leftover after parsing attributes in process `syz.1.460'.
[   68.959130][ T6937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.460'.
[   69.192289][ T6970] netlink: 'syz.2.473': attribute type 4 has an invalid length.
[   69.205230][ T6970] netlink: 'syz.2.473': attribute type 4 has an invalid length.
[   69.326922][ T6984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.456644][ T7001] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.550118][ T7001] netlink: 'syz.1.485': attribute type 1 has an invalid length.
[   69.557862][ T7001] netlink: 'syz.1.485': attribute type 10 has an invalid length.
[   69.636838][ T7023] tipc: Enabled bearer <eth:gre0>, priority 10
[   69.733188][ T7034] Zero length message leads to an empty skb
[   69.757852][ T7034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.206430][ T7081] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[   70.582877][ T7114] __nla_validate_parse: 3 callbacks suppressed
[   70.582886][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'.
[   70.719817][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[   70.729654][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.812037][ T7121] bridge_slave_1 (unregistering): left allmulticast mode
[   70.815947][ T7121] bridge_slave_1 (unregistering): left promiscuous mode
[   70.818631][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.834745][ T7133] syzkaller1: entered promiscuous mode
[   70.838899][ T7133] syzkaller1: entered allmulticast mode
[   70.918089][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'.
[   71.021043][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.024110][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.051013][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'.
[   71.170979][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'.
[   71.522463][ T7185] sock: sock_timestamping_bind_phc: sock not bind to device
[   71.785084][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'.
[   72.331145][ T7217] veth0: entered promiscuous mode
[   72.334054][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'.
[   72.462857][ T7226] netlink: 'syz.1.583': attribute type 2 has an invalid length.
[   72.470171][ T7226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.583'.
[   72.836767][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'.
[   72.990317][ T7250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.595'.
[   73.533696][ T7294] netlink: 'syz.1.614': attribute type 3 has an invalid length.
[   73.544676][ T7296] tipc: Started in network mode
[   73.546922][ T7296] tipc: Node identity 9a0c109aa7ff, cluster identity 4711
[   73.549294][ T7296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.552410][ T7296] syzkaller0: entered promiscuous mode
[   73.566057][ T7296] syzkaller0: entered allmulticast mode
[   73.571634][ T7296] tipc: Resetting bearer <eth:syzkaller0>
[   73.578410][ T7296] tipc: Resetting bearer <eth:syzkaller0>
[   73.588280][ T7296] tipc: Disabling bearer <eth:syzkaller0>
[   74.484968][ T7377] netlink: 'syz.2.654': attribute type 1 has an invalid length.
[   74.500348][ T7377] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.515284][ T7377] bond2: (slave gretap2): making interface the new active one
[   74.518509][ T7377] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   74.848885][ T7413] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[   75.692239][ T7425] __nla_validate_parse: 8 callbacks suppressed
[   75.692251][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   75.698779][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[   75.840028][ T7439] rdma_op ffff8881110641f0 conn xmit_rdma 0000000000000000
[   75.935869][ T7445] GUP no longer grows the stack in syz.1.684 (7445): 200000006000-20000000a000 (200000005000)
[   75.939546][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.1.684 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   75.939558][ T7445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.939563][ T7445] Call Trace:
[   75.939567][ T7445]  <TASK>
[   75.939571][ T7445]  dump_stack_lvl+0x189/0x250
[   75.939589][ T7445]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.939600][ T7445]  ? __pfx__printk+0x10/0x10
[   75.939609][ T7445]  ? find_vma+0xe7/0x160
[   75.939627][ T7445]  __get_user_pages+0x2a60/0x30b0
[   75.939651][ T7445]  ? __pfx___get_user_pages+0x10/0x10
[   75.939660][ T7445]  ? __gup_longterm_locked+0xbf7/0x15b0
[   75.939669][ T7445]  ? down_read_killable+0x1d1/0x350
[   75.939678][ T7445]  ? try_get_folio+0x633/0x660
[   75.939689][ T7445]  __gup_longterm_locked+0xd66/0x15b0
[   75.939700][ T7445]  ? try_grab_folio_fast+0x1be/0x4f0
[   75.939715][ T7445]  ? gup_fast_fallback+0x1afc/0x2260
[   75.939728][ T7445]  gup_fast_fallback+0x1cd4/0x2260
[   75.939754][ T7445]  ? __pfx_gup_fast_fallback+0x10/0x10
[   75.939763][ T7445]  ? trace_contention_end+0x39/0x120
[   75.939774][ T7445]  ? __mutex_lock+0x330/0xe80
[   75.939782][ T7445]  ? futex_unqueue+0x22/0x240
[   75.939791][ T7445]  ? futex_unqueue+0x22/0x240
[   75.939800][ T7445]  ? futex_unqueue+0x22/0x240
[   75.939808][ T7445]  ? is_valid_gup_args+0x11f/0x200
[   75.939818][ T7445]  ? get_user_pages_fast+0x4d/0xb0
[   75.939830][ T7445]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   75.939845][ T7445]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   75.939851][ T7445]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.939862][ T7445]  ? wait_for_space+0x24d/0x2d0
[   75.939874][ T7445]  iov_iter_get_pages2+0x5e/0xa0
[   75.939885][ T7445]  __se_sys_vmsplice+0x548/0x10d0
[   75.939904][ T7445]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   75.939915][ T7445]  ? __pfx_futex_wait+0x10/0x10
[   75.939949][ T7445]  ? __lock_acquire+0xab9/0xd20
[   75.939975][ T7445]  ? do_pipe2+0xf7/0x170
[   75.939988][ T7445]  ? do_syscall_64+0xbe/0x3b0
[   75.940001][ T7445]  do_syscall_64+0xfa/0x3b0
[   75.940009][ T7445]  ? lockdep_hardirqs_on+0x9c/0x150
[   75.940017][ T7445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.940026][ T7445]  ? exc_page_fault+0x9f/0xf0
[   75.940035][ T7445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.940044][ T7445] RIP: 0033:0x7fce0418e929
[   75.940052][ T7445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.940059][ T7445] RSP: 002b:00007fce04f12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   75.940069][ T7445] RAX: ffffffffffffffda RBX: 00007fce043b5fa0 RCX: 00007fce0418e929
[   75.940074][ T7445] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   75.940079][ T7445] RBP: 00007fce04210ca1 R08: 0000000000000000 R09: 0000000000000000
[   75.940084][ T7445] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   75.940088][ T7445] R13: 0000000000000000 R14: 00007fce043b5fa0 R15: 00007ffcf7af4768
[   75.940100][ T7445]  </TASK>
[   76.093775][   T33] audit: type=1800 audit(1752779514.704:2): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.683" name="memory.events" dev="tmpfs" ino=1369 res=0 errno=0
[   76.270185][ T7462] sctp: [Deprecated]: syz.2.692 (pid 7462) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.270185][ T7462] Use struct sctp_sack_info instead
[   76.433406][ T7480] netlink: 304 bytes leftover after parsing attributes in process `syz.2.701'.
[   77.137619][ T7510] netlink: 'syz.0.712': attribute type 9 has an invalid length.
[   77.140347][ T7510] netlink: 'syz.0.712': attribute type 6 has an invalid length.
[   77.193899][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.236351][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.242214][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.291521][ T7510] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.295910][ T7510] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.299020][ T7510] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.302053][ T7510] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.520472][ T7519] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[   77.523631][ T7519] netlink: 172 bytes leftover after parsing attributes in process `syz.0.715'.
[   77.798130][ T7538] netlink: 248 bytes leftover after parsing attributes in process `syz.2.725'.
[   77.892711][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'.
[   78.703406][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[   78.939642][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[   78.962502][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[   79.024407][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.745'.
[   79.189218][ T7624] netlink: 'syz.1.752': attribute type 12 has an invalid length.
[   79.496948][ T7659] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   79.502380][ T7659] tipc: Disabling bearer <udp:syz2>
[   79.907889][ T7682] 8021q: VLANs not supported on xfrm0
[   79.910085][ T7682] netlink: 'syz.1.779': attribute type 10 has an invalid length.
[   80.031117][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.118400][ T7706] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[   80.423863][ T7738] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[   81.093984][ T7796] 
[   81.094858][ T7796] ======================================================
[   81.097196][ T7796] WARNING: possible circular locking dependency detected
[   81.099519][ T7796] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   81.102944][ T7796] ------------------------------------------------------
[   81.105252][ T7796] syz.0.835/7796 is trying to acquire lock:
[   81.107159][ T7796] ffff88802086c188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.110709][ T7796] 
[   81.110709][ T7796] but task is already holding lock:
[   81.113132][ T7796] ffff88802086c230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   81.116282][ T7796] 
[   81.116282][ T7796] which lock already depends on the new lock.
[   81.116282][ T7796] 
[   81.119655][ T7796] 
[   81.119655][ T7796] the existing dependency chain (in reverse order) is:
[   81.122617][ T7796] 
[   81.122617][ T7796] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[   81.125239][ T7796]        lock_acquire+0x120/0x360
[   81.126943][ T7796]        __mutex_lock+0x182/0xe80
[   81.128644][ T7796]        refcount_dec_and_mutex_lock+0x30/0xa0
[   81.130687][ T7796]        nbd_config_put+0x2c/0x790
[   81.132409][ T7796]        nbd_release+0xfe/0x140
[   81.134010][ T7796]        bdev_release+0x536/0x650
[   81.135699][ T7796]        blkdev_release+0x15/0x20
[   81.137327][ T7796]        __fput+0x44c/0xa70
[   81.138864][ T7796]        fput_close_sync+0x119/0x200
[   81.140648][ T7796]        __x64_sys_close+0x7f/0x110
[   81.142403][ T7796]        do_syscall_64+0xfa/0x3b0
[   81.144187][ T7796]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.146334][ T7796] 
[   81.146334][ T7796] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[   81.148942][ T7796]        lock_acquire+0x120/0x360
[   81.150577][ T7796]        __mutex_lock+0x182/0xe80
[   81.152262][ T7796]        __del_gendisk+0x129/0x9e0
[   81.153989][ T7796]        del_gendisk+0xe8/0x160
[   81.155619][ T7796]        nbd_dev_remove_work+0x47/0xe0
[   81.157430][ T7796]        process_scheduled_works+0xae1/0x17b0
[   81.159476][ T7796]        worker_thread+0x8a0/0xda0
[   81.161204][ T7796]        kthread+0x711/0x8a0
[   81.162699][ T7796]        ret_from_fork+0x3fc/0x770
[   81.164412][ T7796]        ret_from_fork_asm+0x1a/0x30
[   81.166179][ T7796] 
[   81.166179][ T7796] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   81.168950][ T7796]        validate_chain+0xb9b/0x2140
[   81.170712][ T7796]        __lock_acquire+0xab9/0xd20
[   81.172459][ T7796]        lock_acquire+0x120/0x360
[   81.174173][ T7796]        down_write+0x96/0x1f0
[   81.175785][ T7796]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.177871][ T7796]        nbd_start_device+0x16c/0xac0
[   81.179647][ T7796]        nbd_genl_connect+0x1250/0x1930
[   81.181469][ T7796]        genl_family_rcv_msg_doit+0x215/0x300
[   81.183461][ T7796]        genl_rcv_msg+0x60e/0x790
[   81.185092][ T7796]        netlink_rcv_skb+0x208/0x470
[   81.186764][ T7796]        genl_rcv+0x28/0x40
[   81.188277][ T7796]        netlink_unicast+0x75c/0x8e0
[   81.190072][ T7796]        netlink_sendmsg+0x805/0xb30
[   81.191772][ T7796]        __sock_sendmsg+0x21c/0x270
[   81.193514][ T7796]        ____sys_sendmsg+0x505/0x830
[   81.195300][ T7796]        ___sys_sendmsg+0x21f/0x2a0
[   81.197058][ T7796]        __x64_sys_sendmsg+0x19b/0x260
[   81.198854][ T7796]        do_syscall_64+0xfa/0x3b0
[   81.200558][ T7796]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.202694][ T7796] 
[   81.202694][ T7796] other info that might help us debug this:
[   81.202694][ T7796] 
[   81.206086][ T7796] Chain exists of:
[   81.206086][ T7796]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[   81.206086][ T7796] 
[   81.210705][ T7796]  Possible unsafe locking scenario:
[   81.210705][ T7796] 
[   81.213189][ T7796]        CPU0                    CPU1
[   81.214962][ T7796]        ----                    ----
[   81.216752][ T7796]   lock(&nbd->config_lock);
[   81.218322][ T7796]                                lock(&disk->open_mutex);
[   81.220605][ T7796]                                lock(&nbd->config_lock);
[   81.222943][ T7796]   lock(&set->update_nr_hwq_lock);
[   81.224633][ T7796] 
[   81.224633][ T7796]  *** DEADLOCK ***
[   81.224633][ T7796] 
[   81.227289][ T7796] 3 locks held by syz.0.835/7796:
[   81.228995][ T7796]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   81.231615][ T7796]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   81.234621][ T7796]  #2: ffff88802086c230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   81.237865][ T7796] 
[   81.237865][ T7796] stack backtrace:
[   81.239828][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.0.835 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.239838][ T7796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.239843][ T7796] Call Trace:
[   81.239848][ T7796]  <TASK>
[   81.239851][ T7796]  dump_stack_lvl+0x189/0x250
[   81.239865][ T7796]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.239874][ T7796]  ? __pfx__printk+0x10/0x10
[   81.239886][ T7796]  ? print_lock_name+0xde/0x100
[   81.239917][ T7796]  print_circular_bug+0x2ee/0x310
[   81.239932][ T7796]  check_noncircular+0x134/0x160
[   81.239943][ T7796]  validate_chain+0xb9b/0x2140
[   81.239956][ T7796]  __lock_acquire+0xab9/0xd20
[   81.239964][ T7796]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.239974][ T7796]  lock_acquire+0x120/0x360
[   81.239981][ T7796]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.239990][ T7796]  ? __mutex_unlock_slowpath+0x1cd/0x700
[   81.240000][ T7796]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   81.240011][ T7796]  down_write+0x96/0x1f0
[   81.240019][ T7796]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.240028][ T7796]  ? __pfx_down_write+0x10/0x10
[   81.240038][ T7796]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   81.240048][ T7796]  ? nbd_add_socket+0x688/0x9a0
[   81.240057][ T7796]  ? nbd_add_socket+0x688/0x9a0
[   81.240067][ T7796]  nbd_start_device+0x16c/0xac0
[   81.240076][ T7796]  ? __nla_parse+0x40/0x60
[   81.240085][ T7796]  nbd_genl_connect+0x1250/0x1930
[   81.240096][ T7796]  ? __pfx_nbd_genl_connect+0x10/0x10
[   81.240106][ T7796]  ? __nla_parse+0x40/0x60
[   81.240114][ T7796]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   81.240124][ T7796]  genl_family_rcv_msg_doit+0x215/0x300
[   81.240133][ T7796]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   81.240148][ T7796]  genl_rcv_msg+0x60e/0x790
[   81.240156][ T7796]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.240163][ T7796]  ? __pfx_nbd_genl_connect+0x10/0x10
[   81.240173][ T7796]  netlink_rcv_skb+0x208/0x470
[   81.240183][ T7796]  ? __pfx_genl_rcv_msg+0x10/0x10
[   81.240191][ T7796]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.240203][ T7796]  ? down_read+0x1ad/0x2e0
[   81.240212][ T7796]  genl_rcv+0x28/0x40
[   81.240220][ T7796]  netlink_unicast+0x75c/0x8e0
[   81.240232][ T7796]  netlink_sendmsg+0x805/0xb30
[   81.240245][ T7796]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.240256][ T7796]  ? aa_sock_msg_perm+0x94/0x160
[   81.240265][ T7796]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.240276][ T7796]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.240287][ T7796]  __sock_sendmsg+0x21c/0x270
[   81.240296][ T7796]  ____sys_sendmsg+0x505/0x830
[   81.240308][ T7796]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.240319][ T7796]  ? import_iovec+0x74/0xa0
[   81.240329][ T7796]  ___sys_sendmsg+0x21f/0x2a0
[   81.240340][ T7796]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.240355][ T7796]  ? __fget_files+0x2a/0x420
[   81.240362][ T7796]  ? __fget_files+0x3a0/0x420
[   81.240369][ T7796]  __x64_sys_sendmsg+0x19b/0x260
[   81.240381][ T7796]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.240393][ T7796]  ? rcu_is_watching+0x15/0xb0
[   81.240402][ T7796]  ? do_syscall_64+0xbe/0x3b0
[   81.240410][ T7796]  do_syscall_64+0xfa/0x3b0
[   81.240417][ T7796]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.240424][ T7796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.240431][ T7796]  ? exc_page_fault+0x9f/0xf0
[   81.240437][ T7796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.240444][ T7796] RIP: 0033:0x7f6b35d8e929
[   81.240453][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.240460][ T7796] RSP: 002b:00007f6b36ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.240469][ T7796] RAX: ffffffffffffffda RBX: 00007f6b35fb5fa0 RCX: 00007f6b35d8e929
[   81.240475][ T7796] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000a
[   81.240479][ T7796] RBP: 00007f6b35e10ca1 R08: 0000000000000000 R09: 0000000000000000
[   81.240484][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.240488][ T7796] R13: 0000000000000000 R14: 00007f6b35fb5fa0 R15: 00007ffd31d8b188
[   81.240495][ T7796]  </TASK>
[   81.443242][ T7796] nbd1: detected capacity change from 0 to 127
[   81.454287][   T55] block nbd1: Receive control failed (result -104)
[   81.520792][ T7772] syz.2.823 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   81.529079][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.2.823 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.529100][ T7772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.529107][ T7772] Call Trace:
[   81.529113][ T7772]  <TASK>
[   81.529118][ T7772]  dump_stack_lvl+0x189/0x250
[   81.529140][ T7772]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.529152][ T7772]  ? __pfx__printk+0x10/0x10
[   81.529175][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529189][ T7772]  dump_header+0xd3/0x480
[   81.529206][ T7772]  oom_kill_process+0x3b6/0x950
[   81.529219][ T7772]  out_of_memory+0xf09/0x12a0
[   81.529237][ T7772]  ? mem_cgroup_iter+0x3b/0x460
[   81.529251][ T7772]  ? __pfx_out_of_memory+0x10/0x10
[   81.529270][ T7772]  mem_cgroup_out_of_memory+0x145/0x240
[   81.529284][ T7772]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[   81.529298][ T7772]  ? _raw_spin_unlock+0x28/0x50
[   81.529315][ T7772]  ? memcg1_oom_prepare+0x37f/0x450
[   81.529331][ T7772]  try_charge_memcg+0xdff/0x1290
[   81.529346][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529362][ T7772]  ? __pfx_try_charge_memcg+0x10/0x10
[   81.529377][ T7772]  ? rcu_needs_cpu+0x11/0xb0
[   81.529388][ T7772]  ? xa_load+0x60/0x210
[   81.529402][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529414][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529425][ T7772]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   81.529441][ T7772]  charge_memcg+0x9f/0x180
[   81.529456][ T7772]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[   81.529470][ T7772]  mem_cgroup_swapin_charge_folio+0x262/0x390
[   81.529485][ T7772]  __read_swap_cache_async+0x28c/0x510
[   81.529501][ T7772]  swap_cluster_readahead+0x305/0x5f0
[   81.529513][ T7772]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   81.529526][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529537][ T7772]  ? filemap_get_entry+0xad/0x2f0
[   81.529547][ T7772]  ? get_vma_policy+0x27c/0x3c0
[   81.529564][ T7772]  swapin_readahead+0x17d/0xb50
[   81.529577][ T7772]  ? __pfx_filemap_get_entry+0x10/0x10
[   81.529588][ T7772]  ? get_swap_device_info+0x1c/0x2b0
[   81.529599][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529611][ T7772]  ? __pfx_swapin_readahead+0x10/0x10
[   81.529623][ T7772]  ? __filemap_get_folio+0x9a6/0xaf0
[   81.529635][ T7772]  ? swap_cache_get_folio+0xae/0x3b0
[   81.529647][ T7772]  do_swap_page+0x525/0x5ac0
[   81.529667][ T7772]  ? ___pte_offset_map+0x29/0x2c0
[   81.529682][ T7772]  ? lock_acquire+0x5f/0x360
[   81.529694][ T7772]  ? do_swap_page+0x184/0x5ac0
[   81.529705][ T7772]  ? __pfx_do_swap_page+0x10/0x10
[   81.529718][ T7772]  ? __pfx_default_wake_function+0x10/0x10
[   81.529730][ T7772]  ? ___pte_offset_map+0x45/0x2c0
[   81.529743][ T7772]  ? ___pte_offset_map+0x21f/0x2c0
[   81.529758][ T7772]  ? pte_offset_map_rw_nolock+0xea/0x160
[   81.529773][ T7772]  __handle_mm_fault+0xf3e/0x5620
[   81.529792][ T7772]  ? __pfx___handle_mm_fault+0x10/0x10
[   81.529809][ T7772]  ? lock_vma_under_rcu+0xf8/0x710
[   81.529826][ T7772]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[   81.529843][ T7772]  handle_mm_fault+0x40a/0x8e0
[   81.529858][ T7772]  do_user_addr_fault+0xa81/0x1390
[   81.529871][ T7772]  ? rcu_is_watching+0x15/0xb0
[   81.529883][ T7772]  ? trace_page_fault_user+0x84/0x1e0
[   81.529922][ T7772]  exc_page_fault+0x76/0xf0
[   81.529934][ T7772]  asm_exc_page_fault+0x26/0x30
[   81.529945][ T7772] RIP: 0033:0x7ff4ca98e88f
[   81.529958][ T7772] Code: 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 31 c0 89 f8 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1
[   81.529968][ T7772] RSP: 002b:00007fffdb837e10 EFLAGS: 00010246
[   81.529980][ T7772] RAX: ce61e631b7b3af00 RBX: 00007ff4cabb5fa0 RCX: 0000000000013c68
[   81.529988][ T7772] RDX: 000000000000017e RSI: 0000000000000000 RDI: 00000000000003e8
[   81.529995][ T7772] RBP: 00007ff4cabb7ba0 R08: 0000000016ce55cb R09: 7fffffffffffffff
[   81.530003][ T7772] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000013e2c
[   81.530010][ T7772] R13: 00007fffdb837f30 R14: ffffffffffffffff R15: 00007fffdb837f50
[   81.530022][ T7772]  </TASK>
[   81.530026][ T7772] memory: usage 307200kB, limit 307200kB, failcnt 254
[   81.696816][ T7772] memory+swap: usage 248784kB, limit 9007199254740988kB, failcnt 0
[   81.699448][ T7772] kmem: usage 245952kB, limit 9007199254740988kB, failcnt 0
[   81.701864][ T7772] Memory cgroup stats for /syz2:
[   81.701947][ T7772] cache 20480
[   81.704807][ T7772] rss 12288
[   81.705910][ T7772] rss_huge 0
[   81.706992][ T7772] shmem 0
[   81.707983][ T7772] mapped_file 20480
[   81.709278][ T7772] dirty 0
[   81.710302][ T7772] writeback 0
[   81.711452][ T7772] workingset_refault_anon 17
[   81.713182][ T7772] workingset_refault_file 10
[   81.714745][ T7772] swap 86016
[   81.715875][ T7772] swapcached 24576
[   81.717167][ T7772] pgpgin 25006
[   81.718326][ T7772] pgpgout 24994
[   81.719516][ T7772] pgfault 55401
[   81.720697][ T7772] pgmajfault 24
[   81.721881][ T7772] inactive_anon 16384
[   81.723663][ T7772] active_anon 12288
[   81.725125][ T7772] inactive_file 20480
[   81.726564][ T7772] active_file 0
[   81.728107][ T7772] unevictable 0
[   81.729462][ T7772] hierarchical_memory_limit 314572800
[   81.731362][ T7772] hierarchical_memsw_limit 9223372036854771712
[   81.733707][ T7772] total_cache 20480
[   81.735074][ T7772] total_rss 12288
[   81.736379][ T7772] total_rss_huge 0
[   81.737697][ T7772] total_shmem 0
[   81.738969][ T7772] total_mapped_file 20480
[   81.740442][ T7772] total_dirty 0
[   81.741669][ T7772] total_writeback 0
[   81.743303][ T7772] total_workingset_refault_anon 17
[   81.745234][ T7772] total_workingset_refault_file 10
[   81.747011][ T7772] total_swap 86016
[   81.748313][ T7772] total_swapcached 24576
[   81.749808][ T7772] total_pgpgin 25006
[   81.751180][ T7772] total_pgpgout 24994
[   81.752620][ T7772] total_pgfault 55401
[   81.763030][ T7772] total_pgmajfault 24
[   81.764613][ T7772] total_inactive_anon 16384
[   81.766243][ T7772] total_active_anon 12288
[   81.767742][ T7772] total_inactive_file 20480
[   81.769335][ T7772] total_active_file 0
[   81.770773][ T7772] total_unevictable 0
[   81.772157][ T7772] anon_cost 0
[   81.781298][ T7772] file_cost 0
[   81.782838][ T7772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.823,pid=7772,uid=0
[   81.789220][ T7772] Memory cgroup out of memory: Killed process 7772 (syz.2.823) total-vm:101752kB, anon-rss:924kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000

VM DIAGNOSIS:
19:11:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012fa RDI=00000000000012fb RBP=00000000000003f8 RSP=ffffc900042b6710
R8 =ffff888108860237 R9 =1ffff1102110c046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8ba R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6b36ca76c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce043b7bac CR3=0000000021cda000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fce04386478 00007fce04386450 XMM03=00007fce04386488 00007fce04386480
XMM04=00007fce04eed100 00007fce04386440 XMM05=00007fce04386458 00007fce043864a0
XMM06=00007fce04386498 00007fce04386490 XMM07=00007fce04386488 00007fce04386480
XMM08=d92878e1b2506139 4cd8044debcb3668 XMM09=0000000000000000 00007fce04211df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136640000 RCX=ffffffff819ee57a RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888136640000 RBP=ffffc900043df638 RSP=ffffc900043df5a0
R8 =ffff888136640003 R9 =1ffff11026cc8000 R10=dffffc0000000000 R11=ffffed1026cc8001
R12=1ffff9200087beb4 R13=1ffff9200087bf20 R14=ffff888136640000 R15=dffffc0000000000
RIP=ffffffff819ee586 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff4cb7786c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b36ae56c0 CR3=000000011ce84000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff4cab86478 00007ff4cab86450 XMM03=00007ff4cab86488 00007ff4cab86480
XMM04=00007ff4cb6ed100 00007ff4cab86440 XMM05=00007ff4cab86458 00007ff4cab864a0
XMM06=00007ff4cab86498 00007ff4cab86490 XMM07=00007ff4cab86488 00007ff4cab86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff4caa11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
