last executing test programs:

18.687740748s ago: executing program 0 (id=2967):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket(0x2, 0x80805, 0x0)
ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x2}}, 0x44)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000700)="57f09009cd1c9b60adef2f", 0xb}], 0x1}}], 0x1, 0x20008000)
shutdown(r1, 0x1)

18.627444577s ago: executing program 0 (id=2968):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0xfffffbff)
poll(&(0x7f0000000040)=[{r0, 0x1146}], 0x1, 0x400) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x304, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xa0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7a}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x9}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "d9af2ed1726d1c56ca9025c2ee17d685"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "81e7c040a203db8ad0058eb677cff604c5f14a234c4762d79f7caf3f02e07a64"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "34f2af67b7fa59f677668ded792658019202dfb88cfe737be605f9a096311387"}]}, @NL802154_ATTR_SEC_KEY={0x1e8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bfd26d5343f6ef992cae897c725801284fbf3ea380372d98fbe4f021cfe235aa"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x36}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4c50}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8450b68ea16f74bab02db451069b8c1160292c36fc15167fa83fe87d2d341b2b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8cb69b6933a101a56bcb41f127597cd1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "965251ce988cbdb19a083a3318a0dc6a"}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xea7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xec00}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000200)={0xffffffffffffffff, 0x8, 0xc7, 0x7, 0x100, 0x4, 0x31d214b7, 0xf1}, &(0x7f0000000280)={0x7f, 0x3, 0x9, 0xa, 0x3, 0x7, 0x2}, &(0x7f00000002c0)={0xd, 0xc21d, 0xffffffff, 0x42b9, 0x8000000000000000, 0x54b, 0x5a2, 0x2}, &(0x7f00000006c0), &(0x7f0000000800)={&(0x7f0000000700)={[0x8001]}, 0x8}) (async)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r3)
r5 = socket(0x1d, 0x2, 0x6) (async)
r6 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000001840)={0x90000001}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) (async)
sendmsg$inet6(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8801)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008"], 0x108}}, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

18.534607561s ago: executing program 1 (id=2969):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x8084)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r2, 0x1)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet6(r3, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x9, @empty, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x24004000)

17.757534145s ago: executing program 0 (id=2978):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302000020000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b"], 0x134}}, 0x4000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x80}, @in=@remote, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0xfffffffffffffffd, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x40000}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000d00000000020000000000001202000000020000000000008e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000030000000000000000000000000000000000a003000"], 0xb8}}, 0x4000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f00000000c0)=0x7fffffff, 0x3)

17.697767586s ago: executing program 0 (id=2979):
getpid()
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
socket(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
pipe(&(0x7f00000007c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b", 0xb}], 0x1, 0x1)
close(r4)
r5 = socket(0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'team_slave_1\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4)
splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0xffffffff)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x2}, 0x6)
write(r7, &(0x7f0000000000), 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4de511c90f33fa42, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ae5ffff0b00000004000000f6ff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32=r3, @ANYBLOB="00000000002000009500fe0000000000b8d1750129186505410494af927ea7174551342dfc426a2bc71d766bf590bc09d178efac9ab17a7cade5560653e683e013edc05b354850a6715e121540b0ed631eabcebe48cb0986278ad8068e507f0210b58494aa075b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0)
ioctl$NILFS_IOCTL_GET_CPSTAT(r9, 0x80186e83, &(0x7f0000000280))
sendmsg$inet(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)

17.697294813s ago: executing program 1 (id=2980):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) (async)
r0 = socket(0x400000000010, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r3, 0x2)
r4 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async, rerun: 64)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x50}, @void, @val={0xc, 0x99, {0x7, 0x42}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4020000)
sendmsg$tipc(r5, &(0x7f0000000300)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async)
bind$x25(0xffffffffffffffff, &(0x7f0000000100), 0x12)
bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r9 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

17.565606301s ago: executing program 1 (id=2982):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001300010100000000fedbdf2507"], 0x14}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
close(0x3)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) (async)
bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r10, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
vmsplice(r7, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="26a92318688267d13a224879df23f89f89a07577dc22f65f35e73c91bff7310315389c21c36a4da5872a99508c62ee33", 0x30}, {&(0x7f0000000100)="fba293ecaab88d9b38a3448d3cc90871354c207bdd8c393fe391", 0x1a}], 0x3, 0xf) (async)
vmsplice(r7, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="26a92318688267d13a224879df23f89f89a07577dc22f65f35e73c91bff7310315389c21c36a4da5872a99508c62ee33", 0x30}, {&(0x7f0000000100)="fba293ecaab88d9b38a3448d3cc90871354c207bdd8c393fe391", 0x1a}], 0x3, 0xf)

17.455465598s ago: executing program 1 (id=2985):
socket$rxrpc(0x21, 0x2, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0xfffffeae, 0x0, 0x0}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x1}], 0x20}, 0x40040)

17.397600122s ago: executing program 2 (id=2986):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x67159a565d6bf0e9}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040814}, 0x4000080)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0xfffd, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x18, 0x0, 0x0)

17.397287865s ago: executing program 2 (id=2987):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000028c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec97000f982c00fe8000000000000000000000000005aaff0200000000000000000000000000013a00"], 0xfce)

17.177924662s ago: executing program 2 (id=2988):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x1, 0x0, 0xa001}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
setsockopt$sock_int(r1, 0x1, 0x3, 0x0, 0x0)

17.176740537s ago: executing program 2 (id=2989):
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4060008beecd9a3f6686146025c8a6574da24348bc6193433c1b718475e684b7d84a3027de735a4595503646c5db9cb169d7522a53e934a1d224b8da5220b9b61c7bb5f0d33884697a8f236c7e52486e9ea233b8910f3d91dae37cf0aaa96ae10b2fff77de7dd6af0d43f5ad0c7c61cd678f8d4da1aef5274ebc344d48fb68df4eaeb00f3d20ee7715118cd12cf49e7c05f06c9c13c1a78674768778976ebc76f93588850668532cccbb20c969475602450db3bf2325640ba2c0ca2cb172bfc214ad00dbeadb10deb45c6d2d59b29f10d5c35675255398daf82a9b310a75c4bd22b515f81", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800400018008000340000000011c000000080a010300000000000000000100000008000b4000000004140000001100010000000000000000000300000ab4c9a7280b51e3f45f6147a413e87d"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x5, 0x1000, 0x3a, 0x4, 0xfffffffc, 0xffffffff}, 0x1c)
r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[], 0x3c) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)

17.097903382s ago: executing program 2 (id=2990):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000000000000000000168861098ec0b600"], 0x14}, 0x1, 0x0, 0x0, 0x48d3}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
close(0x3)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r10, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)

17.037429515s ago: executing program 2 (id=2991):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20044850)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf25030000000c000600c2c3a4999b4012a30c00040008000000000000000c00050025000000000000000c00020006000000000000000800010000000000640007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRESHEX, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="92535b492be016e2", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0002000200000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4020)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

16.738028562s ago: executing program 0 (id=2992):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x2c, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240000c1}, 0x0)
socket$packet(0x11, 0x1, 0x300)

16.737352636s ago: executing program 0 (id=2993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0xfffff000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x6e073, 0xffffffffffffffff, 0x2000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x40000300)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001180)=""/138, &(0x7f0000001080)=0x8a)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190400000c000180080003"], 0x20}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x41)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc2(0x0, r4)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, 0x0, 0x0)

16.586029447s ago: executing program 1 (id=2994):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x40)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
recvfrom(r1, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000200)=""/192, &(0x7f0000000140)=0xc0)

15.717643803s ago: executing program 1 (id=2995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000000073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a00"/168], 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x200040a0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9a104629", @ANYRES16=r3, @ANYBLOB="07000000000000000000020000000800020008000000"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000900000000890000", @ANYRES32=r10, @ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

2.038082988s ago: executing program 32 (id=2991):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20044850)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf25030000000c000600c2c3a4999b4012a30c00040008000000000000000c00050025000000000000000c00020006000000000000000800010000000000640007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRESHEX, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="92535b492be016e2", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0002000200000000000000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4020)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

1.02015709s ago: executing program 33 (id=2993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0xfffff000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x6e073, 0xffffffffffffffff, 0x2000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{0x0}], 0x1}, 0x40000300)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001180)=""/138, &(0x7f0000001080)=0x8a)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0xc0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190400000c000180080003"], 0x20}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x41)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$tipc2(0x0, r4)
sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, 0x0, 0x0)

0s ago: executing program 34 (id=2995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000000073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000000700000a00"/168], 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x200040a0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9a104629", @ANYRES16=r3, @ANYBLOB="07000000000000000000020000000800020008000000"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000900000000890000", @ANYRES32=r10, @ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

kernel console output (not intermixed with test programs):

ocess `syz.0.915'.
[  160.991013][ T9459] dummy0: mtu less than device minimum
[  161.100181][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  161.108246][ T9466] openvswitch: netlink: Missing key (keys=40, expected=80)
[  161.276894][ T9477] pim6reg1: entered promiscuous mode
[  161.278844][ T9477] pim6reg1: entered allmulticast mode
[  161.501843][ T9487] xt_hashlimit: size too large, truncated to 1048576
[  161.725268][ T9493] netlink: 'syz.2.929': attribute type 11 has an invalid length.
[  161.727862][ T9493] __nla_validate_parse: 1 callbacks suppressed
[  161.727872][ T9493] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.929'.
[  161.781986][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'.
[  161.815964][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'.
[  161.855723][ T9500] gtp0: entered promiscuous mode
[  161.865695][ T9500] gtp0: entered allmulticast mode
[  161.876491][ T9503] dummy0: mtu less than device minimum
[  161.878641][ T9504] Driver unsupported XDP return value 0 on prog  (id 153) dev N/A, expect packet loss!
[  161.893035][ T9500] gre1: entered promiscuous mode
[  162.993842][ T9549] netlink: 'syz.1.940': attribute type 1 has an invalid length.
[  163.068487][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'.
[  165.857002][ T9531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  165.984607][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'.
[  166.041565][ T9571] block nbd0: server does not support multiple connections per device.
[  166.053833][ T9571] block nbd0: shutting down sockets
[  166.231845][ T9593] netlink: zone id is out of range
[  166.234343][ T9593] netlink: zone id is out of range
[  166.236114][ T9593] netlink: zone id is out of range
[  166.237823][ T9593] netlink: zone id is out of range
[  166.243025][ T9593] netlink: zone id is out of range
[  166.250598][ T9593] netlink: zone id is out of range
[  166.256023][ T9593] netlink: zone id is out of range
[  166.258832][ T9593] netlink: zone id is out of range
[  166.261748][ T9593] netlink: zone id is out of range
[  166.263540][ T9593] netlink: zone id is out of range
[  166.288757][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'.
[  166.294117][ T9599] netlink: 'syz.2.958': attribute type 3 has an invalid length.
[  166.332135][ T9604] xt_TCPMSS: Only works on TCP SYN packets
[  166.507800][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'.
[  166.669239][ T9621] netlink: 'syz.2.963': attribute type 2 has an invalid length.
[  166.671941][ T9621] netlink: 'syz.2.963': attribute type 2 has an invalid length.
[  166.722946][ T9622] netlink: 128 bytes leftover after parsing attributes in process `syz.2.963'.
[  169.505128][ T9644] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.574106][ T9644] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.576719][ T9657] netlink: 76 bytes leftover after parsing attributes in process `syz.2.972'.
[  169.617564][ T9644] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.665906][ T9644] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.747064][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.763315][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.773529][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.784680][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.874636][ T9668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'.
[  169.927362][ T9670] xt_hashlimit: size too large, truncated to 1048576
[  170.245322][ T9683] netlink: 'syz.2.977': attribute type 1 has an invalid length.
[  170.250945][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'.
[  170.422752][ T9695] xt_hashlimit: size too large, truncated to 1048576
[  170.602504][ T9701] geneve0: left promiscuous mode
[  170.604571][ T9701] geneve0: left allmulticast mode
[  170.607107][ T9701] vlan2: left allmulticast mode
[  170.610478][ T9701] bridge_slave_0: left allmulticast mode
[  170.613747][ T9701] bond1: left promiscuous mode
[  170.615838][ T9701] wireguard0: left promiscuous mode
[  170.623991][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.627597][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.647246][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.650219][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.735130][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'.
[  170.735144][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'.
[  170.747069][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'.
[  170.783541][ T9716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.988'.
[  170.787161][ T9716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.988'.
[  171.668046][ T9725] netlink: 'syz.0.990': attribute type 12 has an invalid length.
[  171.936336][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'.
[  171.973531][ T9745] syzkaller1: entered promiscuous mode
[  171.975528][ T9745] syzkaller1: entered allmulticast mode
[  172.378133][ T9758] xt_hashlimit: size too large, truncated to 1048576
[  172.633864][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'.
[  175.559981][ T9762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.567370][ T9780] netlink: 'syz.2.1007': attribute type 1 has an invalid length.
[  175.578703][ T9780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1007'.
[  175.677281][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'.
[  175.812726][ T9807] netlink: 'syz.2.1015': attribute type 4 has an invalid length.
[  175.822645][ T9807] netlink: 'syz.2.1015': attribute type 4 has an invalid length.
[  175.822657][ T9808] netlink: 'syz.2.1015': attribute type 4 has an invalid length.
[  176.094141][ T9824] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1018'.
[  176.105539][ T5837] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.108555][ T5837] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.111805][ T5837] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.114779][ T5837] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.119789][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'.
[  176.391458][ T9833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'.
[  176.555562][ T9839] vlan0: entered allmulticast mode
[  176.557732][ T9839] veth1_macvtap: entered allmulticast mode
[  176.560995][ T9839] bridge0: port 4(vlan0) entered blocking state
[  176.563871][ T9839] bridge0: port 4(vlan0) entered disabled state
[  176.568615][ T9839] vlan0: entered promiscuous mode
[  176.983041][ T9863] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.1030'.
[  176.986096][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'.
[  176.990703][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'.
[  176.994806][ T9863] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1030'.
[  177.022405][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1031'.
[  177.045562][ T9867] netlink: 'syz.2.1031': attribute type 2 has an invalid length.
[  177.048808][ T9867] netlink: 'syz.2.1031': attribute type 2 has an invalid length.
[  177.119408][ T9870] veth7: entered promiscuous mode
[  177.777159][ T9890] xt_hashlimit: size too large, truncated to 1048576
[  178.181661][ T9913] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  178.248720][ T9914] netlink: 'syz.1.1042': attribute type 1 has an invalid length.
[  178.655098][ T9916] netlink: 'syz.0.1043': attribute type 12 has an invalid length.
[  178.737338][ T9918] netlink: 'syz.0.1044': attribute type 12 has an invalid length.
[  178.986518][ T9934] net_ratelimit: 392 callbacks suppressed
[  178.986535][ T9934] dummy0: mtu less than device minimum
[  179.788046][ T9947] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.791313][ T9947] 8021q: adding VLAN 0 to HW filter on device team0
[  179.799276][ T9947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.961796][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.965768][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.973942][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.977401][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.981709][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.984850][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.988301][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  179.992564][ T9954] sock: sock_set_timeout: `syz.1.1055' (pid 9954) tries to set negative timeout
[  180.219697][ T9969] xt_hashlimit: size too large, truncated to 1048576
[  180.417948][ T9973] vti0: entered promiscuous mode
[  180.419985][ T9973] vti0: entered allmulticast mode
[  181.108830][ T9976] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.413526][ T9993] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  182.202860][T10016] __nla_validate_parse: 9 callbacks suppressed
[  182.202873][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1070'.
[  182.268788][T10018] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1070'.
[  184.344506][ T9994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  184.497351][T10028] xt_l2tp: v2 doesn't support IP mode
[  184.664818][T10057] syzkaller0: entered promiscuous mode
[  184.666994][T10057] syzkaller0: entered allmulticast mode
[  184.748139][T10065] net_ratelimit: 58 callbacks suppressed
[  184.748151][T10065] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  185.312229][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'.
[  185.376557][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.387051][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.398292][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.402249][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.088392][T10122] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  186.129535][ T5830] Bluetooth: hci0: command 0x0c20 tx timeout
[  186.132433][T10025] Bluetooth: hci1: command 0x0406 tx timeout
[  186.494007][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'.
[  186.511255][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  186.519452][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1112'.
[  186.522486][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'.
[  186.530127][T10160] validate_nla: 2 callbacks suppressed
[  186.530137][T10160] netlink: 'syz.1.1112': attribute type 2 has an invalid length.
[  186.534441][T10160] netlink: 'syz.1.1112': attribute type 2 has an invalid length.
[  187.311735][T10197] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1123'.
[  187.702047][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'.
[  188.244751][T10231] syzkaller1: entered promiscuous mode
[  188.246729][T10231] syzkaller1: entered allmulticast mode
[  188.765199][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1140'.
[  189.052609][T10269] syzkaller1: entered promiscuous mode
[  189.054917][T10269] syzkaller1: entered allmulticast mode
[  189.220549][T10273] netlink: 'syz.1.1146': attribute type 2 has an invalid length.
[  189.245674][T10273] hmac(sha224: entered promiscuous mode
[  189.352531][T10289] xt_hashlimit: size too large, truncated to 1048576
[  189.377267][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'.
[  189.388545][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'.
[  189.464276][T10289] netlink: 'syz.0.1151': attribute type 2 has an invalid length.
[  189.467163][T10289] netlink: 'syz.0.1151': attribute type 1 has an invalid length.
[  189.470736][T10289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1151'.
[  189.751412][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'.
[  190.023120][T10312] nbd0: detected capacity change from 0 to 63
[  190.098126][   T55] block nbd0: Receive control failed (result -104)
[  190.228281][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  190.268389][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'.
[  190.273236][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'.
[  190.318640][T10333] xt_hashlimit: size too large, truncated to 1048576
[  190.383671][T10340] syzkaller1: entered promiscuous mode
[  190.388925][T10340] syzkaller1: entered allmulticast mode
[  190.495831][T10344] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  190.611030][T10346] netlink: 'syz.0.1166': attribute type 1 has an invalid length.
[  190.630716][T10346] bond2: entered promiscuous mode
[  190.632579][T10346] bond2: entered allmulticast mode
[  190.634613][T10346] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.646935][T10346] macsec0: entered promiscuous mode
[  190.649257][T10346] 8021q: adding VLAN 0 to HW filter on device macsec0
[  190.657981][T10346] erspan1: entered allmulticast mode
[  190.663052][T10346] bond2: (slave erspan1): making interface the new active one
[  190.665518][T10346] erspan1: entered promiscuous mode
[  190.668462][T10346] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  191.785293][T10379] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  191.870729][T10384] tipc: Started in network mode
[  191.875180][T10384] tipc: Node identity fff, cluster identity 10
[  191.878348][T10384] tipc: Node number set to 4095
[  191.885370][T10384] tipc: Cannot configure node identity twice
[  192.141425][T10394] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  192.393048][T10399] netlink: 'syz.1.1186': attribute type 1 has an invalid length.
[  192.396452][T10399] __nla_validate_parse: 4 callbacks suppressed
[  192.396462][T10399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1186'.
[  193.201241][T10407] netlink: 'syz.1.1190': attribute type 12 has an invalid length.
[  193.795675][T10434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'.
[  193.839341][T10435] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  193.841996][T10435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1197'.
[  194.706424][T10437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  194.846383][T10476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1205'.
[  194.928496][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'.
[  194.966857][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1209'.
[  195.003896][T10501] netlink: 'syz.1.1210': attribute type 3 has an invalid length.
[  195.132402][T10512] xt_hashlimit: size too large, truncated to 1048576
[  195.326707][T10528] vlan4: entered allmulticast mode
[  195.334047][T10528] batadv0: entered allmulticast mode
[  195.337571][T10528] bridge0: port 1(vlan4) entered blocking state
[  195.340606][T10528] bridge0: port 1(vlan4) entered disabled state
[  195.345137][T10528] vlan4: entered promiscuous mode
[  195.347498][T10528] batadv0: entered promiscuous mode
[  195.855817][T10547] netlink: 'syz.2.1223': attribute type 1 has an invalid length.
[  195.901180][T10547] 8021q: adding VLAN 0 to HW filter on device bond2
[  195.905729][T10547] bond1: (slave bond2): making interface the new active one
[  195.908514][T10547] bond1: (slave bond2): Enslaving as an active interface with an up link
[  196.025227][T10555] syzkaller0: entered promiscuous mode
[  196.027637][T10555] syzkaller0: entered allmulticast mode
[  196.349556][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'.
[  196.389899][T10576] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1235'.
[  196.394280][T10575] syzkaller1: entered promiscuous mode
[  196.396618][T10575] syzkaller1: entered allmulticast mode
[  196.554487][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'.
[  196.596638][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'.
[  196.690380][T10603] 8021q: VLANs not supported on gre0
[  197.672491][T10633] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1254'.
[  198.247949][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  198.286099][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1258'.
[  198.293632][T10649] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1258'.
[  198.843386][T10672] openvswitch: netlink: Actions may not be safe on all matching packets
[  198.903052][T10673] xfrm0: entered allmulticast mode
[  199.386564][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'.
[  199.421376][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  199.552491][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1269'.
[  199.553594][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1269'.
[  199.575564][T10699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1269'.
[  200.039465][T10734] netlink: 'syz.1.1276': attribute type 89 has an invalid length.
[  200.045776][T10734] netlink: 804 bytes leftover after parsing attributes in process `syz.1.1276'.
[  200.264199][T10744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1279'.
[  200.868448][T10793] xt_hashlimit: size too large, truncated to 1048576
[  201.676838][T10804] netlink: 'syz.2.1297': attribute type 12 has an invalid length.
[  201.935893][T10824] sock: sock_set_timeout: `syz.2.1303' (pid 10824) tries to set negative timeout
[  202.420300][T10842] tipc: Cannot configure node identity twice
[  202.422351][T10842] tipc: Cannot configure node identity twice
[  203.014319][T10862] netlink: 'syz.0.1312': attribute type 9 has an invalid length.
[  203.018482][T10862] netlink: 'syz.0.1312': attribute type 6 has an invalid length.
[  203.021915][T10862] netlink: 'syz.0.1312': attribute type 7 has an invalid length.
[  203.024548][T10862] netlink: 'syz.0.1312': attribute type 8 has an invalid length.
[  203.114906][T10865] __nla_validate_parse: 3 callbacks suppressed
[  203.114928][T10865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1314'.
[  203.276811][T10868] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1315'.
[  203.994170][T10891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.997345][T10891] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.343187][T10902] xt_hashlimit: size too large, truncated to 1048576
[  204.567368][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  205.092476][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'.
[  205.825993][T10937] netlink: 'syz.0.1333': attribute type 89 has an invalid length.
[  205.856601][T10942] xt_hashlimit: size too large, truncated to 1048576
[  205.913477][T10943] syzkaller0: entered promiscuous mode
[  205.915409][T10943] syzkaller0: entered allmulticast mode
[  206.094305][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1336'.
[  206.135729][T10951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'.
[  206.251512][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'.
[  206.271318][T10957] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1339'.
[  206.570985][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'.
[  206.603464][T10969] bond2: entered promiscuous mode
[  206.605222][T10969] bond2: entered allmulticast mode
[  206.607695][T10969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1342'.
[  206.656750][T10972] syzkaller1: entered promiscuous mode
[  206.659375][T10972] syzkaller1: entered allmulticast mode
[  206.965758][T10974] No such timeout policy "syz1"
[  208.438872][T11031] xt_hashlimit: size too large, truncated to 1048576
[  208.849561][T11042] __nla_validate_parse: 3 callbacks suppressed
[  208.849573][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1365'.
[  208.896557][T11056] xt_hashlimit: size too large, truncated to 1048576
[  209.305125][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'.
[  209.587264][T11098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'.
[  209.601253][T11098] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'.
[  210.513751][T11122] netlink: zone id is out of range
[  210.516425][T11122] netlink: zone id is out of range
[  210.622881][T11130] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1390'.
[  210.627821][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1390'.
[  211.410531][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1394'.
[  211.491387][   T10] IPVS: starting estimator thread 0...
[  211.493882][T11142] IPVS: rr: FWM 3 0x00000003 - no destination available
[  211.551190][T11150] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1395'.
[  211.554333][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'.
[  211.568306][T11150] xt_hashlimit: size too large, truncated to 1048576
[  211.579227][T11145] IPVS: using max 81 ests per chain, 194400 per kthread
[  211.659453][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'.
[  211.731364][T11158] xt_hashlimit: size too large, truncated to 1048576
[  211.774732][T11161] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  211.842648][T11164] netlink: 'syz.2.1399': attribute type 1 has an invalid length.
[  211.967292][ T5837] IPVS: stop unused estimator thread 0...
[  212.016777][T11170] netlink: 'syz.1.1401': attribute type 2 has an invalid length.
[  212.020722][T11170] netlink: 'syz.1.1401': attribute type 2 has an invalid length.
[  212.301604][T11203] xt_hashlimit: size too large, truncated to 1048576
[  212.496557][T11219] xt_hashlimit: size too large, truncated to 1048576
[  213.071585][T11199] Bluetooth: hci0: Opcode 0x080f failed: -4
[  213.235192][T11237] can: request_module (can-proto-0) failed.
[  213.539909][T11257] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  213.610766][T11268] xt_hashlimit: size too large, truncated to 1048576
[  213.909877][T11293] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  213.914808][T11293] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  213.980429][T11294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.984427][T11294] __nla_validate_parse: 13 callbacks suppressed
[  213.984449][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1428'.
[  214.157193][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'.
[  214.289186][ T5825] Bluetooth: hci0: command 0x0c20 tx timeout
[  214.331556][T11335] xt_hashlimit: size too large, truncated to 1048576
[  214.495661][T11341] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1441'.
[  214.638877][T11350] xt_hashlimit: size too large, truncated to 1048576
[  214.770140][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.838349][T11359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.172355][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1452'.
[  215.176024][T11385] netlink: 'syz.1.1452': attribute type 7 has an invalid length.
[  215.182791][T11385] netlink: 'syz.1.1452': attribute type 8 has an invalid length.
[  215.190716][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  215.211437][T11385] dummy0: entered promiscuous mode
[  215.220891][T11385] team0: entered promiscuous mode
[  215.223645][T11385] dummy0: left promiscuous mode
[  215.228878][T11385] team0: left promiscuous mode
[  215.333697][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1456'.
[  215.343158][T11395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1455'.
[  215.347474][T11395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1455'.
[  215.357304][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'.
[  215.361329][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'.
[  216.054872][T11439] syzkaller0: entered promiscuous mode
[  216.057077][T11439] syzkaller0: entered allmulticast mode
[  216.297155][T11454] syzkaller0: entered promiscuous mode
[  216.299970][T11454] syzkaller0: entered allmulticast mode
[  216.528210][T11472] dummy0: mtu less than device minimum
[  217.170713][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.174146][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.177864][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.181513][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.185648][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.189880][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.193753][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.197447][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.201795][T11517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.535889][T11549] ksmbd: Unknown IPC event: 1, ignore.
[  217.602839][T11557] xt_hashlimit: size too large, truncated to 1048576
[  217.779681][T11571] syzkaller1: entered promiscuous mode
[  217.782419][T11571] syzkaller1: entered allmulticast mode
[  218.048722][T11588] xt_hashlimit: size too large, truncated to 1048576
[  218.210556][T11600] tipc: Started in network mode
[  218.212356][T11600] tipc: Node identity fff, cluster identity 10
[  218.214368][T11600] tipc: Node number set to 4095
[  218.216260][T11600] tipc: Cannot configure node identity twice
[  219.016157][T11618] syzkaller1: entered promiscuous mode
[  219.018041][T11618] syzkaller1: entered allmulticast mode
[  219.147267][   T33] audit: type=1804 audit(1776809327.594:2): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1523" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2507 res=1 errno=0
[  219.165769][   T33] audit: type=1800 audit(1776809327.614:3): pid=11625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1523" name="cgroup.controllers" dev="tmpfs" ino=2507 res=0 errno=0
[  219.185210][T11633] __nla_validate_parse: 18 callbacks suppressed
[  219.185222][T11633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1526'.
[  219.405086][T11658] netlink: 'syz.2.1532': attribute type 1 has an invalid length.
[  219.505811][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1535'.
[  220.417409][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1542'.
[  220.442753][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1542'.
[  220.533778][ T1057] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 30 seconds
[  220.538488][ T1057] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 30 seconds
[  220.542589][ T1057] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 30 seconds
[  220.546073][ T1057] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 30 seconds
[  221.396165][T11709] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[  221.398836][T11709] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1548'.
[  222.235951][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'.
[  222.256791][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1554'.
[  222.269767][T11731] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1554'.
[  222.957605][T11771] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1563'.
[  223.175085][T11774] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  223.177697][T11774] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1564'.
[  223.791580][T11788] net_ratelimit: 26 callbacks suppressed
[  223.791595][T11788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.833124][T11789] netlink: 'syz.0.1567': attribute type 39 has an invalid length.
[  224.713972][T11803] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1570'.
[  224.788559][T11811] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  224.836251][T11811] bond3: entered promiscuous mode
[  224.838271][T11811] 8021q: adding VLAN 0 to HW filter on device bond3
[  224.855733][T11811] bond3: (slave bridge3): making interface the new active one
[  224.858285][T11811] bridge3: entered promiscuous mode
[  224.863748][T11811] bridge3: left promiscuous mode
[  224.905170][T11815] netlink: 'syz.1.1569': attribute type 2 has an invalid length.
[  224.909281][T11815] netlink: 'syz.1.1569': attribute type 2 has an invalid length.
[  225.091318][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1576'.
[  225.128535][T11821] syzkaller1: entered promiscuous mode
[  225.130721][T11821] syzkaller1: entered allmulticast mode
[  225.784895][T11849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1585'.
[  225.788760][T11849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1585'.
[  225.804172][T11849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1585'.
[  225.808047][T11849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1585'.
[  225.936211][T11866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1589'.
[  226.489656][T11878] syzkaller1: entered promiscuous mode
[  226.492171][T11878] syzkaller1: entered allmulticast mode
[  226.827151][T11891] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1598'.
[  226.893342][T11895] netlink: 'syz.0.1599': attribute type 1 has an invalid length.
[  226.896636][T11895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1599'.
[  227.017398][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'.
[  227.021431][T11902] 8021q: VLANs not supported on ip_vti0
[  227.145497][T11910] netlink: 'syz.0.1603': attribute type 12 has an invalid length.
[  227.637151][T11923] syzkaller1: entered promiscuous mode
[  227.639786][T11923] syzkaller1: entered allmulticast mode
[  227.645780][T11923] syzkaller1: left promiscuous mode
[  227.648439][T11923] syzkaller1: left allmulticast mode
[  227.925791][T11948] sctp: [Deprecated]: syz.1.1612 (pid 11948) Use of int in max_burst socket option deprecated.
[  227.925791][T11948] Use struct sctp_assoc_value instead
[  227.976553][T11951] syzkaller1: entered promiscuous mode
[  227.978544][T11951] syzkaller1: entered allmulticast mode
[  228.665047][T11939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  228.834163][T11980] netlink: 'syz.2.1620': attribute type 2 has an invalid length.
[  228.836646][T11980] netlink: 'syz.2.1620': attribute type 2 has an invalid length.
[  229.056429][T11995] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  229.063050][T11995] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  229.088728][T12004] pim6reg1: entered promiscuous mode
[  229.092796][T12004] pim6reg1: entered allmulticast mode
[  230.041437][T12048] netlink: 'syz.2.1637': attribute type 1 has an invalid length.
[  230.044014][T12048] __nla_validate_parse: 8 callbacks suppressed
[  230.044023][T12048] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1637'.
[  230.131263][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'.
[  230.257880][T12063] ip6t_srh: unknown srh match flags  4000
[  230.418753][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1647'.
[  230.915948][T12117] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1659'.
[  230.919755][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1659'.
[  230.922906][T12117] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  230.990432][T12127] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1662'.
[  231.885147][T12154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1667'.
[  231.907516][T12156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1669'.
[  232.122482][T12165] xt_CT: No such helper "snmp_trap"
[  232.173711][T12168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1673'.
[  232.177527][T12168] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  232.220385][T12170] xt_hashlimit: size too large, truncated to 1048576
[  232.394358][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'.
[  232.917081][T12188] netlink: 'syz.1.1679': attribute type 1 has an invalid length.
[  233.036573][T12199] syz.1.1682 uses old SIOCAX25GETINFO
[  233.531707][T12214] block nbd1: Unsupported socket: should be TCP or UNIX.
[  233.622706][T12219] netlink: 'syz.2.1688': attribute type 2 has an invalid length.
[  233.625377][T12219] netlink: 'syz.2.1688': attribute type 2 has an invalid length.
[  233.686502][T12223] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  250.610079][ T1057] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 60 seconds
[  250.613551][ T1057] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 60 seconds
[  250.617069][ T1057] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 60 seconds
[  250.620596][ T1057] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 60 seconds
[  251.563371][ T5272] udevd[5272]: worker [5826] /devices/virtual/block/nbd0 is taking a long time
[  260.852514][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  261.191765][T12244] __nla_validate_parse: 7 callbacks suppressed
[  261.191779][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1695'.
[  261.207472][T12244] ip6gre1: entered promiscuous mode
[  261.209852][T12244] ip6gre1: entered allmulticast mode
[  261.235533][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'.
[  262.285825][T12287] xt_hashlimit: size too large, truncated to 1048576
[  262.338781][T12295] : renamed from dummy0
[  262.353109][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'.
[  262.441861][T12300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1708'.
[  263.051146][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1720'.
[  263.155056][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  263.314391][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1724'.
[  263.975634][T12370] syzkaller1: entered promiscuous mode
[  263.977607][T12370] syzkaller1: entered allmulticast mode
[  264.170158][T12373] dummy0: mtu less than device minimum
[  264.397206][T12377] netlink: 'syz.2.1732': attribute type 1 has an invalid length.
[  264.399924][T12377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1732'.
[  265.578240][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'.
[  265.732351][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  265.887388][T12421] syzkaller1: entered promiscuous mode
[  265.889792][T12421] syzkaller1: entered allmulticast mode
[  266.051247][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  266.232180][T12453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'.
[  266.265030][T12460] netlink: 'syz.2.1756': attribute type 3 has an invalid length.
[  266.267765][T12460] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1756'.
[  266.326100][T12468] xt_hashlimit: size too large, truncated to 1048576
[  266.406660][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'.
[  266.625640][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'.
[  266.920953][T12504] xt_hashlimit: size too large, truncated to 1048576
[  267.017854][T12508] syzkaller1: entered promiscuous mode
[  267.020144][T12508] syzkaller1: entered allmulticast mode
[  267.111958][T12510] xt_hashlimit: size too large, truncated to 1048576
[  267.377873][T12528] xt_hashlimit: size too large, truncated to 1048576
[  267.427009][T12525] netlink: 'syz.1.1774': attribute type 11 has an invalid length.
[  267.435677][T12536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1775'.
[  267.485231][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'.
[  267.517030][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1778'.
[  267.523431][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'.
[  267.530912][T12539] netlink: 'syz.1.1778': attribute type 2 has an invalid length.
[  267.534075][T12539] netlink: 'syz.1.1778': attribute type 2 has an invalid length.
[  267.538518][T12539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1778'.
[  267.585961][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'.
[  268.433428][T12572] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  268.436089][T12572] netlink: 'syz.2.1786': attribute type 1 has an invalid length.
[  268.946708][T12588] netlink: 'syz.1.1791': attribute type 9 has an invalid length.
[  269.156193][T12607] netlink: 'syz.1.1796': attribute type 3 has an invalid length.
[  269.392434][T12616] SET target dimension over the limit!
[  269.552862][T12626] xt_hashlimit: size too large, truncated to 1048576
[  270.068030][T12648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.353313][T12670] erspan1: entered promiscuous mode
[  270.355177][T12670] erspan1: entered allmulticast mode
[  270.602824][T12679] xt_TPROXY: Can be used only with -p tcp or -p udp
[  270.658740][T12681] xt_connbytes: Forcing CT accounting to be enabled
[  270.708762][T12681] netlink: 'syz.0.1818': attribute type 2 has an invalid length.
[  270.713174][T12681] netlink: 'syz.0.1818': attribute type 2 has an invalid length.
[  271.493474][T12717] SET target dimension over the limit!
[  271.552595][T12723] netlink: 'syz.0.1828': attribute type 29 has an invalid length.
[  271.559050][T12723] netlink: 'syz.0.1828': attribute type 29 has an invalid length.
[  271.598889][T12731] syzkaller1: entered promiscuous mode
[  271.600956][T12731] syzkaller1: entered allmulticast mode
[  271.698679][T12736] xt_hashlimit: size too large, truncated to 1048576
[  272.645137][T12832] __nla_validate_parse: 28 callbacks suppressed
[  272.645148][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'.
[  272.666693][T12832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1856'.
[  272.669926][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'.
[  272.674574][T12832] netlink: 'syz.2.1856': attribute type 2 has an invalid length.
[  272.677178][T12832] netlink: 'syz.2.1856': attribute type 2 has an invalid length.
[  272.681020][T12832] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1856'.
[  272.822192][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'.
[  272.834575][T12845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1861'.
[  272.837609][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'.
[  273.104157][T12861] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1864'.
[  273.107428][T12861] netlink: 'syz.2.1864': attribute type 9 has an invalid length.
[  273.110322][T12861] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1864'.
[  273.115975][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1864'.
[  273.131453][T12861] block nbd1: Unsupported socket: should be TCP or UNIX.
[  273.217721][T12869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  273.222830][T12869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  273.784638][T12900] No such timeout policy "syz0"
[  274.355477][T12926] xt_hashlimit: size too large, truncated to 1048576
[  274.413646][T12929] xt_hashlimit: size too large, truncated to 1048576
[  274.562264][T12933] vlan5: entered allmulticast mode
[  274.569025][T12933] vlan0: entered allmulticast mode
[  274.570843][T12933] veth0_vlan: entered allmulticast mode
[  274.572910][T12933] bridge0: port 2(vlan5) entered blocking state
[  274.575126][T12933] bridge0: port 2(vlan5) entered disabled state
[  274.578227][T12933] vlan5: entered promiscuous mode
[  274.580946][T12933] vlan0: entered promiscuous mode
[  274.675267][T12943] syzkaller1: entered promiscuous mode
[  274.678374][T12943] syzkaller1: entered allmulticast mode
[  274.685533][T12941] xt_hashlimit: size too large, truncated to 1048576
[  274.743985][T12949] netlink: 'syz.1.1886': attribute type 2 has an invalid length.
[  274.758175][T12949] netlink: 'syz.1.1886': attribute type 2 has an invalid length.
[  275.030433][T12979] syzkaller1: entered promiscuous mode
[  275.032410][T12979] syzkaller1: entered allmulticast mode
[  275.134441][T12984] netlink: 'syz.0.1899': attribute type 2 has an invalid length.
[  275.366937][T13008] nbd: must specify an index to disconnect
[  276.128371][T13041] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  276.272698][T13052] xt_hashlimit: size too large, truncated to 1048576
[  276.552778][T13065] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  276.830866][T13088] xt_hashlimit: size too large, truncated to 1048576
[  280.077387][T13124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.125514][T13144] xt_hashlimit: size too large, truncated to 1048576
[  280.182274][T13149] xt_hashlimit: size too large, truncated to 1048576
[  280.326547][T13160] validate_nla: 2 callbacks suppressed
[  280.326559][T13160] netlink: 'syz.2.1938': attribute type 1 has an invalid length.
[  280.331921][T13160] __nla_validate_parse: 36 callbacks suppressed
[  280.331933][T13160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1938'.
[  280.340726][T13159] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1940'.
[  280.391008][T13162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'.
[  280.407599][T13164] syzkaller1: entered promiscuous mode
[  280.409999][T13164] syzkaller1: entered allmulticast mode
[  280.461686][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'.
[  280.562456][T13169] openvswitch: netlink: IP tunnel TTL not specified.
[  280.618860][T13175] netlink: 'syz.0.1945': attribute type 21 has an invalid length.
[  280.623501][T13175] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1945'.
[  280.626953][T13175] netlink: 'syz.0.1945': attribute type 4 has an invalid length.
[  280.630199][T13175] netlink: 'syz.0.1945': attribute type 5 has an invalid length.
[  280.633313][T13175] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1945'.
[  280.691016][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 90 seconds
[  280.694996][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 90 seconds
[  280.698509][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 90 seconds
[  280.703392][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 90 seconds
[  281.202638][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'.
[  281.205976][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'.
[  281.210339][T13214] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1955'.
[  281.218675][T13214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.224685][T13214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.232383][T13214] bond0 (unregistering): (slave ): Releasing backup interface
[  281.236262][T13214] bond0 (unregistering): Released all slaves
[  281.346485][T13218] xt_hashlimit: size too large, truncated to 1048576
[  281.620871][T13229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1960'.
[  281.966526][T13253] netlink: 'syz.2.1965': attribute type 2 has an invalid length.
[  281.969921][T13253] netlink: 'syz.2.1965': attribute type 2 has an invalid length.
[  282.667955][T13278] netlink: 'syz.1.1973': attribute type 1 has an invalid length.
[  283.022069][T13303] netlink: 'syz.0.1981': attribute type 89 has an invalid length.
[  283.196874][T13310] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  283.199645][T13310] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  283.208145][T13310] macsec1: entered promiscuous mode
[  283.210311][T13310] erspan0: entered promiscuous mode
[  283.214662][T13310] erspan0: left promiscuous mode
[  286.626805][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  286.670699][T13328] __nla_validate_parse: 6 callbacks suppressed
[  286.670712][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  286.675689][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  286.721495][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1988'.
[  286.739365][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1988'.
[  286.742633][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'.
[  286.749211][T13330] netlink: 'syz.0.1988': attribute type 2 has an invalid length.
[  286.751738][T13330] netlink: 'syz.0.1988': attribute type 2 has an invalid length.
[  286.755177][T13330] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1988'.
[  286.825676][T13338] syzkaller0: entered promiscuous mode
[  286.828100][T13338] syzkaller0: entered allmulticast mode
[  287.026804][T13342] xt_hashlimit: size too large, truncated to 1048576
[  287.087669][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'.
[  287.185547][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1995'.
[  287.272879][T13352] netlink: 'syz.0.1996': attribute type 3 has an invalid length.
[  287.275507][T13352] netlink: 'syz.0.1996': attribute type 1 has an invalid length.
[  287.277986][T13352] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1996'.
[  287.604373][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  287.645808][T13358] openvswitch: netlink: IPv4 tun info is not correct
[  288.305881][T13407] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  288.947357][T13425] tipc: Enabled bearer <udp:s>, priority 10
[  289.038809][T13428] syzkaller1: entered promiscuous mode
[  289.041281][T13428] syzkaller1: entered allmulticast mode
[  289.161257][T13434] xt_hashlimit: size too large, truncated to 1048576
[  289.273121][T13439] trusted_key: syz.1.2021 sent an empty control message without MSG_MORE.
[  289.280235][T13439] netlink: 'syz.1.2021': attribute type 1 has an invalid length.
[  289.394492][T13444] syzkaller0: entered promiscuous mode
[  289.396533][T13444] syzkaller0: entered allmulticast mode
[  289.628484][T13458] netlink: 'syz.2.2027': attribute type 5 has an invalid length.
[  289.671683][T13460] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  289.674993][T13460] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  289.943083][ T5538] tipc: Node number set to 606813980
[  290.005486][T13480] netlink: 'syz.2.2034': attribute type 1 has an invalid length.
[  290.048540][T13480] bond0: (slave bridge4): Enslaving as a backup interface with an up link
[  290.061185][T13480] macvlan0: entered promiscuous mode
[  290.063520][T13480] macvlan0: entered allmulticast mode
[  290.066884][T13480] bond0: entered promiscuous mode
[  290.068694][T13480] bridge4: entered promiscuous mode
[  290.072193][T13480] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  290.076365][T13480] bond0: left promiscuous mode
[  290.078681][T13480] bridge4: left promiscuous mode
[  291.514013][T13535] netlink: 'syz.2.2050': attribute type 1 has an invalid length.
[  292.138076][T13541] __nla_validate_parse: 10 callbacks suppressed
[  292.138090][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  292.411883][T13569] netlink: 'syz.2.2061': attribute type 12 has an invalid length.
[  293.715150][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'.
[  293.719578][T13645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2080'.
[  293.782668][T13647] netlink: 'syz.2.2081': attribute type 89 has an invalid length.
[  293.980314][T13653] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2082'.
[  294.109184][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2086'.
[  294.706383][T13675] netlink: 'syz.2.2088': attribute type 58 has an invalid length.
[  294.709966][T13675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2088'.
[  294.981100][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  295.155067][T13695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  295.347263][T13725] xt_hashlimit: size too large, truncated to 1048576
[  295.477101][T13731] netlink: 'syz.1.2103': attribute type 2 has an invalid length.
[  295.482774][T13731] netlink: 'syz.1.2103': attribute type 2 has an invalid length.
[  295.534744][T13735] syzkaller1: entered promiscuous mode
[  295.540773][T13735] syzkaller1: entered allmulticast mode
[  295.680037][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'.
[  295.840802][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'.
[  296.154265][T13757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'.
[  297.692636][T13819] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  297.697505][T13819] SET target dimension over the limit!
[  297.785437][T13822] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2127'.
[  297.791086][T13822] netlink: 'syz.1.2127': attribute type 1 has an invalid length.
[  297.794238][T13822] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2127'.
[  297.835109][T13826] syzkaller0: entered promiscuous mode
[  297.837409][T13826] syzkaller0: entered allmulticast mode
[  298.094834][T13841] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  298.098122][T13841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2132'.
[  298.521721][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'.
[  298.580534][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'.
[  298.584142][T13845] netlink: 'syz.0.2133': attribute type 22 has an invalid length.
[  298.587025][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'.
[  298.985585][T13860] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  299.146812][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'.
[  299.185526][T13876] bond5: option broadcast_neighbor: invalid value (30)
[  299.193535][T13876] bond5 (unregistering): Released all slaves
[  299.345311][T13886] netlink: 'syz.2.2145': attribute type 1 has an invalid length.
[  299.348098][T13886] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2145'.
[  299.376649][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'.
[  301.186650][T13938] syzkaller1: entered promiscuous mode
[  301.188662][T13938] syzkaller1: entered allmulticast mode
[  301.230227][T13940] netlink: 'syz.1.2159': attribute type 1 has an invalid length.
[  301.284064][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2160'.
[  301.314868][T13942] netlink: 'syz.1.2160': attribute type 2 has an invalid length.
[  301.318189][T13942] netlink: 'syz.1.2160': attribute type 2 has an invalid length.
[  301.594210][T13977] Bluetooth: MGMT ver 1.23
[  301.801731][T13992] block nbd2: not configured, cannot reconfigure
[  301.900664][ T5825] Bluetooth: hci2: link tx timeout
[  301.906385][ T5825] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  302.097910][T14013] netlink: 'syz.2.2181': attribute type 21 has an invalid length.
[  302.212104][T14017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.253122][T14019] x_tables: duplicate underflow at hook 2
[  302.414737][T14026] syzkaller1: entered promiscuous mode
[  302.416652][T14026] syzkaller1: entered allmulticast mode
[  302.753985][T14043] netlink: 'syz.1.2193': attribute type 1 has an invalid length.
[  302.781011][T14050] netlink: 'syz.2.2194': attribute type 1 has an invalid length.
[  302.820076][T14052] syzkaller1: entered promiscuous mode
[  302.822352][T14052] syzkaller1: entered allmulticast mode
[  303.056640][T14060] __nla_validate_parse: 14 callbacks suppressed
[  303.056662][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'.
[  303.062243][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2198'.
[  303.065682][T14060] netlink: 'syz.2.2198': attribute type 14 has an invalid length.
[  303.068575][T14060] netlink: 'syz.2.2198': attribute type 11 has an invalid length.
[  303.077968][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2198'.
[  303.107897][T14060] netlink: 'syz.2.2198': attribute type 2 has an invalid length.
[  303.111467][T14060] netlink: 'syz.2.2198': attribute type 2 has an invalid length.
[  303.116419][T14060] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2198'.
[  303.223570][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  303.400942][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'.
[  303.493379][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'.
[  303.503683][T14074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  303.573561][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2202'.
[  303.682484][T14084] netlink: 'syz.1.2204': attribute type 1 has an invalid length.
[  303.686263][T14084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2204'.
[  303.781368][T14076] veth23: entered allmulticast mode
[  303.973460][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  304.534043][T14099] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  304.542311][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2209'.
[  304.746260][T14120] syzkaller1: entered promiscuous mode
[  304.748421][T14120] syzkaller1: entered allmulticast mode
[  305.138926][T14136] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.142070][T14136] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.293328][T14148] netlink: 'syz.2.2223': attribute type 1 has an invalid length.
[  305.330610][T14148] veth23: entered allmulticast mode
[  305.343916][T14148] bond4: (slave veth23): Enslaving as a backup interface with a down link
[  305.452939][T14158] xt_hashlimit: size too large, truncated to 1048576
[  305.904461][T14189] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  306.225884][T14217] netlink: 'syz.2.2242': attribute type 11 has an invalid length.
[  307.427110][T14246] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  307.903621][T14282] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  307.993255][T14291] netlink: 'syz.1.2265': attribute type 1 has an invalid length.
[  308.208539][T14301] __nla_validate_parse: 19 callbacks suppressed
[  308.208561][T14301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'.
[  308.273659][T14303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2270'.
[  308.331634][T14312] netlink: 'syz.2.2273': attribute type 89 has an invalid length.
[  308.477582][T14317] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.630938][T14326] netlink: 'syz.0.2277': attribute type 9 has an invalid length.
[  308.634245][T14326] netlink: 'syz.0.2277': attribute type 6 has an invalid length.
[  308.637599][T14326] netlink: 'syz.0.2277': attribute type 7 has an invalid length.
[  308.642405][T14326] netlink: 'syz.0.2277': attribute type 8 has an invalid length.
[  308.819572][T14337] tipc: Can't bind to reserved service type 0
[  309.056027][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2283'.
[  309.060780][T14351] netlink: 'syz.1.2283': attribute type 2 has an invalid length.
[  309.064614][T14351] netlink: 'syz.1.2283': attribute type 2 has an invalid length.
[  309.483247][T14374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2289'.
[  309.487057][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'.
[  309.498035][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'.
[  309.933023][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'.
[  309.945788][T14379] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  309.954058][T14379] netlink: 'syz.0.2291': attribute type 1 has an invalid length.
[  309.957457][T14379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2291'.
[  310.769495][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 120 seconds
[  310.773040][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 120 seconds
[  310.776675][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 120 seconds
[  310.780863][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 120 seconds
[  311.314213][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  311.317321][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  311.471717][T14442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.541357][T14444] netlink: 'syz.1.2308': attribute type 11 has an invalid length.
[  311.891998][T14456] netlink: 'syz.0.2311': attribute type 16 has an invalid length.
[  314.650615][T14446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  315.042275][T14502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.146042][T14516] pim6reg1: entered promiscuous mode
[  315.148142][T14516] pim6reg1: entered allmulticast mode
[  315.593291][T14524] netlink: 'syz.1.2326': attribute type 1 has an invalid length.
[  315.867293][T14543] xt_hashlimit: size too large, truncated to 1048576
[  316.556278][T14599] __nla_validate_parse: 1 callbacks suppressed
[  316.556292][T14599] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2343'.
[  316.745847][T14618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2348'.
[  317.614166][T14648] xt_hashlimit: size too large, truncated to 1048576
[  319.610664][T14669] lo: entered allmulticast mode
[  319.659356][ T5538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.759253][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.856660][T14695] : entered promiscuous mode
[  319.886585][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.891562][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.905048][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.908575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.009153][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  320.015506][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.019688][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.024938][T14708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2371'.
[  320.031459][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.049023][    C0] net_ratelimit: 84 callbacks suppressed
[  320.049039][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.056458][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.060030][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.063648][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.067158][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.070826][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.074316][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.077630][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.081374][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.086123][T14708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.182077][T14717] bridge0: port 5(syz_tun) entered blocking state
[  320.184979][T14717] bridge0: port 5(syz_tun) entered disabled state
[  320.190320][T14717] syz_tun: entered promiscuous mode
[  320.362017][T14725] syz.2.2377 (14725) used obsolete PPPIOCDETACH ioctl
[  320.367117][T14725] netlink: 'syz.2.2377': attribute type 1 has an invalid length.
[  320.483139][T14733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2379'.
[  320.675331][T14743] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000
[  321.586914][T14761] xt_hashlimit: size too large, truncated to 1048576
[  321.674033][T14768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2390'.
[  321.784375][T14783] netlink: 'syz.2.2393': attribute type 1 has an invalid length.
[  321.798906][T14783] bond5: entered promiscuous mode
[  321.802195][T14783] bond5: entered allmulticast mode
[  321.805522][T14783] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.812385][T14783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2393'.
[  321.820677][T14783] erspan1: entered allmulticast mode
[  321.828407][T14783] bond5: (slave erspan1): making interface the new active one
[  321.831065][T14783] erspan1: entered promiscuous mode
[  321.833877][T14783] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  321.871689][T14790] team0: Mode changed to "loadbalance"
[  321.885135][T14794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'.
[  321.885286][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'.
[  321.922399][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2396'.
[  321.927447][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2396'.
[  321.930829][T14793] netlink: 'syz.2.2396': attribute type 4 has an invalid length.
[  322.014470][T14806] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  322.294058][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  322.452367][T14837] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001
[  322.515663][T14839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'.
[  322.531142][ T5213] Bluetooth: hci0: command 0x0c20 tx timeout
[  323.198559][T14848] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  323.235025][T14852] netlink: 'syz.2.2409': attribute type 2 has an invalid length.
[  323.237853][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  323.775640][T14875] xt_hashlimit: size too large, truncated to 1048576
[  323.850668][T14879] 8021q: VLANs not supported on ip_vti0
[  324.158448][T14896] xt_hashlimit: size too large, truncated to 1048576
[  324.316511][T14907] netlink: 'syz.1.2423': attribute type 1 has an invalid length.
[  324.320094][T14907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2423'.
[  324.548401][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'.
[  325.223557][T14920] netlink: 'syz.2.2430': attribute type 3 has an invalid length.
[  325.226373][T14920] netlink: 'syz.2.2430': attribute type 3 has an invalid length.
[  325.507492][T14941] syzkaller1: entered promiscuous mode
[  325.510815][T14941] syzkaller1: entered allmulticast mode
[  326.213857][T14964] xt_hashlimit: size too large, truncated to 1048576
[  326.266406][T14966] xt_hashlimit: size too large, truncated to 1048576
[  326.392110][T14969] net_ratelimit: 1973 callbacks suppressed
[  326.392157][T14969] openvswitch: netlink: Unknown nsh attribute 0
[  326.447939][T14979] xt_hashlimit: size too large, truncated to 1048576
[  326.873474][T14997] __nla_validate_parse: 5 callbacks suppressed
[  326.873488][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'.
[  326.891454][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2452'.
[  326.944520][T15015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2453'.
[  326.957074][ T5837] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.960914][ T5837] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.964241][ T5837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.964404][T15015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2453'.
[  326.967210][ T5837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.105349][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2454'.
[  327.963398][T15042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.083402][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  328.087550][T15054] netlink: 'syz.2.2462': attribute type 22 has an invalid length.
[  328.091379][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'.
[  328.467794][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'.
[  328.523980][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'.
[  328.524402][T15071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2467'.
[  328.547508][T15070] netlink: 'syz.1.2467': attribute type 2 has an invalid length.
[  328.552044][T15070] netlink: 'syz.1.2467': attribute type 2 has an invalid length.
[  328.558089][T15071] netlink: 'syz.1.2467': attribute type 2 has an invalid length.
[  328.565012][T15071] netlink: 'syz.1.2467': attribute type 2 has an invalid length.
[  328.585561][T15073] netlink: 'syz.2.2468': attribute type 11 has an invalid length.
[  328.595491][T15073] netlink: 'syz.2.2468': attribute type 4 has an invalid length.
[  328.620048][T15076] syzkaller1: entered promiscuous mode
[  328.622334][T15076] syzkaller1: entered allmulticast mode
[  329.004636][T15105] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  329.081730][T15116] netlink: 'syz.1.2481': attribute type 12 has an invalid length.
[  329.336474][T15132] netlink: 'syz.2.2487': attribute type 12 has an invalid length.
[  329.997936][ T5837] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.004517][ T5837] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.013558][ T5837] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  330.017303][ T5837] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  331.004405][T15207] dummy0: mtu less than device minimum
[  331.160625][T15224] bridge0: Device is already in use.
[  331.358246][T15239] xt_TPROXY: Can be used only with -p tcp or -p udp
[  331.936056][T15251] netlink: 'syz.0.2524': attribute type 1 has an invalid length.
[  331.939623][T15251] __nla_validate_parse: 15 callbacks suppressed
[  331.939643][T15251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2524'.
[  332.277019][T15280] netlink: 'syz.1.2531': attribute type 1 has an invalid length.
[  332.337475][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2534'.
[  332.511372][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'.
[  332.516535][T15290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2535'.
[  332.525263][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2536'.
[  332.547034][T15295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2536'.
[  332.553074][T15295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2536'.
[  332.563042][T15295] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2536'.
[  332.659447][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'.
[  332.693003][ T5837] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.696606][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'.
[  332.702312][ T5837] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.707336][ T5837] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.714723][ T5837] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.988227][T15324] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.036539][T15324] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.074751][T15324] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.116217][T15324] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.173207][ T5837] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.185681][ T5837] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.201945][ T5837] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.213829][ T5837] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.529721][T15339] validate_nla: 4 callbacks suppressed
[  333.529796][T15339] netlink: 'syz.2.2550': attribute type 1 has an invalid length.
[  333.687714][T15341] netlink: 'syz.1.2551': attribute type 1 has an invalid length.
[  333.727849][T15341] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  333.732003][T15341] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  335.001416][T15376] netlink: 'syz.1.2560': attribute type 3 has an invalid length.
[  335.005032][T15376] netlink: 'syz.1.2560': attribute type 3 has an invalid length.
[  335.266362][ T5837] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.269616][ T5837] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.272830][ T5837] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.275824][ T5837] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  335.402156][T15396] rdma_op ffff8881a9ab89f0 conn xmit_rdma 0000000000000000
[  335.407621][T15396] xt_hashlimit: size too large, truncated to 1048576
[  335.663268][T15416] netlink: 'syz.0.2572': attribute type 1 has an invalid length.
[  336.467509][T15424] dummy0: mtu less than device minimum
[  336.587029][T15428] xt_hashlimit: size too large, truncated to 1048576
[  336.689131][ T5213] Bluetooth: hci2: command 0x0406 tx timeout
[  337.133413][T15433] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  337.136466][T15433] __nla_validate_parse: 10 callbacks suppressed
[  337.136476][T15433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2577'.
[  337.333843][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'.
[  337.354424][T15435] 8021q: adding VLAN 0 to HW filter on device bond5
[  337.366076][T15435] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  337.370289][T15435] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  337.492389][T15442] tipc: Resetting bearer <eth:ipvlan0>
[  337.495989][T15442] tipc: Resetting bearer <eth:ipvlan0>
[  337.562209][T15447] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2580'.
[  337.661429][T15453] xt_hashlimit: size too large, truncated to 1048576
[  337.825419][T15458] tipc: MTU too low for tipc bearer
[  338.345474][T15473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2587'.
[  339.280184][T15525] netlink: 'syz.0.2599': attribute type 1 has an invalid length.
[  339.381656][T15529] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  340.067513][T15540] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2604'.
[  340.071931][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'.
[  340.087597][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  340.093320][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  340.096347][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.099830][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.284353][T15554] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2609'.
[  340.861295][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 150 seconds
[  340.865016][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 150 seconds
[  340.869342][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 150 seconds
[  340.873683][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 150 seconds
[  340.991185][T15552] syz.2.2609 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  341.019845][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.2.2609 Not tainted syzkaller #0 PREEMPT(full) 
[  341.019866][T15552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  341.019874][T15552] Call Trace:
[  341.019880][T15552]  <TASK>
[  341.019885][T15552]  dump_stack_lvl+0xe8/0x150
[  341.019911][T15552]  dump_header+0xd3/0x4c0
[  341.019931][T15552]  oom_kill_process+0x3ab/0x970
[  341.019948][T15552]  out_of_memory+0x106c/0x1410
[  341.019961][T15552]  ? try_charge_memcg+0xbb9/0x1570
[  341.019979][T15552]  ? __pfx___mutex_lock+0x10/0x10
[  341.020007][T15552]  ? __pfx_out_of_memory+0x10/0x10
[  341.020048][T15552]  ? do_raw_spin_unlock+0x4d/0x210
[  341.020072][T15552]  try_charge_memcg+0xc77/0x1570
[  341.020101][T15552]  ? __pfx_try_charge_memcg+0x10/0x10
[  341.020115][T15552]  ? percpu_ref_tryget+0x15/0x180
[  341.020145][T15552]  ? charge_memcg+0x23/0x2b0
[  341.020163][T15552]  charge_memcg+0x1a2/0x2b0
[  341.020179][T15552]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  341.020193][T15552]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  341.020211][T15552]  __swap_cache_prepare_and_add+0xdc/0x700
[  341.020228][T15552]  ? page_rmappable_folio+0x9a/0x170
[  341.020251][T15552]  swap_cache_alloc_folio+0xf1/0x240
[  341.020266][T15552]  swap_cluster_readahead+0x355/0x670
[  341.020284][T15552]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  341.020306][T15552]  ? get_vma_policy+0x27b/0x3c0
[  341.020325][T15552]  swapin_readahead+0x196/0xc50
[  341.020340][T15552]  ? swap_table_get+0x1e/0x260
[  341.020363][T15552]  ? __pfx_swapin_readahead+0x10/0x10
[  341.020377][T15552]  ? swap_table_get+0x1e/0x260
[  341.020394][T15552]  ? swap_table_get+0x1e/0x260
[  341.020410][T15552]  ? swap_table_get+0x1e/0x260
[  341.020429][T15552]  ? swap_table_get+0x216/0x260
[  341.020448][T15552]  ? swap_cache_get_folio+0x2e4/0x2f0
[  341.020471][T15552]  do_swap_page+0x555/0x5120
[  341.020494][T15552]  ? __pte_offset_map+0x29/0x240
[  341.020508][T15552]  ? __pte_offset_map+0x29/0x240
[  341.020527][T15552]  ? do_swap_page+0x128/0x5120
[  341.020544][T15552]  ? __pfx_do_swap_page+0x10/0x10
[  341.020560][T15552]  ? __pte_offset_map+0x1ae/0x240
[  341.020574][T15552]  ? pte_offset_map_rw_nolock+0xea/0x160
[  341.020590][T15552]  handle_mm_fault+0x12d2/0x3170
[  341.020614][T15552]  ? handle_mm_fault+0xee/0x3170
[  341.020632][T15552]  ? __pfx_handle_mm_fault+0x10/0x10
[  341.020643][T15552]  ? lock_vma_under_rcu+0x45a/0x500
[  341.020691][T15552]  do_user_addr_fault+0xa73/0x1340
[  341.020714][T15552]  ? rcu_is_watching+0x15/0xb0
[  341.020728][T15552]  ? trace_page_fault_user+0x84/0x1e0
[  341.020748][T15552]  exc_page_fault+0x6a/0xc0
[  341.020762][T15552]  asm_exc_page_fault+0x26/0x30
[  341.020775][T15552] RIP: 0033:0x7f1f45957943
[  341.020788][T15552] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 6e 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  341.020799][T15552] RSP: 002b:00007ffe1dfaaa30 EFLAGS: 00010246
[  341.020812][T15552] RAX: 0000000000000000 RBX: 000055556768f500 RCX: 0000000000000000
[  341.020821][T15552] RDX: 00007ffe1dfaaa70 RSI: 0000000000000000 RDI: 0000000000000000
[  341.020828][T15552] RBP: 00007f1f45c17da0 R08: 0000000000000000 R09: 0000000000000000
[  341.020836][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000533f1
[  341.020843][T15552] R13: 00007f1f45c1609c R14: 000000000005316b R15: 00007f1f45c16090
[  341.020865][T15552]  </TASK>
[  341.023468][T15552] memory: usage 307200kB, limit 307200kB, failcnt 2038
[  341.259091][T15552] memory+swap: usage 231732kB, limit 9007199254740988kB, failcnt 0
[  341.262539][T15552] kmem: usage 231400kB, limit 9007199254740988kB, failcnt 0
[  341.267236][T15552] Memory cgroup stats for /syz2:
[  341.267535][T15552] cache 0
[  341.273910][T15552] rss 0
[  341.276136][T15552] rss_huge 0
[  341.279285][T15552] shmem 0
[  341.280478][T15552] mapped_file 0
[  341.282001][T15552] dirty 0
[  341.283271][T15552] writeback 0
[  341.284731][T15552] workingset_refault_anon 1
[  341.286527][T15552] workingset_refault_file 0
[  341.288478][T15552] swap 196608
[  341.289979][T15552] swapcached 204800
[  341.291509][T15552] pgpgin 114680
[  341.292999][T15552] pgpgout 114679
[  341.294510][T15552] pgfault 200111
[  341.295854][T15552] pgmajfault 2
[  341.297097][T15552] inactive_anon 0
[  341.298539][T15552] active_anon 4096
[  341.300244][T15552] inactive_file 0
[  341.301721][T15552] active_file 0
[  341.303050][T15552] unevictable 0
[  341.304236][T15552] hierarchical_memory_limit 314572800
[  341.306047][T15552] hierarchical_memsw_limit 9223372036854771712
[  341.308571][T15552] total_cache 0
[  341.310167][T15552] total_rss 0
[  341.311561][T15552] total_rss_huge 0
[  341.313003][T15552] total_shmem 0
[  341.314247][T15552] total_mapped_file 0
[  341.315833][T15552] total_dirty 0
[  341.317313][T15552] total_writeback 0
[  341.318818][T15552] total_workingset_refault_anon 1
[  341.321155][T15552] total_workingset_refault_file 0
[  341.323341][T15552] total_swap 196608
[  341.324974][T15552] total_swapcached 204800
[  341.326674][T15552] total_pgpgin 114680
[  341.328552][T15552] total_pgpgout 114679
[  341.330171][T15552] total_pgfault 200111
[  341.331521][T15552] total_pgmajfault 2
[  341.332815][T15552] total_inactive_anon 0
[  341.334166][T15552] total_active_anon 4096
[  341.335691][T15552] total_inactive_file 0
[  341.337343][T15552] total_active_file 0
[  341.338780][T15552] total_unevictable 0
[  341.340557][T15552] anon_cost 0
[  341.341907][T15552] file_cost 0
[  341.343441][T15552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2609,pid=15552,uid=0
[  341.352076][T15552] Memory cgroup out of memory: Killed process 15552 (syz.2.2609) total-vm:102360kB, anon-rss:1244kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  341.498322][T15574] netlink: 'syz.2.2615': attribute type 21 has an invalid length.
[  341.571568][T15578] block nbd1: Unsupported socket: should be TCP or UNIX.
[  342.109353][   T10] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  342.926598][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2626'.
[  343.476125][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'.
[  343.537403][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'.
[  344.138782][T15676] netlink: 'syz.1.2641': attribute type 1 has an invalid length.
[  344.149319][T15676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2641'.
[  344.885566][T15692] xt_hashlimit: size too large, truncated to 1048576
[  345.212701][T15718] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  345.217137][T15718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2655'.
[  345.250371][T15721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2656'.
[  345.295024][T15725] x_tables: duplicate underflow at hook 1
[  345.298064][T15725] x_tables: duplicate underflow at hook 1
[  345.301570][T15725] x_tables: duplicate underflow at hook 1
[  345.303910][T15725] x_tables: duplicate underflow at hook 1
[  345.306251][T15725] x_tables: duplicate underflow at hook 1
[  345.308300][T15725] x_tables: duplicate underflow at hook 1
[  345.312639][T15725] x_tables: duplicate underflow at hook 1
[  345.315090][T15725] x_tables: duplicate underflow at hook 1
[  345.317106][T15725] x_tables: duplicate underflow at hook 1
[  345.319579][T15725] x_tables: duplicate underflow at hook 1
[  345.886958][T15745] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2661'.
[  346.046541][T15751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2663'.
[  346.336305][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2667'.
[  346.343926][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'.
[  347.537197][T15819] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check.
[  347.551424][T15819] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.615177][T15819] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.665661][T15819] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.752856][T15819] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.795360][T15837] netlink: 'syz.0.2689': attribute type 1 has an invalid length.
[  347.816223][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.825553][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.836468][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.848313][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.661894][T15858] xt_hashlimit: size too large, truncated to 1048576
[  348.763144][T15865] xt_hashlimit: size too large, truncated to 1048576
[  348.828877][T15870] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.877359][T15870] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.915777][T15880] __nla_validate_parse: 4 callbacks suppressed
[  348.915796][T15880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2700'.
[  348.926490][T15880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2700'.
[  348.937928][T15870] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.002045][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'.
[  349.031591][T15870] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  349.151924][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  349.177639][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  349.196020][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  349.197209][T15902] netlink: 'syz.2.2704': attribute type 1 has an invalid length.
[  349.203645][T15902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2704'.
[  349.215437][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  349.242953][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2706'.
[  349.250869][T15907] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2706'.
[  349.398146][T15918] xt_hashlimit: size too large, truncated to 1048576
[  351.363890][T15947] netlink: 'syz.0.2715': attribute type 4 has an invalid length.
[  353.130343][T15935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.234200][T15965] netlink: 'syz.1.2720': attribute type 89 has an invalid length.
[  353.686202][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2730'.
[  353.749765][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2731'.
[  353.797344][T16015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'.
[  353.800849][T16016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2732'.
[  353.985699][T16028] netlink: 'syz.2.2737': attribute type 12 has an invalid length.
[  354.266584][T16040] __nla_validate_parse: 1 callbacks suppressed
[  354.266605][T16040] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2741'.
[  354.574778][T16058] bond7: option arp_all_targets: invalid value (129)
[  355.490510][T16058] bond7 (unregistering): Released all slaves
[  357.599753][T16069] dvmrp1: tun_chr_ioctl cmd 2147767507
[  357.604222][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'.
[  357.813475][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2760'.
[  357.836125][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'.
[  357.839631][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'.
[  357.844098][T16100] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2760'.
[  357.848156][T16100] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2760'.
[  357.896603][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.900113][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.903047][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  357.903803][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.906194][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  357.915734][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.098067][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'.
[  359.527523][T16204] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  359.597181][T16209] __nla_validate_parse: 3 callbacks suppressed
[  359.597192][T16209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2791'.
[  359.608137][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  359.655668][T16218] xt_hashlimit: size too large, truncated to 1048576
[  359.946820][T16246] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2802'.
[  359.982245][T16249] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2803'.
[  359.985182][T16249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'.
[  359.995612][T16249] xt_hashlimit: size too large, truncated to 1048576
[  360.116751][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2805'.
[  360.122663][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2805'.
[  360.164690][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'.
[  360.169375][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'.
[  360.173767][T16254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2804'.
[  360.186685][T16264] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 2, id = 0
[  360.192696][T16263] netlink: 'syz.0.2806': attribute type 8 has an invalid length.
[  361.541570][T16321] xt_hashlimit: size too large, truncated to 1048576
[  361.998840][T16361] netlink: 'syz.2.2834': attribute type 1 has an invalid length.
[  362.118107][T16368] netlink: 'syz.0.2836': attribute type 1 has an invalid length.
[  362.383784][T16387] netlink: 'syz.0.2839': attribute type 2 has an invalid length.
[  362.387071][T16387] netlink: 'syz.0.2839': attribute type 2 has an invalid length.
[  362.391518][T16387] netlink: 'syz.0.2839': attribute type 1 has an invalid length.
[  362.395645][T16387] netlink: 'syz.0.2839': attribute type 2 has an invalid length.
[  362.885407][T16394] netlink: 'syz.2.2842': attribute type 11 has an invalid length.
[  363.024562][T16400] openvswitch: netlink: Flow actions attr not present in new flow.
[  363.076227][T16405] netlink: 'syz.1.2846': attribute type 1 has an invalid length.
[  363.605215][T16421] netlink: 'syz.0.2851': attribute type 89 has an invalid length.
[  363.709705][T16426] syzkaller1: entered promiscuous mode
[  363.712034][T16426] syzkaller1: entered allmulticast mode
[  363.886712][T16428] netlink: 'syz.1.2853': attribute type 1 has an invalid length.
[  363.979042][T16431] xt_hashlimit: size too large, truncated to 1048576
[  366.386706][T16516] __nla_validate_parse: 15 callbacks suppressed
[  366.386722][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2878'.
[  366.475986][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'.
[  366.583307][T16532] IPVS: Scheduler module ip_vs_ not found
[  366.588719][T16532] IPVS: Unknown mcast interface: vcan0
[  366.821127][T16543] validate_nla: 1 callbacks suppressed
[  366.821187][T16543] netlink: 'syz.0.2887': attribute type 1 has an invalid length.
[  366.825542][T16543] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2887'.
[  367.517206][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'.
[  367.574646][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'.
[  367.577632][T16572] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  367.722443][T16583] xt_hashlimit: size too large, truncated to 1048576
[  367.862383][T16590] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2898'.
[  368.292578][T16601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2901'.
[  368.482039][T16616] netlink: 'syz.1.2907': attribute type 1 has an invalid length.
[  368.484968][T16616] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2907'.
[  368.675562][T16630] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  368.770600][ T5213] Bluetooth: hci0: command 0x0c20 tx timeout
[  368.829901][T16637] netlink: 'syz.0.2916': attribute type 12 has an invalid length.
[  369.287941][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'.
[  369.945688][T16664] bpq0: entered promiscuous mode
[  369.947855][T16664] bpq0: entered allmulticast mode
[  370.373620][T16676] tipc: Enabled bearer <udp:s >, priority 5
[  370.438178][T16681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2930'.
[  370.897536][ T5272] udevd[5272]: worker [5826] /devices/virtual/block/nbd0 timeout; kill it
[  370.911405][ T5272] udevd[5272]: seq 13708 '/devices/virtual/block/nbd0' killed
[  370.934334][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 180 seconds
[  370.938887][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 180 seconds
[  370.943680][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 180 seconds
[  370.948276][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 180 seconds
[  370.988710][T16708] netlink: 'syz.0.2937': attribute type 1 has an invalid length.
[  371.722338][T16734] wg1 speed is unknown, defaulting to 1000
[  371.739435][T16734] wg1 speed is unknown, defaulting to 1000
[  371.745368][T16734] wg1 speed is unknown, defaulting to 1000
[  371.862839][   T10] wg1 speed is unknown, defaulting to 1000
[  371.865666][T16734] infiniband syz0: set down
[  371.868130][T16734] infiniband syz0: added wg1
[  371.884918][T16734] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  371.890272][T16734] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  371.897648][T16734] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  371.933319][T16734] RDS/IB: syz0: added
[  371.937631][T16734] smc: adding ib device syz0 with port count 1
[  371.940742][T16734] smc:    ib device syz0 port 1 has no pnetid
[  371.946013][   T10] wg1 speed is unknown, defaulting to 1000
[  371.954856][T16734] wg1 speed is unknown, defaulting to 1000
[  372.033865][T16752] netlink: 'syz.1.2948': attribute type 13 has an invalid length.
[  372.036774][T16752] netlink: 'syz.1.2948': attribute type 17 has an invalid length.
[  372.040326][T16752] lo: left allmulticast mode
[  372.050969][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.079546][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.101053][T16752] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.105041][T16752] 8021q: adding VLAN 0 to HW filter on device team0
[  372.110468][T16752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.116150][T16734] wg1 speed is unknown, defaulting to 1000
[  372.279372][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.279762][T16734] wg1 speed is unknown, defaulting to 1000
[  372.336103][T16760] netlink: 'syz.0.2950': attribute type 1 has an invalid length.
[  372.338856][T16760] __nla_validate_parse: 2 callbacks suppressed
[  372.338867][T16760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2950'.
[  372.678465][T16777] wg1 speed is unknown, defaulting to 1000
[  372.903887][T16785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.951991][T16786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.526659][T16811] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2965'.
[  373.712345][T16826] netlink: 'syz.0.2968': attribute type 2 has an invalid length.
[  373.730740][T16816] atomic_op ffff8881bc0a6998 conn xmit_atomic 0000000000000000
[  374.083961][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2975'.
[  374.350241][T16851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2976'.
[  374.885505][T16887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.977069][T16895] xt_hashlimit: size too large, truncated to 1048576
[  375.195021][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'.
[  375.198695][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2989'.
[  375.296840][T16907] xt_hashlimit: size too large, truncated to 1048576
[  375.363546][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2991'.
[  375.409489][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.753373][T16917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.835926][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'.
[  376.606321][T16923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2995'.
[  376.662748][T16924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.731194][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  390.391599][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  390.396267][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  390.405147][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  390.410588][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  390.413502][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  390.445880][T16927] wg1 speed is unknown, defaulting to 1000
[  390.627328][T16927] chnl_net:caif_netlink_parms(): no params data found
[  390.684615][T16927] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.687134][T16927] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.689781][T16927] bridge_slave_0: entered allmulticast mode
[  390.692442][T16927] bridge_slave_0: entered promiscuous mode
[  390.695866][T16927] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.698236][T16927] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.700782][T16927] bridge_slave_1: entered allmulticast mode
[  390.703487][T16927] bridge_slave_1: entered promiscuous mode
[  390.720119][T16927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.724646][T16927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.741554][T16927] team0: Port device team_slave_0 added
[  390.744729][T16927] team0: Port device team_slave_1 added
[  390.759730][T16927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.761904][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.770773][T16927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.775257][T16927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.777476][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  390.786053][T16927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.813375][T16927] hsr_slave_0: entered promiscuous mode
[  390.816147][T16927] hsr_slave_1: entered promiscuous mode
[  390.818827][T16927] debugfs: 'hsr0' already exists in 'hsr'
[  390.820957][T16927] Cannot create hsr debugfs directory
[  391.408534][ T5213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  391.413843][ T5213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  391.416809][ T5213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  391.422633][ T5213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  391.426953][ T5213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  391.456343][T16936] wg1 speed is unknown, defaulting to 1000
[  391.665626][T16936] chnl_net:caif_netlink_parms(): no params data found
[  391.751235][T16936] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.754472][T16936] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.757869][T16936] bridge_slave_0: entered allmulticast mode
[  391.762564][T16936] bridge_slave_0: entered promiscuous mode
[  391.767472][T16936] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.770904][T16936] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.774112][T16936] bridge_slave_1: entered allmulticast mode
[  391.778108][T16936] bridge_slave_1: entered promiscuous mode
[  391.808593][T16936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.815785][T16936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.843385][T16936] team0: Port device team_slave_0 added
[  391.847343][T16936] team0: Port device team_slave_1 added
[  391.865234][T16936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.867678][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.876851][T16936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.881982][T16936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.884554][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  391.894309][T16936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.924177][T16936] hsr_slave_0: entered promiscuous mode
[  391.926542][T16936] hsr_slave_1: entered promiscuous mode
[  391.928683][T16936] debugfs: 'hsr0' already exists in 'hsr'
[  391.930607][T16936] Cannot create hsr debugfs directory
[  392.417877][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  392.425947][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  392.432749][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  392.435856][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  392.438741][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  392.449234][ T5825] Bluetooth: hci3: command tx timeout
[  392.473988][T16946] wg1 speed is unknown, defaulting to 1000
[  392.648738][T16946] chnl_net:caif_netlink_parms(): no params data found
[  392.710782][T16946] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.713234][T16946] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.715707][T16946] bridge_slave_0: entered allmulticast mode
[  392.718440][T16946] bridge_slave_0: entered promiscuous mode
[  392.722538][T16946] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.724960][T16946] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.727435][T16946] bridge_slave_1: entered allmulticast mode
[  392.730937][T16946] bridge_slave_1: entered promiscuous mode
[  392.748490][T16946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.753860][T16946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.770556][T16946] team0: Port device team_slave_0 added
[  392.773893][T16946] team0: Port device team_slave_1 added
[  392.788426][T16946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.790917][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.798575][T16946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.803978][T16946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.806394][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  392.814377][T16946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.850104][T16946] hsr_slave_0: entered promiscuous mode
[  392.852490][T16946] hsr_slave_1: entered promiscuous mode
[  392.854605][T16946] debugfs: 'hsr0' already exists in 'hsr'
[  392.856499][T16946] Cannot create hsr debugfs directory
[  393.489274][T10025] Bluetooth: hci4: command tx timeout
[  394.449286][T10025] Bluetooth: hci5: command tx timeout
[  394.529387][T10025] Bluetooth: hci3: command tx timeout
[  395.569237][T10025] Bluetooth: hci4: command tx timeout
[  396.529225][T10025] Bluetooth: hci5: command tx timeout
[  396.609270][T10025] Bluetooth: hci3: command tx timeout
[  397.649264][T10025] Bluetooth: hci4: command tx timeout
[  398.609275][T10025] Bluetooth: hci5: command tx timeout
[  398.689243][T10025] Bluetooth: hci3: command tx timeout
[  399.729304][T10025] Bluetooth: hci4: command tx timeout
[  400.689182][T10025] Bluetooth: hci5: command tx timeout
[  401.021607][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 210 seconds
[  401.025830][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 210 seconds
[  401.029479][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 210 seconds
[  401.032888][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 210 seconds
[  431.089458][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 240 seconds
[  431.092916][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 240 seconds
[  431.096861][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 240 seconds
[  431.101438][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 240 seconds
[  445.171210][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  450.419323][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  450.427774][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  450.431162][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  450.434201][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  450.437059][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  450.461903][T16955] wg1 speed is unknown, defaulting to 1000
[  450.648178][T16955] chnl_net:caif_netlink_parms(): no params data found
[  450.693319][T16955] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.695756][T16955] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.698141][T16955] bridge_slave_0: entered allmulticast mode
[  450.701054][T16955] bridge_slave_0: entered promiscuous mode
[  450.704350][T16955] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.706627][T16955] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.709050][T16955] bridge_slave_1: entered allmulticast mode
[  450.711705][T16955] bridge_slave_1: entered promiscuous mode
[  450.729698][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.734721][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.751047][T16955] team0: Port device team_slave_0 added
[  450.754230][T16955] team0: Port device team_slave_1 added
[  450.768143][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.770755][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.778552][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.783853][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.786655][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.796037][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.824273][T16955] hsr_slave_0: entered promiscuous mode
[  450.826686][T16955] hsr_slave_1: entered promiscuous mode
[  450.828872][T16955] debugfs: 'hsr0' already exists in 'hsr'
[  450.830936][T16955] Cannot create hsr debugfs directory
[  452.411968][T10025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  452.418101][T10025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  452.422235][T10025] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  452.426824][T10025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  452.429949][T10025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  452.449189][ T5825] Bluetooth: hci6: command tx timeout
[  452.465230][T16964] wg1 speed is unknown, defaulting to 1000
[  452.646822][T16964] chnl_net:caif_netlink_parms(): no params data found
[  452.692796][T16964] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.695302][T16964] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.697750][T16964] bridge_slave_0: entered allmulticast mode
[  452.701248][T16964] bridge_slave_0: entered promiscuous mode
[  452.706772][T16964] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.710287][T16964] bridge0: port 2(bridge_slave_1) entered disabled state
[  452.713601][T16964] bridge_slave_1: entered allmulticast mode
[  452.717461][T16964] bridge_slave_1: entered promiscuous mode
[  452.743415][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.750047][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.775188][T16964] team0: Port device team_slave_0 added
[  452.778880][T16964] team0: Port device team_slave_1 added
[  452.795374][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.797628][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.806106][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.810747][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.813097][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.821648][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.849931][T16964] hsr_slave_0: entered promiscuous mode
[  452.852495][T16964] hsr_slave_1: entered promiscuous mode
[  452.855029][T16964] debugfs: 'hsr0' already exists in 'hsr'
[  452.856855][T16964] Cannot create hsr debugfs directory
[  453.441223][T10025] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  453.445575][T10025] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  453.448654][T10025] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  453.456028][T10025] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  453.460849][T10025] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  453.486912][T16973] wg1 speed is unknown, defaulting to 1000
[  453.650863][T16973] chnl_net:caif_netlink_parms(): no params data found
[  453.700063][T16973] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.702508][T16973] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.705595][T16973] bridge_slave_0: entered allmulticast mode
[  453.708667][T16973] bridge_slave_0: entered promiscuous mode
[  453.712400][T16973] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.715375][T16973] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.717847][T16973] bridge_slave_1: entered allmulticast mode
[  453.720938][T16973] bridge_slave_1: entered promiscuous mode
[  453.741486][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.746326][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.763702][T16973] team0: Port device team_slave_0 added
[  453.767331][T16973] team0: Port device team_slave_1 added
[  453.782608][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.786437][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.795066][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.800297][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.802971][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.813129][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.841172][T16973] hsr_slave_0: entered promiscuous mode
[  453.843601][T16973] hsr_slave_1: entered promiscuous mode
[  453.845744][T16973] debugfs: 'hsr0' already exists in 'hsr'
[  453.847798][T16973] Cannot create hsr debugfs directory
[  454.449265][T10025] Bluetooth: hci7: command tx timeout
[  454.529280][T10025] Bluetooth: hci6: command tx timeout
[  455.489336][T10025] Bluetooth: hci8: command tx timeout
[  456.529314][T10025] Bluetooth: hci7: command tx timeout
[  456.609305][T10025] Bluetooth: hci6: command tx timeout
[  457.569321][T10025] Bluetooth: hci8: command tx timeout
[  458.609422][T10025] Bluetooth: hci7: command tx timeout
[  458.689311][T10025] Bluetooth: hci6: command tx timeout
[  459.649307][T10025] Bluetooth: hci8: command tx timeout
[  460.689226][ T5213] Bluetooth: hci7: command tx timeout
[  461.179600][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 270 seconds
[  461.183177][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 270 seconds
[  461.186736][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 270 seconds
[  461.190691][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 270 seconds
[  461.729276][ T5213] Bluetooth: hci8: command tx timeout
[  462.619244][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  491.260003][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 300 seconds
[  491.263689][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 300 seconds
[  491.267289][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 300 seconds
[  491.272218][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 300 seconds
[  506.611604][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  510.469520][ T5213] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  510.479468][ T5213] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  510.485043][ T5213] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  510.488818][ T5213] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  510.492519][ T5213] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  510.533310][T16987] wg1 speed is unknown, defaulting to 1000
[  510.705392][T16987] chnl_net:caif_netlink_parms(): no params data found
[  510.763932][T16987] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.766465][T16987] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.769449][T16987] bridge_slave_0: entered allmulticast mode
[  510.774251][T16987] bridge_slave_0: entered promiscuous mode
[  510.778744][T16987] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.782313][T16987] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.785416][T16987] bridge_slave_1: entered allmulticast mode
[  510.788426][T16987] bridge_slave_1: entered promiscuous mode
[  510.811690][T16987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.817723][T16987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.837498][T16987] team0: Port device team_slave_0 added
[  510.841311][T16987] team0: Port device team_slave_1 added
[  510.861442][T16987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.863980][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.873582][T16987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.879577][T16987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.881921][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  510.891560][T16987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  510.923751][T16987] hsr_slave_0: entered promiscuous mode
[  510.926836][T16987] hsr_slave_1: entered promiscuous mode
[  510.930210][T16987] debugfs: 'hsr0' already exists in 'hsr'
[  510.932354][T16987] Cannot create hsr debugfs directory
[  512.465608][T16995] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  512.471680][T16995] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  512.475954][T16995] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  512.481308][T16995] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  512.484344][T16995] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  512.516548][T16998] wg1 speed is unknown, defaulting to 1000
[  512.529570][T16996] Bluetooth: hci9: command tx timeout
[  512.720411][T16998] chnl_net:caif_netlink_parms(): no params data found
[  512.776082][T16998] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.778519][T16998] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.781154][T16998] bridge_slave_0: entered allmulticast mode
[  512.785096][T16998] bridge_slave_0: entered promiscuous mode
[  512.789455][T16998] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.792305][T16998] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.795179][T16998] bridge_slave_1: entered allmulticast mode
[  512.798313][T16998] bridge_slave_1: entered promiscuous mode
[  512.821384][T16998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.827270][T16998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.847881][T16998] team0: Port device team_slave_0 added
[  512.852411][T16998] team0: Port device team_slave_1 added
[  512.868520][T16998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.871416][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.880265][T16998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.886134][T16998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.889337][T16998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.899514][T16998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.935668][T16998] hsr_slave_0: entered promiscuous mode
[  512.938450][T16998] hsr_slave_1: entered promiscuous mode
[  512.942136][T16998] debugfs: 'hsr0' already exists in 'hsr'
[  512.944517][T16998] Cannot create hsr debugfs directory
[  513.481242][T16995] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  513.488056][T16995] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  513.494568][T16995] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  513.502227][T16995] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  513.506070][T16995] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  513.543891][T17007] wg1 speed is unknown, defaulting to 1000
[  513.735683][T17007] chnl_net:caif_netlink_parms(): no params data found
[  513.806553][T17007] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.810006][T17007] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.813400][T17007] bridge_slave_0: entered allmulticast mode
[  513.815708][T16995] Bluetooth: hci4: command 0x0406 tx timeout
[  513.816181][T16996] Bluetooth: hci3: command 0x0406 tx timeout
[  513.824709][T17007] bridge_slave_0: entered promiscuous mode
[  513.830948][T17007] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.833675][T17007] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.837112][T17007] bridge_slave_1: entered allmulticast mode
[  513.843863][T17007] bridge_slave_1: entered promiscuous mode
[  513.880610][T17007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.887956][T17007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.912925][T17007] team0: Port device team_slave_0 added
[  513.917022][T17007] team0: Port device team_slave_1 added
[  513.936904][T17007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.939642][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.948811][T17007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.957028][T17007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.959612][T17007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.968159][T17007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.999391][T17007] hsr_slave_0: entered promiscuous mode
[  514.003105][T17007] hsr_slave_1: entered promiscuous mode
[  514.006318][T17007] debugfs: 'hsr0' already exists in 'hsr'
[  514.008624][T17007] Cannot create hsr debugfs directory
[  514.539333][ T5213] Bluetooth: hci10: command tx timeout
[  514.609477][ T5213] Bluetooth: hci9: command tx timeout
[  515.569445][ T5213] Bluetooth: hci11: command tx timeout
[  516.609352][ T5213] Bluetooth: hci10: command tx timeout
[  516.689343][ T5213] Bluetooth: hci9: command tx timeout
[  517.649300][ T5213] Bluetooth: hci11: command tx timeout
[  518.689359][ T5213] Bluetooth: hci10: command tx timeout
[  518.769275][ T5213] Bluetooth: hci9: command tx timeout
[  518.929343][ T5213] Bluetooth: hci5: command 0x0406 tx timeout
[  519.729433][ T5825] Bluetooth: hci11: command tx timeout
[  520.769452][ T5825] Bluetooth: hci10: command tx timeout
[  521.330564][   T97] block nbd0: Possible stuck request ffff888103b00000: control (read@0,1024B). Runtime 330 seconds
[  521.335347][   T97] block nbd0: Possible stuck request ffff888103b00200: control (read@1024,1024B). Runtime 330 seconds
[  521.340669][   T97] block nbd0: Possible stuck request ffff888103b00400: control (read@2048,1024B). Runtime 330 seconds
[  521.345057][   T97] block nbd0: Possible stuck request ffff888103b00600: control (read@3072,1024B). Runtime 330 seconds
[  521.809603][ T5825] Bluetooth: hci11: command tx timeout
[  527.099457][   T34] INFO: task udevd:5826 blocked in I/O wait for more than 143 seconds.
[  527.103760][   T34]       Not tainted syzkaller #0
[  527.110104][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  527.118611][   T34] task:udevd           state:D stack:22088 pid:5826  tgid:5826  ppid:5272   task_flags:0x400140 flags:0x00080002
[  527.124361][   T34] Call Trace:
[  527.126248][   T34]  <TASK>
[  527.127554][   T34]  __schedule+0x17b4/0x5680
[  527.130716][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.132809][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.134766][   T34]  ? __pfx___schedule+0x10/0x10
[  527.136727][   T34]  ? schedule+0x90/0x360
[  527.138324][   T34]  schedule+0x164/0x360
[  527.141459][   T34]  io_schedule+0x7f/0xd0
[  527.143802][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  527.146046][   T34]  ? filemap_get_entry+0xcd/0x3f0
[  527.147969][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  527.151044][   T34]  ? filemap_read_folio+0x23e/0x3b0
[  527.159953][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  527.169719][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  527.175621][   T34]  do_read_cache_folio+0x1ad/0x590
[  527.181870][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  527.185804][   T34]  read_part_sector+0xb6/0x2b0
[  527.187939][   T34]  adfspart_check_POWERTEC+0x9a/0x7a0
[  527.190884][   T34]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  527.193473][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  527.195631][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  527.197538][   T34]  bdev_disk_changed+0x817/0x1770
[  527.199946][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  527.202067][   T34]  blkdev_get_whole+0x380/0x510
[  527.203749][   T34]  bdev_open+0x31e/0xd30
[  527.205137][   T34]  blkdev_open+0x470/0x610
[  527.206621][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  527.208278][   T34]  do_dentry_open+0x785/0x14e0
[  527.210511][   T34]  vfs_open+0x3b/0x340
[  527.211880][   T34]  ? path_openat+0x2df0/0x3860
[  527.213408][   T34]  path_openat+0x2e08/0x3860
[  527.214944][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  527.216720][   T34]  ? stack_depot_save_flags+0x33/0x810
[  527.218685][   T34]  ? __pfx_path_openat+0x10/0x10
[  527.220947][   T34]  ? __x64_sys_openat+0x138/0x170
[  527.223174][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.225374][   T34]  do_file_open+0x23e/0x4a0
[  527.227064][   T34]  ? __pfx_do_file_open+0x10/0x10
[  527.228741][   T34]  ? _raw_spin_unlock+0x28/0x50
[  527.231060][   T34]  ? alloc_fd+0x64b/0x6c0
[  527.232471][   T34]  do_sys_openat2+0x113/0x200
[  527.234014][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  527.235801][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  527.237744][   T34]  ? rcu_is_watching+0x15/0xb0
[  527.241483][   T34]  __x64_sys_openat+0x138/0x170
[  527.243626][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.245680][   T34]  do_syscall_64+0x15f/0xf80
[  527.247174][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.249421][   T34] RIP: 0033:0x7ff720d169a4
[  527.251150][   T34] RSP: 002b:00007fffa213de80 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  527.253870][   T34] RAX: ffffffffffffffda RBX: 0000562a0cbba780 RCX: 00007ff720d169a4
[  527.256423][   T34] RDX: 00000000000a0800 RSI: 0000562a0cb9b4c0 RDI: 00000000ffffff9c
[  527.259961][   T34] RBP: 0000562a0cb9b4c0 R08: 0000000000000001 R09: 3fffffffffffffff
[  527.263071][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  527.265632][   T34] R13: 0000562a0cbae800 R14: 0000000000000001 R15: 0000562a0cb9a910
[  527.268221][   T34]  </TASK>
[  527.270899][   T34] INFO: task syz.2.2991:16909 blocked for more than 143 seconds.
[  527.273911][   T34]       Not tainted syzkaller #0
[  527.275642][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.278732][   T34] task:syz.2.2991      state:D stack:26312 pid:16909 tgid:16906 ppid:5833   task_flags:0x480140 flags:0x00080002
[  527.282909][   T34] Call Trace:
[  527.284360][   T34]  <TASK>
[  527.285544][   T34]  __schedule+0x17b4/0x5680
[  527.287171][   T34]  ? __pfx___schedule+0x10/0x10
[  527.289208][   T34]  ? schedule+0x90/0x360
[  527.291272][   T34]  schedule+0x164/0x360
[  527.293111][   T34]  blk_mq_freeze_queue_wait+0x101/0x180
[  527.295171][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  527.297086][   T34]  ? queue_limits_commit_update_frozen+0x55/0xd0
[  527.300550][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  527.302616][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
[  527.304554][   T34]  nbd_set_size+0x454/0x680
[  527.306051][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  527.307732][   T34]  ? nla_memcpy+0x5b/0xc0
[  527.309365][   T34]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  527.311273][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  527.313383][   T34]  ? rcu_is_watching+0x15/0xb0
[  527.315150][   T34]  ? trace_kmalloc+0x2a/0xf0
[  527.316904][   T34]  ? __nla_parse+0x40/0x60
[  527.318709][   T34]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  527.321273][   T34]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  527.323400][   T34]  genl_family_rcv_msg_doit+0x22a/0x330
[  527.325674][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  527.327999][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.330566][   T34]  genl_rcv_msg+0x61c/0x7a0
[  527.332603][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.334812][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  527.337684][   T34]  netlink_rcv_skb+0x232/0x4b0
[  527.340534][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.342729][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  527.344828][   T34]  ? down_read+0x270/0x2e0
[  527.346608][   T34]  ? genl_rcv+0xd/0x40
[  527.348241][   T34]  genl_rcv+0x28/0x40
[  527.350419][   T34]  netlink_unicast+0x75c/0x8e0
[  527.352836][   T34]  netlink_sendmsg+0x813/0xb40
[  527.354872][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.356945][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.359083][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.361325][   T34]  ____sys_sendmsg+0x972/0x9f0
[  527.363396][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  527.365606][   T34]  ? import_iovec+0x73/0xa0
[  527.367443][   T34]  ___sys_sendmsg+0x2a5/0x360
[  527.369902][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.371943][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  527.373947][   T34]  ? futex_wait+0x2a2/0x390
[  527.375757][   T34]  ? __fget_files+0x2a/0x420
[  527.377557][   T34]  ? __fget_files+0x3a0/0x420
[  527.380123][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[  527.382591][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  527.384980][   T34]  ? rcu_is_watching+0x15/0xb0
[  527.386851][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.389467][   T34]  do_syscall_64+0x15f/0xf80
[  527.391329][   T34]  ? trace_irq_disable+0x3b/0x140
[  527.393278][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.395533][   T34] RIP: 0033:0x7f1f4599c819
[  527.397281][   T34] RSP: 002b:00007f1f468dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  527.401170][   T34] RAX: ffffffffffffffda RBX: 00007f1f45c16090 RCX: 00007f1f4599c819
[  527.404532][   T34] RDX: 0000000000004020 RSI: 0000200000000640 RDI: 0000000000000007
[  527.408089][   T34] RBP: 00007f1f45a32c91 R08: 0000000000000000 R09: 0000000000000000
[  527.411913][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  527.415064][   T34] R13: 00007f1f45c16128 R14: 00007f1f45c16090 R15: 00007ffe1dfaa938
[  527.418263][   T34]  </TASK>
[  527.419794][   T34] INFO: task syz.0.2993:16913 blocked for more than 143 seconds.
[  527.423345][   T34]       Not tainted syzkaller #0
[  527.426175][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.430411][   T34] task:syz.0.2993      state:D stack:28760 pid:16913 tgid:16912 ppid:5824   task_flags:0x400040 flags:0x00080002
[  527.435323][   T34] Call Trace:
[  527.436610][   T34]  <TASK>
[  527.437816][   T34]  __schedule+0x17b4/0x5680
[  527.440023][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.442187][   T34]  ? __pfx___schedule+0x10/0x10
[  527.444518][   T34]  ? schedule+0x90/0x360
[  527.446438][   T34]  schedule+0x164/0x360
[  527.448116][   T34]  schedule_preempt_disabled+0x13/0x30
[  527.450555][   T34]  __mutex_lock+0x7f5/0x1550
[  527.452460][   T34]  ? kernel_text_address+0xa5/0xe0
[  527.454535][   T34]  ? __mutex_lock+0x606/0x1550
[  527.456459][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  527.458493][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  527.462074][   T34]  ? stack_trace_save+0xa9/0x100
[  527.464348][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.466301][   T34]  ? radix_tree_lookup+0x240/0x290
[  527.468293][   T34]  genl_rcv_msg+0x10b/0x7a0
[  527.470440][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.472379][   T34]  netlink_rcv_skb+0x232/0x4b0
[  527.474227][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.476298][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  527.478374][   T34]  ? down_read+0x270/0x2e0
[  527.480394][   T34]  ? genl_rcv+0xd/0x40
[  527.482263][   T34]  genl_rcv+0x28/0x40
[  527.484283][   T34]  netlink_unicast+0x75c/0x8e0
[  527.486720][   T34]  netlink_sendmsg+0x813/0xb40
[  527.489101][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.491352][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.493511][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.495612][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.497962][   T34]  __sys_sendto+0x672/0x710
[  527.500519][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  527.502827][   T34]  ? exc_page_fault+0x6a/0xc0
[  527.504947][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  527.507236][   T34]  __x64_sys_sendto+0xde/0x100
[  527.509366][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.511774][   T34]  do_syscall_64+0x15f/0xf80
[  527.513600][   T34]  ? trace_irq_disable+0x3b/0x140
[  527.515598][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.517930][   T34] RIP: 0033:0x7f384f75d04e
[  527.520244][   T34] RSP: 002b:00007f38505bfe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  527.524579][   T34] RAX: ffffffffffffffda RBX: 00007f38505c16c0 RCX: 00007f384f75d04e
[  527.527914][   T34] RDX: 0000000000000020 RSI: 00007f38505c0000 RDI: 0000000000000004
[  527.530716][   T34] RBP: 0000000000000000 R08: 00007f38505bff04 R09: 000000000000000c
[  527.533230][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  527.535755][   T34] R13: 00007f38505bff58 R14: 00007f38505c0000 R15: 0000000000000000
[  527.538242][   T34]  </TASK>
[  527.539766][   T34] INFO: task syz.0.2993:16915 blocked for more than 143 seconds.
[  527.543530][   T34]       Not tainted syzkaller #0
[  527.545711][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.549912][   T34] task:syz.0.2993      state:D stack:27128 pid:16915 tgid:16912 ppid:5824   task_flags:0x400140 flags:0x00080002
[  527.554101][   T34] Call Trace:
[  527.555265][   T34]  <TASK>
[  527.556312][   T34]  __schedule+0x17b4/0x5680
[  527.557858][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.560319][   T34]  ? __pfx___schedule+0x10/0x10
[  527.562542][   T34]  ? schedule+0x90/0x360
[  527.564762][   T34]  schedule+0x164/0x360
[  527.566260][   T34]  schedule_preempt_disabled+0x13/0x30
[  527.568114][   T34]  __mutex_lock+0x7f5/0x1550
[  527.570297][   T34]  ? kernel_text_address+0xa5/0xe0
[  527.572187][   T34]  ? __mutex_lock+0x606/0x1550
[  527.573905][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  527.575482][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  527.577338][   T34]  ? stack_trace_save+0xa9/0x100
[  527.579351][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.581143][   T34]  ? radix_tree_lookup+0x240/0x290
[  527.583140][   T34]  genl_rcv_msg+0x10b/0x7a0
[  527.584877][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.586619][   T34]  netlink_rcv_skb+0x232/0x4b0
[  527.588578][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.591134][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  527.593425][   T34]  ? down_read+0x270/0x2e0
[  527.595069][   T34]  ? genl_rcv+0xd/0x40
[  527.596481][   T34]  genl_rcv+0x28/0x40
[  527.597988][   T34]  netlink_unicast+0x75c/0x8e0
[  527.600202][   T34]  netlink_sendmsg+0x813/0xb40
[  527.602301][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.604344][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.606046][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.607900][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.610014][   T34]  __sys_sendto+0x672/0x710
[  527.611672][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  527.613514][   T34]  ? exc_page_fault+0x6a/0xc0
[  527.615066][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  527.616969][   T34]  __x64_sys_sendto+0xde/0x100
[  527.618780][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.621811][   T34]  do_syscall_64+0x15f/0xf80
[  527.623638][   T34]  ? trace_irq_disable+0x3b/0x140
[  527.625379][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.627275][   T34] RIP: 0033:0x7f384f75d04e
[  527.628791][   T34] RSP: 002b:00007f385057de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  527.631925][   T34] RAX: ffffffffffffffda RBX: 00007f385057f6c0 RCX: 00007f384f75d04e
[  527.634823][   T34] RDX: 0000000000000020 RSI: 00007f385057e000 RDI: 0000000000000003
[  527.637447][   T34] RBP: 0000000000000000 R08: 00007f385057df04 R09: 000000000000000c
[  527.640857][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  527.644199][   T34] R13: 00007f385057df58 R14: 00007f385057e000 R15: 0000000000000000
[  527.647522][   T34]  </TASK>
[  527.648799][   T34] INFO: task syz.0.2993:16918 blocked for more than 143 seconds.
[  527.652002][   T34]       Not tainted syzkaller #0
[  527.653732][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.656703][   T34] task:syz.0.2993      state:D stack:27272 pid:16918 tgid:16912 ppid:5824   task_flags:0x400040 flags:0x00080002
[  527.662524][   T34] Call Trace:
[  527.664810][   T34]  <TASK>
[  527.666464][   T34]  __schedule+0x17b4/0x5680
[  527.669263][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.672095][   T34]  ? __pfx___schedule+0x10/0x10
[  527.674130][   T34]  ? schedule+0x90/0x360
[  527.676007][   T34]  schedule+0x164/0x360
[  527.677839][   T34]  schedule_preempt_disabled+0x13/0x30
[  527.681203][   T34]  __mutex_lock+0x7f5/0x1550
[  527.683232][   T34]  ? kernel_text_address+0xa5/0xe0
[  527.685443][   T34]  ? __mutex_lock+0x606/0x1550
[  527.687799][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  527.690143][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  527.692436][   T34]  ? stack_trace_save+0xa9/0x100
[  527.694417][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.696024][   T34]  ? radix_tree_lookup+0x240/0x290
[  527.697670][   T34]  genl_rcv_msg+0x10b/0x7a0
[  527.699526][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.701133][   T34]  netlink_rcv_skb+0x232/0x4b0
[  527.702905][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.704873][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  527.706555][   T34]  ? down_read+0x270/0x2e0
[  527.708001][   T34]  ? genl_rcv+0xd/0x40
[  527.709687][   T34]  genl_rcv+0x28/0x40
[  527.711119][   T34]  netlink_unicast+0x75c/0x8e0
[  527.713076][   T34]  netlink_sendmsg+0x813/0xb40
[  527.715087][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.716893][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.718502][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.720519][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.722807][   T34]  __sys_sendto+0x672/0x710
[  527.724925][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  527.727674][   T34]  ? exc_page_fault+0x6a/0xc0
[  527.730326][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  527.732313][   T34]  __x64_sys_sendto+0xde/0x100
[  527.733994][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.736019][   T34]  do_syscall_64+0x15f/0xf80
[  527.737486][   T34]  ? trace_irq_disable+0x3b/0x140
[  527.739836][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.742137][   T34] RIP: 0033:0x7f384f75d04e
[  527.743914][   T34] RSP: 002b:00007f384d5f2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  527.746788][   T34] RAX: ffffffffffffffda RBX: 00007f384d5f46c0 RCX: 00007f384f75d04e
[  527.749441][   T34] RDX: 0000000000000024 RSI: 00007f384d5f3000 RDI: 0000000000000003
[  527.752053][   T34] RBP: 0000000000000000 R08: 00007f384d5f2f04 R09: 000000000000000c
[  527.754701][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  527.757214][   T34] R13: 00007f384d5f2f58 R14: 00007f384d5f3000 R15: 0000000000000000
[  527.760393][   T34]  </TASK>
[  527.761617][   T34] INFO: task syz.1.2995:16923 blocked for more than 144 seconds.
[  527.764464][   T34]       Not tainted syzkaller #0
[  527.766069][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  527.768853][   T34] task:syz.1.2995      state:D stack:26280 pid:16923 tgid:16922 ppid:5828   task_flags:0x400140 flags:0x00080002
[  527.773059][   T34] Call Trace:
[  527.774349][   T34]  <TASK>
[  527.775674][   T34]  __schedule+0x17b4/0x5680
[  527.777604][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  527.779867][   T34]  ? __pfx___schedule+0x10/0x10
[  527.781543][   T34]  ? schedule+0x90/0x360
[  527.782988][   T34]  schedule+0x164/0x360
[  527.784915][   T34]  schedule_preempt_disabled+0x13/0x30
[  527.786988][   T34]  __mutex_lock+0x7f5/0x1550
[  527.788817][   T34]  ? __mutex_lock+0x606/0x1550
[  527.791142][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  527.792972][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  527.794846][   T34]  ? radix_tree_lookup+0x240/0x290
[  527.796613][   T34]  genl_rcv_msg+0x10b/0x7a0
[  527.798175][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.800231][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  527.802107][   T34]  netlink_rcv_skb+0x232/0x4b0
[  527.803682][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  527.805492][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  527.808111][   T34]  ? down_read+0x270/0x2e0
[  527.810444][   T34]  ? genl_rcv+0xd/0x40
[  527.812473][   T34]  genl_rcv+0x28/0x40
[  527.814566][   T34]  netlink_unicast+0x75c/0x8e0
[  527.816380][   T34]  netlink_sendmsg+0x813/0xb40
[  527.818305][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.820816][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  527.823347][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  527.825728][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  527.828599][   T34]  __sys_sendto+0x672/0x710
[  527.830911][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  527.832892][   T34]  ? exc_page_fault+0x6a/0xc0
[  527.834783][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  527.836983][   T34]  __x64_sys_sendto+0xde/0x100
[  527.839680][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.842677][   T34]  do_syscall_64+0x15f/0xf80
[  527.844721][   T34]  ? trace_irq_disable+0x3b/0x140
[  527.847382][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.850858][   T34] RIP: 0033:0x7f9b3035d04e
[  527.853086][   T34] RSP: 002b:00007f9b2e5f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  527.856499][   T34] RAX: ffffffffffffffda RBX: 00007f9b2e5f66c0 RCX: 00007f9b3035d04e
[  527.859582][   T34] RDX: 0000000000000024 RSI: 00007f9b2e5f5000 RDI: 0000000000000006
[  527.862807][   T34] RBP: 0000000000000000 R08: 00007f9b2e5f4f04 R09: 000000000000000c
[  527.865905][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  527.868587][   T34] R13: 00007f9b2e5f4f58 R14: 00007f9b2e5f5000 R15: 0000000000000000
[  527.872540][   T34]  </TASK>
[  527.873755][   T34] 
[  527.873755][   T34] Showing all locks held in the system:
[  527.876458][   T34] 1 lock held by khungtaskd/34:
[  527.878161][   T34]  #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  527.881960][   T34] 5 locks held by klogd/5261:
[  527.883874][   T34]  #0: ffff88812103aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  527.887073][   T34]  #1: ffff888121024588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  527.890252][   T34]  #2: ffff888172184588 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1380
[  527.893265][   T34]  #3: ffff88812103aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  527.896802][   T34]  #4: ffff888121024588 (psi_seq){-.-.}-{0:0}, at: psi_task_change+0xd4/0x340
[  527.900920][   T34] 2 locks held by getty/5651:
[  527.902627][   T34]  #0: ffff888110cb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  527.905992][   T34]  #1: ffffc9000346b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  527.909543][   T34] 1 lock held by udevd/5826:
[  527.911050][   T34]  #0: ffff88816d63b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  527.914518][   T34] 6 locks held by syz.2.2991/16909:
[  527.916764][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.920525][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.923997][   T34]  #2: ffff88816d673260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  527.927477][   T34]  #3: ffff88816d67c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  527.931036][   T34]  #4: ffff88816d67c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  527.935102][   T34]  #5: ffff88816d67c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  527.939609][   T34] 2 locks held by syz.0.2993/16913:
[  527.941471][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.944212][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.947209][   T34] 2 locks held by syz.0.2993/16915:
[  527.949245][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.951992][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.955991][   T34] 2 locks held by syz.0.2993/16918:
[  527.959521][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.962598][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.965708][   T34] 2 locks held by syz.1.2995/16923:
[  527.967415][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.972193][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.975248][   T34] 2 locks held by syz-executor/16927:
[  527.977070][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.980462][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.984628][   T34] 2 locks held by syz-executor/16936:
[  527.986905][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.989965][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  527.992849][   T34] 2 locks held by syz-executor/16946:
[  527.994812][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  527.997792][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.000993][   T34] 2 locks held by syz-executor/16955:
[  528.002784][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.005564][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.009935][   T34] 2 locks held by syz-executor/16964:
[  528.012001][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.015201][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.018142][   T34] 2 locks held by syz-executor/16973:
[  528.020300][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.023269][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.026194][   T34] 2 locks held by syz-executor/16987:
[  528.028589][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.032138][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.035853][   T34] 2 locks held by syz-executor/16998:
[  528.037944][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.041173][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.044191][   T34] 2 locks held by syz-executor/17007:
[  528.045996][   T34]  #0: ffffffff8fe52408 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  528.048716][   T34]  #1: ffffffff8fe52240 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  528.051979][   T34] 
[  528.052861][   T34] =============================================
[  528.052861][   T34] 
[  528.056349][   T34] NMI backtrace for cpu 1
[  528.056368][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  528.056381][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  528.056386][   T34] Call Trace:
[  528.056393][   T34]  <TASK>
[  528.056414][   T34]  dump_stack_lvl+0xe8/0x150
[  528.056435][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  528.056448][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  528.056461][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  528.056473][   T34]  sys_info+0x135/0x170
[  528.056483][   T34]  watchdog+0xfd3/0x1030
[  528.056501][   T34]  ? watchdog+0x1c9/0x1030
[  528.056511][   T34]  kthread+0x388/0x470
[  528.056525][   T34]  ? __pfx_watchdog+0x10/0x10
[  528.056533][   T34]  ? __pfx_kthread+0x10/0x10
[  528.056548][   T34]  ret_from_fork+0x514/0xb70
[  528.056573][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  528.056590][   T34]  ? __switch_to+0xc79/0x1410
[  528.056608][   T34]  ? __pfx_kthread+0x10/0x10
[  528.056679][   T34]  ret_from_fork_asm+0x1a/0x30
[  528.056702][   T34]  </TASK>
[  528.056708][   T34] Sending NMI from CPU 1 to CPUs 0:
[  528.099018][    C0] NMI backtrace for cpu 0
[  528.099044][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  528.099056][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  528.099064][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  528.099087][    C0] Code: 3b 71 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 01 11 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  528.099098][    C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000202
[  528.099111][    C0] RAX: 000000000043d9f1 RBX: ffffffff819aae9a RCX: 0000000080000001
[  528.099119][    C0] RDX: 0000000000000001 RSI: ffffffff8dfd6ff6 RDI: ffffffff8c289ce0
[  528.099127][    C0] RBP: ffffffff8e607eb0 R08: ffff8881210339db R09: 1ffff1102420673b
[  528.099136][    C0] R10: dffffc0000000000 R11: ffffed102420673c R12: 0000000000000000
[  528.099143][    C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8
[  528.099151][    C0] FS:  0000000000000000(0000) GS:ffff88818dc17000(0000) knlGS:0000000000000000
[  528.099159][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  528.099167][    C0] CR2: 00007f7233e87e20 CR3: 000000010ea46000 CR4: 00000000000006f0
[  528.099205][    C0] Call Trace:
[  528.099214][    C0]  <TASK>
[  528.099220][    C0]  default_idle+0x9/0x20
[  528.099236][    C0]  default_idle_call+0x72/0xb0
[  528.099252][    C0]  do_idle+0x36a/0x5f0
[  528.099267][    C0]  ? __pfx_do_idle+0x10/0x10
[  528.099277][    C0]  ? do_idle+0x10/0x5f0
[  528.099286][    C0]  cpu_startup_entry+0x43/0x60
[  528.099296][    C0]  rest_init+0x2de/0x300
[  528.099309][    C0]  start_kernel+0x38a/0x3e0
[  528.099328][    C0]  x86_64_start_reservations+0x24/0x30
[  528.099343][    C0]  x86_64_start_kernel+0x143/0x1c0
[  528.099355][    C0]  common_startup_64+0x13e/0x147
[  528.099373][    C0]  </TASK>
[  528.100085][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  528.100101][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  528.100112][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  528.100117][   T34] Call Trace:
[  528.100124][   T34]  <TASK>
[  528.100130][   T34]  vpanic+0x56c/0xa60
[  528.100142][   T34]  ? __pfx___schedule+0x10/0x10
[  528.100153][   T34]  ? __pfx_vpanic+0x10/0x10
[  528.100162][   T34]  panic+0xc5/0xd0
[  528.100169][   T34]  ? __pfx_panic+0x10/0x10
[  528.100181][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  528.100193][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  528.100207][   T34]  watchdog+0x102c/0x1030
[  528.100220][   T34]  ? watchdog+0x1c9/0x1030
[  528.100231][   T34]  kthread+0x388/0x470
[  528.100240][   T34]  ? __pfx_watchdog+0x10/0x10
[  528.100249][   T34]  ? __pfx_kthread+0x10/0x10
[  528.100258][   T34]  ret_from_fork+0x514/0xb70
[  528.100271][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  528.100282][   T34]  ? __switch_to+0xc79/0x1410
[  528.100293][   T34]  ? __pfx_kthread+0x10/0x10
[  528.100301][   T34]  ret_from_fork_asm+0x1a/0x30
[  528.100314][   T34]  </TASK>
[  528.216120][   T34] Kernel Offset: disabled
[  528.217578][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:13:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000040 RBX=000000000000000e RCX=dffffc0000000000 RDX=0000000000000100
RSI=000000000000000e RDI=ffff888011cf7500 RBP=1ffff1100239eeae RSP=ffffc900000074a8
R8 =ffff888011cf75e7 R9 =1ffff1100239eebc R10=dffffc0000000000 R11=ffffffff8a7b4390
R12=000000000000000e R13=dffffc0000000000 R14=ffff888011cf7500 R15=ffff888011cf7500
RIP=ffffffff897d9c7c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc17000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f57b4f3d440 CR3=000000000e74a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000014 XMM03=0000000000000000 000000000003bf12
XMM04=0000000000000000 0000000000000001 XMM05=0000000000000100 4164a2642f57422c
XMM06=0700000000000000 0000000000000037 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000036 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000003f9f83 RBX=ffffffff819aae9a RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8dfd6ff6 RDI=ffffffff8c289ce0 RBP=ffffc90000197f10 RSP=ffffc90000197e20
R8 =ffff88823c6339db R9 =1ffff110478c673b R10=dffffc0000000000 R11=ffffed10478c673c
R12=0000000000000001 R13=1ffff1102c09e000 R14=0000000000000001 R15=1ffff1102c09e000
RIP=ffffffff8bb8612f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9217000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005646ef3213a1 CR3=000000000e74a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0031313230382f65 65692f326968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
