last executing test programs:

17.679049186s ago: executing program 0 (id=2419):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000040000000300000000000010080000000000000100000404"], 0x0, 0x4c}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x54, r2, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1f}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x17bfffc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
r3 = socket(0x1, 0x803, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

17.678365491s ago: executing program 2 (id=2421):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

17.608055293s ago: executing program 0 (id=2422):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x22, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x20008040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t', @ANYRESHEX=r5], 0xa)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56c381df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x22, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$tun(r3, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x20008040) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async)
write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t', @ANYRESHEX=r5], 0xa) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56c381df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)

17.548655283s ago: executing program 0 (id=2423):
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xffffffffffffffcc, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0x0, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0)

17.543958865s ago: executing program 2 (id=2424):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a73300008000200000000000800070026093a0914000600626f6e64300000000000000003000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x200, 0x639, 0x26, 0x2, r5, 0x1, '\x00', 0x0, r6, 0x4, 0x5}, 0x50)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0xc9a}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', r11, 0x700, 0x20, 0x9, 0x3, {{0xd, 0x4, 0x2, 0x7, 0x34, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast1, @local, {[@rr={0x7, 0xf, 0x55, [@empty, @remote, @multicast2]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x7, [0x2, 0xa60, 0xb6]}]}}}}})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4)

17.543295382s ago: executing program 0 (id=2425):
r0 = socket$netlink(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

17.449051441s ago: executing program 0 (id=2426):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fd", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc0000000000000000000000000000010000000000000000"], 0x44}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000)
sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (async)
unshare(0x22020400) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
listen(r6, 0x0)
shutdown(r5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
unshare(0x20200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)

17.438914731s ago: executing program 0 (id=2427):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5311}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd8b}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x16}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd000}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd600}, {0x6}, {0x8, 0x13, 0x7f}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x48c4}, 0x84002)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0x2, 0x9, 0x1, 0x3}, 0x10)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d4}, 0x10)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000440))
sendmsg$nl_netfilter(r0, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r2 = accept4$bt_l2cap(r0, &(0x7f0000000540), &(0x7f0000000580)=0xe, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xc0}}, 0x80)
sendto$inet(r0, &(0x7f00000007c0)="8be10881491f4df67866431195e24cf97ce1f8f9f7222f788c8c11683f9bfbc5c8dee359ffa663d5775c3db535645faff8622606b552043edb6c8817af0296b23c30cbf9e36911c5ab241955393bb4834f5114ff06a800abf93188de7d1107bd8baf54e225b1dbcbfff107c0267764ea5805da155d256727ffecb9e4571803917eb1cada22b5e5d4ec116b6d35182d41e64c0810f66735f5815e684e50622e142262da1f5b8864893fdfec0234bc4d924f904ea0d07dea8dde1aca076384f0d7723c66e9a5c6ee3f3e62f490ed3412a6eedd26f7a96a", 0xd6, 0x1404c0c4, &(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000900)={<r3=>r2, 0x3, 0x0, 0x5})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x5, 0xf, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000b00)='syzkaller\x00', 0x7fffffff, 0x20, &(0x7f0000000b40)=""/32, 0x41000, 0x10, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000b80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x0, 0x8, 0x4}, 0x10, 0x2c86, r0, 0xa, &(0x7f0000000c00)=[r3, r2, r0, r0, r3], &(0x7f0000000c40)=[{0x4, 0x3, 0xb, 0x2}, {0x3, 0x3, 0x9, 0x5}, {0x0, 0x3, 0xc, 0x7}, {0x0, 0x4, 0x1, 0xa}, {0x4, 0x5, 0x0, 0xb}, {0x2, 0x5, 0x1}, {0x3, 0x2, 0x8}, {0x2, 0x2, 0x5, 0x9}, {0x4, 0x3, 0xe, 0xb}, {0x4, 0x4, 0x7, 0x8}], 0x10, 0xd6}, 0x94)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r3)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x440d1)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x370}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000811)
r7 = accept4(r0, &(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001080)=0x80, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x74, 0x0, 0x1, 0xf2ee658036acdd7, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb49}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x7, 0xf, 0x6, 0x31, 0x63, 0x1]}]}, 0x74}}, 0x24000010)
sendmsg$nl_generic(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x3e, 0x200, 0x70bd28, 0x25dfdbfb, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x280088c5)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r5)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xcc, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'l2tp\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\xbb*.'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c008}, 0x20000000)

17.436996136s ago: executing program 2 (id=2428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe888, 0x0, 0x0, 0x0, 0x490000}, [@call={0x85, 0x0, 0x0, 0x7e}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf42}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x1, 0x2, 0xa, 0xffffffffffffffc0, 0x10}, @jmp={0x5, 0x1, 0xb, 0x4, 0x3, 0xc, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx={0x18, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x8c, &(0x7f0000000280)=""/140, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0x800, 0x7cd}, 0x10, 0x1b221, r1, 0x3, 0x0, &(0x7f0000000380)=[{0x0, 0x5, 0xe, 0x7}, {0x4, 0x4, 0x7, 0x2}, {0x3, 0x3, 0x1, 0x8}], 0x10, 0x8}, 0x94)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r4, 0x1a, 0x0, @void}, 0x10)

17.369249542s ago: executing program 2 (id=2429):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x168, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "210466d38547aa140db9a200000000"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0xffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1d}, {0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4)
close(r0) (async, rerun: 32)
socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
shutdown(r3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000025c789e0000000000000000000000000000000000000000ecb5eff83acca546924840d6b7daa43e992fc36582ffe7570622a2418ac41c2256f132db95c9d2a2855376b88cde17a059d2087d4fad073ba435e6f0cb3e1308165faaf82a23c0b583b5e89e1c9a30f57585d930fe9cb71d43d4660a0a3211db2b0c33589d3c74e3da2c"], 0x48)

17.368116078s ago: executing program 2 (id=2430):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) (async)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
getsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000140)=0x4) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4ce85296d9409b1b78000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4080000e45400000000c0a010100000000000000000ae900060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

17.367119202s ago: executing program 2 (id=2431):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22030f00)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f00000000c0))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x20000080)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0x13a, &(0x7f0000000640)={@random="e10931d8640a", @random="8fb135721518", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "019e43", 0x104, 0x88, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x16, 0x0, 0x2, 0x0, 0x0, 0x3, 0x68}, @routing={0x6, 0x6, 0x2, 0x8, 0x0, [@local, @rand_addr=' \x01\x00', @mcast2]}, @srh={0x11, 0x4, 0x4, 0x2, 0xf8, 0x48, 0xfff8, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "6af4f8a4ad702e00f25e264ba1597f0666a8ba085749627a31aa5bad3d76f847", "ffa1214340abd7e91e5b86e05222b1b45afe8e1531abd919a747fc0e5f0a68b84b3d3cbc23df3763333fb9f7b260bb60", "083593541645ded0fcd15a35f66fee1dbe030c4ddb324dd18699de52", {"3186fee8fab56382eb91b3dffd2c87ea", "303237ba8e6e66ef6b304b677ec18f64"}}}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r7=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r7, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

15.508313689s ago: executing program 1 (id=2432):
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x168, 0x10, 0x4, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4e20, 0x2, 0x2, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x4, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "210466d385e3174c91f9a200000000"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x880}, 0x1) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe4) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x4}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0xe4) (async, rerun: 64)
close(r0) (async)
r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @cgroup_device, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x0, 0xe, 0x0, &(0x7f0000000b00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4040)

15.507822596s ago: executing program 1 (id=2433):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x8942, &(0x7f0000000640)={'tunl0\x00', 0x0})
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x8, 0x18}, 0xc)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xff}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x2, 0x2, 0x0, 0x7, 0x1, 0x10}, @generic={0x2, 0x3, 0x3, 0x7, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x3, 0x8, 0x2, 0x28, 0x22f3}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x59, &(0x7f00000003c0)=""/89, 0x41100, 0x1, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0xf, 0x3, 0x4e3}, 0x10, 0x2f0db, r0, 0x0, &(0x7f0000000500)=[r7, 0x1, r8, r9, r10], 0x0, 0x10, 0x6}, 0x94)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.438046108s ago: executing program 1 (id=2434):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0402df", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, {[@generic={0x13, 0x6, "7513e51a"}, @mptcp=@mp_join={0x1e, 0x3, 0x5}, @fastopen={0x22, 0x8, "ac73c3737c27"}]}}}}}}}}, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x25, 0x0, "7185ab7a93bffc96aaf32e5da77b61936faf9ea1fc19ece50257d1b9dce9e6f62a5594f500f0cde8564da832439a6eef24a4eb5c7230598f3ab5200bb3f200af12ed54a0d038f29cb203900570ec5f72"}, 0xd8)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={<r3=>0x0, 0x5}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e24, 0xa5a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}}}, 0x84)

15.435417972s ago: executing program 1 (id=2435):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000"], 0x48)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = socket(0x26, 0x2, 0x0)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4000000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff})
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)

15.178793117s ago: executing program 1 (id=2436):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44066fa5}]}]}], {0x14}}, 0xc0}}, 0x800) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='task_rename\x00', r2}, 0x18) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) (async)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, &(0x7f0000000000)='{', 0x0, 0x2, 0x0, 0x48}, 0x50) (async, rerun: 64)
pselect6(0x40, &(0x7f00000004c0)={0xc3, 0x8001, 0x8000000000000001, 0x9, 0x1ff, 0x1, 0x10, 0x2}, &(0x7f00000005c0)={0x8, 0x6ace, 0x2, 0x51e3, 0x7, 0x69c8, 0xad, 0x2}, &(0x7f00000006c0)={0x1, 0x8001, 0x6, 0x0, 0x1, 0x6, 0x4, 0x1}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x2]}, 0x8}) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

15.118621972s ago: executing program 1 (id=2437):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0xa, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbcc250500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbf08, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x10000011)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0)
sendto$packet(r8, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c00078008001200000000000c000300686173683a697000050005000a0000000500040000010000090002"], 0x50}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x300, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c081}, 0x80)
socket$inet6(0xa, 0x80000, 0x4b)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000400)=0x1, 0x4)

2.029262396s ago: executing program 32 (id=2427):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5311}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd8b}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x16}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd000}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd600}, {0x6}, {0x8, 0x13, 0x7f}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x48c4}, 0x84002)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0x2, 0x9, 0x1, 0x3}, 0x10)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d4}, 0x10)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000440))
sendmsg$nl_netfilter(r0, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r2 = accept4$bt_l2cap(r0, &(0x7f0000000540), &(0x7f0000000580)=0xe, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xc0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xc0}}, 0x80)
sendto$inet(r0, &(0x7f00000007c0)="8be10881491f4df67866431195e24cf97ce1f8f9f7222f788c8c11683f9bfbc5c8dee359ffa663d5775c3db535645faff8622606b552043edb6c8817af0296b23c30cbf9e36911c5ab241955393bb4834f5114ff06a800abf93188de7d1107bd8baf54e225b1dbcbfff107c0267764ea5805da155d256727ffecb9e4571803917eb1cada22b5e5d4ec116b6d35182d41e64c0810f66735f5815e684e50622e142262da1f5b8864893fdfec0234bc4d924f904ea0d07dea8dde1aca076384f0d7723c66e9a5c6ee3f3e62f490ed3412a6eedd26f7a96a", 0xd6, 0x1404c0c4, &(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000900)={<r3=>r2, 0x3, 0x0, 0x5})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xc}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e23, @multicast2}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0x5, 0xf, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000000b00)='syzkaller\x00', 0x7fffffff, 0x20, &(0x7f0000000b40)=""/32, 0x41000, 0x10, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f0000000b80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x0, 0x8, 0x4}, 0x10, 0x2c86, r0, 0xa, &(0x7f0000000c00)=[r3, r2, r0, r0, r3], &(0x7f0000000c40)=[{0x4, 0x3, 0xb, 0x2}, {0x3, 0x3, 0x9, 0x5}, {0x0, 0x3, 0xc, 0x7}, {0x0, 0x4, 0x1, 0xa}, {0x4, 0x5, 0x0, 0xb}, {0x2, 0x5, 0x1}, {0x3, 0x2, 0x8}, {0x2, 0x2, 0x5, 0x9}, {0x4, 0x3, 0xe, 0xb}, {0x4, 0x4, 0x7, 0x8}], 0x10, 0xd6}, 0x94)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r3)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x440d1)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x82}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x370}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000811)
r7 = accept4(r0, &(0x7f0000001000)=@pppol2tpv3={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001080)=0x80, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x74, 0x0, 0x1, 0xf2ee658036acdd7, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb49}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x7, 0xf, 0x6, 0x31, 0x63, 0x1]}]}, 0x74}}, 0x24000010)
sendmsg$nl_generic(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x3e, 0x200, 0x70bd28, 0x25dfdbfb, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x280088c5)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001480), r5)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xcc, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'l2tp\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\xbb*.'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c008}, 0x20000000)

1.987437029s ago: executing program 33 (id=2431):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22030f00)
socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f00000000c0))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd25, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x20000080)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
syz_emit_ethernet(0x13a, &(0x7f0000000640)={@random="e10931d8640a", @random="8fb135721518", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "019e43", 0x104, 0x88, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x16, 0x0, 0x2, 0x0, 0x0, 0x3, 0x68}, @routing={0x6, 0x6, 0x2, 0x8, 0x0, [@local, @rand_addr=' \x01\x00', @mcast2]}, @srh={0x11, 0x4, 0x4, 0x2, 0xf8, 0x48, 0xfff8, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "6af4f8a4ad702e00f25e264ba1597f0666a8ba085749627a31aa5bad3d76f847", "ffa1214340abd7e91e5b86e05222b1b45afe8e1531abd919a747fc0e5f0a68b84b3d3cbc23df3763333fb9f7b260bb60", "083593541645ded0fcd15a35f66fee1dbe030c4ddb324dd18699de52", {"3186fee8fab56382eb91b3dffd2c87ea", "303237ba8e6e66ef6b304b677ec18f64"}}}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r7=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r7, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

0s ago: executing program 34 (id=2437):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r3, 0x6, 0xa, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbcc250500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xbf08, 0x47}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x10000011)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0)
sendto$packet(r8, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000c00078008001200000000000c000300686173683a697000050005000a0000000500040000010000090002"], 0x50}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x300, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c081}, 0x80)
socket$inet6(0xa, 0x80000, 0x4b)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000400)=0x1, 0x4)

kernel console output (not intermixed with test programs):

eftover after parsing attributes in process `syz.2.1186'.
[  165.694935][T10388] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  165.858644][T10400] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  165.871912][T10400] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  165.901289][ T5850] Bluetooth: hci0: command tx timeout
[  166.071081][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  166.080361][T10411] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20002
[  166.428806][T10434] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1195'.
[  166.536158][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  166.539467][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  166.543082][ T6728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  166.546570][ T6728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  166.550810][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  166.556281][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  166.566476][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  166.569364][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  166.735471][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'.
[  166.738578][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'.
[  166.991302][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'.
[  167.173651][T10474] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  167.177680][T10473] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  167.353420][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'.
[  167.500044][   T24] page_pool_release_retry() stalled pool shutdown: id 308, 1 inflight 60 sec
[  167.601947][T10522] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  167.865437][T10543] syzkaller1: entered promiscuous mode
[  167.867407][T10543] syzkaller1: entered allmulticast mode
[  167.964515][T10546] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.434819][T10582] pimreg: entered allmulticast mode
[  169.728554][T10615] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.764270][T10615] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.815159][T10615] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.865980][T10615] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.937986][ T6728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.949504][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.966208][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.975376][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.646122][T10677] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  170.648909][T10677] __nla_validate_parse: 5 callbacks suppressed
[  170.648916][T10677] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1256'.
[  170.655605][T10677] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[  170.720439][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'.
[  171.482203][T10732] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.583228][T10732] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.628982][T10732] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.666401][T10740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.670288][T10740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  171.685195][T10732] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.736046][T10740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.740748][T10740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  171.786110][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.798135][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.815450][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.823483][T10740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.830149][T10740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  171.848402][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.064372][T10740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  172.071963][T10740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  172.383588][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  172.387237][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  172.401505][ T6728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  172.405193][ T6728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  172.419517][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  172.423261][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  172.438318][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  172.445556][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  172.605539][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.608939][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.612228][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.615411][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.618639][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.622563][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.625730][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.629143][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'.
[  172.964058][T10772] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.428820][T10786] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  173.477552][T10776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  173.562334][T10796] nbd: nbd0 already in use
[  173.564294][T10796] nbd: nbd0 already in use
[  176.743389][T10809] __nla_validate_parse: 27 callbacks suppressed
[  176.743403][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1288'.
[  176.775126][T10809] netlink: 'syz.2.1288': attribute type 10 has an invalid length.
[  176.838839][  T792] IPVS: starting estimator thread 0...
[  176.845481][T10819] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  176.848319][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.854807][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.857772][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.860782][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.863644][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.866392][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.868795][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.871083][T10821] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  176.929858][T10820] IPVS: using max 78 ests per chain, 187200 per kthread
[  177.675699][T10849] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  177.816608][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'.
[  177.877493][T10873] netlink: 'syz.2.1302': attribute type 4 has an invalid length.
[  177.891735][T10849] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1300'.
[  177.939562][T10879] netlink: 'syz.2.1302': attribute type 4 has an invalid length.
[  178.049152][T10890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1305'.
[  178.096258][T10890] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1305'.
[  178.103549][T10890] netlink: 'syz.1.1305': attribute type 10 has an invalid length.
[  178.202020][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'.
[  178.227901][T10910] netlink: 'syz.2.1307': attribute type 4 has an invalid length.
[  178.260455][T10916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1308'.
[  178.263797][T10916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1308'.
[  178.592701][T10947] netlink: 'syz.2.1312': attribute type 23 has an invalid length.
[  178.821239][T10967] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1315'.
[  178.859899][   T54] Bluetooth: hci0: command tx timeout
[  179.426621][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'.
[  179.437554][T11005] ip6erspan0: entered allmulticast mode
[  179.888293][T11044] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  180.621040][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.739599][T11104] syz.1.1354 (11104) used greatest stack depth: 19928 bytes left
[  180.786998][T11112] netlink: 'syz.1.1355': attribute type 13 has an invalid length.
[  180.880981][T11115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.050735][T11115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.062150][T11118] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[  181.065204][T11118] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[  181.105971][T11115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.211950][T11115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.314291][ T5861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.320182][ T5861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.322984][ T5861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.325759][ T5861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.524815][T11153] netlink: 'syz.1.1366': attribute type 1 has an invalid length.
[  181.766863][T11186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.790255][T11187] validate_nla: 1 callbacks suppressed
[  181.790265][T11187] netlink: 'syz.0.1375': attribute type 10 has an invalid length.
[  181.903423][T11187] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  181.969165][T11190] IPVS: Scheduler module ip_vs_sip not found
[  181.978420][T11193] : renamed from wg2 (while UP)
[  182.163869][T11203] tap0: tun_chr_ioctl cmd 1074025681
[  182.524002][T11219] delete_channel: no stack
[  182.557328][T11226] netlink: 'syz.2.1388': attribute type 6 has an invalid length.
[  182.751277][T11236] __nla_validate_parse: 12 callbacks suppressed
[  182.751287][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'.
[  182.783809][T11232] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.835895][T11232] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.906734][T11232] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.966263][T11232] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.039904][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 60 seconds
[  183.045023][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 60 seconds
[  183.049634][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 60 seconds
[  183.055091][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 60 seconds
[  183.472585][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'.
[  183.476115][T11239] hsr_slave_0: left promiscuous mode
[  183.478456][T11239] hsr_slave_1: left promiscuous mode
[  183.649871][T11252] netlink: 'syz.0.1395': attribute type 1 has an invalid length.
[  183.654338][T11252] netlink: 'syz.0.1395': attribute type 11 has an invalid length.
[  183.657711][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  183.690865][T11252] netlink: 'syz.0.1395': attribute type 10 has an invalid length.
[  183.695400][T11254] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1396'.
[  183.837667][T11265] net_ratelimit: 3322 callbacks suppressed
[  183.837689][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.843723][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.847082][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.850629][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.854033][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.857418][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.860743][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.863471][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.866330][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  183.869503][T11265] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  184.570978][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'.
[  184.589089][T11297] netlink: 'syz.1.1405': attribute type 4 has an invalid length.
[  184.597967][T11297] netlink: 'syz.1.1405': attribute type 4 has an invalid length.
[  184.798774][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.802865][ T5875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.825215][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.828621][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.141407][T11333] Bluetooth: MGMT ver 1.23
[  185.144194][T11333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1416'.
[  185.154618][T11333] netlink: 'syz.1.1416': attribute type 2 has an invalid length.
[  185.601552][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'.
[  186.130943][T11352] bond0: (slave syz_tun): Releasing backup interface
[  186.198414][T11352] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  186.433094][T11364] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  186.455561][T11363] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.458913][T11363] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  186.515198][T11363] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.518834][T11363] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  186.563029][T11363] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.566920][T11363] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  186.575574][T11366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.622689][T11366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.629938][T11363] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  186.633495][T11363] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  186.664922][T11366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.699295][ T5861] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  186.703552][ T5861] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  186.713497][ T5861] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  186.716347][ T5861] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  186.721142][T11366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.730584][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  186.733455][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  186.741472][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  186.744417][ T5875] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  186.776992][T11368] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1425'.
[  186.796485][ T5861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.806204][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.821014][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.824496][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.855272][T11371] bond0: (slave syz_tun): Releasing backup interface
[  187.725678][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'.
[  188.131388][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1431'.
[  188.399294][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'.
[  188.449421][T11408] netlink: 'syz.0.1433': attribute type 4 has an invalid length.
[  188.458729][T11408] netlink: 'syz.0.1433': attribute type 4 has an invalid length.
[  189.472232][T11438] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  189.828764][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1444'.
[  189.903788][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'.
[  189.924954][T11449] netlink: 'syz.0.1445': attribute type 10 has an invalid length.
[  189.970970][T11461] net_ratelimit: 46 callbacks suppressed
[  189.970979][T11461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.019381][ T5850] Bluetooth: hci2: link tx timeout
[  190.021177][ T5850] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.365715][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'.
[  190.368787][T11470] netlink: 'syz.1.1450': attribute type 20 has an invalid length.
[  190.371761][T11470] netlink: 'syz.1.1450': attribute type 21 has an invalid length.
[  190.386461][T11470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1450'.
[  191.187057][T11501] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.1455'.
[  191.285890][T11503] netlink: 'syz.1.1456': attribute type 10 has an invalid length.
[  191.291209][T11503] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  192.065715][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  192.484529][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'.
[  192.487946][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'.
[  192.493952][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'.
[  192.545718][T11525] tap0: tun_chr_ioctl cmd 35108
[  192.878451][T11556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  192.893616][T11559] netlink: 'syz.0.1471': attribute type 10 has an invalid length.
[  192.912141][T11559] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  193.156580][T11574] bridge: RTM_NEWNEIGH with invalid ether address
[  193.288571][T11591] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.297015][T11591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  193.904845][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.907029][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.016582][T11608] __nla_validate_parse: 3 callbacks suppressed
[  194.016592][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'.
[  194.055430][T11606] netlink: 'syz.0.1485': attribute type 4 has an invalid length.
[  194.164703][T11619] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  194.180692][T11616] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.281362][T11627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  194.285741][T11627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  194.315081][T11616] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.337915][T11627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  194.343358][T11627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  194.369027][T11616] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.391856][T11627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  194.396406][T11627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  194.425456][T11616] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.464033][T11627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  194.467447][T11627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  194.508184][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.526873][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.544849][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.550971][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.576680][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  194.579415][ T5875] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  194.603141][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  194.606370][ T5875] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  194.624110][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  194.627543][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  194.645704][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  194.649152][ T5875] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  194.781278][T11669] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  194.784210][T11670] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  194.957202][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1504'.
[  195.114775][T11687] netlink: 'syz.2.1507': attribute type 2 has an invalid length.
[  195.117612][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'.
[  195.172602][T11685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  195.176732][T11685] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  195.225174][T11685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  195.228482][T11685] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  195.326576][T11685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  195.333803][T11685] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  195.341049][T11705] IPVS: ip_vs_edit_dest(): server weight less than zero
[  195.378681][T11685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  195.382405][T11685] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  195.390976][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'.
[  195.394858][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'.
[  196.364014][ T5296] udevd[5296]: worker [7576] /devices/virtual/block/nbd0 is taking a long time
[  196.397514][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1517'.
[  196.549350][T11738] bond0: (slave syz_tun): Releasing backup interface
[  196.562357][T11738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  196.654839][T11738] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  196.660854][T11738] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  196.867217][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'.
[  196.872657][   T54] Bluetooth: hci0: command tx timeout
[  196.972815][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  196.991052][T11769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1525'.
[  197.113161][T11771] netlink: 'syz.2.1527': attribute type 4 has an invalid length.
[  197.116408][T11771] netlink: 'syz.2.1527': attribute type 4 has an invalid length.
[  197.210447][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'.
[  197.322513][T11777] netlink: 'syz.1.1528': attribute type 4 has an invalid length.
[  197.331811][T11777] netlink: 'syz.1.1528': attribute type 4 has an invalid length.
[  197.380971][T11783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.444934][T11783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.492936][T11783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.540226][T11783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.653780][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.666047][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.681581][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.693216][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.828961][T11803] netlink: 'syz.2.1535': attribute type 21 has an invalid length.
[  198.286901][T11824] netlink: 'syz.2.1542': attribute type 4 has an invalid length.
[  198.404171][T11833] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.472511][T11833] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.500759][T11836] netlink: 'syz.1.1545': attribute type 4 has an invalid length.
[  198.516852][T11833] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.522611][T11836] netlink: 'syz.1.1545': attribute type 4 has an invalid length.
[  198.576025][T11833] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.694988][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  198.699018][ T5875] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  198.709632][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  198.713903][ T5875] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  198.736333][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  198.739416][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  198.751970][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  198.755153][ T5875] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  199.086019][T11864] __nla_validate_parse: 6 callbacks suppressed
[  199.086029][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'.
[  199.105050][T11864] validate_nla: 1 callbacks suppressed
[  199.105064][T11864] netlink: 'syz.1.1552': attribute type 10 has an invalid length.
[  199.143789][T11869] netlink: 'syz.1.1553': attribute type 10 has an invalid length.
[  199.152976][T11869] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  199.227030][T11876] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1555'.
[  200.116060][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1567'.
[  200.288718][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'.
[  200.384325][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  200.384356][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'.
[  200.542365][T11930] netlink: 'syz.0.1571': attribute type 29 has an invalid length.
[  200.739569][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1574'.
[  200.894506][T11966] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  201.242512][    C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.246620][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.249338][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.252177][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.254561][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.256875][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.259347][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.261673][T11986] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  201.314113][T11989] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  201.325874][T11989] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.330933][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'.
[  201.342025][T11989] bond2: (slave geneve3): making interface the new active one
[  201.345968][T11989] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  201.413930][T12000] netlink: 'syz.0.1587': attribute type 11 has an invalid length.
[  201.417110][T12000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'.
[  201.426713][T12001] netlink: 'syz.0.1587': attribute type 11 has an invalid length.
[  201.429408][T12001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'.
[  201.557969][ T5861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.560859][ T5861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.573622][ T5861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.581749][ T5861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.602733][T12013] net_ratelimit: 825 callbacks suppressed
[  201.602743][T12013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.695864][T12011] netlink: 'syz.0.1591': attribute type 4 has an invalid length.
[  201.735895][T12023] netlink: 'syz.1.1595': attribute type 29 has an invalid length.
[  201.895219][T12034] lo: entered promiscuous mode
[  201.901667][T12034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.060751][T12048] netlink: 'syz.2.1602': attribute type 9 has an invalid length.
[  202.085890][T12046] netlink: 'syz.2.1602': attribute type 4 has an invalid length.
[  203.705128][T12114] syz_tun: left promiscuous mode
[  203.710347][T12114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  203.899854][ T5895] page_pool_release_retry() stalled pool shutdown: id 495, 1 inflight 60 sec
[  204.183821][T12145] pim6reg99999999: entered allmulticast mode
[  204.517676][T12180] __nla_validate_parse: 9 callbacks suppressed
[  204.517689][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'.
[  204.564260][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1640'.
[  204.646073][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.447479][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1646'.
[  205.452007][T12208] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1646'.
[  205.625796][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[  205.703578][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'.
[  205.775037][T12220] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.788278][T12218] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1649'.
[  205.792456][T12218] validate_nla: 3 callbacks suppressed
[  205.792465][T12218] netlink: 'syz.0.1649': attribute type 4 has an invalid length.
[  205.797374][T12218] netlink: 'syz.0.1649': attribute type 4 has an invalid length.
[  205.815113][T12220] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.882205][T12220] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.897202][T12232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1652'.
[  206.704679][T12237] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.718062][T12220] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.729193][T12239] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1654'.
[  206.816618][T12237] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.879472][ T5861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.891748][T12237] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.895881][T12246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1656'.
[  206.910183][ T5861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.921564][ T5861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.933063][ T5861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.946592][T12237] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.062850][ T5861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.073127][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.076043][T12249] netlink: 'syz.0.1657': attribute type 2 has an invalid length.
[  207.093095][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.106345][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.838296][T12316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.844771][T12316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.885150][T12316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.889430][T12316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  207.945425][T12316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  207.955111][T12316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  208.024594][T12316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  208.028685][T12316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  208.047135][T12326] netlink: 'syz.2.1675': attribute type 1 has an invalid length.
[  208.047196][T12327] netlink: 'syz.2.1675': attribute type 1 has an invalid length.
[  208.067081][T12326] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.079461][T12325] bond1: (slave geneve2): making interface the new active one
[  208.083031][T12325] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  208.092032][T12325] bond1: entered promiscuous mode
[  208.094848][T12325] geneve2: entered promiscuous mode
[  208.118390][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  208.122801][ T5875] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  208.155695][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  208.158722][ T5875] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  208.162137][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  208.165356][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  208.168492][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  208.173611][ T5875] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  209.340166][T12432] bond0: (slave syz_tun): Releasing backup interface
[  209.363963][T12432] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  209.446126][T12432] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  209.859123][T12465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.862343][T12465] syzkaller0: entered promiscuous mode
[  209.864393][T12465] syzkaller0: entered allmulticast mode
[  209.868769][T12467] tipc: Resetting bearer <eth:syzkaller0>
[  209.892805][T12466] tipc: Resetting bearer <eth:syzkaller0>
[  209.902980][T12466] tipc: Disabling bearer <eth:syzkaller0>
[  209.983774][T12470] __nla_validate_parse: 16 callbacks suppressed
[  209.983789][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'.
[  210.026385][T12470] netlink: 'syz.1.1709': attribute type 10 has an invalid length.
[  210.064427][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'.
[  210.094162][T12474] 8021q: adding VLAN 0 to HW filter on device bond4
[  210.107846][T12474] bond4: (slave macsec1): Error -34 calling dev_set_mtu
[  210.348676][T12501] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.359350][T12501] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.427565][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1717'.
[  210.450020][T12501] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.453623][T12501] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.507055][T12501] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.510969][T12501] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  210.578872][T12501] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  210.589790][T12501] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  211.307553][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'.
[  211.338629][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'.
[  211.688773][T12538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'.
[  211.694877][T12538] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  212.716715][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  212.720888][ T5875] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  212.747368][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  212.750628][ T5875] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  212.753891][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  212.756802][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  212.780026][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  212.782983][ T5875] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  212.791250][T12552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'.
[  212.836878][T12555] sctp: [Deprecated]: syz.0.1734 (pid 12555) Use of int in max_burst socket option.
[  212.836878][T12555] Use struct sctp_assoc_value instead
[  212.902265][T12555] syzkaller1: entered promiscuous mode
[  212.904646][T12555] syzkaller1: entered allmulticast mode
[  213.101654][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 90 seconds
[  213.105373][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 90 seconds
[  213.108892][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 90 seconds
[  213.113026][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 90 seconds
[  213.160741][T12579] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.167872][T12579] bond0: (slave rose0): Enslaving as an active interface with an up link
[  213.308408][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'.
[  213.318018][T12585] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.364320][T12585] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.438002][T12585] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.493951][T12585] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.555336][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.587655][ T5861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.598164][ T5861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.602732][T12610] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.617333][ T5861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.647447][T12610] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.754726][T12610] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.797938][T12610] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.986414][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.999287][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.011825][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.022432][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.027025][T12629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1748'.
[  214.532866][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'.
[  214.898912][T12669] netlink: 'syz.1.1757': attribute type 10 has an invalid length.
[  214.924354][T12671] netlink: 'syz.1.1758': attribute type 23 has an invalid length.
[  215.487784][T12682] bridge0: entered promiscuous mode
[  215.490132][T12682] macsec2: entered promiscuous mode
[  215.492673][T12682] bridge0: port 1(macsec2) entered blocking state
[  215.495321][T12682] bridge0: port 1(macsec2) entered disabled state
[  215.497714][T12682] macsec2: entered allmulticast mode
[  215.499599][T12682] bridge0: entered allmulticast mode
[  215.503818][T12682] macsec2: left allmulticast mode
[  215.505835][T12682] bridge0: left allmulticast mode
[  215.509565][T12682] bridge0: left promiscuous mode
[  215.661264][T12698] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  215.818802][ T6728] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  216.091020][T12718] netlink: 'syz.1.1769': attribute type 21 has an invalid length.
[  216.094501][T12718] __nla_validate_parse: 3 callbacks suppressed
[  216.094512][T12718] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1769'.
[  216.366905][T12720] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1770'.
[  216.634654][T12726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1772'.
[  216.678821][T12735] netlink: 'syz.1.1775': attribute type 16 has an invalid length.
[  216.682636][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'.
[  216.742992][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1774'.
[  216.794608][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'.
[  216.926482][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'.
[  217.053116][T12762] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1778'.
[  217.162139][T12769] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1781'.
[  217.167714][T12769] netlink: 'syz.0.1781': attribute type 29 has an invalid length.
[  217.234916][T12778] netlink: 'syz.0.1783': attribute type 11 has an invalid length.
[  217.268294][T12780] netlink: 'syz.0.1784': attribute type 1 has an invalid length.
[  217.271908][T12780] netlink: 17231 bytes leftover after parsing attributes in process `syz.0.1784'.
[  217.355580][T12790] unsupported nlmsg_type 40
[  217.359589][T12790] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  217.390694][T12790] bond2: (slave bridge4): making interface the new active one
[  217.394426][T12790] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  217.424357][T12800] netlink: 'syz.0.1789': attribute type 29 has an invalid length.
[  217.469535][T12809] openvswitch: netlink: Message has 8 unknown bytes.
[  217.493593][T12809] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  217.591097][T12820] netlink: 'syz.2.1794': attribute type 29 has an invalid length.
[  217.922776][T12840] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.967659][T12840] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.998322][T12849] bridge0: entered promiscuous mode
[  218.002135][T12849] bridge_slave_0: entered promiscuous mode
[  218.007862][T12848] bridge0: left promiscuous mode
[  218.016907][T12840] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.077517][T12840] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.282721][ T6728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.287565][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.311702][T12867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.333184][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.498568][T12891] netlink: 'syz.1.1812': attribute type 4 has an invalid length.
[  219.171237][T12918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.222210][T12918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.278572][T12918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.324023][T12918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.376867][T12867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.391877][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.401952][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.415472][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.571180][T12932] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000
[  220.230222][T12986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  220.313880][T12986] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  220.328602][T12986] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  220.651187][T13007] IPVS: Scheduler module ip_vs_sip not found
[  221.048548][T13043] bond0: up delay (18673) is not a multiple of miimon (3), value rounded to 18672 ms
[  221.062836][T13043] bond0: entered promiscuous mode
[  221.065030][T13043] bond0: entered allmulticast mode
[  221.156617][T13050] __nla_validate_parse: 14 callbacks suppressed
[  221.156631][T13050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1853'.
[  221.166876][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'.
[  221.192406][T13050] bond3: entered promiscuous mode
[  221.194215][T13050] bond3: entered allmulticast mode
[  221.196881][T13050] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.680709][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'.
[  221.829299][T13075] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  221.983389][T13082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  222.003486][T13082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  222.092450][T13082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  222.095816][T13082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  222.164313][T13082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  222.168499][T13082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  222.254292][T13082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  222.258635][T13082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  222.315230][T12867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  222.318873][T12867] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  222.326102][T12867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  222.329642][T12867] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  222.337800][T12867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  222.340874][T12867] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  222.351923][T12867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  222.354671][T12867] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  222.716559][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'.
[  222.978227][T13128] !: renamed from dummy0 (while UP)
[  223.018797][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1880'.
[  223.439440][T13147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'.
[  223.502220][T13147] validate_nla: 2 callbacks suppressed
[  223.502234][T13147] netlink: 'syz.0.1884': attribute type 10 has an invalid length.
[  223.574187][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'.
[  223.872189][T13170] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.927513][T13170] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.958289][T13174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1890'.
[  223.985713][T13170] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.040839][T13170] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.109468][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.124447][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.139212][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.152870][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.332997][T13186] netlink: 'syz.2.1892': attribute type 10 has an invalid length.
[  224.432503][T13195] netlink: 'syz.2.1894': attribute type 29 has an invalid length.
[  224.624457][T13214] netlink: 'syz.0.1898': attribute type 16 has an invalid length.
[  224.629082][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'.
[  224.949991][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  225.914998][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'.
[  226.210743][T13278] __nla_validate_parse: 2 callbacks suppressed
[  226.210757][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1914'.
[  226.451329][T13289] syz_tun: entered allmulticast mode
[  226.506955][T13290] syz_tun: left allmulticast mode
[  226.570829][T13293] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.604959][T13293] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.662855][T13293] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.705218][T13293] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.102363][T13298] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.162961][T13298] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.213485][T13298] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.254153][T13298] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.365272][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'.
[  227.371628][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.386295][T12867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.400921][T12867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.411748][T12867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.454334][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'.
[  227.499518][ T6728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.512241][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.525624][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.537495][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.546626][T13304] netlink: 'syz.0.1921': attribute type 4 has an invalid length.
[  227.582917][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'.
[  227.670408][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'.
[  229.037792][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1934'.
[  229.043091][T13361] netlink: 'syz.0.1934': attribute type 29 has an invalid length.
[  229.414519][T13386] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1941'.
[  229.418657][T13386] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  229.494758][T13392] netlink: 'syz.1.1942': attribute type 64 has an invalid length.
[  229.552362][T13393] netlink: 'syz.2.1941': attribute type 1 has an invalid length.
[  229.556897][T13393] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1941'.
[  229.565933][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'.
[  229.741845][T13400] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  229.776423][T13405] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  229.860803][T13416] netlink: 'syz.2.1949': attribute type 4 has an invalid length.
[  229.866447][T13416] netlink: 'syz.2.1949': attribute type 4 has an invalid length.
[  229.890097][T13406] nbd1: detected capacity change from 0 to 127
[  229.894546][T13418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.898024][T13418] syzkaller0: entered promiscuous mode
[  229.902921][T13418] syzkaller0: entered allmulticast mode
[  229.926142][   T55] block nbd1: Receive control failed (result -104)
[  229.934312][T13418] tipc: Resetting bearer <eth:syzkaller0>
[  229.947930][T13417] tipc: Resetting bearer <eth:syzkaller0>
[  229.963550][T13417] tipc: Disabling bearer <eth:syzkaller0>
[  229.979097][T13423] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1952'.
[  230.053003][   T56] block nbd2: Receive control failed (result -107)
[  230.091542][T13431] nbd2: detected capacity change from 0 to 32
[  230.102729][ T9247] block nbd2: Dead connection, failed to find a fallback
[  230.107460][ T9247] block nbd2: shutting down sockets
[  230.110224][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.114359][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.118494][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.122829][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.130725][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.138607][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.143735][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.150344][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.157260][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.162931][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.167153][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.173503][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.180928][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.184841][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.188253][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.194229][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.198855][ T9247] ldm_validate_partition_table(): Disk read failed.
[  230.205024][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.209032][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.213991][ T9247] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.218131][ T9247] Buffer I/O error on dev nbd2, logical block 0, async page read
[  230.225049][ T9247] Dev nbd2: unable to read RDB block 0
[  230.227945][ T9247]  nbd2: unable to read partition table
[  230.234959][ T9247] ldm_validate_partition_table(): Disk read failed.
[  230.238346][ T9247] Dev nbd2: unable to read RDB block 0
[  230.242818][ T9247]  nbd2: unable to read partition table
[  230.338669][T13446] netlink: 'syz.2.1957': attribute type 29 has an invalid length.
[  230.525404][T13458] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  230.620078][    T9] page_pool_release_retry() stalled pool shutdown: id 614, 1 inflight 60 sec
[  231.177003][T13482] netlink: 'syz.1.1966': attribute type 29 has an invalid length.
[  231.187447][T13483] bridge: RTM_NEWNEIGH with invalid ether address
[  231.284546][T13493] !: renamed from dummy0 (while UP)
[  231.338423][T13492] IPVS: Scheduler module ip_vs_sip not found
[  231.530082][ T6728] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  231.739847][   T54] Bluetooth: hci0: command tx timeout
[  232.260655][T13530] __nla_validate_parse: 6 callbacks suppressed
[  232.260665][T13530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1976'.
[  232.410494][T13540] netlink: 'syz.2.1979': attribute type 6 has an invalid length.
[  232.481698][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'.
[  233.001295][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1986'.
[  233.127289][T13585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1988'.
[  233.132219][T13585] netlink: 'syz.0.1988': attribute type 29 has an invalid length.
[  233.183195][T13594] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.232815][T13594] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.255024][T13601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  233.258413][T13601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  233.292779][T13594] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.301663][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1991'.
[  233.350008][T13601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  233.354377][T13601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  233.395413][T13594] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.434339][T13601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  233.438786][T13601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  233.475109][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.491003][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.504975][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.511123][T13601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  233.515369][T13601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  233.530792][ T6728] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.576505][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  233.581374][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  233.602222][ T6728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  233.604953][ T6728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  233.617279][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  233.624948][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  233.638299][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  233.647864][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  234.652832][T13627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.971531][T13665] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.998078][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2007'.
[  235.014275][T13665] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.880193][T13665] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.977126][T13665] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.239510][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2018'.
[  236.265976][T13740] sctp: [Deprecated]: syz.2.2020 (pid 13740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.265976][T13740] Use struct sctp_sack_info instead
[  236.271551][T13740] sctp: [Deprecated]: syz.2.2020 (pid 13740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.271551][T13740] Use struct sctp_sack_info instead
[  236.281244][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  236.321187][T13742] IPVS: Error connecting to the multicast addr
[  236.894474][T13745] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  236.898806][T13745] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  236.915234][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.934497][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.948361][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.961113][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.056077][T13745] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  237.062258][T13745] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  237.105733][T13751] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.115410][T13745] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  237.118866][T13745] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  237.173370][T13751] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.187928][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2024'.
[  237.214297][T13745] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  237.217801][T13745] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  237.235489][T13756] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002
[  237.256858][T13751] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.273152][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'.
[  237.345091][T13751] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.805967][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2036'.
[  237.811553][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2036'.
[  237.817432][T13789] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2036'.
[  237.978707][T13794] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'.
[  237.988924][T13794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2038'.
[  237.994144][T13794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2038'.
[  237.997913][T13794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2038'.
[  238.001660][T13794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2038'.
[  238.105989][T12867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  238.108826][T12867] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  238.117320][T12867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  238.122298][T12867] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  238.131326][T12867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  238.134291][T12867] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  238.143172][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  238.146392][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  238.437972][T13802] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  238.441978][T13802] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  238.474101][T13802] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  238.478143][T13802] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  238.516061][T13802] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  238.520607][T13802] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  238.553557][T13802] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  238.556932][T13802] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.678613][T12867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.690685][T12867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.700491][T12867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.711903][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.907395][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'.
[  241.007759][T13845] netlink: 'syz.1.2052': attribute type 27 has an invalid length.
[  241.113916][T13847] netlink: 'syz.2.2051': attribute type 4 has an invalid length.
[  241.270978][T13849] ieee802154 phy0 wpan0: encryption failed: -22
[  241.447963][T13860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.555960][T13860] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  241.566964][T13860] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  241.686119][T13873] netlink: 'syz.2.2061': attribute type 3 has an invalid length.
[  242.180461][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  242.183967][ T5875] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  242.196283][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  242.200377][ T5875] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  242.212447][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  242.216010][ T5875] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  242.227381][T12867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  242.231197][T12867] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  242.483870][T13901] netlink: 'syz.1.2068': attribute type 1 has an invalid length.
[  242.488522][T13901] __nla_validate_parse: 4 callbacks suppressed
[  242.488541][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2068'.
[  242.581578][T13908] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.633281][T13908] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.684259][T13908] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.747366][T13908] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.967308][T13923] netlink: 'syz.0.2074': attribute type 29 has an invalid length.
[  243.184652][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 120 seconds
[  243.189165][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 120 seconds
[  243.194218][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 120 seconds
[  243.198821][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 120 seconds
[  244.398542][T13957] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.443469][T13957] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.485426][T13957] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.544459][T13957] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.555624][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'.
[  244.568614][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.581454][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.593299][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.607199][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.660426][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.675523][T13976] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2089'.
[  244.680383][ T5875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.706030][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.709453][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.808706][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'.
[  244.813736][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'.
[  245.268534][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2099'.
[  245.570690][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'.
[  245.572343][T14036] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  245.583011][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'.
[  246.163691][T14059] openvswitch: netlink: Duplicate key (type 32).
[  246.250001][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'.
[  246.511484][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2121'.
[  246.625366][T14079] syzkaller1: entered promiscuous mode
[  246.627842][T14079] syzkaller1: entered allmulticast mode
[  246.634494][T14079] netlink: 'syz.1.2121': attribute type 4 has an invalid length.
[  246.643557][T14079] netlink: 'syz.1.2121': attribute type 4 has an invalid length.
[  247.813701][T14132] pim6reg1: entered promiscuous mode
[  247.815743][T14132] pim6reg1: entered allmulticast mode
[  248.396074][T14136] __nla_validate_parse: 1 callbacks suppressed
[  248.396091][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.405022][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.408113][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.411601][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.414606][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.417605][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.421047][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.424396][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.428015][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.432293][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  248.526322][T14139] IPVS: length: 205 != 24
[  248.644361][T14149] netlink: 'syz.1.2141': attribute type 10 has an invalid length.
[  248.722681][T14156] block nbd3: shutting down sockets
[  248.842087][T14169] ieee802154 phy0 wpan0: encryption failed: -22
[  249.963570][T14198] netlink: 'syz.0.2153': attribute type 10 has an invalid length.
[  249.986735][T14198] syz_tun: entered promiscuous mode
[  250.090208][T14214] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004
[  250.437603][T14223] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  250.442080][T14223] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  250.478193][T14227] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  250.498477][T14223] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  250.502885][T14223] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  250.555086][T14223] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  250.559622][T14223] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  250.658489][T14223] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  250.664366][T14223] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  250.820214][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  250.823058][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  250.831513][ T6728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  250.835176][ T6728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  250.848238][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  250.851405][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  250.854503][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  250.857775][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  251.463373][T14271] netlink: 'syz.0.2173': attribute type 10 has an invalid length.
[  251.777583][T14285] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  251.836120][T14287] netlink: 'syz.1.2180': attribute type 4 has an invalid length.
[  252.406297][T14306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.410457][T14306] syzkaller0: entered promiscuous mode
[  252.412544][T14306] syzkaller0: entered allmulticast mode
[  252.436515][T14306] tipc: Resetting bearer <eth:syzkaller0>
[  252.445498][T14305] tipc: Resetting bearer <eth:syzkaller0>
[  252.457159][T14305] tipc: Disabling bearer <eth:syzkaller0>
[  252.946779][T14330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.949411][T14330] syzkaller0: entered promiscuous mode
[  252.951688][T14330] syzkaller0: entered allmulticast mode
[  252.978087][T14327] tipc: Resetting bearer <eth:syzkaller0>
[  252.983951][T14326] tipc: Resetting bearer <eth:syzkaller0>
[  252.995697][T14326] tipc: Disabling bearer <eth:syzkaller0>
[  253.478026][T14362] __nla_validate_parse: 42 callbacks suppressed
[  253.478040][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2202'.
[  253.484790][T14362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2202'.
[  253.525238][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2203'.
[  253.579631][T14369] sctp: [Deprecated]: syz.2.2204 (pid 14369) Use of int in maxseg socket option.
[  253.579631][T14369] Use struct sctp_assoc_value instead
[  253.821576][   T54] Bluetooth: hci0: command tx timeout
[  254.132062][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'.
[  254.340547][T14405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  254.376753][T14405] netlink: 'syz.1.2213': attribute type 10 has an invalid length.
[  254.422548][T14417] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  254.426115][T14417] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  254.443431][T14419] netlink: 'syz.0.2217': attribute type 21 has an invalid length.
[  254.461001][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'.
[  254.489369][T14419] netlink: 'syz.0.2217': attribute type 10 has an invalid length.
[  254.545504][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'.
[  254.844117][T14442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2223'.
[  254.877808][T14444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2224'.
[  254.884880][T14444] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2224'.
[  255.345806][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  256.167623][T14475] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.364573][T14475] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.435988][T14475] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.470963][T14488] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.548234][T14475] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.586148][T14488] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.635866][T14488] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.644333][T12867] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.657128][T12867] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.666736][T12867] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.679294][T12867] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.683902][T14488] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.725840][T14498] netlink: 'syz.1.2240': attribute type 3 has an invalid length.
[  256.731438][T12867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.740830][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.749447][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.758036][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.773557][T14498] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  256.869074][T14511] netem: invalid attributes len -16
[  256.871414][T14511] netem: change failed
[  258.465976][T14547] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  258.542219][   T51] page_pool_release_retry() stalled pool shutdown: id 744, 1 inflight 60 sec
[  259.452467][T14558] __nla_validate_parse: 4 callbacks suppressed
[  259.452478][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'.
[  259.888370][T14580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2260'.
[  259.892093][T14580] netlink: 'syz.0.2260': attribute type 29 has an invalid length.
[  260.509778][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 30 seconds
[  260.513287][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 30 seconds
[  260.517252][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 30 seconds
[  260.521475][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 30 seconds
[  260.539798][   T54] Bluetooth: hci0: command tx timeout
[  263.484705][T14627] netlink: 'syz.1.2271': attribute type 10 has an invalid length.
[  264.174602][T14653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2278'.
[  264.421408][T14669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  264.446150][T14669] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  264.525604][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'.
[  264.615502][T14679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2284'.
[  265.289024][T14698] pim6reg1: entered promiscuous mode
[  265.291914][T14698] pim6reg1: entered allmulticast mode
[  265.356775][T14701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2289'.
[  265.581457][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'.
[  266.330790][T14725] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  266.336690][T14725] batman_adv: batadv0: Adding interface: gretap1
[  266.338951][T14725] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  266.346676][T14725] batman_adv: batadv0: Interface activated: gretap1
[  266.353680][T14726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.358285][T14726] syzkaller0: entered promiscuous mode
[  266.362762][T14726] syzkaller0: entered allmulticast mode
[  266.384344][T14726] tipc: Resetting bearer <eth:syzkaller0>
[  266.399499][T14726] tipc: Disabling bearer <eth:syzkaller0>
[  266.464312][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2298'.
[  266.501779][T14735] netlink: 'syz.0.2298': attribute type 10 has an invalid length.
[  266.568122][T14743] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  266.590355][T14743] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.706872][T14743] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  266.711249][T14743] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.720449][T14749] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  266.723942][T14750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2303'.
[  266.727639][T14750] tipc: Disabling bearer <udp:syz2>
[  266.756610][T14752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'.
[  266.763580][T14752] tc_dump_action: action bad kind
[  266.784286][T14743] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  266.788512][T14743] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.846176][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'.
[  266.855335][T14743] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  266.859144][T14743] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.991708][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  266.994985][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  267.010048][ T6728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  267.012599][ T6728] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  267.025692][ T6728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  267.028710][ T6728] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  267.037605][ T6728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  267.041493][ T6728] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  267.167256][T14778] netlink: 'syz.0.2313': attribute type 4 has an invalid length.
[  267.486560][T14789] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  267.583501][T14792] netlink: 'syz.0.2317': attribute type 3 has an invalid length.
[  267.586214][T14792] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2317'.
[  267.806522][T14801] can: request_module (can-proto-0) failed.
[  267.818926][T14801] netlink: 'syz.1.2319': attribute type 29 has an invalid length.
[  267.823745][T14801] netlink: 'syz.1.2319': attribute type 29 has an invalid length.
[  268.216569][T14815] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  268.547869][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2324'.
[  268.786786][T14849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  268.795044][T14849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  268.868608][T14849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  268.875717][T14849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  268.986514][T14849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  268.990302][T14849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  269.051005][T14849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  269.054727][T14849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  269.800229][T14870] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  269.904373][T14870] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  270.097998][T14891] __nla_validate_parse: 4 callbacks suppressed
[  270.098011][T14891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2338'.
[  270.219997][   T54] Bluetooth: hci0: command tx timeout
[  270.393476][T14902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2344'.
[  271.155464][ T6728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  271.158618][ T6728] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  271.169930][T12867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  271.175951][T12867] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  271.201733][T12867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  271.205264][T12867] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  271.208739][T12867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  271.213459][T12867] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  272.676604][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2371'.
[  272.718070][T15009] netlink: 'syz.1.2371': attribute type 4 has an invalid length.
[  272.766317][T12867] syzkaller0: tun_net_xmit 76
[  272.768157][T15006] syzkaller0: create flow: hash 433532475 index 1
[  272.768322][T12867] syzkaller0: tun_net_xmit 48
[  272.800315][  T792] syzkaller0: tun_net_xmit 76
[  272.808653][T15005] syzkaller0: delete flow: hash 433532475 index 1
[  273.269935][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 150 seconds
[  273.273818][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 150 seconds
[  273.277657][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 150 seconds
[  273.282223][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 150 seconds
[  273.810465][T15017] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  273.897889][T15085] pim6reg1: entered promiscuous mode
[  273.901329][T15085] pim6reg1: entered allmulticast mode
[  273.966297][T15114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2375'.
[  274.407709][T15143] tipc: Can't bind to reserved service type 0
[  274.501715][T15151] netlink: 'syz.0.2387': attribute type 10 has an invalid length.
[  275.412500][T15159] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.691108][T15159] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.753958][T15159] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.816332][T15159] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.885245][ T6728] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.892689][ T6728] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.898606][ T6728] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.906031][ T6728] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.023425][T15188] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.055119][T15188] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.115710][T15188] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.163677][T15188] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.706485][T15196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2401'.
[  276.710016][T15196] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2401'.
[  276.713172][T15196] netlink: 'syz.2.2401': attribute type 6 has an invalid length.
[  276.715944][T15196] netlink: 'syz.2.2401': attribute type 5 has an invalid length.
[  276.719119][T15196] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2401'.
[  276.735090][T15198] netlink: 'syz.0.2402': attribute type 3 has an invalid length.
[  276.841670][T15210] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.856356][T15212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'.
[  276.886842][T15216] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  276.913348][T15210] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.926344][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2406'.
[  276.948780][T15221] netlink: 'syz.0.2406': attribute type 10 has an invalid length.
[  276.958640][T15210] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.036965][T15210] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.097318][ T6728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.106099][ T6728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.119491][ T6728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.122679][ T6728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.183900][ T2210] page_pool_release_retry() stalled pool shutdown: id 835, 1 inflight 60 sec
[  277.184061][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'.
[  277.228832][T15247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  277.242428][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'.
[  277.246722][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'.
[  277.274906][T15249] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2415'.
[  277.304439][T15253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2417'.
[  277.629337][T15274] netlink: 'syz.0.2425': attribute type 10 has an invalid length.
[  277.845170][T15296] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  279.530667][ T6728] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.542383][ T6728] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.554336][ T6728] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.565760][ T6728] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.899796][   T54] Bluetooth: hci0: command tx timeout
[  290.540676][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 60 seconds
[  290.544164][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 60 seconds
[  290.547823][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 60 seconds
[  290.551726][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 60 seconds
[  292.633857][ T5296] udevd[5296]: worker [8757] /devices/virtual/block/nbd1 is taking a long time
[  293.232013][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.235919][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.239543][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  293.245138][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  293.249254][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.316279][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  293.319352][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  293.322776][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  293.326099][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  293.329340][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  293.409437][T15328] chnl_net:caif_netlink_parms(): no params data found
[  293.508900][T15328] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.511969][T15328] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.514873][T15328] bridge_slave_0: entered allmulticast mode
[  293.518399][T15328] bridge_slave_0: entered promiscuous mode
[  293.528614][T15328] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.532039][T15328] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.535056][T15328] bridge_slave_1: entered allmulticast mode
[  293.538825][T15328] bridge_slave_1: entered promiscuous mode
[  293.594808][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.608682][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.635918][T15328] team0: Port device team_slave_0 added
[  293.638203][T15331] chnl_net:caif_netlink_parms(): no params data found
[  293.644203][T15328] team0: Port device team_slave_1 added
[  293.672619][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.674974][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.684154][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.692836][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.695290][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.704092][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.751248][T15331] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.753694][T15331] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.756254][T15331] bridge_slave_0: entered allmulticast mode
[  293.759325][T15331] bridge_slave_0: entered promiscuous mode
[  293.769218][T15331] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.772045][T15331] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.774587][T15331] bridge_slave_1: entered allmulticast mode
[  293.777527][T15331] bridge_slave_1: entered promiscuous mode
[  293.783374][T15328] hsr_slave_0: entered promiscuous mode
[  293.786015][T15328] hsr_slave_1: entered promiscuous mode
[  293.788381][T15328] debugfs: 'hsr0' already exists in 'hsr'
[  293.791031][T15328] Cannot create hsr debugfs directory
[  293.807820][T15331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.819214][T15331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.853036][T15331] team0: Port device team_slave_0 added
[  293.861207][T15331] team0: Port device team_slave_1 added
[  293.894188][T15331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.896488][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.905076][T15331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.915227][T15331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.917559][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.927926][T15331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.001874][T15331] hsr_slave_0: entered promiscuous mode
[  294.005320][T15331] hsr_slave_1: entered promiscuous mode
[  294.008325][T15331] debugfs: 'hsr0' already exists in 'hsr'
[  294.011069][T15331] Cannot create hsr debugfs directory
[  295.260056][ T5850] Bluetooth: hci3: command tx timeout
[  295.263967][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  295.267191][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  295.270649][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.274049][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.277267][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  295.349964][ T5850] Bluetooth: hci4: command tx timeout
[  295.381120][T15345] chnl_net:caif_netlink_parms(): no params data found
[  295.436267][T15345] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.439347][T15345] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.442944][T15345] bridge_slave_0: entered allmulticast mode
[  295.446935][T15345] bridge_slave_0: entered promiscuous mode
[  295.451818][T15345] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.454956][T15345] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.458084][T15345] bridge_slave_1: entered allmulticast mode
[  295.462803][T15345] bridge_slave_1: entered promiscuous mode
[  295.495358][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.502413][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.533105][T15345] team0: Port device team_slave_0 added
[  295.536387][T15345] team0: Port device team_slave_1 added
[  295.552656][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.554930][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.564195][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.568794][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.572291][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.581779][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.611565][T15345] hsr_slave_0: entered promiscuous mode
[  295.613976][T15345] hsr_slave_1: entered promiscuous mode
[  295.616176][T15345] debugfs: 'hsr0' already exists in 'hsr'
[  295.618067][T15345] Cannot create hsr debugfs directory
[  297.349971][   T54] Bluetooth: hci3: command tx timeout
[  297.352504][ T5850] Bluetooth: hci5: command tx timeout
[  297.419958][ T5850] Bluetooth: hci4: command tx timeout
[  299.429885][ T5850] Bluetooth: hci5: command tx timeout
[  299.432230][ T5850] Bluetooth: hci3: command tx timeout
[  299.510400][   T54] Bluetooth: hci4: command tx timeout
[  301.509938][   T54] Bluetooth: hci3: command tx timeout
[  301.512329][   T54] Bluetooth: hci5: command tx timeout
[  301.581011][ T5850] Bluetooth: hci4: command tx timeout
[  303.352334][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 180 seconds
[  303.356411][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 180 seconds
[  303.360532][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 180 seconds
[  303.364395][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 180 seconds
[  303.589872][ T5850] Bluetooth: hci5: command tx timeout
[  304.723461][ T5296] udevd[5296]: worker [7576] /devices/virtual/block/nbd0 timeout; kill it
[  304.726485][ T5296] udevd[5296]: seq 12389 '/devices/virtual/block/nbd0' killed
[  316.781981][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  320.620764][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 90 seconds
[  320.625172][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 90 seconds
[  320.629981][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 90 seconds
[  320.634509][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 90 seconds
[  330.220563][ T5882] page_pool_release_retry() stalled pool shutdown: id 1092, 1 inflight 60 sec
[  333.429816][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 210 seconds
[  333.433817][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 210 seconds
[  333.437473][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 210 seconds
[  333.442078][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 210 seconds
[  350.703838][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 120 seconds
[  350.708370][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 120 seconds
[  350.713259][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 120 seconds
[  350.717608][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 120 seconds
[  354.315130][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  354.319003][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  354.323243][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  354.328028][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  354.335038][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  354.335561][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  354.342754][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  354.348387][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  354.354450][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  354.357876][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  354.509451][T15356] chnl_net:caif_netlink_parms(): no params data found
[  354.577357][T15358] chnl_net:caif_netlink_parms(): no params data found
[  354.595809][T15356] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.598917][T15356] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.601759][T15356] bridge_slave_0: entered allmulticast mode
[  354.604658][T15356] bridge_slave_0: entered promiscuous mode
[  354.615750][T15356] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.618296][T15356] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.621007][T15356] bridge_slave_1: entered allmulticast mode
[  354.623745][T15356] bridge_slave_1: entered promiscuous mode
[  354.655605][T15356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.665895][T15356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.698503][T15356] team0: Port device team_slave_0 added
[  354.701323][T15358] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.704355][T15358] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.707123][T15358] bridge_slave_0: entered allmulticast mode
[  354.710548][T15358] bridge_slave_0: entered promiscuous mode
[  354.714305][T15356] team0: Port device team_slave_1 added
[  354.724553][T15358] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.726970][T15358] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.729360][T15358] bridge_slave_1: entered allmulticast mode
[  354.732668][T15358] bridge_slave_1: entered promiscuous mode
[  354.756178][T15356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.758526][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.769371][T15356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.776575][T15356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.779528][T15356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.791776][T15356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.799159][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.809170][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.840002][T15358] team0: Port device team_slave_0 added
[  354.853981][T15358] team0: Port device team_slave_1 added
[  354.858571][T15356] hsr_slave_0: entered promiscuous mode
[  354.861647][T15356] hsr_slave_1: entered promiscuous mode
[  354.863839][T15356] debugfs: 'hsr0' already exists in 'hsr'
[  354.865682][T15356] Cannot create hsr debugfs directory
[  354.890319][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.892789][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.902243][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.910923][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.913313][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.922518][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.968811][T15358] hsr_slave_0: entered promiscuous mode
[  354.971192][T15358] hsr_slave_1: entered promiscuous mode
[  354.973520][T15358] debugfs: 'hsr0' already exists in 'hsr'
[  354.975587][T15358] Cannot create hsr debugfs directory
[  356.286049][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  356.289259][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  356.292657][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  356.295828][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  356.298568][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  356.384222][ T5846] Bluetooth: hci7: command tx timeout
[  356.387346][ T5849] Bluetooth: hci6: command tx timeout
[  356.410003][T15376] chnl_net:caif_netlink_parms(): no params data found
[  356.452815][T15376] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.455841][T15376] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.458832][T15376] bridge_slave_0: entered allmulticast mode
[  356.462454][T15376] bridge_slave_0: entered promiscuous mode
[  356.465960][T15376] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.468678][T15376] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.472068][T15376] bridge_slave_1: entered allmulticast mode
[  356.475725][T15376] bridge_slave_1: entered promiscuous mode
[  356.501301][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.506215][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.534159][T15376] team0: Port device team_slave_0 added
[  356.538146][T15376] team0: Port device team_slave_1 added
[  356.557605][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.560320][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.568406][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.572924][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.575164][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  356.583697][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.607708][T15376] hsr_slave_0: entered promiscuous mode
[  356.610174][T15376] hsr_slave_1: entered promiscuous mode
[  356.612515][T15376] debugfs: 'hsr0' already exists in 'hsr'
[  356.614354][T15376] Cannot create hsr debugfs directory
[  358.390270][ T5849] Bluetooth: hci8: command tx timeout
[  358.459928][ T5846] Bluetooth: hci6: command tx timeout
[  358.462048][ T5849] Bluetooth: hci7: command tx timeout
[  360.469942][ T5849] Bluetooth: hci8: command tx timeout
[  360.540211][ T5846] Bluetooth: hci7: command tx timeout
[  360.542665][ T5849] Bluetooth: hci6: command tx timeout
[  362.539922][ T5849] Bluetooth: hci8: command tx timeout
[  362.619882][ T5846] Bluetooth: hci7: command tx timeout
[  362.621795][ T5849] Bluetooth: hci6: command tx timeout
[  363.519916][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 240 seconds
[  363.523626][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 240 seconds
[  363.527101][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 240 seconds
[  363.530940][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 240 seconds
[  364.620122][ T5849] Bluetooth: hci8: command tx timeout
[  378.221892][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  380.781302][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 150 seconds
[  380.785736][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 150 seconds
[  380.790266][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 150 seconds
[  380.794746][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 150 seconds
[  393.589805][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 270 seconds
[  393.594221][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 270 seconds
[  393.598789][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 270 seconds
[  393.603632][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 270 seconds
[  410.860325][   T25] block nbd1: Possible stuck request ffff8880225d8000: control (read@0,1024B). Runtime 180 seconds
[  410.865220][   T25] block nbd1: Possible stuck request ffff8880225d8200: control (read@1024,1024B). Runtime 180 seconds
[  410.870409][   T25] block nbd1: Possible stuck request ffff8880225d8400: control (read@2048,1024B). Runtime 180 seconds
[  410.875080][   T25] block nbd1: Possible stuck request ffff8880225d8600: control (read@3072,1024B). Runtime 180 seconds
[  410.957703][ T5296] udevd[5296]: worker [8757] /devices/virtual/block/nbd1 timeout; kill it
[  410.962027][ T5296] udevd[5296]: seq 15825 '/devices/virtual/block/nbd1' killed
[  414.266793][T15387] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  414.271414][T15387] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  414.274979][T15387] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  414.279249][T15387] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  414.283684][T15387] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  414.396207][T15386] chnl_net:caif_netlink_parms(): no params data found
[  414.455598][T15386] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.458472][T15386] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.461180][T15386] bridge_slave_0: entered allmulticast mode
[  414.464091][T15386] bridge_slave_0: entered promiscuous mode
[  414.468151][T15386] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.471297][T15386] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.473667][T15386] bridge_slave_1: entered allmulticast mode
[  414.476439][T15386] bridge_slave_1: entered promiscuous mode
[  414.493666][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.498240][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.515894][T15386] team0: Port device team_slave_0 added
[  414.519155][T15386] team0: Port device team_slave_1 added
[  414.536335][T15386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.538621][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.547233][T15386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.552272][T15386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.554547][T15386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  414.563979][T15386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.591219][T15386] hsr_slave_0: entered promiscuous mode
[  414.593585][T15386] hsr_slave_1: entered promiscuous mode
[  414.595754][T15386] debugfs: 'hsr0' already exists in 'hsr'
[  414.597627][T15386] Cannot create hsr debugfs directory
[  415.345958][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  415.350538][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  415.354289][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  415.358141][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  415.362468][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  415.521143][T15396] chnl_net:caif_netlink_parms(): no params data found
[  415.598176][T15396] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.602036][T15396] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.605283][T15396] bridge_slave_0: entered allmulticast mode
[  415.609548][T15396] bridge_slave_0: entered promiscuous mode
[  415.614851][T15396] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.618157][T15396] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.621681][T15396] bridge_slave_1: entered allmulticast mode
[  415.625610][T15396] bridge_slave_1: entered promiscuous mode
[  415.657980][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  415.664746][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.695548][T15396] team0: Port device team_slave_0 added
[  415.701182][T15396] team0: Port device team_slave_1 added
[  415.730560][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.733423][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.744620][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.750945][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.753913][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.764931][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.808101][T15396] hsr_slave_0: entered promiscuous mode
[  415.811618][T15396] hsr_slave_1: entered promiscuous mode
[  415.814622][T15396] debugfs: 'hsr0' already exists in 'hsr'
[  415.817100][T15396] Cannot create hsr debugfs directory
[  416.149863][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  416.150100][ T5846] Bluetooth: hci3: command 0x0406 tx timeout
[  416.309992][ T5846] Bluetooth: hci9: command tx timeout
[  417.337224][   T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  417.341171][   T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  417.344845][   T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  417.349095][   T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  417.354486][   T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  417.419832][ T5846] Bluetooth: hci10: command tx timeout
[  417.486133][T15405] chnl_net:caif_netlink_parms(): no params data found
[  417.543440][T15405] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.545971][T15405] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.549286][T15405] bridge_slave_0: entered allmulticast mode
[  417.552496][T15405] bridge_slave_0: entered promiscuous mode
[  417.555997][T15405] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.558312][T15405] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.561288][T15405] bridge_slave_1: entered allmulticast mode
[  417.564212][T15405] bridge_slave_1: entered promiscuous mode
[  417.605356][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.612607][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.643063][T15405] team0: Port device team_slave_0 added
[  417.647925][T15405] team0: Port device team_slave_1 added
[  417.676549][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.679472][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.690383][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.696243][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.699081][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.709997][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.746951][T15405] hsr_slave_0: entered promiscuous mode
[  417.750286][T15405] hsr_slave_1: entered promiscuous mode
[  417.752594][T15405] debugfs: 'hsr0' already exists in 'hsr'
[  417.754533][T15405] Cannot create hsr debugfs directory
[  418.379916][ T5846] Bluetooth: hci9: command tx timeout
[  419.419936][   T54] Bluetooth: hci11: command tx timeout
[  419.500330][   T54] Bluetooth: hci10: command tx timeout
[  420.459915][   T54] Bluetooth: hci9: command tx timeout
[  421.269926][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  421.500033][ T5846] Bluetooth: hci11: command tx timeout
[  421.579881][ T5846] Bluetooth: hci10: command tx timeout
[  422.540165][ T5846] Bluetooth: hci9: command tx timeout
[  423.580541][ T5846] Bluetooth: hci11: command tx timeout
[  423.660930][ T5846] Bluetooth: hci10: command tx timeout
[  423.664580][   T60] block nbd0: Possible stuck request ffff8880225b8000: control (read@0,1024B). Runtime 300 seconds
[  423.669172][   T60] block nbd0: Possible stuck request ffff8880225b8200: control (read@1024,1024B). Runtime 300 seconds
[  423.674012][   T60] block nbd0: Possible stuck request ffff8880225b8400: control (read@2048,1024B). Runtime 300 seconds
[  423.678712][   T60] block nbd0: Possible stuck request ffff8880225b8600: control (read@3072,1024B). Runtime 300 seconds
[  425.659979][ T5846] Bluetooth: hci11: command tx timeout
[  436.460236][   T34] INFO: task syz.0.2427:15281 blocked for more than 143 seconds.
[  436.463525][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  436.470169][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.473377][   T34] task:syz.0.2427      state:D stack:23920 pid:15281 tgid:15280 ppid:5844   task_flags:0x480140 flags:0x00004004
[  436.478391][   T34] Call Trace:
[  436.480244][   T34]  <TASK>
[  436.481416][   T34]  __schedule+0x1798/0x4cc0
[  436.482978][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.484674][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.486303][   T34]  ? __pfx___schedule+0x10/0x10
[  436.487928][   T34]  ? schedule+0x91/0x360
[  436.489400][   T34]  schedule+0x165/0x360
[  436.491422][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  436.493375][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  436.495957][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  436.498327][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  436.501375][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  436.504046][   T34]  nbd_set_size+0x47e/0x6a0
[  436.505994][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  436.508169][   T34]  ? nla_memcpy+0x5b/0xc0
[  436.510419][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  436.512557][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  436.514894][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  436.517424][   T34]  ? bpf_lsm_capable+0x9/0x20
[  436.519356][   T34]  ? security_capable+0x7e/0x2e0
[  436.521804][   T34]  ? radix_tree_lookup+0x240/0x290
[  436.524020][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  436.526200][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  436.528342][   T34]  ? __nla_parse+0x40/0x60
[  436.530517][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  436.533194][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  436.535535][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  436.538174][   T34]  ? stack_trace_save+0x9c/0xe0
[  436.542952][   T34]  genl_rcv_msg+0x60e/0x790
[  436.544973][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.547139][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  436.549508][   T34]  netlink_rcv_skb+0x208/0x470
[  436.551937][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.553908][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.556085][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.558304][   T34]  ? down_read+0x1ad/0x2e0
[  436.560508][   T34]  genl_rcv+0x28/0x40
[  436.562215][   T34]  netlink_unicast+0x82f/0x9e0
[  436.564159][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  436.565950][   T34]  ? netlink_sendmsg+0x642/0xb30
[  436.567620][   T34]  netlink_sendmsg+0x805/0xb30
[  436.569267][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.571872][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.573908][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.575971][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.578144][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.580375][   T34]  __sock_sendmsg+0x21c/0x270
[  436.582104][   T34]  ____sys_sendmsg+0x505/0x830
[  436.583934][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.586088][   T34]  ? import_iovec+0x74/0xa0
[  436.587963][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  436.590134][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  436.592292][   T34]  ? __fget_files+0x2a/0x420
[  436.593912][   T34]  ? __fget_files+0x3a0/0x420
[  436.595868][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  436.598099][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  436.600627][   T34]  ? rcu_is_watching+0x15/0xb0
[  436.602640][   T34]  ? do_syscall_64+0xbe/0x3b0
[  436.604610][   T34]  do_syscall_64+0xfa/0x3b0
[  436.606502][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.608638][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.617558][   T34]  ? exc_page_fault+0x9f/0xf0
[  436.619531][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.622830][   T34] RIP: 0033:0x7f116958ec29
[  436.624328][   T34] RSP: 002b:00007f116a3a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.627181][   T34] RAX: ffffffffffffffda RBX: 00007f11697d5fa0 RCX: 00007f116958ec29
[  436.630179][   T34] RDX: 0000000000000080 RSI: 0000200000001600 RDI: 0000000000000005
[  436.633352][   T34] RBP: 00007f1169611e41 R08: 0000000000000000 R09: 0000000000000000
[  436.636731][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  436.639517][   T34] R13: 00007f11697d6038 R14: 00007f11697d5fa0 R15: 00007ffd8b472598
[  436.643000][   T34]  </TASK>
[  436.644097][   T34] INFO: task syz.2.2431:15296 blocked for more than 143 seconds.
[  436.646649][   T34]       Not tainted syzkaller #0
[  436.648490][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.651877][   T34] task:syz.2.2431      state:D stack:26344 pid:15296 tgid:15294 ppid:5854   task_flags:0x400140 flags:0x00004004
[  436.655894][   T34] Call Trace:
[  436.657136][   T34]  <TASK>
[  436.658167][   T34]  __schedule+0x1798/0x4cc0
[  436.660266][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.662067][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.664066][   T34]  ? __pfx___schedule+0x10/0x10
[  436.666108][   T34]  ? schedule+0x91/0x360
[  436.667939][   T34]  schedule+0x165/0x360
[  436.670172][   T34]  schedule_preempt_disabled+0x13/0x30
[  436.672194][   T34]  __mutex_lock+0x7e6/0x1350
[  436.674049][   T34]  ? __mutex_lock+0x5bb/0x1350
[  436.675802][   T34]  ? genl_rcv_msg+0x10d/0x790
[  436.677753][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  436.679500][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  436.681680][   T34]  ? radix_tree_lookup+0x240/0x290
[  436.683765][   T34]  genl_rcv_msg+0x10d/0x790
[  436.685579][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.687518][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  436.689341][   T34]  ? __asan_memcpy+0x40/0x70
[  436.691954][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  436.694227][   T34]  netlink_rcv_skb+0x208/0x470
[  436.696288][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.698314][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.702704][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.705080][   T34]  ? down_read+0x1ad/0x2e0
[  436.707045][   T34]  genl_rcv+0x28/0x40
[  436.708773][   T34]  netlink_unicast+0x82f/0x9e0
[  436.711249][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  436.713405][   T34]  ? netlink_sendmsg+0x642/0xb30
[  436.715453][   T34]  ? skb_put+0x11b/0x210
[  436.717336][   T34]  netlink_sendmsg+0x805/0xb30
[  436.719361][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.722584][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.724708][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.726967][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.728752][   T34]  __sock_sendmsg+0x21c/0x270
[  436.730881][   T34]  __sys_sendto+0x3bd/0x520
[  436.732804][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  436.734687][   T34]  ? count_memcg_event_mm+0x21/0x260
[  436.736558][   T34]  ? exc_page_fault+0x76/0xf0
[  436.738217][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  436.740596][   T34]  __x64_sys_sendto+0xde/0x100
[  436.742565][   T34]  do_syscall_64+0xfa/0x3b0
[  436.744285][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.746123][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.748295][   T34]  ? exc_page_fault+0x9f/0xf0
[  436.750406][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.752543][   T34] RIP: 0033:0x7f6b09d90abc
[  436.754116][   T34] RSP: 002b:00007f6b07ff4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  436.757097][   T34] RAX: ffffffffffffffda RBX: 00007f6b07ff4fc0 RCX: 00007f6b09d90abc
[  436.760573][   T34] RDX: 0000000000000028 RSI: 00007f6b07ff5010 RDI: 000000000000000e
[  436.763642][   T34] RBP: 0000000000000000 R08: 00007f6b07ff4f14 R09: 000000000000000c
[  436.766705][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e
[  436.769497][   T34] R13: 00007f6b07ff4f68 R14: 00007f6b07ff5010 R15: 0000000000000000
[  436.772726][   T34]  </TASK>
[  436.773944][   T34] INFO: task syz.2.2431:15298 blocked for more than 143 seconds.
[  436.776828][   T34]       Not tainted syzkaller #0
[  436.778495][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.782258][   T34] task:syz.2.2431      state:D stack:27592 pid:15298 tgid:15294 ppid:5854   task_flags:0x400040 flags:0x00004004
[  436.786508][   T34] Call Trace:
[  436.787625][   T34]  <TASK>
[  436.788712][   T34]  __schedule+0x1798/0x4cc0
[  436.790975][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.792776][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.794440][   T34]  ? __pfx___schedule+0x10/0x10
[  436.796475][   T34]  ? schedule+0x91/0x360
[  436.798234][   T34]  schedule+0x165/0x360
[  436.800355][   T34]  schedule_preempt_disabled+0x13/0x30
[  436.802444][   T34]  __mutex_lock+0x7e6/0x1350
[  436.804242][   T34]  ? __mutex_lock+0x5bb/0x1350
[  436.806073][   T34]  ? genl_rcv_msg+0x10d/0x790
[  436.807794][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  436.809975][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  436.812185][   T34]  ? radix_tree_lookup+0x240/0x290
[  436.814590][   T34]  genl_rcv_msg+0x10d/0x790
[  436.816533][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.818494][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  436.820512][   T34]  ? __asan_memcpy+0x40/0x70
[  436.822238][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  436.824374][   T34]  netlink_rcv_skb+0x208/0x470
[  436.825951][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.827700][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.829398][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.831766][   T34]  ? down_read+0x1ad/0x2e0
[  436.833223][   T34]  genl_rcv+0x28/0x40
[  436.834549][   T34]  netlink_unicast+0x82f/0x9e0
[  436.836132][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  436.837946][   T34]  ? netlink_sendmsg+0x642/0xb30
[  436.839904][   T34]  ? skb_put+0x11b/0x210
[  436.841475][   T34]  netlink_sendmsg+0x805/0xb30
[  436.843151][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.844977][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.846727][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.848905][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.850999][   T34]  __sock_sendmsg+0x21c/0x270
[  436.852717][   T34]  __sys_sendto+0x3bd/0x520
[  436.854381][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  436.856223][   T34]  ? fd_install+0x97/0x540
[  436.858037][   T34]  ? fd_install+0x30d/0x540
[  436.860135][   T34]  __x64_sys_sendto+0xde/0x100
[  436.862005][   T34]  do_syscall_64+0xfa/0x3b0
[  436.863830][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.866164][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  436.868239][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.870421][   T34] RIP: 0033:0x7f6b09d90abc
[  436.872301][   T34] RSP: 002b:00007f6b07fd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  436.875821][   T34] RAX: ffffffffffffffda RBX: 00007f6b07fd3fc0 RCX: 00007f6b09d90abc
[  436.879107][   T34] RDX: 0000000000000024 RSI: 00007f6b07fd4010 RDI: 000000000000000f
[  436.882623][   T34] RBP: 0000000000000000 R08: 00007f6b07fd3f14 R09: 000000000000000c
[  436.885911][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f
[  436.889244][   T34] R13: 00007f6b07fd3f68 R14: 00007f6b07fd4010 R15: 0000000000000000
[  436.892546][   T34]  </TASK>
[  436.893839][   T34] INFO: task syz.1.2437:15321 blocked for more than 143 seconds.
[  436.896865][   T34]       Not tainted syzkaller #0
[  436.898503][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  436.902475][   T34] task:syz.1.2437      state:D stack:25864 pid:15321 tgid:15320 ppid:5848   task_flags:0x400140 flags:0x00004004
[  436.906805][   T34] Call Trace:
[  436.908060][   T34]  <TASK>
[  436.909161][   T34]  __schedule+0x1798/0x4cc0
[  436.910874][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.912948][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.914764][   T34]  ? __pfx___schedule+0x10/0x10
[  436.916696][   T34]  ? schedule+0x91/0x360
[  436.918356][   T34]  schedule+0x165/0x360
[  436.920250][   T34]  schedule_preempt_disabled+0x13/0x30
[  436.922553][   T34]  __mutex_lock+0x7e6/0x1350
[  436.924572][   T34]  ? __mutex_lock+0x5bb/0x1350
[  436.926686][   T34]  ? genl_rcv_msg+0x10d/0x790
[  436.928694][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  436.930963][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  436.933158][   T34]  ? radix_tree_lookup+0x240/0x290
[  436.935294][   T34]  genl_rcv_msg+0x10d/0x790
[  436.937234][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.939099][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  436.941445][   T34]  ? __asan_memcpy+0x40/0x70
[  436.943041][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  436.944870][   T34]  netlink_rcv_skb+0x208/0x470
[  436.946625][   T34]  ? __lock_acquire+0xab9/0xd20
[  436.948358][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  436.950301][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  436.952348][   T34]  ? down_read+0x1ad/0x2e0
[  436.953925][   T34]  genl_rcv+0x28/0x40
[  436.955355][   T34]  netlink_unicast+0x82f/0x9e0
[  436.957247][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  436.959382][   T34]  ? netlink_sendmsg+0x642/0xb30
[  436.961430][   T34]  ? skb_put+0x11b/0x210
[  436.963049][   T34]  netlink_sendmsg+0x805/0xb30
[  436.965014][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.967202][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  436.969145][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  436.971620][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.973868][   T34]  __sock_sendmsg+0x21c/0x270
[  436.975854][   T34]  __sys_sendto+0x3bd/0x520
[  436.977709][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  436.980149][   T34]  ? count_memcg_event_mm+0x21/0x260
[  436.982435][   T34]  ? exc_page_fault+0x76/0xf0
[  436.984454][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  436.986383][   T34]  __x64_sys_sendto+0xde/0x100
[  436.988094][   T34]  do_syscall_64+0xfa/0x3b0
[  436.990109][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.992234][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.994516][   T34]  ? exc_page_fault+0x9f/0xf0
[  436.996144][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.998157][   T34] RIP: 0033:0x7fe7cf190abc
[  436.999971][   T34] RSP: 002b:00007fe7d003aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  437.003413][   T34] RAX: ffffffffffffffda RBX: 00007fe7d003afc0 RCX: 00007fe7cf190abc
[  437.006711][   T34] RDX: 0000000000000020 RSI: 00007fe7d003b010 RDI: 0000000000000005
[  437.010048][   T34] RBP: 0000000000000000 R08: 00007fe7d003af14 R09: 000000000000000c
[  437.013345][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  437.016670][   T34] R13: 00007fe7d003af68 R14: 00007fe7d003b010 R15: 0000000000000000
[  437.021275][   T34]  </TASK>
[  437.022395][   T34] INFO: task syz.1.2437:15322 blocked for more than 143 seconds.
[  437.024895][   T34]       Not tainted syzkaller #0
[  437.026582][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  437.029600][   T34] task:syz.1.2437      state:D stack:26984 pid:15322 tgid:15320 ppid:5848   task_flags:0x400040 flags:0x00004004
[  437.034613][   T34] Call Trace:
[  437.036064][   T34]  <TASK>
[  437.037321][   T34]  __schedule+0x1798/0x4cc0
[  437.039245][   T34]  ? __lock_acquire+0xab9/0xd20
[  437.041532][   T34]  ? __lock_acquire+0xab9/0xd20
[  437.043674][   T34]  ? __pfx___schedule+0x10/0x10
[  437.045524][   T34]  ? schedule+0x91/0x360
[  437.047141][   T34]  schedule+0x165/0x360
[  437.048817][   T34]  schedule_preempt_disabled+0x13/0x30
[  437.051827][   T34]  __mutex_lock+0x7e6/0x1350
[  437.053814][   T34]  ? __mutex_lock+0x5bb/0x1350
[  437.055840][   T34]  ? genl_rcv_msg+0x10d/0x790
[  437.057833][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  437.060057][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  437.062088][   T34]  ? radix_tree_lookup+0x240/0x290
[  437.063904][   T34]  genl_rcv_msg+0x10d/0x790
[  437.065827][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.067944][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  437.070198][   T34]  ? __asan_memcpy+0x40/0x70
[  437.072046][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  437.074273][   T34]  netlink_rcv_skb+0x208/0x470
[  437.076357][   T34]  ? __lock_acquire+0xab9/0xd20
[  437.078452][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  437.080691][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.082985][   T34]  ? down_read+0x1ad/0x2e0
[  437.084920][   T34]  genl_rcv+0x28/0x40
[  437.086643][   T34]  netlink_unicast+0x82f/0x9e0
[  437.088744][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  437.091265][   T34]  ? netlink_sendmsg+0x642/0xb30
[  437.093423][   T34]  ? skb_put+0x11b/0x210
[  437.095297][   T34]  netlink_sendmsg+0x805/0xb30
[  437.097354][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.099569][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  437.101996][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.104180][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.106407][   T34]  __sock_sendmsg+0x21c/0x270
[  437.108429][   T34]  __sys_sendto+0x3bd/0x520
[  437.110590][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  437.112797][   T34]  ? fd_install+0x97/0x540
[  437.114742][   T34]  ? fd_install+0x30d/0x540
[  437.116686][   T34]  __x64_sys_sendto+0xde/0x100
[  437.118759][   T34]  do_syscall_64+0xfa/0x3b0
[  437.120774][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.122977][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.125482][   T34]  ? exc_page_fault+0x9f/0xf0
[  437.127457][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.130040][   T34] RIP: 0033:0x7fe7cf190abc
[  437.131951][   T34] RSP: 002b:00007fe7d0019ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  437.135386][   T34] RAX: ffffffffffffffda RBX: 00007fe7d0019fc0 RCX: 00007fe7cf190abc
[  437.138635][   T34] RDX: 0000000000000020 RSI: 00007fe7d001a010 RDI: 0000000000000009
[  437.142103][   T34] RBP: 0000000000000000 R08: 00007fe7d0019f14 R09: 000000000000000c
[  437.145110][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009
[  437.147852][   T34] R13: 00007fe7d0019f68 R14: 00007fe7d001a010 R15: 0000000000000000
[  437.151124][   T34]  </TASK>
[  437.152481][   T34] 
[  437.152481][   T34] Showing all locks held in the system:
[  437.155485][   T34] 1 lock held by khungtaskd/34:
[  437.157486][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  437.162267][   T34] 2 locks held by getty/5675:
[  437.164232][   T34]  #0: ffff8880234510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  437.168315][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  437.172582][   T34] 1 lock held by udevd/7576:
[  437.174484][   T34]  #0: ffff8881070a8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  437.178177][   T34] 1 lock held by udevd/8757:
[  437.180347][   T34]  #0: ffff88802252b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  437.184270][   T34] 6 locks held by syz.0.2427/15281:
[  437.186466][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.190022][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.193833][   T34]  #2: ffff888022511230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870
[  437.198183][   T34]  #3: ffff888106fcdf58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0
[  437.202425][   T34]  #4: ffff888106fcd8f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  437.207697][   T34]  #5: ffff888106fcd930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0
[  437.213208][   T34] 2 locks held by syz.2.2431/15296:
[  437.215332][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.218757][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.222610][   T34] 2 locks held by syz.2.2431/15298:
[  437.224802][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.228064][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.232006][   T34] 2 locks held by syz.1.2437/15321:
[  437.234158][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.237489][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.241468][   T34] 2 locks held by syz.1.2437/15322:
[  437.243712][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.247151][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.251045][   T34] 2 locks held by syz-executor/15328:
[  437.253317][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.256854][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.260954][   T34] 2 locks held by syz-executor/15331:
[  437.263242][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.266730][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.271155][   T34] 2 locks held by syz-executor/15345:
[  437.273466][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.276961][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.280865][   T34] 2 locks held by syz-executor/15356:
[  437.283006][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.286492][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.290421][   T34] 2 locks held by syz-executor/15358:
[  437.292732][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.296231][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.300205][   T34] 2 locks held by syz-executor/15376:
[  437.302291][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.304992][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.308511][   T34] 2 locks held by syz-executor/15386:
[  437.311002][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.313923][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.317236][   T34] 2 locks held by syz-executor/15396:
[  437.319463][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.323212][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.327086][   T34] 2 locks held by syz-executor/15405:
[  437.329396][   T34]  #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  437.332517][   T34]  #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  437.335967][   T34] 
[  437.336957][   T34] =============================================
[  437.336957][   T34] 
[  437.340227][   T34] NMI backtrace for cpu 0
[  437.340235][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  437.340243][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.340247][   T34] Call Trace:
[  437.340251][   T34]  <TASK>
[  437.340255][   T34]  dump_stack_lvl+0x189/0x250
[  437.340267][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.340275][   T34]  ? __pfx__printk+0x10/0x10
[  437.340288][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  437.340298][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  437.340308][   T34]  ? __pfx__printk+0x10/0x10
[  437.340317][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  437.340328][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  437.340338][   T34]  watchdog+0xf93/0xfe0
[  437.340348][   T34]  ? watchdog+0x1de/0xfe0
[  437.340358][   T34]  kthread+0x711/0x8a0
[  437.340368][   T34]  ? __pfx_watchdog+0x10/0x10
[  437.340376][   T34]  ? __pfx_kthread+0x10/0x10
[  437.340384][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.340394][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.340404][   T34]  ? __pfx_kthread+0x10/0x10
[  437.340412][   T34]  ret_from_fork+0x439/0x7d0
[  437.340419][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  437.340427][   T34]  ? __switch_to_asm+0x39/0x70
[  437.340435][   T34]  ? __switch_to_asm+0x33/0x70
[  437.340442][   T34]  ? __pfx_kthread+0x10/0x10
[  437.340450][   T34]  ret_from_fork_asm+0x1a/0x30
[  437.340469][   T34]  </TASK>
[  437.340473][   T34] Sending NMI from CPU 0 to CPUs 1:
[  437.397476][    C1] NMI backtrace for cpu 1
[  437.397491][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  437.397500][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.397505][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  437.397522][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  437.397529][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  437.397538][    C1] RAX: 35f1ee3df2b7a600 RBX: ffffffff819683f8 RCX: 35f1ee3df2b7a600
[  437.397544][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b06ab RDI: ffffffff8be33f00
[  437.397549][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  437.397555][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa2ee30
[  437.397561][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  437.397566][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[  437.397573][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  437.397579][    C1] CR2: 000055d43f26b5c8 CR3: 000000000df36000 CR4: 00000000000006f0
[  437.397607][    C1] Call Trace:
[  437.397613][    C1]  <TASK>
[  437.397617][    C1]  default_idle+0x13/0x20
[  437.397627][    C1]  default_idle_call+0x74/0xb0
[  437.397637][    C1]  do_idle+0x1e8/0x510
[  437.397686][    C1]  ? __pfx_do_idle+0x10/0x10
[  437.397702][    C1]  cpu_startup_entry+0x44/0x60
[  437.397713][    C1]  start_secondary+0x101/0x110
[  437.397724][    C1]  common_startup_64+0x13e/0x147
[  437.397738][    C1]  </TASK>
[  437.398420][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  437.457634][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  437.460727][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  437.464126][   T34] Call Trace:
[  437.465366][   T34]  <TASK>
[  437.466416][   T34]  dump_stack_lvl+0x99/0x250
[  437.467987][   T34]  ? __asan_memcpy+0x40/0x70
[  437.469569][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.471773][   T34]  ? __pfx__printk+0x10/0x10
[  437.473808][   T34]  vpanic+0x281/0x750
[  437.475540][   T34]  ? __pfx_vpanic+0x10/0x10
[  437.477526][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  437.479890][   T34]  ? preempt_schedule+0xae/0xc0
[  437.481953][   T34]  ? preempt_schedule_common+0x83/0xd0
[  437.484090][   T34]  panic+0xb9/0xc0
[  437.485391][   T34]  ? __pfx_panic+0x10/0x10
[  437.486902][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  437.488701][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  437.490753][   T34]  watchdog+0xfd2/0xfe0
[  437.492145][   T34]  ? watchdog+0x1de/0xfe0
[  437.493589][   T34]  kthread+0x711/0x8a0
[  437.494999][   T34]  ? __pfx_watchdog+0x10/0x10
[  437.496756][   T34]  ? __pfx_kthread+0x10/0x10
[  437.498584][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.500698][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.502639][   T34]  ? __pfx_kthread+0x10/0x10
[  437.504386][   T34]  ret_from_fork+0x439/0x7d0
[  437.506294][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  437.508074][   T34]  ? __switch_to_asm+0x39/0x70
[  437.510008][   T34]  ? __switch_to_asm+0x33/0x70
[  437.511895][   T34]  ? __pfx_kthread+0x10/0x10
[  437.513757][   T34]  ret_from_fork_asm+0x1a/0x30
[  437.515567][   T34]  </TASK>
[  437.517530][   T34] Kernel Offset: disabled
[  437.519195][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:50:37  Registers:
info registers vcpu 0

CPU#0
RAX=c59a3869ec3c2800 RBX=ffffffff819683f8 RCX=c59a3869ec3c2800 RDX=0000000000000001
RSI=ffffffff8d9b06ab RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa2ee30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b72e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f929220c440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000179 0000000031323038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=696b66722f343579 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900030bfac0 RBX=ffff888107a41fe0 RCX=dffffc0000000000 RDX=00005555941fc000
RSI=0000000000000000 RDI=ffffc900030bfab0 RBP=ffffc900030bf890 RSP=ffffc900030bf5e0
R8 =ffff88801b0bfadb R9 =1ffff11003617f5b R10=dffffc0000000000 R11=ffffed1003617f5c
R12=0000000000000000 R13=00005555941fc000 R14=0000000000000000 R15=ffffc900030bfaa0
RIP=ffffffff820964f4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3005107d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f30045a76c3 00007f30045a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=030210b080840009 b60304010000005f XMM07=0009b40300000000 b0030210b8808400
XMM08=09ae030010b08084 0009ae030000005e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
