last executing test programs:

793.312274ms ago: executing program 1 (id=1242):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000040)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6, 0x3, 0x80, 0xfffffc}]}, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff0000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000200"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0xe, 0x0, &(0x7f0000000180)="e4e647c9d9b8e9a2f2ab30da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x40010)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x20000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYBLOB="59be5b0712a2ad1cdcd9fee5935170cadf80a397e5073ba97cb377bc307888d206977c94d355c073cfa4594570687ce484031156809a34626a735da12b41d4eb644f5396d441a9c7dd82dcfa6a20da4863186d834bcd1ae3f7f551fab20b13314e65c896225de7b5c4c8c0d38c1de0ced8721a7d317168ecdbe68229075d9f4fc55f9c948d900a01853642f326c0bba2c5d3b2a58cc36999869bbbb691bc585852c435599658ab1dc470f07f4a7f2414ccc48af28f8bf821337748313c3635149b9b3d625398b3817ffae6b3c9243defe8f7ca41eeb92228d165ecd805", @ANYRES32=r11, @ANYRES64=r3, @ANYRESDEC, @ANYRES8=0x0, @ANYRES32=0x0], 0xa0}, 0x1, 0x0, 0x0, 0x40008a0}, 0x40)
syz_emit_ethernet(0xffffffcb, &(0x7f0000000880)={@broadcast, @empty, @void, {@generic={0x88f7, "b016e0780184807217042b88c7630fc9b28cb2780a4f8fe756e10c4c316967ba18fee33dff9480b13fccf8c1c3a0e8d175cca0bd99d9ac041b1d6e25326bfc3f482e6f776ed92b54ecbc7045874bc31e9a3561d6fee0ead72896c7a9096746fc47989cb62df48d1115ae6cb693bdff3fb76be994390e7f5503c453f83f05c455aae0aa91dbfad91689ca03788bf4f6529ada52967d9407d6768615c216372bf4ec7cd41d64fc8cd0f2f554ca378e7662238077f5cff16b5ac52d2d3e9dbed1c73165e752c64d12f86e0ee7f04c7ef046aae1c5c3f6aa375b06377a6fda755a24b782b0da36edfe58"}}}, 0x0)

741.212327ms ago: executing program 1 (id=1243):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00001f00000000d641000018110000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xff0, &(0x7f0000000cc0)=""/4080, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
r3 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000340))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8)
setsockopt(0xffffffffffffffff, 0xeffffff7, 0x30b9, &(0x7f0000000080)="1a000000020000caf57c5c7727eaafcfd1000000000000", 0x17)
sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="e973d93ae685e03ed7fadf0ce3cf27609f5a2d17c50890faf673292cd620d868c2208f57c361f7c7ec8a6c0674ccd113a5b7e9a5ad64539e420be5ef0fd6c55ce00bc6389b946b00d8a50000000000000000000000bb46246fc27f15e34cb64dddcee95adbba49335708dbc37723171e94cdee47b348d65917238ed80e167a658ad4e574a1c4a3e2321eeeaa9d2a663b386601142418052d645687b3518385f8", @ANYRES16=r9, @ANYBLOB="030c29bd7000fbdbdf252e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x800008}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64110100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@multicast2, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

522.939259ms ago: executing program 2 (id=1247):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x11, 0x8, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x1085)

522.365803ms ago: executing program 0 (id=1248):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x8}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f000000b8c0)=@get={0x1, 0x0, 0x8000000000000001})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

520.88153ms ago: executing program 2 (id=1249):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e30080670027ec67838717bd86dd", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e30080670027ec67838717bd86dd", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

423.476474ms ago: executing program 2 (id=1250):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4, 0x7, 0x9, 0x26, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x3, 0x96}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @remote}}, @sadb_sa={0x2, 0x1, 0x4d5, 0xcf, 0x8, 0x6b, 0x3, 0x80000001}, @sadb_lifetime={0x4, 0x2, 0x2, 0x7, 0x3, 0x10000}, @sadb_address={0x3, 0x5, 0x33, 0x40, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x6, 0x14, 0x8}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast1, 0xb3}, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0x8}}, @sadb_ident={0x2, 0xb, 0x7fff, 0x0, 0x100000001}, @sadb_key={0x2, 0x9, 0x38, 0x0, "a4ef380180d0c1"}, @sadb_x_sec_ctx={0x3, 0x18, 0x5, 0x6, 0xa, "9b026eba32d4f91139c4"}]}, 0x130}}, 0x60404)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x3, 0x7bd, 0x2, 0x8, 0x5]}, &(0x7f0000000240)=0x78)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000280)={{0x2, 0x4e22, @multicast1}, {0x1}, 0x68, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, 'veth1_to_bond\x00'})
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e)
setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000380)={0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'sed\x00', 0x7c, 0x6, 0x7f}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80003}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20800)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000500)={{r1}, 0xffffffffffffffff, 0xfff, 0x9})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x2, 0x6, 0x202, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000640), 0xfffffffffffffffe)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000680)={<r5=>r1, 0x0, 0x1000, 0x5})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x7, <r6=>0x0}, 0x8)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x8, 0x10}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a, 0x2, 0x3, 0x3, 0x8044, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @value=r1}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x5, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000700)='syzkaller\x00', 0x9, 0x10, &(0x7f0000000740)=""/16, 0x41100, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xf, 0x80000001, 0x76f}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r7, r8, 0x1, r9], 0x0, 0x10, 0x8}, 0x94)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r5)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x2e7d9cad18ca84df}, 0x800)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000c40)={0x4, 0x4, {0x2, @struct={0x7f, 0x2}, 0x0, 0x10000, 0x1000, 0x7, 0x80000000, 0x5, 0x40, @usage=0x3, 0x8, 0xc, [0x3eb80c75, 0x0, 0x8, 0x3, 0x8, 0x6383]}, {0x7fffffffffffffff, @usage, <r12=>0x0, 0xff, 0x7, 0x7, 0xd, 0x9, 0x27, @struct={0xd12e, 0xef04}, 0x1ff, 0x2, [0x40, 0xa1, 0x100000001, 0x386, 0x7, 0x8]}, {0x2, @usage=0x1, 0x0, 0x0, 0xa1b, 0x1, 0x2, 0x5, 0x882, @struct={0x1, 0x9}, 0x7d3, 0x1, [0x6, 0x45, 0x7, 0x3, 0x80, 0x7]}, {0x100000000, 0x8, 0x7}})
ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000001040)={r12, 0x9, 0x2, 0x1})
r13 = openat$cgroup_ro(r5, &(0x7f0000001440)='cpu.stat\x00', 0x0, 0x0)
write$cgroup_subtree(r13, &(0x7f0000001480)={[{0x0, 'cpu'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'net_cls'}, {0x2d, 'net_cls'}]}, 0x26)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r3)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xb0, r14, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x24db}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0xc080)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000001680)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'none\x00', 0x2, 0x7, 0x49}, {@local, 0x4e23, 0x2, 0x7, 0x2, 0x7}}, 0x44)
sendmsg$FOU_CMD_DEL(r13, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x40, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)

422.710201ms ago: executing program 0 (id=1251):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1}, 0x20040051)

364.049502ms ago: executing program 0 (id=1252):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x500, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) (async)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm'], 0x3d) (async)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090011000000eb54090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000080000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r6, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @default, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
ppoll(&(0x7f0000000100)=[{r3}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async)
r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async)
connect$llc(r8, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000100000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000e080002400000000208000340000000050900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

363.200733ms ago: executing program 2 (id=1253):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r3, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x4, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0x45, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4f20, 0x4e22, 0x31, 0x0, @wg=@data={0x4, 0x1, 0x3c, "85fcdde5f46853a2da2210c818bab23450c6f22f25cce55223"}}}}, 0x53)

293.64464ms ago: executing program 1 (id=1254):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='h'], 0x68}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000000206010800000000000000000700000014000780080011400000008b0500150005000010050001000600000005000500020000000c000300686173683a6970000900080073797a300000000014000300686173683a69702c706f72742c6970009df931212c8bfa50c14c1caf5f602504d7fff110ab6365c34584996f28b433b8fe72ea73984ae6970482ac49a6f90b83208ef085a62565c65bff20a33e2e16162413c90b82c84917e8fe051f5af151514e482611b6bfb1bf634bbc"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = epoll_create1(0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket$unix(0x1, 0x1, 0x0)
close(r4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000200)=""/91, 0x1004000, 0x0, 0x10000000, 0x2}, 0x4b)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bind$xdp(r5, &(0x7f00000002c0)={0x2c, 0x0, r7}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x2000000a})
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2211000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x20, 0x1404, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000895}, 0x4)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x1, 0x62, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x845, &(0x7f00000001c0)={0xa, 0x4e23, 0x10005, @loopback, 0x1}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)

292.892246ms ago: executing program 0 (id=1255):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) (async)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async)
r1 = socket(0x26, 0x5, 0x4)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x2, &(0x7f00000000c0)=0x2) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa1}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r4 = socket$kcm(0x2a, 0x2, 0x0) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x1a4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0xf8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "6b13563a3d5f9138dd2e6ce63a467a59698c6ecafcd635135a358254d7b470d07d908c696fd3b04d6414532f2385a64c43ba0c74db19a4efad928c83296a1954bc6841882626c7224d2bbfd671269938a615630c18f1c3ee2e03bf8c3293114738a91724e04181e8930a3f441c7552737a01748f6ca9a18bc2ddba2232beba2af80f9e70642b259ee488c28a1198084e55abf6490269d82c695dba1a24a6a35f087907"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "561c38cbf57506c51f832b323e890bcb630f54caa40e24df3fb80c"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$inet6(0xa, 0x3, 0x3a) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48e000004a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=0x0, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r9=>0x0}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000001fc0)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f042bbd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3801028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400060002003000000008004ff80f00000007000406fdffffff0700e204a0000000faff08fbffffff7f6958090205000000000040047f0d000007000c03a0000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000004000500030003000000080004000000010008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=0x0, @ANYBLOB="dc01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000006000400070000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040000046b850100000002002d040600000008000100", @ANYRES32=0x0, @ANYBLOB="2401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000080000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400de09000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c0000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400370000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040008000104018000000900dc03ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="adfe028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040003000680070000000600030d070000000600010d0f000000806f80097f3b000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040005000000"], 0x834}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
getsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) (async)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0}) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040080)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r11, 0x331, 0x2000, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004142}, 0x8044)
sendmsg(r0, &(0x7f0000000340)={&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010102}}, 0x80, 0x0}, 0x40000) (async)
sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)

212.131553ms ago: executing program 2 (id=1256):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080), 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x2d, 0x0, &(0x7f00000000c0)) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000040)={0x1d, r4}, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea725000000"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

211.908003ms ago: executing program 0 (id=1257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a7260180", @ANYRES32], 0x26c0}}, 0x4010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0)

207.467186ms ago: executing program 1 (id=1258):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev}}, [@policy_type={0xa, 0x10, {0x3}}]}, 0x5c}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (rerun: 32)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv6_deladdr={0x5c, 0x15, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x46, 0x2}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
write(r0, &(0x7f00000002c0)="03feba85", 0x4)

122.261145ms ago: executing program 0 (id=1259):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2})
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000b0000000203000000004000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x10c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xf}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x10c}], 0x1}, 0x10)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

119.703712ms ago: executing program 1 (id=1260):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
clock_gettime(0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000008c0)={0x1, 0x5, 0xfffe, 0x9, 0x40000004, 0x10000006, 0x8000000000000000, 0x7d}, &(0x7f00000001c0)={0x6, 0x6, 0x7, 0xa23d, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7, 0xbb0}, 0x0, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000940)={&(0x7f0000000980)={[0x3ff]}, 0x8})
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="01070000", @ANYRES16=r6, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}}, 0x4044890)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000008003300fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
clock_gettime(0x0, &(0x7f0000000340)) (async)
pselect6(0x40, &(0x7f00000008c0)={0x1, 0x5, 0xfffe, 0x9, 0x40000004, 0x10000006, 0x8000000000000000, 0x7d}, &(0x7f00000001c0)={0x6, 0x6, 0x7, 0xa23d, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7, 0xbb0}, 0x0, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000940)={&(0x7f0000000980)={[0x3ff]}, 0x8}) (async)
socket$kcm(0xa, 0x922000000003, 0x11) (async)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="01070000", @ANYRES16=r6, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e64000000"], 0x2c}}, 0x4044890) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000008003300fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) (async)

1.136108ms ago: executing program 2 (id=1261):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x28}, 0x18) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'vlan0\x00', <r2=>0x0}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket(0x1, 0x803, 0x0) (rerun: 32)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe}]}]}}, &(0x7f0000001c80)=""/4111, 0x30, 0xfc95, 0x1, 0xffff, 0x10000}, 0x28) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1}, 0x4)
pipe(&(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x369, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7}, 0x50) (async, rerun: 64)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) (rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r8, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@bloom_filter={0x1e, 0xfffffffe, 0x3, 0x8001, 0x7840d, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xf}, 0x50) (rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001900)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001b00)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000001010400000000000000000000000034001880080002400000000808000340000000000800034000000004080003400001000108000340000000020800034000000000793b979a852d0ec687f7755c565b9de6aeab61b9b8341059c787e2258197d1970a79fc2fcb8e7134848acc737c9b550b8cd7da7957a2193271b27c244f5546099c1d3d6359ba53a3f8222eac031902b207c17b05d90493cd22c186dd506965f91479605316a13af65da0313b132cdf7480bef213656808669292d5a5358ced58224d9cf543170f4557cec833540cf80c941e27a30e884dd0dc1affb0ae9a15aaff533fc857fd0721"], 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000)

0s ago: executing program 1 (id=1262):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x10, 0x8, 0x25dfdbfb, {{0x3e, 0x0, 0x8d}, {@void, @val={0xc, 0x99, {0x1}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0x1085)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23739' (ED25519) to the list of known hosts.
syzkaller login: [   49.424958][ T5781] cgroup: Unknown subsys name 'net'
[   49.555054][ T5781] cgroup: Unknown subsys name 'cpuset'
[   49.573675][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.869944][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.898486][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.901970][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.902170][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.907101][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.908260][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.912639][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.912788][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.915644][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.920500][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.923106][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.931114][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.935836][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.948593][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.956142][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.965736][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.183473][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   57.410605][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.414007][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.416376][ T5860] bridge_slave_0: entered allmulticast mode
[   57.420997][ T5860] bridge_slave_0: entered promiscuous mode
[   57.430352][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   57.435317][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.438500][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.440773][ T5860] bridge_slave_1: entered allmulticast mode
[   57.443467][ T5860] bridge_slave_1: entered promiscuous mode
[   57.447464][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   57.506405][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.544058][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.630412][ T5860] team0: Port device team_slave_0 added
[   57.663081][ T5860] team0: Port device team_slave_1 added
[   57.665423][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.668082][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.670619][ T5851] bridge_slave_0: entered allmulticast mode
[   57.673688][ T5851] bridge_slave_0: entered promiscuous mode
[   57.676786][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.679841][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.682091][ T5853] bridge_slave_0: entered allmulticast mode
[   57.684741][ T5853] bridge_slave_0: entered promiscuous mode
[   57.688516][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.691095][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.693871][ T5853] bridge_slave_1: entered allmulticast mode
[   57.698057][ T5853] bridge_slave_1: entered promiscuous mode
[   57.731409][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.734132][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.737089][ T5851] bridge_slave_1: entered allmulticast mode
[   57.742286][ T5851] bridge_slave_1: entered promiscuous mode
[   57.786108][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.790669][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.800999][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.828098][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.831098][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.840760][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.847979][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.853511][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.867107][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.883398][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.930467][ T5851] team0: Port device team_slave_0 added
[   57.946982][ T5853] team0: Port device team_slave_0 added
[   57.952042][ T5853] team0: Port device team_slave_1 added
[   57.965960][ T5851] team0: Port device team_slave_1 added
[   57.985351][ T5860] hsr_slave_0: entered promiscuous mode
[   57.991055][ T5860] hsr_slave_1: entered promiscuous mode
[   58.005369][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.008412][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.019185][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.032547][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.034743][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.043307][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.053355][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.055697][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.065860][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.071756][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.073990][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.083040][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.136104][ T5853] hsr_slave_0: entered promiscuous mode
[   58.139870][ T5853] hsr_slave_1: entered promiscuous mode
[   58.142500][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   58.144529][ T5853] Cannot create hsr debugfs directory
[   58.214938][ T5851] hsr_slave_0: entered promiscuous mode
[   58.217624][ T5851] hsr_slave_1: entered promiscuous mode
[   58.219917][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   58.221962][ T5851] Cannot create hsr debugfs directory
[   58.481637][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.496637][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.505575][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.524553][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.572930][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.582254][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.596060][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.602462][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.686390][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.703876][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.720594][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.733067][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.819997][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.836785][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.869124][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   58.876108][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   58.890898][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.893987][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.908386][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.911084][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.929173][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.932077][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.937021][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.939968][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.001858][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.009292][ T5854] Bluetooth: hci2: command tx timeout
[   59.009298][   T54] Bluetooth: hci0: command tx timeout
[   59.011812][ T5854] Bluetooth: hci1: command tx timeout
[   59.056280][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   59.083379][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.085692][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.100699][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.103002][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.191496][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.232876][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.300413][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.311591][ T5860] veth0_vlan: entered promiscuous mode
[   59.333190][ T5853] veth0_vlan: entered promiscuous mode
[   59.341634][ T5860] veth1_vlan: entered promiscuous mode
[   59.356995][ T5853] veth1_vlan: entered promiscuous mode
[   59.392287][ T5851] veth0_vlan: entered promiscuous mode
[   59.406117][ T5851] veth1_vlan: entered promiscuous mode
[   59.416580][ T5860] veth0_macvtap: entered promiscuous mode
[   59.430502][ T5860] veth1_macvtap: entered promiscuous mode
[   59.437142][ T5853] veth0_macvtap: entered promiscuous mode
[   59.444159][ T5853] veth1_macvtap: entered promiscuous mode
[   59.470292][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.485566][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.491481][ T5851] veth0_macvtap: entered promiscuous mode
[   59.498310][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.515483][ T5851] veth1_macvtap: entered promiscuous mode
[   59.519135][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.522321][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.528837][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.536994][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.541585][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.562537][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.581002][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.592213][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.603492][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.613740][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.647939][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.663577][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.673377][ T5920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.684838][ T5920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.690141][ T5920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.733202][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.746938][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.754636][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.758322][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.822543][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.829729][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.870967][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.874090][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.922240][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.925237][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.933312][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.031906][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.034976][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.469038][ T5948] syz.1.9: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.474807][ T5948] CPU: 1 UID: 0 PID: 5948 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) 
[   60.474835][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.474847][ T5948] Call Trace:
[   60.474852][ T5948]  <TASK>
[   60.474858][ T5948]  dump_stack_lvl+0x189/0x250
[   60.474877][ T5948]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.474887][ T5948]  ? __pfx__printk+0x10/0x10
[   60.474899][ T5948]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.474911][ T5948]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.474921][ T5948]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.474931][ T5948]  warn_alloc+0x214/0x310
[   60.474949][ T5948]  ? __pfx_warn_alloc+0x10/0x10
[   60.474965][ T5948]  ? __get_vm_area_node+0x28f/0x300
[   60.474977][ T5948]  ? xskq_create+0xbf/0x170
[   60.474988][ T5948]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   60.475013][ T5948]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.475025][ T5948]  ? xskq_create+0x56/0x170
[   60.475034][ T5948]  ? __kasan_kmalloc+0x93/0xb0
[   60.475047][ T5948]  vmalloc_user_noprof+0xad/0xf0
[   60.475059][ T5948]  ? xskq_create+0xbf/0x170
[   60.475067][ T5948]  xskq_create+0xbf/0x170
[   60.475077][ T5948]  xsk_init_queue+0xb0/0x110
[   60.475086][ T5948]  xsk_setsockopt+0x57b/0x8d0
[   60.475100][ T5948]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.475112][ T5948]  ? __pfx_aa_sk_perm+0x10/0x10
[   60.475127][ T5948]  ? __fget_files+0x2a/0x420
[   60.475134][ T5948]  ? aa_sock_opt_perm+0xff/0x1b0
[   60.475143][ T5948]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.475153][ T5948]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.475166][ T5948]  do_sock_setsockopt+0x17c/0x1b0
[   60.475180][ T5948]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.475192][ T5948]  do_syscall_64+0xfa/0x3b0
[   60.475203][ T5948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.475210][ T5948]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   60.475221][ T5948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.475229][ T5948] RIP: 0033:0x7f0b1df8ec29
[   60.475240][ T5948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.475247][ T5948] RSP: 002b:00007f0b1ee18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.475257][ T5948] RAX: ffffffffffffffda RBX: 00007f0b1e1d5fa0 RCX: 00007f0b1df8ec29
[   60.475263][ T5948] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[   60.475268][ T5948] RBP: 00007f0b1e011e41 R08: 0000000000000004 R09: 0000000000000000
[   60.475273][ T5948] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   60.475278][ T5948] R13: 00007f0b1e1d6038 R14: 00007f0b1e1d5fa0 R15: 00007ffd44805268
[   60.475291][ T5948]  </TASK>
[   60.475308][ T5948] Mem-Info:
[   60.579213][ T5948] active_anon:5606 inactive_anon:0 isolated_anon:0
[   60.579213][ T5948]  active_file:1080 inactive_file:38234 isolated_file:0
[   60.579213][ T5948]  unevictable:1768 dirty:1455 writeback:0
[   60.579213][ T5948]  slab_reclaimable:9622 slab_unreclaimable:50244
[   60.579213][ T5948]  mapped:17993 shmem:2428 pagetables:905
[   60.579213][ T5948]  sec_pagetables:0 bounce:0
[   60.579213][ T5948]  kernel_misc_reclaimable:0
[   60.579213][ T5948]  free:301092 free_pcp:19821 free_cma:0
[   60.612626][ T5948] Node 0 active_anon:13528kB inactive_anon:0kB active_file:2528kB inactive_file:136784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34832kB dirty:5744kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7856kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.652693][ T5948] Node 1 active_anon:8896kB inactive_anon:0kB active_file:1792kB inactive_file:16152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37140kB dirty:76kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3452kB pagetables:1236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.674532][ T5948] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.685915][ T5948] lowmem_reserve[]: 0 811 811 811 811
[   60.703834][ T5948] Node 0 DMA32 free:285124kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13528kB inactive_anon:0kB active_file:2528kB inactive_file:136784kB unevictable:3536kB writepending:5744kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:40928kB local_pcp:21340kB free_cma:0kB
[   60.717707][ T5948] lowmem_reserve[]: 0 0 0 0 0
[   60.719199][ T5948] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.749700][ T5948] lowmem_reserve[]: 0 0 854 854 854
[   60.754004][ T5948] Node 1 Normal free:442856kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8964kB inactive_anon:0kB active_file:1792kB inactive_file:16152kB unevictable:3536kB writepending:76kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38460kB local_pcp:22784kB free_cma:0kB
[   60.799004][ T5948] lowmem_reserve[]: 0 0 0 0 0
[   60.820931][ T5948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.836712][ T5948] Node 0 DMA32: 39*4kB (UM) 63*8kB (M) 49*16kB (ME) 75*32kB (UM) 22*64kB (UM) 7*128kB (UM) 6*256kB (UM) 6*512kB (M) 4*1024kB (M) 4*2048kB (ME) 64*4096kB (M) = 285188kB
[   60.869013][ T5948] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   60.898139][ T5948] Node 1 Normal: 1*4kB (M) 191*8kB (UME) 225*16kB (UM) 3*32kB (UME) 1*64kB (E) 0*128kB 1*256kB (M) 1*512kB (U) 3*1024kB (UME) 1*2048kB (E) 105*4096kB (M) = 441260kB
[   60.951113][ T5948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.954297][ T5948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.002487][ T5948] 41742 total pagecache pages
[   61.014250][ T5948] 0 pages in swap cache
[   61.022523][ T5948] Free swap  = 124996kB
[   61.040884][ T5948] Total swap = 124996kB
[   61.042458][ T5948] 786301 pages RAM
[   61.043830][ T5948] 0 pages HighMem/MovableOnly
[   61.049920][ T5948] 241346 pages reserved
[   61.051430][ T5948] 0 pages cma reserved
[   61.097241][ T5854] Bluetooth: hci0: command tx timeout
[   61.099322][ T5854] Bluetooth: hci2: command tx timeout
[   61.101125][ T5854] Bluetooth: hci1: command tx timeout
[   61.316833][ T5990] Bluetooth: MGMT ver 1.23
[   61.434516][ T5995] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET)
[   61.509981][ T6003] Zero length message leads to an empty skb
[   61.680236][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   61.685568][ T6019] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.743943][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.822113][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.826262][ T6035] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.830878][ T6035] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   61.909841][ T6043] syzkaller1: entered promiscuous mode
[   61.916000][ T6043] syzkaller1: entered allmulticast mode
[   61.921516][ T6039] netlink: 'syz.2.34': attribute type 4 has an invalid length.
[   61.926648][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   61.972925][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'.
[   61.987712][ T6045] vlan2: entered promiscuous mode
[   61.989454][ T6045] ip6gretap0: entered promiscuous mode
[   62.043190][ T6046] sctp: [Deprecated]: syz.1.37 (pid 6046) Use of int in maxseg socket option.
[   62.043190][ T6046] Use struct sctp_assoc_value instead
[   62.258877][    T9] IPVS: starting estimator thread 0...
[   62.358522][ T6059] IPVS: using max 47 ests per chain, 112800 per kthread
[   62.421186][ T6064] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   62.515426][ T6070] netlink: 'syz.2.44': attribute type 1 has an invalid length.
[   62.550408][ T6070] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   62.553724][ T6070] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   62.561564][ T6070] bond1: (slave vcan1): making interface the new active one
[   62.564992][ T6070] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   62.574197][ T6070] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[   62.581727][ T6070] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[   62.588543][ T6070] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.126120][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.167780][ T5854] Bluetooth: hci2: command tx timeout
[   63.167797][ T5863] Bluetooth: hci1: command tx timeout
[   63.169639][ T5854] Bluetooth: hci0: command tx timeout
[   63.301377][ T6084] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   63.581843][ T6095] raw_sendmsg: syz.2.51 forgot to set AF_INET. Fix it!
[   63.833166][ T6102] syzkaller1: entered promiscuous mode
[   63.835470][ T6102] syzkaller1: entered allmulticast mode
[   64.052928][ T6108] syzkaller1: entered promiscuous mode
[   64.055648][ T6108] syzkaller1: entered allmulticast mode
[   64.092931][ T5887] IPVS: starting estimator thread 0...
[   64.208932][ T6113] IPVS: using max 46 ests per chain, 110400 per kthread
[   64.458461][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.63'.
[   64.476530][ T6133] veth1_to_team: entered promiscuous mode
[   64.481120][ T6133] bond0: entered promiscuous mode
[   64.483178][ T6133] bond_slave_0: entered promiscuous mode
[   64.485573][ T6133] bond_slave_1: entered promiscuous mode
[   64.491458][ T6133] hsr1: entered allmulticast mode
[   64.493533][ T6133] veth1_to_team: entered allmulticast mode
[   64.495809][ T6133] bond0: entered allmulticast mode
[   64.498167][ T6133] bond_slave_0: entered allmulticast mode
[   64.500423][ T6133] bond_slave_1: entered allmulticast mode
[   64.547556][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   64.550699][ T6130] syzkaller1: entered promiscuous mode
[   64.552540][ T6130] syzkaller1: entered allmulticast mode
[   64.700492][ T6139] nicvf0: entered promiscuous mode
[   64.741409][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.744247][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   64.885932][ T6152] syzkaller0: tun_chr_ioctl cmd 1074025673
[   64.959667][ T6156] syzkaller0: create flow: hash 3389441710 index 2
[   64.978323][   T13] syzkaller0: tun_net_xmit 76
[   64.980810][   T13] syzkaller0: tun_net_xmit 48
[   64.988828][ T6153] syzkaller0: tun_chr_ioctl cmd 3223385353
[   64.997459][  T792] syzkaller0: tun_net_xmit 76
[   65.055648][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.71'.
[   65.057463][   T10] syzkaller0: tun_net_xmit 76
[   65.080219][ T6156] syzkaller0: delete flow: hash 3389441710 index 2
[   65.249503][ T5863] Bluetooth: hci0: command tx timeout
[   65.249542][   T54] Bluetooth: hci2: command tx timeout
[   65.253965][ T6169] netlink: 'syz.2.72': attribute type 10 has an invalid length.
[   65.257430][   T54] Bluetooth: hci1: command tx timeout
[   65.326312][ T6176] netlink: 'syz.2.72': attribute type 10 has an invalid length.
[   66.138865][ T6161] lo speed is unknown, defaulting to 1000
[   66.145996][ T6169] team0: Port device dummy0 added
[   66.149151][ T6169] syz.2.72 (6169) used greatest stack depth: 19768 bytes left
[   66.152701][ T6176] team0: Port device dummy0 removed
[   66.157069][ T6176] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.163986][ T6184] syzkaller1: entered promiscuous mode
[   66.165922][ T6184] syzkaller1: entered allmulticast mode
[   66.173687][ T6161] lo speed is unknown, defaulting to 1000
[   66.201461][ T6161] lo speed is unknown, defaulting to 1000
[   66.209955][ T6161] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.218505][ T6161] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   66.250433][ T6161] lo speed is unknown, defaulting to 1000
[   66.253685][ T6161] lo speed is unknown, defaulting to 1000
[   66.261404][ T6192] ieee802154 phy0 wpan0: encryption failed: -22
[   66.269535][ T6161] lo speed is unknown, defaulting to 1000
[   66.488025][ T6202] netlink: 'syz.0.82': attribute type 10 has an invalid length.
[   66.500430][ T6202] team0: Port device dummy0 added
[   66.507612][ T6202] netlink: 'syz.0.82': attribute type 10 has an invalid length.
[   66.540061][ T6202] team0: Port device dummy0 removed
[   66.544862][ T6202] dummy0: entered promiscuous mode
[   66.568833][ T6202] dummy0: entered allmulticast mode
[   66.574450][ T6202] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   66.939392][ T6223] bond0: (slave dummy0): Releasing backup interface
[   66.959060][ T6223] bridge_slave_0: left allmulticast mode
[   66.961338][ T6223] bridge_slave_0: left promiscuous mode
[   66.965486][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.983706][ T6223] bridge_slave_1: left allmulticast mode
[   66.985976][ T6223] bridge_slave_1: left promiscuous mode
[   66.988871][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.000642][ T6223] bond0: (slave bond_slave_0): Releasing backup interface
[   67.014632][ T6223] bond0: (slave bond_slave_1): Releasing backup interface
[   67.033900][ T6223] team0: Port device team_slave_0 removed
[   67.044057][ T6223] team0: Port device team_slave_1 removed
[   67.049596][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.052555][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.059944][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.062895][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.076508][ T6223] bond1: (slave vcan1): Releasing backup interface
[   67.081864][ T6223] bond1: (slave vcan2): making interface the new active one
[   67.093331][ T6223] bond1: (slave vcan2): Releasing backup interface
[   67.109596][ T5887] lo speed is unknown, defaulting to 1000
[   67.327541][   T54] Bluetooth: hci0: command tx timeout
[   67.351187][ T6230] ip6gre1: entered allmulticast mode
[   67.378736][ T6235] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   67.384219][ T6235] netlink: 'syz.2.91': attribute type 2 has an invalid length.
[   67.414883][   T10] IPVS: starting estimator thread 0...
[   67.439953][ T6232] lo speed is unknown, defaulting to 1000
[   67.489589][ T6243] IPVS: nq: FWM 3 0x00000003 - no destination available
[   67.507656][ T6239] IPVS: using max 62 ests per chain, 148800 per kthread
[   67.648116][ T6252] netlink: 'syz.0.95': attribute type 21 has an invalid length.
[   67.651218][ T6252] netlink: 'syz.0.95': attribute type 22 has an invalid length.
[   67.661013][ T6252] netlink: 'syz.0.95': attribute type 23 has an invalid length.
[   67.669463][ T6248] __nla_validate_parse: 1 callbacks suppressed
[   67.669558][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'.
[   67.675446][ T6252] netlink: 'syz.0.95': attribute type 25 has an invalid length.
[   67.679586][ T6252] netlink: 'syz.0.95': attribute type 26 has an invalid length.
[   67.693344][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'.
[   67.715865][ T6250] tipc: Started in network mode
[   67.718286][ T6250] tipc: Node identity 46be6c9d0188, cluster identity 4711
[   67.722022][ T6250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.739100][ T6250] syzkaller0: entered promiscuous mode
[   67.743484][ T6250] syzkaller0: entered allmulticast mode
[   67.788681][ T6250] tipc: Resetting bearer <eth:syzkaller0>
[   67.914304][ T6262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'.
[   67.994359][ T6272] syzkaller1: entered promiscuous mode
[   67.996156][ T6272] syzkaller1: entered allmulticast mode
[   68.105060][ T6274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.102'.
[   68.171865][ T6249] tipc: Resetting bearer <eth:syzkaller0>
[   68.196144][ T6249] tipc: Disabling bearer <eth:syzkaller0>
[   68.348414][ T6282] netlink: 'syz.0.103': attribute type 24 has an invalid length.
[   68.351178][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'.
[   68.357588][ T6282] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   68.363360][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[   68.368824][ T6282] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   68.641940][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'.
[   68.700798][ T6299] syzkaller1: entered promiscuous mode
[   68.702722][ T6299] syzkaller1: entered allmulticast mode
[   68.748641][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   68.773739][ T6303] block nbd0: Receive control failed (result -107)
[   68.849346][ T6299] nbd0: detected capacity change from 0 to 32
[   68.855116][ T5852] block nbd0: Dead connection, failed to find a fallback
[   68.859403][ T5852] block nbd0: shutting down sockets
[   68.861366][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.864393][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.868357][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.872342][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.875235][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.878253][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.880784][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.884216][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.887851][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.892478][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.895113][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.898213][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.900720][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.904551][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.908280][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.911284][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.913904][ T5852] ldm_validate_partition_table(): Disk read failed.
[   68.916287][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.920376][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.923834][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.926845][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.930933][ T5852] Dev nbd0: unable to read RDB block 0
[   68.933149][ T5852]  nbd0: unable to read partition table
[   68.939396][ T5852] ldm_validate_partition_table(): Disk read failed.
[   68.941861][ T5852] Dev nbd0: unable to read RDB block 0
[   68.943951][ T5852]  nbd0: unable to read partition table
[   69.170738][ T6317] netlink: 'syz.0.116': attribute type 10 has an invalid length.
[   69.173970][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.177139][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.185906][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.188369][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.191448][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.194657][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.202614][ T6317] bridge0: entered promiscuous mode
[   69.204931][ T6317] bridge0: entered allmulticast mode
[   69.208066][ T6317] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   69.213547][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'.
[   69.217089][ T6317] bridge_slave_1: left allmulticast mode
[   69.219124][ T6317] bridge_slave_1: left promiscuous mode
[   69.221229][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.225540][ T6317] bridge_slave_0: left allmulticast mode
[   69.228403][ T6317] bridge_slave_0: left promiscuous mode
[   69.230499][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.247247][ T6317] bond0: (slave bridge0): Releasing backup interface
[   69.251843][ T6317] bridge0 (unregistering): left promiscuous mode
[   69.254358][ T6317] bridge0 (unregistering): left allmulticast mode
[   69.426044][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.440332][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.554216][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.559316][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.562346][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.610355][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.823786][ T6339] netlink: 'syz.1.120': attribute type 10 has an invalid length.
[   69.845363][ T6339] team0: Port device dummy0 added
[   69.875224][ T6341] netlink: 64 bytes leftover after parsing attributes in process `syz.2.121'.
[   69.881102][ T6339] team0: Port device dummy0 removed
[   69.885641][ T6339] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.019492][ T6344] netlink: set zone limit has 4 unknown bytes
[   70.261736][ T6354] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:21
[   70.541365][ T6366] openvswitch: netlink: Flow key attr not present in new flow.
[   70.545952][ T6366] veth1_to_bond: entered allmulticast mode
[   71.012256][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.882748][ T6434] nft_compat: unsupported protocol 0
[   72.258938][ T6450] pim6reg: entered allmulticast mode
[   72.388851][ T6451] pim6reg: left allmulticast mode
[   72.925494][ T6470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.959022][ T6473] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   73.095985][ T6478] warning: `syz.1.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.583754][ T6485] __nla_validate_parse: 10 callbacks suppressed
[   73.583766][ T6485] netlink: 52 bytes leftover after parsing attributes in process `syz.1.167'.
[   73.607900][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[   73.619163][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'.
[   73.654876][ T6485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.668469][ T6485] syzkaller0: entered promiscuous mode
[   73.671207][ T6485] syzkaller0: entered allmulticast mode
[   73.688631][ T6484] tipc: Resetting bearer <eth:syzkaller0>
[   73.705138][ T6484] tipc: Disabling bearer <eth:syzkaller0>
[   73.844595][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'.
[   73.856188][ T6496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'.
[   74.275398][ T6538] IPVS: length: 24 != 1272
[   74.357731][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.390921][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   74.646315][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'.
[   74.716412][ T6565] validate_nla: 8 callbacks suppressed
[   74.716440][ T6565] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   74.722282][ T6565] netlink: 204 bytes leftover after parsing attributes in process `syz.1.184'.
[   74.725761][ T6565] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   74.874735][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'.
[   75.322685][ T6603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   75.325453][ T6603] macsec1: entered allmulticast mode
[   75.328956][ T6603] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   75.334599][ T6603] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   75.338501][ T6603] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   75.541724][ T6620] lo speed is unknown, defaulting to 1000
[   75.818583][ T6638] syzkaller0: entered promiscuous mode
[   75.823130][ T6638] syzkaller0: entered allmulticast mode
[   75.829649][ T6638] tc_dump_action: action bad kind
[   76.104913][ T6653] syzkaller0: entered promiscuous mode
[   76.106624][ T6653] syzkaller0: entered allmulticast mode
[   76.125752][ T6653] syzkaller0: left promiscuous mode
[   76.128252][ T6653] syzkaller0: left allmulticast mode
[   77.236188][ T6680] netlink: 'syz.2.219': attribute type 6 has an invalid length.
[   77.383959][ T6691] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002
[   77.446223][ T6693] lo speed is unknown, defaulting to 1000
[   78.779952][ T6732] veth0: entered promiscuous mode
[   78.782043][ T6732] __nla_validate_parse: 7 callbacks suppressed
[   78.782054][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'.
[   78.818315][ T6732] veth0 (unregistering): left promiscuous mode
[   78.843702][ T6737] siw: device registration error -23
[   78.863624][ T6737] lo speed is unknown, defaulting to 1000
[   78.867102][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.240'.
[   78.880720][ T6735] delete_channel: no stack
[   79.127368][ T6755] netlink: 68 bytes leftover after parsing attributes in process `syz.1.245'.
[   79.152099][ T6755] netdevsim netdevsim1: loading /lib/firmware// failed with error -22
[   79.155527][ T6755] netdevsim netdevsim1: Direct firmware load for / failed with error -22
[   79.173589][ T6755] netdevsim netdevsim1: Falling back to sysfs fallback for: /
[   79.189827][ T6759] TCP: TCP_TX_DELAY enabled
[   79.192281][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'.
[   79.201612][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'.
[   79.320556][ T6766] pim6reg: entered allmulticast mode
[   79.332252][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[   79.483128][ T6773] netlink: 'syz.2.253': attribute type 3 has an invalid length.
[   79.600348][ T6779] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   80.136601][ T6786] netlink: 100 bytes leftover after parsing attributes in process `syz.2.256'.
[   80.156090][ T6786] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   80.183895][ T6788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.257'.
[   80.187640][ T6788] netlink: 7 bytes leftover after parsing attributes in process `syz.1.257'.
[   80.329270][ T6790] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   80.332505][ T6790] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   80.340286][ T6790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   81.272709][  T973] cfg80211: failed to load regulatory.db
[   81.407937][ T5863] Bluetooth: hci2: command 0x0405 tx timeout
[   81.556669][ T6803] batadv_slave_1: entered promiscuous mode
[   81.576190][ T6802] batadv_slave_1: left promiscuous mode
[   81.658074][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'.
[   81.685569][ T6814] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   81.686648][ T6810] lo speed is unknown, defaulting to 1000
[   81.759347][ T6820] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[   81.816518][ T6827] Bluetooth: MGMT ver 1.23
[   81.843481][ T6825] dvmrp0: entered allmulticast mode
[   81.850401][ T6820] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[   81.952734][ T6829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.956060][ T6829] syzkaller0: entered promiscuous mode
[   81.958770][ T6829] syzkaller0: entered allmulticast mode
[   81.976331][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[   81.982272][ T6828] tipc: Resetting bearer <eth:syzkaller0>
[   81.994415][ T6828] tipc: Disabling bearer <eth:syzkaller0>
[   82.189768][ T6839] unknown channel width for channel at 909000KHz?
[   82.192603][ T6839] unknown channel width for channel at 909000KHz?
[   82.195180][ T6839] unknown channel width for channel at 909000KHz?
[   82.646545][ T6864] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.053328][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.384424][ T6891] geneve2: entered promiscuous mode
[   83.399642][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.402817][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.405508][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.411002][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.495642][ T6900] tap0: tun_chr_ioctl cmd 1074025681
[   83.511690][ T6898] tipc: Started in network mode
[   83.513418][ T6898] tipc: Node identity 46699ab69dbf, cluster identity 4711
[   83.516625][ T6898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.524041][ T6898] syzkaller0: entered promiscuous mode
[   83.526268][ T6898] syzkaller0: entered allmulticast mode
[   83.535858][ T6898] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   83.553567][ T6898] tipc: Resetting bearer <eth:syzkaller0>
[   83.559973][ T6897] tipc: Resetting bearer <eth:syzkaller0>
[   83.570097][ T6897] tipc: Disabling bearer <eth:syzkaller0>
[   83.799152][ T6913] __nla_validate_parse: 7 callbacks suppressed
[   83.799172][ T6913] netlink: 408 bytes leftover after parsing attributes in process `syz.0.297'.
[   83.834259][ T6915] netlink: 64 bytes leftover after parsing attributes in process `syz.1.298'.
[   83.937117][ T6921] netlink: 'syz.1.301': attribute type 12 has an invalid length.
[   83.942485][ T6923] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[   83.950096][ T6921] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.301'.
[   83.965604][ T6924] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[   83.983086][ T6921] netlink: 72 bytes leftover after parsing attributes in process `syz.1.301'.
[   84.048129][ T6930] syzkaller1: entered promiscuous mode
[   84.050524][ T6930] syzkaller1: entered allmulticast mode
[   84.261635][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.303'.
[   84.306962][ T6945] syzkaller1: entered promiscuous mode
[   84.309084][ T6945] syzkaller1: entered allmulticast mode
[   84.330332][ T6940] netlink: 11066 bytes leftover after parsing attributes in process `syz.2.303'.
[   84.335833][ T6940] netlink: 11066 bytes leftover after parsing attributes in process `syz.2.303'.
[   84.727086][ T6971] lo speed is unknown, defaulting to 1000
[   84.781831][ T6975] netlink: 'syz.2.313': attribute type 10 has an invalid length.
[   84.794704][ T6975] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   84.800897][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[   84.871639][ T6975] bond0: (slave bridge0): Releasing backup interface
[   85.343268][   T51] lo speed is unknown, defaulting to 1000
[   85.345634][   T51] syz0: Port: 1 Link DOWN
[   85.389558][ T6986] geneve2: entered promiscuous mode
[   85.393589][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.451231][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.454837][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.475522][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.492722][ T6993] netlink: 80 bytes leftover after parsing attributes in process `syz.1.318'.
[   85.600474][ T7003] netlink: 'syz.0.321': attribute type 3 has an invalid length.
[   85.837145][ T7019] lo speed is unknown, defaulting to 1000
[   86.725994][ T6303] block nbd1: Receive control failed (result -104)
[   86.800510][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'.
[   86.807049][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.066364][ T7050] tipc: Started in network mode
[   87.074642][ T7050] tipc: Node identity ca262ab2633d, cluster identity 6
[   87.077948][ T7050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.103787][ T7050] tipc: Disabling bearer <eth:syzkaller0>
[   87.242430][ T7058] syzkaller1: entered promiscuous mode
[   87.244688][ T7058] syzkaller1: entered allmulticast mode
[   87.359774][ T7067] syzkaller1: entered promiscuous mode
[   87.361577][ T7067] syzkaller1: entered allmulticast mode
[   87.631313][ T7087] xt_l2tp: v2 tid > 0xffff: 37482740
[   87.730766][ T7098] delete_channel: no stack
[   87.777428][ T7094] lo speed is unknown, defaulting to 1000
[   87.786800][ T7101] openvswitch: netlink: Flow key attribute not present in set flow.
[   88.282985][ T7126] netlink: 'syz.0.359': attribute type 11 has an invalid length.
[   88.863362][ T7163] syzkaller1: entered promiscuous mode
[   88.865580][ T7163] syzkaller1: entered allmulticast mode
[   88.931480][ T7166] __nla_validate_parse: 6 callbacks suppressed
[   88.931498][ T7166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.370'.
[   88.983947][ T7170] netlink: 68 bytes leftover after parsing attributes in process `syz.0.371'.
[   88.986862][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'.
[   88.990129][ T7170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'.
[   89.009371][ T7172] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   89.100960][ T7183] netlink: 'syz.2.375': attribute type 4 has an invalid length.
[   89.198829][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.201921][ T7195] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[   89.207411][ T7195] netlink: 'syz.1.379': attribute type 2 has an invalid length.
[   89.210066][ T7195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.216407][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.221615][ T7195] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[   89.225725][ T7195] netlink: 'syz.1.379': attribute type 2 has an invalid length.
[   89.229148][ T7195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.232144][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.234967][ T7195] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[   89.237854][ T7195] netlink: 'syz.1.379': attribute type 2 has an invalid length.
[   89.240701][ T7195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.379'.
[   89.244946][ T7195] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[   89.247733][ T7195] netlink: 'syz.1.379': attribute type 2 has an invalid length.
[   89.252944][ T7195] netlink: 'syz.1.379': attribute type 1 has an invalid length.
[   89.428957][ T7199] syzkaller1: entered allmulticast mode
[   89.553506][ T7205] lo speed is unknown, defaulting to 1000
[   90.301112][ T7234] syzkaller0: entered promiscuous mode
[   90.303578][ T7234] syzkaller0: entered allmulticast mode
[   90.454890][ T7241] team0: Port device geneve0 added
[   90.953174][ T7277] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[   91.242779][ T7277] syz.0.401 (7277) used greatest stack depth: 19576 bytes left
[   91.320350][ T7291] syzkaller1: entered promiscuous mode
[   91.322569][ T7291] syzkaller1: entered allmulticast mode
[   91.443733][ T7295] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   91.580345][ T7305] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.655842][ T7305] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.820801][ T7305] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.889933][ T7305] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.040290][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.043394][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.066502][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.080748][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.143487][ T7324] team0: Cannot enslave team device to itself
[   92.512744][ T7358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.648256][ T7367] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[   92.859312][ T7392] syzkaller1: entered promiscuous mode
[   92.861048][ T7392] syzkaller1: entered allmulticast mode
[   93.154350][ T7412] lo speed is unknown, defaulting to 1000
[   93.792017][ T7434] syzkaller1: entered promiscuous mode
[   93.794523][ T7434] syzkaller1: entered allmulticast mode
[   93.965289][ T7444] __nla_validate_parse: 82 callbacks suppressed
[   93.965301][ T7444] netlink: 84 bytes leftover after parsing attributes in process `syz.0.436'.
[   94.004266][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'.
[   94.192071][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'.
[   94.196083][ T7467] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.439'.
[   94.222054][ T7463] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.226172][ T7463] bond0: (slave bond3): Enslaving as an active interface with an up link
[   94.871738][ T7520] netlink: 92 bytes leftover after parsing attributes in process `syz.1.443'.
[   95.186838][ T7537] syzkaller1: entered promiscuous mode
[   95.195703][ T7537] syzkaller1: entered allmulticast mode
[   95.347323][ T7544] validate_nla: 87 callbacks suppressed
[   95.347342][ T7544] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[   95.373964][ T7544] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.384380][ T7544] bond2: entered promiscuous mode
[   95.386430][ T7544] bond2: entered allmulticast mode
[   95.395755][ T7493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.399292][ T7493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.506857][ T7547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.453'.
[   95.649274][ T7551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.455'.
[   95.653299][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[   95.976705][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.983498][ T7581] syzkaller0: entered promiscuous mode
[   95.986320][ T7581] syzkaller0: entered allmulticast mode
[   95.989060][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.465'.
[   96.022511][ T7581] tipc: Resetting bearer <eth:syzkaller0>
[   96.027370][ T7580] tipc: Resetting bearer <eth:syzkaller0>
[   96.042961][ T7580] tipc: Disabling bearer <eth:syzkaller0>
[   96.195909][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[   96.224029][ T7600] lo speed is unknown, defaulting to 1000
[   96.295171][ T7601] lo speed is unknown, defaulting to 1000
[   96.431946][ T7611] syzkaller1: entered promiscuous mode
[   96.434378][ T7611] syzkaller1: entered allmulticast mode
[   96.507147][ T7606] lo speed is unknown, defaulting to 1000
[   96.633955][ T7624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.639578][ T7624] syzkaller0: entered allmulticast mode
[   96.643933][ T7624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.682850][ T7624] tipc: Resetting bearer <eth:syzkaller0>
[   96.763344][ T7622] tipc: Disabling bearer <eth:syzkaller0>
[   96.848954][ T7638] syzkaller1: entered promiscuous mode
[   96.850736][ T7638] syzkaller1: entered allmulticast mode
[   97.102507][ T7659] netlink: 'syz.2.492': attribute type 2 has an invalid length.
[   97.105065][ T7659] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[   97.327598][ T7670] ..0: renamed from hsr0
[   97.333019][ T7670] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   97.336902][ T7670] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.341170][ T7670] ..0: entered allmulticast mode
[   97.342785][ T7670] hsr_slave_0: entered allmulticast mode
[   97.344494][ T7670] hsr_slave_1: entered allmulticast mode
[   97.347740][ T7670] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   97.594679][ T7694] syzkaller1: entered promiscuous mode
[   97.596471][ T7694] syzkaller1: entered allmulticast mode
[   98.092098][ T7723] !: renamed from dummy0 (while UP)
[   98.151545][ T7734] syzkaller1: entered promiscuous mode
[   98.153780][ T7734] syzkaller1: entered allmulticast mode
[   98.252995][ T7739] netlink: 'syz.2.515': attribute type 13 has an invalid length.
[   98.256066][ T7739] netlink: 'syz.2.515': attribute type 17 has an invalid length.
[   98.261409][ T7739] gretap0: refused to change device tx_queue_len
[   98.263922][ T7739] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   98.278526][ T7739] netlink: 'syz.2.515': attribute type 4 has an invalid length.
[   98.316379][ T7741] syzkaller1: entered promiscuous mode
[   98.327285][ T7741] syzkaller1: entered allmulticast mode
[   98.598083][ T7760] lo speed is unknown, defaulting to 1000
[   98.856856][ T7767] openvswitch: netlink: Message has 8 unknown bytes.
[   98.933441][ T7775] syzkaller1: entered promiscuous mode
[   98.935527][ T7775] syzkaller1: entered allmulticast mode
[   99.071974][ T7786] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   99.081708][ T7786] __nla_validate_parse: 11 callbacks suppressed
[   99.081723][ T7786] netlink: 188 bytes leftover after parsing attributes in process `syz.1.526'.
[   99.161669][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'.
[   99.173652][ T7796] netlink: 240 bytes leftover after parsing attributes in process `syz.0.524'.
[   99.209844][ T7779] syzkaller1: entered promiscuous mode
[   99.212092][ T7779] syzkaller1: entered allmulticast mode
[   99.251214][ T7794] lo speed is unknown, defaulting to 1000
[   99.396667][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.531'.
[   99.732467][ T7821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.536'.
[   99.799352][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'.
[  100.963971][ T7867] syzkaller1: entered promiscuous mode
[  100.966245][ T7867] syzkaller1: entered allmulticast mode
[  101.318430][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'.
[  101.372806][ T7894] lo speed is unknown, defaulting to 1000
[  101.375137][ T7894] lo speed is unknown, defaulting to 1000
[  101.378867][ T7894] lo speed is unknown, defaulting to 1000
[  101.394771][ T7894] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  101.417124][ T7894] lo speed is unknown, defaulting to 1000
[  101.421200][ T7894] lo speed is unknown, defaulting to 1000
[  101.424413][ T7894] lo speed is unknown, defaulting to 1000
[  101.578243][ T7896] netlink: 'syz.1.560': attribute type 1 has an invalid length.
[  101.580662][ T7896] nbd: error processing sock list
[  101.584537][ T7896] block nbd2: shutting down sockets
[  101.971745][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.567'.
[  102.045524][ T7926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.060216][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[  102.615347][ T7943] netlink: 'syz.0.569': attribute type 6 has an invalid length.
[  103.012923][ T7925] tipc: Disabling bearer <eth:syzkaller0>
[  103.119588][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.122792][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.168216][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'.
[  103.239404][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.259558][ T7935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.386912][ T7935] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  103.390477][ T7935] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  103.405108][ T7935] ip6gre1: left allmulticast mode
[  103.415928][ T7935] geneve2: left promiscuous mode
[  103.589389][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.592351][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.599274][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.605612][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.738203][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'.
[  104.904516][ T8026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.912122][ T8034] ieee802154 phy0 wpan0: encryption failed: -22
[  104.970353][ T8047] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.593'.
[  105.113814][ T8058] netlink: 10 bytes leftover after parsing attributes in process `syz.0.594'.
[  105.182438][ T8070] syzkaller1: entered promiscuous mode
[  105.185055][ T8070] syzkaller1: entered allmulticast mode
[  105.364531][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'.
[  105.411774][ T8078] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[  105.414896][ T8078] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.600'.
[  105.493094][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'.
[  105.641326][ T8094] syzkaller1: entered promiscuous mode
[  105.643739][ T8094] syzkaller1: entered allmulticast mode
[  105.891202][ T8107] netlink: 'syz.2.607': attribute type 4 has an invalid length.
[  105.949408][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'.
[  106.253549][ T8120] siw: device registration error -23
[  106.653111][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.613'.
[  106.979026][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'.
[  107.010370][ T8156] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.015051][ T8157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.618'.
[  107.020108][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  107.115810][ T8162] ieee802154 phy0 wpan0: encryption failed: -22
[  107.232415][ T8167] lo speed is unknown, defaulting to 1000
[  107.235796][ T8167] lo speed is unknown, defaulting to 1000
[  107.435373][ T8177] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  107.606819][ T8182] ieee802154 phy0 wpan0: encryption failed: -22
[  107.984510][ T8197] netlink: 'syz.0.630': attribute type 13 has an invalid length.
[  107.988165][ T8197] netlink: 'syz.0.630': attribute type 17 has an invalid length.
[  108.074620][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.081424][ T8197] 8021q: adding VLAN 0 to HW filter on device team0
[  108.122479][ T8197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.240377][ T5887] lo speed is unknown, defaulting to 1000
[  108.246700][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.311224][ T8208] lo speed is unknown, defaulting to 1000
[  108.314242][ T8208] lo speed is unknown, defaulting to 1000
[  108.358431][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.418921][ T8216] lo speed is unknown, defaulting to 1000
[  108.431924][ T8216] lo speed is unknown, defaulting to 1000
[  108.447954][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.635024][ T5920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.648407][ T5920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.652822][ T5920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.659546][ T5920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.739914][ T8221] netlink: 'syz.1.635': attribute type 29 has an invalid length.
[  108.746981][ T8221] netlink: 'syz.1.635': attribute type 29 has an invalid length.
[  108.751813][ T8221] netlink: 'syz.1.635': attribute type 1 has an invalid length.
[  108.808119][ T8225] dvmrp8: entered allmulticast mode
[  108.811918][ T8224] dvmrp8: left allmulticast mode
[  109.197789][ T8197] syz.0.630 (8197) used greatest stack depth: 19040 bytes left
[  109.227776][ T8239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.231893][ T8239] syzkaller0: entered promiscuous mode
[  109.252442][ T8239] syzkaller0: entered allmulticast mode
[  109.264241][ T8239] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  109.290294][ T8239] tipc: Resetting bearer <eth:syzkaller0>
[  109.306953][ T8238] tipc: Resetting bearer <eth:syzkaller0>
[  109.320136][ T8238] tipc: Disabling bearer <eth:syzkaller0>
[  109.393506][ T8244] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  109.552260][ T8255] netlink: 'syz.0.647': attribute type 4 has an invalid length.
[  110.183871][ T8286] __nla_validate_parse: 11 callbacks suppressed
[  110.183885][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.653'.
[  110.326003][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.333620][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.338493][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.342886][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.346681][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'.
[  110.531567][ T8301] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[  110.849626][ T8327] syzkaller1: entered promiscuous mode
[  110.851458][ T8327] syzkaller1: entered allmulticast mode
[  110.861899][ T8327] geneve3: entered promiscuous mode
[  110.910712][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'.
[  110.924633][ T8327] ip6gre3: entered allmulticast mode
[  110.990876][ T8327] lo speed is unknown, defaulting to 1000
[  110.993625][ T8327] lo speed is unknown, defaulting to 1000
[  111.329068][ T8341] lo speed is unknown, defaulting to 1000
[  111.339221][ T8341] lo speed is unknown, defaulting to 1000
[  111.512175][ T8348] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.663'.
[  111.517068][ T8343] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.663'.
[  111.704740][ T8354] lo speed is unknown, defaulting to 1000
[  111.707807][ T8354] lo speed is unknown, defaulting to 1000
[  112.065150][ T8380] ieee802154 phy0 wpan0: encryption failed: -22
[  112.070845][ T8380] ieee802154 phy0 wpan0: encryption failed: -22
[  112.346137][ T8398] Driver unsupported XDP return value 0 on prog  (id 256) dev N/A, expect packet loss!
[  112.377062][ T8398] netlink: 64 bytes leftover after parsing attributes in process `syz.1.677'.
[  112.552494][ T8413] lo speed is unknown, defaulting to 1000
[  112.556115][ T8413] lo speed is unknown, defaulting to 1000
[  112.634714][ T8415] netlink: 'syz.2.680': attribute type 10 has an invalid length.
[  112.650290][ T8415] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  112.774189][ T8427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.777674][ T8427] syzkaller0: entered promiscuous mode
[  112.779980][ T8427] syzkaller0: entered allmulticast mode
[  112.804339][ T8427] tipc: Resetting bearer <eth:syzkaller0>
[  112.814663][ T8426] tipc: Resetting bearer <eth:syzkaller0>
[  112.828907][ T8426] tipc: Disabling bearer <eth:syzkaller0>
[  113.150072][ T8450] netlink: 'syz.0.692': attribute type 4 has an invalid length.
[  113.659503][ T8484] netlink: 'syz.0.701': attribute type 1 has an invalid length.
[  113.905085][ T8495] lo speed is unknown, defaulting to 1000
[  113.912543][ T8495] lo speed is unknown, defaulting to 1000
[  114.037429][ T8499] IPVS: Scheduler module ip_vs_sip not found
[  114.555865][ T8521] siw: device registration error -23
[  114.559758][ T8521] lo speed is unknown, defaulting to 1000
[  114.902553][   T13] syzkaller0: tun_net_xmit 76
[  114.904709][   T13] syzkaller0: tun_net_xmit 48
[  114.909612][ T8527] syzkaller0: create flow: hash 3389441710 index 2
[  114.937524][ T5894] syzkaller0: tun_net_xmit 76
[  114.958848][ T8526] syzkaller0: delete flow: hash 3389441710 index 2
[  115.417303][ T5863] Bluetooth: hci2: command 0x0405 tx timeout
[  115.723280][ T8537] __nla_validate_parse: 8 callbacks suppressed
[  115.723299][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'.
[  116.140755][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.719'.
[  116.235838][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[  116.242378][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'.
[  116.272527][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'.
[  116.601293][ T8566] syzkaller1: entered promiscuous mode
[  116.604009][ T8566] syzkaller1: entered allmulticast mode
[  116.767624][ T8569] netlink: 9 bytes leftover after parsing attributes in process `syz.2.727'.
[  116.772237][ T8569] ..1: renamed from ..0 (while UP)
[  116.776707][ T8569] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  117.148656][ T8573] netlink: 27 bytes leftover after parsing attributes in process `syz.0.728'.
[  117.152773][ T8573] syzkaller1: entered promiscuous mode
[  117.154835][ T8573] syzkaller1: entered allmulticast mode
[  117.249984][ T5851] cgroup: fork rejected by pids controller in /syz0
[  117.405874][ T8576] syzkaller0: entered promiscuous mode
[  117.408529][ T8576] syzkaller0: entered allmulticast mode
[  117.489154][ T5863] Bluetooth: hci2: command 0x0405 tx timeout
[  117.657024][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.665663][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.671341][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.690373][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.698000][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.563478][ T8586] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  118.568988][ T8593] netlink: 2 bytes leftover after parsing attributes in process `syz.2.732'.
[  118.585335][ T8583] lo speed is unknown, defaulting to 1000
[  118.588705][ T8583] lo speed is unknown, defaulting to 1000
[  118.743573][ T8583] chnl_net:caif_netlink_parms(): no params data found
[  118.824228][  T973] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  118.830977][  T973] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  118.876365][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.879052][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.881530][ T8583] bridge_slave_0: entered allmulticast mode
[  118.884687][ T8583] bridge_slave_0: entered promiscuous mode
[  118.889088][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.891292][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.893575][ T8583] bridge_slave_1: entered allmulticast mode
[  118.896578][ T8583] bridge_slave_1: entered promiscuous mode
[  118.911050][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  118.941218][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.950490][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.996125][ T8583] team0: Port device team_slave_0 added
[  119.008204][ T8583] team0: Port device team_slave_1 added
[  119.008684][ T8620] netlink: 152 bytes leftover after parsing attributes in process `syz.2.738'.
[  119.037222][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.040567][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.052259][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.059950][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.062714][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.088150][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.146047][ T8583] hsr_slave_0: entered promiscuous mode
[  119.158737][ T8583] hsr_slave_1: entered promiscuous mode
[  119.371373][ T8634] lo speed is unknown, defaulting to 1000
[  119.374932][ T8634] lo speed is unknown, defaulting to 1000
[  119.582470][ T8583] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.726220][ T8583] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.737780][   T54] Bluetooth: hci0: command tx timeout
[  119.784512][ T8659] syzkaller1: entered promiscuous mode
[  119.786716][ T8659] syzkaller1: entered allmulticast mode
[  119.804433][ T8583] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.016646][ T8583] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.075043][ T8685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.133036][ T8687] veth1_to_bond: left allmulticast mode
[  120.232230][ T8583] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  120.245060][ T8583] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  120.263128][ T8583] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  120.284858][ T8583] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  120.410897][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.440968][ T8583] 8021q: adding VLAN 0 to HW filter on device team0
[  120.451282][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.454003][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.469249][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.472041][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.663956][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.724771][ T8583] veth0_vlan: entered promiscuous mode
[  120.734930][ T8583] veth1_vlan: entered promiscuous mode
[  120.758211][ T8583] veth0_macvtap: entered promiscuous mode
[  120.799927][ T8583] veth1_macvtap: entered promiscuous mode
[  120.821020][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.838976][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.862151][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.865470][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.874032][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.881080][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.975887][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.986071][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.008575][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.011043][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.044051][ T8723] __nla_validate_parse: 6 callbacks suppressed
[  121.044066][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'.
[  121.051827][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'.
[  121.116724][ T8725] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.390747][ T8748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.393973][ T8748] syzkaller0: entered promiscuous mode
[  121.396162][ T8748] syzkaller0: entered allmulticast mode
[  121.416028][ T8748] tipc: Resetting bearer <eth:syzkaller0>
[  121.421209][ T8746] tipc: Resetting bearer <eth:syzkaller0>
[  121.430114][ T8746] tipc: Disabling bearer <eth:syzkaller0>
[  121.556741][ T8755] syzkaller1: entered promiscuous mode
[  121.559459][ T8755] syzkaller1: entered allmulticast mode
[  121.628579][ T8752] lo speed is unknown, defaulting to 1000
[  121.635756][ T8752] lo speed is unknown, defaulting to 1000
[  121.645504][ T8758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.759'.
[  121.809031][   T54] Bluetooth: hci0: command tx timeout
[  121.944132][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  121.947534][ T8767] netlink: 312 bytes leftover after parsing attributes in process `syz.1.763'.
[  121.950634][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'.
[  121.954003][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[  121.961723][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'.
[  122.003130][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.764'.
[  122.160662][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  122.401327][ T8806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.404585][ T8806] syzkaller0: entered promiscuous mode
[  122.406485][ T8806] syzkaller0: entered allmulticast mode
[  122.524004][ T8806] tipc: Resetting bearer <eth:syzkaller0>
[  122.534234][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  122.547346][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  122.567032][ T8809] Bluetooth: MGMT ver 1.23
[  122.843508][ T8836] syzkaller1: entered promiscuous mode
[  122.845512][ T8836] syzkaller1: entered allmulticast mode
[  123.011337][ T8839] syzkaller0: entered promiscuous mode
[  123.013051][ T8839] syzkaller0: entered allmulticast mode
[  123.078572][ T8840] netlink: 'syz.1.782': attribute type 13 has an invalid length.
[  123.184652][ T8839] Set syz1 is full, maxelem 6117 reached
[  123.888100][   T54] Bluetooth: hci0: command tx timeout
[  125.968030][ T8840] syz.1.782: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  125.974983][ T8840] CPU: 0 UID: 0 PID: 8840 Comm: syz.1.782 Not tainted syzkaller #0 PREEMPT(full) 
[  125.975016][ T8840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.975036][ T8840] Call Trace:
[  125.975043][ T8840]  <TASK>
[  125.975050][ T8840]  dump_stack_lvl+0x189/0x250
[  125.975077][ T8840]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.975095][ T8840]  ? __pfx__printk+0x10/0x10
[  125.975116][ T8840]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  125.975136][ T8840]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  125.975156][ T8840]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  125.975175][ T8840]  warn_alloc+0x214/0x310
[  125.975203][ T8840]  ? __pfx_warn_alloc+0x10/0x10
[  125.975251][ T8840]  ? __get_vm_area_node+0x28f/0x300
[  125.975273][ T8840]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  125.975294][ T8840]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  125.975345][ T8840]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  125.975372][ T8840]  ? rcu_is_watching+0x15/0xb0
[  125.975387][ T8840]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  125.975402][ T8840]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  125.975417][ T8840]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  125.975439][ T8840]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  125.975455][ T8840]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  125.975475][ T8840]  pfifo_fast_change_tx_queue_len+0x151/0xa30
[  125.975511][ T8840]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  125.975528][ T8840]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  125.975551][ T8840]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  125.975568][ T8840]  ? notifier_call_chain+0x3bf/0x3e0
[  125.975590][ T8840]  netif_change_tx_queue_len+0x162/0x270
[  125.975613][ T8840]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  125.975634][ T8840]  ? netif_change_flags+0xe8/0x1a0
[  125.975656][ T8840]  do_setlink+0xdfb/0x41c0
[  125.975686][ T8840]  ? __pfx_do_setlink+0x10/0x10
[  125.975704][ T8840]  ? _printk+0xcf/0x120
[  125.975723][ T8840]  ? __pfx____ratelimit+0x10/0x10
[  125.975746][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.975775][ T8840]  ? __mutex_trylock_common+0x153/0x260
[  125.975794][ T8840]  ? __pfx___mutex_trylock_common+0x10/0x10
[  125.975814][ T8840]  ? rcu_is_watching+0x15/0xb0
[  125.975829][ T8840]  ? trace_contention_end+0x39/0x120
[  125.975845][ T8840]  ? __mutex_lock+0x335/0x1350
[  125.975872][ T8840]  ? rtnl_newlink+0x8db/0x1c70
[  125.975890][ T8840]  ? __pfx___mutex_lock+0x10/0x10
[  125.975944][ T8840]  ? ns_capable+0x8a/0xf0
[  125.975979][ T8840]  ? rtnl_link_get_net_capable+0x16a/0x350
[  125.976000][ T8840]  rtnl_newlink+0x149f/0x1c70
[  125.976025][ T8840]  ? __pfx_rtnl_newlink+0x10/0x10
[  125.976047][ T8840]  ? is_bpf_text_address+0x26/0x2b0
[  125.976072][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.976102][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.976138][ T8840]  ? is_bpf_text_address+0x26/0x2b0
[  125.976162][ T8840]  ? is_bpf_text_address+0x292/0x2b0
[  125.976182][ T8840]  ? is_bpf_text_address+0x26/0x2b0
[  125.976211][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.976251][ T8840]  ? __pfx_rtnl_newlink+0x10/0x10
[  125.976266][ T8840]  rtnetlink_rcv_msg+0x7cf/0xb70
[  125.976281][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.976304][ T8840]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  125.976325][ T8840]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  125.976354][ T8840]  netlink_rcv_skb+0x208/0x470
[  125.976369][ T8840]  ? __lock_acquire+0xab9/0xd20
[  125.976390][ T8840]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  125.976406][ T8840]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.976431][ T8840]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.976453][ T8840]  netlink_unicast+0x82f/0x9e0
[  125.976483][ T8840]  ? __pfx_netlink_unicast+0x10/0x10
[  125.976507][ T8840]  ? netlink_sendmsg+0x642/0xb30
[  125.976521][ T8840]  ? skb_put+0x11b/0x210
[  125.976541][ T8840]  netlink_sendmsg+0x805/0xb30
[  125.976563][ T8840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.976582][ T8840]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.976600][ T8840]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.976617][ T8840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.976633][ T8840]  __sock_sendmsg+0x21c/0x270
[  125.976658][ T8840]  ____sys_sendmsg+0x505/0x830
[  125.976683][ T8840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.976708][ T8840]  ? import_iovec+0x74/0xa0
[  125.976731][ T8840]  ___sys_sendmsg+0x21f/0x2a0
[  125.976752][ T8840]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.976800][ T8840]  ? __fget_files+0x2a/0x420
[  125.976813][ T8840]  ? __fget_files+0x3a0/0x420
[  125.976834][ T8840]  __x64_sys_sendmsg+0x19b/0x260
[  125.976855][ T8840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.976882][ T8840]  ? rcu_is_watching+0x15/0xb0
[  125.976901][ T8840]  ? do_syscall_64+0xbe/0x3b0
[  125.976945][ T8840]  do_syscall_64+0xfa/0x3b0
[  125.976961][ T8840]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.976974][ T8840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.976989][ T8840]  ? exc_page_fault+0x9f/0xf0
[  125.977004][ T8840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.977019][ T8840] RIP: 0033:0x7f0b1df8ec29
[  125.977033][ T8840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.977046][ T8840] RSP: 002b:00007f0b1edf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.977061][ T8840] RAX: ffffffffffffffda RBX: 00007f0b1e1d6090 RCX: 00007f0b1df8ec29
[  125.977072][ T8840] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  125.977082][ T8840] RBP: 00007f0b1e011e41 R08: 0000000000000000 R09: 0000000000000000
[  125.977090][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.977099][ T8840] R13: 00007f0b1e1d6128 R14: 00007f0b1e1d6090 R15: 00007ffd44805268
[  125.977120][ T8840]  </TASK>
[  126.181161][   T54] Bluetooth: hci0: command tx timeout
[  126.186164][ T8840] Mem-Info:
[  126.187463][ T8840] active_anon:36 inactive_anon:3206 isolated_anon:0
[  126.187463][ T8840]  active_file:939 inactive_file:235 isolated_file:0
[  126.187463][ T8840]  unevictable:1768 dirty:20 writeback:4
[  126.187463][ T8840]  slab_reclaimable:10078 slab_unreclaimable:320377
[  126.187463][ T8840]  mapped:19194 shmem:2183 pagetables:933
[  126.187463][ T8840]  sec_pagetables:0 bounce:0
[  126.187463][ T8840]  kernel_misc_reclaimable:0
[  126.187463][ T8840]  free:30330 free_pcp:425 free_cma:0
[  126.202577][ T8840] Node 0 active_anon:140kB inactive_anon:11748kB active_file:3756kB inactive_file:860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39784kB dirty:60kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8476kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  126.214298][ T8840] Node 1 active_anon:4kB inactive_anon:804kB active_file:0kB inactive_file:80kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36992kB dirty:20kB writeback:16kB shmem:3804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4032kB pagetables:1672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  126.225536][ T8840] Node 0 DMA free:4528kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  126.234327][ T8840] lowmem_reserve[]: 0 811 811 811 811
[  126.236260][ T8840] Node 0 DMA32 free:45808kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140kB inactive_anon:11748kB active_file:3756kB inactive_file:860kB unevictable:3536kB writepending:60kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:1212kB local_pcp:944kB free_cma:0kB
[  126.247097][ T8840] lowmem_reserve[]: 0 0 0 0 0
[  126.248993][ T8840] Node 1 DMA32 free:24440kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  126.259330][ T8840] lowmem_reserve[]: 0 0 854 854 854
[  126.261055][ T8840] Node 1 Normal free:47264kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:4kB inactive_anon:804kB active_file:0kB inactive_file:80kB unevictable:3536kB writepending:36kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:644kB local_pcp:0kB free_cma:0kB
[  126.270841][ T8840] lowmem_reserve[]: 0 0 0 0 0
[  126.272565][ T8840] Node 0 DMA: 4*4kB (UM) 3*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 4616kB
[  126.278628][ T8840] Node 0 DMA32: 1*4kB (U) 41*8kB (UME) 95*16kB (UME) 114*32kB (UME) 60*64kB (UME) 28*128kB (UME) 18*256kB (UME) 15*512kB (UME) 20*1024kB (UM) 0*2048kB 0*4096kB = 45692kB
[  126.285195][ T8840] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 4*4096kB (M) = 24440kB
[  126.292484][ T8840] Node 1 Normal: 261*4kB (UME) 256*8kB (ME) 195*16kB (UME) 341*32kB (UME) 192*64kB (UME) 48*128kB (UM) 24*256kB (UM) 5*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 47332kB
[  126.299613][ T8840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.303252][ T8840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.307016][ T8840] 3399 total pagecache pages
[  126.309100][ T8840] 77 pages in swap cache
[  126.310806][ T8840] Free swap  = 115328kB
[  126.312581][ T8840] Total swap = 124996kB
[  126.314348][ T8840] 786301 pages RAM
[  126.315943][ T8840] 0 pages HighMem/MovableOnly
[  126.319570][ T8840] 241346 pages reserved
[  126.321362][ T8840] 0 pages cma reserved
[  126.334114][ T8840] syzkaller0: refused to change device tx_queue_len
[  126.336952][ T8840] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  126.345742][ T8840] syz.1.782 (8840) used greatest stack depth: 15896 bytes left
[  128.708418][ T8865] __nla_validate_parse: 5 callbacks suppressed
[  128.708433][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  128.754364][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'.
[  128.785537][ T8867] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  128.801392][ T8867] tipc: Started in network mode
[  128.802989][ T8867] tipc: Node identity 6e4e8251f109, cluster identity 4711
[  128.805565][ T8867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.812688][ T8867] syzkaller0: entered promiscuous mode
[  128.814480][ T8867] syzkaller0: entered allmulticast mode
[  128.829669][ T8867] Bluetooth: MGMT ver 1.23
[  128.831813][ T8867] syzkaller0: mtu less than device minimum
[  128.835176][ T8866] tipc: Resetting bearer <eth:syzkaller0>
[  128.864510][ T8866] tipc: Disabling bearer <eth:syzkaller0>
[  128.960520][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[  132.131547][ T8898] lo speed is unknown, defaulting to 1000
[  132.134154][ T8898] lo speed is unknown, defaulting to 1000
[  132.199086][ T8911] sctp: [Deprecated]: syz.2.799 (pid 8911) Use of int in max_burst socket option deprecated.
[  132.199086][ T8911] Use struct sctp_assoc_value instead
[  132.262158][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'.
[  132.452265][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.526010][ T8917] syzkaller1: entered promiscuous mode
[  132.530870][ T8917] syzkaller1: entered allmulticast mode
[  132.639251][ T8919] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  132.851206][ T8928] syzkaller1: entered promiscuous mode
[  132.853354][ T8928] syzkaller1: entered allmulticast mode
[  133.466481][ T8981] batadv_slave_1: entered promiscuous mode
[  133.474686][ T8979] batadv_slave_1: left promiscuous mode
[  133.589976][ T8992] netlink: 'syz.0.820': attribute type 10 has an invalid length.
[  133.596409][ T8992] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  133.626303][ T8992] bridge2: entered promiscuous mode
[  133.628910][ T8992] bridge2: entered allmulticast mode
[  133.691391][ T8992] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  134.062951][ T8995] siw: device registration error -23
[  134.412157][ T9011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'.
[  134.433939][ T9011] netlink: 2 bytes leftover after parsing attributes in process `syz.1.827'.
[  134.649734][ T9031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.832'.
[  134.704554][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'.
[  134.718619][ T9038] syzkaller1: entered promiscuous mode
[  134.720522][ T9038] syzkaller1: entered allmulticast mode
[  134.726566][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.834'.
[  134.753232][ T9039] netlink: 'syz.2.833': attribute type 39 has an invalid length.
[  134.885257][ T9051] netlink: 'syz.1.840': attribute type 29 has an invalid length.
[  134.950730][ T9050] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  134.953116][ T9049] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  134.987784][ T9055] team0: No ports can be present during mode change
[  134.990513][ T9055] netlink: 'syz.0.841': attribute type 10 has an invalid length.
[  135.001416][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.005901][ T9055] team0: Port device bond0 added
[  135.008725][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.841'.
[  135.140088][ T9058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  135.397798][ T9055] team0 (unregistering): Port device team_slave_0 removed
[  135.424485][ T9055] team0 (unregistering): Port device team_slave_1 removed
[  135.442323][ T9055] team0 (unregistering): Port device bond0 removed
[  135.610858][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.846'.
[  135.620742][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.846'.
[  135.672741][ T9082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'.
[  135.690807][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'.
[  135.781765][ T9092] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  136.006540][ T9116] nbd: socks must be embedded in a SOCK_ITEM attr
[  136.268215][ T9128] netlink: 'syz.0.863': attribute type 3 has an invalid length.
[  136.270638][ T9128] netlink: 'syz.0.863': attribute type 2 has an invalid length.
[  137.045783][ T9158] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  137.110108][ T9157] pimreg: entered allmulticast mode
[  137.123302][ T9157] dvmrp8: entered allmulticast mode
[  137.132424][ T9130] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  137.140312][ T9156] pimreg: left allmulticast mode
[  137.141909][ T9156] dvmrp8: left allmulticast mode
[  137.298293][ T9172] syzkaller1: entered promiscuous mode
[  137.300122][ T9172] syzkaller1: entered allmulticast mode
[  137.304751][ T9172] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:21
[  137.493965][ T9184] netlink: 'syz.2.879': attribute type 4 has an invalid length.
[  137.625297][ T9198] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  137.633736][ T9200] geneve3: entered promiscuous mode
[  137.636451][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.640670][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.644014][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.646677][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.727371][ T9198] nbd2: detected capacity change from 0 to 63
[  137.732121][ T9201] block nbd2: NBD_DISCONNECT
[  137.735243][ T9201] block nbd2: Disconnected due to user request.
[  137.739393][ T9201] block nbd2: shutting down sockets
[  137.740123][ T8908] blk_print_req_error: 27 callbacks suppressed
[  137.740137][ T8908] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.751307][ T8908] buffer_io_error: 27 callbacks suppressed
[  137.751320][ T8908] Buffer I/O error on dev nbd2, logical block 2, async page read
[  137.758263][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.761148][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  137.763854][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.766921][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  137.769950][   T60] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.774121][   T60] Buffer I/O error on dev nbd2, logical block 3, async page read
[  137.778310][ T8908] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.782011][ T8908] Buffer I/O error on dev nbd2, logical block 0, async page read
[  137.785040][ T8908] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.790136][ T8908] Buffer I/O error on dev nbd2, logical block 1, async page read
[  137.793384][ T8908] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.798358][ T8908] Buffer I/O error on dev nbd2, logical block 2, async page read
[  137.803500][ T8908] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.810122][ T8908] Buffer I/O error on dev nbd2, logical block 3, async page read
[  137.816488][ T8908] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.820866][ T8908] Buffer I/O error on dev nbd2, logical block 0, async page read
[  137.824296][ T8908] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  137.828292][ T8908] Buffer I/O error on dev nbd2, logical block 1, async page read
[  137.834720][ T8908] ldm_validate_partition_table(): Disk read failed.
[  137.838110][ T8908] Dev nbd2: unable to read RDB block 0
[  137.840807][ T8908]  nbd2: unable to read partition table
[  137.859175][ T8908] ldm_validate_partition_table(): Disk read failed.
[  137.864021][ T8908] Dev nbd2: unable to read RDB block 0
[  137.870816][ T8908]  nbd2: unable to read partition table
[  138.139286][ T9236] batadv0: entered promiscuous mode
[  138.368297][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  138.506483][ T9279] batadv_slave_1: entered promiscuous mode
[  138.525661][ T9278] batadv_slave_1: left promiscuous mode
[  138.584155][   T51] IPVS: starting estimator thread 0...
[  138.667624][ T9286] IPVS: using max 37 ests per chain, 88800 per kthread
[  138.805111][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.808163][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.830715][ T9297] openvswitch: netlink: Message has 8 unknown bytes.
[  139.092203][ T9320] netlink: 'syz.2.914': attribute type 1 has an invalid length.
[  139.150943][ T9327] netlink: 'syz.0.916': attribute type 4 has an invalid length.
[  139.231934][ T9340] trusted_key: syz.0.920 sent an empty control message without MSG_MORE.
[  139.289614][ T5894] hid-generic 0005:16C0:5502.0002: item fetching failed at offset 0/3
[  139.295049][ T5894] hid-generic 0005:16C0:5502.0002: probe with driver hid-generic failed with error -22
[  139.384976][ T9351] syzkaller1: entered promiscuous mode
[  139.387079][ T9351] syzkaller1: entered allmulticast mode
[  139.957679][ T9356] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  139.963533][ T9356] nbd: error processing sock list
[  139.965286][ T9356] block nbd2: shutting down sockets
[  139.974292][ T9364] netlink: 'syz.2.927': attribute type 11 has an invalid length.
[  139.978536][ T9364] __nla_validate_parse: 36 callbacks suppressed
[  139.978544][ T9364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.927'.
[  139.988586][ T9372] veth0: entered promiscuous mode
[  140.116942][ T9378] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  140.203002][ T9395] ..1: left allmulticast mode
[  140.213657][ T9395] hsr_slave_0: left allmulticast mode
[  140.216418][ T9395] hsr_slave_1: left allmulticast mode
[  140.269392][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.276431][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.285702][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.293854][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.336016][ T9408] netlink: 68 bytes leftover after parsing attributes in process `syz.2.933'.
[  140.513702][ T9368] veth0: left promiscuous mode
[  140.595566][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'.
[  140.629531][ T9432] netlink: 'syz.1.939': attribute type 2 has an invalid length.
[  140.632752][ T9432] netlink: 244 bytes leftover after parsing attributes in process `syz.1.939'.
[  140.710613][ T9435] lo speed is unknown, defaulting to 1000
[  140.726991][ T9435] lo speed is unknown, defaulting to 1000
[  141.006006][ T9453] netlink: 'syz.0.947': attribute type 7 has an invalid length.
[  141.009743][ T9454] netlink: 'syz.2.949': attribute type 10 has an invalid length.
[  141.012177][ T9454] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  141.014300][ T9453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'.
[  141.031172][ T9454] netlink: 'syz.2.949': attribute type 10 has an invalid length.
[  141.034368][ T9454] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  141.055817][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'.
[  141.123326][ T9469] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  141.178045][ T9465] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  141.431043][ T9491] netlink: 'syz.0.960': attribute type 2 has an invalid length.
[  141.460812][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.470748][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.962'.
[  141.515108][ T9505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'.
[  141.535333][ T9505] bridge0: entered allmulticast mode
[  141.542686][ T9500] lo speed is unknown, defaulting to 1000
[  141.545303][ T9500] lo speed is unknown, defaulting to 1000
[  141.565609][ T9505] pim6reg: entered allmulticast mode
[  141.568784][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  141.571694][ T9505] bridge_slave_1: left allmulticast mode
[  141.573520][ T9505] bridge_slave_1: left promiscuous mode
[  141.575957][ T9505] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.580586][ T9505] bridge_slave_0: left allmulticast mode
[  141.583168][ T9505] bridge_slave_0: left promiscuous mode
[  141.585953][ T9505] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.596675][ T9505] bridge0 (unregistering): left allmulticast mode
[  141.743156][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'.
[  141.746642][ T9518] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[  141.800350][ T9518] syzkaller0: entered promiscuous mode
[  141.802126][ T9518] syzkaller0: entered allmulticast mode
[  141.906300][ T9522] syzkaller1: entered promiscuous mode
[  141.909579][ T9522] syzkaller1: entered allmulticast mode
[  142.040142][ T9535] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  142.358767][ T9546] netlink: 'syz.2.977': attribute type 11 has an invalid length.
[  142.664021][ T9555] syzkaller1: entered promiscuous mode
[  142.665885][ T9555] syzkaller1: entered allmulticast mode
[  142.951945][ T9586] syzkaller1: entered promiscuous mode
[  142.953702][ T9586] syzkaller1: entered allmulticast mode
[  143.061446][ T9595] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.148272][ T9609] pim6reg1: entered promiscuous mode
[  143.150477][ T9609] pim6reg1: entered allmulticast mode
[  143.169689][ T9604] syzkaller1: entered promiscuous mode
[  143.171495][ T9604] syzkaller1: entered allmulticast mode
[  143.487386][   T54] Bluetooth: hci1: command tx timeout
[  144.324111][ T9618] lo speed is unknown, defaulting to 1000
[  144.330035][ T9618] lo speed is unknown, defaulting to 1000
[  144.423059][ T9627] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  144.743882][ T9644] validate_nla: 3 callbacks suppressed
[  144.743894][ T9644] netlink: 'syz.0.1001': attribute type 5 has an invalid length.
[  144.923213][ T9653] syzkaller1: entered promiscuous mode
[  144.924996][ T9653] syzkaller1: entered allmulticast mode
[  145.110458][ T9656] block nbd2: shutting down sockets
[  145.301287][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.306929][ T9674] bond0: (slave rose0): Enslaving as an active interface with an up link
[  145.393454][ T9683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.399510][ T9683] syzkaller0: entered promiscuous mode
[  145.402140][ T9683] syzkaller0: entered allmulticast mode
[  145.459508][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  145.474915][ T9682] tipc: Disabling bearer <eth:syzkaller0>
[  145.844076][ T9723] __nla_validate_parse: 9 callbacks suppressed
[  145.844090][ T9723] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1021'.
[  145.961724][ T9736] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[  146.023011][ T9736] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.038817][ T9742] syzkaller1: entered promiscuous mode
[  146.040626][ T9742] syzkaller1: entered allmulticast mode
[  146.192271][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'.
[  146.399771][ T9758] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1030'.
[  146.403697][ T9758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.409196][ T9760] syz.1.1033: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  146.415989][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.1.1033 Not tainted syzkaller #0 PREEMPT(full) 
[  146.416003][ T9760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.416009][ T9760] Call Trace:
[  146.416014][ T9760]  <TASK>
[  146.416019][ T9760]  dump_stack_lvl+0x189/0x250
[  146.416037][ T9760]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.416047][ T9760]  ? __pfx__printk+0x10/0x10
[  146.416059][ T9760]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.416070][ T9760]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  146.416081][ T9760]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  146.416091][ T9760]  warn_alloc+0x214/0x310
[  146.416106][ T9760]  ? stack_depot_save_flags+0x40/0x860
[  146.416122][ T9760]  ? __pfx_warn_alloc+0x10/0x10
[  146.416135][ T9760]  ? kasan_save_track+0x4f/0x80
[  146.416148][ T9760]  ? xskq_create+0x56/0x170
[  146.416156][ T9760]  ? xsk_init_queue+0xb0/0x110
[  146.416163][ T9760]  ? xsk_setsockopt+0x4dc/0x8d0
[  146.416174][ T9760]  ? do_sock_setsockopt+0x17c/0x1b0
[  146.416185][ T9760]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  146.416193][ T9760]  ? do_syscall_64+0xfa/0x3b0
[  146.416202][ T9760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.416219][ T9760]  __vmalloc_node_range_noprof+0x125/0x12f0
[  146.416246][ T9760]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  146.416261][ T9760]  ? __kasan_kmalloc+0x93/0xb0
[  146.416273][ T9760]  vmalloc_user_noprof+0xad/0xf0
[  146.416288][ T9760]  ? xskq_create+0xbf/0x170
[  146.416296][ T9760]  xskq_create+0xbf/0x170
[  146.416305][ T9760]  xsk_init_queue+0xb0/0x110
[  146.416314][ T9760]  xsk_setsockopt+0x4dc/0x8d0
[  146.416327][ T9760]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.416339][ T9760]  ? __pfx_aa_sk_perm+0x10/0x10
[  146.416354][ T9760]  ? aa_sock_opt_perm+0xff/0x1b0
[  146.416364][ T9760]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  146.416373][ T9760]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.416386][ T9760]  do_sock_setsockopt+0x17c/0x1b0
[  146.416398][ T9760]  __x64_sys_setsockopt+0x13f/0x1b0
[  146.416410][ T9760]  do_syscall_64+0xfa/0x3b0
[  146.416419][ T9760]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.416428][ T9760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.416437][ T9760]  ? exc_page_fault+0x9f/0xf0
[  146.416446][ T9760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.416454][ T9760] RIP: 0033:0x7f0b1df8ec29
[  146.416464][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.416472][ T9760] RSP: 002b:00007f0b1ee18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  146.416482][ T9760] RAX: ffffffffffffffda RBX: 00007f0b1e1d5fa0 RCX: 00007f0b1df8ec29
[  146.416488][ T9760] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  146.416492][ T9760] RBP: 00007f0b1e011e41 R08: 0000000000000004 R09: 0000000000000000
[  146.416497][ T9760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.416502][ T9760] R13: 00007f0b1e1d6038 R14: 00007f0b1e1d5fa0 R15: 00007ffd44805268
[  146.416515][ T9760]  </TASK>
[  146.416518][ T9760] Mem-Info:
[  146.530254][ T9760] active_anon:1364 inactive_anon:1746 isolated_anon:0
[  146.530254][ T9760]  active_file:3129 inactive_file:326 isolated_file:0
[  146.530254][ T9760]  unevictable:1768 dirty:216 writeback:0
[  146.530254][ T9760]  slab_reclaimable:5254 slab_unreclaimable:93814
[  146.530254][ T9760]  mapped:17162 shmem:2128 pagetables:1015
[  146.530254][ T9760]  sec_pagetables:0 bounce:0
[  146.530254][ T9760]  kernel_misc_reclaimable:0
[  146.530254][ T9760]  free:293932 free_pcp:19701 free_cma:0
[  146.572130][ T9760] Node 0 active_anon:2752kB inactive_anon:6956kB active_file:9296kB inactive_file:812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34824kB dirty:748kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8676kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.583483][ T9760] Node 1 active_anon:2704kB inactive_anon:28kB active_file:3220kB inactive_file:492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33824kB dirty:116kB writeback:0kB shmem:3552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4316kB pagetables:1592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  146.607501][ T9760] Node 0 DMA free:15000kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:0kB free_cma:0kB
[  146.616451][ T9760] lowmem_reserve[]: 0 811 811 811 811
[  146.628325][ T9760] Node 0 DMA32 free:413212kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2752kB inactive_anon:6956kB active_file:9296kB inactive_file:812kB unevictable:3536kB writepending:748kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:36264kB local_pcp:23132kB free_cma:0kB
[  146.640074][ T9760] lowmem_reserve[]: 0 0 0 0 0
[  146.641609][ T9760] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:4096KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  146.651440][ T9760] lowmem_reserve[]: 0 0 854 854 854
[  146.653121][ T9760] Node 1 Normal free:289256kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:4096KB free_highatomic:4096KB active_anon:2704kB inactive_anon:28kB active_file:3220kB inactive_file:492kB unevictable:3536kB writepending:116kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41732kB local_pcp:19920kB free_cma:0kB
[  146.663496][ T9760] lowmem_reserve[]: 0 0 0 0 0
[  146.664980][ T9760] Node 0 DMA: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 3*4096kB (U) = 15000kB
[  146.670063][ T9760] Node 0 DMA32: 1240*4kB (UME) 533*8kB (UME) 40*16kB (UME) 300*32kB (UME) 26*64kB (UME) 67*128kB (UME) 32*256kB (UME) 13*512kB (UME) 16*1024kB (UM) 12*2048kB (UM) 80*4096kB (UM) = 413192kB
[  146.676074][ T9760] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (UMH) = 458616kB
[  146.681665][ T9760] Node 1 Normal: 1554*4kB (UE) 420*8kB (UME) 114*16kB (UME) 309*32kB (UE) 133*64kB (UE) 25*128kB (UME) 17*256kB (UME) 10*512kB (UM) 7*1024kB (UM) 3*2048kB (UM) 57*4096kB (UH) = 289256kB
[  146.687890][ T9760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.690970][ T9760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  146.694194][ T9760] 6244 total pagecache pages
[  146.695801][ T9760] 661 pages in swap cache
[  146.702650][ T9760] Free swap  = 111232kB
[  146.704025][ T9760] Total swap = 124996kB
[  146.705350][ T9760] 786301 pages RAM
[  146.706546][ T9760] 0 pages HighMem/MovableOnly
[  146.708582][ T9760] 241346 pages reserved
[  146.709973][ T9760] 0 pages cma reserved
[  146.915314][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  146.925756][ T9787] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  146.982637][ T9792] gretap0: entered promiscuous mode
[  146.984494][ T9792] vlan2: entered promiscuous mode
[  147.079621][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  147.753136][   T54] Bluetooth: hci2: link tx timeout
[  147.756077][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.761062][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'.
[  147.762545][ T5863] Bluetooth: hci2: link tx timeout
[  147.766438][ T5863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  147.821613][ T9805] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20000
[  148.221098][ T9820] bond0: (slave bond3): Releasing backup interface
[  148.384468][ T9834] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1050'.
[  148.397369][ T9834] ..0: renamed from hsr0
[  148.400452][ T9834] ..0: entered allmulticast mode
[  148.402275][ T9834] hsr_slave_0: entered allmulticast mode
[  148.404085][ T9834] hsr_slave_1: entered allmulticast mode
[  148.408612][ T9834] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  148.491319][ T9843] netlink: 14679 bytes leftover after parsing attributes in process `syz.2.1054'.
[  148.621017][ T9849] netlink: 'syz.1.1056': attribute type 10 has an invalid length.
[  148.623689][ T9849] netlink: 5852 bytes leftover after parsing attributes in process `syz.1.1056'.
[  148.631623][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'.
[  148.855714][ T9860] siw: device registration error -23
[  149.266343][ T9867] batadv1: entered promiscuous mode
[  149.565860][ T9877] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  149.811440][ T5863] Bluetooth: hci2: command 0x0405 tx timeout
[  149.983918][ T9903] IPVS: set_ctl: invalid protocol: 76 0.0.0.0:20004
[  150.016644][ T9908] netlink: 'syz.1.1073': attribute type 3 has an invalid length.
[  150.019677][ T9908] netlink: 'syz.1.1073': attribute type 3 has an invalid length.
[  150.098604][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.102305][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.105187][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.109908][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.162395][ T9915] lo speed is unknown, defaulting to 1000
[  150.165154][ T9915] lo speed is unknown, defaulting to 1000
[  150.165390][ T9914] lo speed is unknown, defaulting to 1000
[  150.173712][ T9914] lo speed is unknown, defaulting to 1000
[  150.247921][ T9914] syzkaller1: entered promiscuous mode
[  150.250346][ T9914] syzkaller1: entered allmulticast mode
[  150.555828][ T9921] netlink: 'syz.1.1078': attribute type 12 has an invalid length.
[  150.983638][ T9955] netlink: 'syz.0.1086': attribute type 64 has an invalid length.
[  151.040573][ T9965] syzkaller1: entered promiscuous mode
[  151.042646][ T9965] syzkaller1: entered allmulticast mode
[  151.090735][ T9968] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.099801][ T9967] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  151.103411][ T9967] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  151.113453][ T9967] bond0: (slave bond_slave_0): Releasing backup interface
[  151.121673][ T9967] bond0: (slave bond_slave_1): Releasing backup interface
[  151.137007][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.147315][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.159439][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.161876][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.186979][ T9967] bond2: (slave macvlan2): Releasing backup interface
[  151.344988][ T9979] __nla_validate_parse: 4 callbacks suppressed
[  151.345000][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  152.039621][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'.
[  152.043255][ T9992] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  152.057050][ T9992] team1: entered promiscuous mode
[  152.058866][ T9992] team1: entered allmulticast mode
[  152.125953][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'.
[  152.129997][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'.
[  152.245434][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'.
[  152.270132][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1105'.
[  152.273254][T10012] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  152.288790][T10012] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check.
[  152.311017][T10013] pim6reg: entered allmulticast mode
[  152.319192][T10013] pim6reg: left allmulticast mode
[  152.424503][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'.
[  152.578031][T10029] delete_channel: no stack
[  152.580223][T10029] netlink: 'syz.0.1108': attribute type 1 has an invalid length.
[  152.583118][T10029] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1108'.
[  152.617914][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'.
[  152.740075][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1112'.
[  152.896268][T10056] netlink: 'syz.0.1115': attribute type 10 has an invalid length.
[  152.963830][T10060] ip6gre1: entered allmulticast mode
[  153.029103][T10061] netlink: 'syz.1.1116': attribute type 10 has an invalid length.
[  153.048928][T10061] bond0: (slave 0!): Releasing backup interface
[  153.079851][T10061] team0: Port device 0! added
[  153.081863][T10067] netlink: 'syz.1.1116': attribute type 10 has an invalid length.
[  153.107961][T10067] team0: Port device 0! removed
[  153.112304][T10067] bond0: (slave 0!): Enslaving as an active interface with an up link
[  153.157502][T10079] dvmrp8: entered allmulticast mode
[  153.502391][T10098] openvswitch: netlink: Multiple metadata blocks provided
[  153.840780][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.872217][T10120] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.877823][T10120] 8021q: adding VLAN 0 to HW filter on device team0
[  153.881347][T10120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.344582][T10139] ..1: renamed from ..0 (while UP)
[  154.349797][T10139] ..1: failed to rename
[  154.351424][T10139] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  155.065806][T10159] netlink: 'syz.1.1142': attribute type 2 has an invalid length.
[  155.070165][T10159] netlink: 'syz.1.1142': attribute type 5 has an invalid length.
[  155.282180][T10180] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  155.851531][T10214] Bluetooth: hci1: too big key_count value 32778
[  156.851600][T10233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.863523][T10233] netlink: 'syz.1.1164': attribute type 3 has an invalid length.
[  156.938395][T10241] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  156.963382][T10245] __nla_validate_parse: 6 callbacks suppressed
[  156.963392][T10245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1166'.
[  157.101444][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1168'.
[  157.157572][T10256] nbd: socks must be embedded in a SOCK_ITEM attr
[  157.161377][T10256] block nbd2: shutting down sockets
[  157.201077][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1172'.
[  157.317004][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1171'.
[  157.330838][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  157.541348][T10306] netlink: 'syz.0.1181': attribute type 4 has an invalid length.
[  157.563350][T10310] netlink: 'syz.1.1182': attribute type 16 has an invalid length.
[  157.566204][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'.
[  157.603538][T10307] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1181'.
[  157.606352][T10307] ..0: renamed from ..1 (while UP)
[  157.611514][T10307] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  157.631456][T10312] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  157.650645][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'.
[  157.654251][T10315] netlink: 'syz.0.1184': attribute type 10 has an invalid length.
[  157.660456][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'.
[  157.764641][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  157.943166][T10330] syzkaller1: entered promiscuous mode
[  157.945492][T10330] syzkaller1: entered allmulticast mode
[  158.169297][T10342] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  158.220280][T10344] lo speed is unknown, defaulting to 1000
[  158.224151][T10344] lo speed is unknown, defaulting to 1000
[  158.242472][T10349] netlink: 'syz.0.1193': attribute type 23 has an invalid length.
[  158.352879][T10358] netlink: 'syz.0.1196': attribute type 4 has an invalid length.
[  158.515301][ T5920] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.518875][ T5920] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.522811][ T5920] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.528140][ T5920] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  158.581277][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.584666][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.608251][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.615948][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.340306][T10418] rdma_rxe: rxe_newlink: failed to add lo
[  159.351596][T10418] netlink: 'syz.2.1214': attribute type 9 has an invalid length.
[  159.830707][T10446] syzkaller1: entered promiscuous mode
[  159.832549][T10446] syzkaller1: entered allmulticast mode
[  159.936082][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.193423][T10466] siw: device registration error -23
[  160.218365][T10466] lo speed is unknown, defaulting to 1000
[  160.353347][T10481] lo speed is unknown, defaulting to 1000
[  160.356063][T10481] lo speed is unknown, defaulting to 1000
[  160.663617][T10513] netlink: 'syz.0.1233': attribute type 21 has an invalid length.
[  160.829059][T10526] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  160.832458][T10526] team0: entered promiscuous mode
[  160.835971][T10526] 8021q: adding VLAN 0 to HW filter on device team0
[  161.146029][T10528] syzkaller1: entered promiscuous mode
[  161.149401][T10528] syzkaller1: entered allmulticast mode
[  161.743269][T10555] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20004
[  161.826299][T10560] syzkaller1: entered promiscuous mode
[  161.828995][T10560] syzkaller1: entered allmulticast mode
[  161.966186][T10575] netlink: del zone limit has 4 unknown bytes
[  161.970556][T10577] __nla_validate_parse: 26 callbacks suppressed
[  161.970567][T10577] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1256'.
[  162.142827][T10586] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1259'.
[  162.146383][T10586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.219976][ T9343] ==================================================================
[  162.223161][ T9343] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  162.226097][ T9343] Read of size 8 at addr ffff88802b0080a0 by task khidpd_16c05502/9343
[  162.230310][ T9343] 
[  162.231261][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: khidpd_16c05502 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  162.231280][ T9343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.231289][ T9343] Call Trace:
[  162.231295][ T9343]  <TASK>
[  162.231302][ T9343]  dump_stack_lvl+0x189/0x250
[  162.231322][ T9343]  ? __kasan_check_byte+0x12/0x40
[  162.231344][ T9343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.231360][ T9343]  ? lock_release+0x4b/0x3e0
[  162.231408][ T9343]  ? __virt_addr_valid+0x4a5/0x5c0
[  162.231428][ T9343]  print_report+0xca/0x240
[  162.231442][ T9343]  ? __mutex_lock+0x801/0x1350
[  162.231457][ T9343]  kasan_report+0x118/0x150
[  162.231476][ T9343]  ? __mutex_lock+0x801/0x1350
[  162.231493][ T9343]  __mutex_lock+0x801/0x1350
[  162.231508][ T9343]  ? __mutex_lock+0x5bb/0x1350
[  162.231523][ T9343]  ? l2cap_unregister_user+0x6a/0x1b0
[  162.231545][ T9343]  ? __pfx___mutex_lock+0x10/0x10
[  162.231559][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.231585][ T9343]  l2cap_unregister_user+0x6a/0x1b0
[  162.231605][ T9343]  hidp_session_thread+0x3c9/0x410
[  162.231625][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.231644][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.231664][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.231686][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.231705][ T9343]  ? __kthread_parkme+0x7b/0x200
[  162.231719][ T9343]  ? __kthread_parkme+0x1a1/0x200
[  162.231735][ T9343]  kthread+0x711/0x8a0
[  162.231752][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.231770][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.231786][ T9343]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.231812][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.231827][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.231843][ T9343]  ret_from_fork+0x439/0x7d0
[  162.231857][ T9343]  ? __pfx_ret_from_fork+0x10/0x10
[  162.231872][ T9343]  ? __switch_to_asm+0x39/0x70
[  162.231888][ T9343]  ? __switch_to_asm+0x33/0x70
[  162.231904][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.231919][ T9343]  ret_from_fork_asm+0x1a/0x30
[  162.231942][ T9343]  </TASK>
[  162.231948][ T9343] 
[  162.310576][ T9343] Allocated by task 5860:
[  162.312243][ T9343]  kasan_save_track+0x3e/0x80
[  162.314107][ T9343]  __kasan_kmalloc+0x93/0xb0
[  162.315918][ T9343]  __kmalloc_noprof+0x27a/0x4f0
[  162.317812][ T9343]  hci_alloc_dev_priv+0x28/0x2060
[  162.319749][ T9343]  vhci_create_device+0x120/0x650
[  162.321709][ T9343]  vhci_write+0x3ce/0x4a0
[  162.323424][ T9343]  vfs_write+0x5c9/0xb30
[  162.325095][ T9343]  ksys_write+0x145/0x250
[  162.326838][ T9343]  do_syscall_64+0xfa/0x3b0
[  162.328624][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.330909][ T9343] 
[  162.331855][ T9343] Freed by task 5860:
[  162.333429][ T9343]  kasan_save_track+0x3e/0x80
[  162.335251][ T9343]  kasan_save_free_info+0x46/0x50
[  162.337219][ T9343]  __kasan_slab_free+0x5b/0x80
[  162.339105][ T9343]  kfree+0x18e/0x440
[  162.340698][ T9343]  bt_host_release+0x82/0x90
[  162.342559][ T9343]  device_release+0x9c/0x1c0
[  162.344390][ T9343]  kobject_put+0x22b/0x480
[  162.346164][ T9343]  vhci_release+0x15a/0x1a0
[  162.347948][ T9343]  __fput+0x44c/0xa70
[  162.349505][ T9343]  task_work_run+0x1d4/0x260
[  162.351300][ T9343]  do_exit+0x6b5/0x2300
[  162.352965][ T9343]  do_group_exit+0x21c/0x2d0
[  162.354802][ T9343]  __x64_sys_exit_group+0x3f/0x40
[  162.356775][ T9343]  x64_sys_call+0x21f7/0x2200
[  162.358651][ T9343]  do_syscall_64+0xfa/0x3b0
[  162.360417][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.362710][ T9343] 
[  162.363653][ T9343] Last potentially related work creation:
[  162.365882][ T9343]  kasan_save_stack+0x3e/0x60
[  162.367735][ T9343]  kasan_record_aux_stack+0xbd/0xd0
[  162.369786][ T9343]  insert_work+0x3d/0x330
[  162.371521][ T9343]  __queue_work+0xbaf/0xfb0
[  162.373279][ T9343]  queue_work_on+0x181/0x270
[  162.375130][ T9343]  process_scheduled_works+0xae1/0x17b0
[  162.377298][ T9343]  worker_thread+0x8a0/0xda0
[  162.379162][ T9343]  kthread+0x711/0x8a0
[  162.380800][ T9343]  ret_from_fork+0x439/0x7d0
[  162.382615][ T9343]  ret_from_fork_asm+0x1a/0x30
[  162.384594][ T9343] 
[  162.385637][ T9343] Second to last potentially related work creation:
[  162.388160][ T9343]  kasan_save_stack+0x3e/0x60
[  162.390000][ T9343]  kasan_record_aux_stack+0xbd/0xd0
[  162.392012][ T9343]  insert_work+0x3d/0x330
[  162.393688][ T9343]  __queue_work+0xcd2/0xfb0
[  162.395435][ T9343]  call_timer_fn+0x17e/0x5f0
[  162.397220][ T9343]  __run_timer_base+0x646/0x860
[  162.399101][ T9343]  run_timer_softirq+0xb7/0x180
[  162.400979][ T9343]  handle_softirqs+0x286/0x870
[  162.402847][ T9343]  __irq_exit_rcu+0xca/0x1f0
[  162.404614][ T9343]  irq_exit_rcu+0x9/0x30
[  162.406257][ T9343]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  162.408492][ T9343]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  162.410779][ T9343] 
[  162.411738][ T9343] The buggy address belongs to the object at ffff88802b008000
[  162.411738][ T9343]  which belongs to the cache kmalloc-8k of size 8192
[  162.416958][ T9343] The buggy address is located 160 bytes inside of
[  162.416958][ T9343]  freed 8192-byte region [ffff88802b008000, ffff88802b00a000)
[  162.422216][ T9343] 
[  162.423156][ T9343] The buggy address belongs to the physical page:
[  162.425645][ T9343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b008
[  162.428980][ T9343] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  162.432267][ T9343] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  162.435194][ T9343] page_type: f5(slab)
[  162.436772][ T9343] raw: 00fff00000000040 ffff88801a442280 ffffea0000ab2a00 0000000000000004
[  162.440140][ T9343] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  162.443464][ T9343] head: 00fff00000000040 ffff88801a442280 ffffea0000ab2a00 0000000000000004
[  162.446842][ T9343] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  162.449563][ T9343] head: 00fff00000000003 ffffea0000ac0201 00000000ffffffff 00000000ffffffff
[  162.452283][ T9343] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  162.454982][ T9343] page dumped because: kasan: bad access detected
[  162.456931][ T9343] page_owner tracks the page as allocated
[  162.458719][ T9343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5590, tgid 5590 (dhcpcd), ts 38614406782, free_ts 34428241935
[  162.465844][ T9343]  post_alloc_hook+0x240/0x2a0
[  162.467680][ T9343]  get_page_from_freelist+0x21e4/0x22c0
[  162.469848][ T9343]  __alloc_frozen_pages_noprof+0x181/0x370
[  162.472101][ T9343]  alloc_pages_mpol+0x232/0x4a0
[  162.473971][ T9343]  allocate_slab+0x8a/0x370
[  162.475789][ T9343]  ___slab_alloc+0xbeb/0x1420
[  162.477689][ T9343]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  162.480097][ T9343]  kmalloc_reserve+0x136/0x290
[  162.481906][ T9343]  __alloc_skb+0x142/0x2d0
[  162.483230][ T9343]  netlink_dump+0x167/0xe90
[  162.484588][ T9343]  netlink_recvmsg+0x676/0xa30
[  162.486026][ T9343]  sock_recvmsg+0x22c/0x270
[  162.487371][ T9343]  ____sys_recvmsg+0x1c9/0x460
[  162.488791][ T9343]  ___sys_recvmsg+0x1b5/0x510
[  162.490235][ T9343]  __x64_sys_recvmsg+0x198/0x260
[  162.491992][ T9343]  do_syscall_64+0xfa/0x3b0
[  162.493351][ T9343] page last free pid 5299 tgid 5299 stack trace:
[  162.495229][ T9343]  __free_frozen_pages+0xbc4/0xd30
[  162.496991][ T9343]  __put_partials+0x156/0x1a0
[  162.498560][ T9343]  put_cpu_partial+0x17c/0x250
[  162.500150][ T9343]  __slab_free+0x2d5/0x3c0
[  162.501539][ T9343]  qlist_free_all+0x97/0x140
[  162.502938][ T9343]  kasan_quarantine_reduce+0x148/0x160
[  162.504522][ T9343]  __kasan_slab_alloc+0x22/0x80
[  162.506027][ T9343]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  162.507700][ T9343]  getname_flags+0xb8/0x540
[  162.509067][ T9343]  do_readlinkat+0xbc/0x500
[  162.510427][ T9343]  __x64_sys_readlink+0x7f/0x90
[  162.512017][ T9343]  do_syscall_64+0xfa/0x3b0
[  162.513643][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.515451][ T9343] 
[  162.516177][ T9343] Memory state around the buggy address:
[  162.517962][ T9343]  ffff88802b007f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  162.520899][ T9343]  ffff88802b008000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.523504][ T9343] >ffff88802b008080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.525965][ T9343]                                ^
[  162.527568][ T9343]  ffff88802b008100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.530067][ T9343]  ffff88802b008180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.532958][ T9343] ==================================================================
[  162.536425][ T9343] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  162.538705][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: khidpd_16c05502 Not tainted syzkaller #0 PREEMPT(full) 
[  162.542336][ T9343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.545443][ T9343] Call Trace:
[  162.546534][ T9343]  <TASK>
[  162.547459][ T9343]  dump_stack_lvl+0x99/0x250
[  162.548964][ T9343]  ? __asan_memcpy+0x40/0x70
[  162.550370][ T9343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.552030][ T9343]  ? __pfx__printk+0x10/0x10
[  162.553460][ T9343]  vpanic+0x281/0x750
[  162.554689][ T9343]  ? __pfx_vpanic+0x10/0x10
[  162.556093][ T9343]  ? irqentry_exit+0x74/0x90
[  162.557574][ T9343]  panic+0xb9/0xc0
[  162.558810][ T9343]  ? __pfx_panic+0x10/0x10
[  162.560569][ T9343]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  162.562888][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.565224][ T9343]  ? __mutex_lock+0x801/0x1350
[  162.567145][ T9343]  check_panic_on_warn+0x89/0xb0
[  162.568917][ T9343]  ? __mutex_lock+0x801/0x1350
[  162.570461][ T9343]  end_report+0x78/0x160
[  162.571832][ T9343]  kasan_report+0x129/0x150
[  162.573306][ T9343]  ? __mutex_lock+0x801/0x1350
[  162.574884][ T9343]  __mutex_lock+0x801/0x1350
[  162.576377][ T9343]  ? __mutex_lock+0x5bb/0x1350
[  162.577920][ T9343]  ? l2cap_unregister_user+0x6a/0x1b0
[  162.579933][ T9343]  ? __pfx___mutex_lock+0x10/0x10
[  162.581830][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.583672][ T9343]  l2cap_unregister_user+0x6a/0x1b0
[  162.585275][ T9343]  hidp_session_thread+0x3c9/0x410
[  162.586876][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.588655][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.590515][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.592431][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  162.594331][ T9343]  ? __kthread_parkme+0x7b/0x200
[  162.595886][ T9343]  ? __kthread_parkme+0x1a1/0x200
[  162.597452][ T9343]  kthread+0x711/0x8a0
[  162.598696][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  162.600884][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.602446][ T9343]  ? _raw_spin_unlock_irq+0x23/0x50
[  162.603984][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.605547][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.607010][ T9343]  ret_from_fork+0x439/0x7d0
[  162.608527][ T9343]  ? __pfx_ret_from_fork+0x10/0x10
[  162.610255][ T9343]  ? __switch_to_asm+0x39/0x70
[  162.611866][ T9343]  ? __switch_to_asm+0x33/0x70
[  162.613371][ T9343]  ? __pfx_kthread+0x10/0x10
[  162.614917][ T9343]  ret_from_fork_asm+0x1a/0x30
[  162.616459][ T9343]  </TASK>
[  162.618050][ T9343] Kernel Offset: disabled
[  162.619634][ T9343] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:50:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043bf370
R8 =ffff888106558237 R9 =1ffff11020cab046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b00904 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000d038 CR3=00000001120b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=437c1682a6b3857b bd9736aefca394fe
XMM02=a3e958ec7548d7ca ddeb405a1137f1db XMM03=6797079fe9f92d97 0dcf78a002adb9dd
XMM04=584eebf503783364 ac555f47ce694f73 XMM05=fd82be296ca6c817 58c31d06c50d64eb
XMM06=470d37fae38fd9f4 42584eebf5037833 XMM07=64ac555f47ce694f 736797079fe9f92d
XMM08=970dcf78a002adb9 dda3e958ec7548d7 XMM09=0000000000000000 00007f475a812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007740000 RBX=1ffff11003fd425a RCX=000000000000009d RDX=ffff88801fea12d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001b78a8 RSP=ffffc900001b7700
R8 =ffff88801fea16bf R9 =1ffff11003fd42d7 R10=dffffc0000000000 R11=ffffed1003fd42d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff869911fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005623487df210 CR3=000000010fa8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000097 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00000000000000e1 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
