last executing test programs:

17.291919283s ago: executing program 0 (id=3919):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket(0x22, 0x803, 0x0)
bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc)
listen(r0, 0x8)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendmmsg$inet6(r2, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="ccf2e54a", 0x4}], 0x1}}], 0x1, 0x51)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x339, '\x00', 0x0, r3, 0x5, 0x2, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
recvmmsg(r7, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40008000, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
close(r4)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63e"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000011b900000000000000000000000a00400000000000", @ANYRESHEX=r4, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b00"/112], 0xb8}}, 0x0)

17.23304758s ago: executing program 0 (id=3923):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
recvmsg(r0, &(0x7f0000000240)={&(0x7f00000003c0), 0x80, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x8, &(0x7f00000009c0)=""/183, 0xb7}, 0x100)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c", @ANYRES16=r4, @ANYRES16=r3], 0x21c}}, 0x0)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r3, &(0x7f00000006c0)=r6, 0x12)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

16.751669515s ago: executing program 1 (id=3933):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001c00ff01000006001d"], 0x2c}}, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f0000000040)=""/46, 0x2e}], 0x3, &(0x7f0000000c80)=""/224, 0xe0}, 0x1578}, {{&(0x7f0000000d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000f80)=""/25, 0x19}], 0x1, &(0x7f0000000e40)=""/181, 0xb5}, 0x8}], 0x2, 0x20, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff22, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x11c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x0, 0x2b}, @in6=@private0, {0x0, 0x3, 0x2, 0x0, 0x10000000}, {0x0, 0xa00000, 0x7}, {0x40000, 0xfffffffd, 0xfffff7ff}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@extra_flags={0x8, 0x18, 0x7}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x11c}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002010000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
unshare(0x400)
bind$inet(r7, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x14)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x14, 0x33, 0x107, 0xfffffffc, 0x25dfdbfe, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)
sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r11, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)='(', 0x1}, {&(0x7f00000010c0)="af26d434045c1a0b300ee58b6a63255023b801d6ec5dcf23a18aa64d46e623478c7776caf8139cf4273bdc68e3f8babbf3d2c1d5d9105a64e7df26a6c9070e4b9a1e3a48f256202dcf79a911dc3d8404cd86edc2abbbae25f0cc46b18f7bd81f161d9114e0368efe156d05277766d2574b494e62e27470a0eb1abe874247c4933cc5cc5827cfa173f61df49c2a9a06bf1e5a35e46d1eea5f4c8e3059728cb4f5b1f25b43a1c1dce9350f25efa44afbff318acf10b8958abcdb247a34b820", 0xbe}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES64, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6359e8d50)

16.34345005s ago: executing program 0 (id=3937):
socketpair(0x9, 0x80000, 0x101, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0xb0, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24048480}, 0x20040080)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d00000004000800000000000000183f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000001c0), 0x0}, 0x20)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x194, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b2a}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7126}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5565}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff19d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1428}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x194}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0)
getpeername$packet(r0, &(0x7f0000000340), &(0x7f0000000400)=0x14)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

16.193653535s ago: executing program 2 (id=3940):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000)
r2 = accept4(r0, 0x0, 0x0, 0x80000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) (async)
sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="19", 0x3, 0x0, 0x81}, 0x50) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r8, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) (async)
sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b398bc15b", 0x78}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e6716bb1d646bcca45485a11272d312c6bb1b36aea56f0e24830676bf6b733175cfcf1b19dd6a7a85f523f8e348f9128a4ef48f560a8e0a1b9ff73a04699e6645f0f670b25e3ae799f7a2ee4fd95e80e00189dc7d93e1e4cca9c8ce4ca7ee203c3155b3623ee24e995dd42e67d22f5eb7f766567a247a0f981782f525b126919b9b0adeadff07f29ce8c874", 0xe3}, {&(0x7f0000000640)="1dcbc85af9feec85cdaa90a1f6bb5eca3475c705496a92d182147efa66cf148382493989558a401839427396285c136c7fb1ebd274e08452a219d6f628ebb9408650139466606c4c0b1a2bfeff287f23d5151bdeb54e8d21e2d1916360a117fbcbcf6cfa61c24dde9f441b300f4e4d66698caa882bf762bfa566e76cbf8e4bd1ed199dacf2367d50ec09216127e9e5f168fb85d01333cba55a89ad021e0c79d79b9ccb75fb50059fcd959664abb5600ac38d", 0xb2}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x80}, 0x4004080)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90)

16.113362677s ago: executing program 2 (id=3941):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
getsockname$l2tp(r1, 0x0, &(0x7f0000000280))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5a}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x40014)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r10=>0x0})
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x40)
sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r6)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

15.890879859s ago: executing program 1 (id=3942):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @local, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000120010000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a1c00040002"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

15.888998303s ago: executing program 1 (id=3943):
r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={<r1=>0x0, 0xac}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x3, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={<r8=>r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20) (async)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080) (async)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080) (async)
sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

15.634073336s ago: executing program 1 (id=3944):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000440)=""/181, &(0x7f0000000040)=0xb5)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140)=0x101, &(0x7f0000000180)=0x4)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) (async)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67c59d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58d567754734be31d750351dc002eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a37cae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0)
getpeername$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) (async)
getpeername$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240), 0x4)
socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10)
unshare(0x22020600) (async)
unshare(0x22020600)
r5 = socket(0x10, 0x3, 0x0)
recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4000080)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000040)="09000000010000", 0x7) (async)
write(r11, &(0x7f0000000040)="09000000010000", 0x7)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30d) (async)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x30d)

15.633086025s ago: executing program 0 (id=3945):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14030300000000002c0012800b00010062726964676500001c000280050017000000000008001b0001000100050018000000000048ffecb41396ebdb4f6b546b159d97da7f67bc5efe77915a4e7e26c434053396a37c71ef520edb769a67c68bc9926eabb72fd5b9f63b111df9644b15f00dcd"], 0x4c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14030300000000002c0012800b00010062726964676500001c000280050017000000000008001b0001000100050018000000000048ffecb41396ebdb4f6b546b159d97da7f67bc5efe77915a4e7e26c434053396a37c71ef520edb769a67c68bc9926eabb72fd5b9f63b111df9644b15f00dcd"], 0x4c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) (async)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)
r2 = socket$kcm(0x10, 0xa, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000003080)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "55d759", 0x48, 0x0, 0xff, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0x2, 0x0, 0x8}}]}, @hopopts={0x1}, @srh={0x21, 0x2, 0x4, 0x1, 0xab, 0x10, 0x52, [@local]}]}}}}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000010601"], 0x58}}, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0xa48, 0x2c, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0xe, 0xa}, {0x7, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x1b4, 0x2, [@TCA_U32_ACT={0x198, 0x7, [@m_tunnel_key={0x114, 0x19, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4067, 0x10001, 0x7, 0x3ff, 0xfffffffa}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}]}, {0x7a, 0x6, "a5ff2b62ccb6580eede7cf2949d322fbe5a91cdbad7d73a0d144e93cc6bae9fd53fb1cc7cb9e6e5efb9cb954e93b44ac8a0e2ad08b202f9b79e93e80b5af3dd9163b639d41e3a191381b5e414f0ad13ee5657a3fcf13c06f9c619ef9dfb77a93a342aef757b6a0637fe4007beb6da3676a71becd7edb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x80, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x6, 0x2, 0x93b9, 0x2}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x6, 0x0, 0x3, 0x200}, 0xa}}]}, {0x1c, 0x6, "dec45df0e270e06e9f0210b8ba3df2b665f6defbf87de662"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x80000001}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x7}}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x5}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x60}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3204, 0x8, 0x7b, 0x5, 0x8, 0x9, 0xe6, 0x0, 0x24a, 0x5a9b, 0x3ff, 0x3ff, 0x7ff, 0x1893, 0x5, 0x3, 0x8332, 0x4, 0x7, 0x7f, 0x5, 0xfff, 0x1000, 0x80000000, 0x7, 0x6, 0x9, 0x3aad1a03, 0x22, 0x8, 0xc673, 0x2, 0x6, 0x4, 0x1, 0x8, 0x69c3, 0xffffc09d, 0x7, 0x2, 0x10000, 0x6, 0x1, 0x0, 0x2, 0xa, 0xb62, 0x7, 0x139, 0x2, 0x4, 0x1000, 0x101, 0x0, 0x2, 0xa690, 0x6, 0x9, 0xfb, 0x2, 0x5, 0x9, 0x9, 0xfffffff9, 0x70ea, 0x1236, 0x26b, 0x6, 0x8001, 0x6, 0x8, 0x401, 0xaea, 0x1, 0x8, 0x80000001, 0x8, 0xedc7, 0x9fe8, 0x7, 0x400, 0x100, 0x6, 0x1, 0x92, 0x6, 0x86, 0x7, 0x9, 0x4, 0x5, 0x100, 0x6, 0x2, 0x40, 0x6a, 0x1, 0xd85, 0x6, 0x80000001, 0x2, 0x2, 0x1, 0x5, 0x401, 0x0, 0xd8, 0x100, 0x0, 0x1, 0x8, 0x7fff, 0x7fff, 0x2, 0x88d, 0x9, 0x7, 0x4, 0x7, 0xff, 0x2, 0x2, 0x9, 0x400, 0x9, 0x8, 0x9, 0x1, 0x5, 0x6805, 0x16, 0x5, 0xffffffff, 0x1000, 0x7, 0xffff, 0x4, 0x3, 0xfffffffa, 0x7, 0x5, 0x4, 0x20, 0x8, 0x3, 0x100, 0x8, 0x5, 0x8000, 0x26, 0xc3d, 0x2, 0x6, 0x1, 0x4, 0x9, 0x66, 0x4, 0x620b, 0x1000000, 0x2, 0x9, 0x368, 0x2dc7, 0xb4, 0x8, 0x2, 0x0, 0x830, 0x0, 0x10001, 0x4, 0x7, 0x7, 0xfffffffe, 0x4, 0xed8c, 0xffffff89, 0x800, 0x7fffffff, 0x8f, 0xdf, 0x1, 0x53, 0x2, 0x3, 0x0, 0x1, 0x5, 0x4, 0x8, 0xdba9, 0x0, 0x1, 0x3, 0xfffffff7, 0x9, 0x2, 0x7fffffff, 0x7ff, 0x13b2, 0x1, 0x1, 0x4, 0xff, 0x0, 0xffff, 0xc000, 0xfff, 0x5, 0x8, 0x1, 0x9, 0x3, 0x8a55, 0x5d0, 0xffff, 0x1000, 0x5, 0x8df0, 0x3, 0x9, 0x4, 0x6, 0x3, 0x0, 0x400, 0x2, 0x2, 0xa66, 0x3, 0x100, 0xd667, 0x10000, 0x5, 0x40, 0xfffffd02, 0x101, 0x7fffffff, 0x1, 0x9, 0x9, 0x4, 0x6, 0x9, 0x8ab6, 0x2, 0x1, 0x8001, 0xfffffff7, 0x5, 0xa01, 0xe, 0x9, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x4, 0x1, 0x2, 0x0, 0x7, 0x9, 0x0, 0x1, 0xd1f, 0x80000001, 0x7a, 0x4, 0x3, 0x40a, 0x1, 0x2, 0x401, 0x3, 0xffffff2e, 0xfffffffd, 0x7fff, 0x10000, 0x38e, 0x3, 0x40, 0x80000000, 0x3, 0x2, 0x5, 0x1, 0x7ff, 0x1e96a906, 0x9a1, 0xd25e, 0x9, 0x400, 0x3, 0xffffffae, 0x1, 0x400, 0x7, 0x3, 0x8, 0x59d, 0x8, 0x0, 0x78, 0x8, 0x6180, 0x7, 0x7f, 0x8001, 0x9, 0x7, 0xeb89, 0x0, 0x800, 0x4, 0x5, 0x5, 0x3, 0x29, 0x1, 0xc98, 0x5, 0x0, 0x7, 0xc, 0x10001, 0x6, 0x80, 0x2b5, 0xa, 0x480000, 0x72d9, 0xfffffffa, 0xfffffffa, 0x5, 0x9, 0x6, 0x8, 0x0, 0xee4e, 0x3, 0x392e, 0x9, 0x0, 0x0, 0x4, 0xffffffff, 0xffff, 0x80000000, 0x3, 0x200, 0x40, 0x4, 0x3, 0x8, 0xff, 0x6, 0x3, 0xb447, 0xe1, 0xf4e, 0x4, 0x53b99e22, 0x4, 0x9, 0x8, 0x30, 0x7, 0x89d, 0x9, 0x3, 0x598, 0x100, 0x86, 0x5, 0x800, 0x3, 0x6, 0x4, 0x0, 0x4, 0x123, 0x0, 0xfffffff9, 0x101, 0x0, 0xff, 0x6, 0x25, 0x6, 0x2, 0x5, 0xb, 0x2, 0x6, 0x1, 0x2, 0xffffff80, 0x10, 0x10001, 0x4, 0x9, 0xf, 0x8, 0x414f71c2, 0xc, 0x8, 0x8, 0x6, 0xd981, 0x4, 0xe, 0x40000000, 0x3ff, 0x2, 0x5, 0x81, 0x2, 0xc3f, 0x0, 0x7, 0xf9b, 0x5, 0x0, 0x2, 0x3, 0x0, 0x9, 0xd, 0xe0, 0x4, 0x369, 0x3, 0xfffffffb, 0x8, 0x7, 0x8, 0x8, 0xfffffffa, 0x0, 0x4, 0x7, 0x0, 0x46b, 0x2, 0x0, 0x876, 0x7, 0x7, 0xc9f1, 0x8100000, 0x404, 0x5, 0xd0c, 0x0, 0x7f, 0xd, 0x5, 0xc23, 0x0, 0xfffffff1, 0x2, 0xa, 0x6, 0xd3, 0x0, 0x2, 0xa, 0x3, 0x0, 0x8, 0x1, 0x600, 0xffffff9a, 0xb7, 0x401, 0x5e6, 0x7, 0x0, 0x1, 0xe, 0x81, 0x8, 0x0, 0x10001, 0x1f, 0xa000000, 0x4, 0x7, 0x5, 0x7, 0x8, 0x8, 0x6, 0x5, 0x8, 0x401, 0xafe, 0x7, 0x7, 0x7, 0x9, 0x1, 0x7fff, 0x2, 0x9, 0x14, 0x8, 0x1, 0x1, 0xb95, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0x44}, 0x1)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1}, 0x0) (async)
recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000340)=""/210, 0xd2}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000500)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
listen(r6, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f0000000840), &(0x7f0000004880)=@udp=r6}, 0x20)
ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x14f) (async)
ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x14f)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r8, &(0x7f0000000040), 0x9) (async)
write$cgroup_type(r8, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000005200010004bd7000fcdbdf250a00000008000100", @ANYRES32=0x0, @ANYBLOB="b2f43570dc8128fc13de33140a64fc3c90df56d3b85c6f758e26e349dfc2b8692ca5bcf441c1d002916d00c14300550e72c72fb75e2f90c05612da9360745b02deab0dc5165b24278f8ae1bac39b724ac14d28836242ddd348c257be509e8264e75c7c281218917f8b48546b19b56a8d2f6f4b2651816a0502e849b1b103661723ef149098d53a42848c8de3b5cc41935e00"/158], 0x1c}}, 0x800)
sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

15.630962353s ago: executing program 1 (id=3946):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004180)={&(0x7f0000003100)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000000000000000000030000000005000000020000000600004ff6fc37000000000c03000000002e615f9b2e2e00"], 0x0, 0x44, 0x0, 0x1, 0x80000000}, 0x28)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0})
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf254a2500000800030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x8d}, 0x4000000}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="8000102e75", 0x5}, {&(0x7f0000000000)="b33461", 0x3}], 0x2, &(0x7f00000002c0)=ANY=[], 0x2}}], 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0xcc}, 0x1, 0x0, 0x0, 0x18000850}, 0x40)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r10 = accept4$llc(r7, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x80800)
bind$llc(r10, &(0x7f0000000340)={0x1a, 0x336, 0x6, 0x9, 0x4, 0x2, @broadcast}, 0x10)
ioctl$int_out(r7, 0x5460, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)

15.628652836s ago: executing program 1 (id=3947):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '+:}\xca\'*\x1c+.]6\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, ',*+$@+,\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x400c050)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x200, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1ff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eeb8b79b1379caba9ab81f70a2054e600e5270d437dcaa0ae94fb856ec983233"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xfc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fcddec5e7dfe679f5905d623a419b4ac8ff3c94783b665125b530c7f4096a239"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8e6f1139ebaab73bd5d7a4456dc03b4a69cf43b4cb8f698e1b04f3f54466aaf3"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0f6498f2c4ebfbbffd8b8ed0d2d9bd3ca1cab3c80b168ffbe82b8122d5201f98"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x27}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xaf}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bf7e7e0612ad25483fbb88758cecfb9e"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x200}, 0x1, 0x0, 0x0, 0x4050}, 0x24000010)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4008}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='scsi_dispatch_cmd_error\x00', r6, 0x0, 0x2}, 0x18)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x32, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1188e2f8}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc8}}, @call, @generic={0x9, 0x6, 0x8, 0xf, 0x80000001}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x173e772b654b6712, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x4, 0x3c85, 0x3}, 0x10, 0x9b0b, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000009c0)=[{0x3, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x1, 0x8}], 0x10, 0x2c4}, 0x94)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x0, @private}, &(0x7f0000000b00)=0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r2)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
pipe(&(0x7f0000000c80)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg$can_j1939(r10, &(0x7f0000000e80)={&(0x7f0000000cc0)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/252, 0xfc}], 0x1}, 0x2)
write$tun(r10, &(0x7f0000000ec0)={@val={0x0, 0x8917}, @val={0x2, 0x87, 0x4, 0x80, 0xac07, 0xec}, @x25={0x2, 0x0, 0x0, "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"}}, 0x10c)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair(0x1e, 0x6, 0x9, &(0x7f0000001000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000001080), r11)
sendmsg$FOU_CMD_DEL(r12, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r13, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r12)
sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r14, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001300)={'wpan4\x00', <r15=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000001580))
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000001600)={0x7ff, 0x97})

15.627784716s ago: executing program 0 (id=3948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async)
listen(r2, 0x0) (async)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async)
sendmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b40)="1b", 0x1}], 0x1}}], 0x1, 0x24008080) (async)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async)
ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000000))
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
close(r3)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x4e20, 0x0, 0x0, 0xeadc, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x6c}, @in=@broadcast, {0x5, 0x1, 0x10, 0x0, 0x0, 0x2000000000000}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xc, 0x0, 0x4}, 0x5, 0x5}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xe}}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x24000086)

15.626677148s ago: executing program 0 (id=3949):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xb19366062a5e1df1, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x65b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003080)=ANY=[@ANYBLOB="500000000003cd6e877ddfce9aab558d80457c5c6e6abdedf18d78d472457dc8cd8b53d9baa6404f4432536777d0b80c83ae548d5ecd2c3811d734f001bd2b7a15d7350d6e09a37eba4800bb748841585e6d824758a09b460d52a96ad1a1831f3e9b208e2ef5a465d699a5e849036848cd530b3e2234f65166dc430e2cc06aec899f47a96d454814b93c92fd0f", @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa14001f00fe8000000000000000000000000000bb"], 0x50}}, 0x24000811)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf6662000000080009000000000008000600fbffffff280001800800030001009c000014000200776c616e310000000000000000000000080003000000000008000800080000003c0001800800030003000000080001", @ANYRES32=r6, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468305f746f5f626f6e64000000"], 0x90}, 0x1, 0x0, 0x0, 0x814}, 0x20000050)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003600)={0x46d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}, {}, {}, {<r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x8, "a99bb6c0a1dba8"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000e40)={0x700, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r16=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x1, "7db13bf71a113c"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r17 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r17, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r17, 0x1)
getsockopt$bt_hci(r17, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MEDIA_SET(r18, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r20, @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001e40)={{r16, 0x0, 0xffffffff9765899a, 0x3, 0x3, 0x1, 0x6, 0x9, 0x7, 0x5, 0x6, 0x7, 0x5, 0x71, 0x8}})
r21 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cfdc0a0e202", @ANYRES32=0x0, @ANYBLOB="0000d20b"], 0x1c}}, 0x0)

15.625710238s ago: executing program 2 (id=3950):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0xff36)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f00000000c0)=0xb)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000000000000000000000000012001000000002000000000000000000100006c00"/64, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

15.584642191s ago: executing program 2 (id=3951):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040) (async)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000f182000000000000020000003b3a4a62c01e49f1fa0e3fafd74d4abed7f3128bad1752524768668b03ff726e05c70eb6af2a02b183b8c09dc2ea53e3152cda6b", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="040100001a8007000000000000000000fe800000000000000000e0000002000000000080000000000000ffff000000000000000000000200000093782929000e5bd5e0ca208da266944e54fb583f47000000000000", @ANYRES32=0x0, @ANYRESOCT=r6, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) (async)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r8 = accept$ax25(r6, &(0x7f0000000c80)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f0000000440)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$AUDIT_USER_TTY(r10, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040) (async)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r11, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0)

15.44325822s ago: executing program 2 (id=3952):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_ORIG={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000020000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000000000005ccd790857978014542854d14ec5567042084d56cd8336bc4ef72663a34380854a05d5a33772d9a4e525f8b4a5ade174ee6d7fe7c42ffcf9796d0c9eb3829ccef16eff89e3c860a33938b7cd7919d689bce29cdcd32dbef5076bbbc9985e998052f55752819b1a8cdf2bd77f45833d38b07023a23986ad9fc2a07d35badfb22b553734503323ff", @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000f0000000000000403"], 0xfc}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r5, &(0x7f0000000980)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396c24005ef9b454e67833", 0x2c, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_ORIG={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000020000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000000000005ccd790857978014542854d14ec5567042084d56cd8336bc4ef72663a34380854a05d5a33772d9a4e525f8b4a5ade174ee6d7fe7c42ffcf9796d0c9eb3829ccef16eff89e3c860a33938b7cd7919d689bce29cdcd32dbef5076bbbc9985e998052f55752819b1a8cdf2bd77f45833d38b07023a23986ad9fc2a07d35badfb22b553734503323ff", @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000f0000000000000403"], 0xfc}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r5, &(0x7f0000000980)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396c24005ef9b454e67833", 0x2c, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async)

15.442971494s ago: executing program 2 (id=3953):
r0 = socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x8, 0x17, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x7, 0x9, 0x150, 0x0, "274b58763a9a7fdf777df6bbb5180020ddd9051cde4d3153b37f884bcac0b81455b4dcb446a735cbcea3"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3ff}, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0xb8}, 0x1, 0x7}, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)=""/11, &(0x7f0000000080)=0xb)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4)

41.937584ms ago: executing program 32 (id=3949):
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xb19366062a5e1df1, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x65b)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003080)=ANY=[@ANYBLOB="500000000003cd6e877ddfce9aab558d80457c5c6e6abdedf18d78d472457dc8cd8b53d9baa6404f4432536777d0b80c83ae548d5ecd2c3811d734f001bd2b7a15d7350d6e09a37eba4800bb748841585e6d824758a09b460d52a96ad1a1831f3e9b208e2ef5a465d699a5e849036848cd530b3e2234f65166dc430e2cc06aec899f47a96d454814b93c92fd0f", @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa14001f00fe8000000000000000000000000000bb"], 0x50}}, 0x24000811)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="00012bbd7000fcdbdf6662000000080009000000000008000600fbffffff280001800800030001009c000014000200776c616e310000000000000000000000080003000000000008000800080000003c0001800800030003000000080001", @ANYRES32=r6, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468305f746f5f626f6e64000000"], 0x90}, 0x1, 0x0, 0x0, 0x814}, 0x20000050)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000003600)={0x46d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}, {}, {}, {<r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x8, "a99bb6c0a1dba8"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000e40)={0x700, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r16=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x1, "7db13bf71a113c"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r17 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r17, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r17, 0x1)
getsockopt$bt_hci(r17, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)
r18 = socket$nl_generic(0x10, 0x3, 0x10)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
r20 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MEDIA_SET(r18, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000002e40)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r20, @ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4004000}, 0x8080)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001e40)={{r16, 0x0, 0xffffffff9765899a, 0x3, 0x3, 0x1, 0x6, 0x9, 0x7, 0x5, 0x6, 0x7, 0x5, 0x71, 0x8}})
r21 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r21, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cfdc0a0e202", @ANYRES32=0x0, @ANYBLOB="0000d20b"], 0x1c}}, 0x0)

103.772µs ago: executing program 33 (id=3947):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '+:}\xca\'*\x1c+.]6\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, ',*+$@+,\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x400c050)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x200, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xbc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1ff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eeb8b79b1379caba9ab81f70a2054e600e5270d437dcaa0ae94fb856ec983233"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xfc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fcddec5e7dfe679f5905d623a419b4ac8ff3c94783b665125b530c7f4096a239"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8e6f1139ebaab73bd5d7a4456dc03b4a69cf43b4cb8f698e1b04f3f54466aaf3"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0f6498f2c4ebfbbffd8b8ed0d2d9bd3ca1cab3c80b168ffbe82b8122d5201f98"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x27}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xaf}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bf7e7e0612ad25483fbb88758cecfb9e"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x200}, 0x1, 0x0, 0x0, 0x4050}, 0x24000010)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4008}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='scsi_dispatch_cmd_error\x00', r6, 0x0, 0x2}, 0x18)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x32, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1188e2f8}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc8}}, @call, @generic={0x9, 0x6, 0x8, 0xf, 0x80000001}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x7, 0x0, 0x0, 0x173e772b654b6712, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x4, 0x3c85, 0x3}, 0x10, 0x9b0b, 0xffffffffffffffff, 0x2, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000009c0)=[{0x3, 0x1, 0x7, 0xb}, {0x5, 0x4, 0x1, 0x8}], 0x10, 0x2c4}, 0x94)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x0, @private}, &(0x7f0000000b00)=0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r2)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
pipe(&(0x7f0000000c80)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg$can_j1939(r10, &(0x7f0000000e80)={&(0x7f0000000cc0)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/252, 0xfc}], 0x1}, 0x2)
write$tun(r10, &(0x7f0000000ec0)={@val={0x0, 0x8917}, @val={0x2, 0x87, 0x4, 0x80, 0xac07, 0xec}, @x25={0x2, 0x0, 0x0, "73f6fc553fdea43a28dc3e4cbf9f95ad312cc5b4366f017b0e5402b43dca2bf8ca793b2b481c43b06aa79f81c6c263c2cefa492e4d6891cc7168cd20327742d379e0122d35c6878d83bce5c5fa915af2f6b92fc1d2bb65b19b3fb200a3544439645d9815128f1939d02295787e5f6c44c8fcffed655ed56ce07315ba895707475f33b2ee6541dc253cdf62a8633ccf7bb108aec77bcfe3e6ac1f08419bc1d54cd9ad6b060c8583388eaf514972b3c5a4eda9bb65bd397f6674a25163bd7faf7aa9ca1e73641489912fa3fe7b88dbb61c5e164413d1bbd4179f8982f67ed16802d0d9843473be7f8e8e54518b396f4b9a8e58d22ce3dace913b9b0c"}}, 0x10c)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair(0x1e, 0x6, 0x9, &(0x7f0000001000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = syz_genetlink_get_family_id$fou(&(0x7f0000001080), r11)
sendmsg$FOU_CMD_DEL(r12, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r13, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000010)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r12)
sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r14, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001300)={'wpan4\x00', <r15=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xb3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000001580))
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000001600)={0x7ff, 0x97})

0s ago: executing program 34 (id=3953):
r0 = socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x8, 0x17, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x7, 0x9, 0x150, 0x0, "274b58763a9a7fdf777df6bbb5180020ddd9051cde4d3153b37f884bcac0b81455b4dcb446a735cbcea3"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3ff}, @in={0x2, 0x4e20, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0xb8}, 0x1, 0x7}, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)=""/11, &(0x7f0000000080)=0xb)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4)

kernel console output (not intermixed with test programs):

lting to 1000
[  231.693516][T14608] netlink: 'syz.1.2266': attribute type 2 has an invalid length.
[  232.112118][T14639] netlink: 'syz.0.2274': attribute type 12 has an invalid length.
[  232.117023][T14638] netlink: 'syz.2.2273': attribute type 1 has an invalid length.
[  232.119585][T14638] netlink: 'syz.2.2273': attribute type 2 has an invalid length.
[  232.249779][T14650] hsr0 speed is unknown, defaulting to 1000
[  232.379130][T14659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.388079][T14659] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  232.434583][T14650] netlink: 'syz.2.2278': attribute type 2 has an invalid length.
[  232.530625][T14667] hsr0 speed is unknown, defaulting to 1000
[  232.872250][T14700] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  232.907323][T14708] vxlan0: entered promiscuous mode
[  232.908963][T14708] vxlan0: entered allmulticast mode
[  232.910800][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.914117][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.918760][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.921661][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.974764][T14712] IPv6: Can't replace route, no match found
[  232.978803][T14717] netlink: 'syz.0.2298': attribute type 58 has an invalid length.
[  233.039907][T14723] 8021q: adding VLAN 0 to HW filter on device bond17
[  233.267495][T14754] syz_tun: entered allmulticast mode
[  233.270222][T14754] vcan0: tx drop: invalid da for name 0x0000000000000003
[  233.274783][T14754] siw: device registration error -23
[  233.291873][T14754] bridge0: port 1(erspan0) entered disabled state
[  233.297308][T14754] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  233.304648][T14753] syz_tun: left allmulticast mode
[  233.353925][T14760] 8021q: adding VLAN 0 to HW filter on device bond19
[  233.741546][T14796] pim6reg: entered allmulticast mode
[  233.744025][T14796] pim6reg: left allmulticast mode
[  234.876661][T14903] pim6reg: entered allmulticast mode
[  234.882549][T14903] pim6reg: left allmulticast mode
[  234.921407][T14905] hsr0 speed is unknown, defaulting to 1000
[  235.090870][T14913] openvswitch: netlink: Missing key (keys=40, expected=100)
[  236.120926][T14972] __nla_validate_parse: 35 callbacks suppressed
[  236.120942][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'.
[  236.127846][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'.
[  236.189802][T14981] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2374'.
[  236.250812][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'.
[  236.317146][T14991] pim6reg: entered allmulticast mode
[  236.321786][T14991] pim6reg: left allmulticast mode
[  236.355382][T14993] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2378'.
[  236.378053][T14988] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2376'.
[  236.503981][T15003] validate_nla: 14 callbacks suppressed
[  236.503995][T15003] netlink: 'syz.0.2381': attribute type 10 has an invalid length.
[  236.510956][T15003] team0: Port device 0! added
[  236.513639][T15003] netlink: 'syz.0.2381': attribute type 10 has an invalid length.
[  236.518981][T15003] team0: Port device 0! removed
[  236.648495][T15022] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2386'.
[  236.652850][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2386'.
[  236.849678][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'.
[  236.907226][T15030] pim6reg: entered allmulticast mode
[  236.915527][T15030] pim6reg: left allmulticast mode
[  237.153440][T15033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2389'.
[  237.481359][T15058] hsr0 speed is unknown, defaulting to 1000
[  238.118489][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 180 seconds
[  238.122336][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 180 seconds
[  238.126472][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 180 seconds
[  238.130168][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 180 seconds
[  238.358663][T15090] netlink: 'syz.2.2405': attribute type 29 has an invalid length.
[  238.362047][T15090] netlink: 'syz.2.2405': attribute type 29 has an invalid length.
[  238.518289][T15100] 8021q: adding VLAN 0 to HW filter on device bond20
[  238.522342][T15100] bond19: (slave bond20): Enslaving as an active interface with an up link
[  238.532409][T15100] bond19 (unregistering): (slave bond20): Releasing backup interface
[  238.539150][T15100] bond19 (unregistering): Released all slaves
[  238.633304][T15106] hsr0 speed is unknown, defaulting to 1000
[  238.676570][T15109] netlink: 'syz.2.2410': attribute type 13 has an invalid length.
[  238.679869][T15109] netlink: 'syz.2.2410': attribute type 17 has an invalid length.
[  238.688166][T15109] lo: left promiscuous mode
[  238.690205][T15109] lo: left allmulticast mode
[  238.743599][T15109] 8021q: adding VLAN 0 to HW filter on device team0
[  238.820836][T15109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.028939][T15131] syzkaller1: entered promiscuous mode
[  239.030768][T15131] syzkaller1: entered allmulticast mode
[  239.156181][T15134] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003
[  239.338650][T15144] netlink: 'syz.0.2420': attribute type 29 has an invalid length.
[  239.346917][T15144] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 4294967272. macoff=96
[  239.350658][T15144] netlink: 'syz.0.2420': attribute type 29 has an invalid length.
[  239.464580][T15151] hsr0 speed is unknown, defaulting to 1000
[  239.483771][T15153] hsr0 speed is unknown, defaulting to 1000
[  240.018084][T15168] pim6reg: entered allmulticast mode
[  240.021163][T15168] pim6reg: left allmulticast mode
[  240.481626][T15208] hsr0 speed is unknown, defaulting to 1000
[  240.527323][T15213] netlink: 'syz.0.2438': attribute type 1 has an invalid length.
[  240.550806][T15219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.582880][T15221] netlink: 'syz.0.2440': attribute type 1 has an invalid length.
[  240.804185][T15243] 8021q: adding VLAN 0 to HW filter on device bond21
[  240.892429][T15263] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004
[  240.898186][T15262] hsr0 speed is unknown, defaulting to 1000
[  241.313045][T15288] __nla_validate_parse: 27 callbacks suppressed
[  241.313060][T15288] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2457'.
[  241.481461][T15313] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2465'.
[  241.512358][T15315] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2466'.
[  241.559337][T15317] hsr0 speed is unknown, defaulting to 1000
[  242.124684][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'.
[  242.255082][T15339] validate_nla: 3 callbacks suppressed
[  242.255102][T15339] netlink: 'syz.2.2474': attribute type 32 has an invalid length.
[  242.290207][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'.
[  242.324615][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2476'.
[  242.333158][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2475'.
[  242.440394][T15358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2479'.
[  242.447167][T15358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2479'.
[  242.451020][T15358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2479'.
[  243.401047][T15389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  243.404615][T15389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  243.756022][T15403] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  244.283527][T15424] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  244.313993][T15430] netlink: 'syz.1.2499': attribute type 3 has an invalid length.
[  244.321568][T15430] syz_tun: entered allmulticast mode
[  244.400974][T15434] 8021q: adding VLAN 0 to HW filter on device bond15
[  244.404181][T15434] bond14: (slave bond15): Enslaving as an active interface with an up link
[  244.591809][T15444] netlink: 'syz.0.2503': attribute type 12 has an invalid length.
[  244.811948][T15460] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.864969][T15460] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.931107][T15460] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  244.994389][T15460] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  245.068125][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.079231][ T5896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.132838][ T5680] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.151487][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.199082][T15485] bridge0: port 1(erspan0) entered blocking state
[  245.201709][T15485] bridge0: port 1(erspan0) entered disabled state
[  245.204448][T15485] erspan0: entered allmulticast mode
[  245.209130][T15485] erspan0: entered promiscuous mode
[  245.213200][T15485] erspan0: left allmulticast mode
[  245.215271][T15485] erspan0: left promiscuous mode
[  245.218321][T15485] bridge0: port 1(erspan0) entered disabled state
[  245.223733][T15485] netem: change failed
[  245.339169][T15498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.346782][T15498] syzkaller0: entered promiscuous mode
[  245.348952][T15498] syzkaller0: entered allmulticast mode
[  245.357294][T15498] tipc: Resetting bearer <eth:syzkaller0>
[  245.362473][T15497] tipc: Resetting bearer <eth:syzkaller0>
[  245.379204][T15497] tipc: Disabling bearer <eth:syzkaller0>
[  245.574776][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810ff60400: rx timeout, send abort
[  245.990200][T15518] hsr0 speed is unknown, defaulting to 1000
[  246.033863][T15520] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  246.038392][T15520] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  246.078007][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810ff60400: abort rx timeout. Force session deactivation
[  246.086387][T15429] syz_tun: left allmulticast mode
[  246.133472][T15523] netlink: 'syz.0.2522': attribute type 2 has an invalid length.
[  246.140610][T15523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.226755][T15541] netlink: 'syz.1.2527': attribute type 1 has an invalid length.
[  246.242965][T15541] 8021q: adding VLAN 0 to HW filter on device bond22
[  246.321880][T15551] __nla_validate_parse: 11 callbacks suppressed
[  246.321901][T15551] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2530'.
[  246.366715][T15556] netlink: 'syz.1.2532': attribute type 29 has an invalid length.
[  246.378500][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'.
[  246.382587][T15553] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2531'.
[  246.389075][T15556] netlink: 'syz.1.2532': attribute type 29 has an invalid length.
[  246.397960][T15556] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2532'.
[  246.479704][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'.
[  246.504508][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2536'.
[  246.509151][T15570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2536'.
[  246.606857][T15589] tipc: Resetting bearer <eth:syzkaller0>
[  246.904883][T15613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2547'.
[  247.016057][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'.
[  247.253118][T15627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2550'.
[  247.360925][T15633] hsr0 speed is unknown, defaulting to 1000
[  247.469123][T15658] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  247.472064][T15658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.483656][T15658] netlink: 'syz.0.2553': attribute type 10 has an invalid length.
[  247.488977][T15658] team0: Port device 0! added
[  247.619896][T15677] netlink: 'syz.2.2556': attribute type 1 has an invalid length.
[  247.708624][T15688] batadv1: entered promiscuous mode
[  247.710294][T15688] batadv1: entered allmulticast mode
[  247.853230][T15700] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  247.911986][T15700] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  247.991429][T15700] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.041256][T15700] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.081085][T15711] IPVS: length: 58 != 8
[  248.092875][T15711] hsr0 speed is unknown, defaulting to 1000
[  248.098026][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.105063][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.121365][ T5680] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.139428][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.142578][T15712] ip6gretap0: entered allmulticast mode
[  248.393026][T15733] pim6reg: entered allmulticast mode
[  248.400732][T15730] pim6reg: left allmulticast mode
[  249.176151][T15770] netlink: 'syz.0.2583': attribute type 29 has an invalid length.
[  249.179525][T15770] netlink: 'syz.0.2583': attribute type 29 has an invalid length.
[  249.187104][T15770] syzkaller1: entered promiscuous mode
[  249.189005][T15770] syzkaller1: entered allmulticast mode
[  249.302793][T15780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.252997][T15811] netlink: 'syz.1.2594': attribute type 83 has an invalid length.
[  250.261662][T15813] netlink: 'syz.2.2595': attribute type 1 has an invalid length.
[  250.262600][T15811] ip6erspan0: entered allmulticast mode
[  250.312980][T15815] hsr0 speed is unknown, defaulting to 1000
[  250.471555][T15831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.474631][T15831] syzkaller0: entered promiscuous mode
[  250.477856][T15831] syzkaller0: entered allmulticast mode
[  250.485251][T15831] tipc: Resetting bearer <eth:syzkaller0>
[  250.507490][T15830] tipc: Resetting bearer <eth:syzkaller0>
[  250.521893][T15830] tipc: Disabling bearer <eth:syzkaller0>
[  250.612033][T15836] hsr0 speed is unknown, defaulting to 1000
[  250.614412][T15837] hsr0 speed is unknown, defaulting to 1000
[  250.824891][T15848] syzkaller0: entered promiscuous mode
[  250.838990][T15848] syzkaller0: entered allmulticast mode
[  251.031351][T15856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.079234][ T4885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.081699][ T4885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.088498][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.213638][T15868] pim6reg: entered allmulticast mode
[  251.221246][T15868] pim6reg: left allmulticast mode
[  251.338373][T15879] __nla_validate_parse: 23 callbacks suppressed
[  251.338386][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'.
[  251.365838][T15881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2617'.
[  251.369242][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'.
[  251.477352][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'.
[  251.673873][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'.
[  251.719701][T15904] hsr0 speed is unknown, defaulting to 1000
[  251.722408][T15905] hsr0 speed is unknown, defaulting to 1000
[  251.733793][T15906] netlink: 'syz.1.2626': attribute type 2 has an invalid length.
[  251.742104][T15906] netlink: 'syz.1.2626': attribute type 2 has an invalid length.
[  252.157397][T15911] smc: net device bond0 applied user defined pnetid SYZ2
[  252.160563][T15911] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2627'.
[  252.200573][T15915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2628'.
[  252.288406][T15922] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2631'.
[  252.311666][T15927] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  252.316680][T15927] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2633'.
[  252.344366][T15932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2635'.
[  252.412359][T15944] netlink: 'syz.2.2638': attribute type 1 has an invalid length.
[  252.581227][T15973] sctp: [Deprecated]: syz.2.2643 (pid 15973) Use of int in max_burst socket option deprecated.
[  252.581227][T15973] Use struct sctp_assoc_value instead
[  252.700820][T15992] netlink: 'syz.0.2647': attribute type 29 has an invalid length.
[  252.704961][T15992] netlink: 'syz.0.2647': attribute type 29 has an invalid length.
[  252.769481][T16007] bond21 (unregistering): Released all slaves
[  252.780363][T16006] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  252.889646][T16026] hsr0 speed is unknown, defaulting to 1000
[  253.032462][T16039] netlink: 'syz.1.2653': attribute type 1 has an invalid length.
[  253.064893][T16039] 8021q: adding VLAN 0 to HW filter on device bond23
[  253.227526][T16062] syzkaller1: entered promiscuous mode
[  253.229436][T16062] syzkaller1: entered allmulticast mode
[  253.240477][T16062] hsr0 speed is unknown, defaulting to 1000
[  253.689851][T16082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.701295][T16081] tipc: Disabling bearer <eth:syzkaller0>
[  253.742442][T16086] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  253.750882][T16086] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.780819][T16088] netlink: 'syz.2.2667': attribute type 1 has an invalid length.
[  253.930361][T16100] netlink: 'syz.2.2671': attribute type 1 has an invalid length.
[  253.952312][T16100] 8021q: adding VLAN 0 to HW filter on device bond21
[  254.083969][T16115] bond0: option use_carrier: invalid value (255)
[  254.090653][T16117] hsr0 speed is unknown, defaulting to 1000
[  254.451623][T16134] v: renamed from ip6_vti0 (while UP)
[  254.581317][T16150] netlink: 'syz.1.2684': attribute type 4 has an invalid length.
[  254.630780][T16155] syzkaller0: entered promiscuous mode
[  254.633073][T16155] syzkaller0: entered allmulticast mode
[  254.732435][T16157] netlink: 'syz.0.2687': attribute type 2 has an invalid length.
[  255.074970][T16178] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  255.122324][T16186] IPVS: Error connecting to the multicast addr
[  255.141619][T16186] bond0 (unregistering): (slave 0!): Releasing backup interface
[  255.148915][T16186] bond0 (unregistering): Released all slaves
[  255.354984][T16199] syzkaller0: entered promiscuous mode
[  255.360004][T16199] syzkaller0: entered allmulticast mode
[  255.839731][T16215] hsr0 speed is unknown, defaulting to 1000
[  255.927964][T16226] netlink: 'syz.0.2711': attribute type 2 has an invalid length.
[  256.062492][T16229] openvswitch: netlink: Unknown nsh attribute 0
[  256.070033][T16229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.141378][T16241] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  256.447624][T16278] netlink: 'syz.1.2719': attribute type 21 has an invalid length.
[  256.448136][T16279] __nla_validate_parse: 26 callbacks suppressed
[  256.448148][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.450798][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.450944][T16278] netlink: 'syz.1.2719': attribute type 21 has an invalid length.
[  256.450955][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451033][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451106][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451179][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451249][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451320][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451387][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.451457][T16278] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2719'.
[  256.496682][T16279] pim6reg: entered allmulticast mode
[  256.498858][T16280] pim6reg: left allmulticast mode
[  257.228604][T16331] openvswitch: netlink: IP tunnel dst address not specified
[  257.530357][T16367] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  257.534280][T16367] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  257.626983][T16375] vlan2: entered allmulticast mode
[  257.628814][T16375] bond22: entered allmulticast mode
[  258.615037][T16427] hsr0 speed is unknown, defaulting to 1000
[  258.909315][T16457] hsr0 speed is unknown, defaulting to 1000
[  259.124752][T16479] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.163170][T16481] validate_nla: 53 callbacks suppressed
[  259.163191][T16481] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  259.172377][T16481] netlink: 'syz.1.2759': attribute type 2 has an invalid length.
[  259.178120][T16481] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  259.520278][T16505] nbd: illegal input index -1
[  259.599732][T16511] netlink: 'syz.0.2768': attribute type 4 has an invalid length.
[  259.603615][T16510] netlink: 'syz.0.2768': attribute type 4 has an invalid length.
[  259.958798][T16551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.999585][T16553] 8021q: adding VLAN 0 to HW filter on device bond24
[  260.003703][T16553] bond23: (slave bond24): Enslaving as an active interface with an up link
[  260.014223][T16553] 8021q: adding VLAN 0 to HW filter on device bond23
[  260.081794][T16568] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  260.240936][T16590] netlink: 'syz.1.2790': attribute type 6 has an invalid length.
[  260.294827][T16596] syzkaller1: entered promiscuous mode
[  260.298215][T16596] syzkaller1: entered allmulticast mode
[  260.431315][T16616] netlink: 'syz.1.2795': attribute type 10 has an invalid length.
[  260.433730][T16617] netlink: 'syz.1.2795': attribute type 10 has an invalid length.
[  260.517191][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 120 seconds
[  260.555067][T16627] pim6reg: entered allmulticast mode
[  260.565024][T16627] pim6reg: left allmulticast mode
[  261.304880][T16642] netlink: 'syz.0.2804': attribute type 4 has an invalid length.
[  261.310537][T16642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.370409][T16644] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  261.498561][T16663] __nla_validate_parse: 125 callbacks suppressed
[  261.498577][T16663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2809'.
[  261.543803][T16667] netlink: 'syz.0.2810': attribute type 1 has an invalid length.
[  261.559836][T16667] 8021q: adding VLAN 0 to HW filter on device bond17
[  261.564163][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2810'.
[  261.576402][T16671] 8021q: adding VLAN 0 to HW filter on device bond25
[  261.588187][T16667] bond17: entered promiscuous mode
[  261.722703][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  261.727865][T16688] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  261.742596][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'.
[  261.852037][T16705] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2819'.
[  261.854994][T16705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2819'.
[  261.913179][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'.
[  261.918271][T16705] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  261.921095][T16705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.994132][T16710] hsr0 speed is unknown, defaulting to 1000
[  262.074785][T16718] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2824'.
[  262.080697][T16717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2824'.
[  262.210329][T16733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2829'.
[  262.251172][T16736] hsr0 speed is unknown, defaulting to 1000
[  262.377221][T16746] delete_channel: no stack
[  263.671693][T16800] pim6reg: entered allmulticast mode
[  263.674719][T16800] pim6reg: left allmulticast mode
[  263.914128][T16815] bond0 (unregistering): Released all slaves
[  264.097831][T16831] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.129854][T16831] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.190535][T16831] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.237234][T16834] netlink: 'syz.2.2863': attribute type 11 has an invalid length.
[  264.248284][T16831] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  264.300425][ T5680] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.309721][ T5680] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.319749][ T5680] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.328324][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.058874][T16857] validate_nla: 4 callbacks suppressed
[  265.058885][T16857] netlink: 'syz.1.2869': attribute type 1 has an invalid length.
[  265.071974][T16857] 8021q: adding VLAN 0 to HW filter on device bond24
[  265.077427][T16857] bond24: entered promiscuous mode
[  265.107645][T16863] netlink: 'syz.1.2870': attribute type 1 has an invalid length.
[  265.122800][T16863] hsr0 speed is unknown, defaulting to 1000
[  265.247155][T16863] syzkaller0: entered promiscuous mode
[  265.249438][T16863] syzkaller0: entered allmulticast mode
[  265.257867][T16863] macsec0: entered promiscuous mode
[  265.764335][T16903] netlink: 'syz.0.2883': attribute type 13 has an invalid length.
[  265.768916][T16903] netlink: 'syz.0.2883': attribute type 11 has an invalid length.
[  265.831252][T16911] netlink: 'syz.1.2884': attribute type 10 has an invalid length.
[  265.839544][T16911] team0: Port device 0! added
[  265.843834][T16911] netlink: 'syz.1.2884': attribute type 10 has an invalid length.
[  265.856865][T16911] team0: Port device 0! removed
[  265.860259][T16913] netlink: 'syz.0.2886': attribute type 12 has an invalid length.
[  266.443550][T16923] netlink: 'syz.2.2889': attribute type 10 has an invalid length.
[  266.457482][T16923] team0: Port device 0! added
[  266.465787][T16923] netlink: 'syz.2.2889': attribute type 10 has an invalid length.
[  266.477088][T16923] team0: Port device 0! removed
[  267.151220][T16964] hsr0 speed is unknown, defaulting to 1000
[  267.236125][T16965] netlink: 'syz.0.2895': attribute type 10 has an invalid length.
[  267.249028][T16965] team0: Port device 0! removed
[  267.284068][T16964] __nla_validate_parse: 15 callbacks suppressed
[  267.284082][T16964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2896'.
[  267.311335][T16976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2899'.
[  267.353825][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'.
[  267.452923][T16986] syz_tun: entered allmulticast mode
[  267.474280][T16989] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2903'.
[  267.480166][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'.
[  267.520687][T16993] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  267.534262][T16995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2905'.
[  267.728597][T17001] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2907'.
[  267.731528][T17000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2907'.
[  267.961097][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'.
[  268.051448][T17025] hsr0 speed is unknown, defaulting to 1000
[  268.205149][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 210 seconds
[  268.209908][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 210 seconds
[  268.214187][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 210 seconds
[  268.221318][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 210 seconds
[  268.246399][T16985] syz_tun: left allmulticast mode
[  268.291740][T17041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2917'.
[  268.859112][T17078] bond26 (unregistering): Released all slaves
[  268.971998][T17085] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.203637][T17092] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.336795][T17111] 8021q: adding VLAN 0 to HW filter on device bond18
[  269.384653][T17116] hsr0 speed is unknown, defaulting to 1000
[  269.893129][T17162] openvswitch: netlink: Missing key (keys=40, expected=100)
[  269.992373][T17170] hsr0 speed is unknown, defaulting to 1000
[  270.092948][T17170] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.151017][T17170] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.203011][T17170] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.244293][T17170] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.308233][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.317545][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.325191][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.335045][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.431402][T17174] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.502593][T17174] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.631427][T17174] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.658872][T17199] hsr0 speed is unknown, defaulting to 1000
[  270.742106][T17174] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.864973][T17214] 8021q: adding VLAN 0 to HW filter on device bond26
[  270.868697][T17214] bond25: (slave bond26): Enslaving as an active interface with an up link
[  270.874361][T17214] bond25 (unregistering): (slave bond26): Releasing backup interface
[  270.881261][T17214] bond25 (unregistering): Released all slaves
[  271.139595][T17241] validate_nla: 8 callbacks suppressed
[  271.139779][T17241] netlink: 'syz.1.2976': attribute type 39 has an invalid length.
[  271.164025][T17246] netlink: 'syz.1.2979': attribute type 26 has an invalid length.
[  271.234115][T17255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.251254][T17254] tipc: Disabling bearer <eth:syzkaller0>
[  271.411974][ T8798] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.420078][ T8798] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.431643][ T8798] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.446677][ T8798] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.474978][T17271] syzkaller1: entered promiscuous mode
[  271.485550][T17271] syzkaller1: entered allmulticast mode
[  272.183049][T17276] GUP no longer grows the stack in syz.1.2987 (17276): 200000006000-20000000a000 (200000005000)
[  272.188508][T17276] CPU: 0 UID: 0 PID: 17276 Comm: syz.1.2987 Not tainted syzkaller #0 PREEMPT(full) 
[  272.188545][T17276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.188553][T17276] Call Trace:
[  272.188557][T17276]  <TASK>
[  272.188562][T17276]  dump_stack_lvl+0x189/0x250
[  272.188580][T17276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.188590][T17276]  ? __pfx__printk+0x10/0x10
[  272.188601][T17276]  ? find_vma+0xe7/0x160
[  272.188614][T17276]  ? mas_next_slot+0xc27/0xcf0
[  272.188628][T17276]  __get_user_pages+0x24d0/0x2ce0
[  272.188640][T17276]  ? kvm_sched_clock_read+0x11/0x20
[  272.188652][T17276]  ? __gup_longterm_locked+0xc68/0x1660
[  272.188664][T17276]  ? __gup_longterm_locked+0xc68/0x1660
[  272.188675][T17276]  __gup_longterm_locked+0xde9/0x1660
[  272.188686][T17276]  ? try_grab_folio_fast+0x1be/0x4f0
[  272.188696][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188705][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188713][T17276]  gup_fast_fallback+0x1e6a/0x2010
[  272.188729][T17276]  ? __pfx_gup_fast_fallback+0x10/0x10
[  272.188738][T17276]  ? __mutex_lock+0x335/0x1350
[  272.188747][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188755][T17276]  ? is_valid_gup_args+0x11f/0x200
[  272.188765][T17276]  ? get_user_pages_fast+0x4d/0xb0
[  272.188783][T17276]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  272.188797][T17276]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  272.188811][T17276]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  272.188823][T17276]  ? wait_for_space+0x24d/0x2d0
[  272.188836][T17276]  iov_iter_get_pages2+0x5e/0xa0
[  272.188846][T17276]  __se_sys_vmsplice+0x548/0x10d0
[  272.188862][T17276]  ? futex_private_hash_put+0x4b/0x280
[  272.188872][T17276]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  272.188883][T17276]  ? __pfx_futex_wake+0x10/0x10
[  272.188902][T17276]  ? do_pipe2+0xf7/0x170
[  272.188914][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188923][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188930][T17276]  do_syscall_64+0xfa/0x3b0
[  272.188937][T17276]  ? rcu_is_watching+0x15/0xb0
[  272.188944][T17276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.188953][T17276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.188960][T17276] RIP: 0033:0x7f064b78ebe9
[  272.188968][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.188976][T17276] RSP: 002b:00007f064c59d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  272.188987][T17276] RAX: ffffffffffffffda RBX: 00007f064b9b5fa0 RCX: 00007f064b78ebe9
[  272.188993][T17276] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  272.188998][T17276] RBP: 00007f064b811e19 R08: 0000000000000000 R09: 0000000000000000
[  272.189004][T17276] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  272.189010][T17276] R13: 00007f064b9b6038 R14: 00007f064b9b5fa0 R15: 00007ffddc091408
[  272.189019][T17276]  </TASK>
[  272.408694][T17293] __nla_validate_parse: 17 callbacks suppressed
[  272.408715][T17293] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2991'.
[  272.417335][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'.
[  272.437327][T17289] 8021q: adding VLAN 0 to HW filter on device bond25
[  272.441827][T17289] bond0: (slave bond25): making interface the new active one
[  272.445220][T17289] bond0: (slave bond25): Enslaving as an active interface with an up link
[  272.522388][T17302] netlink: 'syz.1.2992': attribute type 1 has an invalid length.
[  272.628736][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'.
[  273.147761][T17324] netlink: zone id is out of range
[  273.150814][T17324] netlink: zone id is out of range
[  273.152715][T17324] netlink: zone id is out of range
[  273.158797][T17324] netlink: zone id is out of range
[  273.160488][T17324] netlink: zone id is out of range
[  273.162214][T17324] netlink: zone id is out of range
[  273.163917][T17324] netlink: zone id is out of range
[  273.166291][T17324] netlink: zone id is out of range
[  273.168328][T17324] netlink: zone id is out of range
[  273.170033][T17324] netlink: zone id is out of range
[  274.022123][T17357] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3007'.
[  274.154351][T17369] netlink: 'syz.2.3010': attribute type 1 has an invalid length.
[  274.209669][T17369] 8021q: adding VLAN 0 to HW filter on device bond27
[  274.232283][T17369] bond27: entered promiscuous mode
[  274.274457][T17376] netlink: 'syz.2.3013': attribute type 1 has an invalid length.
[  274.296150][T17376] 8021q: adding VLAN 0 to HW filter on device bond28
[  274.383183][T17391] netlink: 'syz.2.3017': attribute type 32 has an invalid length.
[  274.528512][T17414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3022'.
[  274.531665][T17414] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3022'.
[  274.537717][T17414] batadv1: entered promiscuous mode
[  274.539752][T17414] batadv1: entered allmulticast mode
[  274.613404][T17422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3023'.
[  274.698396][T17425] netlink: 'syz.1.3023': attribute type 10 has an invalid length.
[  274.702157][T17425] team0: Port device 0! added
[  274.859482][T17427] nftables ruleset with unbound set
[  274.879778][T17427] hsr0 speed is unknown, defaulting to 1000
[  275.100487][ T5293] udevd[5293]: worker [9285] terminated by signal 33 (Unknown signal 33)
[  275.103544][ T5293] udevd[5293]: worker [9285] failed while handling '/fs/nfs/net/nfs_client'
[  275.480080][T17451] erspan0: left allmulticast mode
[  275.481778][T17451] erspan0: left promiscuous mode
[  275.483454][T17451] bridge0: port 1(erspan0) entered disabled state
[  275.492233][T17451] team0: Port device 0! removed
[  275.494709][T17451] batman_adv: batadv0: Removing interface: virt_wifi0
[  275.518014][T17451] team0: Port device vlan0 removed
[  275.525881][T17451] team0: Port device geneve0 removed
[  275.537629][T17451] bond2: (slave gretap1): Releasing active interface
[  275.541075][T17451] bond3: (slave geneve2): Releasing active interface
[  275.543542][T17451] geneve2: left promiscuous mode
[  275.549863][T17451] bond4: (slave geneve3): Releasing active interface
[  275.557608][T17451] bond8: (slave veth5): Releasing active interface
[  275.559834][T17451] bond8: (slave veth5): the permanent HWaddr of slave - 46:cb:3b:09:09:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  275.567118][T17451] bond8: (slave veth7): Releasing active interface
[  275.570228][T17451] bond8: (slave gretap2): Releasing active interface
[  275.573675][T17451] bond12: (slave ip6gretap1): Removing an active aggregator
[  275.577447][T17451] bond12: (slave ip6gretap1): Releasing backup interface
[  275.582387][T17451] bond0: (slave bond25): Releasing active interface
[  275.620319][T17460] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3032'.
[  275.701644][T17469] hsr0 speed is unknown, defaulting to 1000
[  275.851790][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'.
[  275.890896][T17485] netlink: 452 bytes leftover after parsing attributes in process `syz.0.3039'.
[  276.195900][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  276.275741][T17447] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  276.308969][T17517] hsr0 speed is unknown, defaulting to 1000
[  276.449454][T17531] gtp1: entered promiscuous mode
[  276.475092][T17531] netlink: 'syz.1.3049': attribute type 29 has an invalid length.
[  276.482018][T17531] netlink: 'syz.1.3049': attribute type 29 has an invalid length.
[  276.507716][T17533] hsr0 speed is unknown, defaulting to 1000
[  276.671045][T17545] netlink: 'syz.0.3054': attribute type 1 has an invalid length.
[  276.682846][T17545] 8021q: adding VLAN 0 to HW filter on device bond19
[  276.886137][T17569] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  276.892346][T17569] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  276.906662][T17574] netlink: 'syz.1.3062': attribute type 29 has an invalid length.
[  276.909510][T17574] netlink: 'syz.1.3062': attribute type 29 has an invalid length.
[  276.950260][T17574] bond28: entered promiscuous mode
[  276.953796][T17574] 8021q: adding VLAN 0 to HW filter on device bond28
[  276.962002][T17581] netlink: 'syz.1.3062': attribute type 29 has an invalid length.
[  276.983153][T17584] pim6reg: entered allmulticast mode
[  276.989431][T17584] pim6reg: left allmulticast mode
[  277.124899][T17592] 8021q: adding VLAN 0 to HW filter on device bond29
[  277.128753][T17592] bond0: (slave bond29): making interface the new active one
[  277.132377][T17592] bond0: (slave bond29): Enslaving as an active interface with an up link
[  277.266449][T17612] pim6reg: entered allmulticast mode
[  277.274754][T17612] pim6reg: left allmulticast mode
[  277.320375][T17611] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  277.340445][T17611] 8021q: adding VLAN 0 to HW filter on device bond30
[  277.347039][T17611] bond30: entered promiscuous mode
[  277.429817][T17628] __nla_validate_parse: 14 callbacks suppressed
[  277.429829][T17628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3074'.
[  277.548649][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  277.551896][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'.
[  277.557916][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'.
[  277.561018][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'.
[  277.636030][T17657] netlink: 'syz.0.3081': attribute type 10 has an invalid length.
[  277.642014][T17657] team0: Port device 0! added
[  277.656980][T17661] dvmrp0: left allmulticast mode
[  277.857225][T17679] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3089'.
[  277.860197][T17679] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3089'.
[  277.863012][T17679] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3089'.
[  278.026932][T17698] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3095'.
[  278.087342][T17703] netlink: 'syz.1.3096': attribute type 10 has an invalid length.
[  278.091568][T17703] team0: Port device 0! added
[  278.094526][T17703] netlink: 'syz.1.3096': attribute type 10 has an invalid length.
[  278.101153][T17703] team0: Port device 0! removed
[  278.112767][T17705] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3097'.
[  278.356260][T17726] tipc: New replicast peer: 255.255.255.255
[  278.359177][T17726] tipc: Enabled bearer <udp:syz2>, priority 10
[  278.545201][T17736] hsr0 speed is unknown, defaulting to 1000
[  278.550766][T17733] hsr0 speed is unknown, defaulting to 1000
[  278.795807][T17754] pim6reg: entered allmulticast mode
[  278.798415][T17754] pim6reg: left allmulticast mode
[  279.309521][T17785] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.340146][T17785] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.418975][T17785] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.460648][T17785] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.486345][ T8217] tipc: Node number set to 3124326477
[  279.520482][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.538884][ T5896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.542178][ T5896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.551585][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.638168][T17803] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  280.100592][T17855] team0: Port device 0! added
[  280.113239][T17855] team0: Port device 0! removed
[  280.577104][T17899] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.629580][T17899] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.668224][T17899] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.734477][T17899] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.811983][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.836738][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.839511][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.852256][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.875901][T17905] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  280.908074][T17907] 8021q: adding VLAN 0 to HW filter on device bond31
[  281.059381][T17922] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.120291][T17922] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.228115][T17922] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.238898][T17932] rdma_rxe: rxe_newlink: failed to add lo
[  281.250532][T17932] ip6gretap0: left allmulticast mode
[  281.257503][T17932] net_ratelimit: 299 callbacks suppressed
[  281.257508][T17932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.288312][T17922] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  281.306653][T17937] bridge0: port 1(erspan0) entered blocking state
[  281.309048][T17937] bridge0: port 1(erspan0) entered disabled state
[  281.311483][T17937] erspan0: entered allmulticast mode
[  281.314264][T17937] erspan0: entered promiscuous mode
[  281.317490][T17937] bridge0: port 1(erspan0) entered blocking state
[  281.319900][T17937] bridge0: port 1(erspan0) entered forwarding state
[  281.324698][T17937] erspan0: left allmulticast mode
[  281.329863][T17937] erspan0: left promiscuous mode
[  281.333318][T17937] bridge0: port 1(erspan0) entered disabled state
[  281.393186][T17945] hsr0 speed is unknown, defaulting to 1000
[  282.134903][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.143725][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.152571][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.162619][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.798897][T18019] __nla_validate_parse: 13 callbacks suppressed
[  282.798914][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3167'.
[  282.848035][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'.
[  282.861228][T18018] pim6reg: entered allmulticast mode
[  282.863512][T18018] pim6reg: left allmulticast mode
[  283.051685][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'.
[  283.058911][T18048] macsec0: entered allmulticast mode
[  283.060878][T18048] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  283.166888][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  283.178213][T18059] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3178'.
[  283.182907][T18059] validate_nla: 6 callbacks suppressed
[  283.182919][T18059] netlink: 'syz.0.3178': attribute type 32 has an invalid length.
[  283.216267][T18068] netlink: 'syz.2.3180': attribute type 9 has an invalid length.
[  283.269530][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3182'.
[  283.283071][T18077] warn_alloc: 3 callbacks suppressed
[  283.283082][T18077] syz.2.3182: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  283.291298][T18077] CPU: 1 UID: 0 PID: 18077 Comm: syz.2.3182 Not tainted syzkaller #0 PREEMPT(full) 
[  283.291310][T18077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  283.291315][T18077] Call Trace:
[  283.291319][T18077]  <TASK>
[  283.291323][T18077]  dump_stack_lvl+0x189/0x250
[  283.291340][T18077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.291349][T18077]  ? __pfx__printk+0x10/0x10
[  283.291360][T18077]  ? lock_release+0x4b/0x3e0
[  283.291373][T18077]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  283.291384][T18077]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  283.291392][T18077]  warn_alloc+0x214/0x310
[  283.291407][T18077]  ? __pfx_warn_alloc+0x10/0x10
[  283.291419][T18077]  ? __get_vm_area_node+0x28f/0x300
[  283.291430][T18077]  ? xskq_create+0xbf/0x170
[  283.291444][T18077]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  283.291460][T18077]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  283.291470][T18077]  ? xsk_setsockopt+0x502/0x8d0
[  283.291481][T18077]  ? __kasan_kmalloc+0x93/0xb0
[  283.291493][T18077]  vmalloc_user_noprof+0xad/0xf0
[  283.291503][T18077]  ? xskq_create+0xbf/0x170
[  283.291513][T18077]  xskq_create+0xbf/0x170
[  283.291523][T18077]  xsk_init_queue+0xb0/0x110
[  283.291533][T18077]  xsk_setsockopt+0x57b/0x8d0
[  283.291543][T18077]  ? __pfx_xsk_setsockopt+0x10/0x10
[  283.291552][T18077]  ? __pfx_aa_sk_perm+0x10/0x10
[  283.291565][T18077]  ? lock_release+0x4b/0x3e0
[  283.291575][T18077]  ? __se_sys_futex+0x36f/0x400
[  283.291585][T18077]  ? aa_sock_opt_perm+0xff/0x1b0
[  283.291592][T18077]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  283.291602][T18077]  ? __pfx_xsk_setsockopt+0x10/0x10
[  283.291611][T18077]  do_sock_setsockopt+0x17c/0x1b0
[  283.291622][T18077]  __x64_sys_setsockopt+0x13f/0x1b0
[  283.291631][T18077]  do_syscall_64+0xfa/0x3b0
[  283.291639][T18077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.291647][T18077]  ? exc_page_fault+0x9f/0xf0
[  283.291659][T18077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.291666][T18077] RIP: 0033:0x7f32bef8ebe9
[  283.291674][T18077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.291681][T18077] RSP: 002b:00007f32bfe8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  283.291738][T18077] RAX: ffffffffffffffda RBX: 00007f32bf1b5fa0 RCX: 00007f32bef8ebe9
[  283.291745][T18077] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  283.291750][T18077] RBP: 00007f32bf011e19 R08: 0000000000000004 R09: 0000000000000000
[  283.291755][T18077] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  283.291760][T18077] R13: 00007f32bf1b6038 R14: 00007f32bf1b5fa0 R15: 00007ffdbd5b6b18
[  283.291769][T18077]  </TASK>
[  283.291772][T18077] Mem-Info:
[  283.399565][T18077] active_anon:21651 inactive_anon:0 isolated_anon:0
[  283.399565][T18077]  active_file:1261 inactive_file:38295 isolated_file:0
[  283.399565][T18077]  unevictable:1768 dirty:73 writeback:0
[  283.399565][T18077]  slab_reclaimable:10776 slab_unreclaimable:121513
[  283.399565][T18077]  mapped:18164 shmem:2443 pagetables:1364
[  283.399565][T18077]  sec_pagetables:0 bounce:0
[  283.399565][T18077]  kernel_misc_reclaimable:0
[  283.399565][T18077]  free:195795 free_pcp:27291 free_cma:0
[  283.419864][T18077] Node 0 active_anon:62992kB inactive_anon:0kB active_file:4020kB inactive_file:149396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35548kB dirty:220kB writeback:0kB shmem:5120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6728kB pagetables:2656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.432239][T18077] Node 1 active_anon:23816kB inactive_anon:0kB active_file:1024kB inactive_file:3784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37108kB dirty:72kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7420kB pagetables:2800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  283.444095][T18077] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:0kB free_cma:0kB
[  283.453398][T18077] lowmem_reserve[]: 0 811 811 811 811
[  283.455228][T18077] Node 0 DMA32 free:183996kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62652kB inactive_anon:0kB active_file:4020kB inactive_file:149396kB unevictable:3536kB writepending:220kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:34344kB local_pcp:14436kB free_cma:0kB
[  283.467855][T18077] lowmem_reserve[]: 0 0 0 0 0
[  283.469873][T18077] Node 1 DMA32 free:435076kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:14572kB local_pcp:5164kB free_cma:0kB
[  283.480323][T18077] lowmem_reserve[]: 0 0 854 854 854
[  283.482207][T18077] Node 1 Normal free:148924kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23816kB inactive_anon:0kB active_file:1024kB inactive_file:3784kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:61260kB local_pcp:42196kB free_cma:0kB
[  283.496816][T18077] lowmem_reserve[]: 0 0 0 0 0
[  283.498388][T18077] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 14980kB
[  283.503527][T18077] Node 0 DMA32: 1253*4kB (UM) 833*8kB (UE) 543*16kB (UE) 279*32kB (UE) 125*64kB (UME) 44*128kB (UM) 37*256kB (UM) 33*512kB (UME) 18*1024kB (UME) 9*2048kB (UM) 19*4096kB (U) = 183980kB
[  283.510777][T18077] Node 1 DMA32: 189*4kB (U) 190*8kB (UM) 192*16kB (UM) 191*32kB (UM) 191*64kB (UM) 192*128kB (UM) 193*256kB (UM) 189*512kB (UM) 187*1024kB (UM) 2*2048kB (UM) 11*4096kB (UM) = 435076kB
[  283.516756][T18077] Node 1 Normal: 297*4kB (UME) 199*8kB (UME) 340*16kB (UME) 591*32kB (UM) 81*64kB (UM) 83*128kB (UE) 102*256kB (UME) 56*512kB (UM) 32*1024kB (UM) 9*2048kB (UME) 0*4096kB = 148924kB
[  283.522447][T18077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.526189][T18077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  283.530192][T18077] 42021 total pagecache pages
[  283.534279][T18077] 5 pages in swap cache
[  283.537840][T18077] Free swap  = 124976kB
[  283.539303][T18077] Total swap = 124996kB
[  283.541399][T18077] 786301 pages RAM
[  283.542621][T18077] 0 pages HighMem/MovableOnly
[  283.544050][T18077] 241342 pages reserved
[  283.546050][T18077] 0 pages cma reserved
[  283.553979][T18105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3190'.
[  283.564207][T18105] netlink: 'syz.0.3190': attribute type 1 has an invalid length.
[  283.576910][T18105] 8021q: adding VLAN 0 to HW filter on device bond20
[  283.593932][T18110] hsr0 speed is unknown, defaulting to 1000
[  283.715845][T18125] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3196'.
[  283.799724][T18110] syzkaller0: entered promiscuous mode
[  283.801821][T18110] syzkaller0: entered allmulticast mode
[  283.811331][T18110] syz_tun: entered promiscuous mode
[  283.813387][T18110] macsec0: entered promiscuous mode
[  283.822321][T18110] syz_tun: left promiscuous mode
[  283.836262][T18145] netlink: 'syz.0.3201': attribute type 1 has an invalid length.
[  283.839281][T18145] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3201'.
[  283.844087][T18147] netlink: 'syz.0.3201': attribute type 1 has an invalid length.
[  283.847188][T18147] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3201'.
[  283.983762][T18157] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  283.995797][T18157] 8021q: adding VLAN 0 to HW filter on device bond29
[  284.000824][T18157] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  284.028896][T18163] pim6reg: entered allmulticast mode
[  284.032372][T18163] pim6reg: left allmulticast mode
[  284.121719][T18167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.124113][T18167] syzkaller0: entered promiscuous mode
[  284.127345][T18167] syzkaller0: entered allmulticast mode
[  284.131374][T18167] tipc: Resetting bearer <eth:syzkaller0>
[  284.134394][T18166] tipc: Resetting bearer <eth:syzkaller0>
[  284.137990][T18166] tipc: Disabling bearer <eth:syzkaller0>
[  284.224514][T18169] netlink: 'syz.2.3208': attribute type 5 has an invalid length.
[  284.248500][T18173] netlink: 'syz.2.3209': attribute type 11 has an invalid length.
[  284.544223][T18198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.548637][T18198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.738805][   T33] audit: type=1107 audit(1756464440.162:5): pid=18204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  284.919749][T18223] netlink: 'syz.1.3222': attribute type 10 has an invalid length.
[  285.024673][T18227] pim6reg: entered allmulticast mode
[  285.036431][T18227] pim6reg: left allmulticast mode
[  285.369015][T18243] pim6reg: entered allmulticast mode
[  285.377424][T18243] pim6reg: left allmulticast mode
[  285.450618][T18249] netlink: 'syz.2.3230': attribute type 2 has an invalid length.
[  285.488872][T18251] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  285.492887][T18251] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.754636][T18273] pim6reg: entered allmulticast mode
[  285.769699][T18266] pim6reg: left allmulticast mode
[  285.843299][T18283] syzkaller1: entered promiscuous mode
[  285.846587][T18283] syzkaller1: entered allmulticast mode
[  285.850049][T18283] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  285.938674][T18285] bond21: entered promiscuous mode
[  285.941041][T18285] 8021q: adding VLAN 0 to HW filter on device bond21
[  286.093069][T18295] delete_channel: no stack
[  286.281585][T18326] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  286.442286][T18345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.458986][T18344] tipc: Disabling bearer <eth:syzkaller0>
[  286.558253][T18351] 8021q: adding VLAN 0 to HW filter on device bond30
[  286.848732][T18294] Bluetooth: hci0: Opcode 0x080f failed: -4
[  286.984845][T18368] hsr0 speed is unknown, defaulting to 1000
[  287.131318][T18388] 8021q: adding VLAN 0 to HW filter on device bond22
[  287.136283][T18388] bond22: entered promiscuous mode
[  287.247010][T18398] hsr0 speed is unknown, defaulting to 1000
[  287.258204][T18404] hsr0 speed is unknown, defaulting to 1000
[  287.356665][T18398] syzkaller0: entered promiscuous mode
[  287.364872][T18398] syzkaller0: entered allmulticast mode
[  287.394259][T18398] macsec0: entered promiscuous mode
[  287.666839][T18427] syzkaller1: entered promiscuous mode
[  287.670571][T18427] syzkaller1: entered allmulticast mode
[  287.772390][T18427] hsr0 speed is unknown, defaulting to 1000
[  287.778742][T18429] hsr0 speed is unknown, defaulting to 1000
[  288.111819][T18459] __nla_validate_parse: 64 callbacks suppressed
[  288.111833][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3291'.
[  288.193355][T18465] validate_nla: 3 callbacks suppressed
[  288.193368][T18465] netlink: 'syz.0.3294': attribute type 3 has an invalid length.
[  288.249742][T18465] pimreg: left allmulticast mode
[  288.301862][T18468] siw: device registration error -23
[  288.304589][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'.
[  288.339170][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'.
[  288.348679][T18470] vlan0: entered promiscuous mode
[  288.350451][T18470] gretap0: entered promiscuous mode
[  288.417555][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'.
[  288.479093][T18483] pim6reg: entered allmulticast mode
[  288.490979][T18475] pim6reg: left allmulticast mode
[  288.494804][T18485] netlink: 'syz.1.3300': attribute type 29 has an invalid length.
[  288.499887][T18485] netlink: 'syz.1.3300': attribute type 29 has an invalid length.
[  288.502685][T18485] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3300'.
[  288.536586][T18488] netlink: 'syz.1.3301': attribute type 14 has an invalid length.
[  288.619396][T18494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3302'.
[  288.638265][T18505] netlink: 'syz.1.3304': attribute type 29 has an invalid length.
[  288.664265][T18505] netlink: 'syz.1.3304': attribute type 29 has an invalid length.
[  288.673346][T18505] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3304'.
[  288.739826][T18516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3306'.
[  288.748519][T18516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3306'.
[  288.779824][T18516] netlink: 'syz.1.3306': attribute type 29 has an invalid length.
[  288.784309][T18516] netlink: 'syz.1.3306': attribute type 29 has an invalid length.
[  288.787834][T18516] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3306'.
[  288.800977][T18522] netlink: 'syz.2.3308': attribute type 4 has an invalid length.
[  288.806898][T18522] netlink: 'syz.2.3308': attribute type 4 has an invalid length.
[  288.846738][   T33] audit: type=1107 audit(1756464444.272:6): pid=18527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='(- 1C	(a6o51G8xO>pܞr~@F+ZI"qq
[  288.846738][   T33] !M'hO`Z$AL+tֵ1'
[  289.383375][T18565] team0: Port device 0! added
[  289.701073][T18580] syzkaller1: entered promiscuous mode
[  289.703948][T18580] syzkaller1: entered allmulticast mode
[  289.974410][T18597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.596295][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 150 seconds
[  291.140230][T18627] hsr0 speed is unknown, defaulting to 1000
[  291.453826][T18667] hsr0 speed is unknown, defaulting to 1000
[  291.651542][T18686] batadv_slave_1: entered promiscuous mode
[  291.656826][T18685] batadv_slave_1: left promiscuous mode
[  291.706996][T18694] openvswitch: netlink: Flow key attribute not present in set flow.
[  291.710500][T18694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  291.713483][T18694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  292.118206][T18713] bridge10: port 1(bond32) entered blocking state
[  292.120937][T18713] bridge10: port 1(bond32) entered disabled state
[  292.123694][T18713] bond32: entered allmulticast mode
[  292.452945][T18729] hsr0 speed is unknown, defaulting to 1000
[  292.735203][T18748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  292.738913][T18748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  292.750396][T18751] netem: unknown loss type 12
[  292.752123][T18751] netem: change failed
[  292.931240][T18772] syzkaller1: entered promiscuous mode
[  292.933181][T18772] syzkaller1: entered allmulticast mode
[  293.174339][T18790] __nla_validate_parse: 73 callbacks suppressed
[  293.174353][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3383'.
[  293.201270][T18792] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  293.396576][T18809] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3389'.
[  293.420334][T18811] smc: removing net device bond0 with user defined pnetid SYZ2
[  293.423216][T18811] bond0 (unregistering): Released all slaves
[  293.567739][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'.
[  293.604754][T18820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3392'.
[  293.622749][T18822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3393'.
[  293.656847][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'.
[  293.733900][T18831] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  293.753902][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  293.758332][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  293.785206][T18836] RDS: rds_bind could not find a transport for ::ffff:172.20.20.48, load rds_tcp or rds_rdma?
[  293.798384][T18836] validate_nla: 8 callbacks suppressed
[  293.798398][T18836] netlink: 'syz.0.3399': attribute type 4 has an invalid length.
[  293.806950][T18836] netlink: 'syz.0.3399': attribute type 4 has an invalid length.
[  293.925534][T18851] hsr0 speed is unknown, defaulting to 1000
[  294.210084][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3404'.
[  294.271591][T18856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3404'.
[  294.308041][T18859] netlink: 'syz.2.3405': attribute type 1 has an invalid length.
[  294.317705][T18859] smc: adding net device bond0 with user defined pnetid SYZ2
[  294.321269][T18859] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.366680][T18862] hsr0 speed is unknown, defaulting to 1000
[  294.470742][T18862] netlink: 'syz.2.3406': attribute type 21 has an invalid length.
[  294.473801][T18862] netlink: 'syz.2.3406': attribute type 4 has an invalid length.
[  294.477294][T18862] netlink: 'syz.2.3406': attribute type 5 has an invalid length.
[  294.659368][T18871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.815782][T18878] 8021q: adding VLAN 0 to HW filter on device bond23
[  294.819663][T18878] bond0: (slave bond23): Enslaving as an active interface with a down link
[  294.870943][T18881] netlink: 'syz.0.3412': attribute type 1 has an invalid length.
[  294.892234][T18881] 8021q: adding VLAN 0 to HW filter on device bond24
[  294.990985][T18897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.994688][T18893] bridge0: port 1(erspan0) entered blocking state
[  294.998948][T18893] bridge0: port 1(erspan0) entered disabled state
[  295.001526][T18893] erspan0: entered allmulticast mode
[  295.004350][T18893] erspan0: entered promiscuous mode
[  295.007877][T18893] bridge0: port 1(erspan0) entered blocking state
[  295.010381][T18893] bridge0: port 1(erspan0) entered forwarding state
[  295.014552][T18894] erspan0: left allmulticast mode
[  295.017307][T18894] erspan0: left promiscuous mode
[  295.019335][T18894] bridge0: port 1(erspan0) entered disabled state
[  295.053001][T18903] netlink: 'syz.0.3418': attribute type 10 has an invalid length.
[  295.063036][T18903] team0: Cannot enslave team device to itself
[  295.394840][T18935] hsr0 speed is unknown, defaulting to 1000
[  295.747540][T18962] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.824447][T18962] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.832561][T18966] netlink: 'syz.2.3430': attribute type 10 has an invalid length.
[  295.837887][T18966] netlink: 'syz.2.3430': attribute type 10 has an invalid length.
[  295.841369][T18966] team0: Port device 0! removed
[  295.890293][T18962] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.948536][T18962] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.013520][ T5910] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.037544][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.052925][ T5910] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.065164][ T5910] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.675048][T18997] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  296.806553][T19007] 8021q: adding VLAN 0 to HW filter on device bond34
[  296.810652][T19007] bond33: (slave bond34): making interface the new active one
[  296.813651][T19007] bond33: (slave bond34): Enslaving as an active interface with an up link
[  296.821014][T19007] 8021q: adding VLAN 0 to HW filter on device bond33
[  296.863907][T19012] hsr0 speed is unknown, defaulting to 1000
[  297.034519][T19018] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  297.109631][T19018] tipc: Resetting bearer <eth:syzkaller0>
[  297.213323][T19025] dvmrp8: entered allmulticast mode
[  297.223766][T19027] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.241833][T19024] dvmrp8: left allmulticast mode
[  297.297802][T19027] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.389609][T19027] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.468576][T19027] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.508356][ T5910] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.519214][ T5910] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.528228][ T5680] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.535180][ T5680] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.580755][T19046] xt_HMARK: proto mask must be zero with L3 mode
[  297.620143][T19049] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  297.624324][T19049] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  297.649180][T19055] 8021q: adding VLAN 0 to HW filter on device bond31
[  297.656998][T19055] bond31: entered promiscuous mode
[  297.741842][T19061] 8021q: adding VLAN 0 to HW filter on device bond33
[  297.746881][T19061] bond32: (slave bond33): Enslaving as an active interface with an up link
[  297.752956][T19062] bond32 (unregistering): (slave bond33): Releasing backup interface
[  297.758513][T19062] bond32 (unregistering): Released all slaves
[  297.916585][T19082] 8021q: adding VLAN 0 to HW filter on device bond32
[  298.279013][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 240 seconds
[  298.283094][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 240 seconds
[  298.288045][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 240 seconds
[  298.292461][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 240 seconds
[  298.392636][T19106] __nla_validate_parse: 19 callbacks suppressed
[  298.392651][T19106] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3473'.
[  298.425186][T19108] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3474'.
[  298.468888][T19110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'.
[  298.528016][T19114] pim6reg: entered allmulticast mode
[  298.528445][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3477'.
[  298.533352][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3477'.
[  298.538121][T19114] pim6reg: left allmulticast mode
[  298.580667][T19118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.597398][T19119] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3475'.
[  298.741137][T19134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3480'.
[  298.749072][T19136] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3481'.
[  298.784082][T19134] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  299.149591][T19183] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3490'.
[  299.157286][T19183] netlink: zone id is out of range
[  299.159408][T19183] netlink: zone id is out of range
[  299.161329][T19183] netlink: zone id is out of range
[  299.163192][T19183] netlink: zone id is out of range
[  299.165213][T19183] netlink: zone id is out of range
[  299.168642][T19183] netlink: zone id is out of range
[  299.174094][T19183] netlink: zone id is out of range
[  299.176301][T19183] netlink: zone id is out of range
[  299.317874][T19197] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.358082][T19197] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.409678][T19197] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.459596][T19197] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.530203][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.539413][ T5680] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.547548][ T5896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.559089][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.892721][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'.
[  299.897080][T19203] bridge_slave_1: left allmulticast mode
[  299.899428][T19203] bridge_slave_1: left promiscuous mode
[  299.901857][T19203] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.907423][T19203] bridge_slave_0: left allmulticast mode
[  299.909816][T19203] bridge_slave_0: left promiscuous mode
[  299.912084][T19203] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.070611][T19210] validate_nla: 9 callbacks suppressed
[  300.070663][T19210] netlink: 'syz.1.3499': attribute type 1 has an invalid length.
[  300.078169][T19210] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR
[  300.190797][T19219] hsr0 speed is unknown, defaulting to 1000
[  300.446723][T19225] netlink: 'syz.0.3502': attribute type 14 has an invalid length.
[  300.450015][T19225] netlink: 'syz.0.3502': attribute type 13 has an invalid length.
[  301.003383][T19263] hsr0 speed is unknown, defaulting to 1000
[  301.303243][T19263] syzkaller0: entered promiscuous mode
[  301.306483][T19263] syzkaller0: entered allmulticast mode
[  301.578076][T19268] ip6gre0: entered promiscuous mode
[  301.579910][T19268] ip6gre0: entered allmulticast mode
[  301.582424][T19271] hsr0 speed is unknown, defaulting to 1000
[  301.928076][T19295] netlink: 'syz.0.3516': attribute type 10 has an invalid length.
[  301.987005][T19298] netlink: 'syz.0.3516': attribute type 10 has an invalid length.
[  302.000988][T19292] batadv0: left allmulticast mode
[  302.003838][T19292] batadv0: left promiscuous mode
[  302.095195][T19298] team0: Port device 0! removed
[  302.644537][T19308] net_ratelimit: 289 callbacks suppressed
[  302.644554][T19308] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  302.736724][T19310] hsr0 speed is unknown, defaulting to 1000
[  303.020429][T19326] tipc: Enabling <ib:lo> not permitted
[  303.022929][T19326] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  303.181317][T19344] pim6reg: entered allmulticast mode
[  303.188467][T19344] pim6reg: left allmulticast mode
[  303.781076][T19352] netlink: 'syz.2.3539': attribute type 3 has an invalid length.
[  303.783572][T19352] __nla_validate_parse: 10 callbacks suppressed
[  303.783582][T19352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3539'.
[  303.824311][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'.
[  304.119745][T19370] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.169992][T19370] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.230516][T19370] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.290198][T19370] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.356914][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  304.363536][ T5896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  304.371951][ T5896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  304.379893][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  304.556251][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'.
[  304.560652][T19378] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3546'.
[  304.563850][T19377] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3546'.
[  304.908019][T19406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3552'.
[  304.914293][T19406] veth0_to_team: left promiscuous mode
[  304.919706][T19406] veth0_to_team: left allmulticast mode
[  304.931496][T19406] bond5: left promiscuous mode
[  304.933521][T19406] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  304.938401][T19406] macsec0: left promiscuous mode
[  304.941014][T19406] macsec0: left allmulticast mode
[  304.944234][T19406] bond7: left promiscuous mode
[  304.954146][T19406] vxlan0: left promiscuous mode
[  304.956769][T19406] vxlan0: left allmulticast mode
[  304.965257][T19406] bond17: left promiscuous mode
[  304.974760][T19406] bond21: left promiscuous mode
[  304.977797][T19406] bond22: left promiscuous mode
[  304.981673][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.988050][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  304.995135][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.004200][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.059142][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3556'.
[  305.081629][T19421] netlink: 'syz.0.3557': attribute type 29 has an invalid length.
[  305.084680][T19421] netlink: 'syz.0.3557': attribute type 29 has an invalid length.
[  305.089421][T19421] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3557'.
[  305.104808][T19422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3554'.
[  305.387140][T19441] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  305.511731][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'.
[  305.567236][T19449] bond25 (unregistering): Released all slaves
[  305.614613][T19458] netlink: 'syz.2.3567': attribute type 4 has an invalid length.
[  305.830649][T19417] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  306.274091][T19522] netlink: 'syz.1.3584': attribute type 32 has an invalid length.
[  306.278382][T19523] netlink: 'syz.1.3584': attribute type 32 has an invalid length.
[  306.307294][T19510] nbd2: detected capacity change from 0 to 127
[  306.312554][   T56] block nbd2: Receive control failed (result -32)
[  306.317302][ T5942] block nbd2: Receive control failed (result -32)
[  306.692912][T19547] netlink: 'syz.1.3591': attribute type 1 has an invalid length.
[  306.704006][T19547] 8021q: adding VLAN 0 to HW filter on device bond35
[  307.363092][T19585] bridge0: port 1(erspan0) entered blocking state
[  307.367222][T19585] bridge0: port 1(erspan0) entered disabled state
[  307.369379][T19585] erspan0: entered allmulticast mode
[  307.371487][T19585] erspan0: entered promiscuous mode
[  307.374700][T19586] erspan0: left allmulticast mode
[  307.377812][T19586] erspan0: left promiscuous mode
[  307.379535][T19586] bridge0: port 1(erspan0) entered disabled state
[  307.609648][T19606] hsr0 speed is unknown, defaulting to 1000
[  307.621501][T19609] hsr0 speed is unknown, defaulting to 1000
[  307.668228][T19611] netlink: 'syz.1.3609': attribute type 30 has an invalid length.
[  308.050122][T19627] netlink: 'syz.2.3613': attribute type 2 has an invalid length.
[  308.097611][T19628] netlink: 'syz.0.3612': attribute type 10 has an invalid length.
[  308.104545][T19628] team0: Port device 0! added
[  308.108561][T19628] netlink: 'syz.0.3612': attribute type 10 has an invalid length.
[  308.114400][T19628] team0: Port device 0! removed
[  308.219945][T19636] bridge0: port 1(wlan0) entered blocking state
[  308.221961][T19636] bridge0: port 1(wlan0) entered disabled state
[  308.224162][T19636] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  308.232969][T19636] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  308.904024][T19664] __nla_validate_parse: 14 callbacks suppressed
[  308.904039][T19664] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3623'.
[  309.067570][T19676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3627'.
[  309.073594][T19676] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3627'.
[  309.151054][T19681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.154220][T19681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.653998][T19700] netlink: zone id is out of range
[  309.656781][T19700] netlink: zone id is out of range
[  309.658565][T19700] netlink: zone id is out of range
[  309.660258][T19700] netlink: zone id is out of range
[  309.661882][T19700] netlink: zone id is out of range
[  309.663703][T19700] netlink: zone id is out of range
[  309.666491][T19700] netlink: zone id is out of range
[  309.668173][T19700] netlink: zone id is out of range
[  309.669942][T19700] netlink: zone id is out of range
[  309.671563][T19700] netlink: zone id is out of range
[  309.700145][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'.
[  310.004855][T19720] 8021q: VLANs not supported on tunl0
[  310.043439][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3642'.
[  310.047734][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3642'.
[  310.161148][T19746] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.3644'.
[  310.166396][T19746] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3644'.
[  310.201390][T19752] can: request_module (can-proto-4) failed.
[  310.238770][T19760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3648'.
[  310.243263][T19760] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3648'.
[  310.338594][T19771] validate_nla: 1 callbacks suppressed
[  310.338605][T19771] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  310.353882][T19771] hsr0 speed is unknown, defaulting to 1000
[  311.118757][T19806] netlink: 'syz.0.3660': attribute type 10 has an invalid length.
[  311.308803][T19816] netlink: 'syz.1.3664': attribute type 1 has an invalid length.
[  311.318383][T19816] 8021q: adding VLAN 0 to HW filter on device bond36
[  311.385177][T19819] netlink: 'syz.1.3665': attribute type 4 has an invalid length.
[  311.528375][T19845] netlink: 'syz.1.3672': attribute type 2 has an invalid length.
[  311.617493][T19860] netlink: 'syz.0.3677': attribute type 3 has an invalid length.
[  311.625043][T19863] macsec0: entered allmulticast mode
[  311.634476][T19864] hsr0 speed is unknown, defaulting to 1000
[  311.694687][T19859] macsec0: left allmulticast mode
[  311.716338][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  311.934901][T19890] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  312.022703][T19915] netlink: 'syz.2.3692': attribute type 1 has an invalid length.
[  312.230983][T19920] xfrm2: entered promiscuous mode
[  312.255955][T19920] 8021q: adding VLAN 0 to HW filter on device bond35
[  312.259374][T19920] bond34: (slave bond35): Enslaving as an active interface with an up link
[  312.271650][T19920] bond34 (unregistering): (slave bond35): Releasing backup interface
[  312.278871][T19920] bond34 (unregistering): Released all slaves
[  312.455174][T19934] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  312.456722][T19935] netlink: 'syz.0.3698': attribute type 1 has an invalid length.
[  312.474068][T19934] 8021q: adding VLAN 0 to HW filter on device bond25
[  312.595037][T19948] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.651942][T19950] netlink: 'syz.2.3702': attribute type 2 has an invalid length.
[  312.745075][T19948] hsr0 speed is unknown, defaulting to 1000
[  312.924713][T19964] 8021q: adding VLAN 0 to HW filter on device bond37
[  312.933827][T19964] bond37: entered promiscuous mode
[  313.174924][T19983] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  313.182192][T19983] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  313.188337][T19983] syzkaller1: entered promiscuous mode
[  313.190242][T19983] syzkaller1: entered allmulticast mode
[  313.864201][T20011] hsr0 speed is unknown, defaulting to 1000
[  314.507647][T20035] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  314.697856][T20056] __nla_validate_parse: 28 callbacks suppressed
[  314.697876][T20056] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3734'.
[  314.856608][T20073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3738'.
[  314.858174][T20072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3737'.
[  314.866442][T20072] batadv1: entered promiscuous mode
[  314.868214][T20072] batadv1: entered allmulticast mode
[  314.934972][T20086] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3742'.
[  314.993435][T20093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'.
[  315.024671][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'.
[  315.088934][T20101] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3745'.
[  315.159868][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'.
[  315.216760][T20110] tipc: Trying to set illegal importance in message
[  315.438709][T20118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  315.441949][T20118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  315.776296][T20121] hsr0 speed is unknown, defaulting to 1000
[  316.173400][T20134] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  316.178247][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3754'.
[  316.331840][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'.
[  316.637718][T20146] pim6reg: entered allmulticast mode
[  316.646835][T20146] pim6reg: left allmulticast mode
[  316.709494][T20148] bond27: entered promiscuous mode
[  316.712154][T20148] 8021q: adding VLAN 0 to HW filter on device bond27
[  316.719132][T20148] bond27 (unregistering): Released all slaves
[  316.861961][T20153] hsr0 speed is unknown, defaulting to 1000
[  317.260244][T20163] hsr0 speed is unknown, defaulting to 1000
[  317.422218][T20168] validate_nla: 3 callbacks suppressed
[  317.422238][T20168] netlink: 'syz.1.3763': attribute type 2 has an invalid length.
[  317.942009][T20221] : entered promiscuous mode
[  318.010777][T20227] netlink: 'syz.0.3781': attribute type 2 has an invalid length.
[  318.014029][T20228] netlink: 'syz.0.3781': attribute type 2 has an invalid length.
[  318.022222][T20227] net_ratelimit: 297 callbacks suppressed
[  318.022242][T20227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.042839][T20228] veth0_to_team: entered promiscuous mode
[  318.044591][T20228] veth0_to_team: entered allmulticast mode
[  318.220288][T20255] hsr0 speed is unknown, defaulting to 1000
[  318.314964][T20259] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  318.532931][T20273] hsr0 speed is unknown, defaulting to 1000
[  318.627084][T20273] syzkaller0: entered promiscuous mode
[  318.629329][T20273] syzkaller0: entered allmulticast mode
[  318.636791][T20273] macsec0: entered promiscuous mode
[  318.818376][T20280] hsr0 speed is unknown, defaulting to 1000
[  319.070789][T20292] tipc: Invalid UDP bearer configuration
[  319.070810][T20292] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  319.083249][T20294] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  319.088335][T20294] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  319.139912][T20298] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  319.294204][T20305] sctp: [Deprecated]: syz.1.3806 (pid 20305) Use of int in max_burst socket option.
[  319.294204][T20305] Use struct sctp_assoc_value instead
[  319.419320][T20308] 8021q: adding VLAN 0 to HW filter on device bond38
[  319.423553][T20308] bond0: (slave bond38): Enslaving as an active interface with an up link
[  319.619065][T20332] netlink: 'syz.1.3816': attribute type 1 has an invalid length.
[  319.636232][T20332] 8021q: adding VLAN 0 to HW filter on device bond39
[  319.779786][T20350] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  319.848426][T20355] netlink: 'syz.1.3824': attribute type 1 has an invalid length.
[  319.852682][T20355] __nla_validate_parse: 21 callbacks suppressed
[  319.852692][T20355] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3824'.
[  319.900730][T20362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3826'.
[  319.920265][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3826'.
[  319.941413][T20364] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3827'.
[  319.944974][T20364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3827'.
[  319.949964][T20364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3827'.
[  319.972694][T20366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.683112][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 180 seconds
[  320.773944][T20386] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3831'.
[  320.803620][T20388] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  320.807633][T20388] netlink: 'syz.2.3832': attribute type 2 has an invalid length.
[  320.814327][T20388] sctp: [Deprecated]: syz.2.3832 (pid 20388) Use of int in maxseg socket option.
[  320.814327][T20388] Use struct sctp_assoc_value instead
[  320.823909][T20391] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.829819][T20391] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  320.869557][T20396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.873075][T20396] syzkaller0: entered promiscuous mode
[  320.875195][T20396] syzkaller0: entered allmulticast mode
[  320.883827][T20396] tipc: Resetting bearer <eth:syzkaller0>
[  321.142412][T20394] tipc: Resetting bearer <eth:syzkaller0>
[  321.148988][T20394] tipc: Disabling bearer <eth:syzkaller0>
[  321.184548][T20417] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  321.210313][T20417] 8021q: adding VLAN 0 to HW filter on device bond28
[  321.958110][T20463] netlink: 'syz.1.3851': attribute type 1 has an invalid length.
[  322.355089][T20475] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3854'.
[  322.359261][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3854'.
[  322.363270][T20477] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3855'.
[  322.411428][T20477] hsr0 speed is unknown, defaulting to 1000
[  322.601365][T20489] delete_channel: no stack
[  322.632882][T20500] validate_nla: 1 callbacks suppressed
[  322.632899][T20500] netlink: 'syz.1.3863': attribute type 1 has an invalid length.
[  322.638937][T20500] workqueue: Failed to create a rescuer kthread for wq "bond40": -EINTR
[  322.672291][T20512] veth0_to_bridge: entered promiscuous mode
[  322.697697][T20512] veth0_to_bridge: left promiscuous mode
[  322.812476][T20531] hsr0 speed is unknown, defaulting to 1000
[  323.136163][T20531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.196580][T20534] syzkaller0: entered promiscuous mode
[  323.198569][T20534] syzkaller0: entered allmulticast mode
[  323.313670][T20567] netlink: 'syz.0.3879': attribute type 1 has an invalid length.
[  323.325223][T20567] 8021q: adding VLAN 0 to HW filter on device bond29
[  323.366842][T20573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.396078][T20573] syzkaller0: entered promiscuous mode
[  323.398306][T20573] syzkaller0: entered allmulticast mode
[  323.493726][T20573] tipc: Resetting bearer <eth:syzkaller0>
[  323.503784][T20572] tipc: Resetting bearer <eth:syzkaller0>
[  323.508600][T20572] tipc: Disabling bearer <eth:syzkaller0>
[  323.516078][T20586] netlink: 'syz.1.3886': attribute type 7 has an invalid length.
[  323.518845][T20586] netlink: 'syz.1.3886': attribute type 8 has an invalid length.
[  323.538597][T20586] netlink: 'syz.1.3886': attribute type 1 has an invalid length.
[  323.589796][T20598] netlink: 'syz.2.3888': attribute type 3 has an invalid length.
[  323.603307][T20598] syz_tun: entered allmulticast mode
[  323.638712][T20598] veth0_to_team: left promiscuous mode
[  323.640605][T20598] veth0_to_team: left allmulticast mode
[  323.642602][T20598] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  323.652087][T20594] syz_tun: left allmulticast mode
[  323.678962][T20611] netlink: 'syz.0.3890': attribute type 1 has an invalid length.
[  323.681358][T20611] netlink: 'syz.0.3890': attribute type 1 has an invalid length.
[  323.737124][T20618] netlink: 'syz.0.3893': attribute type 1 has an invalid length.
[  323.781924][T20624] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  323.792818][T20624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.798439][T20624] syzkaller0: left promiscuous mode
[  323.800872][T20624] syzkaller0: left allmulticast mode
[  323.807265][T20624] tipc: Resetting bearer <eth:syzkaller0>
[  323.810385][T20624] netlink: 'syz.1.3895': attribute type 29 has an invalid length.
[  324.453780][T20682] team0 (unregistering): Port device team_slave_0 removed
[  324.457043][T20682] team0 (unregistering): Port device team_slave_1 removed
[  324.489207][T20683] veth1_to_team: entered allmulticast mode
[  324.540811][T20694] openvswitch: netlink: Multiple metadata blocks provided
[  324.582323][T20701] smc: net device bond0 applied user defined pnetid SYZ2
[  324.622712][T20708] IPVS: persistence engine module ip_vs_pe_ not found
[  324.728959][T20718] pim6reg: entered allmulticast mode
[  324.743763][T20718] pim6reg: left allmulticast mode
[  324.929751][T20734] __nla_validate_parse: 27 callbacks suppressed
[  324.929773][T20734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3928'.
[  324.984098][T20736] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  324.993962][T20738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3930'.
[  325.347102][T20762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3936'.
[  325.505187][T20764] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3937'.
[  325.570089][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'.
[  325.573158][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3938'.
[  325.641384][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'.
[  325.648602][T20772] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  325.652440][T20772] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  325.766065][T20777] hsr0 speed is unknown, defaulting to 1000
[  325.932662][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'.
[  325.937788][T20777] syzkaller0: entered promiscuous mode
[  325.939989][T20777] syzkaller0: entered allmulticast mode
[  325.947337][T20777] macsec0: entered promiscuous mode
[  325.973422][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'.
[  325.994810][T20792] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3944'.
[  326.048818][T20794] bridge7: entered promiscuous mode
[  326.050452][T20794] bridge7: entered allmulticast mode
[  326.057380][T20795] bridge8: entered promiscuous mode
[  326.059565][T20795] bridge8: entered allmulticast mode
[  326.062521][T20794] C: renamed from team_slave_0
[  326.068195][T20794] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  326.075200][T20795] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  326.108952][T20800] 8021q: adding VLAN 0 to HW filter on device bond40
[  326.378768][T20826] policy can only be matched on NF_INET_PRE_ROUTING
[  326.378780][T20826] unable to load match
[  328.356030][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 270 seconds
[  328.360464][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 270 seconds
[  328.364657][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 270 seconds
[  328.370272][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 270 seconds
[  341.939169][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  341.941704][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  341.944511][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  341.949100][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  341.952822][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  341.988707][T20843] hsr0 speed is unknown, defaulting to 1000
[  342.076207][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.078772][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.081637][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.084356][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.087376][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.089790][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.092340][   T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.095711][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.098712][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.101512][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.106724][T20845] hsr0 speed is unknown, defaulting to 1000
[  342.124234][T20847] hsr0 speed is unknown, defaulting to 1000
[  342.183532][T20843] chnl_net:caif_netlink_parms(): no params data found
[  342.338032][T20843] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.341095][T20843] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.343900][T20843] bridge_slave_0: entered allmulticast mode
[  342.348148][T20843] bridge_slave_0: entered promiscuous mode
[  342.353551][T20843] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.358889][T20843] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.361812][T20843] bridge_slave_1: entered allmulticast mode
[  342.365038][T20843] bridge_slave_1: entered promiscuous mode
[  342.426124][T20843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.430713][T20843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.437004][T20847] chnl_net:caif_netlink_parms(): no params data found
[  342.466833][T20843] team0: Port device team_slave_0 added
[  342.472554][T20843] team0: Port device team_slave_1 added
[  342.478931][T20845] chnl_net:caif_netlink_parms(): no params data found
[  342.514730][T20843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.518349][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.529478][T20843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.553315][T20843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.556810][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.567423][T20843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.571872][T20847] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.574906][T20847] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.578714][T20847] bridge_slave_0: entered allmulticast mode
[  342.582026][T20847] bridge_slave_0: entered promiscuous mode
[  342.593062][T20847] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.596829][T20847] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.599756][T20847] bridge_slave_1: entered allmulticast mode
[  342.602971][T20847] bridge_slave_1: entered promiscuous mode
[  342.652501][T20843] hsr_slave_0: entered promiscuous mode
[  342.654696][T20843] hsr_slave_1: entered promiscuous mode
[  342.674450][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.680184][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.683575][T20845] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.687413][T20845] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.690406][T20845] bridge_slave_0: entered allmulticast mode
[  342.693647][T20845] bridge_slave_0: entered promiscuous mode
[  342.709147][T20845] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.712099][T20845] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.715010][T20845] bridge_slave_1: entered allmulticast mode
[  342.719205][T20845] bridge_slave_1: entered promiscuous mode
[  342.736833][T20847] team0: Port device team_slave_0 added
[  342.747683][T20847] team0: Port device team_slave_1 added
[  342.763677][T20845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.770607][T20845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.783816][T20847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.787083][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.797676][T20847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.818521][T20847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.821323][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.832425][T20847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.838816][T20845] team0: Port device team_slave_0 added
[  342.849802][T20845] team0: Port device team_slave_1 added
[  342.884128][T20845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.887099][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.897011][T20845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.911055][T20845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.913463][T20845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.922706][T20845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.939867][T20847] hsr_slave_0: entered promiscuous mode
[  342.942764][T20847] hsr_slave_1: entered promiscuous mode
[  342.947382][T20847] debugfs: 'hsr0' already exists in 'hsr'
[  342.949583][T20847] Cannot create hsr debugfs directory
[  342.959950][T20845] hsr_slave_0: entered promiscuous mode
[  342.962134][T20845] hsr_slave_1: entered promiscuous mode
[  342.964374][T20845] debugfs: 'hsr0' already exists in 'hsr'
[  342.966806][T20845] Cannot create hsr debugfs directory
[  344.035730][ T5854] Bluetooth: hci3: command tx timeout
[  344.115989][ T5854] Bluetooth: hci4: command tx timeout
[  344.125907][ T5854] Bluetooth: hci5: command tx timeout
[  346.115921][ T5854] Bluetooth: hci3: command tx timeout
[  346.195824][ T5854] Bluetooth: hci5: command tx timeout
[  346.195943][ T5853] Bluetooth: hci4: command tx timeout
[  348.205942][ T5853] Bluetooth: hci3: command tx timeout
[  348.276253][ T5853] Bluetooth: hci4: command tx timeout
[  348.286182][ T5853] Bluetooth: hci5: command tx timeout
[  350.276072][ T5853] Bluetooth: hci3: command tx timeout
[  350.355556][ T5853] Bluetooth: hci5: command tx timeout
[  350.356293][ T5854] Bluetooth: hci4: command tx timeout
[  350.776050][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 210 seconds
[  358.436332][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 300 seconds
[  358.440469][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 300 seconds
[  358.444715][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 300 seconds
[  358.449455][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 300 seconds
[  380.836161][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 240 seconds
[  388.516397][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 330 seconds
[  388.520675][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 330 seconds
[  388.524921][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 330 seconds
[  388.529707][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 330 seconds
[  402.994594][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  402.998537][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  403.001750][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  403.005782][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  403.009179][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  403.039150][T20873] hsr0 speed is unknown, defaulting to 1000
[  403.046563][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  403.049891][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  403.053023][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  403.057383][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  403.060783][ T5854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  403.093143][T20875] hsr0 speed is unknown, defaulting to 1000
[  403.117729][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  403.120244][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  403.122985][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  403.145925][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  403.148659][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  403.168802][T20877] hsr0 speed is unknown, defaulting to 1000
[  403.276229][T20873] chnl_net:caif_netlink_parms(): no params data found
[  403.340077][T20875] chnl_net:caif_netlink_parms(): no params data found
[  403.377863][T20873] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.380980][T20873] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.384094][T20873] bridge_slave_0: entered allmulticast mode
[  403.388971][T20873] bridge_slave_0: entered promiscuous mode
[  403.392805][T20873] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.396419][T20873] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.399401][T20873] bridge_slave_1: entered allmulticast mode
[  403.402621][T20873] bridge_slave_1: entered promiscuous mode
[  403.446605][T20873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.463045][T20873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.483721][T20875] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.486793][T20875] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.489160][T20875] bridge_slave_0: entered allmulticast mode
[  403.491947][T20875] bridge_slave_0: entered promiscuous mode
[  403.507952][T20875] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.510365][T20875] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.513072][T20875] bridge_slave_1: entered allmulticast mode
[  403.515733][T20875] bridge_slave_1: entered promiscuous mode
[  403.528985][T20873] team0: Port device team_slave_0 added
[  403.533135][T20873] team0: Port device team_slave_1 added
[  403.544501][T20875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.552039][T20875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.573603][T20873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.577028][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.587381][T20873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.612799][T20873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.616122][T20873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.625045][T20873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.639405][T20875] team0: Port device team_slave_0 added
[  403.649127][T20875] team0: Port device team_slave_1 added
[  403.686601][T20875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.689408][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.700764][T20875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.716475][T20873] hsr_slave_0: entered promiscuous mode
[  403.719369][T20873] hsr_slave_1: entered promiscuous mode
[  403.722670][T20873] debugfs: 'hsr0' already exists in 'hsr'
[  403.724948][T20873] Cannot create hsr debugfs directory
[  403.736187][T20875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.738930][T20875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.749966][T20875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.825180][T20877] chnl_net:caif_netlink_parms(): no params data found
[  403.846884][T20875] hsr_slave_0: entered promiscuous mode
[  403.858171][T20875] hsr_slave_1: entered promiscuous mode
[  403.878581][T20875] debugfs: 'hsr0' already exists in 'hsr'
[  403.880599][T20875] Cannot create hsr debugfs directory
[  403.999790][T20877] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.002851][T20877] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.006445][T20877] bridge_slave_0: entered allmulticast mode
[  404.010254][T20877] bridge_slave_0: entered promiscuous mode
[  404.014201][T20877] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.018486][T20877] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.021522][T20877] bridge_slave_1: entered allmulticast mode
[  404.024974][T20877] bridge_slave_1: entered promiscuous mode
[  404.082675][T20877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.093852][T20877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.113637][T20877] team0: Port device team_slave_0 added
[  404.118834][T20877] team0: Port device team_slave_1 added
[  404.140646][T20877] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.143639][T20877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.156729][T20877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.162666][T20877] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.166233][T20877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.178044][T20877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.209639][T20877] hsr_slave_0: entered promiscuous mode
[  404.212750][T20877] hsr_slave_1: entered promiscuous mode
[  404.215225][T20877] debugfs: 'hsr0' already exists in 'hsr'
[  404.218397][T20877] Cannot create hsr debugfs directory
[  405.075639][ T5854] Bluetooth: hci6: command tx timeout
[  405.077953][ T5853] Bluetooth: hci7: command tx timeout
[  405.156173][ T5853] Bluetooth: hci8: command tx timeout
[  407.155836][ T5854] Bluetooth: hci6: command tx timeout
[  407.158232][ T5853] Bluetooth: hci7: command tx timeout
[  407.236078][ T5853] Bluetooth: hci8: command tx timeout
[  409.235918][ T5854] Bluetooth: hci6: command tx timeout
[  409.238093][ T5853] Bluetooth: hci7: command tx timeout
[  409.315886][ T5853] Bluetooth: hci8: command tx timeout
[  410.918058][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 270 seconds
[  411.315799][ T5853] Bluetooth: hci6: command tx timeout
[  411.315969][ T5854] Bluetooth: hci7: command tx timeout
[  411.395864][ T5854] Bluetooth: hci8: command tx timeout
[  418.595936][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 360 seconds
[  418.599986][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 360 seconds
[  418.604126][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 360 seconds
[  418.609188][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 360 seconds
[  440.996584][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 300 seconds
[  448.677325][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 390 seconds
[  448.681343][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 390 seconds
[  448.685811][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 390 seconds
[  448.689625][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 390 seconds
[  464.039711][ T5853] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  464.043184][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  464.047454][ T5853] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  464.051259][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  464.054660][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  464.077854][ T5853] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  464.081071][ T5853] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  464.084453][ T5853] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  464.088845][ T5853] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  464.092247][ T5853] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  464.106420][ T5854] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  464.109475][ T5854] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  464.112753][ T5854] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  464.118046][T20902] hsr0 speed is unknown, defaulting to 1000
[  464.121174][ T5854] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  464.124590][ T5854] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  464.129047][T20900] hsr0 speed is unknown, defaulting to 1000
[  464.160258][T20904] hsr0 speed is unknown, defaulting to 1000
[  464.310829][T20902] chnl_net:caif_netlink_parms(): no params data found
[  464.424637][T20902] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.428536][T20902] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.431113][T20902] bridge_slave_0: entered allmulticast mode
[  464.434018][T20902] bridge_slave_0: entered promiscuous mode
[  464.439269][T20902] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.441535][T20902] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.443832][T20902] bridge_slave_1: entered allmulticast mode
[  464.447724][T20902] bridge_slave_1: entered promiscuous mode
[  464.483013][T20900] chnl_net:caif_netlink_parms(): no params data found
[  464.489526][T20902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.506737][T20902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.547284][T20902] team0: Port device team_slave_0 added
[  464.551463][T20902] team0: Port device team_slave_1 added
[  464.578738][T20902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.581495][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.592416][T20902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.603678][T20900] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.607868][T20900] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.610347][T20900] bridge_slave_0: entered allmulticast mode
[  464.612896][T20900] bridge_slave_0: entered promiscuous mode
[  464.616590][T20904] chnl_net:caif_netlink_parms(): no params data found
[  464.623693][T20902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.626872][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.637035][T20902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.641374][T20900] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.643683][T20900] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.647084][T20900] bridge_slave_1: entered allmulticast mode
[  464.649954][T20900] bridge_slave_1: entered promiscuous mode
[  464.676978][T20900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.691179][T20900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.730118][T20900] team0: Port device team_slave_0 added
[  464.750182][T20900] team0: Port device team_slave_1 added
[  464.755007][T20902] hsr_slave_0: entered promiscuous mode
[  464.758677][T20902] hsr_slave_1: entered promiscuous mode
[  464.761396][T20902] debugfs: 'hsr0' already exists in 'hsr'
[  464.763617][T20902] Cannot create hsr debugfs directory
[  464.772945][T20904] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.775254][T20904] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.778888][T20904] bridge_slave_0: entered allmulticast mode
[  464.782254][T20904] bridge_slave_0: entered promiscuous mode
[  464.787210][T20904] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.790079][T20904] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.793083][T20904] bridge_slave_1: entered allmulticast mode
[  464.797710][T20904] bridge_slave_1: entered promiscuous mode
[  464.818296][T20900] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.821235][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.832563][T20900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.853518][T20900] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.856941][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.866071][T20900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.873563][T20904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  464.896164][T20904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  464.915237][T20900] hsr_slave_0: entered promiscuous mode
[  464.918387][T20900] hsr_slave_1: entered promiscuous mode
[  464.920371][T20900] debugfs: 'hsr0' already exists in 'hsr'
[  464.922284][T20900] Cannot create hsr debugfs directory
[  464.936922][T20904] team0: Port device team_slave_0 added
[  464.941478][T20904] team0: Port device team_slave_1 added
[  464.968957][T20904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.971744][T20904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.982814][T20904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.993095][T20904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.996989][T20904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.007699][T20904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.091646][T20904] hsr_slave_0: entered promiscuous mode
[  465.094587][T20904] hsr_slave_1: entered promiscuous mode
[  465.098530][T20904] debugfs: 'hsr0' already exists in 'hsr'
[  465.100774][T20904] Cannot create hsr debugfs directory
[  466.116172][   T55] Bluetooth: hci10: command tx timeout
[  466.118709][   T55] Bluetooth: hci9: command tx timeout
[  466.195910][T20924] Bluetooth: hci11: command tx timeout
[  467.396117][T20924] Bluetooth: hci4: command 0x0406 tx timeout
[  467.396670][T20926] Bluetooth: hci3: command 0x0406 tx timeout
[  467.399177][T20924] Bluetooth: hci5: command 0x0406 tx timeout
[  468.196190][T20927] Bluetooth: hci10: command tx timeout
[  468.198539][   T55] Bluetooth: hci9: command tx timeout
[  468.285872][   T55] Bluetooth: hci11: command tx timeout
[  470.275965][   T55] Bluetooth: hci9: command tx timeout
[  470.276285][T20927] Bluetooth: hci10: command tx timeout
[  470.356108][T20927] Bluetooth: hci11: command tx timeout
[  471.086498][   T25] block nbd1: Possible stuck request ffff888022c08000: control (read@0,4096B). Runtime 330 seconds
[  472.355951][T20927] Bluetooth: hci10: command tx timeout
[  472.356418][   T55] Bluetooth: hci9: command tx timeout
[  472.436082][   T55] Bluetooth: hci11: command tx timeout
[  478.766291][   T34] INFO: task syz.1.3947:20803 blocked for more than 143 seconds.
[  478.769181][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  478.771212][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  478.775177][   T34] task:syz.1.3947      state:D stack:26152 pid:20803 tgid:20802 ppid:5842   task_flags:0x480140 flags:0x00004004
[  478.779658][   T61] block nbd0: Possible stuck request ffff888022b90000: control (read@0,1024B). Runtime 420 seconds
[  478.783050][   T61] block nbd0: Possible stuck request ffff888022b90200: control (read@1024,1024B). Runtime 420 seconds
[  478.786894][   T61] block nbd0: Possible stuck request ffff888022b90400: control (read@2048,1024B). Runtime 420 seconds
[  478.790671][   T61] block nbd0: Possible stuck request ffff888022b90600: control (read@3072,1024B). Runtime 420 seconds
[  478.794546][   T34] Call Trace:
[  478.796015][   T34]  <TASK>
[  478.797255][   T34]  __schedule+0x1798/0x4cc0
[  478.799106][   T34]  ? do_raw_spin_lock+0x121/0x290
[  478.801126][   T34]  ? __pfx___schedule+0x10/0x10
[  478.803073][   T34]  ? schedule+0x91/0x360
[  478.804774][   T34]  ? rcu_is_watching+0x15/0xb0
[  478.807385][   T34]  ? lock_release+0x4b/0x3e0
[  478.809277][   T34]  schedule+0x165/0x360
[  478.810969][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  478.813164][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  478.816229][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  478.818434][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  478.820278][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  478.822197][   T34]  nbd_set_size+0x47e/0x6a0
[  478.823676][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  478.825242][   T34]  ? nla_memcpy+0x5b/0xc0
[  478.827403][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  478.829009][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  478.830689][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  478.832571][   T34]  ? bpf_lsm_capable+0x9/0x20
[  478.834120][   T34]  ? security_capable+0x7e/0x2e0
[  478.836307][   T34]  ? radix_tree_lookup+0x240/0x290
[  478.838090][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  478.839720][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  478.841494][   T34]  ? __nla_parse+0x40/0x60
[  478.842888][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  478.844876][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  478.847262][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  478.849178][   T34]  ? stack_trace_save+0x9c/0xe0
[  478.850656][   T34]  genl_rcv_msg+0x60e/0x790
[  478.852093][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.853700][   T34]  ? do_raw_spin_lock+0x121/0x290
[  478.855956][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  478.857883][   T34]  ? __netlink_lookup+0xbd/0x810
[  478.859423][   T34]  ? rcu_is_watching+0x15/0xb0
[  478.860935][   T34]  netlink_rcv_skb+0x208/0x470
[  478.862421][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  478.864059][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  478.866393][   T34]  ? lock_release+0x4b/0x3e0
[  478.867916][   T34]  ? down_read+0x1ad/0x2e0
[  478.869346][   T34]  genl_rcv+0x28/0x40
[  478.870612][   T34]  netlink_unicast+0x82f/0x9e0
[  478.872134][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  478.873746][   T34]  ? netlink_sendmsg+0x642/0xb30
[  478.875857][   T34]  netlink_sendmsg+0x805/0xb30
[  478.877468][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.879222][   T34]  ? futex_unqueue+0x22/0x240
[  478.880879][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  478.882597][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  478.884351][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  478.886870][   T34]  __sock_sendmsg+0x21c/0x270
[  478.888439][   T34]  ____sys_sendmsg+0x505/0x830
[  478.889905][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  478.891590][   T34]  ? __might_fault+0xb0/0x130
[  478.893102][   T34]  ? import_iovec+0x74/0xa0
[  478.894573][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  478.896586][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  478.898267][   T34]  ? futex_wait+0x285/0x360
[  478.899754][   T34]  ? __fget_files+0x2a/0x420
[  478.901225][   T34]  ? __fget_files+0x3a0/0x420
[  478.903049][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  478.905045][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  478.907899][   T34]  ? rcu_is_watching+0x15/0xb0
[  478.909817][   T34]  ? rcu_is_watching+0x15/0xb0
[  478.911664][   T34]  do_syscall_64+0xfa/0x3b0
[  478.929150][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.931613][   T34]  ? exc_page_fault+0x9f/0xf0
[  478.933524][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.936218][   T34] RIP: 0033:0x7f064b78ebe9
[  478.937972][   T34] RSP: 002b:00007f064c59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.941273][   T34] RAX: ffffffffffffffda RBX: 00007f064b9b5fa0 RCX: 00007f064b78ebe9
[  478.944352][   T34] RDX: 000000000400c050 RSI: 0000200000000240 RDI: 0000000000000004
[  478.947848][   T34] RBP: 00007f064b811e19 R08: 0000000000000000 R09: 0000000000000000
[  478.950889][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.954033][   T34] R13: 00007f064b9b6038 R14: 00007f064b9b5fa0 R15: 00007ffddc091408
[  478.957591][   T34]  </TASK>
[  478.958875][   T34] INFO: task syz.1.3947:20809 blocked for more than 143 seconds.
[  478.961867][   T34]       Not tainted syzkaller #0
[  478.963781][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  478.967528][   T34] task:syz.1.3947      state:D stack:28456 pid:20809 tgid:20802 ppid:5842   task_flags:0x400140 flags:0x00004004
[  478.972197][   T34] Call Trace:
[  478.973476][   T34]  <TASK>
[  478.974632][   T34]  __schedule+0x1798/0x4cc0
[  478.977126][   T34]  ? stack_trace_save+0x9c/0xe0
[  478.979075][   T34]  ? __pfx___schedule+0x10/0x10
[  478.981001][   T34]  ? schedule+0x91/0x360
[  478.982634][   T34]  ? rcu_is_watching+0x15/0xb0
[  478.984527][   T34]  ? lock_release+0x4b/0x3e0
[  478.986541][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  478.988850][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  478.991359][   T34]  schedule+0x165/0x360
[  478.993066][   T34]  schedule_preempt_disabled+0x13/0x30
[  478.995235][   T34]  __mutex_lock+0x7e6/0x1350
[  478.997404][   T34]  ? __mutex_lock+0x5bb/0x1350
[  478.999345][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.001230][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.003248][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.005197][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.007444][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.009502][   T34]  genl_rcv_msg+0x10d/0x790
[  479.011339][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.013341][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.015797][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.018230][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.020196][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.022161][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.024068][   T34]  netlink_rcv_skb+0x208/0x470
[  479.026506][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.028452][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.030536][   T34]  ? lock_release+0x4b/0x3e0
[  479.032384][   T34]  ? down_read+0x1ad/0x2e0
[  479.034168][   T34]  genl_rcv+0x28/0x40
[  479.036188][   T34]  netlink_unicast+0x82f/0x9e0
[  479.038135][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.040205][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.042160][   T34]  ? skb_put+0x11b/0x210
[  479.043835][   T34]  netlink_sendmsg+0x805/0xb30
[  479.046217][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.048316][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.050273][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.052375][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.054453][   T34]  __sock_sendmsg+0x21c/0x270
[  479.056688][   T34]  __sys_sendto+0x3bd/0x520
[  479.058525][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.060522][   T34]  ? count_memcg_event_mm+0x21/0x260
[  479.062545][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.064592][   T34]  __x64_sys_sendto+0xde/0x100
[  479.066934][   T34]  do_syscall_64+0xfa/0x3b0
[  479.068482][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.070459][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.071935][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.073953][   T34] RIP: 0033:0x7f064b790a7c
[  479.076000][   T34] RSP: 002b:00007f064c57aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.078602][   T34] RAX: ffffffffffffffda RBX: 00007f064c57afc0 RCX: 00007f064b790a7c
[  479.081044][   T34] RDX: 0000000000000024 RSI: 00007f064c57b010 RDI: 0000000000000004
[  479.083478][   T34] RBP: 0000000000000000 R08: 00007f064c57af14 R09: 000000000000000c
[  479.086550][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  479.089284][   T34] R13: 00007f064c57af68 R14: 00007f064c57b010 R15: 0000000000000000
[  479.092290][   T34]  </TASK>
[  479.093507][   T34] INFO: task syz.1.3947:20813 blocked for more than 143 seconds.
[  479.096650][   T34]       Not tainted syzkaller #0
[  479.098463][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.101666][   T34] task:syz.1.3947      state:D stack:28360 pid:20813 tgid:20802 ppid:5842   task_flags:0x400140 flags:0x00004004
[  479.106356][   T34] Call Trace:
[  479.107625][   T34]  <TASK>
[  479.108804][   T34]  __schedule+0x1798/0x4cc0
[  479.110615][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.112513][   T34]  ? __pfx___schedule+0x10/0x10
[  479.114382][   T34]  ? schedule+0x91/0x360
[  479.116360][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.118215][   T34]  ? lock_release+0x4b/0x3e0
[  479.120089][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.122402][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.124862][   T34]  schedule+0x165/0x360
[  479.126821][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.128543][   T34]  __mutex_lock+0x7e6/0x1350
[  479.130068][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.132033][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.133927][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.136362][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.138071][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.139746][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.141350][   T34]  genl_rcv_msg+0x10d/0x790
[  479.142791][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.144379][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.146156][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.148266][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.149761][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.151316][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.152757][   T34]  netlink_rcv_skb+0x208/0x470
[  479.154256][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.156097][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.157956][   T34]  ? lock_release+0x4b/0x3e0
[  479.159416][   T34]  ? down_read+0x1ad/0x2e0
[  479.160803][   T34]  genl_rcv+0x28/0x40
[  479.162047][   T34]  netlink_unicast+0x82f/0x9e0
[  479.163525][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.165190][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.167180][   T34]  ? skb_put+0x11b/0x210
[  479.168546][   T34]  netlink_sendmsg+0x805/0xb30
[  479.169985][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.171619][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.173142][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.174777][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.176859][   T34]  __sock_sendmsg+0x21c/0x270
[  479.178398][   T34]  __sys_sendto+0x3bd/0x520
[  479.179859][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.181774][   T34]  ? count_memcg_event_mm+0x21/0x260
[  479.183853][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.186353][   T34]  __x64_sys_sendto+0xde/0x100
[  479.188251][   T34]  do_syscall_64+0xfa/0x3b0
[  479.190038][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.192453][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.194332][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.197063][   T34] RIP: 0033:0x7f064b790a7c
[  479.198803][   T34] RSP: 002b:00007f064c559ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.202072][   T34] RAX: ffffffffffffffda RBX: 00007f064c559fc0 RCX: 00007f064b790a7c
[  479.205109][   T34] RDX: 000000000000001c RSI: 00007f064c55a010 RDI: 0000000000000005
[  479.208580][   T34] RBP: 0000000000000000 R08: 00007f064c559f14 R09: 000000000000000c
[  479.211756][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  479.214910][   T34] R13: 00007f064c559f68 R14: 00007f064c55a010 R15: 0000000000000000
[  479.218512][   T34]  </TASK>
[  479.219826][   T34] INFO: task syz.1.3947:20821 blocked for more than 143 seconds.
[  479.222901][   T34]       Not tainted syzkaller #0
[  479.224879][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.229448][   T34] task:syz.1.3947      state:D stack:28200 pid:20821 tgid:20802 ppid:5842   task_flags:0x400140 flags:0x00004004
[  479.234123][   T34] Call Trace:
[  479.235987][   T34]  <TASK>
[  479.237191][   T34]  __schedule+0x1798/0x4cc0
[  479.238993][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.240908][   T34]  ? __pfx___schedule+0x10/0x10
[  479.242821][   T34]  ? schedule+0x91/0x360
[  479.245043][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.246829][   T34]  ? lock_release+0x4b/0x3e0
[  479.253531][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.261588][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.269190][   T34]  schedule+0x165/0x360
[  479.271583][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.276237][   T34]  __mutex_lock+0x7e6/0x1350
[  479.280061][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.281928][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.283838][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.286230][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.289229][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.291338][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.293676][   T34]  genl_rcv_msg+0x10d/0x790
[  479.295584][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.300320][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.302127][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.304192][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.305988][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.307760][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.311253][   T34]  netlink_rcv_skb+0x208/0x470
[  479.313062][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.314998][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.317113][   T34]  ? lock_release+0x4b/0x3e0
[  479.318608][   T34]  ? down_read+0x1ad/0x2e0
[  479.320090][   T34]  genl_rcv+0x28/0x40
[  479.321348][   T34]  netlink_unicast+0x82f/0x9e0
[  479.322847][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.324620][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.326932][   T34]  ? skb_put+0x11b/0x210
[  479.328679][   T34]  netlink_sendmsg+0x805/0xb30
[  479.330553][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.332261][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.333843][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.335754][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.337652][   T34]  __sock_sendmsg+0x21c/0x270
[  479.339547][   T34]  __sys_sendto+0x3bd/0x520
[  479.341098][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.342707][   T34]  ? fd_install+0x97/0x540
[  479.344162][   T34]  ? fd_install+0x30d/0x540
[  479.346038][   T34]  __x64_sys_sendto+0xde/0x100
[  479.347603][   T34]  do_syscall_64+0xfa/0x3b0
[  479.349205][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.351082][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.352496][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.354289][   T34] RIP: 0033:0x7f064b790a7c
[  479.356002][   T34] RSP: 002b:00007f064c538ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.358519][   T34] RAX: ffffffffffffffda RBX: 00007f064c538fc0 RCX: 00007f064b790a7c
[  479.360907][   T34] RDX: 000000000000001c RSI: 00007f064c539010 RDI: 0000000000000008
[  479.363347][   T34] RBP: 0000000000000000 R08: 00007f064c538f14 R09: 000000000000000c
[  479.366031][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  479.368478][   T34] R13: 00007f064c538f68 R14: 00007f064c539010 R15: 0000000000000000
[  479.370967][   T34]  </TASK>
[  479.372033][   T34] INFO: task syz.1.3947:20836 blocked for more than 143 seconds.
[  479.374399][   T34]       Not tainted syzkaller #0
[  479.376274][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.379183][   T34] task:syz.1.3947      state:D stack:28664 pid:20836 tgid:20802 ppid:5842   task_flags:0x400040 flags:0x00004004
[  479.383309][   T34] Call Trace:
[  479.384347][   T34]  <TASK>
[  479.385288][   T34]  __schedule+0x1798/0x4cc0
[  479.386748][   T34]  ? __page_table_check_zero+0xba/0x530
[  479.388478][   T34]  ? __pfx___schedule+0x10/0x10
[  479.390019][   T34]  ? schedule+0x91/0x360
[  479.391303][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.392730][   T34]  ? lock_release+0x4b/0x3e0
[  479.394106][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.396413][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.398440][   T34]  schedule+0x165/0x360
[  479.399785][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.401491][   T34]  __mutex_lock+0x7e6/0x1350
[  479.402878][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.404390][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.406154][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.407705][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.409246][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.410897][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.412485][   T34]  genl_rcv_msg+0x10d/0x790
[  479.413899][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.415710][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.417289][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.419181][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.420648][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.422140][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.423611][   T34]  netlink_rcv_skb+0x208/0x470
[  479.425097][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.426991][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.428594][   T34]  ? lock_release+0x4b/0x3e0
[  479.430013][   T34]  ? down_read+0x1ad/0x2e0
[  479.431415][   T34]  genl_rcv+0x28/0x40
[  479.432648][   T34]  netlink_unicast+0x82f/0x9e0
[  479.434121][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.435982][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.437499][   T34]  ? skb_put+0x11b/0x210
[  479.438786][   T34]  netlink_sendmsg+0x805/0xb30
[  479.440256][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.441918][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.443465][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.445118][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.447031][   T34]  __sock_sendmsg+0x21c/0x270
[  479.448520][   T34]  __sys_sendto+0x3bd/0x520
[  479.450046][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.451732][   T34]  ? fd_install+0x97/0x540
[  479.453324][   T34]  ? fd_install+0x30d/0x540
[  479.454705][   T34]  __x64_sys_sendto+0xde/0x100
[  479.456435][   T34]  do_syscall_64+0xfa/0x3b0
[  479.457869][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.459765][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.461232][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.463048][   T34] RIP: 0033:0x7f064b790a7c
[  479.464678][   T34] RSP: 002b:00007f064c517ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.467691][   T34] RAX: ffffffffffffffda RBX: 00007f064c517fc0 RCX: 00007f064b790a7c
[  479.470046][   T34] RDX: 0000000000000020 RSI: 00007f064c518010 RDI: 0000000000000009
[  479.472489][   T34] RBP: 0000000000000000 R08: 00007f064c517f14 R09: 000000000000000c
[  479.474924][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  479.477835][   T34] R13: 00007f064c517f68 R14: 00007f064c518010 R15: 0000000000000000
[  479.480810][   T34]  </TASK>
[  479.481928][   T34] INFO: task syz.0.3949:20814 blocked for more than 144 seconds.
[  479.484542][   T34]       Not tainted syzkaller #0
[  479.486266][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.489308][   T34] task:syz.0.3949      state:D stack:27016 pid:20814 tgid:20812 ppid:5847   task_flags:0x400140 flags:0x00004004
[  479.492852][   T34] Call Trace:
[  479.493890][   T34]  <TASK>
[  479.494788][   T34]  __schedule+0x1798/0x4cc0
[  479.496467][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.498088][   T34]  ? __pfx___schedule+0x10/0x10
[  479.499821][   T34]  ? schedule+0x91/0x360
[  479.501103][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.502520][   T34]  ? lock_release+0x4b/0x3e0
[  479.503893][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.506041][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.508023][   T34]  schedule+0x165/0x360
[  479.509387][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.511189][   T34]  __mutex_lock+0x7e6/0x1350
[  479.512803][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.514442][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.516333][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.518191][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.519963][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.521876][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.523762][   T34]  genl_rcv_msg+0x10d/0x790
[  479.525823][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.527586][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.529088][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.531108][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.532931][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.534569][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.536817][   T34]  netlink_rcv_skb+0x208/0x470
[  479.538641][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.540449][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.542434][   T34]  ? lock_release+0x4b/0x3e0
[  479.544087][   T34]  ? down_read+0x1ad/0x2e0
[  479.545838][   T34]  genl_rcv+0x28/0x40
[  479.547253][   T34]  netlink_unicast+0x82f/0x9e0
[  479.549022][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.550582][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.552400][   T34]  ? skb_put+0x11b/0x210
[  479.553994][   T34]  netlink_sendmsg+0x805/0xb30
[  479.555990][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.557641][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.559210][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.560970][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.562782][   T34]  __sock_sendmsg+0x21c/0x270
[  479.564392][   T34]  __sys_sendto+0x3bd/0x520
[  479.566363][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.568094][   T34]  ? count_memcg_event_mm+0x21/0x260
[  479.570123][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.571918][   T34]  __x64_sys_sendto+0xde/0x100
[  479.573684][   T34]  do_syscall_64+0xfa/0x3b0
[  479.575423][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.577390][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.579139][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.581003][   T34] RIP: 0033:0x7ff30a590a7c
[  479.582569][   T34] RSP: 002b:00007ff3087f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.585924][   T34] RAX: ffffffffffffffda RBX: 00007ff3087f4fc0 RCX: 00007ff30a590a7c
[  479.588992][   T34] RDX: 0000000000000020 RSI: 00007ff3087f5010 RDI: 0000000000000005
[  479.592173][   T34] RBP: 0000000000000000 R08: 00007ff3087f4f14 R09: 000000000000000c
[  479.595114][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  479.597737][   T34] R13: 00007ff3087f4f68 R14: 00007ff3087f5010 R15: 0000000000000000
[  479.600700][   T34]  </TASK>
[  479.601869][   T34] INFO: task syz.0.3949:20823 blocked for more than 144 seconds.
[  479.604681][   T34]       Not tainted syzkaller #0
[  479.606403][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.609029][   T34] task:syz.0.3949      state:D stack:28664 pid:20823 tgid:20812 ppid:5847   task_flags:0x400040 flags:0x00004004
[  479.612583][   T34] Call Trace:
[  479.613600][   T34]  <TASK>
[  479.614504][   T34]  __schedule+0x1798/0x4cc0
[  479.616097][   T34]  ? __page_table_check_zero+0xba/0x530
[  479.618116][   T34]  ? __pfx___schedule+0x10/0x10
[  479.619907][   T34]  ? schedule+0x91/0x360
[  479.621450][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.623261][   T34]  ? lock_release+0x4b/0x3e0
[  479.624852][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.627074][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.629145][   T34]  schedule+0x165/0x360
[  479.630720][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.632677][   T34]  __mutex_lock+0x7e6/0x1350
[  479.634386][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.637955][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.639515][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.641433][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.643068][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.644728][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.646847][   T34]  genl_rcv_msg+0x10d/0x790
[  479.648303][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.649950][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.651591][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.653522][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.655088][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.657029][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.658475][   T34]  netlink_rcv_skb+0x208/0x470
[  479.659996][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.661504][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.663171][   T34]  ? lock_release+0x4b/0x3e0
[  479.664521][   T34]  ? down_read+0x1ad/0x2e0
[  479.666194][   T34]  genl_rcv+0x28/0x40
[  479.667731][   T34]  netlink_unicast+0x82f/0x9e0
[  479.669293][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.670888][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.672409][   T34]  ? skb_put+0x11b/0x210
[  479.673694][   T34]  netlink_sendmsg+0x805/0xb30
[  479.675278][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.677230][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.678784][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.680444][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.682350][   T34]  __sock_sendmsg+0x21c/0x270
[  479.684006][   T34]  __sys_sendto+0x3bd/0x520
[  479.685864][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.687781][   T34]  ? fd_install+0x97/0x540
[  479.689152][   T34]  ? fd_install+0x30d/0x540
[  479.690529][   T34]  __x64_sys_sendto+0xde/0x100
[  479.691988][   T34]  do_syscall_64+0xfa/0x3b0
[  479.693354][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.695291][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.697395][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.699566][   T34] RIP: 0033:0x7ff30a590a7c
[  479.701204][   T34] RSP: 002b:00007ff3087d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.704353][   T34] RAX: ffffffffffffffda RBX: 00007ff3087d3fc0 RCX: 00007ff30a590a7c
[  479.707743][   T34] RDX: 0000000000000020 RSI: 00007ff3087d4010 RDI: 0000000000000006
[  479.710752][   T34] RBP: 0000000000000000 R08: 00007ff3087d3f14 R09: 000000000000000c
[  479.713421][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006
[  479.716695][   T34] R13: 00007ff3087d3f68 R14: 00007ff3087d4010 R15: 0000000000000000
[  479.719225][   T34]  </TASK>
[  479.720358][   T34] INFO: task syz.0.3949:20826 blocked for more than 144 seconds.
[  479.723403][   T34]       Not tainted syzkaller #0
[  479.725093][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.728320][   T34] task:syz.0.3949      state:D stack:24072 pid:20826 tgid:20812 ppid:5847   task_flags:0x400140 flags:0x00004004
[  479.732674][   T34] Call Trace:
[  479.734018][   T34]  <TASK>
[  479.735217][   T34]  __schedule+0x1798/0x4cc0
[  479.737246][   T34]  ? rcu_qs+0xc4/0x170
[  479.738677][   T34]  ? __pfx___schedule+0x10/0x10
[  479.740321][   T34]  ? schedule+0x91/0x360
[  479.741967][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.743825][   T34]  ? lock_release+0x4b/0x3e0
[  479.745795][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.747787][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.749741][   T34]  schedule+0x165/0x360
[  479.751073][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.752800][   T34]  __mutex_lock+0x7e6/0x1350
[  479.754524][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.756471][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.758041][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.759635][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.761177][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.762829][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.764427][   T34]  genl_rcv_msg+0x10d/0x790
[  479.766122][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.768023][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.769579][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.771469][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.772973][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.774471][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.776210][   T34]  netlink_rcv_skb+0x208/0x470
[  479.777879][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.779599][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.781283][   T34]  ? lock_release+0x4b/0x3e0
[  479.782720][   T34]  ? down_read+0x1ad/0x2e0
[  479.784124][   T34]  genl_rcv+0x28/0x40
[  479.785639][   T34]  netlink_unicast+0x82f/0x9e0
[  479.787300][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.789099][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.790581][   T34]  ? skb_put+0x11b/0x210
[  479.791936][   T34]  netlink_sendmsg+0x805/0xb30
[  479.793417][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.795008][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.796947][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.798549][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.800215][   T34]  __sock_sendmsg+0x21c/0x270
[  479.801632][   T34]  __sys_sendto+0x3bd/0x520
[  479.803027][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.804523][   T34]  ? fd_install+0x97/0x540
[  479.806201][   T34]  ? fd_install+0x30d/0x540
[  479.807957][   T34]  __x64_sys_sendto+0xde/0x100
[  479.809519][   T34]  do_syscall_64+0xfa/0x3b0
[  479.811042][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.812889][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.814351][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.816579][   T34] RIP: 0033:0x7ff30a590a7c
[  479.818047][   T34] RSP: 002b:00007ff3087b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.820682][   T34] RAX: ffffffffffffffda RBX: 00007ff3087b2fc0 RCX: 00007ff30a590a7c
[  479.823438][   T34] RDX: 0000000000000020 RSI: 00007ff3087b3010 RDI: 000000000000000d
[  479.826307][   T34] RBP: 0000000000000000 R08: 00007ff3087b2f14 R09: 000000000000000c
[  479.829360][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d
[  479.832414][   T34] R13: 00007ff3087b2f68 R14: 00007ff3087b3010 R15: 0000000000000000
[  479.835768][   T34]  </TASK>
[  479.837048][   T34] INFO: task syz.2.3953:20833 blocked for more than 144 seconds.
[  479.839944][   T34]       Not tainted syzkaller #0
[  479.841853][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  479.845209][   T34] task:syz.2.3953      state:D stack:28456 pid:20833 tgid:20832 ppid:5846   task_flags:0x400140 flags:0x00004004
[  479.850284][   T34] Call Trace:
[  479.851534][   T34]  <TASK>
[  479.852664][   T34]  __schedule+0x1798/0x4cc0
[  479.854492][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.856805][   T34]  ? __pfx___schedule+0x10/0x10
[  479.858729][   T34]  ? schedule+0x91/0x360
[  479.860620][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.862443][   T34]  ? lock_release+0x4b/0x3e0
[  479.863955][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  479.866117][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  479.868125][   T34]  schedule+0x165/0x360
[  479.869420][   T34]  schedule_preempt_disabled+0x13/0x30
[  479.871158][   T34]  __mutex_lock+0x7e6/0x1350
[  479.872575][   T34]  ? __mutex_lock+0x5bb/0x1350
[  479.874070][   T34]  ? genl_rcv_msg+0x10d/0x790
[  479.875791][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  479.877523][   T34]  ? stack_trace_save+0x9c/0xe0
[  479.879468][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  479.881618][   T34]  ? radix_tree_lookup+0x240/0x290
[  479.883683][   T34]  genl_rcv_msg+0x10d/0x790
[  479.885201][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.887012][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  479.888566][   T34]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  479.890643][   T34]  ? kmalloc_reserve+0xbd/0x290
[  479.892201][   T34]  ? __netlink_lookup+0xbd/0x810
[  479.893783][   T34]  ? rcu_is_watching+0x15/0xb0
[  479.895405][   T34]  netlink_rcv_skb+0x208/0x470
[  479.896942][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  479.898563][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  479.900238][   T34]  ? lock_release+0x4b/0x3e0
[  479.901677][   T34]  ? down_read+0x1ad/0x2e0
[  479.903067][   T34]  genl_rcv+0x28/0x40
[  479.904340][   T34]  netlink_unicast+0x82f/0x9e0
[  479.905974][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  479.907641][   T34]  ? netlink_sendmsg+0x642/0xb30
[  479.909452][   T34]  ? skb_put+0x11b/0x210
[  479.911085][   T34]  netlink_sendmsg+0x805/0xb30
[  479.912964][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.915047][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  479.917278][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  479.919372][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  479.921438][   T34]  __sock_sendmsg+0x21c/0x270
[  479.923292][   T34]  __sys_sendto+0x3bd/0x520
[  479.925048][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  479.927431][   T34]  ? count_memcg_event_mm+0x21/0x260
[  479.929489][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  479.931616][   T34]  __x64_sys_sendto+0xde/0x100
[  479.933194][   T34]  do_syscall_64+0xfa/0x3b0
[  479.934602][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.936767][   T34]  ? exc_page_fault+0x9f/0xf0
[  479.938220][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.940010][   T34] RIP: 0033:0x7f32bef90a7c
[  479.941348][   T34] RSP: 002b:00007f32bfe88ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  479.943843][   T34] RAX: ffffffffffffffda RBX: 00007f32bfe88fc0 RCX: 00007f32bef90a7c
[  479.946486][   T34] RDX: 0000000000000024 RSI: 00007f32bfe89010 RDI: 0000000000000004
[  479.948992][   T34] RBP: 0000000000000000 R08: 00007f32bfe88f14 R09: 000000000000000c
[  479.951845][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  479.954782][   T34] R13: 00007f32bfe88f68 R14: 00007f32bfe89010 R15: 0000000000000000
[  479.957693][   T34]  </TASK>
[  479.958716][   T34] INFO: lockdep is turned off.
[  479.960206][   T34] NMI backtrace for cpu 0
[  479.960216][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  479.960226][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  479.960232][   T34] Call Trace:
[  479.960236][   T34]  <TASK>
[  479.960240][   T34]  dump_stack_lvl+0x189/0x250
[  479.960257][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.960266][   T34]  ? __pfx__printk+0x10/0x10
[  479.960280][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  479.960293][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  479.960303][   T34]  ? __pfx__printk+0x10/0x10
[  479.960313][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  479.960326][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  479.960337][   T34]  watchdog+0xf93/0xfe0
[  479.960351][   T34]  ? watchdog+0x1de/0xfe0
[  479.960362][   T34]  kthread+0x711/0x8a0
[  479.960373][   T34]  ? __pfx_watchdog+0x10/0x10
[  479.960383][   T34]  ? __pfx_kthread+0x10/0x10
[  479.960392][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  479.960402][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  479.960412][   T34]  ? __pfx_kthread+0x10/0x10
[  479.960420][   T34]  ret_from_fork+0x3fc/0x770
[  479.960430][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  479.960438][   T34]  ? __switch_to_asm+0x39/0x70
[  479.960447][   T34]  ? __switch_to_asm+0x33/0x70
[  479.960456][   T34]  ? __pfx_kthread+0x10/0x10
[  479.960464][   T34]  ret_from_fork_asm+0x1a/0x30
[  479.960477][   T34]  </TASK>
[  479.960480][   T34] Sending NMI from CPU 0 to CPUs 1:
[  480.006970][    C1] NMI backtrace for cpu 1
[  480.006990][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  480.007006][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.007016][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  480.007044][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  480.007057][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  480.007070][    C1] RAX: eddf384b2132ca00 RBX: ffffffff819683b8 RCX: eddf384b2132ca00
[  480.007078][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  480.007084][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  480.007089][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38530
[  480.007094][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  480.007100][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  480.007106][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.007111][    C1] CR2: 00007fc02f3104a0 CR3: 000000000df36000 CR4: 00000000000006f0
[  480.007136][    C1] Call Trace:
[  480.007141][    C1]  <TASK>
[  480.007144][    C1]  default_idle+0x13/0x20
[  480.007153][    C1]  default_idle_call+0x74/0xb0
[  480.007169][    C1]  do_idle+0x1e8/0x510
[  480.007183][    C1]  ? __pfx_do_idle+0x10/0x10
[  480.007197][    C1]  cpu_startup_entry+0x44/0x60
[  480.007207][    C1]  start_secondary+0x101/0x110
[  480.007225][    C1]  common_startup_64+0x13e/0x147
[  480.007247][    C1]  </TASK>
[  480.007845][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  480.063585][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  480.066854][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.070695][   T34] Call Trace:
[  480.072008][   T34]  <TASK>
[  480.073169][   T34]  dump_stack_lvl+0x99/0x250
[  480.074972][   T34]  ? __asan_memcpy+0x40/0x70
[  480.076715][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.078690][   T34]  ? __pfx__printk+0x10/0x10
[  480.080489][   T34]  vpanic+0x281/0x750
[  480.082022][   T34]  ? __pfx_vpanic+0x10/0x10
[  480.083639][   T34]  ? rcu_is_watching+0x15/0xb0
[  480.085514][   T34]  panic+0xb9/0xc0
[  480.087085][   T34]  ? __pfx_panic+0x10/0x10
[  480.088802][   T34]  ? irq_work_queue+0xc3/0x140
[  480.090644][   T34]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  480.092590][   T34]  watchdog+0xfd2/0xfe0
[  480.093864][   T34]  ? watchdog+0x1de/0xfe0
[  480.095181][   T34]  kthread+0x711/0x8a0
[  480.096509][   T34]  ? __pfx_watchdog+0x10/0x10
[  480.097963][   T34]  ? __pfx_kthread+0x10/0x10
[  480.099366][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.100995][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.102566][   T34]  ? __pfx_kthread+0x10/0x10
[  480.104054][   T34]  ret_from_fork+0x3fc/0x770
[  480.105461][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  480.107047][   T34]  ? __switch_to_asm+0x39/0x70
[  480.108496][   T34]  ? __switch_to_asm+0x33/0x70
[  480.109958][   T34]  ? __pfx_kthread+0x10/0x10
[  480.111372][   T34]  ret_from_fork_asm+0x1a/0x30
[  480.112824][   T34]  </TASK>
[  480.114384][   T34] Kernel Offset: disabled
[  480.115712][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:50:34  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8880215f0237 R9 =1ffff110042be046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8f5 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559abfd27600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000040000005e 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0030313230382f65 65692f306968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e42a2 RBX=040ffffeecedf920 RCX=ffff88802004d640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc900030cf801 RSP=ffffc900030cf5b8
R8 =ffffea00044c4807 R9 =1ffffd4000898900 R10=dffffc0000000000 R11=fffff94000898901
R12=0000000000000000 R13=0000555581ddb000 R14=0000000000000000 R15=1ffff110234665db
RIP=ffffffff81bfb047 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e058e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f4e04d876c3 00007f4e04d876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=8004010000020806 060168d400000007 XMM07=e003001000000000 0e100001c0030210
XMM08=0001b00301e01000 0d90030200000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
