last executing test programs:

17.668329892s ago: executing program 2 (id=5416):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$unix(0x1, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, 0x0, &(0x7f0000000080))
r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={r6, 0x1, 0x6, 0x1})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, 0x0, 0x0)

16.88256201s ago: executing program 1 (id=5427):
socket$isdn_base(0x22, 0x3, 0x0) (async)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x80000001}, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xfffffffffffffeb8, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x20004000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000000000000000000000000000000000004d9b96b56acc5128cd30375ba9548d66343290f0381f739dffb9a6e3b573dd99f843cd70c07864bef60c7cd6bb4fdaccf74d1e3d0b0ec5f55581d2a01318bbf8d1d08580fc9d786883716fc6bf4b9ead82000000", @ANYRES32=0x0, @ANYRES64=r3, @ANYRESHEX=0x0, @ANYBLOB="0800f049d573d16ca8651912d01b"], 0x30}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0)
unshare(0x62040200)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000005a4fb5292322e13124f3c4adbad1"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000000300000080000000ff7f000000400000", @ANYRES32=r5, @ANYBLOB="101000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000030000000e000000000000000000100000000000d658eea30979b784b1dd41af9e30c31216776179ccfa4c874f04095d803486cce4b7ff0100d4477933ebffd8f2420b1247138c37952a13d1601aa6c7eeb3712ebbda49843cd549dd5fa9b8402a071f2fff53c20d0500055ee03012f327a5a2142c66e7625f0dfff63408e4f6bb8c446e669be15f615f088a0cf247f3d148840c367bf7698f5076e3f4ff01961048be044dc2d56baf2b4442e7c7ae63e1d84edcc5f870a9c109368dd966085f81dff9f900000000"], 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000000300000080000000ff7f000000400000", @ANYRES32=r5, @ANYBLOB="101000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000001000000030000000e000000000000000000100000000000d658eea30979b784b1dd41af9e30c31216776179ccfa4c874f04095d803486cce4b7ff0100d4477933ebffd8f2420b1247138c37952a13d1601aa6c7eeb3712ebbda49843cd549dd5fa9b8402a071f2fff53c20d0500055ee03012f327a5a2142c66e7625f0dfff63408e4f6bb8c446e669be15f615f088a0cf247f3d148840c367bf7698f5076e3f4ff01961048be044dc2d56baf2b4442e7c7ae63e1d84edcc5f870a9c109368dd966085f81dff9f900000000"], 0x50)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38)
shutdown(r4, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000540)=""/165, 0xa5}], 0x2, &(0x7f0000000600)=""/54, 0x36}, 0xe8}], 0x1, 0x40012043, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000540)=""/165, 0xa5}], 0x2, &(0x7f0000000600)=""/54, 0x36}, 0xe8}], 0x1, 0x40012043, 0x0)
unshare(0x24060400) (async)
unshare(0x24060400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28)

16.800709872s ago: executing program 1 (id=5428):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00)
sendmsg$nl_route(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000)

16.740307331s ago: executing program 1 (id=5429):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
accept4$alg(r4, 0x0, 0x0, 0x80800)
r12 = openat$cgroup_type(r11, &(0x7f0000000040), 0x2, 0x0)
sendfile(r10, r12, &(0x7f0000000240)=0x6, 0x9)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000200), 0xffffffc1)

16.73989578s ago: executing program 2 (id=5430):
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)="020000000d80", 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001200), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r7, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x400, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_csum={0x30, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000894}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r9, 0x8008af26, &(0x7f0000000240)={0x1, 0x7})
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, 0x0, 0x0)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000080))
r11 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001080)=0x10, 0x80000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0)
getpeername$llc(r11, &(0x7f00000010c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001100)=0x10)
getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
socket$nl_route(0x10, 0x3, 0x0)

16.671614647s ago: executing program 2 (id=5432):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xabab, @none, 0x101}, 0xe)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$alg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, @null, @netrom={'nr', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES8, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050000140007000000000000000005000000000000000108000f"], 0x74}}, 0x20000811)

16.567094662s ago: executing program 0 (id=5433):
socket$packet(0x11, 0x2, 0x300)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000100))
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.565414405s ago: executing program 0 (id=5434):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async, rerun: 32)
sendto$inet6(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) (async, rerun: 32)
sendmmsg$inet6(r2, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="a7", 0x1}], 0x1}}], 0x1, 0x10000895) (async, rerun: 32)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xf6690000) (async, rerun: 32)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x0)

16.552754224s ago: executing program 0 (id=5435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc054}, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x1)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0)

16.48277263s ago: executing program 0 (id=5436):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x2c020400)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
unshare(0x80)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3711}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44015)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
shutdown(r0, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'pim6reg1\x00', {0x5}, 0x6})
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="040027802ea2103076d72a9500f400ff0100000000000000000000000000010000003919a4dbf792c095e7f1a2edbcadc7741132ac77eb04510dde6b8c0bc5a3e30c7a3a35688606000000000000008c0931754d52fa"], 0x120}], 0x1}, 0x0)

16.481682204s ago: executing program 1 (id=5437):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000004000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020070000000b0e0e76255ab80a200bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a0002007000feb000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)
sendto$unix(r2, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
getsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, &(0x7f00000000c0))
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000440)={0x3, 'wg2\x00', {0xedb2}, 0x6})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000010008a62000400180100002020732500000000002020207b1af8ff00000000bfa1000000000000070190b8e2a4ffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bd7000ffdbdf25584f7c4986981a354aa8754fe90914cd001cfd11941e58c3eaf119747c32e784d263e970bf26c2fbd926202ce49b0f2b2072bd910f9da9d5eae1d4ec446102be62d68cbf854d7fb60cc2990cf66160a2e3558b3a9e71d1e291efb8196a5786c722b84c9c23fb851890d12d4ab4ab6ca90176a4186faee10d4aec8e552c2deb65b586154bb0cc701296c52424074e2e8e6cf682440b0e134015f54d2161f52ba54e58537e022fa721dfd0a8d7b0c902f9904d42474f0000000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

16.478720511s ago: executing program 0 (id=5438):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x8}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000000)='D~x+', 0x4}], 0x1, &(0x7f00000019c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed00)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x8, 0xb}, 0x8)
socket$kcm(0x10, 0x2, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x80010, 0xffffffffffffffff, 0xfffff000)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10)

15.782836242s ago: executing program 2 (id=5439):
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000009900000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

15.682516778s ago: executing program 2 (id=5440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x8, 0x6, 0x9, 0x3, 0x1, 0x28b2, 0x10]}}]}]}]}]}]}, 0x44}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r5}, &(0x7f0000000300), 0x0}, 0x20)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="84020000", @ANYRES16=r4, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r6, 0x58, &(0x7f0000002040)}, 0x6d)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket(0x2, 0x80805, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20044080)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000003c0), 0x10)
sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r9], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0)
sendmmsg$inet(r8, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x3, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)="8600a3", 0x3}], 0x1}}], 0x3, 0x4000000)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'ipvlan0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000449", @ANYRES32=0x0, @ANYBLOB="00a3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x1d, r12}, 0x10, &(0x7f0000000380)={&(0x7f0000000400)={0x7, 0x100, 0x6, {0x0, 0x2710}, {0x0, 0xea60}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "27f54cc8f404fa2c"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000140)={r13, 0x5}, 0x8)
write$tun(r0, &(0x7f0000000440)=ANY=[], 0x3e)

15.592942809s ago: executing program 1 (id=5441):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@hci, &(0x7f0000000000)=0x80)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000005c0))
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.541271005s ago: executing program 0 (id=5442):
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async)
unshare(0x2018000) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r2=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r3=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r5=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) (rerun: 32)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2100a400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0xd15, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c880}, 0x10) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', <r9=>0x0})
ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f00000005c0)) (async, rerun: 32)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) (async, rerun: 32)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000780)=0xc)
setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000007c0)={0x0, r10, r11}, 0xc) (async)
r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=0xffffffffffffffff, 0x4) (async)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfd9, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x314b, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd52b, 0x0, 0x0, 0x0, 0xbd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x5, 0x28, &(0x7f0000000980)=""/40, 0x40f00, 0x60, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0xa, 0x3, 0xfd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x3, 0xc, 0x6}, {0x4, 0x5, 0xe, 0xc}, {0x0, 0x3, 0xf, 0x3}, {0x0, 0x2, 0x2, 0xa}, {0x5, 0x4, 0x1}, {0x4, 0x3, 0x7, 0x9}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x4, 0xf, 0xa}, {0x5, 0x2, 0x8, 0xb}], 0x10, 0x4}, 0x94) (async)
r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r8}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c80)={r12, r13, 0x4, r14}, 0x10) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000cc0)={{0x1d, @local, 0x4e21, 0x1, 'wlc\x00', 0x43, 0x1, 0x67}, {@empty, 0x4e23, 0x4, 0x6, 0x9, 0x82}}, 0x44) (async, rerun: 64)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r14, 0x80049367, &(0x7f0000000d40))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='ext4_es_lookup_extent_exit\x00', r14, 0x0, 0x82}, 0x18)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000f00))

15.53404896s ago: executing program 1 (id=5443):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2062)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x49, 0x0, &(0x7f0000000580)) (async)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3bf, 0x34}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @remote}, 0xc) (async)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r10=>0x0}, &(0x7f0000000400)=0x14) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x20, &(0x7f00000005c0)={&(0x7f0000000780)=""/4096, 0x1000, <r11=>0x0, &(0x7f0000000500)=""/108, 0x6c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xc, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb8}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x27, '\x00', r10, @fallback=0x25, r3, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x3, 0xf, 0x80000000}, 0x10, r11, r3, 0xa, &(0x7f0000000640)=[r3], &(0x7f0000001780)=[{0x1, 0x5, 0x3, 0x8}, {0x3, 0x2, 0xf, 0x2}, {0x3, 0x3, 0x4, 0x6}, {0x3, 0x5, 0x2, 0x1c26d82120d6c2dc}, {0x2, 0x3, 0x7, 0x3}, {0x4, 0x1, 0x2}, {0x5, 0x5, 0x10, 0xb}, {0x5, 0x2, 0x0, 0x8}, {0x1, 0x5, 0x3, 0x3}, {0x3, 0x4, 0x3, 0xa}], 0x10, 0x6}, 0x94)

15.533343115s ago: executing program 2 (id=5444):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r6, 0x1ff}, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000001", @ANYRES16=r4, @ANYBLOB="00042dbd7000fddbdf25010000000c000300030000000000000008000100", @ANYRES32=r6, @ANYBLOB="060006000400000005000d001e0000000600060004000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815)

72.222743ms ago: executing program 32 (id=5442):
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) (async)
unshare(0x2018000) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r2=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r3=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r5=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) (rerun: 32)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2100a400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r7, 0xd15, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c880}, 0x10) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', <r9=>0x0})
ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f00000005c0)) (async, rerun: 32)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) (async, rerun: 32)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000780)=0xc)
setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000007c0)={0x0, r10, r11}, 0xc) (async)
r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=0xffffffffffffffff, 0x4) (async)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfd9, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x314b, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd52b, 0x0, 0x0, 0x0, 0xbd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x5, 0x28, &(0x7f0000000980)=""/40, 0x40f00, 0x60, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0xa, 0x3, 0xfd}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x3, 0xc, 0x6}, {0x4, 0x5, 0xe, 0xc}, {0x0, 0x3, 0xf, 0x3}, {0x0, 0x2, 0x2, 0xa}, {0x5, 0x4, 0x1}, {0x4, 0x3, 0x7, 0x9}, {0x2, 0x2, 0x8, 0x7}, {0x5, 0x4, 0xf, 0xa}, {0x5, 0x2, 0x8, 0xb}], 0x10, 0x4}, 0x94) (async)
r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10, r8}, 0x18)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c80)={r12, r13, 0x4, r14}, 0x10) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000cc0)={{0x1d, @local, 0x4e21, 0x1, 'wlc\x00', 0x43, 0x1, 0x67}, {@empty, 0x4e23, 0x4, 0x6, 0x9, 0x82}}, 0x44) (async, rerun: 64)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r14, 0x80049367, &(0x7f0000000d40))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='ext4_es_lookup_extent_exit\x00', r14, 0x0, 0x82}, 0x18)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000f00))

185.672µs ago: executing program 33 (id=5443):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2062)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x49, 0x0, &(0x7f0000000580)) (async)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3bf, 0x34}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @remote}, 0xc) (async)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r10=>0x0}, &(0x7f0000000400)=0x14) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x20, &(0x7f00000005c0)={&(0x7f0000000780)=""/4096, 0x1000, <r11=>0x0, &(0x7f0000000500)=""/108, 0x6c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xc, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb8}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x27, '\x00', r10, @fallback=0x25, r3, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x3, 0xf, 0x80000000}, 0x10, r11, r3, 0xa, &(0x7f0000000640)=[r3], &(0x7f0000001780)=[{0x1, 0x5, 0x3, 0x8}, {0x3, 0x2, 0xf, 0x2}, {0x3, 0x3, 0x4, 0x6}, {0x3, 0x5, 0x2, 0x1c26d82120d6c2dc}, {0x2, 0x3, 0x7, 0x3}, {0x4, 0x1, 0x2}, {0x5, 0x5, 0x10, 0xb}, {0x5, 0x2, 0x0, 0x8}, {0x1, 0x5, 0x3, 0x3}, {0x3, 0x4, 0x3, 0xa}], 0x10, 0x6}, 0x94)

0s ago: executing program 34 (id=5444):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r6, 0x1ff}, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000001", @ANYRES16=r4, @ANYBLOB="00042dbd7000fddbdf25010000000c000300030000000000000008000100", @ANYRES32=r6, @ANYBLOB="060006000400000005000d001e0000000600060004000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815)

kernel console output (not intermixed with test programs):

 unknown, defaulting to 1000
[  341.071627][T24171] lo speed is unknown, defaulting to 1000
[  341.074210][T24171] hsr0 speed is unknown, defaulting to 1000
[  341.344574][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'.
[  341.417620][T24187] lo speed is unknown, defaulting to 1000
[  341.453507][T24187] lo speed is unknown, defaulting to 1000
[  341.456541][T24187] hsr0 speed is unknown, defaulting to 1000
[  341.466398][T24189] netlink: 'syz.1.4738': attribute type 1 has an invalid length.
[  341.478870][T24189] 8021q: adding VLAN 0 to HW filter on device bond25
[  341.487681][T24189] bond25: entered promiscuous mode
[  341.570946][T24195] netlink: 'syz.1.4740': attribute type 9 has an invalid length.
[  341.710260][T24206] netlink: 'syz.1.4743': attribute type 10 has an invalid length.
[  341.726178][T24207] netlink: 'syz.0.4744': attribute type 11 has an invalid length.
[  341.737436][T24207] veth0_to_bond: entered promiscuous mode
[  341.843624][T24219] 8021q: adding VLAN 0 to HW filter on device bond27
[  341.850478][T24219] bond27 (unregistering): Released all slaves
[  341.900177][T24228] pim6reg1: entered promiscuous mode
[  341.902397][T24228] pim6reg1: entered allmulticast mode
[  341.929673][T24230] 8021q: adding VLAN 0 to HW filter on device bond27
[  341.937093][T24230] bond27: entered promiscuous mode
[  341.941048][T24233] tipc: Resetting bearer <eth:syzkaller0>
[  341.982146][T24237] vlan3: entered allmulticast mode
[  341.984490][T24237] mac80211_hwsim hwsim239 wlan1: entered allmulticast mode
[  342.033700][T24242] tipc: Resetting bearer <eth:syzkaller0>
[  342.064458][ T5857] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.072568][ T5857] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.078399][ T5857] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.081695][ T5857] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.093110][ T5857] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.097873][ T5857] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.101218][ T5857] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.104421][ T5857] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  342.118111][T24236] bond33 (unregistering): Released all slaves
[  342.215878][T24262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.225289][T24262] tipc: Resetting bearer <eth:syzkaller0>
[  342.235427][T24264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.240391][T24264] syzkaller0: entered promiscuous mode
[  342.242999][T24264] syzkaller0: entered allmulticast mode
[  342.254786][T24264] tipc: Resetting bearer <eth:syzkaller0>
[  342.262226][T24263] tipc: Resetting bearer <eth:syzkaller0>
[  342.282669][T24263] tipc: Disabling bearer <eth:syzkaller0>
[  342.380848][T24279] bond20: (slave veth17): Releasing active interface
[  342.384714][T24279] bond21: (slave bridge32): Releasing backup interface
[  342.651980][T24309] lo speed is unknown, defaulting to 1000
[  342.697090][T24309] lo speed is unknown, defaulting to 1000
[  342.699455][T24309] hsr0 speed is unknown, defaulting to 1000
[  342.788370][T24320] syzkaller0: entered promiscuous mode
[  342.790857][T24320] syzkaller0: entered allmulticast mode
[  342.795715][T24319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.813356][T24319] tipc: Resetting bearer <eth:syzkaller0>
[  342.820521][T24319] tipc: Disabling bearer <eth:syzkaller0>
[  342.870286][T24324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.343218][T24342] veth17: entered promiscuous mode
[  343.383256][T24345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.427434][T24350] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.471525][T24354] bond26: (slave bridge27): Enslaving as a backup interface with an up link
[  343.475333][T24354] tipc: Resetting bearer <eth:syzkaller0>
[  343.495309][T24358] mac80211_hwsim hwsim217 wlan0: entered promiscuous mode
[  343.497798][T24358] mac80211_hwsim hwsim217 wlan0: left allmulticast mode
[  343.500091][T24358] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  343.571549][T24364] ieee802154 phy0 wpan0: encryption failed: -22
[  343.687101][T24371] tipc: Resetting bearer <eth:syzkaller0>
[  343.872795][T24391] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  343.879362][T24394] tipc: Resetting bearer <eth:syzkaller0>
[  343.894657][T24391] 8021q: adding VLAN 0 to HW filter on device bond28
[  343.917867][T24400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.920626][T24400] syzkaller0: entered promiscuous mode
[  343.922523][T24400] syzkaller0: entered allmulticast mode
[  343.925610][T24400] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  343.930201][T24400] tipc: Resetting bearer <eth:syzkaller0>
[  343.933060][T24399] tipc: Resetting bearer <eth:syzkaller0>
[  343.938338][T24399] tipc: Disabling bearer <eth:syzkaller0>
[  344.036081][T24402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.057775][T24402] syzkaller0: entered promiscuous mode
[  344.060285][T24402] syzkaller0: entered allmulticast mode
[  344.067965][T24402] bond_slave_1: mtu greater than device maximum
[  344.072006][T24401] tipc: Resetting bearer <eth:syzkaller0>
[  344.095353][T24401] tipc: Disabling bearer <eth:syzkaller0>
[  344.318236][T24428] syzkaller0: entered promiscuous mode
[  344.320682][T24428] syzkaller0: entered allmulticast mode
[  344.698504][T24438] lo speed is unknown, defaulting to 1000
[  344.736236][T24439] lo speed is unknown, defaulting to 1000
[  344.744113][T24438] lo speed is unknown, defaulting to 1000
[  344.754599][T24438] hsr0 speed is unknown, defaulting to 1000
[  344.831478][T24439] lo speed is unknown, defaulting to 1000
[  344.834411][T24439] hsr0 speed is unknown, defaulting to 1000
[  345.130314][T24451] mac80211_hwsim hwsim118 wlan0: left allmulticast mode
[  345.133544][T24451] mac80211_hwsim hwsim118 wlan0: left promiscuous mode
[  345.164322][T24453] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  345.169382][T24453] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  345.205923][T24451] veth0_to_bond: left promiscuous mode
[  345.212677][T24451] veth1: left promiscuous mode
[  345.218887][   T47] lo speed is unknown, defaulting to 1000
[  345.221603][   T47] syz1: Port: 1 Link DOWN
[  345.233590][T24457] validate_nla: 12 callbacks suppressed
[  345.233602][T24457] netlink: 'syz.1.4811': attribute type 1 has an invalid length.
[  345.238868][T24458] netlink: 'syz.1.4811': attribute type 1 has an invalid length.
[  345.241689][T24457] netlink: 'syz.1.4811': attribute type 30 has an invalid length.
[  345.370500][T24471] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  345.377327][T24471] openvswitch: netlink: Flow actions attr not present in new flow.
[  345.382215][T24473] netlink: 'syz.1.4816': attribute type 4 has an invalid length.
[  345.391259][T24473] netlink: 'syz.1.4816': attribute type 4 has an invalid length.
[  345.437416][T24478] pim6reg1: entered promiscuous mode
[  345.439194][T24478] pim6reg1: entered allmulticast mode
[  345.452227][T24481] netlink: 'syz.2.4821': attribute type 30 has an invalid length.
[  345.459399][ T9498] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.462342][T24481] netlink: 'syz.2.4821': attribute type 30 has an invalid length.
[  345.463368][ T9498] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.468910][ T9498] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.473821][ T9498] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.479369][T24483] syzkaller1: entered promiscuous mode
[  345.481138][T24483] syzkaller1: entered allmulticast mode
[  345.610254][T24484] __nla_validate_parse: 39 callbacks suppressed
[  345.610269][T24484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4818'.
[  345.618675][T24484] syzkaller0: left promiscuous mode
[  345.620729][T24484] syzkaller0: left allmulticast mode
[  345.623005][T24484] tipc: Resetting bearer <eth:syzkaller0>
[  345.627984][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4822'.
[  345.669279][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4823'.
[  345.691821][T24494] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  345.719413][T24499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4825'.
[  345.744837][T24501] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  345.747507][T24501] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  345.964340][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'.
[  345.974410][T24517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'.
[  346.113883][T24519] syzkaller0: entered promiscuous mode
[  346.116360][T24519] syzkaller0: entered allmulticast mode
[  346.267665][T24524] syzkaller0: entered promiscuous mode
[  346.270082][T24524] syzkaller0: entered allmulticast mode
[  346.276327][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 210 seconds
[  346.280789][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 210 seconds
[  346.285336][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 210 seconds
[  346.290061][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 210 seconds
[  346.320056][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'.
[  346.329579][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'.
[  346.461792][T24535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'.
[  346.584099][T24545] netlink: 'syz.0.4840': attribute type 12 has an invalid length.
[  346.670229][T24555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4843'.
[  346.709112][T24555] dvmrp1: entered allmulticast mode
[  346.839607][T24564] syzkaller0: entered promiscuous mode
[  346.841409][T24564] syzkaller0: entered allmulticast mode
[  346.892425][T24572] netlink: 'syz.2.4849': attribute type 5 has an invalid length.
[  346.892467][T24573] netlink: 'syz.2.4849': attribute type 5 has an invalid length.
[  346.928639][T24576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.132874][T24580] dvmrp1: left allmulticast mode
[  347.199971][T24580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  347.909974][T24632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.913249][T24633] syzkaller0: entered promiscuous mode
[  347.918445][T24633] syzkaller0: entered allmulticast mode
[  347.925103][T24639] tipc: Resetting bearer <eth:syzkaller0>
[  347.932786][T24631] tipc: Resetting bearer <eth:syzkaller0>
[  347.937870][T24631] tipc: Disabling bearer <eth:syzkaller0>
[  348.074298][T24654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.089349][T24654] tipc: Disabling bearer <eth:syzkaller0>
[  348.154869][T24661] gretap0: entered promiscuous mode
[  348.179692][T24662] lo speed is unknown, defaulting to 1000
[  348.241635][T24662] lo speed is unknown, defaulting to 1000
[  348.244419][T24662] hsr0 speed is unknown, defaulting to 1000
[  348.262665][T24667] 8021q: adding VLAN 0 to HW filter on device bond29
[  348.279530][T24667] 8021q: adding VLAN 0 to HW filter on device bond29
[  348.282564][T24667] bond29: (slave vxcan1): The slave device specified does not support setting the MAC address
[  348.287714][T24667] bond29: (slave vxcan1): Error -95 calling set_mac_address
[  348.329861][T24667] erspan0: entered allmulticast mode
[  348.474879][T24681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.477241][T24682] syzkaller0: entered promiscuous mode
[  348.479187][T24682] syzkaller0: entered allmulticast mode
[  348.481680][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.484844][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.487720][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.490421][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.493266][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.496806][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.499578][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.502313][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.505066][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.508127][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.510842][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.513524][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.517027][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.519711][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.522411][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.525212][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.528279][T24681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.536035][T24681] tipc: Resetting bearer <eth:syzkaller0>
[  348.539543][T24681] tipc: Disabling bearer <eth:syzkaller0>
[  348.627063][T24691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.630210][T24691] syzkaller0: entered promiscuous mode
[  348.632269][T24691] syzkaller0: entered allmulticast mode
[  348.639754][T24691] tipc: Resetting bearer <eth:syzkaller0>
[  348.642868][T24690] tipc: Resetting bearer <eth:syzkaller0>
[  348.648196][T24690] tipc: Disabling bearer <eth:syzkaller0>
[  348.898863][ T5895] lo speed is unknown, defaulting to 1000
[  348.903919][ T5895] syz0: Port: 1 Link DOWN
[  348.908388][ T5895] lo speed is unknown, defaulting to 1000
[  348.919805][T24724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.922352][T24724] syzkaller0: entered promiscuous mode
[  348.924196][T24724] syzkaller0: entered allmulticast mode
[  348.947522][T24727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.950341][T24727] syzkaller0: entered promiscuous mode
[  348.952067][T24727] syzkaller0: entered allmulticast mode
[  348.954035][T24727] tipc: Resetting bearer <eth:syzkaller0>
[  348.957349][T24724] tipc: Resetting bearer <eth:syzkaller0>
[  348.960564][T24723] tipc: Resetting bearer <eth:syzkaller0>
[  348.963491][T24723] tipc: Disabling bearer <eth:syzkaller0>
[  349.057427][T24734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.060048][T24734] syzkaller0: entered promiscuous mode
[  349.061987][T24734] syzkaller0: entered allmulticast mode
[  349.068571][T24733] tipc: Resetting bearer <eth:syzkaller0>
[  349.072470][T24733] tipc: Disabling bearer <eth:syzkaller0>
[  349.334901][T24747] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  349.370331][T24749] syzkaller1: left promiscuous mode
[  349.373466][T24749] syzkaller1: left allmulticast mode
[  349.418622][T24753] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  349.425304][ T8219] lo speed is unknown, defaulting to 1000
[  349.427408][ T8219] syz1: Port: 1 Link ACTIVE
[  349.611139][T24772] vti2: entered promiscuous mode
[  349.730653][T24779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.732972][T24780] syzkaller0: entered promiscuous mode
[  349.734816][T24780] syzkaller0: entered allmulticast mode
[  349.748148][T24780] tipc: Resetting bearer <eth:syzkaller0>
[  349.753180][T24780] tipc: Disabling bearer <eth:syzkaller0>
[  350.067002][T24796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.069940][T24796] syzkaller0: entered promiscuous mode
[  350.071785][T24796] syzkaller0: entered allmulticast mode
[  350.081791][T24796] tipc: Resetting bearer <eth:syzkaller0>
[  350.086550][T24795] tipc: Resetting bearer <eth:syzkaller0>
[  350.091016][T24795] tipc: Disabling bearer <eth:syzkaller0>
[  350.158682][T24801] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.170065][T24801] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.223788][T24801] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.253600][T24807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  350.297551][T24801] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.307133][T24819] validate_nla: 10 callbacks suppressed
[  350.307142][T24819] netlink: 'syz.0.4915': attribute type 39 has an invalid length.
[  350.339663][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.348344][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.354589][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.361771][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.495206][T24852] lo speed is unknown, defaulting to 1000
[  350.531455][T24852] lo speed is unknown, defaulting to 1000
[  350.533633][T24852] hsr0 speed is unknown, defaulting to 1000
[  350.561683][T24859] lo speed is unknown, defaulting to 1000
[  350.609070][T24859] lo speed is unknown, defaulting to 1000
[  350.611245][T24859] hsr0 speed is unknown, defaulting to 1000
[  350.642154][T24852] netlink: 'syz.0.4921': attribute type 13 has an invalid length.
[  350.644669][T24852] netlink: 'syz.0.4921': attribute type 17 has an invalid length.
[  350.658663][T24852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  350.720861][T24873] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.747643][T24878] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.750916][T24876] netlink: 'syz.0.4926': attribute type 4 has an invalid length.
[  350.755158][   T47] lo speed is unknown, defaulting to 1000
[  350.757905][   T47] syz1: Port: 1 Link DOWN
[  350.760093][T24876] netlink: 'syz.0.4926': attribute type 4 has an invalid length.
[  350.776980][   T47] lo speed is unknown, defaulting to 1000
[  350.780974][   T47] syz1: Port: 1 Link ACTIVE
[  350.799816][T24873] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.848605][T24873] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.871751][T24882] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  350.923771][T24873] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  350.942278][T24891] __nla_validate_parse: 33 callbacks suppressed
[  350.942291][T24891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4931'.
[  350.952069][T24891] vlan0: entered promiscuous mode
[  350.972230][T24898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4933'.
[  350.988351][T24898] bridge29: port 1(veth13) entered blocking state
[  350.995676][T24898] bridge29: port 1(veth13) entered disabled state
[  350.997882][T24898] veth13: entered allmulticast mode
[  351.005220][T24898] veth13: entered promiscuous mode
[  351.024062][T24898] bridge29: port 2(veth0_to_bond) entered blocking state
[  351.027898][T24898] bridge29: port 2(veth0_to_bond) entered disabled state
[  351.030382][T24898] veth0_to_bond: entered allmulticast mode
[  351.032845][T24898] veth0_to_bond: entered promiscuous mode
[  351.274441][T24908] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4937'.
[  351.421683][T24923] netlink: 'syz.1.4940': attribute type 10 has an invalid length.
[  351.446113][T24923] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.449414][T24923] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  351.510945][ T9498] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  351.517320][ T9498] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  351.522373][ T9498] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  351.529062][ T9498] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  351.532752][T24874] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.578272][T24874] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.627982][T24874] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.667846][T24874] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.027950][T24941] lo speed is unknown, defaulting to 1000
[  352.060240][T24941] lo speed is unknown, defaulting to 1000
[  352.062461][T24941] hsr0 speed is unknown, defaulting to 1000
[  352.101438][T24946] netlink: 'syz.0.4943': attribute type 10 has an invalid length.
[  352.147903][T24946] netlink: 844 bytes leftover after parsing attributes in process `syz.0.4943'.
[  352.258017][T24953] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.319660][T24957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.370928][T24967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4952'.
[  352.400003][T24969] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.564120][T24989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.571020][T24989] syzkaller0: entered promiscuous mode
[  352.573428][T24989] syzkaller0: entered allmulticast mode
[  352.580132][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.582967][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.587239][T24989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  352.589108][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.593555][T24989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4957'.
[  352.596448][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  352.644049][T24999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.647351][T24999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4958'.
[  352.657701][T25015] tipc: Resetting bearer <eth:syzkaller0>
[  352.662192][T25017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.664947][T25017] syzkaller0: entered promiscuous mode
[  352.670993][T25017] syzkaller0: entered allmulticast mode
[  352.683106][T25014] tipc: Resetting bearer <eth:syzkaller0>
[  352.688306][T25014] tipc: Disabling bearer <eth:syzkaller0>
[  352.693134][T25019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.038406][T25027] tipc: Resetting bearer <eth:syzkaller0>
[  353.041507][T25027] bond26: (slave bridge27): Releasing backup interface
[  353.098068][T25030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4964'.
[  353.102004][T25030] netlink: 'syz.1.4964': attribute type 10 has an invalid length.
[  353.124768][T25030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.128062][T25030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.390360][T24988] tipc: Resetting bearer <eth:syzkaller0>
[  353.393513][T24988] tipc: Disabling bearer <eth:syzkaller0>
[  353.465799][T25035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4965'.
[  353.552607][ T5895] lo speed is unknown, defaulting to 1000
[  353.554490][ T5895] syz1: Port: 1 Link DOWN
[  353.771252][T25061] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.797671][T25064] netlink: 'syz.0.4973': attribute type 1 has an invalid length.
[  353.797914][T25061] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.801013][T25064] netlink: 'syz.0.4973': attribute type 1 has an invalid length.
[  353.830091][T25064] 8021q: adding VLAN 0 to HW filter on device bond33
[  353.842471][T25064] bond33: (slave wlan0): Enslaving as an active interface with a down link
[  353.851414][T25068] lo speed is unknown, defaulting to 1000
[  353.870520][T25061] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.894286][T25068] lo speed is unknown, defaulting to 1000
[  353.897182][T25068] hsr0 speed is unknown, defaulting to 1000
[  353.924125][T25061] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  353.975038][T25079] gretap0: refused to change device tx_queue_len
[  353.977704][T25079] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  354.007183][ T9498] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.043432][ T9498] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.047121][ T9498] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.072965][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.093284][T25085] syzkaller0: entered promiscuous mode
[  354.095313][T25085] syzkaller0: entered allmulticast mode
[  355.483353][T25149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.692200][T25172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.697391][T25171] tipc: Disabling bearer <eth:syzkaller0>
[  355.755057][T25175] macsec0: entered allmulticast mode
[  355.758460][T25175] ip6gretap0: entered allmulticast mode
[  355.786895][T25177] syz0: rxe_newlink: already configured on lo
[  355.794850][T25177] gretap0: left promiscuous mode
[  355.799888][T25177] erspan0: left allmulticast mode
[  355.804390][T25177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  355.815651][ T8219] lo speed is unknown, defaulting to 1000
[  355.825680][ T8219] syz0: Port: 1 Link ACTIVE
[  355.827502][ T8219] lo speed is unknown, defaulting to 1000
[  355.851875][T25190] validate_nla: 5 callbacks suppressed
[  355.851885][T25190] netlink: 'syz.2.5009': attribute type 10 has an invalid length.
[  355.858624][T25190] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  355.861809][T25190] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  355.891588][T25192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.897362][T25191] tipc: Disabling bearer <eth:syzkaller0>
[  355.910000][T25193] tipc: Resetting bearer <eth:syzkaller0>
[  355.912005][T25193] syzkaller0: left promiscuous mode
[  355.913754][T25193] syzkaller0: left allmulticast mode
[  355.921327][T25193] mac80211_hwsim hwsim217 wlan0: left promiscuous mode
[  355.924350][T25193] ip6tnl5: left promiscuous mode
[  355.927848][T25193] ip6tnl5: left allmulticast mode
[  355.930325][T25193] bond25: left promiscuous mode
[  356.009477][T25210] __nla_validate_parse: 36 callbacks suppressed
[  356.009488][T25210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5012'.
[  356.015766][T25210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5012'.
[  356.697611][T25233] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.701541][T25233] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.706970][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.710666][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.718529][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.718546][ T5857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  356.722237][T25233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'.
[  356.730854][T25237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5017'.
[  356.734290][ T5857] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  356.740539][T25237] gtp9: entered promiscuous mode
[  356.742399][T25237] gtp9: entered allmulticast mode
[  356.744483][ T5857] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  356.749155][ T5857] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.789895][T25240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5018'.
[  356.922314][T25251] netlink: 'syz.2.5021': attribute type 10 has an invalid length.
[  356.950593][T25257] netlink: 'syz.0.5023': attribute type 12 has an invalid length.
[  357.078514][T25270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.107287][T25270] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  357.110376][T25270] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  357.169498][T25278] veth0_to_bond: left allmulticast mode
[  357.171678][T25278] veth0_to_bond: left promiscuous mode
[  357.173914][T25278] bridge29: port 2(veth0_to_bond) entered disabled state
[  357.179553][T25278] bond33: (slave wlan0): Releasing active interface
[  357.183390][T25278] veth13: left allmulticast mode
[  357.185567][T25278] veth13: left promiscuous mode
[  357.187290][T25278] bridge29: port 1(veth13) entered disabled state
[  358.059580][T25292] syzkaller0: entered promiscuous mode
[  358.068418][T25292] syzkaller0: entered allmulticast mode
[  358.071222][T25290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.083689][T25290] tipc: Resetting bearer <eth:syzkaller0>
[  358.130665][T25290] tipc: Disabling bearer <eth:syzkaller0>
[  358.197563][T25296] mac80211_hwsim hwsim118 wlan0: entered promiscuous mode
[  358.201141][T25296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  358.206556][T25312] netlink: 'syz.2.5036': attribute type 9 has an invalid length.
[  358.264778][T25320] openvswitch: netlink: IP tunnel dst address not specified
[  358.271824][T25322] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.302823][T25326] netlink: 'syz.1.5041': attribute type 1 has an invalid length.
[  358.311430][T25326] 8021q: adding VLAN 0 to HW filter on device bond27
[  358.314513][T25322] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.326445][T25328] mac80211_hwsim hwsim118 wlan0: left promiscuous mode
[  358.329959][T25328] vlan0: left promiscuous mode
[  358.333009][T25328] vti2: left promiscuous mode
[  358.341309][T25326] bond27: entered promiscuous mode
[  358.365329][T25322] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.391653][T25336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.401305][T25337] syzkaller0: entered promiscuous mode
[  358.403585][T25337] syzkaller0: entered allmulticast mode
[  358.409613][T25337] tipc: Resetting bearer <eth:syzkaller0>
[  358.413062][T25322] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  358.421779][T25336] netem: change failed
[  358.439853][T25340] netlink: 'syz.1.5043': attribute type 13 has an invalid length.
[  358.443316][T25340] netlink: 'syz.1.5043': attribute type 17 has an invalid length.
[  358.458183][T25340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  358.464018][T25339] lo speed is unknown, defaulting to 1000
[  358.474685][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  358.481918][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  358.491337][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  358.494540][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  358.522480][T25339] lo speed is unknown, defaulting to 1000
[  358.524727][T25339] hsr0 speed is unknown, defaulting to 1000
[  358.664891][T25352] bond0: left promiscuous mode
[  358.667243][T25352] bond0: left allmulticast mode
[  358.672485][T25352] veth19: left promiscuous mode
[  358.677002][T25352] ip6tnl5: left promiscuous mode
[  358.678849][T25352] ip6tnl5: left allmulticast mode
[  358.683098][T25352] bond27: left promiscuous mode
[  358.692793][T25352] ip6gretap0: left allmulticast mode
[  358.694672][T25352] macsec0: left allmulticast mode
[  358.699687][T25352] gtp9: left promiscuous mode
[  358.701435][T25352] gtp9: left allmulticast mode
[  358.706097][ T5895] lo speed is unknown, defaulting to 1000
[  358.708070][ T5895] syz0: Port: 1 Link DOWN
[  358.712449][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.715201][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.718649][ T5895] lo speed is unknown, defaulting to 1000
[  358.720817][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.723686][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.798955][T25362] netlink: 'syz.2.5048': attribute type 10 has an invalid length.
[  358.890572][T25370] netlink: 'syz.2.5051': attribute type 13 has an invalid length.
[  358.996972][T25377] netlink: 'syz.2.5053': attribute type 9 has an invalid length.
[  359.003770][T25377] macvlan9: entered promiscuous mode
[  359.005736][T25377] macvlan9: entered allmulticast mode
[  359.007452][T25377] hsr0: entered allmulticast mode
[  359.009054][T25377] hsr_slave_0: entered allmulticast mode
[  359.083744][T25385] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  359.086844][T25385] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  359.155136][T25397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.162722][T25397] syzkaller0: entered promiscuous mode
[  359.169401][T25397] syzkaller0: entered allmulticast mode
[  359.179344][T25397] tipc: Resetting bearer <eth:syzkaller0>
[  359.185686][T25396] tipc: Resetting bearer <eth:syzkaller0>
[  359.192837][T25396] tipc: Disabling bearer <eth:syzkaller0>
[  359.430076][T25404] sctp: [Deprecated]: syz.0.5061 (pid 25404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.430076][T25404] Use struct sctp_sack_info instead
[  359.442248][T25404] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  359.448182][T25404] CPU: 0 UID: 0 PID: 25404 Comm: syz.0.5061 Not tainted syzkaller #0 PREEMPT(full) 
[  359.448201][T25404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  359.448210][T25404] Call Trace:
[  359.448215][T25404]  <TASK>
[  359.448221][T25404]  dump_stack_lvl+0x189/0x250
[  359.448242][T25404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.448257][T25404]  ? __pfx__printk+0x10/0x10
[  359.448274][T25404]  ? kernfs_root+0x1c/0x230
[  359.448289][T25404]  ? kernfs_path_from_node+0x2f/0x290
[  359.448302][T25404]  ? kernfs_path_from_node+0x250/0x290
[  359.448316][T25404]  ? kernfs_path_from_node+0x2f/0x290
[  359.448331][T25404]  sysfs_warn_dup+0x8e/0xa0
[  359.448345][T25404]  sysfs_do_create_link_sd+0xc0/0x110
[  359.448360][T25404]  device_add_class_symlinks+0x1cf/0x240
[  359.448374][T25404]  device_add+0x475/0xb50
[  359.448388][T25404]  wiphy_register+0x1ba6/0x28d0
[  359.448410][T25404]  ? __pfx_wiphy_register+0x10/0x10
[  359.448426][T25404]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  359.448441][T25404]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  359.448464][T25404]  ieee80211_register_hw+0x3484/0x4100
[  359.448484][T25404]  ? ieee80211_register_hw+0x14a1/0x4100
[  359.448502][T25404]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  359.448517][T25404]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  359.448536][T25404]  ? __hrtimer_setup+0x187/0x210
[  359.448548][T25404]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  359.448567][T25404]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  359.448592][T25404]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  359.448607][T25404]  ? trace_kmalloc+0x1f/0xd0
[  359.448622][T25404]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  359.448640][T25404]  ? kstrndup+0xbf/0x160
[  359.448656][T25404]  hwsim_new_radio_nl+0xea4/0x1b10
[  359.448672][T25404]  ? __pfx___nla_validate_parse+0x10/0x10
[  359.448721][T25404]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  359.448743][T25404]  ? __nla_parse+0x40/0x60
[  359.448764][T25404]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  359.448782][T25404]  genl_family_rcv_msg_doit+0x215/0x300
[  359.448800][T25404]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  359.448819][T25404]  ? bpf_lsm_capable+0x9/0x20
[  359.448837][T25404]  ? security_capable+0x7e/0x2e0
[  359.448857][T25404]  genl_rcv_msg+0x60e/0x790
[  359.448872][T25404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  359.448884][T25404]  ? __kasan_slab_alloc+0x6c/0x80
[  359.448901][T25404]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  359.448916][T25404]  ? __netlink_lookup+0xbd/0x810
[  359.448927][T25404]  ? rcu_is_watching+0x15/0xb0
[  359.448948][T25404]  netlink_rcv_skb+0x208/0x470
[  359.448966][T25404]  ? __pfx_genl_rcv_msg+0x10/0x10
[  359.448980][T25404]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  359.449002][T25404]  ? lock_release+0x4b/0x3e0
[  359.449023][T25404]  ? down_read+0x1ad/0x2e0
[  359.449035][T25404]  genl_rcv+0x28/0x40
[  359.449047][T25404]  netlink_unicast+0x82f/0x9e0
[  359.449067][T25404]  ? __pfx_netlink_unicast+0x10/0x10
[  359.449083][T25404]  ? netlink_sendmsg+0x642/0xb30
[  359.449100][T25404]  ? skb_put+0x11b/0x210
[  359.449112][T25404]  netlink_sendmsg+0x805/0xb30
[  359.449131][T25404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.449149][T25404]  ? aa_sock_msg_perm+0xf1/0x1d0
[  359.449161][T25404]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  359.449193][T25404]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.449211][T25404]  __sock_sendmsg+0x21c/0x270
[  359.449227][T25404]  ____sys_sendmsg+0x505/0x830
[  359.449240][T25404]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.449255][T25404]  ? import_iovec+0x74/0xa0
[  359.449269][T25404]  ___sys_sendmsg+0x21f/0x2a0
[  359.449282][T25404]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.449297][T25404]  ? futex_wake+0x4b2/0x560
[  359.449322][T25404]  ? __fget_files+0x2a/0x420
[  359.449339][T25404]  ? __fget_files+0x3a0/0x420
[  359.449360][T25404]  __x64_sys_sendmsg+0x19b/0x260
[  359.449372][T25404]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.449387][T25404]  ? rcu_is_watching+0x15/0xb0
[  359.449401][T25404]  ? rcu_is_watching+0x15/0xb0
[  359.449414][T25404]  do_syscall_64+0xfa/0x3b0
[  359.449432][T25404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.449445][T25404]  ? exc_page_fault+0x9f/0xf0
[  359.449461][T25404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.449473][T25404] RIP: 0033:0x7fd49e38ebe9
[  359.449486][T25404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.449498][T25404] RSP: 002b:00007fd49f20b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.449513][T25404] RAX: ffffffffffffffda RBX: 00007fd49e5b5fa0 RCX: 00007fd49e38ebe9
[  359.449523][T25404] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  359.449532][T25404] RBP: 00007fd49e411e19 R08: 0000000000000000 R09: 0000000000000000
[  359.449541][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.449549][T25404] R13: 00007fd49e5b6038 R14: 00007fd49e5b5fa0 R15: 00007ffe341b2ff8
[  359.449564][T25404]  </TASK>
[  359.728743][T25414] syzkaller0: entered promiscuous mode
[  359.730850][T25414] syzkaller0: entered allmulticast mode
[  359.752437][T25421] batadv_slave_0: entered promiscuous mode
[  359.800928][T25425] 8021q: adding VLAN 0 to HW filter on device bond34
[  359.806001][T25425] 8021q: adding VLAN 0 to HW filter on device bond34
[  359.808449][T25425] bond34: (slave vcan0): The slave device specified does not support setting the MAC address
[  359.812259][T25425] bond34: (slave vcan0): Error -95 calling set_mac_address
[  359.863086][T25427] veth15: entered promiscuous mode
[  359.940616][T25433] lo speed is unknown, defaulting to 1000
[  359.942806][T25436] erspan0: entered promiscuous mode
[  359.944986][T25436] erspan0: left promiscuous mode
[  360.003725][T25438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.009825][ T5908] lo speed is unknown, defaulting to 1000
[  360.012000][ T5908] syz0: Port: 1 Link ACTIVE
[  360.013589][ T5908] lo speed is unknown, defaulting to 1000
[  360.018846][T25433] lo speed is unknown, defaulting to 1000
[  360.021146][T25433] hsr0 speed is unknown, defaulting to 1000
[  360.187842][T25448] vlan1: entered allmulticast mode
[  360.189962][T25448] mac80211_hwsim hwsim250 wlan1: entered allmulticast mode
[  360.210528][T25454] bridge37: entered promiscuous mode
[  360.212469][T25454] macsec1: entered promiscuous mode
[  360.214657][T25454] macsec1: entered allmulticast mode
[  360.216989][T25454] bridge37: entered allmulticast mode
[  360.219130][T25454] bridge37: port 1(macsec1) entered blocking state
[  360.221238][T25454] bridge37: port 1(macsec1) entered disabled state
[  360.224100][T25454] bridge37: left allmulticast mode
[  360.225900][T25454] bridge37: left promiscuous mode
[  360.495332][T25470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.499334][T25480] tipc: Resetting bearer <eth:syzkaller0>
[  360.503023][T25470] syzkaller0: entered promiscuous mode
[  360.505212][T25470] syzkaller0: entered allmulticast mode
[  360.510889][T25470] tipc: Resetting bearer <eth:syzkaller0>
[  360.757115][T25483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.787602][T25483] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  360.821373][T25482] tipc: Disabling bearer <eth:syzkaller0>
[  360.876152][   T33] audit: type=1800 audit(1756215093.338:6): pid=25489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5083" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=8827 res=0 errno=0
[  360.928713][T25493] validate_nla: 5 callbacks suppressed
[  360.928727][T25493] netlink: 'syz.0.5084': attribute type 4 has an invalid length.
[  360.934218][   T47] lo speed is unknown, defaulting to 1000
[  360.936554][   T47] syz1: Port: 1 Link ACTIVE
[  361.222488][T25469] tipc: Resetting bearer <eth:syzkaller0>
[  361.226764][T25469] tipc: Disabling bearer <eth:syzkaller0>
[  361.348854][T25508] tipc: Resetting bearer <eth:syzkaller0>
[  361.379456][T25506] __nla_validate_parse: 20 callbacks suppressed
[  361.379466][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5087'.
[  361.436214][T25515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5086'.
[  361.843448][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5088'.
[  362.018887][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5089'.
[  362.161037][T25531] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5092'.
[  362.196873][T25535] netlink: 'syz.2.5093': attribute type 4 has an invalid length.
[  362.209175][ T5908] lo speed is unknown, defaulting to 1000
[  362.211134][ T5908] syz0: Port: 1 Link DOWN
[  362.212669][T25535] netlink: 'syz.2.5093': attribute type 4 has an invalid length.
[  362.217374][ T5908] lo speed is unknown, defaulting to 1000
[  362.227720][   T47] lo speed is unknown, defaulting to 1000
[  362.229703][   T47] syz0: Port: 1 Link ACTIVE
[  362.255056][T25545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5095'.
[  362.281030][T25536] batadv_slave_0: left promiscuous mode
[  362.284043][T25536] tipc: Resetting bearer <eth:syzkaller0>
[  362.288135][T25536] syzkaller0: left promiscuous mode
[  362.290415][T25536] syzkaller0: left allmulticast mode
[  362.303940][T25536] bond27: left promiscuous mode
[  362.307989][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.310993][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.314178][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.322413][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  362.369969][T25555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.375961][T25555] syzkaller0: entered promiscuous mode
[  362.379918][T25555] syzkaller0: entered allmulticast mode
[  362.391330][T25553] vlan0: entered promiscuous mode
[  362.393470][T25553] veth1_to_bridge: entered promiscuous mode
[  362.398075][T25554] tipc: Resetting bearer <eth:syzkaller0>
[  362.404814][T25554] tipc: Disabling bearer <eth:syzkaller0>
[  362.490092][T25572] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  362.512112][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5103'.
[  362.517221][T25575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'.
[  362.521003][T25575] netlink: 'syz.0.5103': attribute type 13 has an invalid length.
[  362.543587][T25580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.548632][T25579] syzkaller0: entered promiscuous mode
[  362.550848][T25579] syzkaller0: entered allmulticast mode
[  362.559874][T25580] tipc: Resetting bearer <eth:syzkaller0>
[  362.570516][T25578] tipc: Resetting bearer <eth:syzkaller0>
[  362.582095][T25578] tipc: Disabling bearer <eth:syzkaller0>
[  362.589823][T25575] netem: incorrect gi model size
[  362.592183][T25575] netem: change failed
[  362.644775][T25589] ip6gre6: entered allmulticast mode
[  362.649262][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'.
[  362.652266][T25590] netlink: 'syz.2.5107': attribute type 22 has an invalid length.
[  362.654944][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'.
[  362.662943][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  362.669632][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  362.678217][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  362.684474][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  362.932382][T25620] netlink: 'syz.1.5117': attribute type 1 has an invalid length.
[  362.939613][T25620] netlink: 'syz.1.5117': attribute type 1 has an invalid length.
[  362.943315][T25619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.948196][T25621] syzkaller0: entered promiscuous mode
[  362.950586][T25621] syzkaller0: entered allmulticast mode
[  362.967826][T25621] syzkaller0: left allmulticast mode
[  362.987199][T25621] tipc: Resetting bearer <eth:syzkaller0>
[  362.992747][T25621] tipc: Disabling bearer <eth:syzkaller0>
[  363.041048][T25631] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  363.057462][T25631] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  363.063302][T25633] netlink: 'syz.1.5122': attribute type 4 has an invalid length.
[  363.082036][T25633] lo speed is unknown, defaulting to 1000
[  363.186708][T25633] lo speed is unknown, defaulting to 1000
[  363.189123][T25633] hsr0 speed is unknown, defaulting to 1000
[  363.210218][T25636] netlink: 'syz.1.5122': attribute type 14 has an invalid length.
[  363.224160][T25636] netlink: 'syz.1.5122': attribute type 4 has an invalid length.
[  363.360349][T25643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.362920][T25643] syzkaller0: entered promiscuous mode
[  363.364773][T25643] syzkaller0: entered allmulticast mode
[  363.379054][T25643] tipc: Resetting bearer <eth:syzkaller0>
[  363.383543][T25641] tipc: Resetting bearer <eth:syzkaller0>
[  363.389834][T25641] tipc: Disabling bearer <eth:syzkaller0>
[  363.412780][T25656] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.415718][T25656] syzkaller0: entered promiscuous mode
[  363.417472][T25656] syzkaller0: entered allmulticast mode
[  363.419487][T25656] tipc: Resetting bearer <eth:syzkaller0>
[  363.442404][T25658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  363.455089][T25662] 8021q: adding VLAN 0 to HW filter on device bond31
[  363.509975][T25668] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  363.515154][T25668] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  363.545425][T25677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.575418][T25677] syzkaller0: entered promiscuous mode
[  363.577929][T25677] syzkaller0: entered allmulticast mode
[  363.586116][T25677] tipc: Resetting bearer <eth:syzkaller0>
[  363.589929][T25676] tipc: Resetting bearer <eth:syzkaller0>
[  363.594591][T25676] tipc: Disabling bearer <eth:syzkaller0>
[  363.710909][T25690] bridge24: entered allmulticast mode
[  363.718228][T25690] dvmrp1: entered allmulticast mode
[  363.726804][T25689] bridge24: left allmulticast mode
[  363.779358][T25696] IPVS: Scheduler module ip_vs_sip not found
[  363.782489][T25696] IPVS: length: 8 != 163281662240
[  363.850602][T25707] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  363.853398][T25707] CPU: 0 UID: 0 PID: 25707 Comm: syz.1.5146 Not tainted syzkaller #0 PREEMPT(full) 
[  363.853410][T25707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.853416][T25707] Call Trace:
[  363.853419][T25707]  <TASK>
[  363.853423][T25707]  dump_stack_lvl+0x189/0x250
[  363.853436][T25707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.853444][T25707]  ? __pfx__printk+0x10/0x10
[  363.853453][T25707]  ? kernfs_root+0x1c/0x230
[  363.853462][T25707]  ? kernfs_path_from_node+0x2f/0x290
[  363.853470][T25707]  ? kernfs_path_from_node+0x250/0x290
[  363.853477][T25707]  ? kernfs_path_from_node+0x2f/0x290
[  363.853485][T25707]  sysfs_warn_dup+0x8e/0xa0
[  363.853493][T25707]  sysfs_do_create_link_sd+0xc0/0x110
[  363.853502][T25707]  device_add_class_symlinks+0x1cf/0x240
[  363.853511][T25707]  device_add+0x475/0xb50
[  363.853518][T25707]  wiphy_register+0x1ba6/0x28d0
[  363.853530][T25707]  ? __pfx_wiphy_register+0x10/0x10
[  363.853544][T25707]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  363.853557][T25707]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  363.853574][T25707]  ieee80211_register_hw+0x3484/0x4100
[  363.853584][T25707]  ? ieee80211_register_hw+0x14a1/0x4100
[  363.853593][T25707]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  363.853601][T25707]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  363.853611][T25707]  ? __hrtimer_setup+0x187/0x210
[  363.853619][T25707]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  363.853630][T25707]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  363.853643][T25707]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  363.853651][T25707]  ? trace_kmalloc+0x1f/0xd0
[  363.853660][T25707]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  363.853709][T25707]  ? kstrndup+0xbf/0x160
[  363.853720][T25707]  hwsim_new_radio_nl+0xea4/0x1b10
[  363.853729][T25707]  ? __pfx___nla_validate_parse+0x10/0x10
[  363.853743][T25707]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  363.853754][T25707]  ? __nla_parse+0x40/0x60
[  363.853770][T25707]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  363.853786][T25707]  genl_family_rcv_msg_doit+0x215/0x300
[  363.853801][T25707]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  363.853811][T25707]  ? bpf_lsm_capable+0x9/0x20
[  363.853821][T25707]  ? security_capable+0x7e/0x2e0
[  363.853832][T25707]  genl_rcv_msg+0x60e/0x790
[  363.853841][T25707]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.853848][T25707]  ? __kasan_slab_alloc+0x6c/0x80
[  363.853857][T25707]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  363.853865][T25707]  ? __netlink_lookup+0xbd/0x810
[  363.853871][T25707]  ? rcu_is_watching+0x15/0xb0
[  363.853879][T25707]  netlink_rcv_skb+0x208/0x470
[  363.853889][T25707]  ? __pfx_genl_rcv_msg+0x10/0x10
[  363.853897][T25707]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  363.853908][T25707]  ? lock_release+0x4b/0x3e0
[  363.853921][T25707]  ? down_read+0x1ad/0x2e0
[  363.853927][T25707]  genl_rcv+0x28/0x40
[  363.853934][T25707]  netlink_unicast+0x82f/0x9e0
[  363.853944][T25707]  ? __pfx_netlink_unicast+0x10/0x10
[  363.853953][T25707]  ? netlink_sendmsg+0x642/0xb30
[  363.853963][T25707]  ? skb_put+0x11b/0x210
[  363.853970][T25707]  netlink_sendmsg+0x805/0xb30
[  363.853982][T25707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.853992][T25707]  ? aa_sock_msg_perm+0xf1/0x1d0
[  363.853999][T25707]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  363.854007][T25707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.854017][T25707]  __sock_sendmsg+0x21c/0x270
[  363.854027][T25707]  ____sys_sendmsg+0x505/0x830
[  363.854035][T25707]  ? __pfx_____sys_sendmsg+0x10/0x10
[  363.854043][T25707]  ? import_iovec+0x74/0xa0
[  363.854052][T25707]  ___sys_sendmsg+0x21f/0x2a0
[  363.854059][T25707]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.854067][T25707]  ? futex_wake+0x4b2/0x560
[  363.854080][T25707]  ? __fget_files+0x2a/0x420
[  363.854091][T25707]  ? __fget_files+0x3a0/0x420
[  363.854102][T25707]  __x64_sys_sendmsg+0x19b/0x260
[  363.854110][T25707]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.854118][T25707]  ? rcu_is_watching+0x15/0xb0
[  363.854126][T25707]  ? rcu_is_watching+0x15/0xb0
[  363.854133][T25707]  do_syscall_64+0xfa/0x3b0
[  363.854145][T25707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.854152][T25707]  ? exc_page_fault+0x9f/0xf0
[  363.854161][T25707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.854168][T25707] RIP: 0033:0x7f2c2238ebe9
[  363.854176][T25707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.854183][T25707] RSP: 002b:00007f2c231fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.854192][T25707] RAX: ffffffffffffffda RBX: 00007f2c225b5fa0 RCX: 00007f2c2238ebe9
[  363.854198][T25707] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  363.854203][T25707] RBP: 00007f2c22411e19 R08: 0000000000000000 R09: 0000000000000000
[  363.854208][T25707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.854212][T25707] R13: 00007f2c225b6038 R14: 00007f2c225b5fa0 R15: 00007ffeb89e4788
[  363.854220][T25707]  </TASK>
[  364.318124][T25731] veth15: left promiscuous mode
[  364.323995][ T8219] lo speed is unknown, defaulting to 1000
[  364.326103][ T8219] syz1: Port: 1 Link DOWN
[  364.996556][T25739] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  365.336027][T25751] hsr0: left allmulticast mode
[  365.337774][T25751] hsr_slave_0: left allmulticast mode
[  365.339876][T25751] macvlan9: left promiscuous mode
[  365.341651][T25751] macvlan9: left allmulticast mode
[  365.351786][   T47] lo speed is unknown, defaulting to 1000
[  365.353785][   T47] syz0: Port: 1 Link DOWN
[  365.355575][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.358415][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.361449][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.364308][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  365.367260][   T47] lo speed is unknown, defaulting to 1000
[  365.939716][T25758] validate_nla: 6 callbacks suppressed
[  365.939733][T25758] netlink: 'syz.1.5159': attribute type 10 has an invalid length.
[  366.072384][T25770] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.204101][T25782] netlink: 'syz.1.5166': attribute type 29 has an invalid length.
[  366.207194][T25783] netlink: 'syz.1.5166': attribute type 1 has an invalid length.
[  366.212761][T25781] netlink: 'syz.1.5166': attribute type 29 has an invalid length.
[  366.223258][T25781] netlink: 'syz.1.5166': attribute type 29 has an invalid length.
[  366.227327][T25783] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  366.227932][T25781] netlink: 'syz.1.5166': attribute type 29 has an invalid length.
[  366.228261][T25786] netlink: 'syz.2.5167': attribute type 3 has an invalid length.
[  366.231530][T25781] netlink: 'syz.1.5166': attribute type 29 has an invalid length.
[  366.233816][T25786] netlink: 'syz.2.5167': attribute type 2 has an invalid length.
[  366.233829][T25786] netlink: 'syz.2.5167': attribute type 2 has an invalid length.
[  366.362727][T25798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.366132][T25798] syzkaller0: entered promiscuous mode
[  366.368616][T25798] syzkaller0: entered allmulticast mode
[  366.373477][T25798] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  366.389190][T25797] tipc: Resetting bearer <eth:syzkaller0>
[  366.721313][T25797] tipc: Disabling bearer <eth:syzkaller0>
[  366.775981][T25810] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  366.915425][T25816] __nla_validate_parse: 32 callbacks suppressed
[  366.918464][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'.
[  366.922354][T25816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'.
[  366.937634][T25840] lo speed is unknown, defaulting to 1000
[  367.017621][T25846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.024542][   T47] lo speed is unknown, defaulting to 1000
[  367.028794][T25840] lo speed is unknown, defaulting to 1000
[  367.031118][T25840] hsr0 speed is unknown, defaulting to 1000
[  367.033341][   T47] syz0: Port: 1 Link ACTIVE
[  367.036562][   T47] lo speed is unknown, defaulting to 1000
[  367.143964][ T8219] lo speed is unknown, defaulting to 1000
[  367.146281][ T8219] syz0: Port: 1 Link DOWN
[  367.147814][ T8219] lo speed is unknown, defaulting to 1000
[  367.188729][T25855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5184'.
[  367.253862][T25855] lo speed is unknown, defaulting to 1000
[  367.296631][T25865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.299970][T25865] syzkaller0: entered promiscuous mode
[  367.302401][T25865] syzkaller0: entered allmulticast mode
[  367.307513][T25865] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  367.318033][T25865] tipc: Resetting bearer <eth:syzkaller0>
[  367.333214][T25864] tipc: Resetting bearer <eth:syzkaller0>
[  367.342032][T25864] tipc: Disabling bearer <eth:syzkaller0>
[  367.362275][T25855] lo speed is unknown, defaulting to 1000
[  367.365368][T25855] hsr0 speed is unknown, defaulting to 1000
[  367.435201][T25872] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5188'.
[  367.478487][T25875] pim6reg1: entered allmulticast mode
[  367.842295][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5194'.
[  367.856770][T25901] bridge0: port 1(veth1) entered blocking state
[  367.858961][T25901] bridge0: port 1(veth1) entered disabled state
[  367.861256][T25901] veth1: entered allmulticast mode
[  367.863641][T25901] veth1: entered promiscuous mode
[  367.867457][T25901] bridge0: port 2(veth0_to_bond) entered blocking state
[  367.870100][T25901] bridge0: port 2(veth0_to_bond) entered disabled state
[  367.872873][T25901] veth0_to_bond: entered allmulticast mode
[  367.875420][T25901] veth0_to_bond: entered promiscuous mode
[  367.881704][T25901] vlan1: entered allmulticast mode
[  367.883614][T25901] bridge0: port 3(vlan1) entered blocking state
[  367.886208][T25901] bridge0: port 3(vlan1) entered disabled state
[  367.888953][T25901] vlan1: entered promiscuous mode
[  368.029048][T25895] syz.0.5193: vmalloc error: size 3522560, failed to allocated page array size 6880, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  368.036339][T25895] CPU: 0 UID: 0 PID: 25895 Comm: syz.0.5193 Not tainted syzkaller #0 PREEMPT(full) 
[  368.036359][T25895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.036367][T25895] Call Trace:
[  368.036371][T25895]  <TASK>
[  368.036377][T25895]  dump_stack_lvl+0x189/0x250
[  368.036398][T25895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.036412][T25895]  ? __pfx__printk+0x10/0x10
[  368.036427][T25895]  ? lock_release+0x4b/0x3e0
[  368.036445][T25895]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.036460][T25895]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  368.036474][T25895]  warn_alloc+0x214/0x310
[  368.036493][T25895]  ? __pfx_warn_alloc+0x10/0x10
[  368.036512][T25895]  ? __get_vm_area_node+0x28f/0x300
[  368.036528][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036543][T25895]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  368.036567][T25895]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  368.036584][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036598][T25895]  ? __get_vm_area_node+0x28f/0x300
[  368.036614][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036634][T25895]  __vmalloc_node_range_noprof+0x56a/0x12f0
[  368.036651][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036702][T25895]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  368.036721][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036734][T25895]  vmalloc_noprof+0xb2/0xf0
[  368.036750][T25895]  ? ip_set_sockfn_get+0x13a/0xc30
[  368.036764][T25895]  ip_set_sockfn_get+0x13a/0xc30
[  368.036780][T25895]  nf_getsockopt+0x26e/0x290
[  368.036794][T25895]  ip_getsockopt+0x1c4/0x220
[  368.036813][T25895]  ? __pfx_ip_getsockopt+0x10/0x10
[  368.036828][T25895]  ? __might_fault+0xb0/0x130
[  368.036843][T25895]  ? sock_common_getsockopt+0x2d/0xb0
[  368.036860][T25895]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  368.036875][T25895]  smc_getsockopt+0x1ba/0x380
[  368.036892][T25895]  ? __pfx_smc_getsockopt+0x10/0x10
[  368.036907][T25895]  ? __might_fault+0xb0/0x130
[  368.036922][T25895]  ? __might_fault+0xcc/0x130
[  368.036937][T25895]  ? __pfx_smc_getsockopt+0x10/0x10
[  368.036954][T25895]  do_sock_getsockopt+0x372/0x450
[  368.036966][T25895]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  368.036978][T25895]  ? rcu_needs_cpu+0xa0/0xb0
[  368.036990][T25895]  ? __fget_files+0x3a0/0x420
[  368.037006][T25895]  ? __fget_files+0x2a/0x420
[  368.037024][T25895]  __x64_sys_getsockopt+0x1a5/0x250
[  368.037035][T25895]  ? rcu_needs_cpu+0xa0/0xb0
[  368.037047][T25895]  ? rcu_needs_cpu+0xa0/0xb0
[  368.037057][T25895]  do_syscall_64+0xfa/0x3b0
[  368.037075][T25895]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.037086][T25895]  ? exc_page_fault+0x9f/0xf0
[  368.037101][T25895]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.037112][T25895] RIP: 0033:0x7fd49e38ebe9
[  368.037124][T25895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.037135][T25895] RSP: 002b:00007fd49f20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  368.037150][T25895] RAX: ffffffffffffffda RBX: 00007fd49e5b5fa0 RCX: 00007fd49e38ebe9
[  368.037159][T25895] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003
[  368.037167][T25895] RBP: 00007fd49e411e19 R08: 0000200000000040 R09: 0000000000000000
[  368.037175][T25895] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.037183][T25895] R13: 00007fd49e5b6038 R14: 00007fd49e5b5fa0 R15: 00007ffe341b2ff8
[  368.037197][T25895]  </TASK>
[  368.037202][T25895] Mem-Info:
[  368.175224][T25895] active_anon:18350 inactive_anon:3 isolated_anon:0
[  368.175224][T25895]  active_file:1413 inactive_file:38332 isolated_file:0
[  368.175224][T25895]  unevictable:1768 dirty:33 writeback:0
[  368.175224][T25895]  slab_reclaimable:16403 slab_unreclaimable:167970
[  368.175224][T25895]  mapped:18320 shmem:2509 pagetables:1316
[  368.175224][T25895]  sec_pagetables:0 bounce:0
[  368.175224][T25895]  kernel_misc_reclaimable:0
[  368.175224][T25895]  free:101554 free_pcp:22468 free_cma:0
[  368.192926][T25895] Node 0 active_anon:24904kB inactive_anon:0kB active_file:3752kB inactive_file:147780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41932kB dirty:84kB writeback:0kB shmem:5164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6876kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.205142][T25895] Node 1 active_anon:48496kB inactive_anon:12kB active_file:1900kB inactive_file:5548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31348kB dirty:48kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9012kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.217264][T25895] Node 0 DMA free:6056kB boost:2048kB min:2688kB low:2848kB high:3008kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:1048kB local_pcp:672kB free_cma:0kB
[  368.228883][T25895] lowmem_reserve[]: 0 811 811 811 811
[  368.231128][T25895] Node 0 DMA32 free:39824kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24904kB inactive_anon:0kB active_file:3752kB inactive_file:147780kB unevictable:3536kB writepending:84kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:40244kB local_pcp:20296kB free_cma:0kB
[  368.243612][T25895] lowmem_reserve[]: 0 0 0 0 0
[  368.245657][T25895] Node 1 DMA32 free:322072kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8300kB local_pcp:3188kB free_cma:0kB
[  368.257220][T25895] lowmem_reserve[]: 0 0 854 854 854
[  368.259344][T25895] Node 1 Normal free:38264kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48292kB inactive_anon:0kB active_file:1900kB inactive_file:5548kB unevictable:3536kB writepending:48kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40280kB local_pcp:17424kB free_cma:0kB
[  368.271462][T25895] lowmem_reserve[]: 0 0 0 0 0
[  368.273464][T25895] Node 0 DMA: 4*4kB (ME) 3*8kB (ME) 8*16kB (ME) 6*32kB (ME) 3*64kB (UE) 3*128kB (ME) 4*256kB (UM) 2*512kB (UM) 1*1024kB (E) 1*2048kB (U) 0*4096kB = 6056kB
[  368.279866][T25895] Node 0 DMA32: 218*4kB (ME) 221*8kB (UM) 106*16kB (M) 149*32kB (UME) 48*64kB (UME) 16*128kB (M) 6*256kB (M) 3*512kB (M) 2*1024kB (UE) 6*2048kB (UME) 2*4096kB (U) = 39824kB
[  368.286740][T25895] Node 1 DMA32: 2*4kB (UM) 2*8kB (UM) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 1*128kB (E) 2*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (UME) 76*4096kB (UM) = 321992kB
[  368.293369][T25895] Node 1 Normal: 3*4kB (UME) 3*8kB (E) 9*16kB (ME) 28*32kB (ME) 25*64kB (ME) 36*128kB (UME) 25*256kB (UME) 10*512kB (ME) 5*1024kB (M) 5*2048kB (UME) 1*4096kB (M) = 38260kB
[  368.300116][T25895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.303819][T25895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.307536][T25895] 42259 total pagecache pages
[  368.309511][T25895] 5 pages in swap cache
[  368.311304][T25895] Free swap  = 124976kB
[  368.313056][T25895] Total swap = 124996kB
[  368.314825][T25895] 786301 pages RAM
[  368.316407][T25895] 0 pages HighMem/MovableOnly
[  368.318306][T25895] 241332 pages reserved
[  368.319980][T25895] 0 pages cma reserved
[  368.494139][T25908] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  368.498252][T25908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5196'.
[  368.539409][T25910] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  368.609632][T25921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5199'.
[  368.622161][T25923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.629815][T25923] syzkaller0: entered promiscuous mode
[  368.632309][T25923] syzkaller0: entered allmulticast mode
[  368.641213][T25923] tipc: Resetting bearer <eth:syzkaller0>
[  368.644928][T25922] tipc: Resetting bearer <eth:syzkaller0>
[  368.651476][T25922] tipc: Disabling bearer <eth:syzkaller0>
[  368.781516][T25933] tipc: Failed to remove unknown binding: 66,1,1/3359931239:272779047/272779049
[  368.785167][T25933] tipc: Failed to remove unknown binding: 66,1,1/3359931239:272779047/272779049
[  368.790355][T25933] tipc: Failed to remove unknown binding: 66,1,1/3359931239:272779047/272779049
[  369.007710][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'.
[  369.012510][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5210'.
[  369.016946][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'.
[  369.058368][T25961] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  369.121917][T25968] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  369.235912][T25973] bond28 (unregistering): Released all slaves
[  369.328222][T25979] 8021q: adding VLAN 0 to HW filter on device bond28
[  369.367086][T25979] tipc: Resetting bearer <eth:syzkaller0>
[  369.393635][T25984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.565561][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  369.638174][T25993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  369.827041][T25995] syzkaller0: entered promiscuous mode
[  369.828965][T25995] syzkaller0: entered allmulticast mode
[  369.990744][T25999] batman_adv: batadv0: Adding interface: dummy0
[  369.992970][T25999] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.004450][T25999] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  370.019358][T25999] batman_adv: batadv0: Adding interface: ip6gretap3
[  370.021803][T25999] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  370.030837][T25999] batman_adv: batadv0: Interface activated: ip6gretap3
[  370.040190][T25998] dvmrp8: entered allmulticast mode
[  370.043107][T25996] dvmrp8: left allmulticast mode
[  370.184207][T26010] dvmrp8: entered allmulticast mode
[  370.210588][T26013] dvmrp8: left allmulticast mode
[  370.300561][T26021] erspan0: entered promiscuous mode
[  370.302552][T26021] macvtap1: entered promiscuous mode
[  370.304550][T26021] macvtap1: entered allmulticast mode
[  371.155597][ T5234] Bluetooth: hci0: command tx timeout
[  371.290159][T26053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  371.314580][T26058] validate_nla: 103 callbacks suppressed
[  371.314590][T26058] netlink: 'syz.1.5238': attribute type 1 has an invalid length.
[  371.331025][T26059] syzkaller0: entered promiscuous mode
[  371.333438][T26059] syzkaller0: entered allmulticast mode
[  371.444154][T26064] bridge31: entered promiscuous mode
[  371.478398][T26066] syzkaller0: left promiscuous mode
[  371.480196][T26066] syzkaller0: left allmulticast mode
[  371.483564][T26066] vlan0: left promiscuous mode
[  371.487191][T26066] veth1_to_bridge: left promiscuous mode
[  371.495543][T26066] ip6gre6: left allmulticast mode
[  371.498540][T26066] macvtap1: left promiscuous mode
[  371.500734][T26066] macvtap1: left allmulticast mode
[  371.551488][T26073] lo speed is unknown, defaulting to 1000
[  371.560299][T26076] netlink: 'syz.1.5244': attribute type 1 has an invalid length.
[  371.576063][T26076] bond29: entered promiscuous mode
[  371.579689][T26076] bond29 (unregistering): Released all slaves
[  371.629942][T26073] lo speed is unknown, defaulting to 1000
[  371.632854][T26073] hsr0 speed is unknown, defaulting to 1000
[  371.691005][T26081] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  371.798892][T26081] batadv_slave_0: entered promiscuous mode
[  371.880864][T26097] syzkaller0: entered promiscuous mode
[  371.883003][T26097] syzkaller0: entered allmulticast mode
[  372.062890][T26115] __nla_validate_parse: 12 callbacks suppressed
[  372.062985][T26115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5254'.
[  372.106904][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5255'.
[  372.111498][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5255'.
[  372.116286][ T5857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.119271][ T5857] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.122359][ T5857] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.129980][ T5857] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  372.143066][T26130] netlink: 'syz.1.5258': attribute type 1 has an invalid length.
[  372.156620][T26130] bond29 (unregistering): Released all slaves
[  372.184474][T26135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5260'.
[  372.277930][T26143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5262'.
[  372.318091][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5266'.
[  372.393889][T26168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.398794][T26168] syzkaller0: entered promiscuous mode
[  372.400880][T26168] syzkaller0: entered allmulticast mode
[  372.411572][T26168] tipc: Resetting bearer <eth:syzkaller0>
[  372.415207][T26167] tipc: Resetting bearer <eth:syzkaller0>
[  372.420641][T26167] tipc: Disabling bearer <eth:syzkaller0>
[  372.710528][T26187] netlink: 'syz.0.5275': attribute type 9 has an invalid length.
[  372.713335][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'.
[  372.720499][T26187] netlink: 'syz.0.5275': attribute type 3 has an invalid length.
[  372.908970][T26212] netlink: 'syz.2.5282': attribute type 10 has an invalid length.
[  372.960623][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'.
[  373.018843][T26238] netlink: 'syz.2.5286': attribute type 2 has an invalid length.
[  373.242012][T26259] syzkaller0: entered promiscuous mode
[  373.244008][T26259] syzkaller0: entered allmulticast mode
[  373.244274][T26258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.377217][T26274] netlink: 'syz.2.5294': attribute type 21 has an invalid length.
[  373.380817][T26274] gretap0: Device is already in use.
[  373.470783][T26289] netlink: 'syz.0.5297': attribute type 2 has an invalid length.
[  373.473573][T26289] netlink: 'syz.0.5297': attribute type 2 has an invalid length.
[  373.600797][T26303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5301'.
[  373.638884][T26317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5302'.
[  373.684021][T26320] batman_adv: batadv0: Interface activated: dummy0
[  373.689866][T26320] batadv0: mtu less than device minimum
[  373.692815][T26320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  373.697485][T26320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  373.702106][T26320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  373.706812][T26320] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  373.717574][   T47] lo speed is unknown, defaulting to 1000
[  373.719924][   T47] syz0: Port: 1 Link ACTIVE
[  373.721815][   T47] lo speed is unknown, defaulting to 1000
[  373.820567][T26326] batman_adv: batadv0: Interface deactivated: dummy0
[  373.824845][T26326] batman_adv: batadv0: Removing interface: dummy0
[  374.049405][T26328] lo speed is unknown, defaulting to 1000
[  374.112009][T26328] lo speed is unknown, defaulting to 1000
[  374.115090][T26328] hsr0 speed is unknown, defaulting to 1000
[  374.536729][T26353] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  374.540601][T26353] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  375.388727][T26367] tunl0: Master is either lo or non-ether device
[  375.524112][T26387] erspan0: left promiscuous mode
[  375.531983][T26387] net_ratelimit: 16 callbacks suppressed
[  375.531989][T26387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.634944][T26393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.639882][T26392] tipc: Disabling bearer <eth:syzkaller0>
[  376.329533][T26411] bridge31: left promiscuous mode
[  376.348321][T26409] ip6tnl6: entered promiscuous mode
[  376.350674][T26409] ip6tnl6: entered allmulticast mode
[  376.368724][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 240 seconds
[  376.372749][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 240 seconds
[  376.376846][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 240 seconds
[  376.380524][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 240 seconds
[  376.465075][T26418] vlan1: left allmulticast mode
[  376.468025][T26418] vlan1: left promiscuous mode
[  376.469912][T26418] bridge0: port 3(vlan1) entered disabled state
[  376.472807][T26418] veth0_to_bond: left allmulticast mode
[  376.474631][T26418] veth0_to_bond: left promiscuous mode
[  376.477524][T26418] bridge0: port 2(veth0_to_bond) entered disabled state
[  376.480792][T26418] veth1: left allmulticast mode
[  376.482386][T26418] veth1: left promiscuous mode
[  376.484369][T26418] bridge0: port 1(veth1) entered disabled state
[  377.448162][T26435] validate_nla: 17 callbacks suppressed
[  377.448176][T26435] netlink: 'syz.2.5334': attribute type 1 has an invalid length.
[  377.453435][T26435] NCSI netlink: No device for ifindex 0
[  377.508912][T26452] __nla_validate_parse: 25 callbacks suppressed
[  377.508922][T26452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'.
[  377.631307][T26463] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5340'.
[  377.677545][T26457] netlink: 'syz.2.5338': attribute type 10 has an invalid length.
[  377.702043][T26468] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5342'.
[  377.758661][T26472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.766613][T26472] syzkaller0: entered promiscuous mode
[  377.768500][T26472] syzkaller0: entered allmulticast mode
[  377.775319][T26472] tipc: Resetting bearer <eth:syzkaller0>
[  377.778487][T26472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.782120][T26472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.787378][T26474] netlink: 'syz.0.5345': attribute type 21 has an invalid length.
[  377.790759][T26471] tipc: Resetting bearer <eth:syzkaller0>
[  377.794055][T26471] tipc: Disabling bearer <eth:syzkaller0>
[  377.819812][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5346'.
[  377.822837][T26477] netlink: 'syz.0.5346': attribute type 20 has an invalid length.
[  377.825552][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5346'.
[  377.828576][T26477] netlink: 'syz.0.5346': attribute type 20 has an invalid length.
[  377.857592][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5348'.
[  377.873920][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5348'.
[  377.928306][T26486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5349'.
[  378.014809][T26488] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.5350'.
[  378.027705][T26492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5351'.
[  378.124345][T26496] netlink: 'syz.2.5353': attribute type 12 has an invalid length.
[  378.193832][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.197684][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.202141][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.210870][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.272941][T26511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.275670][T26511] syzkaller0: entered promiscuous mode
[  378.277550][T26511] syzkaller0: entered allmulticast mode
[  378.281874][T26510] tipc: Resetting bearer <eth:syzkaller0>
[  378.287386][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.292199][T26510] tipc: Disabling bearer <eth:syzkaller0>
[  378.320912][T26509] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  378.322296][T26513] netlink: 'syz.0.5357': attribute type 4 has an invalid length.
[  378.353086][T26515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.356811][T26515] syzkaller0: entered promiscuous mode
[  378.358680][T26515] syzkaller0: entered allmulticast mode
[  378.361510][T26515] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  378.368284][T26515] tipc: Resetting bearer <eth:syzkaller0>
[  378.372529][T26514] tipc: Resetting bearer <eth:syzkaller0>
[  378.377852][T26514] tipc: Disabling bearer <eth:syzkaller0>
[  378.528581][T26533] IPv6: sit12: Disabled Multicast RS
[  378.531409][T26533] sit12: entered allmulticast mode
[  378.560317][T26537] netlink: 'syz.1.5364': attribute type 4 has an invalid length.
[  378.564179][T26536] netlink: 'syz.1.5364': attribute type 4 has an invalid length.
[  378.566998][T26537] netlink: 'syz.1.5364': attribute type 4 has an invalid length.
[  378.612782][T26539] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.647538][T26539] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.680840][T26539] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.744511][T26539] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  378.794839][ T9498] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  378.804798][ T9498] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  378.813388][ T9498] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  378.822181][ T9498] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  378.847818][T26566] lo speed is unknown, defaulting to 1000
[  378.927988][T26566] lo speed is unknown, defaulting to 1000
[  378.933741][T26566] hsr0 speed is unknown, defaulting to 1000
[  379.144398][T26524] syz.2.5362 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  379.165011][T26524] CPU: 0 UID: 0 PID: 26524 Comm: syz.2.5362 Not tainted syzkaller #0 PREEMPT(full) 
[  379.165033][T26524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.165041][T26524] Call Trace:
[  379.165046][T26524]  <TASK>
[  379.165052][T26524]  dump_stack_lvl+0x189/0x250
[  379.165074][T26524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.165089][T26524]  ? __pfx__printk+0x10/0x10
[  379.165107][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165120][T26524]  dump_header+0xd3/0x480
[  379.165138][T26524]  oom_kill_process+0x387/0x920
[  379.165154][T26524]  out_of_memory+0xf09/0x12a0
[  379.165168][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165179][T26524]  ? __pfx_out_of_memory+0x10/0x10
[  379.165190][T26524]  ? percpu_ref_put+0x19/0x180
[  379.165207][T26524]  ? lock_release+0x4b/0x3e0
[  379.165227][T26524]  mem_cgroup_out_of_memory+0x145/0x240
[  379.165242][T26524]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  379.165257][T26524]  ? _raw_spin_unlock+0x28/0x50
[  379.165271][T26524]  ? memcg1_oom_prepare+0x37f/0x450
[  379.165287][T26524]  try_charge_memcg+0xdff/0x1290
[  379.165303][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165319][T26524]  ? __pfx_try_charge_memcg+0x10/0x10
[  379.165336][T26524]  ? rcu_needs_cpu+0xa1/0xb0
[  379.165345][T26524]  ? xa_load+0x60/0x210
[  379.165362][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165376][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165388][T26524]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  379.165405][T26524]  charge_memcg+0x9f/0x180
[  379.165419][T26524]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  379.165435][T26524]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  379.165472][T26524]  __read_swap_cache_async+0x28c/0x510
[  379.165488][T26524]  swap_cluster_readahead+0x305/0x5f0
[  379.165503][T26524]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  379.165517][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165527][T26524]  ? filemap_get_entry+0xad/0x2f0
[  379.165540][T26524]  ? get_vma_policy+0x27c/0x3c0
[  379.165557][T26524]  swapin_readahead+0x17d/0xb50
[  379.165569][T26524]  ? __pfx_filemap_get_entry+0x10/0x10
[  379.165583][T26524]  ? get_swap_device_info+0x1c/0x2b0
[  379.165594][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165606][T26524]  ? __pfx_swapin_readahead+0x10/0x10
[  379.165625][T26524]  ? __filemap_get_folio+0x9a6/0xaf0
[  379.165663][T26524]  ? swap_cache_get_folio+0xae/0x3b0
[  379.165676][T26524]  do_swap_page+0x525/0x5ac0
[  379.165689][T26524]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  379.165706][T26524]  ? debug_object_activate+0x2e2/0x420
[  379.165722][T26524]  ? ___pte_offset_map+0x29/0x250
[  379.165737][T26524]  ? lock_acquire+0x5f/0x360
[  379.165752][T26524]  ? do_swap_page+0x184/0x5ac0
[  379.165765][T26524]  ? __pfx_do_swap_page+0x10/0x10
[  379.165779][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165790][T26524]  ? __pfx_default_wake_function+0x10/0x10
[  379.165806][T26524]  ? ___pte_offset_map+0x45/0x250
[  379.165818][T26524]  ? ___pte_offset_map+0x1cf/0x250
[  379.165833][T26524]  ? pte_offset_map_rw_nolock+0xea/0x160
[  379.165848][T26524]  __handle_mm_fault+0xe55/0x5440
[  379.165867][T26524]  ? __pfx___handle_mm_fault+0x10/0x10
[  379.165881][T26524]  ? lock_release+0x4b/0x3e0
[  379.165900][T26524]  ? lock_vma_under_rcu+0xdf/0x3d0
[  379.165916][T26524]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  379.165935][T26524]  handle_mm_fault+0x40a/0x8e0
[  379.165953][T26524]  do_user_addr_fault+0xa81/0x1390
[  379.165973][T26524]  ? rcu_is_watching+0x15/0xb0
[  379.165984][T26524]  ? trace_page_fault_user+0x84/0x1e0
[  379.166002][T26524]  exc_page_fault+0x76/0xf0
[  379.166018][T26524]  asm_exc_page_fault+0x26/0x30
[  379.166029][T26524] RIP: 0033:0x7fdd44fb6a10
[  379.166041][T26524] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[  379.166053][T26524] RSP: 002b:00007fff586a8ef8 EFLAGS: 00010246
[  379.166065][T26524] RAX: 0000000000000000 RBX: 00007fdd451b5fa0 RCX: 00007fdd44fc14a5
[  379.166075][T26524] RDX: 00007fff586a8f40 RSI: 0000000000000000 RDI: 0000000000000000
[  379.166083][T26524] RBP: 00007fdd451b7da0 R08: 0000000000000000 R09: 7fffffffffffffff
[  379.166091][T26524] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005c91b
[  379.166100][T26524] R13: 00007fdd451b6090 R14: ffffffffffffffff R15: 00007fff586a9080
[  379.166113][T26524]  </TASK>
[  379.325388][T26524] memory: usage 307200kB, limit 307200kB, failcnt 525
[  379.330503][T26524] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0
[  379.333211][T26524] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  379.336857][T26524] Memory cgroup stats for /syz2:
[  379.336915][T26524] cache 0
[  379.339559][T26524] rss 0
[  379.340540][T26524] rss_huge 0
[  379.341678][T26524] shmem 0
[  379.342719][T26524] mapped_file 0
[  379.343893][T26524] dirty 0
[  379.344918][T26524] writeback 0
[  379.346219][T26524] workingset_refault_anon 13
[  379.347963][T26524] workingset_refault_file 0
[  379.349571][T26524] swap 212992
[  379.350684][T26524] swapcached 12288
[  379.351959][T26524] pgpgin 200750
[  379.353155][T26524] pgpgout 200747
[  379.354461][T26524] pgfault 400666
[  379.364614][T26524] pgmajfault 17
[  379.366097][T26524] inactive_anon 4096
[  379.384105][T26524] active_anon 8192
[  379.385480][T26524] inactive_file 0
[  379.386782][T26524] active_file 0
[  379.388079][T26524] unevictable 0
[  379.389268][T26524] hierarchical_memory_limit 314572800
[  379.391072][T26524] hierarchical_memsw_limit 9223372036854771712
[  379.393224][T26524] total_cache 0
[  379.406690][T26524] total_rss 0
[  379.408109][T26524] total_rss_huge 0
[  379.409443][T26524] total_shmem 0
[  379.410749][T26524] total_mapped_file 0
[  379.412236][T26524] total_dirty 0
[  379.413658][T26524] total_writeback 0
[  379.415057][T26524] total_workingset_refault_anon 13
[  379.417309][T26524] total_workingset_refault_file 0
[  379.419114][T26524] total_swap 212992
[  379.420408][T26524] total_swapcached 12288
[  379.421844][T26524] total_pgpgin 200750
[  379.423237][T26524] total_pgpgout 200747
[  379.424589][T26524] total_pgfault 400666
[  379.428269][T26524] total_pgmajfault 17
[  379.429659][T26524] total_inactive_anon 4096
[  379.431135][T26524] total_active_anon 8192
[  379.432665][T26524] total_inactive_file 0
[  379.434152][T26524] total_active_file 0
[  379.435719][T26524] total_unevictable 0
[  379.437027][T26524] anon_cost 0
[  379.438165][T26524] file_cost 0
[  379.439354][T26524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5362,pid=26524,uid=0
[  379.444338][T26524] Memory cgroup out of memory: Killed process 26524 (syz.2.5362) total-vm:101960kB, anon-rss:952kB, file-rss:23324kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  379.589712][T26619] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  379.592250][T26619] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  379.667579][T26621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.670109][T26621] syzkaller0: entered promiscuous mode
[  379.671949][T26621] syzkaller0: entered allmulticast mode
[  379.700053][T26621] tipc: Resetting bearer <eth:syzkaller0>
[  379.708216][T26621] tipc: Resetting bearer <eth:syzkaller0>
[  379.714447][T26621] tipc: Disabling bearer <eth:syzkaller0>
[  379.891351][T26651] gretap0: refused to change device tx_queue_len
[  379.894259][T26651] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  379.914799][T26651] lo speed is unknown, defaulting to 1000
[  379.937341][ T5881] lo speed is unknown, defaulting to 1000
[  379.939261][ T5881] syz0: Port: 1 Link DOWN
[  379.940752][ T5881] lo speed is unknown, defaulting to 1000
[  379.947360][T26651] lo speed is unknown, defaulting to 1000
[  379.949549][T26651] hsr0 speed is unknown, defaulting to 1000
[  379.963159][T26659] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  379.972697][T26661] mac80211_hwsim hwsim217 wlan0: entered promiscuous mode
[  379.975273][T26661] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  380.008365][T26659] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.014262][T26664] 8021q: VLANs not supported on wlan1
[  380.060051][T26659] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.120366][T26659] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.172262][T26677] lo speed is unknown, defaulting to 1000
[  380.200749][ T9498] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  380.204344][ T9498] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.215679][ T9498] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.231504][T26678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.236706][    T9] lo speed is unknown, defaulting to 1000
[  380.239032][ T9498] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.239205][    T9] syz1: Port: 1 Link ACTIVE
[  380.241840][T26677] lo speed is unknown, defaulting to 1000
[  380.246107][T26677] hsr0 speed is unknown, defaulting to 1000
[  380.325045][T26693] bridge0: entered promiscuous mode
[  380.437866][T26699] IPVS: set_ctl: invalid protocol: 12 172.20.20.24:20000
[  380.573345][T26710] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.607919][T26710] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.649330][T26710] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.688741][T26710] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  380.735271][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  380.742592][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  380.749446][ T9498] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  380.758724][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.819461][T26716] syzkaller0: entered promiscuous mode
[  380.821769][T26716] syzkaller0: entered allmulticast mode
[  380.825721][T26716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.832463][T26716] tipc: Resetting bearer <eth:syzkaller0>
[  380.837502][T26715] tipc: Resetting bearer <eth:syzkaller0>
[  380.842194][T26715] tipc: Disabling bearer <eth:syzkaller0>
[  381.010448][T26718] 8021q: adding VLAN 0 to HW filter on device bond32
[  381.014311][T26718] bond32: (slave wlan0): Opening slave failed
[  381.381355][T26737] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  381.427297][T26742] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.430499][T26742] ip6erspan0: entered promiscuous mode
[  381.432550][T26742] ip6erspan0: entered allmulticast mode
[  381.522124][T26747] openvswitch: netlink: Flow key attr not present in new flow.
[  381.629645][T26753] bridge31: port 1(veth0_to_bond) entered blocking state
[  381.632018][T26753] bridge31: port 1(veth0_to_bond) entered disabled state
[  381.635037][T26753] veth0_to_bond: entered allmulticast mode
[  381.639511][T26753] veth0_to_bond: entered promiscuous mode
[  381.742976][T26761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.747885][T26761] syzkaller0: entered promiscuous mode
[  381.749730][T26761] syzkaller0: entered allmulticast mode
[  381.751741][T26761] tipc: Resetting bearer <eth:syzkaller0>
[  381.756039][T26761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) !
[  381.774865][T26763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.888386][T26773] lo speed is unknown, defaulting to 1000
[  381.924523][T26773] lo speed is unknown, defaulting to 1000
[  381.927076][T26773] hsr0 speed is unknown, defaulting to 1000
[  381.981585][T26777] 8021q: adding VLAN 0 to HW filter on device bond29
[  381.993069][T26777] veth17: entered promiscuous mode
[  381.999566][T26777] bond29: (slave veth17): Enslaving as a backup interface with a down link
[  382.153147][ T5908] lo speed is unknown, defaulting to 1000
[  382.155008][ T5908] syz1: Port: 1 Link DOWN
[  382.250708][T26800] mac80211_hwsim hwsim118 wlan0: entered promiscuous mode
[  382.972882][T26815] __nla_validate_parse: 38 callbacks suppressed
[  382.972892][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5439'.
[  382.987104][T26815] bridge40: port 1(veth1) entered blocking state
[  382.989577][T26815] bridge40: port 1(veth1) entered disabled state
[  382.991942][T26815] veth1: entered allmulticast mode
[  382.994232][T26815] veth1: entered promiscuous mode
[  382.997827][T26815] bridge40: port 2(veth0_to_bond) entered blocking state
[  383.000212][T26815] bridge40: port 2(veth0_to_bond) entered disabled state
[  383.002699][T26815] veth0_to_bond: entered allmulticast mode
[  383.005116][T26815] veth0_to_bond: entered promiscuous mode
[  383.012870][T26815] vlan3: entered allmulticast mode
[  383.085713][T26817] netlink: 'syz.2.5440': attribute type 11 has an invalid length.
[  383.198788][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5441'.
[  383.207655][T26821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5441'.
[  383.229381][T26827] validate_nla: 11 callbacks suppressed
[  383.229391][T26827] netlink: 'syz.1.5443': attribute type 4 has an invalid length.
[  383.234474][T26828] netlink: 'syz.1.5443': attribute type 4 has an invalid length.
[  386.018246][ T5294] udevd[5294]: worker [9160] /devices/virtual/block/nbd0 timeout; kill it
[  386.021777][ T5294] udevd[5294]: seq 17467 '/devices/virtual/block/nbd0' killed
[  398.835686][T26844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  398.838448][T26844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  398.841290][T26844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  398.844349][T26844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  398.855814][T26844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  398.874295][T26842] lo speed is unknown, defaulting to 1000
[  398.898261][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  398.901417][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  398.904023][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  398.907369][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  398.910408][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  398.942681][T26842] lo speed is unknown, defaulting to 1000
[  398.944919][T26842] hsr0 speed is unknown, defaulting to 1000
[  398.945944][T26845] lo speed is unknown, defaulting to 1000
[  398.957667][T26844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.960631][T26844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.963191][T26844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.973874][T26844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.977864][T26844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  399.024152][T26845] lo speed is unknown, defaulting to 1000
[  399.024166][T26847] lo speed is unknown, defaulting to 1000
[  399.027485][T26845] hsr0 speed is unknown, defaulting to 1000
[  399.053148][T26842] chnl_net:caif_netlink_parms(): no params data found
[  399.095813][T26842] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.098803][T26842] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.101749][T26842] bridge_slave_0: entered allmulticast mode
[  399.105042][T26842] bridge_slave_0: entered promiscuous mode
[  399.109419][T26842] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.111775][T26842] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.114319][T26842] bridge_slave_1: entered allmulticast mode
[  399.117373][T26842] bridge_slave_1: entered promiscuous mode
[  399.139474][T26847] lo speed is unknown, defaulting to 1000
[  399.143392][T26847] hsr0 speed is unknown, defaulting to 1000
[  399.144766][T26842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.160281][T26842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.188234][T26842] team0: Port device team_slave_0 added
[  399.190698][T26845] chnl_net:caif_netlink_parms(): no params data found
[  399.198721][T26842] team0: Port device team_slave_1 added
[  399.222257][T26842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.224903][T26842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.237306][T26842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.254395][T26842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.257784][T26842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.267408][T26842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.336709][T26845] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.339647][T26845] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.342592][T26845] bridge_slave_0: entered allmulticast mode
[  399.346159][T26845] bridge_slave_0: entered promiscuous mode
[  399.356793][T26845] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.359842][T26845] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.362932][T26845] bridge_slave_1: entered allmulticast mode
[  399.366236][T26845] bridge_slave_1: entered promiscuous mode
[  399.385140][T26842] hsr_slave_0: entered promiscuous mode
[  399.388116][T26842] hsr_slave_1: entered promiscuous mode
[  399.390108][T26842] debugfs: 'hsr0' already exists in 'hsr'
[  399.391975][T26842] Cannot create hsr debugfs directory
[  399.402184][T26845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.406373][T26847] chnl_net:caif_netlink_parms(): no params data found
[  399.412273][T26845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.427901][T26845] team0: Port device team_slave_0 added
[  399.430942][T26845] team0: Port device team_slave_1 added
[  399.450732][T26845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.453024][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.461808][T26845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.472960][T26845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.476383][T26845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.486839][T26845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.564503][T26847] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.570384][T26847] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.573391][T26847] bridge_slave_0: entered allmulticast mode
[  399.576978][T26847] bridge_slave_0: entered promiscuous mode
[  399.589975][T26845] hsr_slave_0: entered promiscuous mode
[  399.592813][T26845] hsr_slave_1: entered promiscuous mode
[  399.595251][T26845] debugfs: 'hsr0' already exists in 'hsr'
[  399.597371][T26845] Cannot create hsr debugfs directory
[  399.599482][T26847] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.602470][T26847] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.608460][T26847] bridge_slave_1: entered allmulticast mode
[  399.611737][T26847] bridge_slave_1: entered promiscuous mode
[  399.645741][T26847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.651463][T26847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.700302][T26847] team0: Port device team_slave_0 added
[  399.705143][T26847] team0: Port device team_slave_1 added
[  399.727207][T26847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.729894][T26847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.739008][T26847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.747997][T26847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.750711][T26847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  399.759178][T26847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.791226][T26847] hsr_slave_0: entered promiscuous mode
[  399.793618][T26847] hsr_slave_1: entered promiscuous mode
[  399.796242][T26847] debugfs: 'hsr0' already exists in 'hsr'
[  399.798064][T26847] Cannot create hsr debugfs directory
[  400.915834][T26844] Bluetooth: hci3: command tx timeout
[  400.915876][ T5234] Bluetooth: hci4: command tx timeout
[  400.995662][ T5234] Bluetooth: hci5: command tx timeout
[  402.995734][ T5234] Bluetooth: hci3: command tx timeout
[  402.997775][ T5234] Bluetooth: hci4: command tx timeout
[  403.075903][ T5234] Bluetooth: hci5: command tx timeout
[  405.075653][T26844] Bluetooth: hci3: command tx timeout
[  405.077648][ T5234] Bluetooth: hci4: command tx timeout
[  405.155886][ T5234] Bluetooth: hci5: command tx timeout
[  406.468027][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 270 seconds
[  406.472182][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 270 seconds
[  406.476543][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 270 seconds
[  406.480739][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 270 seconds
[  407.155952][T26844] Bluetooth: hci3: command tx timeout
[  407.158190][ T5234] Bluetooth: hci4: command tx timeout
[  407.235975][ T5234] Bluetooth: hci5: command tx timeout
[  436.526032][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 300 seconds
[  436.529874][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 300 seconds
[  436.533522][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 300 seconds
[  436.537353][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 300 seconds
[  458.848257][T26844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  458.850749][T26844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  458.853509][T26844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  458.858266][T26844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  458.861532][T26844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  458.876352][T26868] lo speed is unknown, defaulting to 1000
[  458.925056][T26868] lo speed is unknown, defaulting to 1000
[  458.928348][T26868] hsr0 speed is unknown, defaulting to 1000
[  458.985858][T26868] chnl_net:caif_netlink_parms(): no params data found
[  459.013814][T26868] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.017314][T26868] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.020369][T26868] bridge_slave_0: entered allmulticast mode
[  459.023655][T26868] bridge_slave_0: entered promiscuous mode
[  459.028565][T26868] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.031478][T26868] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.034518][T26868] bridge_slave_1: entered allmulticast mode
[  459.038455][T26868] bridge_slave_1: entered promiscuous mode
[  459.052631][T26868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.058900][T26868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.077256][T26868] team0: Port device team_slave_0 added
[  459.081238][T26868] team0: Port device team_slave_1 added
[  459.099359][T26868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.102329][T26868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.113435][T26868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.118060][T26868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.120256][T26868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.130208][T26868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.151923][T26868] hsr_slave_0: entered promiscuous mode
[  459.154621][T26868] hsr_slave_1: entered promiscuous mode
[  459.157276][T26868] debugfs: 'hsr0' already exists in 'hsr'
[  459.159569][T26868] Cannot create hsr debugfs directory
[  459.858967][T26844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  459.862230][T26844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  459.865353][T26844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  459.869951][T26844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  459.873311][T26844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  459.886760][T26878] lo speed is unknown, defaulting to 1000
[  459.910426][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  459.913687][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  459.917187][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  459.920136][T26878] lo speed is unknown, defaulting to 1000
[  459.923213][T26878] hsr0 speed is unknown, defaulting to 1000
[  459.923296][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  459.931140][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  459.959513][T26880] lo speed is unknown, defaulting to 1000
[  459.988898][T26878] chnl_net:caif_netlink_parms(): no params data found
[  460.022154][T26880] lo speed is unknown, defaulting to 1000
[  460.022441][T26878] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.027303][T26878] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.029838][T26878] bridge_slave_0: entered allmulticast mode
[  460.032648][T26878] bridge_slave_0: entered promiscuous mode
[  460.035240][T26880] hsr0 speed is unknown, defaulting to 1000
[  460.035843][T26878] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.040166][T26878] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.043168][T26878] bridge_slave_1: entered allmulticast mode
[  460.046917][T26878] bridge_slave_1: entered promiscuous mode
[  460.073479][T26878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.081149][T26878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.103864][T26878] team0: Port device team_slave_0 added
[  460.107212][T26878] team0: Port device team_slave_1 added
[  460.123967][T26878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.126676][T26878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.136857][T26878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.140995][T26878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.143402][T26878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.152248][T26878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.190462][T26878] hsr_slave_0: entered promiscuous mode
[  460.193145][T26878] hsr_slave_1: entered promiscuous mode
[  460.196141][T26878] debugfs: 'hsr0' already exists in 'hsr'
[  460.198235][T26878] Cannot create hsr debugfs directory
[  460.228553][T26880] chnl_net:caif_netlink_parms(): no params data found
[  460.292045][T26880] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.295014][T26880] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.298557][T26880] bridge_slave_0: entered allmulticast mode
[  460.301768][T26880] bridge_slave_0: entered promiscuous mode
[  460.310327][T26880] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.313361][T26880] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.316606][T26880] bridge_slave_1: entered allmulticast mode
[  460.319832][T26880] bridge_slave_1: entered promiscuous mode
[  460.341959][T26880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  460.348182][T26880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  460.362484][T26880] team0: Port device team_slave_0 added
[  460.365345][T26880] team0: Port device team_slave_1 added
[  460.374509][T26880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.376810][T26880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.385150][T26880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.390165][T26880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.393028][T26880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.402858][T26880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.428731][T26880] hsr_slave_0: entered promiscuous mode
[  460.431526][T26880] hsr_slave_1: entered promiscuous mode
[  460.434214][T26880] debugfs: 'hsr0' already exists in 'hsr'
[  460.439165][T26880] Cannot create hsr debugfs directory
[  460.915837][T26844] Bluetooth: hci6: command tx timeout
[  461.965678][ T5234] Bluetooth: hci7: command tx timeout
[  461.967866][T26844] Bluetooth: hci8: command tx timeout
[  462.995971][T26844] Bluetooth: hci6: command tx timeout
[  464.035811][ T5234] Bluetooth: hci7: command tx timeout
[  464.037726][T26844] Bluetooth: hci8: command tx timeout
[  465.076134][T26844] Bluetooth: hci6: command tx timeout
[  466.115863][T26844] Bluetooth: hci8: command tx timeout
[  466.115903][ T5234] Bluetooth: hci7: command tx timeout
[  466.615869][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 330 seconds
[  466.620188][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 330 seconds
[  466.624284][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 330 seconds
[  466.627987][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 330 seconds
[  467.156177][ T5234] Bluetooth: hci6: command tx timeout
[  468.195885][ T5234] Bluetooth: hci8: command tx timeout
[  468.195934][T26844] Bluetooth: hci7: command tx timeout
[  496.675622][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 360 seconds
[  496.679760][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 360 seconds
[  496.683439][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 360 seconds
[  496.687744][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 360 seconds
[  518.848042][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  518.850634][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  518.853141][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  518.855945][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  518.858605][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  518.871794][T26895] lo speed is unknown, defaulting to 1000
[  518.910993][T26895] lo speed is unknown, defaulting to 1000
[  518.913749][T26895] hsr0 speed is unknown, defaulting to 1000
[  518.965355][T26895] chnl_net:caif_netlink_parms(): no params data found
[  518.994172][T26895] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.996747][T26895] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.999122][T26895] bridge_slave_0: entered allmulticast mode
[  519.001634][T26895] bridge_slave_0: entered promiscuous mode
[  519.004484][T26895] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.007065][T26895] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.009459][T26895] bridge_slave_1: entered allmulticast mode
[  519.012513][T26895] bridge_slave_1: entered promiscuous mode
[  519.023825][T26895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.028484][T26895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.039296][T26895] team0: Port device team_slave_0 added
[  519.042388][T26895] team0: Port device team_slave_1 added
[  519.053646][T26895] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.056525][T26895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.066278][T26895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.070980][T26895] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.073458][T26895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.083527][T26895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.099839][T26895] hsr_slave_0: entered promiscuous mode
[  519.102420][T26895] hsr_slave_1: entered promiscuous mode
[  519.104846][T26895] debugfs: 'hsr0' already exists in 'hsr'
[  519.107113][T26895] Cannot create hsr debugfs directory
[  519.860657][T26844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  519.863228][T26844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  519.865960][T26844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  519.868900][T26844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  519.871639][T26844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  519.887922][T26904] lo speed is unknown, defaulting to 1000
[  519.921074][T26904] lo speed is unknown, defaulting to 1000
[  519.923427][T26904] hsr0 speed is unknown, defaulting to 1000
[  519.971193][T26904] chnl_net:caif_netlink_parms(): no params data found
[  520.014647][T26904] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.017420][T26904] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.019945][T26904] bridge_slave_0: entered allmulticast mode
[  520.022741][T26904] bridge_slave_0: entered promiscuous mode
[  520.026677][T26904] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.029243][T26904] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.031816][T26904] bridge_slave_1: entered allmulticast mode
[  520.034279][T26904] bridge_slave_1: entered promiscuous mode
[  520.072929][T26904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.079406][T26904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.093024][T26904] team0: Port device team_slave_0 added
[  520.096002][T26904] team0: Port device team_slave_1 added
[  520.107650][T26904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.109881][T26904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.118845][T26904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.123611][T26904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.128638][T26904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.137232][T26904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.152690][T26904] hsr_slave_0: entered promiscuous mode
[  520.155139][T26904] hsr_slave_1: entered promiscuous mode
[  520.157993][T26904] debugfs: 'hsr0' already exists in 'hsr'
[  520.160041][T26904] Cannot create hsr debugfs directory
[  520.870018][T26844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  520.872572][T26844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  520.875072][T26844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  520.878027][T26844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  520.880776][T26844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  520.895439][T26913] lo speed is unknown, defaulting to 1000
[  520.915831][ T5234] Bluetooth: hci9: command tx timeout
[  520.930793][T26913] lo speed is unknown, defaulting to 1000
[  520.933283][T26913] hsr0 speed is unknown, defaulting to 1000
[  520.984508][T26913] chnl_net:caif_netlink_parms(): no params data found
[  521.029653][T26913] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.032662][T26913] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.036040][T26913] bridge_slave_0: entered allmulticast mode
[  521.039267][T26913] bridge_slave_0: entered promiscuous mode
[  521.043317][T26913] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.046645][T26913] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.049663][T26913] bridge_slave_1: entered allmulticast mode
[  521.052782][T26913] bridge_slave_1: entered promiscuous mode
[  521.069471][T26913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.074978][T26913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.092386][T26913] team0: Port device team_slave_0 added
[  521.096533][T26913] team0: Port device team_slave_1 added
[  521.111739][T26913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.114607][T26913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.125389][T26913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.130706][T26913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.133481][T26913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.143804][T26913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.169748][T26913] hsr_slave_0: entered promiscuous mode
[  521.172564][T26913] hsr_slave_1: entered promiscuous mode
[  521.175137][T26913] debugfs: 'hsr0' already exists in 'hsr'
[  521.177479][T26913] Cannot create hsr debugfs directory
[  521.875673][T26922] Bluetooth: hci10: command tx timeout
[  522.925653][T26922] Bluetooth: hci11: command tx timeout
[  522.995701][T26922] Bluetooth: hci9: command tx timeout
[  523.716251][T26922] Bluetooth: hci3: command 0x0406 tx timeout
[  523.718819][T26922] Bluetooth: hci5: command 0x0406 tx timeout
[  523.721430][T26922] Bluetooth: hci4: command 0x0406 tx timeout
[  523.955902][T26921] Bluetooth: hci10: command tx timeout
[  524.995660][T26921] Bluetooth: hci11: command tx timeout
[  525.076089][T26921] Bluetooth: hci9: command tx timeout
[  526.035697][T26921] Bluetooth: hci10: command tx timeout
[  526.795668][   T11] block nbd0: Possible stuck request ffff888020278000: control (read@0,1024B). Runtime 390 seconds
[  526.799702][   T11] block nbd0: Possible stuck request ffff888020278200: control (read@1024,1024B). Runtime 390 seconds
[  526.803975][   T11] block nbd0: Possible stuck request ffff888020278400: control (read@2048,1024B). Runtime 390 seconds
[  526.808247][   T11] block nbd0: Possible stuck request ffff888020278600: control (read@3072,1024B). Runtime 390 seconds
[  527.076109][T26921] Bluetooth: hci11: command tx timeout
[  527.155836][T26921] Bluetooth: hci9: command tx timeout
[  528.115600][T26921] Bluetooth: hci10: command tx timeout
[  529.165731][T26921] Bluetooth: hci11: command tx timeout
[  533.155903][   T34] INFO: task udevd:9160 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
[  533.158525][   T34]       Not tainted syzkaller #0
[  533.160756][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  533.164294][   T34] task:udevd           state:D stack:22760 pid:9160  tgid:9160  ppid:5294   task_flags:0x400140 flags:0x00004006
[  533.169947][   T34] Call Trace:
[  533.171015][   T34]  <TASK>
[  533.171984][   T34]  __schedule+0x1798/0x4cc0
[  533.173423][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  533.175400][   T34]  ? __pfx___schedule+0x10/0x10
[  533.176988][   T34]  ? do_raw_spin_lock+0x121/0x290
[  533.178716][   T34]  ? schedule+0x91/0x360
[  533.180256][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.181988][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.183493][   T34]  ? lock_release+0x4b/0x3e0
[  533.184971][   T34]  schedule+0x165/0x360
[  533.188743][   T34]  io_schedule+0x80/0xd0
[  533.190371][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  533.192060][   T34]  ? lock_release+0x4b/0x3e0
[  533.193532][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  533.195375][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  533.197203][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  533.198846][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  533.200522][   T34]  do_read_cache_folio+0x1aa/0x590
[  533.202097][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  533.203802][   T34]  read_part_sector+0xb6/0x2b0
[  533.205323][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  533.208975][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  533.210829][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  533.212743][   T34]  bdev_disk_changed+0x75f/0x14b0
[  533.214426][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  533.216479][   T34]  ? wait_on_inode+0xc0/0x230
[  533.218456][   T34]  blkdev_get_whole+0x380/0x510
[  533.220459][   T34]  bdev_open+0x31e/0xd30
[  533.222239][   T34]  blkdev_open+0x3a8/0x510
[  533.224101][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  533.229852][   T34]  do_dentry_open+0x953/0x13f0
[  533.231918][   T34]  vfs_open+0x3b/0x340
[  533.233659][   T34]  ? path_openat+0x2ecd/0x3830
[  533.236026][   T34]  path_openat+0x2ee5/0x3830
[  533.237950][   T34]  ? arch_stack_walk+0xfc/0x150
[  533.239962][   T34]  ? stack_depot_save_flags+0x40/0x860
[  533.242378][   T34]  ? __pfx_path_openat+0x10/0x10
[  533.244411][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.247417][   T34]  do_filp_open+0x1fa/0x410
[  533.249287][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  533.251311][   T34]  ? _raw_spin_unlock+0x28/0x50
[  533.253281][   T34]  ? alloc_fd+0x64c/0x6c0
[  533.255017][   T34]  do_sys_openat2+0x121/0x1c0
[  533.275513][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  533.277737][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  533.279866][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.281813][   T34]  __x64_sys_openat+0x138/0x170
[  533.283922][   T34]  do_syscall_64+0xfa/0x3b0
[  533.287703][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.289905][   T34]  ? exc_page_fault+0x9f/0xf0
[  533.291420][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.293393][   T34] RIP: 0033:0x7f008eb169a4
[  533.294798][   T34] RSP: 002b:00007ffc5b7931f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  533.297713][   T34] RAX: ffffffffffffffda RBX: 0000559855d90db0 RCX: 00007f008eb169a4
[  533.300262][   T34] RDX: 00000000000a0800 RSI: 0000559855d82820 RDI: 00000000ffffff9c
[  533.302738][   T34] RBP: 0000559855d82820 R08: 0000000000000001 R09: 7fffffffffffffff
[  533.305238][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  533.309809][   T34] R13: 0000559855d88370 R14: 0000000000000001 R15: 0000559855d6a910
[  533.312750][   T34]  </TASK>
[  533.313839][   T34] INFO: task syz.0.5442:26824 blocked for more than 143 seconds.
[  533.316759][   T34]       Not tainted syzkaller #0
[  533.318822][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.322340][   T34] task:syz.0.5442      state:D stack:26152 pid:26824 tgid:26822 ppid:5853   task_flags:0x480140 flags:0x00004004
[  533.327718][   T34] Call Trace:
[  533.329184][   T34]  <TASK>
[  533.330417][   T34]  __schedule+0x1798/0x4cc0
[  533.332280][   T34]  ? do_raw_spin_lock+0x121/0x290
[  533.334368][   T34]  ? __pfx___schedule+0x10/0x10
[  533.336403][   T34]  ? schedule+0x91/0x360
[  533.338192][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.340225][   T34]  ? lock_release+0x4b/0x3e0
[  533.342094][   T34]  schedule+0x165/0x360
[  533.343836][   T34]  blk_mq_freeze_queue_wait+0xf4/0x170
[  533.346223][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  533.348646][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  533.351137][   T34]  ? percpu_ref_kill_and_confirm+0xa3/0x130
[  533.353614][   T34]  queue_limits_commit_update_frozen+0x5d/0x3e0
[  533.356301][   T34]  nbd_set_size+0x47e/0x6a0
[  533.358149][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  533.360246][   T34]  ? nla_memcpy+0x5b/0xc0
[  533.362041][   T34]  nbd_genl_size_set+0x2eb/0x3c0
[  533.364035][   T34]  ? __pfx_nbd_genl_size_set+0x10/0x10
[  533.366409][   T34]  ? __pfx_nbd_get_config_unlocked+0x10/0x10
[  533.368853][   T34]  ? bpf_lsm_capable+0x9/0x20
[  533.370775][   T34]  ? security_capable+0x7e/0x2e0
[  533.372798][   T34]  ? radix_tree_lookup+0x240/0x290
[  533.374844][   T34]  nbd_genl_reconfigure+0x409/0x1870
[  533.377114][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  533.379424][   T34]  ? __nla_parse+0x40/0x60
[  533.381236][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  533.383725][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  533.386218][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  533.388609][   T34]  ? stack_trace_save+0x9c/0xe0
[  533.390230][   T34]  genl_rcv_msg+0x60e/0x790
[  533.391637][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.393237][   T34]  ? do_raw_spin_lock+0x121/0x290
[  533.395098][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  533.397377][   T34]  ? __netlink_lookup+0xbd/0x810
[  533.399261][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.401095][   T34]  netlink_rcv_skb+0x208/0x470
[  533.402881][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.404702][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.406753][   T34]  ? lock_release+0x4b/0x3e0
[  533.408410][   T34]  ? down_read+0x1ad/0x2e0
[  533.410036][   T34]  genl_rcv+0x28/0x40
[  533.411445][   T34]  netlink_unicast+0x82f/0x9e0
[  533.412953][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  533.414813][   T34]  ? netlink_sendmsg+0x642/0xb30
[  533.416739][   T34]  netlink_sendmsg+0x805/0xb30
[  533.418591][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.420478][   T34]  ? futex_unqueue+0x22/0x240
[  533.422254][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  533.423828][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  533.425777][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.427759][   T34]  __sock_sendmsg+0x21c/0x270
[  533.429547][   T34]  ____sys_sendmsg+0x505/0x830
[  533.431385][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  533.433412][   T34]  ? __might_fault+0xb0/0x130
[  533.435202][   T34]  ? import_iovec+0x74/0xa0
[  533.437326][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  533.439131][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  533.441139][   T34]  ? futex_wait+0x285/0x360
[  533.442919][   T34]  ? __fget_files+0x2a/0x420
[  533.444683][   T34]  ? __fget_files+0x3a0/0x420
[  533.446602][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  533.448500][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  533.450556][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.452379][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.454215][   T34]  do_syscall_64+0xfa/0x3b0
[  533.456028][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.458327][   T34]  ? exc_page_fault+0x9f/0xf0
[  533.460132][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.462388][   T34] RIP: 0033:0x7fd49e38ebe9
[  533.464071][   T34] RSP: 002b:00007fd49f20b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  533.467612][   T34] RAX: ffffffffffffffda RBX: 00007fd49e5b5fa0 RCX: 00007fd49e38ebe9
[  533.470597][   T34] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000004
[  533.473555][   T34] RBP: 00007fd49e411e19 R08: 0000000000000000 R09: 0000000000000000
[  533.478331][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  533.481456][   T34] R13: 00007fd49e5b6038 R14: 00007fd49e5b5fa0 R15: 00007ffe341b2ff8
[  533.484519][   T34]  </TASK>
[  533.485905][   T34] INFO: task syz.1.5443:26829 blocked for more than 143 seconds.
[  533.488679][   T34]       Not tainted syzkaller #0
[  533.490536][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.493669][   T34] task:syz.1.5443      state:D stack:28488 pid:26829 tgid:26823 ppid:5846   task_flags:0x400040 flags:0x00004004
[  533.498286][   T34] Call Trace:
[  533.499576][   T34]  <TASK>
[  533.500553][   T34]  __schedule+0x1798/0x4cc0
[  533.502050][   T34]  ? __pfx___schedule+0x10/0x10
[  533.503855][   T34]  ? schedule+0x91/0x360
[  533.505555][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.507245][   T34]  ? lock_release+0x4b/0x3e0
[  533.508875][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  533.510761][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  533.512753][   T34]  schedule+0x165/0x360
[  533.514180][   T34]  schedule_preempt_disabled+0x13/0x30
[  533.516289][   T34]  __mutex_lock+0x7e6/0x1350
[  533.517978][   T34]  ? __mutex_lock+0x5bb/0x1350
[  533.519785][   T34]  ? genl_rcv_msg+0x10d/0x790
[  533.521580][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  533.523444][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  533.525422][   T34]  ? radix_tree_lookup+0x240/0x290
[  533.527455][   T34]  genl_rcv_msg+0x10d/0x790
[  533.529022][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.530624][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  533.532207][   T34]  ? __asan_memcpy+0x40/0x70
[  533.533701][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  533.535415][   T34]  netlink_rcv_skb+0x208/0x470
[  533.537011][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.538712][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.540753][   T34]  ? lock_release+0x4b/0x3e0
[  533.542561][   T34]  ? down_read+0x1ad/0x2e0
[  533.544292][   T34]  genl_rcv+0x28/0x40
[  533.545801][   T34]  netlink_unicast+0x82f/0x9e0
[  533.547462][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  533.549321][   T34]  ? netlink_sendmsg+0x642/0xb30
[  533.550943][   T34]  ? skb_put+0x11b/0x210
[  533.552393][   T34]  netlink_sendmsg+0x805/0xb30
[  533.554008][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.556322][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  533.558189][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  533.559976][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.561889][   T34]  __sock_sendmsg+0x21c/0x270
[  533.563415][   T34]  __sys_sendto+0x3bd/0x520
[  533.564993][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  533.566879][   T34]  ? count_memcg_event_mm+0x21/0x260
[  533.568809][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  533.570932][   T34]  __x64_sys_sendto+0xde/0x100
[  533.572567][   T34]  do_syscall_64+0xfa/0x3b0
[  533.574304][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.576836][   T34]  ? exc_page_fault+0x9f/0xf0
[  533.578704][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.580943][   T34] RIP: 0033:0x7f2c22390a7c
[  533.582683][   T34] RSP: 002b:00007f2c231baec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  533.585947][   T34] RAX: ffffffffffffffda RBX: 00007f2c231bafc0 RCX: 00007f2c22390a7c
[  533.588926][   T34] RDX: 0000000000000020 RSI: 00007f2c231bb010 RDI: 0000000000000008
[  533.591904][   T34] RBP: 0000000000000000 R08: 00007f2c231baf14 R09: 000000000000000c
[  533.594869][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[  533.597969][   T34] R13: 00007f2c231baf68 R14: 00007f2c231bb010 R15: 0000000000000000
[  533.600924][   T34]  </TASK>
[  533.602182][   T34] INFO: task syz.2.5444:26834 blocked for more than 143 seconds.
[  533.605026][   T34]       Not tainted syzkaller #0
[  533.609792][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  533.613075][   T34] task:syz.2.5444      state:D stack:24328 pid:26834 tgid:26833 ppid:5842   task_flags:0x400140 flags:0x00004004
[  533.617614][   T34] Call Trace:
[  533.618907][   T34]  <TASK>
[  533.620076][   T34]  __schedule+0x1798/0x4cc0
[  533.621870][   T34]  ? __pfx___schedule+0x10/0x10
[  533.623753][   T34]  ? schedule+0x91/0x360
[  533.625429][   T34]  ? rcu_is_watching+0x15/0xb0
[  533.627553][   T34]  ? lock_release+0x4b/0x3e0
[  533.629366][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  533.631610][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  533.634015][   T34]  schedule+0x165/0x360
[  533.637083][   T34]  schedule_preempt_disabled+0x13/0x30
[  533.639209][   T34]  __mutex_lock+0x7e6/0x1350
[  533.640991][   T34]  ? __mutex_lock+0x5bb/0x1350
[  533.642897][   T34]  ? genl_rcv_msg+0x10d/0x790
[  533.644721][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  533.646775][   T34]  ? __dev_queue_xmit+0x27b/0x3b50
[  533.648716][   T34]  ? radix_tree_lookup+0x240/0x290
[  533.650636][   T34]  genl_rcv_msg+0x10d/0x790
[  533.652456][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.654443][   T34]  ? ref_tracker_free+0x63a/0x7d0
[  533.656403][   T34]  ? __asan_memcpy+0x40/0x70
[  533.658132][   T34]  ? __pfx_ref_tracker_free+0x10/0x10
[  533.660216][   T34]  netlink_rcv_skb+0x208/0x470
[  533.662019][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  533.663967][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  533.666128][   T34]  ? lock_release+0x4b/0x3e0
[  533.667897][   T34]  ? down_read+0x1ad/0x2e0
[  533.669591][   T34]  genl_rcv+0x28/0x40
[  533.671139][   T34]  netlink_unicast+0x82f/0x9e0
[  533.672980][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  533.674997][   T34]  ? netlink_sendmsg+0x642/0xb30
[  533.677069][   T34]  ? skb_put+0x11b/0x210
[  533.678666][   T34]  netlink_sendmsg+0x805/0xb30
[  533.680574][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.682618][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  533.684547][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  533.686621][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  533.688669][   T34]  __sock_sendmsg+0x21c/0x270
[  533.690469][   T34]  __sys_sendto+0x3bd/0x520
[  533.692242][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  533.694146][   T34]  ? count_memcg_event_mm+0x21/0x260
[  533.696241][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  533.698214][   T34]  __x64_sys_sendto+0xde/0x100
[  533.700022][   T34]  do_syscall_64+0xfa/0x3b0
[  533.701722][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.704005][   T34]  ? exc_page_fault+0x9f/0xf0
[  533.705918][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.708147][   T34] RIP: 0033:0x7fdd44f90a7c
[  533.709891][   T34] RSP: 002b:00007fdd431f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  533.713101][   T34] RAX: ffffffffffffffda RBX: 00007fdd431f4fc0 RCX: 00007fdd44f90a7c
[  533.718217][   T34] RDX: 000000000000001c RSI: 00007fdd431f5010 RDI: 0000000000000005
[  533.721215][   T34] RBP: 0000000000000000 R08: 00007fdd431f4f14 R09: 000000000000000c
[  533.724187][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  533.727257][   T34] R13: 00007fdd431f4f68 R14: 00007fdd431f5010 R15: 0000000000000000
[  533.730234][   T34]  </TASK>
[  533.731472][   T34] INFO: lockdep is turned off.
[  533.733328][   T34] NMI backtrace for cpu 1
[  533.733340][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  533.733354][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  533.733363][   T34] Call Trace:
[  533.733368][   T34]  <TASK>
[  533.733373][   T34]  dump_stack_lvl+0x189/0x250
[  533.733390][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  533.733401][   T34]  ? __pfx__printk+0x10/0x10
[  533.733419][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  533.733432][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  533.733444][   T34]  ? __pfx__printk+0x10/0x10
[  533.733458][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  533.733475][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  533.733487][   T34]  watchdog+0xf93/0xfe0
[  533.733502][   T34]  ? watchdog+0x1de/0xfe0
[  533.733517][   T34]  kthread+0x711/0x8a0
[  533.733530][   T34]  ? __pfx_watchdog+0x10/0x10
[  533.733543][   T34]  ? __pfx_kthread+0x10/0x10
[  533.733555][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.733568][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.733581][   T34]  ? __pfx_kthread+0x10/0x10
[  533.733593][   T34]  ret_from_fork+0x3fc/0x770
[  533.733604][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  533.733615][   T34]  ? __switch_to_asm+0x39/0x70
[  533.733628][   T34]  ? __switch_to_asm+0x33/0x70
[  533.733640][   T34]  ? __pfx_kthread+0x10/0x10
[  533.733652][   T34]  ret_from_fork_asm+0x1a/0x30
[  533.733669][   T34]  </TASK>
[  533.733673][   T34] Sending NMI from CPU 1 to CPUs 0:
[  533.790583][    C0] NMI backtrace for cpu 0
[  533.790594][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  533.790603][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  533.790607][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  533.790620][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  533.790626][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  533.790634][    C0] RAX: 29c259ed4fc2ad00 RBX: ffffffff819683b8 RCX: 29c259ed4fc2ad00
[  533.790639][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  533.790644][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  533.790649][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  533.790654][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  533.790658][    C0] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  533.790664][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  533.790669][    C0] CR2: 00007f68fb1b9440 CR3: 000000002704c000 CR4: 00000000000006f0
[  533.790695][    C0] Call Trace:
[  533.790700][    C0]  <TASK>
[  533.790703][    C0]  default_idle+0x13/0x20
[  533.790711][    C0]  default_idle_call+0x74/0xb0
[  533.790718][    C0]  do_idle+0x1e8/0x510
[  533.790726][    C0]  ? __pfx_do_idle+0x10/0x10
[  533.790734][    C0]  cpu_startup_entry+0x44/0x60
[  533.790740][    C0]  rest_init+0x2de/0x300
[  533.790749][    C0]  start_kernel+0x3a9/0x410
[  533.790763][    C0]  x86_64_start_reservations+0x24/0x30
[  533.790777][    C0]  x86_64_start_kernel+0x143/0x1c0
[  533.790791][    C0]  common_startup_64+0x13e/0x147
[  533.790811][    C0]  </TASK>
[  533.791584][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  533.856935][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  533.859821][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  533.863361][   T34] Call Trace:
[  533.864498][   T34]  <TASK>
[  533.865601][   T34]  dump_stack_lvl+0x99/0x250
[  533.867402][   T34]  ? __asan_memcpy+0x40/0x70
[  533.869190][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  533.870939][   T34]  ? __pfx__printk+0x10/0x10
[  533.872489][   T34]  vpanic+0x281/0x750
[  533.873777][   T34]  ? __pfx_vpanic+0x10/0x10
[  533.875337][   T34]  ? preempt_schedule+0xae/0xc0
[  533.876952][   T34]  ? preempt_schedule_common+0x83/0xd0
[  533.878648][   T34]  panic+0xb9/0xc0
[  533.879834][   T34]  ? __pfx_panic+0x10/0x10
[  533.881494][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  533.883398][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  533.885335][   T34]  watchdog+0xfd2/0xfe0
[  533.886649][   T34]  ? watchdog+0x1de/0xfe0
[  533.888059][   T34]  kthread+0x711/0x8a0
[  533.889470][   T34]  ? __pfx_watchdog+0x10/0x10
[  533.891192][   T34]  ? __pfx_kthread+0x10/0x10
[  533.892873][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  533.894766][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.896502][   T34]  ? __pfx_kthread+0x10/0x10
[  533.898026][   T34]  ret_from_fork+0x3fc/0x770
[  533.899689][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  533.901289][   T34]  ? __switch_to_asm+0x39/0x70
[  533.902836][   T34]  ? __switch_to_asm+0x33/0x70
[  533.904478][   T34]  ? __pfx_kthread+0x10/0x10
[  533.906036][   T34]  ret_from_fork_asm+0x1a/0x30
[  533.907752][   T34]  </TASK>
[  533.909661][   T34] Kernel Offset: disabled
[  533.911078][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:34:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888108a80237 R9 =1ffff11021150046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8dd R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68fb1b9440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f973cb87d20
XMM02=0000000500000007 ffffffff00000001 XMM03=0180043e08000c08 000100000408060a
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=0800010000020806 060123cc00000007 XMM07=e2710c0800000000 0000000000000031
XMM08=676572366d697001 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff1102001d187 RBX=ffffffff822a9f09 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8be33660 RDI=ffffea0000d12180 RBP=0000000000000011 RSP=ffffc9000369f508
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940001a2437
R12=ffff8881000e8c38 R13=00000000ffffffff R14=dffffc0000000000 R15=ffff88805fffb400
RIP=ffffffff822a9fc1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f973d6e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f973cb876c3 00007f973cb876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0800010000020806 060123cc00000007 XMM07=e2710c0800000000 0000000000000031
XMM08=676572366d697001 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
