last executing test programs:

2.800983775s ago: executing program 1 (id=6156):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4)
socket(0x10, 0x3, 0x0)
recvfrom$unix(r0, &(0x7f0000000140)=""/51, 0x33, 0x100, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = socket$kcm(0x10, 0x2, 0x10)
ioctl(r3, 0x1, &(0x7f0000000280)="f4b35d61be48743f2a1f4ff97fe199274e7716389c7aa4ad0b9ffe8ceac16ef5af1c24df8b65af0cd83aafec3a7ef8646c5795c7d9149e189bb3bd762e7144b128cd0c3c00159b25601321772fbbcdb59f8261177c27d6ee963b26a9da9a45291c6e2355f255e732d713e06094fb13d60155bbdb0a79933aded75d391dd8435fd9aabc97")
r5 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r5, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', <r8=>0x0})
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
close(0x3)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004f881431b678380e"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r10, @ANYRESOCT=0x0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

1.939974786s ago: executing program 1 (id=6177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c00010000000800000000000100000004000000100001800c00108004000b800400e3000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xfff2}, {0xd, 0xb}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1ff, 0x9, 0x2, 0x7ff, 0x401, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfffb, 0xfffffffc, 0x2, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x6c, 0x4, 0x6]}}, {{0x1c, 0x1, {0x15, 0x0, 0x9, 0x1, 0x0, 0x200, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0xe, 0x9c0, 0x6, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x3, 0x0, 0x4, 0x8]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x24000, 0x800, 0xf574, 0x1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a000000000721eb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0x0, 0xa6, 0x0, &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x50)
r9 = socket(0x10, 0x3, 0x6)
r10 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25030000000c00050005000000000000000a000a006e6574656d0000000c0005000b000000000000000c00050001000000000000000c000400060000000000000005000ae9f27012d2c8503271616c574400000000000c00040051f676ffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="1e7c0d88a7d9053cc3dc8f859f8571bf1818faac6968e58a8a0fcc0ed3ffa05768edd68243fe4095f350979429da2d61fb6767d0fc93747f03138497379a667ebc", 0x41}, {&(0x7f0000000380)="b0c31eeae3efb1fc02e656b4bf56f961e839298e9e47d155189cdfb2ce2e7e6ba8168c2060a9add2c9fda249b1f6f6c82b2f6a70304289152d302bf64c6f7d9958d33edbfcbcb148b2a0", 0x4a}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x358}, 0x240000d0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)

740.753237ms ago: executing program 1 (id=6179):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_OIF={0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/145, 0x91, 0x0, &(0x7f00000004c0)=""/67, 0x43}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@ipmr_newroute={0x7c, 0x18, 0x200, 0x70bd27, 0x25dfdbfb, {0x80, 0x0, 0x0, 0x4, 0x3, 0x2dc5deb16163a6e9, 0xfd, 0x1, 0x300}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x6}}, @RTA_PRIORITY={0x8, 0x6, 0xbd}, @RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_METRICS={0x43, 0x8, 0x0, 0x1, "73f4b79b9275b57018fe4fad926877194f033c4ca1b7a27c2751dd7368a802ffdd4ba083a72a9dad0c083addc3e96d7b4cc3ff5c059264ddc3267e2a5a052c"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4050}, 0x8800)
socket(0x11, 0x800000003, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="011464cd00ff1be3fb00"], 0xa)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)

429.611875ms ago: executing program 0 (id=6187):
r0 = socket(0x10, 0x800000003, 0x0)
r1 = socket(0x29, 0x3, 0x7)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2], 0x0, [0x4, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0xf00, 0x4]}}}}]}, 0x88}}, 0x0)
sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@ll={0x11, 0x1c, r2, 0x1, 0x3}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000240)=[{0x98, 0x114, 0xd4, "0a3754ab7123d81cb97bb50c307d004303d95450abc14e86ed6aa592b15fbcbe60ea19b4ebcb2288d6227d4df35df1d1e35f5e124a0bbff9d6c9e331fe04fe828f93f207d0835af8decd5dc15a848679db4ad83058f8182ec660f48f49d130a205c9d638519218350faaf4c41f1008dce74281688092fedbcf1959dd235ee9b317f286"}, {0xe8, 0x12a, 0x8, "6228f913d46ec18f79e4082c1c7a848a010db41882a8a0fd9b1d6ad8d351e366dc5257a6bc2e6c56c8653895ca7c50867434c43b0862483c7170af09df36c8e48af86e6ad860baf56032f4687706110ff655dbc5d10e341547b83054086d7608ef0286e85d9038e343e99d2e85f61246380b1ebe4aa8c24ae615060d93f8aaec2a888ea335f3997b214a61d35d25844b211f99c331ac1363689182a6b5cb381920519fa8ae43e0ed7078555bcfca7016135ee52f3911f056869a44f568355b2ab6117b6b665817154e4b6797896f7ffce2f0aa9c77"}, {0x68, 0x104, 0x1b, "9b87eedf4044b5a4a4b0e47e35873e7d6f73c72ffacfb39816e2252e1e5af41fe7d2a2a57610c7226cc0be7de7d34467ca5f4bf6bde97bf79289bf495d7e569a2e7cf2e680d1683d15018c8182c3464326160440"}, {0xf8, 0x119, 0x653, "ec808b9caae7f6e2c0eabd9e7c1ae32e1adc24ab56f308293607eeb0dadd8a2f7388c2aebeeb50f3700286a16670b617412aa636ba708529a2aa37add4a087652402bd9cf12ccc1957e90fb517701c080e987b2ac1119f9f1cf73e19f1a81d358cc1b531b6286e10b2a602fb07c945cad48f62b03531510efd067453d5a76abfcf080755cb6b0b92cbc2f6ac38347e07bd3cbaed4682bae0fcc65348d0691596dc76be00e72f42f1938c73708ad56f66e593aed9170e98d6a3b5e200c41b30853ff72227d89c115a7166aca8f9a4cc4f3fcbbbd33d70bcb1b591ee20ed9d1a9f1bf2632bcd936f"}], 0x2e0}}], 0x1, 0xe41b5fb238e6d9f4)

378.645647ms ago: executing program 0 (id=6189):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x8, 0x7, {{0x5, 0x4, 0x3, 0x2b, 0x14, 0x67, 0x0, 0xd3, 0x4, 0x0, @local, @empty}}}})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x0)
accept(r6, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000380)=0x80)
close(0x4)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x1b0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x180, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0xb, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xedf}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xf}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0x7ff}, {0xc}, {0xc, 0x4, 0x200}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x3}, {0xc, 0x3, 0xfffffffffffff800}]}, @TCA_MQPRIO_MIN_RATE64={0x94, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4160}, {0xc, 0x3, 0x8000000000000000}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xb7a}, {0xc, 0x3, 0x7}, {0xc}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}]}]}}}]}, 0x1b0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x2e, "46900a739b65f2a2ef036c46df31cc1defd880d8c39a3f395ed87e7c03af1b3cf05c1f2eaf745e9b119f217c9190"}, &(0x7f0000000200)=0x36)

376.216555ms ago: executing program 0 (id=6191):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r2, 0x4}, 0x38)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@local, <r3=>0x0}, &(0x7f0000000140)=0x14)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x49, 0x0, 0xf, 0x4}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x2b, 0x4}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @volatile={0xd}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000200), 0x6f, 0x0, 0x0, 0xbcf2, 0x10000}, 0x28)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x2, 0x18}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x818}, [@call={0x85, 0x0, 0x0, 0x9a}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x8, '\x00', r3, 0x19, r4, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0xfffffc01, 0x2}, 0x10, 0x7c8, r5, 0x0, &(0x7f0000000480)=[r6], 0x0, 0x10, 0x20000}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x88, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x9, 0xe, 0x10, 0x2, 0xd, 0x11, 0x7, 0xf, 0x5, 0x7, 0xb, 0x9, 0xb, 0xa, 0x2, 0x3], 0x0, [0x6, 0x7, 0x4, 0xffff, 0xc, 0x7, 0xcf, 0xffff, 0xc10, 0x7a, 0x2ff1, 0x1, 0x426, 0xf800, 0x4, 0x3], [0x1ff6, 0xd1, 0x2, 0xfe00, 0xfff7, 0x2, 0x8, 0x8, 0x2, 0x2, 0x7, 0xffff, 0x4, 0x401, 0x7, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0)

320.491514ms ago: executing program 0 (id=6192):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0xfd], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)

317.416244ms ago: executing program 0 (id=6194):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680), 0xff88)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3)
sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r5, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r6, &(0x7f00000004c0)="fcde9e530b67c2db3cbaa01285fb0cc69d918ecd54abfc34c0c9b3447134d4fbaf5f42753e56c121fc5fa8902067c790eec3d7c3b3e8e7d0352362eded4c1e6f641e13838cf30de89e08be1237e9bb743c251382961552410a1d2c4e05f90050716a57ccbcc0eaaf1069976f1d28620a1b2aa2616e93d3392e", 0x79, 0x4000000, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x1, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@generic={0x88, 0x3, "95"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0x10000000}, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x144, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x114, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x1, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0xd, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x94, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x4160}, {0xc, 0x3, 0x8000000000000000}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0xb7a}, {0xc, 0x3, 0x7}, {0xc}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}]}]}}}]}, 0x144}}, 0x0)

250.510888ms ago: executing program 2 (id=6195):
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r0=>0x0, 0x6, 0x0, 0x6, 0xfffffff3, 0x3}, &(0x7f0000000040)=0x14)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={<r1=>r0, 0x1}, &(0x7f00000000c0)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x312}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r1, 0x7fff}, 0x8)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000280)={<r5=>0x0, 0xc, 0x0, 0x1})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000680)={r5, 0x0, 0x1})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000a80)={r1, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}}, [0xffffffffffffd5f7, 0xc, 0x7ff, 0x7, 0x7, 0x200, 0x7, 0x1, 0x5, 0x6, 0x80000000, 0x4, 0x28000000000, 0x8, 0x8]}, &(0x7f0000000b80)=0x100)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000bc0)={0x0, 0x4}, 0x8)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000c00))
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000c40)={0x1f, 0x1, 0x4}, 0x6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x250, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa036}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "f217b189b7130892ebd69463801e2f217352cfd74d14ff77"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "96dd530a8fa15ba6e52348eeea616023d53ffaf3e41eec7a91e6f96fccf3c8"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}]}, 0x250}}, 0x40040)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000001040), {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0xe41666c4acd22c43}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x3, 0x5, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0x3, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x94, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x5}, @NLBL_CIPSOV4_A_MLSCATLST={0x78, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c6578b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65094016}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4ef}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46e4d210}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10000}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77c7086b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dcdec6a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78c2cee6}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8506}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004085}, 0x8006)
socket$unix(0x1, 0x2, 0x0)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, &(0x7f0000001500)=""/119, &(0x7f0000001580)=0x77)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x480fcd3e6eb8bac7}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "6f6363ac4b63f7b03f8788ae8902409dcff887cabd85cdca9f517901234a0f3c"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffff801}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x4000004)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000001700)=r1, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)=@newneigh={0x24, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x48}, [@NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000018c0)={'tunl0\x00', &(0x7f0000001880)={'syztnl0\x00', <r12=>0x0, 0x8000, 0x40, 0x3, 0x9b, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4}, @end]}}}}})
sendmsg$nl_route_sched(r11, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)=@newtclass={0x90, 0x28, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xb, 0x8}, {0xe, 0xb}, {0x9, 0xb}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xffffffff}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbe50}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0xb6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x80}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x20d0}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_RATE={0x6, 0x5, {0xd8, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44}, 0x4000888)

249.347143ms ago: executing program 2 (id=6196):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xec, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xd, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0x7, 0x8, 0x5, 0x9], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0xffffffffffffe3f2}, {0xc, 0x4, 0xffffffffffff0001}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2800000000000000}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x8000}]}]}}}]}, 0x11c}}, 0x0)

160.707289ms ago: executing program 0 (id=6197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003c00010000000800000000000100000004000000100001800c00108004000b800400e3000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00183c00fe880000000000000000000000000001ff020000000000000000000000000001880000000000010000000000000290"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0))
select(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
read(r4, &(0x7f0000000040)=""/225, 0xe1)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xfff2}, {0xd, 0xb}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1ff, 0x9, 0x6, 0x7ff, 0x401, 0x2}}, {0x8, 0x2, [0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x3, 0xfffb, 0xfffffffc, 0x2, 0x3, 0x0, 0x5}}, {0xe, 0x2, [0x5, 0x8, 0x6c, 0x4, 0x6]}}, {{0x1c, 0x1, {0x15, 0x0, 0x9, 0x1, 0x0, 0x200, 0x6}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0xe, 0x9c0, 0x6, 0x0, 0x3, 0x8, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0x3, 0x0, 0x4, 0x8]}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a000000000721eb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0x0, 0xa6, 0x0, &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x50)
r9 = socket(0x10, 0x3, 0x6)
r10 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf25030000000c00050005000000000000000a000a006e6574656d0000000c0005000b000000000000000c00050001000000000000000c000400060000000000000005000ae9f27012d2c8503271616c574400000000000c00040051f676ffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="1e7c0d88a7d9053cc3dc8f859f8571bf1818faac6968e58a8a0fcc0ed3ffa05768edd68243fe4095f350979429da2d61fb6767d0fc93747f03138497379a667ebc", 0x41}, {&(0x7f0000000380)="b0c31eeae3efb1fc02e656b4bf56f961e839298e9e47d155189cdfb2ce2e7e6ba8168c2060a9add2c9fda249b1f6f6c82b2f6a70304289152d302bf64c6f7d9958d33edbfcbcb148b2a0", 0x4a}], 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x358}, 0x240000d0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

158.970586ms ago: executing program 2 (id=6198):
r0 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
socketpair(0x1, 0x800, 0x8, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000200)={@private=0xa010101, @broadcast, 0xffffffffffffffff, "e6855f83d7170323ed016aea5bb6c22c687ce04544bd19defc850eb7e4d0554c", 0xb, 0x3, 0x1, 0xf72e}, 0x3c)
unshare(0x20000400)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r10 = accept4(r0, 0x0, 0x0, 0x80800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r11, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10)

158.570944ms ago: executing program 1 (id=6199):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bind$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r7=>0x0})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r8, &(0x7f0000000100)={0x1d, r7}, 0x10)
bind$can_raw(r8, &(0x7f0000000000), 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x1920, [0x0, 0x200000000c00, 0x20000000185c, 0x20000000188c], 0x0, &(0x7f00000000c0), &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x1998)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004094}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xfff3, 0xb}, {0x3, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x1, 0x2, 0x4, 0x8, 0x5, 0xa, 0xf, 0x9, 0x2, 0x2, 0x5, 0x1, 0x1, 0x9, 0x4, 0x9], 0x0, [0x3, 0xbbe, 0xff, 0x34, 0x203, 0x6, 0x6, 0x3, 0x0, 0xe4c, 0x9, 0x4, 0x5, 0x7, 0x7, 0x1], [0x2, 0xd, 0x5, 0x46b9, 0x1c0, 0xa, 0x1, 0x0, 0x0, 0x400, 0x5, 0x3, 0x7, 0x0, 0x4, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc021}, 0x4008000)

79.455393ms ago: executing program 1 (id=6200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="4410010000000000140012800900010076657468000000000400028008001b0002000000080029003d02"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
ioctl$FICLONE(r0, 0x40049409, r1)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x4, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0xc], 0x1, [0x9, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x7, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8002, 0x3, 0x2, 0x7, 0x8, 0xce]}, [@TCA_MQPRIO_MAX_RATE64={0x70}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x8000}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x6}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x4160}, {0x0, 0x3, 0x8000000000000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0x80000000}, {0x0, 0x3, 0x8}, {0x0, 0x3, 0xb7a}, {0x0, 0x3, 0x7}, {}, {0x0, 0x3, 0x9}, {0x0, 0x3, 0x3}]}]}}}]}, 0x11c}}, 0x0)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x10}, 0xc)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xc, 0x0, r5, 0x5, '\x00', r3, r6, 0x1, 0x1}, 0x50)

78.970391ms ago: executing program 2 (id=6201):
r0 = socket(0x10, 0x3, 0x2) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={<r2=>r1, 0x8000000000, 0x0, 0x9})
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000002c0)=0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r6, r6, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async, rerun: 32)
pipe(&(0x7f0000000100)) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xff, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x401}}, {0x4}}]}]}, 0xac}}, 0x20000000)

62.164402ms ago: executing program 1 (id=6202):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}, 0x1, 0x65580000}, 0x20000000)

381.918µs ago: executing program 2 (id=6203):
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x800)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400002, 0xb) (async)
shutdown(r0, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6(0xa, 0x1, 0x0) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x894b, &(0x7f00000000c0)) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x32}, 0x0, @in=@multicast1}}, 0xe8) (rerun: 64)
close(r3)
getsockopt$inet_pktinfo(r2, 0x0, 0x50, 0x0, &(0x7f0000000040)) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000001080183830fc41da339d2e66aa4e701d220b1435e1243de03e69c5e06dc06da65f5ec4d9c2868ce102d10e4e12cff408ce4787800a5e66ffa8a2f551cc503"], 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) (async)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0}) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x4623, @remote}, 0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x70bd2c, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x8}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5, 0x2}}}}]}]}, 0x70}}, 0x0) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) (async, rerun: 64)
connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x5, 0x7, 0x0, 0x4}, {0x4, 0x8, 0xa9, 0x2}]}, 0x10) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @empty}, &(0x7f0000000040)=0xc) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x6, 0x2, 0x1, 0x8, 0xd, 0xb, 0x0, 0x8, 0x3, 0xe, 0x2, 0xc, 0xa, 0xe, 0xb, 0xc], 0x1, [0x0, 0x4, 0x6, 0x3, 0x3, 0x3, 0x7f, 0x401, 0x0, 0x0, 0x7, 0x7, 0x8, 0x81, 0x9, 0x4], [0x9, 0x6, 0x6, 0x2, 0x2, 0xd, 0xe000, 0x3, 0x3, 0xff, 0x6, 0x4, 0x5, 0x7fff, 0x1, 0x3ff]}}}}]}, 0x88}}, 0x4)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000fdffffffff17110100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d531ffff04000000185200000a00000000000000000000001839000003000000000000000000000085100000faffffff8520000005000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x6, 0x3, 0xfffffffc}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x7}], 0x10, 0xdf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x81, 0x1000, &(0x7f0000000400)="9599bf767ff51c21e34b7664dcaf626134538b6bcda1955eda0976c163f1c3506a66698125c497da52dd37002b42fa8bbd9e72f4c58daaf113040d497c76de3b78061287bd396f919a48e6791b0fb093b3d76ba7cdb72a98e7b6d72a55c98617aaa7589d7c4f45b62c090c7436b7eb133374111e5d2a4a6455529b1290b8f2df7d", &(0x7f0000000a00)=""/4096, 0xfffffffa, 0x0, 0x81, 0x88, &(0x7f00000004c0)="d9ef6bf7222c0014052ea67c998869eeb72046ad59defdf0e95b272eae6379e9ef7bd3cdf40db16042cadf93a51c8c79763e112943ee816dfaa7d6c311f7fd4d4a0dbbf28cb4b05671b7a3a936014c3c2f9dc4f5c54b218841d7e332a16b0105e7e25972a0ea27b3bcc83aa93c43ea3ead357192d790f663f55e1448528c30a8fb", &(0x7f0000000580)="e07b3e8399a71a77e53b3ba65d84f1a284b507cd30018ea3d789a6adea4fac54305f724e74cd3e0c782c2935861564e397157d1ece340e34b66e9572e864da61cab8d526a8e25820a2c3b35a7ca50baec09c561ccb5ecd354336fdc61bd46174d248d68201941e7ffb034770aea7fba516cc1b9706d802dd7d517ff0e75b524c0e276d7c5bd9d552", 0x1, 0x0, 0x6}, 0x50)

0s ago: executing program 2 (id=6204):
r0 = socket(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0xfff2}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x4], 0x0, [0x4, 0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000)

kernel console output (not intermixed with test programs):

 bytes.
[  214.894885][T15294] netlink: 'syz.2.3094': attribute type 2 has an invalid length.
[  214.998293][T15307] netlink: 'syz.1.3097': attribute type 2 has an invalid length.
[  215.166400][T15307] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  215.889112][T15324] openvswitch: netlink: Flow actions attr not present in new flow.
[  216.527770][T15379] lo speed is unknown, defaulting to 1000
[  216.621598][T15381] block nbd1: server does not support multiple connections per device.
[  216.624342][T15379] lo speed is unknown, defaulting to 1000
[  216.624884][T15381] block nbd1: shutting down sockets
[  216.650445][T15382] __nla_validate_parse: 12 callbacks suppressed
[  216.650458][T15382] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3116'.
[  216.752397][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'.
[  216.823364][T15396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3121'.
[  217.191999][T15439] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3134'.
[  217.207573][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'.
[  217.253297][T15444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.314122][T15458] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3141'.
[  217.479606][T15478] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  217.496138][T15481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'.
[  217.703836][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'.
[  217.712974][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3156'.
[  217.941605][T15538] tipc: New replicast peer: 255.255.255.255
[  217.944314][T15538] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.948619][T15540] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  218.143697][T15556] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3169'.
[  218.373933][T15566] validate_nla: 8 callbacks suppressed
[  218.373985][T15566] netlink: 'syz.0.3172': attribute type 29 has an invalid length.
[  218.378990][T15566] netlink: 'syz.0.3172': attribute type 29 has an invalid length.
[  218.950470][ T5892] tipc: Node number set to 4079141676
[  219.053858][T15612] netlink: 'syz.0.3187': attribute type 2 has an invalid length.
[  219.056726][T15613] netlink: 'syz.0.3187': attribute type 2 has an invalid length.
[  219.064271][T15615] nbd: must specify a device to reconfigure
[  219.488330][T15663] veth0_macvtap: left promiscuous mode
[  220.532865][T15684] netlink: 'syz.1.3205': attribute type 29 has an invalid length.
[  220.536031][T15684] netlink: 'syz.1.3205': attribute type 29 has an invalid length.
[  220.642436][T15695] gretap0: left allmulticast mode
[  220.644109][T15695] gretap0: left promiscuous mode
[  220.645854][T15695] bridge0: port 3(gretap0) entered disabled state
[  220.649636][T15695] bridge_slave_1: left allmulticast mode
[  220.651835][T15695] bridge_slave_1: left promiscuous mode
[  220.653828][T15695] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.659643][T15695] bridge_slave_0: left allmulticast mode
[  220.664500][T15695] bridge_slave_0: left promiscuous mode
[  220.667152][T15695] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.746552][T15702] lo speed is unknown, defaulting to 1000
[  220.765368][T15715] netlink: 'syz.2.3213': attribute type 29 has an invalid length.
[  220.781983][T15715] netlink: 'syz.2.3213': attribute type 29 has an invalid length.
[  220.900904][T15702] lo speed is unknown, defaulting to 1000
[  221.264407][T15750] netlink: 'syz.2.3224': attribute type 2 has an invalid length.
[  221.298867][T15754] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  221.302385][T15754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  221.309921][T15754] netlink: 'syz.0.3225': attribute type 32 has an invalid length.
[  221.313805][T15754] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  221.342419][T15754] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.345609][T15754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.348119][T15754] IPv6: NLM_F_CREATE should be set when creating new route
[  221.350478][T15754] IPv6: NLM_F_CREATE should be set when creating new route
[  221.352801][T15754] IPv6: NLM_F_CREATE should be set when creating new route
[  222.084949][T15781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.086290][ T5861] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  222.236612][T15805] sctp: [Deprecated]: syz.0.3237 (pid 15805) Use of int in max_burst socket option.
[  222.236612][T15805] Use struct sctp_assoc_value instead
[  222.237747][T15789] __nla_validate_parse: 11 callbacks suppressed
[  222.237759][T15789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3233'.
[  222.538535][T15826] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  222.913668][T15844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3249'.
[  223.379820][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3255'.
[  223.556406][T15872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.945049][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  223.984756][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'.
[  223.988736][T15889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3266'.
[  224.332653][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'.
[  224.439119][T15919] geneve4: entered promiscuous mode
[  224.446742][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'.
[  224.456642][T15916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3273'.
[  224.471678][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'.
[  224.778688][T15950] validate_nla: 5 callbacks suppressed
[  224.778701][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.784625][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.787217][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.789909][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.795492][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.797995][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.802699][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.805286][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.807957][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  224.810904][T15950] netlink: 'syz.2.3281': attribute type 1 has an invalid length.
[  226.024592][T16004] xt_TCPMSS: Only works on TCP SYN packets
[  226.142179][T16009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.429214][T16066] __nla_validate_parse: 6 callbacks suppressed
[  227.429228][T16066] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3314'.
[  227.441239][T16061] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3314'.
[  227.493300][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'.
[  227.499454][T16076] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3318'.
[  227.592758][T16080] lo speed is unknown, defaulting to 1000
[  227.671432][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 150 seconds
[  227.674837][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 150 seconds
[  227.678115][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 150 seconds
[  227.681618][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 150 seconds
[  227.779130][T16106] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3326'.
[  227.834607][T16080] lo speed is unknown, defaulting to 1000
[  227.837430][T16108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.993216][T16120] lo speed is unknown, defaulting to 1000
[  228.105791][T16120] lo speed is unknown, defaulting to 1000
[  228.392726][T16127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3332'.
[  228.739507][T16138] xt_connbytes: Forcing CT accounting to be enabled
[  228.742486][T16138] Cannot find set identified by id 0 to match
[  228.888007][T16149] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3339'.
[  228.953487][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'.
[  229.303231][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'.
[  229.910326][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.074836][T16209] validate_nla: 43 callbacks suppressed
[  230.074851][T16209] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  230.079116][T16209] netlink: 'syz.2.3359': attribute type 10 has an invalid length.
[  230.083919][T16209] netlink: 'syz.2.3359': attribute type 4 has an invalid length.
[  230.086546][T16209] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3359'.
[  230.127161][T16216] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  230.245342][T16229] netlink: 'syz.0.3365': attribute type 1 has an invalid length.
[  230.522012][T16240] netlink: 'syz.1.3368': attribute type 2 has an invalid length.
[  230.564582][T16247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.602892][T16253] netlink: 'syz.1.3372': attribute type 2 has an invalid length.
[  230.939696][T16295] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  230.944655][T16295] openvswitch: netlink: Message has 1 unknown bytes.
[  230.951807][T16295] netlink: 'syz.0.3385': attribute type 7 has an invalid length.
[  230.959253][T16295] netlink: 'syz.0.3385': attribute type 8 has an invalid length.
[  230.979006][T16295] bridge0: entered promiscuous mode
[  230.982490][T16295] bridge0: left promiscuous mode
[  231.024709][T16304] openvswitch: netlink: IP tunnel TTL not specified.
[  231.034972][T16304] netlink: 'syz.2.3389': attribute type 11 has an invalid length.
[  231.159758][T16310] : entered promiscuous mode
[  231.215269][T16324] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  231.272408][T16332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.293246][T16334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.296088][T16334] syzkaller0: entered promiscuous mode
[  231.297848][T16334] syzkaller0: entered allmulticast mode
[  231.314443][T16334] tipc: Resetting bearer <eth:syzkaller0>
[  231.318464][T16333] tipc: Resetting bearer <eth:syzkaller0>
[  231.333108][T16333] tipc: Disabling bearer <eth:syzkaller0>
[  231.437941][T16350] netlink: 'syz.2.3405': attribute type 2 has an invalid length.
[  232.474905][T16427] __nla_validate_parse: 22 callbacks suppressed
[  232.474918][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3427'.
[  232.599747][T16434] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  232.687701][T16438] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3431'.
[  232.870907][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'.
[  232.876616][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'.
[  232.997138][T16466] siw: device registration error -23
[  233.079655][T16472] lo speed is unknown, defaulting to 1000
[  233.283627][T16472] lo speed is unknown, defaulting to 1000
[  233.283663][T16470] lo speed is unknown, defaulting to 1000
[  233.308388][T16491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'.
[  233.491416][T16470] lo speed is unknown, defaulting to 1000
[  233.734036][T16515] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3454'.
[  234.226009][T16589] bond0: Unable to set up delay as MII monitoring is disabled
[  234.280629][T16593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'.
[  234.452625][T16609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'.
[  234.589673][T16626] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  234.594452][T16626] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  235.260026][T16654] validate_nla: 9 callbacks suppressed
[  235.267229][T16654] netlink: 'syz.0.3479': attribute type 29 has an invalid length.
[  235.273390][T16654] netlink: 'syz.0.3479': attribute type 29 has an invalid length.
[  235.276705][T16654] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3479'.
[  235.316487][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'.
[  235.541848][T16671] netlink: 'syz.1.3487': attribute type 29 has an invalid length.
[  235.548052][T16671] netlink: 'syz.1.3487': attribute type 29 has an invalid length.
[  235.574478][T16673] netlink: 'syz.0.3488': attribute type 4 has an invalid length.
[  235.628458][T16677] netlink: 'syz.0.3490': attribute type 13 has an invalid length.
[  235.634189][T16677] netlink: 'syz.0.3490': attribute type 17 has an invalid length.
[  235.692368][T16677] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.697877][T16677] 8021q: adding VLAN 0 to HW filter on device team0
[  235.712022][T16677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.767683][T16682] lo speed is unknown, defaulting to 1000
[  235.774683][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.931513][T16682] lo speed is unknown, defaulting to 1000
[  236.089861][T16712] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  236.096049][T16712] tipc: New replicast peer: 255.255.255.255
[  236.098668][T16712] tipc: Enabled bearer <udp:syz2>, priority 10
[  236.678439][T16728] sctp: [Deprecated]: syz.0.3503 (pid 16728) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.678439][T16728] Use struct sctp_sack_info instead
[  237.662064][T16780] __nla_validate_parse: 11 callbacks suppressed
[  237.662078][T16780] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3518'.
[  237.743143][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3520'.
[  237.893080][T16797] netlink: 'syz.0.3526': attribute type 29 has an invalid length.
[  237.896372][T16797] netlink: 'syz.0.3526': attribute type 29 has an invalid length.
[  237.899428][T16797] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3526'.
[  238.002620][T16808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.550275][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.555482][T16812] netem: change failed
[  238.622493][T16821] netlink: 'syz.2.3535': attribute type 29 has an invalid length.
[  238.626793][T16821] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3535'.
[  238.864287][T16848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.933253][T16854] bridge0: port 1(gretap0) entered blocking state
[  238.935543][T16854] bridge0: port 1(gretap0) entered disabled state
[  238.937922][T16854] gretap0: entered allmulticast mode
[  238.942013][T16854] gretap0: entered promiscuous mode
[  239.205246][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3551'.
[  239.558817][T16906] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3561'.
[  239.648929][T16914] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3563'.
[  239.780794][T16920] bond6: entered promiscuous mode
[  239.782638][T16920] bond6: entered allmulticast mode
[  239.784893][T16920] 8021q: adding VLAN 0 to HW filter on device bond6
[  239.928519][T16926] nbd: socks must be embedded in a SOCK_ITEM attr
[  239.947801][T16926] block nbd1: shutting down sockets
[  240.123171][T16940] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3573'.
[  240.231553][T16943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3574'.
[  240.234347][T16943] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3574'.
[  240.303232][T16959] validate_nla: 4 callbacks suppressed
[  240.303249][T16959] netlink: 'syz.0.3578': attribute type 2 has an invalid length.
[  240.406101][T16970] netlink: 'syz.2.3582': attribute type 29 has an invalid length.
[  240.409380][T16970] netlink: 'syz.2.3582': attribute type 29 has an invalid length.
[  241.645132][T17008] delete_channel: no stack
[  241.687314][T17020] netlink: 'syz.1.3603': attribute type 3 has an invalid length.
[  241.698431][T17024] netlink: 'syz.2.3605': attribute type 29 has an invalid length.
[  241.710482][T17025] netlink: 'syz.2.3605': attribute type 29 has an invalid length.
[  241.842028][T17038] syzkaller1: entered promiscuous mode
[  241.843753][T17038] syzkaller1: entered allmulticast mode
[  241.875592][T17045] netlink: 'syz.0.3612': attribute type 2 has an invalid length.
[  242.104099][T17063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.392297][  T789] hid-generic 0005:04F3:5505.0001: item fetching failed at offset 0/1
[  242.395399][  T789] hid-generic 0005:04F3:5505.0001: probe with driver hid-generic failed with error -22
[  242.653779][T17105] netlink: 'syz.2.3632': attribute type 2 has an invalid length.
[  242.732761][T17113] __nla_validate_parse: 16 callbacks suppressed
[  242.732773][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'.
[  243.065142][T17127] netlink: 'syz.2.3639': attribute type 1 has an invalid length.
[  243.107708][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'.
[  243.529432][T17138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3642'.
[  243.614115][T17143] netlink: 'syz.1.3643': attribute type 2 has an invalid length.
[  243.799795][T17154] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3645'.
[  244.046381][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3650'.
[  244.106482][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'.
[  244.186698][T17177] netlink: 600 bytes leftover after parsing attributes in process `syz.2.3654'.
[  244.251742][T17182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3654'.
[  244.255119][T17181] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3656'.
[  244.562758][T17188] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  244.997641][T17194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3660'.
[  245.388704][T17208] validate_nla: 8 callbacks suppressed
[  245.388716][T17208] netlink: 'syz.2.3664': attribute type 10 has an invalid length.
[  245.909720][T17240] netlink: 'syz.2.3676': attribute type 2 has an invalid length.
[  247.769384][T17308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.847979][T17317] __nla_validate_parse: 13 callbacks suppressed
[  247.847991][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3698'.
[  247.880447][T17319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.194007][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.830473][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  257.751902][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 180 seconds
[  257.755164][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 180 seconds
[  257.758465][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 180 seconds
[  257.762014][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 180 seconds
[  258.018663][ T5280] udevd[5280]: worker [6188] /devices/virtual/block/nbd0 timeout; kill it
[  258.022552][ T5280] udevd[5280]: seq 10858 '/devices/virtual/block/nbd0' killed
[  269.752223][  T968] page_pool_release_retry() stalled pool shutdown: id 51, 3329 inflight 120 sec
[  277.889308][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'.
[  277.907817][T17339] IPVS: persistence engine module ip_vs_pe_ not found
[  277.942000][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3710'.
[  278.009951][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3709'.
[  278.169868][T17354] gretap0: left allmulticast mode
[  278.171873][T17354] gretap0: left promiscuous mode
[  278.173759][T17354] bridge0: port 1(gretap0) entered disabled state
[  278.183126][T17354] bond0: (slave bond_slave_0): Releasing backup interface
[  278.188525][T17354] bond0: (slave bond_slave_1): Releasing backup interface
[  278.193150][T17354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.196114][T17354] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.198720][T17354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.206835][T17354] tipc: Resetting bearer <eth:syzkaller0>
[  278.931187][T17362] netlink: 'syz.0.3713': attribute type 10 has an invalid length.
[  278.972049][T17365] batman_adv: batadv0: Adding interface: macvlan4
[  278.974194][T17365] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  278.982803][T17365] batman_adv: batadv0: Interface activated: macvlan4
[  278.989406][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  278.999622][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'.
[  279.018251][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3714'.
[  279.057800][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'.
[  279.097000][T17373] netlink: 'syz.1.3717': attribute type 1 has an invalid length.
[  279.101585][T17373] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3717'.
[  279.914111][T17430] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3724'.
[  279.986762][ T5890] Bluetooth: hci2: link tx timeout
[  279.988698][ T5890] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  279.996461][T17443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3727'.
[  280.187724][T17468] netlink: 'syz.2.3735': attribute type 29 has an invalid length.
[  280.194922][T17468] netlink: 'syz.2.3735': attribute type 29 has an invalid length.
[  280.582200][T17502] syzkaller0: entered promiscuous mode
[  280.583907][T17502] syzkaller0: entered allmulticast mode
[  281.552058][T17507] pim6reg1: entered promiscuous mode
[  281.553885][T17507] pim6reg1: entered allmulticast mode
[  281.623505][T17525] netlink: 'syz.2.3756': attribute type 2 has an invalid length.
[  281.924528][T17548] netlink: 'syz.1.3762': attribute type 2 has an invalid length.
[  282.070341][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  282.266324][T17572] netlink: 'syz.0.3770': attribute type 1 has an invalid length.
[  282.269290][T17572] netlink: 'syz.0.3770': attribute type 1 has an invalid length.
[  282.994683][T17623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.013766][T17625] netlink: 'syz.2.3790': attribute type 11 has an invalid length.
[  283.016349][T17625] __nla_validate_parse: 70 callbacks suppressed
[  283.016358][T17625] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3790'.
[  283.048135][T17628] netlink: 'syz.2.3791': attribute type 5 has an invalid length.
[  283.508601][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3799'.
[  284.635539][T17699] validate_nla: 2 callbacks suppressed
[  284.635551][T17699] netlink: 'syz.1.3814': attribute type 29 has an invalid length.
[  284.641378][T17699] netlink: 'syz.1.3814': attribute type 29 has an invalid length.
[  284.644270][T17699] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3814'.
[  284.762157][  T789] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[  284.777359][  T789] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  285.063040][T17740] netlink: 'syz.2.3830': attribute type 29 has an invalid length.
[  285.066075][T17740] netlink: 'syz.2.3830': attribute type 29 has an invalid length.
[  285.068851][T17740] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3830'.
[  285.112076][T17741] openvswitch: netlink: IP tunnel TTL not specified.
[  285.116698][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'.
[  285.154642][T17747] netlink: 'syz.2.3833': attribute type 2 has an invalid length.
[  285.221603][T17754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.476093][T17769] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3837'.
[  285.784542][T17767] netlink: 'syz.1.3837': attribute type 29 has an invalid length.
[  285.787270][T17768] netlink: 'syz.1.3837': attribute type 29 has an invalid length.
[  285.910536][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.132120][T17799] netlink: 'syz.2.3847': attribute type 2 has an invalid length.
[  286.157034][T17796] netlink: 'syz.1.3845': attribute type 1 has an invalid length.
[  286.808689][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3871'.
[  286.983651][T17889] syzkaller1: entered promiscuous mode
[  286.985413][T17889] syzkaller1: entered allmulticast mode
[  287.077678][T17900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3877'.
[  287.128254][T17907] netlink: 'syz.0.3879': attribute type 23 has an invalid length.
[  287.248682][T17918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3881'.
[  287.305651][T17924] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3884'.
[  287.375703][T17928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  287.378685][T17928] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  287.830294][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 210 seconds
[  287.833811][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 210 seconds
[  287.837466][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 210 seconds
[  287.841400][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 210 seconds
[  288.038464][T17945] Cannot find add_set index 0 as target
[  288.099750][T17949] __nla_validate_parse: 2 callbacks suppressed
[  288.099761][T17949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3893'.
[  288.180502][T17953] syzkaller1: entered promiscuous mode
[  288.182275][T17953] syzkaller1: entered allmulticast mode
[  288.226286][T17958] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3897'.
[  288.287065][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'.
[  288.327906][T17968] syzkaller0: entered allmulticast mode
[  288.488967][T17986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3906'.
[  288.514318][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'.
[  288.543075][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'.
[  289.113143][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  289.731272][T18014] validate_nla: 6 callbacks suppressed
[  289.731284][T18014] netlink: 'syz.2.3909': attribute type 1 has an invalid length.
[  289.735366][T18014] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3909'.
[  289.795660][T18015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3909'.
[  290.255180][T18023] syzkaller1: entered promiscuous mode
[  290.256936][T18023] syzkaller1: entered allmulticast mode
[  290.459613][T18034] xt_socket: unknown flags 0xfc
[  290.753322][T18071] netlink: 'syz.0.3930': attribute type 2 has an invalid length.
[  290.933543][T18097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  290.946186][T18099] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3938'.
[  290.949896][T18099] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3938'.
[  291.613603][T18162] netlink: 'syz.0.3957': attribute type 29 has an invalid length.
[  291.617067][T18162] netlink: 'syz.0.3957': attribute type 29 has an invalid length.
[  291.712562][T18174] xt_l2tp: missing protocol rule (udp|l2tpip)
[  294.055096][T18241] netlink: 'syz.1.3982': attribute type 2 has an invalid length.
[  294.106093][T18195] Set syz1 is full, maxelem 65536 reached
[  295.007035][T18271] __nla_validate_parse: 9 callbacks suppressed
[  295.007096][T18271] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3990'.
[  295.303176][T18296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.345906][T18299] netlink: 'syz.2.3999': attribute type 2 has an invalid length.
[  295.843574][T18323] netlink: 'syz.1.4007': attribute type 29 has an invalid length.
[  295.849959][T18323] netlink: 'syz.1.4007': attribute type 29 has an invalid length.
[  295.855607][T18323] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4007'.
[  295.889553][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'.
[  295.899711][T18330] netlink: 'syz.0.4010': attribute type 3 has an invalid length.
[  295.906147][T18330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4010'.
[  295.969319][T18335] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4012'.
[  296.056797][T18343] netlink: 'syz.0.4015': attribute type 29 has an invalid length.
[  296.059758][T18343] netlink: 'syz.0.4015': attribute type 29 has an invalid length.
[  296.063003][T18343] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4015'.
[  296.277228][T18360] netlink: 'syz.0.4017': attribute type 1 has an invalid length.
[  296.279752][T18360] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4017'.
[  296.366680][T18364] netlink: 'syz.1.4023': attribute type 2 has an invalid length.
[  296.374689][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4023'.
[  296.382943][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'.
[  296.586748][T18382] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4026'.
[  296.948569][T18398] netlink: 'syz.2.4031': attribute type 29 has an invalid length.
[  296.955140][T18398] netlink: 'syz.2.4031': attribute type 29 has an invalid length.
[  297.644440][T18449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  297.797379][T18464] syz_tun (unregistering): left promiscuous mode
[  298.079730][T18484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.273579][T18508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  298.276609][T18508] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  298.612682][   T33] audit: type=1804 audit(1753203932.731:5): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4072" name="/newroot/1410/cgroup.controllers" dev="tmpfs" ino=7148 res=1 errno=0
[  298.619539][   T33] audit: type=1800 audit(1753203932.731:6): pid=18533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4072" name="cgroup.controllers" dev="tmpfs" ino=7148 res=0 errno=0
[  298.794714][T18551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.442992][T18579] sctp: [Deprecated]: syz.2.4087 (pid 18579) Use of int in maxseg socket option.
[  299.442992][T18579] Use struct sctp_assoc_value instead
[  299.457806][  T789] hid-generic 0005:0C45:1012.0003: item fetching failed at offset 0/1
[  299.460862][  T789] hid-generic 0005:0C45:1012.0003: probe with driver hid-generic failed with error -22
[  299.877393][T18622] xt_limit: Overflow, try lower: 0/0
[  300.029556][T18629] __nla_validate_parse: 43 callbacks suppressed
[  300.029568][T18629] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4104'.
[  300.036988][T18629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4104'.
[  300.057206][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'.
[  300.109573][T18643] x_tables: duplicate underflow at hook 4
[  300.233000][T18656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4113'.
[  300.288969][T18668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.348921][T18675] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4118'.
[  300.382816][T18661] validate_nla: 12 callbacks suppressed
[  300.382827][T18661] netlink: 'syz.1.4114': attribute type 4 has an invalid length.
[  300.384848][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4119'.
[  300.390858][T18661] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4114'.
[  300.423417][T18681] netlink: 'syz.1.4121': attribute type 58 has an invalid length.
[  300.467349][T18687] netlink: 'syz.2.4122': attribute type 8 has an invalid length.
[  300.525592][T18695] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4124'.
[  300.537620][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'.
[  300.574986][T18699] netlink: 'syz.1.4126': attribute type 2 has an invalid length.
[  300.631042][T18705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4128'.
[  301.023574][T18736] sctp: [Deprecated]: syz.2.4136 (pid 18736) Use of int in maxseg socket option.
[  301.023574][T18736] Use struct sctp_assoc_value instead
[  301.144408][T18751] netlink: 'syz.2.4141': attribute type 29 has an invalid length.
[  301.165481][T18751] netlink: 'syz.2.4141': attribute type 29 has an invalid length.
[  301.343398][T18770] netlink: 'syz.0.4147': attribute type 2 has an invalid length.
[  301.394773][T18774] netlink: 'syz.2.4149': attribute type 2 has an invalid length.
[  301.612631][T18784] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[  301.616054][T18784] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[  301.777704][T18800] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  301.786112][T18800] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  301.796285][T18800] tipc: Resetting bearer <eth:syzkaller0>
[  301.976248][T18805] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  301.988953][T18805] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  302.316109][T18819] tipc: Resetting bearer <eth:syzkaller0>
[  302.375504][T18835] sctp: [Deprecated]: syz.2.4161 (pid 18835) Use of struct sctp_assoc_value in delayed_ack socket option.
[  302.375504][T18835] Use struct sctp_sack_info instead
[  302.398422][T18837] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  302.401628][T18831] IPVS: stopping backup sync thread 18837 ...
[  302.451902][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  302.469095][T18843] netlink: 'syz.2.4164': attribute type 2 has an invalid length.
[  302.561306][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  302.588525][T18863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.671444][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  302.781779][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  302.900702][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  302.919411][T18895] netlink: 'syz.1.4179': attribute type 2 has an invalid length.
[  303.010735][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  303.130396][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  303.240891][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  304.737725][T18939] syz.0.4186: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  304.743954][T18939] CPU: 1 UID: 0 PID: 18939 Comm: syz.0.4186 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  304.743967][T18939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.743974][T18939] Call Trace:
[  304.743978][T18939]  <TASK>
[  304.743999][T18939]  dump_stack_lvl+0x189/0x250
[  304.744018][T18939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.744029][T18939]  ? __pfx__printk+0x10/0x10
[  304.744041][T18939]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  304.744055][T18939]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  304.744066][T18939]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  304.744078][T18939]  warn_alloc+0x214/0x310
[  304.744090][T18939]  ? __pfx_warn_alloc+0x10/0x10
[  304.744103][T18939]  ? __get_vm_area_node+0x28f/0x300
[  304.744116][T18939]  ? pfifo_fast_init+0x10d/0x6b0
[  304.744130][T18939]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  304.744142][T18939]  ? trace_mm_page_alloc+0x3e/0x150
[  304.744164][T18939]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  304.744178][T18939]  ? rcu_is_watching+0x15/0xb0
[  304.744190][T18939]  ? pfifo_fast_init+0x10d/0x6b0
[  304.744204][T18939]  ? pfifo_fast_init+0x10d/0x6b0
[  304.744214][T18939]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  304.744228][T18939]  ? pfifo_fast_init+0x10d/0x6b0
[  304.744241][T18939]  pfifo_fast_init+0x10d/0x6b0
[  304.744253][T18939]  qdisc_create_dflt+0x13b/0x4e0
[  304.744265][T18939]  mqprio_init+0x881/0x1e00
[  304.744281][T18939]  ? __pfx_mqprio_init+0x10/0x10
[  304.744288][T18939]  ? qdisc_alloc+0x6c0/0xaa0
[  304.744300][T18939]  ? __pfx_mqprio_init+0x10/0x10
[  304.744308][T18939]  qdisc_create+0x7ac/0xea0
[  304.744321][T18939]  tc_modify_qdisc+0x1538/0x20e0
[  304.744338][T18939]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  304.744382][T18939]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  304.744393][T18939]  rtnetlink_rcv_msg+0x77c/0xb70
[  304.744407][T18939]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  304.744417][T18939]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  304.744426][T18939]  ? ref_tracker_free+0x63a/0x7d0
[  304.744436][T18939]  ? __copy_skb_header+0xa7/0x550
[  304.744451][T18939]  ? __pfx_ref_tracker_free+0x10/0x10
[  304.744465][T18939]  netlink_rcv_skb+0x208/0x470
[  304.744479][T18939]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  304.744489][T18939]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  304.744506][T18939]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.744517][T18939]  ? netlink_deliver_tap+0x2e/0x1b0
[  304.744530][T18939]  netlink_unicast+0x75c/0x8e0
[  304.744545][T18939]  netlink_sendmsg+0x805/0xb30
[  304.744560][T18939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.744572][T18939]  ? aa_sock_msg_perm+0x94/0x160
[  304.744583][T18939]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  304.744594][T18939]  ? __pfx_netlink_sendmsg+0x10/0x10
[  304.744605][T18939]  __sock_sendmsg+0x21c/0x270
[  304.744617][T18939]  ____sys_sendmsg+0x505/0x830
[  304.744631][T18939]  ? __pfx_____sys_sendmsg+0x10/0x10
[  304.744647][T18939]  ? import_iovec+0x74/0xa0
[  304.744661][T18939]  ___sys_sendmsg+0x21f/0x2a0
[  304.744674][T18939]  ? __pfx____sys_sendmsg+0x10/0x10
[  304.744702][T18939]  ? __fget_files+0x2a/0x420
[  304.744711][T18939]  ? __fget_files+0x3a0/0x420
[  304.744723][T18939]  __x64_sys_sendmsg+0x19b/0x260
[  304.744736][T18939]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  304.744752][T18939]  ? rcu_is_watching+0x15/0xb0
[  304.744764][T18939]  ? do_syscall_64+0xbe/0x3b0
[  304.744778][T18939]  do_syscall_64+0xfa/0x3b0
[  304.744786][T18939]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.744795][T18939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.744804][T18939]  ? exc_page_fault+0x9f/0xf0
[  304.744813][T18939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  304.744821][T18939] RIP: 0033:0x7f3bd6b8e9a9
[  304.744830][T18939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  304.744839][T18939] RSP: 002b:00007f3bd49f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.744848][T18939] RAX: ffffffffffffffda RBX: 00007f3bd6db6160 RCX: 00007f3bd6b8e9a9
[  304.744854][T18939] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 000000000000000c
[  304.744860][T18939] RBP: 00007f3bd6c10d69 R08: 0000000000000000 R09: 0000000000000000
[  304.744864][T18939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  304.744869][T18939] R13: 0000000000000000 R14: 00007f3bd6db6160 R15: 00007ffc6c57d108
[  304.744883][T18939]  </TASK>
[  304.744886][T18939] Mem-Info:
[  304.884251][T18939] active_anon:541 inactive_anon:1090 isolated_anon:0
[  304.884251][T18939]  active_file:1131 inactive_file:128 isolated_file:0
[  304.884251][T18939]  unevictable:1768 dirty:0 writeback:0
[  304.884251][T18939]  slab_reclaimable:6462 slab_unreclaimable:240593
[  304.884251][T18939]  mapped:16294 shmem:2076 pagetables:1235
[  304.884251][T18939]  sec_pagetables:0 bounce:0
[  304.884251][T18939]  kernel_misc_reclaimable:0
[  304.884251][T18939]  free:122655 free_pcp:754 free_cma:0
[  304.898619][T18939] Node 0 active_anon:204kB inactive_anon:36kB active_file:1564kB inactive_file:52kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30860kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6812kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.908766][T18939] Node 1 active_anon:1960kB inactive_anon:4052kB active_file:2960kB inactive_file:460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34316kB dirty:0kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5336kB pagetables:2880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.919616][T18939] Node 0 DMA free:5092kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  304.929321][T18939] lowmem_reserve[]: 0 812 812 812 812
[  304.932033][T18939] Node 0 DMA32 free:123704kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:12288KB free_highatomic:0KB active_anon:204kB inactive_anon:36kB active_file:1564kB inactive_file:52kB unevictable:3536kB writepending:0kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:2124kB local_pcp:24kB free_cma:0kB
[  304.941698][T18939] lowmem_reserve[]: 0 0 0 0 0
[  304.943229][T18939] Node 1 DMA32 free:106140kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:8192KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  304.953732][T18939] lowmem_reserve[]: 0 0 854 854 854
[  304.955358][T18939] Node 1 Normal free:255684kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1960kB inactive_anon:4052kB active_file:2960kB inactive_file:460kB unevictable:3536kB writepending:0kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:996kB local_pcp:228kB free_cma:0kB
[  304.965153][T18939] lowmem_reserve[]: 0 0 0 0 0
[  304.966691][T18939] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 1*2048kB (U) 0*4096kB = 5092kB
[  304.972032][T18939] Node 0 DMA32: 9*4kB (UME) 195*8kB (UME) 435*16kB (UME) 545*32kB (UME) 196*64kB (UME) 57*128kB (UME) 62*256kB (UM) 47*512kB (UM) 37*1024kB (UM) 0*2048kB 0*4096kB = 123660kB
[  304.977557][T18939] Node 1 DMA32: 53*4kB (UM) 53*8kB (UM) 54*16kB (UM) 54*32kB (UM) 54*64kB (UM) 51*128kB (UM) 53*256kB (UM) 51*512kB (UM) 52*1024kB (UM) 0*2048kB 0*4096kB = 106140kB
[  304.982865][T18939] Node 1 Normal: 88*4kB (M) 567*8kB (ME) 183*16kB (ME) 149*32kB (UME) 104*64kB (UME) 319*128kB (UME) 196*256kB (UME) 154*512kB (UME) 65*1024kB (UME) 0*2048kB 0*4096kB = 255656kB
[  304.988147][T18939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  304.991820][T18939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  304.994611][T18939] 3478 total pagecache pages
[  304.996075][T18939] 139 pages in swap cache
[  304.997392][T18939] Free swap  = 111356kB
[  304.998739][T18939] Total swap = 124996kB
[  305.000307][T18939] 786301 pages RAM
[  305.001456][T18939] 0 pages HighMem/MovableOnly
[  305.002847][T18939] 241058 pages reserved
[  305.004083][T18939] 0 pages cma reserved
[  305.926187][T18982] __nla_validate_parse: 14 callbacks suppressed
[  305.926200][T18982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4203'.
[  305.935484][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'.
[  305.960453][T18987] validate_nla: 5 callbacks suppressed
[  305.960465][T18987] netlink: 'syz.1.4205': attribute type 2 has an invalid length.
[  306.057157][T19003] netlink: 'syz.0.4209': attribute type 30 has an invalid length.
[  306.064819][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'.
[  306.462111][T19058] netlink: 'syz.2.4225': attribute type 3 has an invalid length.
[  306.464765][T19058] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4225'.
[  306.540601][T19066] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4228'.
[  306.613364][T19078] netlink: 'syz.0.4231': attribute type 2 has an invalid length.
[  306.721367][T19095] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.4235'.
[  306.726035][T19095] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  306.730871][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4231'.
[  307.030300][ T5841] net_ratelimit: 14 callbacks suppressed
[  307.030313][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  307.101407][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'.
[  307.104313][T19112] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  307.106617][T19112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.140658][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  307.153064][T19112] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  307.251994][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  307.360223][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  307.471166][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  307.526525][T19140] bpq0: entered allmulticast mode
[  307.533678][T19140] bpq0: left allmulticast mode
[  307.582561][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  307.692054][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  307.706238][T19176] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4257'.
[  307.711670][T19177] xt_policy: too many policy elements
[  307.810263][T19189] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4263'.
[  308.015821][T19216] netlink: 'syz.2.4273': attribute type 21 has an invalid length.
[  308.025170][T19216] netlink: 'syz.2.4273': attribute type 21 has an invalid length.
[  308.335498][T19254] lo speed is unknown, defaulting to 1000
[  308.449233][T19252] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  308.537865][T19254] lo speed is unknown, defaulting to 1000
[  308.658810][T19267] netlink: 'syz.0.4288': attribute type 5 has an invalid length.
[  309.320383][T19306] bridge0: port 1(veth0_to_bridge) entered blocking state
[  309.327340][T19306] bridge0: port 1(veth0_to_bridge) entered disabled state
[  309.338601][T19306] veth0_to_bridge: entered allmulticast mode
[  309.342008][T19306] veth0_to_bridge: entered promiscuous mode
[  309.353058][   T52] wlan1: Trigger new scan to find an IBSS to join
[  309.403296][T19315] pim6reg9: entered allmulticast mode
[  309.539080][T19335] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  309.541547][T19335] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  309.600956][T19340] lo speed is unknown, defaulting to 1000
[  309.712601][T19340] lo speed is unknown, defaulting to 1000
[  310.186315][T19375] netlink: 'syz.0.4323': attribute type 1 has an invalid length.
[  310.363135][T19390] vlan0: entered promiscuous mode
[  310.365150][T19390] vlan0: entered allmulticast mode
[  310.366779][T19390] veth0_vlan: entered allmulticast mode
[  310.626511][T19406] netlink: 'syz.0.4331': attribute type 18 has an invalid length.
[  310.754198][T19415] x_tables: duplicate entry at hook 1
[  310.949124][T19433] __nla_validate_parse: 20 callbacks suppressed
[  310.949138][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4338'.
[  311.058050][T19445] netlink: 'syz.1.4341': attribute type 8 has an invalid length.
[  311.167592][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'.
[  311.175443][T19455] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4343'.
[  311.802105][T19503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4357'.
[  312.100464][ T5841] net_ratelimit: 34 callbacks suppressed
[  312.100481][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  312.213835][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  312.330547][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  312.392237][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  312.440212][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  312.561081][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  312.634610][T19595] netlink: 'syz.0.4383': attribute type 29 has an invalid length.
[  312.637992][T19595] netlink: 'syz.0.4383': attribute type 29 has an invalid length.
[  312.641103][T19595] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4383'.
[  312.671122][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  312.780555][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  312.799517][T19620] netlink: 'syz.0.4388': attribute type 2 has an invalid length.
[  312.890488][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  312.950202][ T5890] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  313.040179][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  313.065490][T19633] IPVS: length: 148 != 24
[  313.069812][T19633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.074568][T19633] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4391'.
[  313.233509][T19643] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20003
[  313.775924][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'.
[  313.782741][T19679] netlink: 'syz.1.4405': attribute type 2 has an invalid length.
[  314.639853][T19698] netlink: 'syz.1.4409': attribute type 29 has an invalid length.
[  314.644882][T19698] netlink: 'syz.1.4409': attribute type 29 has an invalid length.
[  314.648256][T19698] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4409'.
[  314.679194][T19700] netlink: 'syz.1.4410': attribute type 2 has an invalid length.
[  315.064879][T19716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4414'.
[  315.126767][T19717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'.
[  315.350798][T16548] wlan1: Trigger new scan to find an IBSS to join
[  315.999678][T19747] __nla_validate_parse: 2 callbacks suppressed
[  315.999691][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'.
[  316.079153][T19758] netlink: 'syz.0.4428': attribute type 1 has an invalid length.
[  316.084140][T19758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4428'.
[  316.152499][T19756] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2036804612/2036804614
[  316.155658][T19756] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2036804612/2036804614
[  316.251471][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.259751][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'.
[  316.459301][T19794] netlink: 'syz.1.4435': attribute type 1 has an invalid length.
[  316.463760][T19794] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4435'.
[  317.210415][ T5861] net_ratelimit: 35 callbacks suppressed
[  317.210430][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  317.321359][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  317.440914][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  317.461525][T19822] netlink: 'syz.1.4449': attribute type 29 has an invalid length.
[  317.464940][T19822] netlink: 'syz.1.4449': attribute type 29 has an invalid length.
[  317.468179][T19822] netlink: 500 bytes leftover after parsing attributes in process `syz.1.4449'.
[  317.550291][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  317.648155][T19838] netlink: 'syz.1.4454': attribute type 2 has an invalid length.
[  317.661457][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  317.757911][T19855] xt_TPROXY: Can be used only with -p tcp or -p udp
[  317.781076][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  317.809572][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4460'.
[  317.898587][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  317.925618][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 240 seconds
[  317.930762][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 240 seconds
[  317.935815][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 240 seconds
[  317.939388][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 240 seconds
[  317.991136][T19883] netlink: 'syz.0.4464': attribute type 2 has an invalid length.
[  318.020411][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  318.111275][T19893] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4467'.
[  318.146608][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  318.250313][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  318.517039][T19910] netlink: 'syz.1.4470': attribute type 1 has an invalid length.
[  318.534932][T19910] netlink: 'syz.1.4470': attribute type 1 has an invalid length.
[  318.654356][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4470'.
[  318.973255][T19922] syzkaller0: entered promiscuous mode
[  318.975065][T19922] syzkaller0: entered allmulticast mode
[  319.736104][T19933] netlink: 'syz.1.4476': attribute type 2 has an invalid length.
[  320.555044][T19944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.198234][T19950] netlink: 'syz.1.4480': attribute type 142 has an invalid length.
[  321.235725][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4482'.
[  324.431681][ T5841] net_ratelimit: 16 callbacks suppressed
[  324.431698][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  324.574731][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  324.595335][T19999] ip6tnl1: entered promiscuous mode
[  324.596993][T19999] ip6tnl1: entered allmulticast mode
[  324.599875][T19999] team0: Device ip6tnl1 is of different type
[  324.740604][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  324.772593][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'.
[  324.851042][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  324.957848][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4506'.
[  324.961078][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  325.140478][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  325.143273][T20030] lo speed is unknown, defaulting to 1000
[  325.250537][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  325.271545][T20030] lo speed is unknown, defaulting to 1000
[  325.371181][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  325.480702][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  325.592626][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  325.665825][T20052] netlink: 'syz.1.4512': attribute type 2 has an invalid length.
[  325.852786][T20066] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4512'.
[  325.927873][T20072] netlink: 'syz.2.4516': attribute type 5 has an invalid length.
[  325.931492][T20072] netlink: 'syz.2.4516': attribute type 5 has an invalid length.
[  325.947042][T20072] netlink: 'syz.2.4516': attribute type 5 has an invalid length.
[  325.949438][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4516'.
[  325.956175][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4516'.
[  326.071589][T20076] netlink: 'syz.2.4518': attribute type 2 has an invalid length.
[  326.572962][T20083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4519'.
[  327.046576][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4525'.
[  327.104730][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'.
[  327.148604][T20114] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  327.158444][T20114] netlink: 'syz.1.4529': attribute type 10 has an invalid length.
[  327.171101][T20114] bond0: (slave wlan1): Opening slave failed
[  327.192790][T20113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.208925][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'.
[  327.311347][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'.
[  327.359513][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4535'.
[  327.597015][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4544'.
[  327.599878][T20158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4544'.
[  327.628943][T20160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.649650][T20162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4546'.
[  328.111162][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4557'.
[  328.156947][T20207] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  328.297032][T20223] netlink: 'syz.2.4565': attribute type 2 has an invalid length.
[  328.780863][T20281] netlink: 'syz.1.4575': attribute type 2 has an invalid length.
[  329.168932][T20305] team_slave_1: entered promiscuous mode
[  329.171044][T20305] team_slave_1: entered allmulticast mode
[  329.440458][   T13] net_ratelimit: 32 callbacks suppressed
[  329.440472][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  329.550508][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  329.662511][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  329.738592][T20347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.744488][T20347] syzkaller0: entered promiscuous mode
[  329.746322][T20347] syzkaller0: entered allmulticast mode
[  329.761948][T20347] tipc: Resetting bearer <eth:syzkaller0>
[  329.780374][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  329.872380][T20346] tipc: Resetting bearer <eth:syzkaller0>
[  329.889165][T20346] tipc: Disabling bearer <eth:syzkaller0>
[  329.910547][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  330.021436][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  330.072690][  T968] page_pool_release_retry() stalled pool shutdown: id 51, 3329 inflight 180 sec
[  330.130680][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  330.240384][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  330.350658][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  330.473006][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  330.481784][T20414] netlink: 'syz.2.4605': attribute type 7 has an invalid length.
[  330.484144][T20414] netlink: 'syz.2.4605': attribute type 8 has an invalid length.
[  330.520762][T20419] netlink: 'syz.2.4606': attribute type 1 has an invalid length.
[  331.175929][T20453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.795615][T20484] netlink: 'syz.2.4624': attribute type 2 has an invalid length.
[  331.909245][T20487] __nla_validate_parse: 9 callbacks suppressed
[  331.909257][T20487] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4624'.
[  332.004256][T20498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.199527][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4632'.
[  332.228580][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'.
[  332.232391][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4633'.
[  332.235566][T20510] netlink: 'syz.1.4633': attribute type 18 has an invalid length.
[  332.379215][T20514] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4635'.
[  332.425627][T20518] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  332.470889][T20520] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  332.476879][T20520] x_tables: duplicate underflow at hook 1
[  332.554564][T20527] netlink: 'syz.0.4639': attribute type 29 has an invalid length.
[  332.571374][T20527] netlink: 'syz.0.4639': attribute type 29 has an invalid length.
[  332.578508][T20527] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4639'.
[  332.612355][T20529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  332.629553][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4642'.
[  332.633686][T20533] netlink: 'syz.0.4642': attribute type 30 has an invalid length.
[  332.641073][T20533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.643808][T20533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.646882][T20533] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.653004][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4642'.
[  332.656111][T20533] netlink: 'syz.0.4642': attribute type 30 has an invalid length.
[  332.697938][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'.
[  332.773482][T20537] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003
[  332.814672][T20546] netlink: 'syz.0.4648': attribute type 29 has an invalid length.
[  332.817950][T20546] netlink: 'syz.0.4648': attribute type 29 has an invalid length.
[  332.836654][T20548] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4649'.
[  333.022688][T20564] tipc: Can't bind to reserved service type 1
[  333.658644][T20625] netlink: 'syz.2.4672': attribute type 2 has an invalid length.
[  333.928356][T20645] team0: Port device bridge6 added
[  334.059682][T20653] syzkaller1: entered promiscuous mode
[  334.071614][T20653] syzkaller1: entered allmulticast mode
[  334.176363][T20666] netlink: 'syz.1.4686': attribute type 2 has an invalid length.
[  334.185272][T20667] netlink: 'syz.1.4686': attribute type 2 has an invalid length.
[  334.824962][T20706] bridge_slave_0: entered allmulticast mode
[  334.860534][   T12] net_ratelimit: 29 callbacks suppressed
[  334.860550][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  334.970674][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  335.095033][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  335.200499][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  335.216313][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  335.310505][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  335.420400][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  335.540274][ T5861] bond2: (slave wlan0): failed to get link speed/duplex
[  335.650545][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  335.760119][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  335.880478][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  336.005889][T20777] delete_channel: no stack
[  336.121692][T20784] syzkaller1: entered promiscuous mode
[  336.123399][T20784] syzkaller1: entered allmulticast mode
[  336.687591][T20817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.957048][T20852] __nla_validate_parse: 20 callbacks suppressed
[  336.957063][T20852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'.
[  337.001751][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4738'.
[  337.005887][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4738'.
[  337.166373][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4745'.
[  337.171933][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'.
[  337.381666][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4756'.
[  337.426593][T20914] netlink: 844 bytes leftover after parsing attributes in process `syz.0.4758'.
[  337.545022][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4762'.
[  337.653477][T20947] validate_nla: 11 callbacks suppressed
[  337.653489][T20947] netlink: 'syz.0.4767': attribute type 2 has an invalid length.
[  337.664811][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4769'.
[  337.866583][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4770'.
[  337.971149][T20968] netem: incorrect gi model size
[  337.972916][T20968] netem: change failed
[  338.072331][T20976] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  338.074884][T20976] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  338.077627][T20976] tipc: Resetting bearer <eth:syzkaller0>
[  338.081679][T20976] netlink: 'syz.1.4774': attribute type 2 has an invalid length.
[  338.118726][T20982] netlink: 'syz.2.4776': attribute type 29 has an invalid length.
[  338.123893][T20982] netlink: 'syz.2.4776': attribute type 29 has an invalid length.
[  339.237240][T21062] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  339.239954][T21062] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  339.244256][T21062] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  339.247013][T21062] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  339.257858][T21062] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.260762][T21062] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.263399][T21062] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.265972][T21062] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.288385][T21062] batman_adv: batadv0: Interface deactivated: macvlan3
[  339.309480][T21062] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.312341][T21062] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.315117][T21062] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.317898][T21062] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  339.326794][T21062] batman_adv: batadv0: Interface deactivated: macvlan4
[  339.333896][T21080] bridge: RTM_NEWNEIGH with invalid ether address
[  339.336491][T21079] lo: entered promiscuous mode
[  339.403548][T21078] lo: left promiscuous mode
[  339.482843][T21100] netlink: 'syz.0.4813': attribute type 2 has an invalid length.
[  339.582288][T21117] netlink: 'syz.2.4818': attribute type 29 has an invalid length.
[  339.593527][T21117] netlink: 'syz.2.4818': attribute type 29 has an invalid length.
[  339.619615][T21121] netlink: 'syz.1.4819': attribute type 2 has an invalid length.
[  339.662021][T21127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  339.930577][   T12] net_ratelimit: 34 callbacks suppressed
[  339.930589][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  340.040224][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  340.141779][T21162] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  340.371202][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  340.491607][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  340.600218][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  340.720938][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  340.830208][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  340.940622][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  341.024366][T21218] netlink: 'syz.1.4847': attribute type 29 has an invalid length.
[  341.027968][T21218] netlink: 'syz.1.4847': attribute type 29 has an invalid length.
[  341.062550][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  341.182010][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  341.322275][T21226] sctp: [Deprecated]: syz.1.4850 (pid 21226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.322275][T21226] Use struct sctp_sack_info instead
[  341.418820][T21231] lo speed is unknown, defaulting to 1000
[  341.523916][T21231] lo speed is unknown, defaulting to 1000
[  341.524053][T21232] lo speed is unknown, defaulting to 1000
[  341.669708][T21232] lo speed is unknown, defaulting to 1000
[  341.674706][T21240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.887446][T21247] vlan2: entered promiscuous mode
[  341.889290][T21247] batadv0: entered promiscuous mode
[  342.247193][T21275] __nla_validate_parse: 22 callbacks suppressed
[  342.247209][T21275] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4865'.
[  342.416486][T21292] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4869'.
[  342.488216][T21296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.528960][T21298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4872'.
[  342.618215][T21302] tipc: New replicast peer: 10.1.1.2
[  342.681867][T21304] validate_nla: 5 callbacks suppressed
[  342.681882][T21304] netlink: 'syz.0.4875': attribute type 1 has an invalid length.
[  342.686112][T21304] netlink: 'syz.0.4875': attribute type 1 has an invalid length.
[  342.688623][T21304] netlink: 'syz.0.4875': attribute type 1 has an invalid length.
[  342.694304][T21304] block nbd1: shutting down sockets
[  342.841917][T21310] netlink: 'syz.0.4877': attribute type 29 has an invalid length.
[  342.845219][T21310] netlink: 'syz.0.4877': attribute type 29 has an invalid length.
[  342.848515][T21310] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4877'.
[  342.879863][T21312] netlink: 'syz.0.4878': attribute type 2 has an invalid length.
[  343.457248][T21346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.475044][T21348] netlink: 'syz.1.4886': attribute type 2 has an invalid length.
[  343.768106][T21357] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  343.771248][T21358] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4888'.
[  343.921413][T21367] netlink: 'syz.0.4891': attribute type 1 has an invalid length.
[  343.923925][T21367] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4891'.
[  343.927757][T21367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4891'.
[  344.338362][T21378] sctp: [Deprecated]: syz.1.4895 (pid 21378) Use of int in max_burst socket option.
[  344.338362][T21378] Use struct sctp_assoc_value instead
[  344.381373][T21382] sctp: [Deprecated]: syz.1.4895 (pid 21382) Use of int in max_burst socket option.
[  344.381373][T21382] Use struct sctp_assoc_value instead
[  344.916614][T21407] netlink: 'syz.2.4903': attribute type 1 has an invalid length.
[  344.919103][T21407] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4903'.
[  344.933022][T21407] netlink: 'syz.2.4903': attribute type 9 has an invalid length.
[  344.970582][   T12] net_ratelimit: 30 callbacks suppressed
[  344.970599][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  344.992018][T21416] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4903'.
[  344.995663][T21416] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4903'.
[  345.080580][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  345.200280][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  345.320355][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  345.430269][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  345.540276][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  345.650423][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  345.760318][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  345.870163][ T5856] bond2: (slave wlan0): failed to get link speed/duplex
[  345.980370][   T13] bond2: (slave wlan0): failed to get link speed/duplex
[  346.385565][T21473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.403139][T21477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.822630][T21507] pim6reg1: entered promiscuous mode
[  346.824331][T21507] pim6reg1: entered allmulticast mode
[  347.337912][T21553] __nla_validate_parse: 3 callbacks suppressed
[  347.337924][T21553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4947'.
[  347.415382][T21561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4949'.
[  347.803942][T21587] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  347.835270][T21589] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4958'.
[  347.991891][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 270 seconds
[  347.995432][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 270 seconds
[  347.998751][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 270 seconds
[  348.002423][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 270 seconds
[  348.034891][T21606] validate_nla: 6 callbacks suppressed
[  348.034904][T21606] netlink: 'syz.2.4964': attribute type 2 has an invalid length.
[  348.058560][T21606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4964'.
[  348.061975][T21606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4964'.
[  348.065334][T21606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4964'.
[  348.068570][T21606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4964'.
[  348.183838][T21620] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4967'.
[  348.928780][T21682] netlink: 'syz.2.4986': attribute type 2 has an invalid length.
[  349.154717][T21702] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  349.200845][T21702] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4991'.
[  349.394125][T21718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4997'.
[  349.425285][T21720] lo speed is unknown, defaulting to 1000
[  349.532253][T21724] xt_recent: Unsupported userspace flags (00000048)
[  349.633619][T21720] lo speed is unknown, defaulting to 1000
[  350.031307][ T5841] net_ratelimit: 30 callbacks suppressed
[  350.031321][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.080945][T21761] netlink: 'syz.1.5008': attribute type 1 has an invalid length.
[  350.083988][T21761] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  350.141105][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.251384][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.360330][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.471859][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  350.511255][T21779] netlink: 'syz.2.5012': attribute type 29 has an invalid length.
[  350.514767][T21779] netlink: 'syz.2.5012': attribute type 29 has an invalid length.
[  350.579709][T21783] netlink: 'syz.2.5014': attribute type 2 has an invalid length.
[  350.590206][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  350.700391][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.810454][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  350.920461][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  351.031691][ T5841] bond2: (slave wlan0): failed to get link speed/duplex
[  351.509446][T21845] netlink: 'syz.2.5034': attribute type 2 has an invalid length.
[  351.855142][T21857] tipc: Resetting bearer <eth:syzkaller0>
[  352.204187][T21878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.207124][T21878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.209894][T21878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.257036][T21878] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.259955][T21878] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.263148][T21878] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  352.394340][T21882] __nla_validate_parse: 9 callbacks suppressed
[  352.394353][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5042'.
[  352.538389][T21892] netlink: 'syz.2.5044': attribute type 1 has an invalid length.
[  352.541259][T21892] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5044'.
[  352.546574][T21892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5044'.
[  353.311981][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5054'.
[  353.322713][T21920] xt_TCPMSS: Only works on TCP SYN packets
[  353.521814][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5051'.
[  353.606389][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'.
[  353.932971][T21953] netlink: 'syz.2.5060': attribute type 1 has an invalid length.
[  353.935467][T21953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5060'.
[  353.939073][T21953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5060'.
[  354.251201][T21958] netlink: 'syz.0.5064': attribute type 29 has an invalid length.
[  354.254358][T21958] netlink: 'syz.0.5064': attribute type 29 has an invalid length.
[  354.258860][T21958] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5064'.
[  354.474910][T21964] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5067'.
[  354.485961][T21964] tipc: Trying to set illegal importance in message
[  354.681922][T21971] netlink: 'syz.2.5069': attribute type 2 has an invalid length.
[  355.840203][T21975] syz.2.5069 (21975) used greatest stack depth: 18824 bytes left
[  356.123572][T21993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.531861][T22071] macvlan5: entered allmulticast mode
[  357.533672][T22071] veth1_vlan: entered allmulticast mode
[  357.537045][T22071] veth1_vlan: left allmulticast mode
[  357.611466][T22073] netlink: 'syz.0.5101': attribute type 9 has an invalid length.
[  357.699939][T22079] netlink: 'syz.1.5103': attribute type 2 has an invalid length.
[  357.882001][T22088] __nla_validate_parse: 3 callbacks suppressed
[  357.882013][T22088] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5106'.
[  358.005917][T22095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.090309][T22091] netlink: 'syz.2.5107': attribute type 3 has an invalid length.
[  358.092826][T22091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5107'.
[  358.456816][T22117] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5115'.
[  358.814220][T22155] netlink: 'syz.2.5129': attribute type 29 has an invalid length.
[  358.829163][T22155] netlink: 'syz.2.5129': attribute type 29 has an invalid length.
[  358.838951][T22155] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5129'.
[  358.878620][T22160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5130'.
[  358.910344][T22166] xt_ipcomp: unknown flags F7
[  358.913572][T22166] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5132'.
[  358.988563][T22174] netlink: 'syz.2.5134': attribute type 2 has an invalid length.
[  359.059689][T22178] netlink: 'syz.0.5136': attribute type 2 has an invalid length.
[  359.337260][T22188] v: renamed from veth0_vlan
[  360.237505][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5154'.
[  360.858647][T22293] net_ratelimit: 8 callbacks suppressed
[  360.858660][T22293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.874364][T22295] netlink: 6028 bytes leftover after parsing attributes in process `syz.2.5172'.
[  361.089385][T22320] netlink: 'syz.2.5181': attribute type 2 has an invalid length.
[  361.180953][T22325] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  361.183420][T22325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5181'.
[  361.539316][T22340] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5186'.
[  361.580305][T22340] netlink: 'syz.1.5186': attribute type 1 has an invalid length.
[  361.582738][T22340] netlink: 'syz.1.5186': attribute type 1 has an invalid length.
[  361.585143][T22340] netlink: 'syz.1.5186': attribute type 1 has an invalid length.
[  361.588162][T22340] block nbd1: shutting down sockets
[  361.727148][T22345] netlink: 'syz.1.5187': attribute type 2 has an invalid length.
[  362.017342][T22357] netlink: 'syz.2.5190': attribute type 29 has an invalid length.
[  362.021439][T22357] netlink: 'syz.2.5190': attribute type 29 has an invalid length.
[  362.525507][T22402] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  362.803380][T22441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.094706][T22464] __nla_validate_parse: 3 callbacks suppressed
[  363.094717][T22464] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5225'.
[  363.369619][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5228'.
[  363.383080][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5228'.
[  363.462888][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5230'.
[  363.580208][T22479] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5232'.
[  363.787422][T22511] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  363.825935][T22520] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5241'.
[  363.998523][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5247'.
[  364.150671][T16548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.153622][T16548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.929112][T22593] validate_nla: 12 callbacks suppressed
[  364.929126][T22593] netlink: 'syz.0.5265': attribute type 10 has an invalid length.
[  364.935346][T22593] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  365.022428][T22597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5266'.
[  365.286170][T22601] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5267'.
[  365.289131][T22601] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5267'.
[  366.921086][T22673] netlink: 'syz.1.5288': attribute type 2 has an invalid length.
[  366.987514][T22677] : renamed from vlan0
[  367.030780][ T5890] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  367.064735][T22685] netlink: 'syz.0.5290': attribute type 29 has an invalid length.
[  367.068553][T22685] netlink: 'syz.0.5290': attribute type 29 has an invalid length.
[  367.126221][T22687] netlink: 'syz.0.5291': attribute type 1 has an invalid length.
[  367.128662][T22687] netlink: 'syz.0.5291': attribute type 1 has an invalid length.
[  367.228442][T22689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.116321][T22736] __nla_validate_parse: 5 callbacks suppressed
[  368.116333][T22736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5307'.
[  368.167816][T22743] netlink: 'syz.2.5309': attribute type 2 has an invalid length.
[  368.264088][T22749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5311'.
[  368.286530][T22745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5310'.
[  368.304246][T22749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.562807][T22759] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5313'.
[  369.027904][T22784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5320'.
[  369.046235][T22786] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5321'.
[  369.148737][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5326'.
[  369.152398][T22802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5326'.
[  369.155044][T22802] netlink: 'syz.2.5326': attribute type 6 has an invalid length.
[  369.162079][T22802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.197533][T22808] netlink: 'syz.2.5329': attribute type 2 has an invalid length.
[  369.665303][T22844] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  369.678096][T22845] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[  369.762919][T22856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5339'.
[  369.857032][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5343'.
[  369.893071][T22872] netlink: 'syz.0.5345': attribute type 1 has an invalid length.
[  370.116711][T22892] IPVS: Error connecting to the multicast addr
[  370.196262][T22904] netlink: 'syz.2.5358': attribute type 2 has an invalid length.
[  370.389018][T22916] sit0: entered promiscuous mode
[  370.598403][T22949] netlink: 'syz.2.5369': attribute type 1 has an invalid length.
[  370.667944][T22956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.259587][T22975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.321703][T22982] netlink: 'syz.1.5382': attribute type 29 has an invalid length.
[  371.325168][T22982] netlink: 'syz.1.5382': attribute type 29 has an invalid length.
[  371.399430][T22986] bond0: entered promiscuous mode
[  371.429384][T22992] netlink: 'syz.2.5386': attribute type 2 has an invalid length.
[  371.571389][T22998] netlink: 'syz.1.5387': attribute type 2 has an invalid length.
[  371.861445][T23014] netlink: 'syz.0.5391': attribute type 2 has an invalid length.
[  372.768629][T23054] netlink: 'syz.0.5406': attribute type 2 has an invalid length.
[  372.773242][T23055] netlink: 'syz.0.5406': attribute type 2 has an invalid length.
[  372.834808][T23063] netlink: 'syz.2.5410': attribute type 2 has an invalid length.
[  373.237168][T23094] __nla_validate_parse: 12 callbacks suppressed
[  373.237179][T23094] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5417'.
[  373.462349][T23114] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5424'.
[  373.749262][T23129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5428'.
[  373.851578][T23142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.855424][T23142] syzkaller0: entered promiscuous mode
[  373.857385][T23142] syzkaller0: entered allmulticast mode
[  373.869749][T23142] tipc: Resetting bearer <eth:syzkaller0>
[  373.882364][T23141] tipc: Resetting bearer <eth:syzkaller0>
[  373.894013][T23141] tipc: Disabling bearer <eth:syzkaller0>
[  374.132051][T23152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5436'.
[  374.136256][T23152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5436'.
[  374.262843][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5440'.
[  374.498766][T23184] dvmrp1: tun_chr_ioctl cmd 1074025677
[  374.501048][T23184] dvmrp1: linktype set to 773
[  374.531108][T23185] openvswitch: netlink: IPv4 tun info is not correct
[  374.562743][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5451'.
[  374.710648][T23189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  375.273951][T23202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5455'.
[  375.349622][T23209] validate_nla: 6 callbacks suppressed
[  375.349633][T23209] netlink: 'syz.0.5458': attribute type 29 has an invalid length.
[  375.354641][T23209] netlink: 'syz.0.5458': attribute type 29 has an invalid length.
[  375.357552][T23209] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5458'.
[  375.558671][T23220] netlink: 'syz.2.5459': attribute type 1 has an invalid length.
[  375.562552][T23220] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5459'.
[  375.769050][T23219] netlink: 'syz.0.5462': attribute type 3 has an invalid length.
[  375.772563][T23219] netlink: 'syz.0.5462': attribute type 1 has an invalid length.
[  375.783738][T23219] NCSI netlink: No device for ifindex 0
[  375.980873][T23235] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  376.425237][T23260] netlink: 'syz.2.5473': attribute type 1 has an invalid length.
[  376.467783][T23260] bond7: (slave bridge7): making interface the new active one
[  376.472372][T23260] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  376.599276][T23277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.607144][T23271] netlink: 'syz.2.5476': attribute type 11 has an invalid length.
[  376.611871][   T61] lo speed is unknown, defaulting to 1000
[  376.614506][   T61] syz1: Port: 1 Link DOWN
[  376.832044][T23304] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  376.877208][T23310] netlink: get zone limit has 8 unknown bytes
[  376.945550][T23310] netlink: 'syz.2.5488': attribute type 7 has an invalid length.
[  376.972583][T23321] netlink: 'syz.1.5491': attribute type 1 has an invalid length.
[  377.350747][  T162] wlan0: Trigger new scan to find an IBSS to join
[  377.518477][T23367] netlink: 'syz.1.5503': attribute type 29 has an invalid length.
[  377.522408][T23367] netlink: 'syz.1.5503': attribute type 29 has an invalid length.
[  377.528408][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.533946][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.538847][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.546863][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.554419][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.560665][T23369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.807612][T23397] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  377.924691][T23409] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  377.929750][T23410] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  377.933182][T23410] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  378.070934][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 300 seconds
[  378.074300][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 300 seconds
[  378.077581][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 300 seconds
[  378.081259][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 300 seconds
[  378.896803][T23443] __nla_validate_parse: 28 callbacks suppressed
[  378.896814][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  378.981136][ T5890] Bluetooth: hci2: link tx timeout
[  378.984053][ T5890] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  379.061881][T23454] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  379.857429][T23462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5531'.
[  379.938463][T23467] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5533'.
[  380.108283][T23491] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5541'.
[  380.152857][T23496] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5543'.
[  380.195877][T23501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5538'.
[  380.314702][T23515] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5549'.
[  380.371650][T23521] validate_nla: 7 callbacks suppressed
[  380.371662][T23521] netlink: 'syz.2.5552': attribute type 2 has an invalid length.
[  380.391477][  T162] wlan0: Trigger new scan to find an IBSS to join
[  380.777306][T23535] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5556'.
[  381.030185][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  381.240209][T23555] netlink: 'syz.1.5563': attribute type 1 has an invalid length.
[  381.242907][T23555] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5563'.
[  381.260492][T23555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5563'.
[  381.616355][T23593] netlink: 'syz.0.5574': attribute type 29 has an invalid length.
[  381.619441][T23593] netlink: 'syz.0.5574': attribute type 29 has an invalid length.
[  381.722067][T23599] lo speed is unknown, defaulting to 1000
[  381.765600][T23607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.826858][T23607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.862000][T23599] lo speed is unknown, defaulting to 1000
[  381.891395][T23607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.993115][T23619] netlink: 'syz.1.5583': attribute type 2 has an invalid length.
[  382.037541][T23627] netlink: 'syz.2.5585': attribute type 2 has an invalid length.
[  382.090370][T23631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.518157][T23637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.521777][T23637] syzkaller0: entered promiscuous mode
[  382.523396][T23637] syzkaller0: entered allmulticast mode
[  382.547791][T23637] tipc: Resetting bearer <eth:syzkaller0>
[  382.610666][T23636] tipc: Resetting bearer <eth:syzkaller0>
[  382.631587][T23636] tipc: Disabling bearer <eth:syzkaller0>
[  382.868626][T23644] netlink: 'syz.1.5589': attribute type 1 has an invalid length.
[  383.081675][T23670] netlink: 'syz.0.5598': attribute type 2 has an invalid length.
[  383.351698][   T52] wlan0: Trigger new scan to find an IBSS to join
[  383.924963][T23687] __nla_validate_parse: 8 callbacks suppressed
[  383.924974][T23687] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5601'.
[  384.054908][T23698] pim6reg: entered allmulticast mode
[  384.083680][T23700] netlink: 'syz.0.5606': attribute type 20 has an invalid length.
[  384.271191][  T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.468051][T23742] netlink: 'syz.0.5618': attribute type 21 has an invalid length.
[  384.470955][T23742] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5618'.
[  384.473723][T23742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5618'.
[  384.575883][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5622'.
[  384.578700][T23754] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5622'.
[  384.583757][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5622'.
[  384.648902][T23762] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5624'.
[  384.706313][T23764] nbd: couldn't find device at index 536870912
[  384.708597][T23764] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5625'.
[  384.818151][T23690] pim6reg: left allmulticast mode
[  385.187277][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'.
[  385.224581][T23796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.227408][T23796] syzkaller0: entered promiscuous mode
[  385.229041][T23796] syzkaller0: entered allmulticast mode
[  385.242715][T23796] tipc: Resetting bearer <eth:syzkaller0>
[  385.247721][T23795] tipc: Resetting bearer <eth:syzkaller0>
[  385.257768][T23795] tipc: Disabling bearer <eth:syzkaller0>
[  385.496758][T23801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5636'.
[  385.913310][T23845] validate_nla: 2 callbacks suppressed
[  385.913322][T23845] netlink: 'syz.0.5650': attribute type 2 has an invalid length.
[  386.087172][T23867] netlink: 'syz.0.5656': attribute type 2 has an invalid length.
[  386.246774][T23880] netlink: 'syz.2.5659': attribute type 2 has an invalid length.
[  386.396723][T23893] bridge_slave_0: default FDB implementation only supports local addresses
[  386.403134][T23893] IPv6: sit3: Disabled Multicast RS
[  386.958096][T23942] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  387.015207][T23946] netlink: 'syz.1.5677': attribute type 2 has an invalid length.
[  388.125895][T24000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.136301][T24002] netlink: 'syz.1.5693': attribute type 2 has an invalid length.
[  388.517655][T24012] syz.2.5695: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  388.523552][T24012] CPU: 1 UID: 0 PID: 24012 Comm: syz.2.5695 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  388.523565][T24012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  388.523572][T24012] Call Trace:
[  388.523577][T24012]  <TASK>
[  388.523583][T24012]  dump_stack_lvl+0x189/0x250
[  388.523602][T24012]  ? __pfx_dump_stack_lvl+0x10/0x10
[  388.523613][T24012]  ? __pfx__printk+0x10/0x10
[  388.523626][T24012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  388.523640][T24012]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  388.523651][T24012]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  388.523663][T24012]  warn_alloc+0x214/0x310
[  388.523671][T24012]  ? stack_depot_save_flags+0x40/0x900
[  388.523681][T24012]  ? __pfx_warn_alloc+0x10/0x10
[  388.523690][T24012]  ? kasan_save_track+0x4f/0x80
[  388.523702][T24012]  ? xskq_create+0x56/0x170
[  388.523711][T24012]  ? xsk_init_queue+0xb0/0x110
[  388.523717][T24012]  ? xsk_setsockopt+0x43f/0x710
[  388.523728][T24012]  ? do_sock_setsockopt+0x17c/0x1b0
[  388.523740][T24012]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  388.523750][T24012]  ? do_syscall_64+0xfa/0x3b0
[  388.523758][T24012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.523771][T24012]  __vmalloc_node_range_noprof+0x125/0x12f0
[  388.523796][T24012]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  388.523809][T24012]  ? xskq_create+0x56/0x170
[  388.523818][T24012]  ? __kasan_kmalloc+0x93/0xb0
[  388.523830][T24012]  vmalloc_user_noprof+0xad/0xf0
[  388.523842][T24012]  ? xskq_create+0xbf/0x170
[  388.523850][T24012]  xskq_create+0xbf/0x170
[  388.523859][T24012]  xsk_init_queue+0xb0/0x110
[  388.523868][T24012]  xsk_setsockopt+0x43f/0x710
[  388.523881][T24012]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.523894][T24012]  ? __fget_files+0x2a/0x420
[  388.523902][T24012]  ? aa_sock_opt_perm+0x74/0x110
[  388.523913][T24012]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  388.523921][T24012]  ? __pfx_xsk_setsockopt+0x10/0x10
[  388.523934][T24012]  do_sock_setsockopt+0x17c/0x1b0
[  388.523947][T24012]  __x64_sys_setsockopt+0x13f/0x1b0
[  388.523961][T24012]  do_syscall_64+0xfa/0x3b0
[  388.523984][T24012]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.523995][T24012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.524003][T24012]  ? exc_page_fault+0x9f/0xf0
[  388.524013][T24012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.524021][T24012] RIP: 0033:0x7f2e8318e9a9
[  388.524030][T24012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.524038][T24012] RSP: 002b:00007f2e83f9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  388.524047][T24012] RAX: ffffffffffffffda RBX: 00007f2e833b5fa0 RCX: 00007f2e8318e9a9
[  388.524053][T24012] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  388.524058][T24012] RBP: 00007f2e83210d69 R08: 0000000000000004 R09: 0000000000000000
[  388.524064][T24012] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  388.524069][T24012] R13: 0000000000000000 R14: 00007f2e833b5fa0 R15: 00007fff120b7b68
[  388.524083][T24012]  </TASK>
[  388.524087][T24012] Mem-Info:
[  388.629525][T24012] active_anon:8755 inactive_anon:277 isolated_anon:0
[  388.629525][T24012]  active_file:2242 inactive_file:458 isolated_file:0
[  388.629525][T24012]  unevictable:1768 dirty:143 writeback:0
[  388.629525][T24012]  slab_reclaimable:4757 slab_unreclaimable:151173
[  388.629525][T24012]  mapped:16856 shmem:1776 pagetables:1305
[  388.629525][T24012]  sec_pagetables:0 bounce:0
[  388.629525][T24012]  kernel_misc_reclaimable:0
[  388.629525][T24012]  free:232934 free_pcp:20249 free_cma:0
[  388.654347][T24012] Node 0 active_anon:17272kB inactive_anon:332kB active_file:8768kB inactive_file:612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34968kB dirty:396kB writeback:0kB shmem:3548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6544kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  388.665838][T24012] Node 1 active_anon:17612kB inactive_anon:776kB active_file:200kB inactive_file:1220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32456kB dirty:176kB writeback:0kB shmem:3556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5360kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  388.675630][T24012] Node 0 DMA free:6752kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB
[  388.684068][T24012] lowmem_reserve[]: 0 812 812 812 812
[  388.685771][T24012] Node 0 DMA32 free:158376kB boost:2048kB min:35704kB low:44116kB high:52528kB reserved_highatomic:12288KB free_highatomic:12288KB active_anon:17272kB inactive_anon:332kB active_file:8764kB inactive_file:612kB unevictable:3536kB writepending:396kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:49656kB local_pcp:17228kB free_cma:0kB
[  388.698198][T24012] lowmem_reserve[]: 0 0 0 0 0
[  388.699692][T24012] Node 1 DMA32 free:388404kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:8192KB free_highatomic:8192KB active_anon:16kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:4016kB local_pcp:128kB free_cma:0kB
[  388.709765][T24015] netlink: 'syz.0.5696': attribute type 2 has an invalid length.
[  388.711315][T24016] netlink: 'syz.0.5696': attribute type 2 has an invalid length.
[  388.719129][T24012] lowmem_reserve[]: 0 0 854 854 854
[  388.720941][T24012] Node 1 Normal free:378204kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:8192KB free_highatomic:8192KB active_anon:17596kB inactive_anon:752kB active_file:200kB inactive_file:1220kB unevictable:3536kB writepending:176kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:26764kB local_pcp:8148kB free_cma:0kB
[  388.730854][T24012] lowmem_reserve[]: 0 0 0 0 0
[  388.732340][T24012] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 2*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 6752kB
[  388.736857][T24012] Node 0 DMA32: 1372*4kB (UME) 777*8kB (UME) 681*16kB (UME) 397*32kB (UME) 56*64kB (UME) 165*128kB (UME) 94*256kB (UME) 55*512kB (UM) 31*1024kB (UM) 1*2048kB (M) 3*4096kB (H) = 158312kB
[  388.742497][T24012] Node 1 DMA32: 83*4kB (UME) 89*8kB (UME) 94*16kB (UME) 100*32kB (UME) 91*64kB (UME) 78*128kB (UME) 65*256kB (UME) 46*512kB (UME) 47*1024kB (UME) 2*2048kB (U) 67*4096kB (UH) = 388404kB
[  388.748007][T24012] Node 1 Normal: 101*4kB (UME) 503*8kB (UME) 723*16kB (UM) 382*32kB (UME) 520*64kB (UME) 392*128kB (UME) 271*256kB (UM) 173*512kB (UME) 58*1024kB (UM) 4*2048kB (U) 10*4096kB (UH) = 378172kB
[  388.754681][T24012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  388.757482][T24012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  388.760653][T24012] 5361 total pagecache pages
[  388.762167][T24012] 885 pages in swap cache
[  388.763686][T24012] Free swap  = 91188kB
[  388.765118][T24012] Total swap = 124996kB
[  388.766550][T24012] 786301 pages RAM
[  388.767856][T24012] 0 pages HighMem/MovableOnly
[  388.769475][T24012] 241058 pages reserved
[  388.771056][T24012] 0 pages cma reserved
[  389.022031][T24030] __nla_validate_parse: 15 callbacks suppressed
[  389.022048][T24030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5699'.
[  389.039006][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5700'.
[  389.045541][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5700'.
[  389.065707][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'.
[  389.101887][T24039] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5703'.
[  389.180913][T24050] netlink: 'syz.2.5707': attribute type 2 has an invalid length.
[  389.396210][T24060] netlink: 'syz.0.5710': attribute type 29 has an invalid length.
[  389.398810][T24064] netlink: 'syz.0.5710': attribute type 29 has an invalid length.
[  389.403125][T24060] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5710'.
[  389.433337][T24066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5711'.
[  389.971766][T24080] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5715'.
[  390.125772][T24094] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5717'.
[  390.165089][T24098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5719'.
[  390.176555][T24098] gtp1: entered promiscuous mode
[  390.178255][T24098] gtp1: entered allmulticast mode
[  390.878347][ T5892] page_pool_release_retry() stalled pool shutdown: id 51, 3329 inflight 241 sec
[  391.357614][T24122] syz.2.5723 (24122) used greatest stack depth: 17368 bytes left
[  391.410675][T24155] validate_nla: 7 callbacks suppressed
[  391.410687][T24155] netlink: 'syz.1.5732': attribute type 29 has an invalid length.
[  391.418514][T24155] netlink: 'syz.1.5732': attribute type 29 has an invalid length.
[  391.514012][T24164] kthread_run failed with err -4
[  391.592285][T24186] net_ratelimit: 27 callbacks suppressed
[  391.592295][T24186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  391.686848][T24195] netlink: 'syz.0.5742': attribute type 2 has an invalid length.
[  392.497418][T24222] netlink: 'syz.2.5748': attribute type 2 has an invalid length.
[  392.946095][T24252] netlink: 'syz.1.5757': attribute type 2 has an invalid length.
[  393.021363][T24260] netlink: 'syz.2.5760': attribute type 1 has an invalid length.
[  393.176050][T24270] can: request_module (can-proto-3) failed.
[  393.261256][T24283] lo speed is unknown, defaulting to 1000
[  393.363201][T24290] netlink: 'syz.2.5768': attribute type 29 has an invalid length.
[  393.366263][T24290] netlink: 'syz.2.5768': attribute type 29 has an invalid length.
[  393.377353][T24283] lo speed is unknown, defaulting to 1000
[  393.935041][T24328] netlink: 'syz.2.5777': attribute type 14 has an invalid length.
[  394.007137][T24334] netlink: 'syz.1.5783': attribute type 2 has an invalid length.
[  394.342430][T24350] __nla_validate_parse: 15 callbacks suppressed
[  394.342443][T24350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5786'.
[  394.413639][T24355] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5788'.
[  394.985909][T24394] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5801'.
[  395.445432][T24464] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5809'.
[  395.523971][T24475] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5812'.
[  395.584516][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5814'.
[  395.678527][T24495] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5819'.
[  395.683213][T24491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5817'.
[  395.953420][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5823'.
[  396.450242][T24567] block nbd1: server does not support multiple connections per device.
[  396.454168][T24567] block nbd1: shutting down sockets
[  396.553833][T24586] validate_nla: 8 callbacks suppressed
[  396.553847][T24586] netlink: 'syz.2.5840': attribute type 2 has an invalid length.
[  396.599570][T24597] netlink: 'syz.2.5842': attribute type 2 has an invalid length.
[  396.809489][T24617] x_tables: duplicate underflow at hook 1
[  396.927524][T24623] netlink: 'syz.1.5850': attribute type 29 has an invalid length.
[  396.934155][T24623] netlink: 'syz.1.5850': attribute type 29 has an invalid length.
[  396.938013][T24623] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5850'.
[  397.103921][T24636] veth0_to_bridge: left allmulticast mode
[  397.105785][T24636] veth0_to_bridge: left promiscuous mode
[  397.108462][T24636] bridge0: port 1(veth0_to_bridge) entered disabled state
[  397.114409][T24636] tipc: Resetting bearer <eth:syzkaller0>
[  397.119200][T24636] netlink: 'syz.1.5854': attribute type 10 has an invalid length.
[  397.133388][T24636] bond0: (slave wlan1): Opening slave failed
[  397.357059][T24657] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  397.680931][T24670] netlink: 'syz.2.5866': attribute type 2 has an invalid length.
[  398.511879][T24698] SET target dimension over the limit!
[  398.581862][T24706] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  398.584745][T24706] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  398.637402][T24709] sctp: [Deprecated]: syz.0.5875 (pid 24709) Use of struct sctp_assoc_value in delayed_ack socket option.
[  398.637402][T24709] Use struct sctp_sack_info instead
[  398.777553][T24731] ipvlan2: entered promiscuous mode
[  398.972285][T24748] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  399.715150][T24750] netlink: 'syz.0.5890': attribute type 10 has an invalid length.
[  399.717594][T24750] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  399.789685][T24756] __nla_validate_parse: 9 callbacks suppressed
[  399.789696][T24756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5892'.
[  400.017998][T24781] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5900'.
[  400.023524][T24781] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5900'.
[  400.026990][T24781] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5900'.
[  400.062376][T24784] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5901'.
[  400.573257][T24787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5902'.
[  400.586744][T24787] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  400.622515][T24789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5903'.
[  400.653826][T24791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.829687][T24801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5909'.
[  401.039358][T24826] netlink: 'syz.2.5914': attribute type 2 has an invalid length.
[  401.043028][T24827] netlink: 'syz.1.5915': attribute type 1 has an invalid length.
[  401.139790][T24834] netlink: 'syz.1.5916': attribute type 1 has an invalid length.
[  401.144549][T24834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5916'.
[  401.280641][T24840] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5917'.
[  401.579661][T24867] geneve3: entered allmulticast mode
[  401.604307][T24871] validate_nla: 2 callbacks suppressed
[  401.604319][T24871] netlink: 'syz.0.5928': attribute type 2 has an invalid length.
[  401.604798][T24872] netlink: 'syz.0.5928': attribute type 2 has an invalid length.
[  401.724744][T24879] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  401.869896][T24891] netlink: 'syz.0.5933': attribute type 15 has an invalid length.
[  401.875852][T24890] delete_channel: no stack
[  402.026024][T24908] netlink: 'syz.1.5934': attribute type 1 has an invalid length.
[  402.166794][T24917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.534008][T24935] netlink: 'syz.0.5946': attribute type 23 has an invalid length.
[  402.758080][T24941] netlink: 'syz.2.5950': attribute type 1 has an invalid length.
[  402.901255][T24949] vti0: entered promiscuous mode
[  403.126367][T24967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.824170][T24997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.865364][T25002] netlink: 'syz.2.5965': attribute type 2 has an invalid length.
[  403.961344][T25013] bridge0: port 1(macvlan5) entered blocking state
[  403.963470][T25013] bridge0: port 1(macvlan5) entered disabled state
[  403.965577][T25013] macvlan5: entered allmulticast mode
[  403.967257][T25013] bridge0: entered allmulticast mode
[  403.972229][T25013] macvlan5: left allmulticast mode
[  403.973820][T25013] bridge0: left allmulticast mode
[  404.048621][T25018] netlink: 'syz.2.5971': attribute type 29 has an invalid length.
[  404.052531][T25018] netlink: 'syz.2.5971': attribute type 29 has an invalid length.
[  404.241200][T25031] netlink: 'syz.2.5977': attribute type 1 has an invalid length.
[  404.527192][T25036] gretap0: refused to change device tx_queue_len
[  404.529696][T25036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  404.534879][  T789] lo speed is unknown, defaulting to 1000
[  404.536913][  T789] syz1: Port: 1 Link ACTIVE
[  404.790288][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  404.801444][T25052] lo speed is unknown, defaulting to 1000
[  404.846235][T25055] syzkaller1: entered promiscuous mode
[  404.847986][T25055] syzkaller1: entered allmulticast mode
[  404.907781][T25052] lo speed is unknown, defaulting to 1000
[  405.136298][T25074] __nla_validate_parse: 17 callbacks suppressed
[  405.136312][T25074] netlink: 564 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.144366][T25074] netlink: 171 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.151942][T25074] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.154856][T25074] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.157665][T25074] netlink: 102 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.161074][T25074] netlink: 4728 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.163864][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'.
[  405.216809][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5989'.
[  405.372026][T25087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5990'.
[  405.405438][T25089] vlan0: entered promiscuous mode
[  405.407149][T25089] bond0: entered promiscuous mode
[  405.408853][T25089] bond_slave_0: entered promiscuous mode
[  405.411302][T25089] bond_slave_1: entered promiscuous mode
[  405.510947][T25093] syzkaller1: entered promiscuous mode
[  405.515204][T25093] syzkaller1: entered allmulticast mode
[  405.816192][T25109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5998'.
[  406.272658][T25154] nbd: must specify at least one socket
[  406.286123][T25156] netlink: 'syz.0.6012': attribute type 11 has an invalid length.
[  406.322578][T25165] openvswitch: netlink: Message has 4 unknown bytes.
[  406.659723][T25192] validate_nla: 8 callbacks suppressed
[  406.659739][T25192] netlink: 'syz.1.6022': attribute type 29 has an invalid length.
[  406.668029][T25192] netlink: 'syz.1.6022': attribute type 29 has an invalid length.
[  406.786349][T25205] netlink: 'syz.1.6027': attribute type 1 has an invalid length.
[  406.836691][T25205] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  406.855190][T25212] netlink: 'syz.0.6030': attribute type 29 has an invalid length.
[  406.871495][T25212] netlink: 'syz.0.6030': attribute type 29 has an invalid length.
[  407.026206][T25234] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  407.028958][T25234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.116732][T25246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.151531][T25249] netlink: 'syz.1.6042': attribute type 2 has an invalid length.
[  407.271228][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  407.545481][T25279] netlink: 'syz.0.6050': attribute type 29 has an invalid length.
[  407.550758][T25279] netlink: 'syz.0.6050': attribute type 29 has an invalid length.
[  407.763187][T25292] lo speed is unknown, defaulting to 1000
[  407.999602][T25292] lo speed is unknown, defaulting to 1000
[  408.160806][   T60] block nbd0: Possible stuck request ffff888022b80000: control (read@0,1024B). Runtime 330 seconds
[  408.164715][   T60] block nbd0: Possible stuck request ffff888022b80200: control (read@1024,1024B). Runtime 330 seconds
[  408.168471][   T60] block nbd0: Possible stuck request ffff888022b80400: control (read@2048,1024B). Runtime 330 seconds
[  408.172223][   T60] block nbd0: Possible stuck request ffff888022b80600: control (read@3072,1024B). Runtime 330 seconds
[  408.409665][T25335] netlink: 'syz.1.6067': attribute type 29 has an invalid length.
[  408.413926][T25335] netlink: 'syz.1.6067': attribute type 29 has an invalid length.
[  408.862863][T25301] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  409.540811][T25425] nft_compat: unsupported protocol 0
[  410.112228][T25453] macvtap1: entered promiscuous mode
[  410.113983][T25453] team0: entered promiscuous mode
[  410.115720][T25453] bridge6: entered promiscuous mode
[  410.118117][T25453] macvtap1: entered allmulticast mode
[  410.119890][T25453] team0: entered allmulticast mode
[  410.121854][T25453] bridge6: entered allmulticast mode
[  410.124478][T25453] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  410.134319][T25453] team0: left allmulticast mode
[  410.135887][T25453] bridge6: left allmulticast mode
[  410.137757][T25453] team0: left promiscuous mode
[  410.139504][T25453] bridge6: left promiscuous mode
[  410.293214][T25462] __nla_validate_parse: 29 callbacks suppressed
[  410.293226][T25462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6107'.
[  410.331836][T25465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.377852][T25468] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6109'.
[  410.630868][T25483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6114'.
[  410.689470][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6116'.
[  411.283724][T25542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6125'.
[  411.325374][T25549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.044985][T25594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  412.183815][T25606] validate_nla: 8 callbacks suppressed
[  412.183827][T25606] netlink: 'syz.0.6147': attribute type 2 has an invalid length.
[  412.188079][T25606] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6147'.
[  412.225736][T25609] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6148'.
[  412.329252][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'.
[  412.332774][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'.
[  412.335551][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6150'.
[  412.404386][T25621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  412.407413][T25621] syzkaller0: entered promiscuous mode
[  412.409161][T25621] syzkaller0: entered allmulticast mode
[  412.415430][T25621] tipc: Resetting bearer <eth:syzkaller0>
[  412.419367][T25620] tipc: Resetting bearer <eth:syzkaller0>
[  412.432590][T25620] tipc: Disabling bearer <eth:syzkaller0>
[  413.709028][T25635] netlink: 'syz.1.6156': attribute type 4 has an invalid length.
[  413.723400][T25635] netlink: 'syz.1.6156': attribute type 4 has an invalid length.
[  413.732920][   T61] lo speed is unknown, defaulting to 1000
[  413.734837][T23279] lo speed is unknown, defaulting to 1000
[  413.834111][T25648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.364151][T25674] netlink: 'syz.2.6172': attribute type 2 has an invalid length.
[  414.482765][T25690] netlink: 'syz.1.6177': attribute type 2 has an invalid length.
[  414.485146][T25686] syzkaller0: entered promiscuous mode
[  414.486918][T25686] syzkaller0: entered allmulticast mode
[  414.518248][T25688] sit0: left promiscuous mode
[  414.524948][T25688] batadv_slave_0: left promiscuous mode
[  414.526718][T25688] batadv_slave_0: left allmulticast mode
[  414.529300][T25688] : left promiscuous mode
[  414.540328][T25688] : left allmulticast mode
[  414.542069][T25688] veth0_vlan: left allmulticast mode
[  414.544851][T25688] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  414.548126][T25688] xfrm1: left promiscuous mode
[  414.549655][T25688] xfrm1: left allmulticast mode
[  414.553443][T25688] geneve2: left promiscuous mode
[  414.555021][T25688] geneve2: left allmulticast mode
[  414.557082][T25688] sit1: left promiscuous mode
[  414.558501][T25688] sit1: left allmulticast mode
[  414.567465][T25688] ipvlan2: left promiscuous mode
[  414.572731][T25688] vlan0: left promiscuous mode
[  414.574208][T25688] bond0: left promiscuous mode
[  414.575677][T25688] bond_slave_0: left promiscuous mode
[  414.577402][T25688] bond_slave_1: left promiscuous mode
[  414.698274][T25697] netlink: 'syz.0.6178': attribute type 3 has an invalid length.
[  414.701585][T25697] netlink: 'syz.0.6178': attribute type 6 has an invalid length.
[  415.697695][T25704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.762968][T25708] netlink: 'syz.2.6180': attribute type 1 has an invalid length.
[  415.765592][T25708] __nla_validate_parse: 3 callbacks suppressed
[  415.765600][T25708] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6180'.
[  415.771369][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6180'.
[  416.089124][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'.
[  416.121439][T25741] netlink: 'syz.2.6193': attribute type 29 has an invalid length.
[  416.126412][T25741] netlink: 'syz.2.6193': attribute type 29 has an invalid length.
[  416.129869][T25741] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6193'.
[  416.175038][T25746] x_tables: duplicate underflow at hook 3
[  416.256784][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6199'.
[  416.358022][T25763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6200'.
[  416.473205][   T34] INFO: task udevd:6188 blocked for more than 143 seconds.
[  416.481494][   T34]       Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0
[  416.485204][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  416.492003][   T34] task:udevd           state:D stack:21928 pid:6188  tgid:6188  ppid:5280   task_flags:0x400140 flags:0x00004006
[  416.498834][   T34] Call Trace:
[  416.500457][   T34]  <TASK>
[  416.501603][   T34]  __schedule+0x16f5/0x4d00
[  416.503294][   T34]  ? schedule+0x165/0x360
[  416.504873][   T34]  ? __pfx___schedule+0x10/0x10
[  416.505060][T25784] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6205'.
[  416.506497][   T34]  ? schedule+0x91/0x360
[  416.511841][   T34]  schedule+0x165/0x360
[  416.513232][   T34]  io_schedule+0x80/0xd0
[  416.514643][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  416.516335][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  416.518190][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  416.520001][   T34]  ? __filemap_get_folio+0x6c0/0xaf0
[  416.522158][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  416.523893][   T34]  do_read_cache_folio+0x1aa/0x590
[  416.525577][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  416.527333][   T34]  read_part_sector+0xb6/0x2b0
[  416.528911][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  416.531694][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  416.533519][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  416.535458][   T34]  bdev_disk_changed+0x75f/0x14b0
[  416.537044][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  416.538814][   T34]  ? wait_on_inode+0xc0/0x230
[  416.540779][   T34]  blkdev_get_whole+0x380/0x510
[  416.542349][   T34]  bdev_open+0x31e/0xd30
[  416.543748][   T34]  blkdev_open+0x3a8/0x510
[  416.545173][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  416.546755][   T34]  do_dentry_open+0xdf3/0x1970
[  416.548248][   T34]  vfs_open+0x3b/0x340
[  416.549571][   T34]  ? path_openat+0x2ecd/0x3830
[  416.552226][   T34]  path_openat+0x2ee5/0x3830
[  416.553759][   T34]  ? arch_stack_walk+0xfc/0x150
[  416.555369][   T34]  ? __pfx_path_openat+0x10/0x10
[  416.557009][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.558994][   T34]  do_filp_open+0x1fa/0x410
[  416.561065][   T34]  ? __lock_acquire+0xab9/0xd20
[  416.563049][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  416.565119][   T34]  ? _raw_spin_unlock+0x28/0x50
[  416.567110][   T34]  ? alloc_fd+0x64c/0x6c0
[  416.568887][   T34]  do_sys_openat2+0x121/0x1c0
[  416.571913][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  416.574117][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  416.576227][   T34]  ? rcu_is_watching+0x15/0xb0
[  416.578193][   T34]  __x64_sys_openat+0x138/0x170
[  416.580823][   T34]  do_syscall_64+0xfa/0x3b0
[  416.582733][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.585123][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  416.587562][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.589889][   T34] RIP: 0033:0x7f1d69d979a4
[  416.593352][   T34] RSP: 002b:00007fff3c1488b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  416.596799][   T34] RAX: ffffffffffffffda RBX: 0000561b648bf5f0 RCX: 00007f1d69d979a4
[  416.599356][   T34] RDX: 00000000000a0800 RSI: 0000561b6489d710 RDI: 00000000ffffff9c
[  416.602187][   T34] RBP: 0000561b6489d710 R08: 0000000000000001 R09: 7fffffffffffffff
[  416.604663][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  416.607151][   T34] R13: 0000561b6489aa60 R14: 0000000000000001 R15: 0000561b64889910
[  416.609677][   T34]  </TASK>
[  416.611779][   T34] 
[  416.611779][   T34] Showing all locks held in the system:
[  416.615171][   T34] 1 lock held by khungtaskd/34:
[  416.616673][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  416.619695][   T34] 3 locks held by kworker/0:2/968:
[  416.623289][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  416.626658][   T34]  #1: ffffc900067efbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  416.631407][   T34]  #2: ffff88810c36a240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  416.634407][   T34] 2 locks held by getty/5658:
[  416.635803][   T34]  #0: ffff88810eb790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  416.638676][   T34]  #1: ffffc900029232f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  416.642180][   T34] 1 lock held by syz-executor/5828:
[  416.643796][   T34] 1 lock held by udevd/6188:
[  416.645169][   T34]  #0: ffff888106dbe358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  416.647950][   T34] 
[  416.648692][   T34] =============================================
[  416.648692][   T34] 
[  416.651883][   T34] NMI backtrace for cpu 1
[  416.651891][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  416.651901][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.651906][   T34] Call Trace:
[  416.651909][   T34]  <TASK>
[  416.651913][   T34]  dump_stack_lvl+0x189/0x250
[  416.651925][   T34]  ? __wake_up_klogd+0xd9/0x110
[  416.651938][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.651947][   T34]  ? __pfx__printk+0x10/0x10
[  416.651962][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  416.651976][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  416.651986][   T34]  ? _printk+0xcf/0x120
[  416.651997][   T34]  ? __pfx__printk+0x10/0x10
[  416.652007][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  416.652017][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  416.652029][   T34]  watchdog+0xfee/0x1030
[  416.652038][   T34]  ? watchdog+0x1de/0x1030
[  416.652048][   T34]  kthread+0x711/0x8a0
[  416.652061][   T34]  ? __pfx_watchdog+0x10/0x10
[  416.652067][   T34]  ? __pfx_kthread+0x10/0x10
[  416.652078][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.652090][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.652098][   T34]  ? __pfx_kthread+0x10/0x10
[  416.652108][   T34]  ret_from_fork+0x3fc/0x770
[  416.652119][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  416.652129][   T34]  ? __switch_to_asm+0x39/0x70
[  416.652138][   T34]  ? __switch_to_asm+0x33/0x70
[  416.652147][   T34]  ? __pfx_kthread+0x10/0x10
[  416.652157][   T34]  ret_from_fork_asm+0x1a/0x30
[  416.652173][   T34]  </TASK>
[  416.652176][   T34] Sending NMI from CPU 1 to CPUs 0:
[  416.700912][    C0] NMI backtrace for cpu 0
[  416.700930][    C0] CPU: 0 UID: 0 PID: 1086 Comm: kworker/u9:4 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  416.700946][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.700956][    C0] Workqueue: events_unbound toggle_allocation_gate
[  416.700981][    C0] RIP: 0010:do_raw_spin_unlock+0x5/0x240
[  416.701000][    C0] Code: 03 38 c1 0f 8c 6a ff ff ff e8 a7 57 83 00 e9 60 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df
[  416.701012][    C0] RSP: 0018:ffffc90006f776c0 EFLAGS: 00000282
[  416.701022][    C0] RAX: 7a19044ecbaf1900 RBX: ffff88801a475060 RCX: 7a19044ecbaf1900
[  416.701031][    C0] RDX: 0000000000000006 RSI: ffffffff8db83abb RDI: ffff88801a475060
[  416.701040][    C0] RBP: ffffc90006f77830 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade
[  416.701049][    C0] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: dffffc0000000000
[  416.701058][    C0] R13: ffff88801a476558 R14: 0000000000000200 R15: ffffffff82176182
[  416.701068][    C0] FS:  0000000000000000(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[  416.701078][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  416.701087][    C0] CR2: 00007f86d09802d8 CR3: 000000000df38000 CR4: 00000000000006f0
[  416.701120][    C0] Call Trace:
[  416.701127][    C0]  <TASK>
[  416.701134][    C0]  _raw_spin_unlock+0x1e/0x50
[  416.701153][    C0]  __text_poke+0x7b1/0xa10
[  416.701174][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[  416.701191][    C0]  ? __kmalloc_noprof+0xe2/0x4f0
[  416.701208][    C0]  ? __pfx___text_poke+0x10/0x10
[  416.701236][    C0]  ? rcu_is_watching+0x15/0xb0
[  416.701250][    C0]  ? trace_contention_end+0x39/0x120
[  416.701273][    C0]  smp_text_poke_batch_finish+0xd0a/0x1100
[  416.701292][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  416.701309][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  416.701368][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  416.701387][    C0]  static_key_disable_cpuslocked+0xc5/0x1b0
[  416.701436][    C0]  static_key_disable+0x1a/0x20
[  416.701454][    C0]  toggle_allocation_gate+0x1a1/0x240
[  416.701473][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  416.701490][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  416.701517][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  416.701532][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  416.701545][    C0]  process_scheduled_works+0xae1/0x17b0
[  416.701569][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  416.701587][    C0]  worker_thread+0x8a0/0xda0
[  416.701612][    C0]  kthread+0x711/0x8a0
[  416.701630][    C0]  ? __pfx_worker_thread+0x10/0x10
[  416.701643][    C0]  ? __pfx_kthread+0x10/0x10
[  416.701661][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.701680][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.701693][    C0]  ? __pfx_kthread+0x10/0x10
[  416.701709][    C0]  ret_from_fork+0x3fc/0x770
[  416.701724][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  416.701738][    C0]  ? __switch_to_asm+0x39/0x70
[  416.701755][    C0]  ? __switch_to_asm+0x33/0x70
[  416.701769][    C0]  ? __pfx_kthread+0x10/0x10
[  416.701784][    C0]  ret_from_fork_asm+0x1a/0x30
[  416.701806][    C0]  </TASK>
[  416.701894][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  416.797516][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  416.801102][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.804164][   T34] Call Trace:
[  416.805189][   T34]  <TASK>
[  416.806090][   T34]  dump_stack_lvl+0x99/0x250
[  416.807515][   T34]  ? __asan_memcpy+0x40/0x70
[  416.808943][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.810563][   T34]  ? __pfx__printk+0x10/0x10
[  416.812000][   T34]  panic+0x2db/0x790
[  416.813221][   T34]  ? __pfx_panic+0x10/0x10
[  416.814601][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  416.816422][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  416.818070][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  416.819960][   T34]  watchdog+0x102d/0x1030
[  416.821294][   T34]  ? watchdog+0x1de/0x1030
[  416.822692][   T34]  kthread+0x711/0x8a0
[  416.823957][   T34]  ? __pfx_watchdog+0x10/0x10
[  416.825417][   T34]  ? __pfx_kthread+0x10/0x10
[  416.826788][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  416.828427][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.830037][   T34]  ? __pfx_kthread+0x10/0x10
[  416.831488][   T34]  ret_from_fork+0x3fc/0x770
[  416.832916][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  416.834502][   T34]  ? __switch_to_asm+0x39/0x70
[  416.835976][   T34]  ? __switch_to_asm+0x33/0x70
[  416.837459][   T34]  ? __pfx_kthread+0x10/0x10
[  416.838874][   T34]  ret_from_fork_asm+0x1a/0x30
[  416.840356][   T34]  </TASK>
[  416.841904][   T34] Kernel Offset: disabled
[  416.843250][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:07:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822d5a01 RBX=000000000012120c RCX=ffffffff822d5a5c RDX=0000000000000001
RSI=0000000000000004 RDI=ffff88810205a40c RBP=ffff88810205a3c0 RSP=ffffc9000870f590
R8 =ffff88810205a40f R9 =1ffff1102040b481 R10=dffffc0000000000 R11=ffffed102040b482
R12=0000000000000000 R13=0000000000000001 R14=0000000000000003 R15=ffff88810205a408
RIP=ffffffff822d5a68 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555fc60500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c24d7cc CR3=00000001093dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3bd6c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000000004
RSI=0000000000000004 RDI=ffff888105b45640 RBP=0000000000000000 RSP=ffffc900038f7200
R8 =0000000000000000 R9 =ffffffff822d71ea R10=dffffc0000000000 R11=fffff94000902371
R12=0000000000000004 R13=0000000000000001 R14=ffff888105b46248 R15=ffff888105b461c8
RIP=ffffffff819e441c RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558f7c6500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86d14e56c0 CR3=00000001093d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=97490c42fb11018c 67506e69fc6ced0a
XMM02=b687df530a028818 9a8d6c6544cb7dd2 XMM03=14ac431a14440000 049401018174d5fe
XMM04=1044060000001714 14ac03000000bb14 XMM05=0000000000760000 0002000000060000
XMM06=00a0ac1044060000 00171414ac030000 XMM07=00bb1414ac431a14 4400000494010181
XMM08=74d5feb687df530a 0288189a8d6c6544 XMM09=0000000000000000 00007f3bd6c11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
