last executing test programs:

16.11126055s ago: executing program 1 (id=21164):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)

16.110291083s ago: executing program 0 (id=21166):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x1}, @mss={0x2, 0xe5}, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x8}, @mss={0x2, 0x10}], 0x7)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c)
clock_gettime(0x3, &(0x7f00000000c0))
setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r3)
close(r2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @remote, 0x1, "f2ee3ad252196b38eb4314c6afb8a875634fbbab0f6318316366ae9b157b26f6", 0x401, 0x6, 0x3, 0x297}, 0x3c)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x101, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000200)={{r4}, "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"})

16.109710705s ago: executing program 1 (id=21167):
unshare(0x8040480)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket(0x2b, 0x80801, 0x1)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x1, 0xb, 0xa, 0x3, 0x18, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @generic={0x80, 0x5, 0x2, 0x0, 0x8}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffff02a, 0x62, &(0x7f0000000100)=""/98, 0x41000, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1], &(0x7f0000000240)=[{0x5, 0x5, 0x0, 0x4}, {0x3, 0x2, 0x9, 0x2}, {0x4, 0x5, 0x1, 0x5}, {0x0, 0x6, 0x6, 0x9}], 0x10, 0x3ff}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r1, r2}, 0xc)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448f0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@routing={0x32, 0x6, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, 0x38)

16.00218113s ago: executing program 2 (id=21168):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r3, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', <r4=>0x0, 0x10, 0x8000, 0x5, 0x7, {{0x3d, 0x4, 0x2, 0x3f, 0xf4, 0x66, 0x0, 0xda, 0x0, 0x0, @remote, @private=0xa010100, {[@timestamp={0x44, 0x1c, 0x5, 0x0, 0x1, [0x6, 0x1, 0x7, 0x0, 0x3, 0xfffffff9]}, @rr={0x7, 0xf, 0xdf, [@loopback, @rand_addr=0x64010102, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xbf, 0x3, 0x6, [{@empty, 0xffffffc0}, {@broadcast, 0x2}, {@loopback, 0x2}, {@loopback, 0x1e0}, {@empty, 0x80}]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0x11, "4b0502f5318adc671498adb48eceec"}]}, @cipso={0x86, 0x71, 0x3, [{0x5, 0xe, "26a811865e4d166fcad59149"}, {0x2, 0xe, "8831d9e50fb3dbe5a99160af"}, {0x5, 0xa, "e4c13826409e44b7"}, {0x7, 0xa, "d899565d05736441"}, {0x1, 0xe, "d1cf7426945e191a769be7f7"}, {0x6, 0xf, "a7b3f94efa165200872248dd40"}, {0x6, 0x3, "ba"}, {0x7, 0x11, "de45e33362b4df2468fd757db2ed79"}, {0x1, 0xa, "8d972938972ad879"}]}]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)=@ipv4_getaddr={0x64, 0x16, 0x1, 0x70bd27, 0x25dfdbff, {0x2, 0x38, 0x29, 0xfe, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xba}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LABEL={0x14, 0x3, 'vlan1\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x20000801)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @private=0xa010102, r4}, 0xc)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{<r7=>r0, &(0x7f0000000200)='))^\x00', 0x165040, &(0x7f0000000240)={@_ha_fsid={[0x1000, 0x2]}, {0x3, 0x6, 0x9, 0x7}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x967b}, 0x1, &(0x7f00000003c0)=[{0x1, 0x401, &(0x7f0000000300)='syztnl2\x00', &(0x7f0000000340)="054a40c43cc2f043d5dc1a263ab8ad52b3a319857fd44e2fa532de36dc2faaa1caf7f53c77b3137f76b174e0a38e38e824b7501ea64be72f0852a9f32caabb4cb3c4966af373d612b4b2068b45d593a822921041991f5b6a25c0c597edc5f3c3ff77d730388dff", 0x67, 0x2}]})
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd}})
write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2d, 'freezer'}, {0x2b, 'cpuset'}, {0x2b, 'perf_event'}]}, 0x1d)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r7, &(0x7f00000006c0)="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", &(0x7f00000016c0)=@tcp=r7}, 0x20)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xafe6)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0xb)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)

15.980241338s ago: executing program 0 (id=21169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000d00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f40)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008800}, 0xc3708ee71abe99a8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="0000000009e8c90fa65a781fc3815c2f4ea1a9dec760a5e88aae28c7bd5b85cca04dd1ca10661641c4cd73c6c313ae1ae2aba72828b5708abc5236f9bf8dd3126e97337f4575068ae03f4c5313a6509c9e25755b18ebab59ce8f80cec037c5809946e13b16c43e1f4ffec62fd75e3fb3eaae085a89073396f9c2d2ef27e80ff78effe0c39f90d44bd82af4fc8e881949dbd9dc30557a7129b21ce1f137075fd8509c787771f0012bc1afd697fb752de41356b33e799d64e47ac706b629cfde48b3db2fb83121a11e4876e82ca7513367c6b1a9ce5188811b6eb963", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf257300000008000300", @ANYRES32=0x0, @ANYBLOB="0800ef000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x84)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x17, &(0x7f0000001100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @alu={0x4, 0x0, 0x1, 0xb, 0x3, 0x2, 0xf}, @tail_call, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x1c, 0x3, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1e, &(0x7f0000000240)=""/30, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x0, 0x75c, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xe, 0x8}], 0x10, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r4=>0x0})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000540)={0x7f}, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000580)={<r6=>r0, 0x10000, 0x1, 0x5})
sendmsg$nl_route_sched(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getqdisc={0x40, 0x26, 0x300, 0x70bd2a, 0x5dfdbff, {0x0, 0x0, 0x0, r4, {0x6, 0xffe1}, {0x8, 0xfff4}, {0x5, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
socket$inet(0x2, 0x804, 0x5)
r7 = syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/pid_for_children\x00')
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9c0044f5a807291, 0x80010, r7, 0x8b5f0000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000700)={<r8=>0x0, @in6={{0xa, 0x4e22, 0x2f29, @dev={0xfe, 0x80, '\x00', 0x25}, 0x7}}, [0x173, 0x6, 0x7, 0x400, 0xffffffff, 0x2, 0x9, 0x6, 0x4, 0x5, 0x7fff, 0x3, 0x8, 0x3, 0x4]}, &(0x7f0000000800)=0x100)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000840)={r8, 0x2}, 0x8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="700000f7", @ANYRES16=r10, @ANYBLOB="20002bbd7000ffdbdf250300000014000500fe80000000000000000000000000001f06000b000b00000006000b001f000000080007000a0101000800020007000000080004000200000008000c00000000000800040003000000080008007f00000106000b001e000000"], 0x70}, 0x1, 0x0, 0x0, 0x48014}, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r1, 0x100, 0x70bd2b, 0x64, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6a}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x127}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r9)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ec0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r11, @ANYBLOB="00012cbd7000ffdbdf252b0000000a0001007770616e34000000", @ANYRESHEX=r7, @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20004040)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r12, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c)
shutdown(r12, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x400, 0xfffffffffffffffd}, &(0x7f00000010c0)=0x18)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="200000000714000225bd7001f8dbdf2508004400", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x1)

15.980077653s ago: executing program 1 (id=21170):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x20000)

15.911911962s ago: executing program 2 (id=21171):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x8, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x48, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x48}}, 0x404c040)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r6 = socket(0x2b, 0x80801, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
socket(0xf, 0x2, 0x6)
r10 = socket(0x22, 0x2, 0x23)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000240a05"], 0xf0}}, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x10000, @empty, 0x43}, 0x1c)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)

15.910154994s ago: executing program 1 (id=21172):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x8, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffe}}}]}, 0x38}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="13483a516d0bfb4115cd77b9059cf2851ab695a77f3fb66daefac01afecc2587e3aa369616d1df5b287a84d76660d3e833dfd4b82c00000000", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf25210000000a0001007770616e340000000c00050000000000000000000a0001007770616e310000000500200000000000"], 0x40}}, 0x4010)
r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
r6 = socket(0x2b, 0x80801, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) (async)
socket(0xf, 0x2, 0x6) (async)
r10 = socket(0x22, 0x2, 0x23)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000240a05"], 0xf0}}, 0x0) (async)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x10000, @empty, 0x43}, 0x1c)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

15.903784573s ago: executing program 0 (id=21173):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r4, 0x0) (async)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xfffffffffffffe42, {0x2, 0x4e24, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYRES64], 0x18}, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r6], 0x30}}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r7, 0x80) (async)
accept$netrom(r7, 0x0, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0xfdef) (async)
close(0x4) (async)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) (async)
r8 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x8000) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r9, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)=r10, 0xfffffffffffffdb9)

15.779497679s ago: executing program 0 (id=21174):
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x8, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000007600010020000000ffdbdf250300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x4000})
r4 = socket(0x10, 0x803, 0x1c1ea477)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x74bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0x6}, {0xb, 0xa}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8ea8}, @qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3}, @TCA_PIE_ECN={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x1}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x24000010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000033000a030000000000000000000a00000708000240000000020900010073797a3100000000000000000a0000070900010073797a71000000000900030073797a320000000014000000110001af63304eb649e3a4b43281b7c9cb03eea610c28e3d16db255454abb858e1f68bfe22fb4ad496c5f6d0c52e238a8fe6045252a21eab1da8141dcf85ff072b3e64a8faa6da384f59e94a5ba570820fc66c73bbe7d3e1fc06afb4f277a861c9e91c08e03035bfa8a984989277540bef0c5b2738db9cd2663e5fe7e7ccba5c00"/236], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010100000000000000000a0000040900010073797a3100000000080007400000001c0900020073797a310000000008000a40fffffffc28000000080a03060000000000000000070000000900020073797a300000000008000a400000000314000000110001000000000000000000f5ffff09"], 0x8c}}, 0x40)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
ioctl$int_in(r7, 0x5452, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7)
socket(0x400000000010, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4)
listen(r2, 0x7)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r10, &(0x7f00000000c0), 0xfffffffffffffeb1)
pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x5)
getsockopt$bt_hci(r2, 0x84, 0x3, 0x0, 0x0)

15.777930586s ago: executing program 2 (id=21175):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)

15.776017423s ago: executing program 1 (id=21176):
r0 = socket(0x2b, 0x80801, 0x1)
listen(r0, 0x6)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)={@fallback, 0xffffffffffffffff, 0x35, 0x2004}, 0x20)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100f7ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@bcast, @bcast, @null, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3000000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
r9 = accept4(r2, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c010000170a0102000000000000000002000007e000038008000240000000090800014000000000cc0003801400010076657468305f766972745f776966690014000100766574686f5f68737200000000140801007866726d3000000000000000000000001400010070696d36726567310000000000000000140001006272696467655f736c6176655f300000140001006e6574706369300000000000000000001400010076657468305f766c616e00000000000014000100767863616e31000000000000000000001400010070696d72656731000000000000000000140001006970766c616e3000000000000000000008000740000000010c000540000000000000000508000740000000020900010073797a3000000000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000)

15.661513372s ago: executing program 2 (id=21177):
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3, 0x10}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000300)}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
ioctl$int_in(r2, 0x5452, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
r3 = socket(0x400000000010, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x294, 0x12, 0x100, 0x70bd27, 0x25dfdbff, {0x1, 0x5d, 0x3, 0x2, {0x4e20, 0x4e20, [0x6, 0x7369, 0x4a7, 0x80], [0x4f, 0x101, 0xa, 0x9], 0x0, [0x7, 0x10]}, 0x7, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x13, 0x1, "81c7acbe75e69da98d25a11315a5e9"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "45ef9c68cfa9cd780082461f30d42b8622ec62a32770f5534a2f17ee66d1796691fa228e209e907d7567d9a164a5c2c3d1fccce5a0e5298ffb5a84d30ae98c89a6b08ecda82fcd0bb4d547e633a62cb7126b2c58a1bc6f19a809ac9734cc770016e3345b81bad3cf9fe69801a39f8956ceef92ff8f4267bceb"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "bfc61e241ddd60a0236c4d2cf957bcd719b965ef2a011e280949238991783fb9df3897488b3b5e3448d5b96fa02774c7b820b84af3da3adb6909c7c666e0753b905c97aa4a87f5013b6da0595afa0e2cf913818e4f49b645e3fe968ccc0d616520accfd8dd052567d65e6d7c34c1651561b643745e0e042c7112471b7b48b10ef6d55efac5b89792bb3260bc291fbfa402af50d6667f2be3d64e09ef8551e808285a38826d23009b15da2f6e74e32f669a5a29e06c516bd887b88c1fcdcda2b2683106f40d5ee8815c273e2f544106385aeaca7521b5c400cba5adc002c86ae0ae307216cb397ee5acfd46558487ca0a6ade"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "a437aa73e68ce9847b39493a095c8bd5535350f2d2779568990c50ac3262f28db6fa901938b4e4e79b2b1c8b9decb0e051dcf3269b2f571b46407bfd45c912d1e062f02e0defbc12cea9884ed9b78e0d14420f0272be9b52bff60fd811c23f5e988fd421d90da70b5f16b5805fb6532933e0a17a16209007904931caebea4fa51c67cc14ebafec67312f582bd6ef3c4e7e77fba1f3c4a096edd4e838e8ea4e24b8053c2726c044011342ff7d3ec22e0ae951445848"}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040891}, 0x20008810)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x5)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)

15.658066562s ago: executing program 1 (id=21178):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{r3, 0x93d4}], 0x1, 0x9)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macsec0\x00', <r7=>0x0})
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xbc, 0x0, @vifc_lcl_ifindex=r7, @remote}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)

15.22215414s ago: executing program 0 (id=21179):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xa, 'veth0_to_hsr\x00'})
sendmsg$alg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="ff27a5be71b457a16571b93e5a61f213463a0834cd14f059313a4dc836416d00dbd15641ca129f04bfc889715a5d6f88b3228bfafe7ebffb0b9367906f7a63", 0x3f}, {&(0x7f0000000040)="51d72db83c01399592ba54c8e072dda802ef03b1bd60db8178d5451faa6934aa150e6c4d297cf55e609bee765f60a24197ba762ed93217c7260f2c9623b911aa74359e1d3c3fc267513ff1a37e3d39180e511f538e309e9c9bac436a81167768706cc3e44b78f5569dd280c4647efe52ca7992e7f25877f7b51c7629ff075d27c94d1c4c506c42267eaf2c5685a47f412b7de86751e63e70390b0870ae6923e111c4b3195637166d7bbf8cafac5c203d8dcb6c6d84fc8b0cf1141710bb4c6c482f37cf2acfe4cb27c4190fe0c91df7569ec182af09096f4e73a6dffd18dd0a512de1a7b1710eef22d85e34", 0xeb}, {&(0x7f0000000240)="af2c3b3a609f25ac96591c3cccf91bf2bda252caa2bf67ae3a42f033281810b630b670fe8093ff8c7fb2d296df283cb25fd62dfbc0f355a40f34bb40d1458953b904752b9cc39e66fe2809b22ead2e6c928100ef4b7bb13387a304c6180cc7c48ce784a92bd80d4fe084f00cffac8190f5bc2c84d30542de457e0a623b990d1e62f813f4fbfe0495c192a068f5da378773094a669c2e4cb09eff46a9bc055274143bb4d7be6472be8d4345171b8424f2ed4d3b087e6bfae8d70a0b9678", 0xbd}, {&(0x7f0000000140)="025463d1a342f5052b72e0c60b778bfcac1a872b6c895a582d91fc66b280c72b6d8f8e50aa2beecc95da1a0481d21f4786b61ac852704bd6", 0x38}, {&(0x7f0000000300)="3c80110aa019061fbbb1f02d5da4f1d4c3d5150a4dd9cce85e1c0130b7716b8e8e111a17e22da643f7ab7914c9ea1560c025075710ded575e1b3d83464fe39f12df8d13b82ed680afa0fb04c86de5dfcf1813e4564251046403e3cc85e2f889a630f9e36e18e1d7bfe6d0b76bcc6ef3374407bd6e6b0ddbeb26168d947e5733e44d4df1f5e38f7ac303690651d5fbe544f82e50341c878068041257afaf4222d8ede543bdac80bc3c09476616377c50f723fe0be631f897053f5faa43426de8336ba9ac25d0afc9f", 0xc8}, {&(0x7f0000000180)="9c988573b74f01fa26e9a173c1", 0xd}, {&(0x7f00000004c0)="bbeb5bc844618a6ff5894f779419125fe1d250e2ae738fb288255336ddaa9dfa9831f21389465a06779e88b134032fa4578a4620fcd0ac2e7b2e812acad3d4082744ca20b0617281712b8b679754cba1febcc36380a69fcd67832b5ddd12217a5de0f1ae2f70a1ee244f667c97f790bce2a3b271dfd02b10af46d31b49b1ac81bf3ca8b7bc31c757fcf591604aa6e063e85fb74bc5665d2a90f383e1e81ebed5b9b1feb7235c8c5132079d20dc3f4560f459fab70a1e6c11927e3466f36c248b3475511bfe25940b39bd463ea3a343e08c7922fed45c3c0dc1cd5bc9fa0f3c45a9e9067c8b277f07a54a4ba3329c", 0xee}, {&(0x7f0000000400)="84b916ea82e33b2ab81a378072609eebe1178fd5f2e90f1888e1b567bd25bb847c7dfc303a3bc1f7699299dd31475f0f80d1968c6b78e2269c61070e9b0f0fb92575372ba5ca7ff865", 0x49}, {&(0x7f00000005c0)="b26f2a8d2f9452b675df1e677d82e4fc6d15ca0d52b7abe6bbd8fd7e1d45129204de26f92c4ec0ca322767f9d413b9ad883d1046f2bb0bb3b043c135aa068145e968dc93c9947bae60e236b0c94cf3d6fba2dade642d7d7a9246d1a5d5c179be67a8111a5acb46d9d681740dbe99c6d89397d39ea4c75f774863e36110dd12018f1779c5f392ece502efa8947fe63e61021c711113d34e0d8064da705ecd8d7fe2df0c3ebb01bd62e3fb72ee50ebd7c7681ab20170d83af0cc", 0xb9}], 0x9, 0x0, 0x0, 0x44841}, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000780)=0x7)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b11430c100"/16, 0x20000)

15.152211292s ago: executing program 0 (id=21180):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000e000000240012800b000100677265746170000014800280080004000800000006fb"], 0x44}}, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0xfe0a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000001000000000009000100009500000000000000a2c7fbc97caa445adeaf7bd4fd1d4c468e4725674700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010080ffffff000000000100000008000100030000002c00048005000300010000000500032d000000000500030080000000050003000100000005000300050000000800020003"], 0x50}}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000240)=0x1c00000000000000, 0x8)
getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86)
connect$vsock_stream(r10, &(0x7f0000001c80)={0x28, 0x0, 0x2710, @local}, 0x10)
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0))
syz_emit_ethernet(0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="904673666b0b6d24aaaaaa3a81000300001100b12ef1"], &(0x7f0000000140)={0x1, 0x3, [0xc78, 0xc60, 0x764, 0xa6]})

15.151663457s ago: executing program 2 (id=21181):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x194, 0x24, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x3, 0xd}, {0x4, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_STAB={0x4d, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2a, 0x5, 0x0, 0x9, 0x0, 0xa0000, 0x80000001, 0x3}}, {0xa, 0x2, [0x5, 0x8, 0x3]}}]}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x2, 0x5a, 0x1, 0x200, 0x8, 0x4}}, {0xc, 0x2, [0x8, 0x7, 0x7, 0xff]}}, {{0x1c, 0x1, {0x2, 0x2, 0x400, 0x4, 0x1, 0x4d, 0x9, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0x6]}}, {{0x1c, 0x1, {0x6, 0x8f, 0x0, 0x5, 0x3, 0xbe, 0xf, 0x2}}, {0x8, 0x2, [0x3, 0xa33]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xa4}]}, 0x194}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f00000004c0)=""/70, 0x46, 0xa3, &(0x7f0000000580)={0x11, 0x5, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000040)={r11, 0x2, 0x9, 0x8000000000000001}) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c00000002020500000000000000000003000005480001800c00028004fb01003a0000002c000180140003000000000000000000000000000000000014000400000000000000000000000000000000000c0002800500010006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="000427bd7000fedbdf252b0000000a0001007770616e310000000a0094000000000000000000940cf5f4446341a59725e2a23dc18d006f51df413c0076119a8ba521caf3120a0f2bb7ca745e36315d2fae4124a805563de5ecc41ece8d00d397d22909d26a71ab5aa71074a979669a6ab4c4b6503460f76d9f99a6cf2d625bf9786e42"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) (async)
getsockopt$inet_tcp_int(r11, 0x11e, 0x6, 0x0, &(0x7f0000000080))

15.074156947s ago: executing program 2 (id=21182):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0x1})
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x17, "98055c7bd0df903703647a3de9cde8ce22e5d13e74ddf166c54958c0b610cf6f41ff84a98473082d55b77a4724aba0d18908f7e8be3588c0bd1c1785d21e8e90e81bbff155a9c3d567d04563d8a45a1c112f9eb5068054f82af59af662dd642471c864f42aeb56727bcdd11fda76ac28a6c0f8e852abe57297f883425809314e"})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r4=>0x0, 0x4, 0x41, 0x8, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0x2, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x0, 0x99, 0x3, 0x43, @mcast2, @local, 0x8, 0x7800, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x80, 0x8, 0xfa6, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x80, 0x5f}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004800}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x180, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "2dfda38e209ca2c3c5e569649616c5529405e496bfb9df1a50c468d28ee9685527d10c388011b5056d6c71a547013e7a98016798eeeaef54dd513e0f386c490477bca638e56cac945b2efe75c6d1ec4e4cbd501c2148987e7203c9f2b9398bc47e89d844d5b38be778c1b8a07043b1e5e639f9faffab4acb3691d5b22464d70b3f783e686dd51c9c8d70b1617b91d177cb79fd3625d88a8222685002b778077f13"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000006c0)={0x0, 0x3, 0x2, 0xfffffffffffffff7}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000700)) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x10c, 0x33, 0x400, 0x70bd2c, 0x25dfdbfd, {0xf}, [@generic="65512ae361aaf18eabbef7400b39bdab88c2c900233f5224e64fc154c94e4770198ac4ad8eea73121f2fcd12b68e947e4e2925aed5830003977b85d6861ecca989105bc762e1c7cf4769239a931e9c6aaaf42002d37de7266e37abd8183afbd5249e86760bbc80f0585cb6c9209bfc67812935f0089b497251c8f7b39c675c1ebfe86a20e94f8935b76b03ae0cfbe0e182ce7e0cbf203569ae0cdec7e0ead520dfa2a5d8afb3da11e242d951b733c0fc33be4efa2aa3a7d70bb11614035587c3ec8cce9c370014596e253395c845d1fc7dae7ac50db461a555263c02f58128fe4a9338f5cbeb2f18c23592bf100956f59f7a2b7cbd4f71"]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x2000004) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x20000840)
r8 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r8, &(0x7f0000000a40)={0x11, 0x7, r3, 0x1, 0x7, 0x6, @random="6e927c9dabc6"}, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x801) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r7)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x53f}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r8, 0x5c2ea000) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r0) (async)
connect$ax25(r0, &(0x7f0000000d40)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x48) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000dc0)=0x4, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000e00)={0x3, 'pim6reg0\x00', {0x6000}, 0x2}) (async)
bind$tipc(r0, &(0x7f0000000e40)=@name={0x1e, 0x2, 0x1, {{0x40, 0x2}}}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000f00)={'erspan0\x00'}) (async)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@multicast1, @in6=@private1}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001040)=0xe8) (async)
socket$key(0xf, 0x3, 0x2)

58.66962ms ago: executing program 32 (id=21180):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000e000000240012800b000100677265746170000014800280080004000800000006fb"], 0x44}}, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0xfe0a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0xfdef)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000001000000000009000100009500000000000000a2c7fbc97caa445adeaf7bd4fd1d4c468e4725674700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010080ffffff000000000100000008000100030000002c00048005000300010000000500032d000000000500030080000000050003000100000005000300050000000800020003"], 0x50}}, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x9e09de68d32c759b, 0x0, 0x1}}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7200000000003900000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040c0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000240)=0x1c00000000000000, 0x8)
getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86)
connect$vsock_stream(r10, &(0x7f0000001c80)={0x28, 0x0, 0x2710, @local}, 0x10)
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0))
syz_emit_ethernet(0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="904673666b0b6d24aaaaaa3a81000300001100b12ef1"], &(0x7f0000000140)={0x1, 0x3, [0xc78, 0xc60, 0x764, 0xa6]})

358.655µs ago: executing program 33 (id=21178):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000002000)=[{r3, 0x93d4}], 0x1, 0x9)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macsec0\x00', <r7=>0x0})
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x8, 0xbc, 0x0, @vifc_lcl_ifindex=r7, @remote}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800)
sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r12, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)

0s ago: executing program 34 (id=21182):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0x1})
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000040)={0x17, "98055c7bd0df903703647a3de9cde8ce22e5d13e74ddf166c54958c0b610cf6f41ff84a98473082d55b77a4724aba0d18908f7e8be3588c0bd1c1785d21e8e90e81bbff155a9c3d567d04563d8a45a1c112f9eb5068054f82af59af662dd642471c864f42aeb56727bcdd11fda76ac28a6c0f8e852abe57297f883425809314e"})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r4=>0x0, 0x4, 0x41, 0x8, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0x2, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x0, 0x99, 0x3, 0x43, @mcast2, @local, 0x8, 0x7800, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x80, 0x8, 0xfa6, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x80, 0x5f}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004800}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x180, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "2dfda38e209ca2c3c5e569649616c5529405e496bfb9df1a50c468d28ee9685527d10c388011b5056d6c71a547013e7a98016798eeeaef54dd513e0f386c490477bca638e56cac945b2efe75c6d1ec4e4cbd501c2148987e7203c9f2b9398bc47e89d844d5b38be778c1b8a07043b1e5e639f9faffab4acb3691d5b22464d70b3f783e686dd51c9c8d70b1617b91d177cb79fd3625d88a8222685002b778077f13"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000006c0)={0x0, 0x3, 0x2, 0xfffffffffffffff7}) (async)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000700)) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x10c, 0x33, 0x400, 0x70bd2c, 0x25dfdbfd, {0xf}, [@generic="65512ae361aaf18eabbef7400b39bdab88c2c900233f5224e64fc154c94e4770198ac4ad8eea73121f2fcd12b68e947e4e2925aed5830003977b85d6861ecca989105bc762e1c7cf4769239a931e9c6aaaf42002d37de7266e37abd8183afbd5249e86760bbc80f0585cb6c9209bfc67812935f0089b497251c8f7b39c675c1ebfe86a20e94f8935b76b03ae0cfbe0e182ce7e0cbf203569ae0cdec7e0ead520dfa2a5d8afb3da11e242d951b733c0fc33be4efa2aa3a7d70bb11614035587c3ec8cce9c370014596e253395c845d1fc7dae7ac50db461a555263c02f58128fe4a9338f5cbeb2f18c23592bf100956f59f7a2b7cbd4f71"]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x2000004) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x20000840)
r8 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r8, &(0x7f0000000a40)={0x11, 0x7, r3, 0x1, 0x7, 0x6, @random="6e927c9dabc6"}, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x801) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r7)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000cc0)={&(0x7f0000000b80), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x58, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x53f}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x2010, r8, 0x5c2ea000) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r0) (async)
connect$ax25(r0, &(0x7f0000000d40)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null]}, 0x48) (async)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000dc0)=0x4, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000e00)={0x3, 'pim6reg0\x00', {0x6000}, 0x2}) (async)
bind$tipc(r0, &(0x7f0000000e40)=@name={0x1e, 0x2, 0x1, {{0x40, 0x2}}}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10, r7}, 0x18) (async)
ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000f00)={'erspan0\x00'}) (async)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@multicast1, @in6=@private1}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001040)=0xe8) (async)
socket$key(0xf, 0x3, 0x2)

kernel console output (not intermixed with test programs):

45][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16406'.
[  629.325172][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16411'.
[  629.552223][T10804] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.16419'.
[  629.555081][T10804] netlink: Unknown conntrack attr (type=47, max=9)
[  631.263934][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16462'.
[  631.393900][T10910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16469'.
[  632.915791][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16504'.
[  633.070748][T11009] syzkaller1: entered promiscuous mode
[  633.073005][T11009] syzkaller1: entered allmulticast mode
[  633.102850][T11006] lo speed is unknown, defaulting to 1000
[  633.207113][T11006] lo speed is unknown, defaulting to 1000
[  634.189685][T11054] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16527'.
[  634.227533][T11054] syzkaller1: entered promiscuous mode
[  634.229492][T11054] syzkaller1: entered allmulticast mode
[  634.587619][T11078] netlink: 'syz.0.16539': attribute type 4 has an invalid length.
[  635.490968][T11157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  637.273632][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16631'.
[  637.309168][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16631'.
[  637.313024][ T5929] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  637.316483][ T5929] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  637.319668][ T5929] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  637.322818][ T5929] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.327532][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16631'.
[  637.340081][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16631'.
[  637.457653][T11295] lo speed is unknown, defaulting to 1000
[  637.659993][T11300] dvmrp0: entered allmulticast mode
[  637.780712][T11295] lo speed is unknown, defaulting to 1000
[  637.983035][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16654'.
[  638.041351][T11332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  638.069584][T11332] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  638.594942][T11368] syzkaller0: entered promiscuous mode
[  638.598359][T11368] syzkaller0: entered allmulticast mode
[  638.603599][T11366] sch_fq: defrate 0 ignored.
[  638.619506][T11368] macsec2: entered promiscuous mode
[  638.734590][T11383] team_slave_1: Caught tx_queue_len zero misconfig
[  639.214258][T11427] netlink: 'syz.2.16697': attribute type 1 has an invalid length.
[  639.260914][T11427] bond23: (slave veth36): Enslaving as an active interface with a down link
[  639.281356][T11427] bond23: (slave veth38): Enslaving as an active interface with a down link
[  639.295191][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16697'.
[  639.299790][T11427] 8021q: adding VLAN 0 to HW filter on device bond23
[  639.827254][T11482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16721'.
[  639.947488][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16726'.
[  639.965232][T11489] lo speed is unknown, defaulting to 1000
[  640.026142][T11499] netlink: 'syz.0.16725': attribute type 29 has an invalid length.
[  640.033318][T11499] netlink: 'syz.0.16725': attribute type 29 has an invalid length.
[  640.099253][T11489] lo speed is unknown, defaulting to 1000
[  640.207475][T11509] netlink: 232 bytes leftover after parsing attributes in process `syz.0.16733'.
[  640.335110][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16736'.
[  640.633614][T11523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16739'.
[  640.658949][T11523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16739'.
[  640.819752][T11530] lo speed is unknown, defaulting to 1000
[  640.919526][T11539] xt_hashlimit: size too large, truncated to 1048576
[  640.921710][T11539] xt_hashlimit: max too large, truncated to 1048576
[  641.018433][T11530] lo speed is unknown, defaulting to 1000
[  641.856331][T11585] lo speed is unknown, defaulting to 1000
[  641.985702][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16768'.
[  642.062320][T11585] lo speed is unknown, defaulting to 1000
[  643.512739][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16797'.
[  643.568610][T11655] lo speed is unknown, defaulting to 1000
[  643.765267][T11655] lo speed is unknown, defaulting to 1000
[  643.765527][T11659] lo speed is unknown, defaulting to 1000
[  643.776277][T11668] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.16802'.
[  643.791896][T11668] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  643.988677][T11659] lo speed is unknown, defaulting to 1000
[  644.222431][T11681] bond18: option arp_all_targets: invalid value (129)
[  644.241412][T11681] bond18 (unregistering): Released all slaves
[  645.630059][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16829'.
[  645.633537][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16829'.
[  645.750870][T11732] bond27: option packets_per_slave: invalid value (1048582)
[  645.753760][T11732] bond27: option packets_per_slave: allowed values 0 - 65535
[  645.760200][T11732] bond27 (unregistering): Released all slaves
[  645.878885][T11737] Cannot find add_set index 0 as target
[  646.539253][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16842'.
[  646.657768][T11764] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.16845'.
[  647.177618][T11812] netlink: 'syz.1.16857': attribute type 4 has an invalid length.
[  647.201702][   T31] lo speed is unknown, defaulting to 1000
[  647.207691][   T31] syz0: Port: 1 Link DOWN
[  647.212864][   T31] lo speed is unknown, defaulting to 1000
[  647.249659][T11812] lo speed is unknown, defaulting to 1000
[  647.553349][T11812] lo speed is unknown, defaulting to 1000
[  647.582757][T11835] macvlan5: entered allmulticast mode
[  647.842635][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16870'.
[  648.125884][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16872'.
[  648.156209][T11855] ..0{X: left allmulticast mode
[  648.158703][T11855] sit0: left promiscuous mode
[  648.192627][T11855] vlan1: left promiscuous mode
[  648.194223][T11855] geneve1: left promiscuous mode
[  648.210807][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16872'.
[  648.225907][T11855] vlan1: left allmulticast mode
[  648.227834][T11855] geneve1: left allmulticast mode
[  648.230064][T11855] macsec3: left promiscuous mode
[  648.232353][T11855] macvlan2: left promiscuous mode
[  648.234313][T11855] macvlan2: left allmulticast mode
[  648.239542][T11855] geneve5: left promiscuous mode
[  648.242292][T11855] ip6tnl7: left promiscuous mode
[  648.247737][T11855] team1: left promiscuous mode
[  648.250000][T11855] team1: left allmulticast mode
[  648.252607][T11855] bond19: left promiscuous mode
[  648.254550][T11855] bond20: left promiscuous mode
[  648.269900][T11855] vti0: left promiscuous mode
[  648.271804][T11855] vti0: left allmulticast mode
[  648.287727][T11855] vlan0: left allmulticast mode
[  648.289692][T11855] bridge17: left allmulticast mode
[  648.328180][T11861] batadv0: left promiscuous mode
[  648.338684][T11865] bridge0: port 1(gretap0) entered blocking state
[  648.340823][T11865] bridge0: port 1(gretap0) entered disabled state
[  648.343233][T11865] gretap0: entered allmulticast mode
[  648.348085][T11865] gretap0: left allmulticast mode
[  648.349769][ T5929] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.354053][ T5929] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.358743][ T5929] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.362123][ T5929] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.716802][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16887'.
[  649.202758][T11903] lo speed is unknown, defaulting to 1000
[  649.308850][T11903] lo speed is unknown, defaulting to 1000
[  649.568054][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16897'.
[  649.581315][T11920] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  649.908340][T11951] netlink: 830 bytes leftover after parsing attributes in process `syz.1.16912'.
[  649.984239][T11957] xt_CT: You must specify a L4 protocol and not use inversions on it
[  650.284428][T11981] lo speed is unknown, defaulting to 1000
[  650.424582][T11981] lo speed is unknown, defaulting to 1000
[  650.857357][T12008] lo speed is unknown, defaulting to 1000
[  651.031373][T12008] lo speed is unknown, defaulting to 1000
[  651.179082][T12032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.683980][T12070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.691106][T12070] syzkaller0: entered promiscuous mode
[  651.693537][T12070] syzkaller0: entered allmulticast mode
[  651.715229][T12070] tipc: Resetting bearer <eth:syzkaller0>
[  651.726907][T12069] tipc: Resetting bearer <eth:syzkaller0>
[  651.747754][T12069] tipc: Disabling bearer <eth:syzkaller0>
[  651.947594][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16970'.
[  651.951356][T12082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16970'.
[  652.176513][T12101] ipvlan3: entered promiscuous mode
[  652.815473][T12160] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  652.953284][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17012'.
[  653.587903][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17034'.
[  654.043313][T12256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.045904][T12256] syzkaller0: entered promiscuous mode
[  654.047690][T12256] syzkaller0: entered allmulticast mode
[  654.063479][T12256] tipc: Resetting bearer <eth:syzkaller0>
[  654.067338][T12255] tipc: Resetting bearer <eth:syzkaller0>
[  654.080781][T12255] tipc: Disabling bearer <eth:syzkaller0>
[  654.429472][T12277] netlink: 'syz.1.17057': attribute type 9 has an invalid length.
[  654.432690][T12277] netlink: 'syz.1.17057': attribute type 6 has an invalid length.
[  654.436108][T12277] netlink: 'syz.1.17057': attribute type 7 has an invalid length.
[  654.439287][T12277] netlink: 'syz.1.17057': attribute type 8 has an invalid length.
[  654.591428][T12285] bridge0: entered allmulticast mode
[  654.604120][T12285] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  655.212004][T12338] dvmrp1: tun_chr_ioctl cmd 2147767506
[  655.430515][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17091'.
[  655.633371][T12374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17100'.
[  656.611323][T12435] netlink: 'syz.1.17126': attribute type 1 has an invalid length.
[  656.614355][T12435] netlink: 'syz.1.17126': attribute type 2 has an invalid length.
[  656.618940][T12435] netlink: 'syz.1.17126': attribute type 1 has an invalid length.
[  656.621958][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17126'.
[  656.792565][T12445] netlink: 'syz.1.17131': attribute type 89 has an invalid length.
[  657.400780][T12458] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  657.407678][T12458] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  657.423372][T12458] syzkaller0: mtu less than device minimum
[  657.468269][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17139'.
[  658.033693][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17159'.
[  659.004709][T12533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17172'.
[  659.397331][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17186'.
[  659.639538][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17196'.
[  660.329472][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17213'.
[  660.461379][T12628] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17215'.
[  660.464841][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17215'.
[  660.619139][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17225'.
[  660.627211][T12649] hsr_slave_0: left promiscuous mode
[  661.232032][T12717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17252'.
[  662.311521][T12827] netlink: 'syz.2.17304': attribute type 1 has an invalid length.
[  662.315489][T12827] netlink: 'syz.2.17304': attribute type 2 has an invalid length.
[  662.325524][T12827] netlink: 'syz.2.17304': attribute type 3 has an invalid length.
[  662.452272][T12840] syzkaller1: entered promiscuous mode
[  662.454592][T12840] syzkaller1: entered allmulticast mode
[  663.427398][T12885] lo speed is unknown, defaulting to 1000
[  663.546119][T12885] lo speed is unknown, defaulting to 1000
[  663.719392][   T34] audit: type=1107 audit(1772922965.872:15): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  664.078379][T12933] tipc: Invalid UDP bearer configuration
[  664.078435][T12933] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  664.079004][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17350'.
[  664.579938][T12983] netlink: 'syz.2.17376': attribute type 1 has an invalid length.
[  664.582673][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.967667][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17382'.
[  665.446675][T13024] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  665.841986][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17406'.
[  666.039719][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17411'.
[  666.329969][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17420'.
[  666.332774][T13090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  666.390421][T13096] netlink: 'syz.2.17423': attribute type 27 has an invalid length.
[  666.393515][T13094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17422'.
[  666.559466][T13106] netlink: 84 bytes leftover after parsing attributes in process `syz.2.17428'.
[  666.750170][T13122] bridge0: port 3(macvlan7) entered blocking state
[  666.753844][T13122] bridge0: port 3(macvlan7) entered disabled state
[  666.756620][T13122] macvlan7: entered allmulticast mode
[  666.760316][T13122] bridge0: entered allmulticast mode
[  666.766577][T13122] macvlan7: left allmulticast mode
[  666.768566][T13122] bridge0: left allmulticast mode
[  667.164825][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17453'.
[  667.168727][T13161] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.334824][T13180] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  667.338797][T13180] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  667.671365][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17478'.
[  667.674178][T13216] bond4: option mode: unable to set because the bond device has slaves
[  667.677839][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17478'.
[  667.680708][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17478'.
[  667.688607][T13216] bond0: left promiscuous mode
[  667.691730][T13216] bond0: left allmulticast mode
[  667.694654][T13216] team0: Port device bond0 removed
[  667.697913][T13216] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.702034][T13216] bond4: (slave bond0): Enslaving as an active interface with a down link
[  667.709144][T13216] netlink: 'syz.0.17478': attribute type 4 has an invalid length.
[  667.712163][T13216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.17478'.
[  667.718139][T13216] .`: renamed from bond0 (while UP)
[  667.922951][T13244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  668.405592][T13298] netlink: 'syz.2.17516': attribute type 1 has an invalid length.
[  668.691247][T13326] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  668.729081][T13333] nbd: couldn't find a device at index 1
[  668.907908][T13353] lo speed is unknown, defaulting to 1000
[  669.035904][T13357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  669.067964][T13353] lo speed is unknown, defaulting to 1000
[  669.904640][T13453] xt_NFQUEUE: number of total queues is 0
[  670.052019][T13467] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  670.878205][T13496] __nla_validate_parse: 6 callbacks suppressed
[  670.878215][T13496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17597'.
[  670.927121][T13507] netlink: 'syz.2.17601': attribute type 1 has an invalid length.
[  670.936361][T13507] netlink: 6 bytes leftover after parsing attributes in process `syz.2.17601'.
[  670.984217][T13514] netlink: 'syz.2.17604': attribute type 1 has an invalid length.
[  670.988308][T13514] syzkaller0: entered promiscuous mode
[  670.990121][T13514] syzkaller0: entered allmulticast mode
[  670.992231][T13514] tipc: Resetting bearer <eth:syzkaller0>
[  671.004444][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17605'.
[  671.014324][T13516] netlink: 'syz.1.17605': attribute type 30 has an invalid length.
[  671.027143][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  671.035055][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  671.041650][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17605'.
[  671.044959][T13516] netlink: 'syz.1.17605': attribute type 30 has an invalid length.
[  671.045255][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  671.051908][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  671.318370][T13545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17618'.
[  671.321129][T13545] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17618'.
[  671.576315][T13557] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17624'.
[  672.239041][T13599] tunl0: Caught tx_queue_len zero misconfig
[  672.704202][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17654'.
[  672.806385][T13631] netlink: 'syz.0.17657': attribute type 3 has an invalid length.
[  672.844131][T13633] netlink: 'syz.2.17658': attribute type 11 has an invalid length.
[  673.000669][T13644] bond18: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  673.007376][T13644] bond18 (unregistering): Released all slaves
[  673.207992][T13653] tipc: Resetting bearer <eth:syzkaller0>
[  673.219667][T13653] netlink: 'syz.2.17666': attribute type 1 has an invalid length.
[  673.230731][T13653] syzkaller1: entered promiscuous mode
[  673.232881][T13653] syzkaller1: entered allmulticast mode
[  673.334083][T13652] tipc: Resetting bearer <eth:syzkaller0>
[  673.359323][T13666] lo speed is unknown, defaulting to 1000
[  673.363248][T13672] netlink: 'syz.1.17674': attribute type 3 has an invalid length.
[  673.516799][T13682] netlink: 'syz.1.17679': attribute type 1 has an invalid length.
[  673.532660][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17675'.
[  673.561148][T13682] bond27: entered promiscuous mode
[  673.563631][T13682] 8021q: adding VLAN 0 to HW filter on device bond27
[  673.570052][T13666] lo speed is unknown, defaulting to 1000
[  673.576387][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17679'.
[  673.629405][T13682] bond27: (slave bridge34): making interface the new active one
[  673.632505][T13682] bridge34: entered promiscuous mode
[  673.636501][T13682] bond27: (slave bridge34): Enslaving as an active interface with an up link
[  673.861095][T13702] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  673.863937][T13702] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  673.867191][T13702] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  674.048897][   T53] tipc: Resetting bearer <eth:syzkaller0>
[  674.155841][T13720] 8021q: adding VLAN 0 to HW filter on device team0
[  674.587162][T13754] IPVS: Error connecting to the multicast addr
[  675.099567][T13792] tc_dump_action: action bad kind
[  675.267450][T13797] nbd1: detected capacity change from 0 to 63
[  675.271463][T13804] block nbd1: NBD_DISCONNECT
[  675.283477][T13804] block nbd1: Disconnected due to user request.
[  675.286836][T13804] block nbd1: shutting down sockets
[  675.295927][    C0] blk_print_req_error: 138 callbacks suppressed
[  675.295943][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.301330][    C0] buffer_io_error: 138 callbacks suppressed
[  675.301343][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  675.307593][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.310675][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  675.313232][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.316663][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  675.321405][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.324716][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  675.335576][T13774] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.338718][T13774] Buffer I/O error on dev nbd1, logical block 0, async page read
[  675.341427][T13774] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.344927][T13774] Buffer I/O error on dev nbd1, logical block 1, async page read
[  675.351416][T13774] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.354847][T13774] Buffer I/O error on dev nbd1, logical block 2, async page read
[  675.357391][T13774] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.360582][T13774] Buffer I/O error on dev nbd1, logical block 3, async page read
[  675.366054][T13774] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.370949][T13774] Buffer I/O error on dev nbd1, logical block 0, async page read
[  675.374908][T13774] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  675.381448][T13774] Buffer I/O error on dev nbd1, logical block 1, async page read
[  675.385135][T13774] ldm_validate_partition_table(): Disk read failed.
[  675.388782][T13774] Dev nbd1: unable to read RDB block 0
[  675.391805][T13774]  nbd1: unable to read partition table
[  675.403816][T13774] ldm_validate_partition_table(): Disk read failed.
[  675.411769][T13774] Dev nbd1: unable to read RDB block 0
[  675.416068][T13774]  nbd1: unable to read partition table
[  675.435670][T13814] lo speed is unknown, defaulting to 1000
[  675.593395][T13814] lo speed is unknown, defaulting to 1000
[  675.977374][T13853] __nla_validate_parse: 4 callbacks suppressed
[  675.977389][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17753'.
[  676.094006][T13854] netlink: 'syz.2.17752': attribute type 1 has an invalid length.
[  676.105650][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17752'.
[  676.881648][T13860] lo speed is unknown, defaulting to 1000
[  677.020781][T13860] lo speed is unknown, defaulting to 1000
[  677.408642][T13891] netlink: 'syz.0.17767': attribute type 1 has an invalid length.
[  677.415855][T13891] netlink: 244 bytes leftover after parsing attributes in process `syz.0.17767'.
[  677.420050][T13891] NCSI netlink: No device for ifindex 0
[  677.680536][T13915] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17779'.
[  677.711230][T13917] x9: renamed from bridge_slave_0
[  677.753556][T13919] netlink: 'syz.2.17781': attribute type 1 has an invalid length.
[  677.763381][T13919] netlink: 352 bytes leftover after parsing attributes in process `syz.2.17781'.
[  677.769172][T13919] netlink: 'syz.2.17781': attribute type 1 has an invalid length.
[  677.772951][T13919] netlink: 352 bytes leftover after parsing attributes in process `syz.2.17781'.
[  677.797352][T13925] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.17784'.
[  677.853915][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17787'.
[  678.336855][T13978] netlink: 1 bytes leftover after parsing attributes in process `syz.2.17807'.
[  678.377250][T13979] netlink: 'syz.0.17808': attribute type 1 has an invalid length.
[  678.492022][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17812'.
[  678.879337][T14020] netlink: 'syz.1.17827': attribute type 10 has an invalid length.
[  678.892266][T14024] netlink: 'syz.0.17829': attribute type 21 has an invalid length.
[  680.111257][T14134] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  680.361374][T14159] netlink: 'syz.1.17887': attribute type 10 has an invalid length.
[  680.455912][T14162] nbd1: detected capacity change from 0 to 63
[  681.079070][T14185] sock: sock_set_timeout: `syz.2.17899' (pid 14185) tries to set negative timeout
[  681.217973][   T58] block nbd1: Receive control failed (result -32)
[  681.332113][T14195] __nla_validate_parse: 2 callbacks suppressed
[  681.332124][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17904'.
[  681.670154][T14219] netlink: 136 bytes leftover after parsing attributes in process `syz.0.17915'.
[  681.673346][T14219] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  681.823594][T14232] ip6gre9: entered promiscuous mode
[  681.902926][T14240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17926'.
[  682.083449][T14252] lo speed is unknown, defaulting to 1000
[  682.312292][T14252] lo speed is unknown, defaulting to 1000
[  683.941672][T14280] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17943'.
[  683.944631][T14280] netlink: ct family unspecified
[  684.350613][T14317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17950'.
[  684.399593][T14321] netlink: 'syz.0.17951': attribute type 1 has an invalid length.
[  684.420096][T14321] 8021q: adding VLAN 0 to HW filter on device bond18
[  684.670903][T14345] syzkaller0: entered promiscuous mode
[  684.673206][T14345] syzkaller0: entered allmulticast mode
[  684.697964][T14345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  684.701442][T14344] tipc: Resetting bearer <eth:syzkaller0>
[  684.725456][T14344] tipc: Disabling bearer <eth:syzkaller0>
[  684.938066][T14368] netlink: 'syz.0.17970': attribute type 1 has an invalid length.
[  684.971805][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17970'.
[  684.974247][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17971'.
[  684.982219][T14368] bond19: (slave bridge19): making interface the new active one
[  684.985102][T14368] bond19: (slave bridge19): Enslaving as an active interface with an up link
[  684.988161][T14373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17972'.
[  684.995940][T14368] bond19: (slave bridge20): Enslaving as an active interface with a down link
[  685.018528][T14368] macvlan7: entered promiscuous mode
[  685.020247][T14368] macvlan7: entered allmulticast mode
[  685.022313][T14368] bond19: entered promiscuous mode
[  685.023897][T14368] bridge19: entered promiscuous mode
[  685.027583][T14368] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  685.030186][T14368] bond19: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  685.034930][T14368] bond19: left promiscuous mode
[  685.036551][T14368] bridge19: left promiscuous mode
[  685.207425][T14393] netlink: 'syz.2.17982': attribute type 1 has an invalid length.
[  685.209955][T14393] netlink: 728 bytes leftover after parsing attributes in process `syz.2.17982'.
[  685.412363][T14407] lo speed is unknown, defaulting to 1000
[  685.569250][T14407] lo speed is unknown, defaulting to 1000
[  685.933986][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17998'.
[  686.301817][T14466] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  686.328954][T14469] ip6tnl10: entered allmulticast mode
[  687.259320][T14480] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  687.261863][T14480] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  687.650568][T14520] netlink: 'syz.1.18029': attribute type 1 has an invalid length.
[  688.101595][T14547] veth0: entered promiscuous mode
[  688.104013][T14546] veth0: left promiscuous mode
[  688.132013][T14549] netlink: 'syz.2.18037': attribute type 3 has an invalid length.
[  688.383347][T14567] syzkaller1: entered promiscuous mode
[  688.385051][T14567] syzkaller1: entered allmulticast mode
[  688.418514][T14569] __nla_validate_parse: 2 callbacks suppressed
[  688.418525][T14569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18047'.
[  688.633639][T14585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18055'.
[  688.947937][T14624] netlink: 'syz.0.18073': attribute type 4 has an invalid length.
[  689.950211][T14647] team0: left allmulticast mode
[  689.957307][T14647] bridge0: port 2(team0) entered disabled state
[  689.969679][T14647] veth0_to_bridge: left allmulticast mode
[  689.971520][T14647] veth0_to_bridge: left promiscuous mode
[  689.973351][T14647] bridge0: port 1(veth0_to_bridge) entered disabled state
[  690.169232][T14647] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  690.634641][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18103'.
[  690.645154][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18103'.
[  690.747285][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.751700][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.756821][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.760794][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.763514][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.768126][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18107'.
[  690.964271][T14712] tipc: Resetting bearer <eth:syzkaller0>
[  690.985842][T14710] tipc: Resetting bearer <eth:syzkaller0>
[  691.505900][   T69] tipc: Resetting bearer <eth:syzkaller0>
[  691.612650][T14750] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  692.060357][T14784] sctp: [Deprecated]: syz.1.18148 (pid 14784) Use of struct sctp_assoc_value in delayed_ack socket option.
[  692.060357][T14784] Use struct sctp_sack_info instead
[  692.765366][T14842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  693.818821][T14866] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  693.964191][T14879] __nla_validate_parse: 215 callbacks suppressed
[  693.964207][T14879] netlink: 312 bytes leftover after parsing attributes in process `syz.2.18193'.
[  694.499304][T14902] syzkaller0: entered promiscuous mode
[  694.501061][T14902] syzkaller0: entered allmulticast mode
[  694.504060][ T5838] TC_ACT_REPEAT abuse ?
[  694.649425][T14918] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  694.759989][T14929] "syz.1.18214" (14929) uses obsolete ecb(arc4) skcipher
[  695.802437][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18238'.
[  695.945435][T14999] netlink: 'syz.0.18245': attribute type 2 has an invalid length.
[  695.989446][T15005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  696.083214][T15011] lo speed is unknown, defaulting to 1000
[  696.237658][T15011] lo speed is unknown, defaulting to 1000
[  696.387523][T15041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18261'.
[  696.408026][T15038] lo speed is unknown, defaulting to 1000
[  696.746956][T15038] lo speed is unknown, defaulting to 1000
[  697.826786][T15130] gretap5: entered promiscuous mode
[  698.176829][T15149] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  698.187538][T15149] netlink: 'syz.2.18305': attribute type 4 has an invalid length.
[  699.184353][T15194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18325'.
[  699.293972][T15202] lo speed is unknown, defaulting to 1000
[  699.440327][T15202] lo speed is unknown, defaulting to 1000
[  699.490555][T15214] lo speed is unknown, defaulting to 1000
[  699.724299][T15214] lo speed is unknown, defaulting to 1000
[  700.093601][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18348'.
[  700.099501][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18348'.
[  700.216336][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18351'.
[  700.310014][T15266] netlink: 'syz.0.18353': attribute type 61 has an invalid length.
[  700.312706][T15266] netlink: 'syz.0.18353': attribute type 62 has an invalid length.
[  700.370179][T15270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18356'.
[  700.822951][T15316] netlink: 'syz.0.18376': attribute type 3 has an invalid length.
[  701.196114][T15349] tipc: Resetting bearer <eth:syzkaller0>
[  701.241486][T15348] tipc: Resetting bearer <eth:syzkaller0>
[  701.492991][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18407'.
[  701.513160][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18407'.
[  701.517202][T15374] 8021q: adding VLAN 0 to HW filter on device bond20
[  701.524167][T15374] vlan1: entered promiscuous mode
[  701.526371][T15374] bond20: entered promiscuous mode
[  701.541570][T15377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18408'.
[  701.603632][T15381] netlink: 7 bytes leftover after parsing attributes in process `syz.1.18410'.
[  701.616760][T15383] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.18411'.
[  702.286258][   T32] tipc: Resetting bearer <eth:syzkaller0>
[  703.003340][T15500] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  703.904260][T15589] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  704.113417][T15601] lo speed is unknown, defaulting to 1000
[  704.155775][T15603] netlink: 'syz.0.18512': attribute type 2 has an invalid length.
[  704.246813][T15601] lo speed is unknown, defaulting to 1000
[  706.083292][T15640] __nla_validate_parse: 9 callbacks suppressed
[  706.083308][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18524'.
[  706.090193][T15640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18524'.
[  706.496881][T15683] netlink: 'syz.2.18546': attribute type 1 has an invalid length.
[  706.554858][T15683] bond24: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  706.571881][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18546'.
[  706.588183][T15692] bond24 (unregistering): (slave ip6gretap1): Releasing backup interface
[  706.601505][T15692] bond24 (unregistering): Released all slaves
[  706.777991][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.794449][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.826114][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.830072][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.834026][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.844738][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.850339][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18558'.
[  706.945251][T15721] syz.2.18563: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  706.951264][T15721] CPU: 1 UID: 0 PID: 15721 Comm: syz.2.18563 Not tainted syzkaller #0 PREEMPT(full) 
[  706.951298][T15721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  706.951311][T15721] Call Trace:
[  706.951318][T15721]  <TASK>
[  706.951326][T15721]  dump_stack_lvl+0xe8/0x150
[  706.951354][T15721]  warn_alloc+0x249/0x340
[  706.951373][T15721]  ? stack_trace_save+0xa9/0x100
[  706.951392][T15721]  ? __pfx_warn_alloc+0x10/0x10
[  706.951415][T15721]  ? kasan_save_track+0x4f/0x80
[  706.951430][T15721]  ? kasan_save_track+0x3e/0x80
[  706.951442][T15721]  ? __kasan_kmalloc+0x93/0xb0
[  706.951457][T15721]  ? __kmalloc_cache_noprof+0x31c/0x660
[  706.951472][T15721]  ? xskq_create+0x56/0x170
[  706.951492][T15721]  ? xsk_setsockopt+0x54c/0x990
[  706.951508][T15721]  ? do_sock_setsockopt+0x17c/0x1b0
[  706.951528][T15721]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  706.951548][T15721]  ? do_syscall_64+0x14d/0xf80
[  706.951573][T15721]  __vmalloc_node_range_noprof+0x132/0x1730
[  706.951613][T15721]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  706.951633][T15721]  ? __kasan_kmalloc+0x93/0xb0
[  706.951654][T15721]  vmalloc_user_noprof+0xad/0xe0
[  706.951668][T15721]  ? xskq_create+0xbf/0x170
[  706.951686][T15721]  xskq_create+0xbf/0x170
[  706.951709][T15721]  xsk_init_queue+0x8a/0xe0
[  706.951730][T15721]  xsk_setsockopt+0x54c/0x990
[  706.951752][T15721]  ? __pfx_xsk_setsockopt+0x10/0x10
[  706.951772][T15721]  ? __pfx_aa_sk_perm+0x10/0x10
[  706.951792][T15721]  ? aa_sock_opt_perm+0xff/0x1a0
[  706.951814][T15721]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  706.951830][T15721]  ? __pfx_xsk_setsockopt+0x10/0x10
[  706.951851][T15721]  do_sock_setsockopt+0x17c/0x1b0
[  706.951879][T15721]  __x64_sys_setsockopt+0x13d/0x1b0
[  706.951906][T15721]  do_syscall_64+0x14d/0xf80
[  706.951927][T15721]  ? trace_irq_disable+0x3b/0x150
[  706.951956][T15721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.951976][T15721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.951991][T15721] RIP: 0033:0x7fb77d59c799
[  706.952006][T15721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.952020][T15721] RSP: 002b:00007fb77e48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  706.952036][T15721] RAX: ffffffffffffffda RBX: 00007fb77d815fa0 RCX: 00007fb77d59c799
[  706.952047][T15721] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  706.952056][T15721] RBP: 00007fb77d632bd9 R08: 0000000000000004 R09: 0000000000000000
[  706.952065][T15721] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  706.952075][T15721] R13: 00007fb77d816038 R14: 00007fb77d815fa0 R15: 00007fffad27ac28
[  706.952100][T15721]  </TASK>
[  706.952107][T15721] Mem-Info:
[  707.055854][T15721] active_anon:13660 inactive_anon:22 isolated_anon:0
[  707.055854][T15721]  active_file:1356 inactive_file:38583 isolated_file:0
[  707.055854][T15721]  unevictable:1768 dirty:91 writeback:0
[  707.055854][T15721]  slab_reclaimable:13087 slab_unreclaimable:110675
[  707.055854][T15721]  mapped:18207 shmem:2450 pagetables:1051
[  707.055854][T15721]  sec_pagetables:0 bounce:0
[  707.055854][T15721]  kernel_misc_reclaimable:0
[  707.055854][T15721]  free:1091490 free_pcp:25777 free_cma:0
[  707.086427][T15721] Node 0 active_anon:9756kB inactive_anon:0kB active_file:3516kB inactive_file:34896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43348kB dirty:324kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10728kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  707.106896][T15721] Node 1 active_anon:44884kB inactive_anon:88kB active_file:1908kB inactive_file:119436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29480kB dirty:40kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3044kB pagetables:2028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  707.120494][T15721] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  707.135243][T15721] lowmem_reserve[]: 0 1587 2118 2118 2118
[  707.137856][T15721] Node 0 DMA32 free:1522092kB boost:0kB min:25028kB low:31284kB high:37540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:832kB inactive_file:24kB unevictable:0kB writepending:112kB zspages:0kB present:2080636kB managed:1625488kB mlocked:0kB bounce:0kB free_pcp:31176kB local_pcp:18248kB free_cma:0kB
[  707.151564][T15721] lowmem_reserve[]: 0 0 530 530 530
[  707.153606][T15721] Node 0 Normal free:10660kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9884kB inactive_anon:0kB active_file:2684kB inactive_file:34872kB unevictable:3536kB writepending:212kB zspages:0kB present:1572868kB managed:543368kB mlocked:0kB bounce:0kB free_pcp:8372kB local_pcp:3616kB free_cma:0kB
[  707.166503][T15721] lowmem_reserve[]: 0 0 0 0 0
[  707.168436][T15721] Node 1 Normal free:2817208kB boost:0kB min:56324kB low:70404kB high:84484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45084kB inactive_anon:88kB active_file:1908kB inactive_file:119436kB unevictable:3536kB writepending:40kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:63228kB local_pcp:31112kB free_cma:0kB
[  707.201867][T15721] lowmem_reserve[]: 0 0 0 0 0
[  707.203709][T15721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  707.209688][T15721] Node 0 DMA32: 237*4kB (UM) 239*8kB (UM) 161*16kB (UME) 46*32kB (UM) 121*64kB (UM) 79*128kB (UM) 73*256kB (UME) 44*512kB (UM) 28*1024kB (UME) 15*2048kB (UM) 341*4096kB (UM) = 1522108kB
[  707.218031][   T58] block nbd6: Receive control failed (result -32)
[  707.218928][T15721] Node 0 Normal: 129*4kB (UM) 108*8kB (UM) 84*16kB (UM) 151*32kB (UM) 46*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10628kB
[  707.228431][T15721] Node 1 Normal: 876*4kB (UE) 297*8kB (UME) 1058*16kB (UME) 668*32kB (UME) 983*64kB (UME) 493*128kB (UME) 207*256kB (UME) 106*512kB (UME) 76*1024kB (UME) 66*2048kB (UM) 568*4096kB (UM) = 2816984kB
[  707.245265][T15721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  707.249835][T15721] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  707.253418][T15721] 42406 total pagecache pages
[  707.255176][T15721] 17 pages in swap cache
[  707.257280][T15721] Free swap  = 124928kB
[  707.258894][T15721] Total swap = 124996kB
[  707.260784][T15721] 1834877 pages RAM
[  707.262561][T15721] 0 pages HighMem/MovableOnly
[  707.264361][T15721] 390151 pages reserved
[  707.294888][T15721] 0 pages cma reserved
[  708.020135][T15814] tipc: Resetting bearer <eth:syzkaller0>
[  708.051028][T15811] tipc: Resetting bearer <eth:syzkaller0>
[  708.363775][T15842] xt_TCPMSS: Only works on TCP SYN packets
[  708.577819][T15855] 8021q: adding VLAN 0 to HW filter on device bond0
[  708.836590][T15878] lo speed is unknown, defaulting to 1000
[  708.846869][   T69] tipc: Resetting bearer <eth:syzkaller0>
[  710.431495][T15878] lo speed is unknown, defaulting to 1000
[  710.693466][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 30 seconds
[  710.699634][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 30 seconds
[  710.703199][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 30 seconds
[  710.707023][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 30 seconds
[  710.850892][T15915] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  710.920425][T15915] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  710.987080][T15915] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  711.043837][T15915] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  711.088284][T15929] __nla_validate_parse: 8 callbacks suppressed
[  711.088300][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18648'.
[  711.131852][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  711.143589][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  711.152666][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  711.161235][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  712.564020][T16061] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.18704'.
[  712.567468][T16059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18703'.
[  712.603490][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18703'.
[  712.618368][T13670] block nbd64: NBD_DISCONNECT
[  712.691173][T16067] lo speed is unknown, defaulting to 1000
[  712.705825][T16073] vlan1: entered allmulticast mode
[  712.708157][T16073] team0: entered allmulticast mode
[  712.816524][T16067] lo speed is unknown, defaulting to 1000
[  713.411258][T16115] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18726'.
[  713.494450][T16124] netlink: 148 bytes leftover after parsing attributes in process `syz.0.18727'.
[  713.853758][T16162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  714.524003][  T783] lo speed is unknown, defaulting to 1000
[  714.527082][  T783] syz2: Port: 1 Link ACTIVE
[  715.397862][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18778'.
[  715.563824][T16250] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  715.584164][T16250] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  715.642602][T16240] tipc: Resetting bearer <eth:syzkaller0>
[  715.667312][  T783] lo speed is unknown, defaulting to 1000
[  716.355647][T16297] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.18802'.
[  716.358547][T16297] netlink: Unknown conntrack attr (type=47, max=9)
[  716.383867][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18807'.
[  716.437623][T16308] netlink: 'syz.1.18809': attribute type 10 has an invalid length.
[  717.034404][T16365] syz0: rxe_newlink: already configured on lo
[  717.610572][T16401] netlink: 216 bytes leftover after parsing attributes in process `syz.1.18851'.
[  717.614089][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18851'.
[  717.625253][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18851'.
[  717.849219][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18860'.
[  718.154148][T16444] netlink: 'syz.0.18872': attribute type 1 has an invalid length.
[  718.200230][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18874'.
[  718.203188][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18874'.
[  718.206487][T16450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  718.468182][T16471] lo speed is unknown, defaulting to 1000
[  718.511780][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18881'.
[  718.593401][T16471] lo speed is unknown, defaulting to 1000
[  719.309288][T16494] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.18891'.
[  719.337494][T16496] macsec0: entered allmulticast mode
[  719.354991][T16496] macsec0: left allmulticast mode
[  719.601211][T16523] xt_TCPMSS: Only works on TCP SYN packets
[  719.640073][T16528] netlink: 'syz.1.18906': attribute type 1 has an invalid length.
[  719.646522][T16528] netlink: 'syz.1.18906': attribute type 2 has an invalid length.
[  719.724510][T16531] lo speed is unknown, defaulting to 1000
[  719.842686][T16531] lo speed is unknown, defaulting to 1000
[  720.428676][T16585] netlink: 'syz.0.18929': attribute type 3 has an invalid length.
[  720.431704][T16585] netlink: 'syz.0.18929': attribute type 1 has an invalid length.
[  720.938787][T16634] lo speed is unknown, defaulting to 1000
[  721.107594][T16645] tc_dump_action: action bad kind
[  721.136000][T16647] syzkaller0: entered promiscuous mode
[  721.138028][T16647] syzkaller0: entered allmulticast mode
[  721.153087][T16634] lo speed is unknown, defaulting to 1000
[  721.158247][T16647] 0: reclassify loop, rule prio 0, protocol 800
[  721.677935][T16692] netlink: 'syz.2.18975': attribute type 10 has an invalid length.
[  721.946192][   T34] audit: type=1800 audit(1772923024.092:16): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18980" name="memory.events" dev="tmpfs" ino=30701 res=0 errno=0
[  722.300355][T16741] tipc: Resetting bearer <eth:syzkaller0>
[  722.304469][T16740] tipc: Resetting bearer <eth:syzkaller0>
[  722.336654][T16746] __nla_validate_parse: 9 callbacks suppressed
[  722.336694][T16746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19001'.
[  722.404196][T16753] veth0: entered promiscuous mode
[  722.417086][T16753] bond0: entered promiscuous mode
[  722.422855][T16752] bond0: left promiscuous mode
[  722.424410][T16752] veth0: left promiscuous mode
[  722.522788][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19012'.
[  723.067862][T16810] netlink: 'syz.1.19032': attribute type 10 has an invalid length.
[  723.256444][ T3519] tipc: Resetting bearer <eth:syzkaller0>
[  723.469264][T16841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19046'.
[  724.061069][T16867] x_tables: ip_tables: osf match: only valid for protocol 6
[  724.252044][T16882] lo speed is unknown, defaulting to 1000
[  724.366042][T16882] lo speed is unknown, defaulting to 1000
[  724.470870][T16901] syzkaller1: entered promiscuous mode
[  724.472646][T16901] syzkaller1: entered allmulticast mode
[  724.648255][T16919] macsec2: entered promiscuous mode
[  724.981902][T16944] netlink: 'syz.0.19090': attribute type 5 has an invalid length.
[  725.165171][T16957] netlink: 'syz.2.19096': attribute type 1 has an invalid length.
[  725.240905][T16957] bond24: (slave veth40): Enslaving as an active interface with a down link
[  725.301429][T16957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19096'.
[  725.351564][T16963] bond24: (slave veth42): Enslaving as an active interface with a down link
[  725.373272][T16957] 8021q: adding VLAN 0 to HW filter on device bond24
[  726.302709][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19134'.
[  726.321410][T17035] syzkaller1: tun_chr_ioctl cmd 1074025677
[  726.323808][T17035] syzkaller1: linktype set to 825
[  726.461307][T17052] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  726.472167][T17046] lo speed is unknown, defaulting to 1000
[  726.637564][T17046] lo speed is unknown, defaulting to 1000
[  726.682348][T17066] lo speed is unknown, defaulting to 1000
[  726.834775][T17066] lo speed is unknown, defaulting to 1000
[  727.177340][T17092] netlink: 91 bytes leftover after parsing attributes in process `syz.0.19157'.
[  727.631039][T17113] netlink: 'syz.0.19167': attribute type 14 has an invalid length.
[  727.672406][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19168'.
[  727.795149][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19172'.
[  727.941860][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19179'.
[  727.951299][T17142] netlink: 240 bytes leftover after parsing attributes in process `syz.2.19175'.
[  727.954195][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19179'.
[  728.393508][T17182] lo speed is unknown, defaulting to 1000
[  728.549336][T17182] lo speed is unknown, defaulting to 1000
[  728.778400][T17208] netlink: 168 bytes leftover after parsing attributes in process `syz.1.19208'.
[  729.083559][T17220] lo speed is unknown, defaulting to 1000
[  729.220424][T17220] lo speed is unknown, defaulting to 1000
[  729.328721][T17238] netlink: 'syz.0.19222': attribute type 5 has an invalid length.
[  729.502796][T17245] : entered promiscuous mode
[  729.878098][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19241'.
[  729.881567][T17278] netlink: 5 bytes leftover after parsing attributes in process `syz.1.19241'.
[  730.163375][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19252'.
[  730.284611][T17316] netlink: 1 bytes leftover after parsing attributes in process `syz.1.19257'.
[  730.584689][T17344] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  731.548999][T17394] IPVS: Scheduler module ip_vs_ not found
[  732.207215][T17440] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check.
[  732.213153][T17440] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check.
[  732.481369][T17452] syzkaller0: entered promiscuous mode
[  732.483505][T17452] syzkaller0: entered allmulticast mode
[  732.748808][T17468] __nla_validate_parse: 1 callbacks suppressed
[  732.748820][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19329'.
[  732.819152][T17476] ip6gre4: entered promiscuous mode
[  732.821488][T17476] ip6gre4: entered allmulticast mode
[  732.884063][T17480] bond22: option miimon: invalid value (18446744073709551607)
[  732.889852][T17480] bond22: option miimon: allowed values 0 - 2147483647
[  732.894137][T17480] bond22 (unregistering): Released all slaves
[  732.916455][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  732.920397][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  732.957284][ T1931] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  733.010809][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19338'.
[  733.014270][T17493] netlink: 'syz.1.19338': attribute type 21 has an invalid length.
[  733.157719][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19344'.
[  733.203102][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19347'.
[  733.216512][T17510] 8021q: adding VLAN 0 to HW filter on device bond25
[  733.225429][T17510] macvlan6: entered allmulticast mode
[  733.227912][T17510] veth0_to_bond: entered allmulticast mode
[  733.231974][T17510] bond25: (slave macvlan6): Enslaving as an active interface with an up link
[  733.234735][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19348'.
[  733.405983][ T1931] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  733.577770][T17542] netlink: 'syz.1.19360': attribute type 6 has an invalid length.
[  733.615094][T17546] netlink: 'syz.1.19362': attribute type 10 has an invalid length.
[  733.627285][T17546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.727984][ T1931] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  734.031592][T17577] netlink: 276 bytes leftover after parsing attributes in process `syz.0.19377'.
[  734.034779][T17577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19377'.
[  734.231026][T17598] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  735.149969][T17666] lo speed is unknown, defaulting to 1000
[  735.311829][T17666] lo speed is unknown, defaulting to 1000
[  736.483557][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19447'.
[  736.498160][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19447'.
[  736.601824][T17753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19453'.
[  736.903789][T17780] netlink: 'syz.2.19465': attribute type 11 has an invalid length.
[  736.909789][T17780] netlink: 'syz.2.19465': attribute type 23 has an invalid length.
[  736.946016][T17782] netlink: 'syz.0.19466': attribute type 29 has an invalid length.
[  736.949351][T17782] netlink: 'syz.0.19466': attribute type 29 has an invalid length.
[  737.067961][T17796] ip6tnl0: Caught tx_queue_len zero misconfig
[  737.085450][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  738.591246][T17889] xt_hashlimit: max too large, truncated to 1048576
[  738.639241][T17895] ip6tnl13: entered allmulticast mode
[  738.768825][T17907] __nla_validate_parse: 4 callbacks suppressed
[  738.768850][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19525'.
[  739.032669][T17932] netlink: 284 bytes leftover after parsing attributes in process `syz.1.19537'.
[  739.074087][T17938] xt_bpf: check failed: parse error
[  739.522369][T17978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  739.525068][T17978] syzkaller0: entered promiscuous mode
[  739.527155][T17978] syzkaller0: entered allmulticast mode
[  739.535905][T17978] tipc: Resetting bearer <eth:syzkaller0>
[  739.548386][T17977] tipc: Resetting bearer <eth:syzkaller0>
[  739.572604][T17977] tipc: Disabling bearer <eth:syzkaller0>
[  739.614170][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19560'.
[  740.055075][T18005] lo speed is unknown, defaulting to 1000
[  740.249335][T18005] lo speed is unknown, defaulting to 1000
[  740.406481][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19577'.
[  740.778548][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 60 seconds
[  740.782630][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 60 seconds
[  740.786553][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 60 seconds
[  740.790419][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 60 seconds
[  741.371310][T18050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  741.376359][T18050] syzkaller0: mtu less than device minimum
[  741.512976][T18063] xt_hashlimit: size too large, truncated to 1048576
[  741.513013][T18065] netlink: 'syz.0.19596': attribute type 1 has an invalid length.
[  741.518354][T18065] netlink: 'syz.0.19596': attribute type 2 has an invalid length.
[  741.521385][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19596'.
[  741.556234][T18068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19597'.
[  741.561284][T18068] netlink: 204 bytes leftover after parsing attributes in process `syz.0.19597'.
[  741.564933][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19597'.
[  741.571479][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19597'.
[  741.996015][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19613'.
[  742.457393][T18134] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  742.544334][T18138] lo speed is unknown, defaulting to 1000
[  742.639446][T18147] netlink: 'syz.0.19632': attribute type 13 has an invalid length.
[  742.698083][T18138] lo speed is unknown, defaulting to 1000
[  743.211804][T18174] tunl0: Caught tx_queue_len zero misconfig
[  743.214197][T18174] sch_tbf: burst 0 is lower than device tunl0 mtu (1536) !
[  743.426752][T18191] netlink: 'syz.0.19650': attribute type 21 has an invalid length.
[  743.783025][T18220] Cannot find add_set index 3 as target
[  744.958786][T18255] __nla_validate_parse: 1 callbacks suppressed
[  744.958797][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19678'.
[  745.012619][T18258] RDS: rds_bind could not find a transport for ::ffff:172.20.20.50, load rds_tcp or rds_rdma?
[  745.028381][T18258] gre0: left promiscuous mode
[  745.031138][T18258] veth1: left promiscuous mode
[  745.033547][T18258] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  745.179255][T18280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.279851][T18291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19694'.
[  745.348459][T18299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19698'.
[  745.885492][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  745.921037][T18349] bond0: Caught tx_queue_len zero misconfig
[  745.956906][T18352] netlink: 'syz.1.19722': attribute type 4 has an invalid length.
[  745.959546][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19723'.
[  745.963727][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19723'.
[  746.239302][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19737'.
[  746.242805][T18383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19737'.
[  746.713976][T18424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19757'.
[  747.173798][T18460] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  747.243138][T18460] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  747.301098][T18460] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  747.352104][T18460] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  747.413851][ T5929] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  747.430562][ T5838] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  747.445709][ T5838] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  747.449957][T18473] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19779'.
[  747.458522][ T5838] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  747.537641][T18480] netlink: 148 bytes leftover after parsing attributes in process `syz.0.19783'.
[  747.834108][   T34] audit: type=1107 audit(1772923049.982:17): pid=18504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  748.692841][T18567] lo speed is unknown, defaulting to 1000
[  748.795895][T18567] lo speed is unknown, defaulting to 1000
[  749.191139][T18606] netlink: 'syz.2.19834': attribute type 2 has an invalid length.
[  749.326681][T18611] netlink: 'syz.2.19836': attribute type 21 has an invalid length.
[  749.330500][T18611] netlink: 'syz.2.19836': attribute type 4 has an invalid length.
[  749.333268][T18611] netlink: 'syz.2.19836': attribute type 5 has an invalid length.
[  750.998736][ T5880] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  751.003162][ T5880] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  751.010094][ T5880] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  751.013280][ T5880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  751.770486][T18759] __nla_validate_parse: 8 callbacks suppressed
[  751.770504][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19906'.
[  751.785524][T18759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19906'.
[  751.903889][T18771] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19912'.
[  751.947215][T18773] x_tables: duplicate underflow at hook 1
[  751.955241][T18773] Timeout policy `syz1' can only be used by L3 protocol number 33024
[  751.977943][T18777] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  752.171461][T18783] ip6tnl0: Caught tx_queue_len zero misconfig
[  752.248606][T18796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19924'.
[  752.665730][ T5255] udevd[5255]: worker [13774] /devices/virtual/block/nbd1 is taking a long time
[  752.692323][T18841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19944'.
[  752.772070][T18843] netlink: 'syz.0.19945': attribute type 15 has an invalid length.
[  753.262264][   T57] block nbd7: Receive control failed (result -32)
[  754.654892][T18930] netlink: 'syz.1.19987': attribute type 2 has an invalid length.
[  754.771927][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19992'.
[  755.620801][T18948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19997'.
[  755.624081][T18948] netlink: 580 bytes leftover after parsing attributes in process `syz.0.19997'.
[  755.957258][T18992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20015'.
[  755.960730][T18992] netlink: 7 bytes leftover after parsing attributes in process `syz.1.20015'.
[  756.440042][T19043] sctp: [Deprecated]: syz.0.20037 (pid 19043) Use of int in max_burst socket option.
[  756.440042][T19043] Use struct sctp_assoc_value instead
[  756.911773][T19080] lo speed is unknown, defaulting to 1000
[  756.942411][T19087] __nla_validate_parse: 1 callbacks suppressed
[  756.942429][T19087] netlink: 192 bytes leftover after parsing attributes in process `syz.0.20053'.
[  757.018564][T19092] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  757.021808][T19092] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  757.130529][T19080] lo speed is unknown, defaulting to 1000
[  757.161695][T19100] syzkaller0: entered promiscuous mode
[  757.163874][T19100] syzkaller0: entered allmulticast mode
[  757.782230][T19147] netlink: 'syz.0.20082': attribute type 3 has an invalid length.
[  758.097008][T19180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20098'.
[  758.159180][T19185] bridge21: entered promiscuous mode
[  758.165414][T19185] bridge21: entered allmulticast mode
[  758.177737][T19185] team0: Port device bridge21 added
[  758.187107][T19187] netlink: 632 bytes leftover after parsing attributes in process `syz.1.20101'.
[  758.191356][T19185] bridge0: port 1(team0) entered blocking state
[  758.194964][T19185] bridge0: port 1(team0) entered disabled state
[  758.273088][T19189] netlink: 56 bytes leftover after parsing attributes in process `syz.1.20102'.
[  758.348990][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20107'.
[  758.404758][T19207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20110'.
[  758.408671][T19207] netlink: 'syz.1.20110': attribute type 1 has an invalid length.
[  758.414560][T19207] wg1: left promiscuous mode
[  758.419047][T19207] vxcan1: left promiscuous mode
[  758.423554][T19207] bond27: left promiscuous mode
[  758.426599][T19207] bridge34: left promiscuous mode
[  758.431640][T19207] ip6gre4: left promiscuous mode
[  758.457764][   T31] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  758.534739][T19212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20112'.
[  758.617949][T19219] netlink: 'syz.0.20115': attribute type 49 has an invalid length.
[  759.067475][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  759.250053][T19260] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.310421][T19260] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.375951][T19260] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.447051][T19260] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.479433][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20139'.
[  759.540449][ T5929] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  759.554353][ T5929] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  759.571455][ T5929] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  759.583839][ T5929] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  759.779860][T19290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  760.259759][T19313] openvswitch: netlink: Key type 270 is out of range max 32
[  760.729705][T19342] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20173'.
[  760.857216][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20177'.
[  760.910356][T19356] sctp: [Deprecated]: syz.1.20178 (pid 19356) Use of int in max_burst socket option.
[  760.910356][T19356] Use struct sctp_assoc_value instead
[  762.525491][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  762.645864][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20212'.
[  762.649294][T19428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20212'.
[  762.726210][T19436] tipc: Enabled bearer <udp:syz2>, priority 26
[  762.933964][T19458] netlink: 'syz.0.20225': attribute type 16 has an invalid length.
[  762.940953][T19458] netlink: 'syz.0.20225': attribute type 17 has an invalid length.
[  762.952422][T19458] gre0: left allmulticast mode
[  762.961871][T19458] gretap0: entered promiscuous mode
[  762.979427][T19458] 8021q: adding VLAN 0 to HW filter on device .`
[  762.986108][T19458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  763.452511][T19487] netlink: 'syz.2.20237': attribute type 1 has an invalid length.
[  763.454888][T19487] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20237'.
[  763.790967][T19515] tipc: Resetting bearer <eth:syzkaller0>
[  763.801219][T19512] tipc: Resetting bearer <eth:syzkaller0>
[  764.162515][ T3519] tipc: Resetting bearer <eth:syzkaller0>
[  764.231029][T19538] lo speed is unknown, defaulting to 1000
[  764.514394][T19538] lo speed is unknown, defaulting to 1000
[  764.665858][T19564] netlink: set zone limit has 4 unknown bytes
[  764.783029][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20274'.
[  764.866941][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20277'.
[  764.870650][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20277'.
[  765.206127][T19600] lo speed is unknown, defaulting to 1000
[  765.451278][T19600] lo speed is unknown, defaulting to 1000
[  765.744447][T19630] tipc: Resetting bearer <eth:syzkaller0>
[  765.781476][T19630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  765.785018][T19627] tipc: Resetting bearer <eth:syzkaller0>
[  765.906496][T19647] --map-set only usable from mangle table
[  765.941599][T19650] netlink: 'syz.2.20305': attribute type 1 has an invalid length.
[  765.946099][T19650] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.20305'.
[  766.839241][   T81] tipc: Resetting bearer <eth:syzkaller0>
[  766.907715][T19704] lo: Caught tx_queue_len zero misconfig
[  766.910830][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20332'.
[  767.096664][T19719] netlink: 'syz.0.20338': attribute type 10 has an invalid length.
[  767.289499][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20345'.
[  767.347050][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20348'.
[  767.383629][T19744] netlink: 'syz.1.20349': attribute type 2 has an invalid length.
[  767.400489][T19739] lo speed is unknown, defaulting to 1000
[  767.570989][T19739] lo speed is unknown, defaulting to 1000
[  767.726618][T19769] netlink: 'syz.1.20360': attribute type 10 has an invalid length.
[  767.730134][T19769] netlink: 'syz.1.20360': attribute type 10 has an invalid length.
[  767.971039][T19782] __nla_validate_parse: 2 callbacks suppressed
[  767.971053][T19782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20365'.
[  768.126727][T19797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20372'.
[  768.204947][T19802] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20374'.
[  768.593444][T19833] netlink: 'syz.0.20388': attribute type 1 has an invalid length.
[  768.608399][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20388'.
[  768.618171][T19833] bond22: (slave bridge22): making interface the new active one
[  768.620991][T19833] bond22: (slave bridge22): Enslaving as an active interface with an up link
[  768.632513][T19833] bond22: (slave bridge23): Enslaving as an active interface with a down link
[  768.641621][T19833] macvlan9: entered promiscuous mode
[  768.643279][T19833] macvlan9: entered allmulticast mode
[  768.646457][T19833] bond22: entered promiscuous mode
[  768.648466][T19833] bridge22: entered promiscuous mode
[  768.650508][T19833] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  768.653021][T19833] bond22: (slave macvlan9): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  768.658781][T19833] bond22: left promiscuous mode
[  768.660351][T19833] bridge22: left promiscuous mode
[  768.717859][T19840] netlink: 'syz.1.20391': attribute type 1 has an invalid length.
[  768.720766][T19840] netlink: 728 bytes leftover after parsing attributes in process `syz.1.20391'.
[  768.959641][T19863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20402'.
[  769.477162][   T34] audit: type=1800 audit(1772923071.632:18): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.20419" name="memory.events" dev="tmpfs" ino=34518 res=0 errno=0
[  770.118300][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20436'.
[  770.137805][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20436'.
[  770.187032][T19948] netlink: 'syz.0.20439': attribute type 2 has an invalid length.
[  770.189877][T19948] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20439'.
[  770.421721][T19969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20448'.
[  770.424794][T19968] netlink: 'syz.0.20447': attribute type 1 has an invalid length.
[  770.460037][T19968] bond23: entered promiscuous mode
[  770.462223][T19968] bond23: entered allmulticast mode
[  770.464838][T19968] 8021q: adding VLAN 0 to HW filter on device bond23
[  770.481049][T19968] bridge24: entered promiscuous mode
[  770.482735][T19968] bridge24: entered allmulticast mode
[  770.484641][T19968] bond23: (slave bridge24): Enslaving as a backup interface with an up link
[  770.494777][T19968] bridge25: entered promiscuous mode
[  770.497451][T19968] bridge25: entered allmulticast mode
[  770.499527][T19968] bond23: (slave bridge25): Enslaving as a backup interface with a down link
[  770.565565][ T5929] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  770.685593][ T5929] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  770.699273][T19988] IPVS: Scheduler module ip_vs_ not found
[  770.702652][T19988] IPVS: length: 24 != 36888
[  770.846976][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 90 seconds
[  770.850214][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 90 seconds
[  770.853387][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 90 seconds
[  770.856964][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 90 seconds
[  771.487793][T20068] netlink: 'syz.2.20483': attribute type 3 has an invalid length.
[  771.955909][T20117] sctp: [Deprecated]: syz.1.20503 (pid 20117) Use of struct sctp_assoc_value in delayed_ack socket option.
[  771.955909][T20117] Use struct sctp_sack_info instead
[  772.993253][T20143] veth1: left allmulticast mode
[  773.028253][T20143] veth0_to_team: left allmulticast mode
[  773.030410][T20143] xfrm0: left promiscuous mode
[  773.032025][T20143] xfrm0: left allmulticast mode
[  773.034048][T20143] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  773.036524][T20143] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  773.040367][T20143] vlan2: left allmulticast mode
[  773.042008][T20143] bridge1: left allmulticast mode
[  773.043975][T20143] bridge3: left allmulticast mode
[  773.046953][T20143] veth15: left promiscuous mode
[  773.049237][T20143] veth17: left promiscuous mode
[  773.051229][T20143] ip6tnl4: left promiscuous mode
[  773.052837][T20143] ip6tnl4: left allmulticast mode
[  773.054890][T20143] gtp0: left promiscuous mode
[  773.056537][T20143] gtp0: left allmulticast mode
[  773.058396][T20143] ip6tnl5: left allmulticast mode
[  773.060315][T20143] macvlan0: left promiscuous mode
[  773.062380][T20143] bond12: left promiscuous mode
[  773.063971][T20143] veth25: left promiscuous mode
[  773.072394][T20143] bond14: left promiscuous mode
[  773.073992][T20143] bridge13: left promiscuous mode
[  773.076922][T20143] bond16: left promiscuous mode
[  773.106263][T20143] xfrm1: left allmulticast mode
[  773.193687][T20143] ip6tnl10: left allmulticast mode
[  773.196116][T20143] gretap5: left promiscuous mode
[  773.217205][T20143] vlan1: left allmulticast mode
[  773.219173][T20143] team0: left allmulticast mode
[  773.221069][T20143] bridge12: left allmulticast mode
[  773.223070][T20143] bridge15: left allmulticast mode
[  773.225066][T20143] bridge16: left allmulticast mode
[  773.247267][T20143] bridge21: left allmulticast mode
[  773.272120][T20143] bond23: left promiscuous mode
[  773.273699][T20143] bridge24: left promiscuous mode
[  773.275636][T20143] bridge25: left promiscuous mode
[  773.277750][T20143] bond23: left allmulticast mode
[  773.279394][T20143] bridge24: left allmulticast mode
[  773.281152][T20143] bridge25: left allmulticast mode
[  773.294741][ T1931] lo speed is unknown, defaulting to 1000
[  773.297314][ T1931] syz2: Port: 1 Link DOWN
[  773.298700][ T5880] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.301763][ T5880] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.304328][ T5880] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.310485][ T5880] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.788190][T20204] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  773.844859][T20209] rdma_rxe: rxe_newlink: failed to add lo
[  773.915998][T20215] netlink: 'syz.1.20544': attribute type 2 has an invalid length.
[  774.039455][T20227] __nla_validate_parse: 4 callbacks suppressed
[  774.039470][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20546'.
[  774.067862][T20227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20546'.
[  774.311162][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20551'.
[  774.314032][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20551'.
[  774.730557][T20259] netlink: 64 bytes leftover after parsing attributes in process `syz.0.20562'.
[  774.829181][T20264] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  775.118880][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20577'.
[  775.122526][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20577'.
[  775.129278][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20577'.
[  775.132842][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20577'.
[  775.264550][T20297] lo speed is unknown, defaulting to 1000
[  775.290913][T20305] netlink: 'syz.2.20580': attribute type 1 has an invalid length.
[  775.453301][T20297] lo speed is unknown, defaulting to 1000
[  775.539905][T20317] syzkaller0: entered promiscuous mode
[  775.541890][T20317] syzkaller0: entered allmulticast mode
[  777.870020][T20365] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  779.740444][T20450] tipc: Resetting bearer <eth:syzkaller0>
[  779.746782][T20450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  779.760895][T20450] tipc: Resetting bearer <eth:syzkaller0>
[  779.767042][T20449] tipc: Resetting bearer <eth:syzkaller0>
[  779.934138][T20466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20651'.
[  780.051651][T20474] netlink: 3 bytes leftover after parsing attributes in process `syz.0.20655'.
[  780.213179][T20481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  780.217686][T20481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  780.265841][T20482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20658'.
[  780.269514][T20482] gretap0: left promiscuous mode
[  780.271603][T20482] gretap0: entered promiscuous mode
[  780.776466][   T81] tipc: Resetting bearer <eth:syzkaller0>
[  781.129391][T20496] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  781.132087][T20496] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  781.730611][T20514] netlink: 136 bytes leftover after parsing attributes in process `syz.2.20672'.
[  781.736098][T20514] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check.
[  781.936831][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20679'.
[  781.949626][T20531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  781.951872][T20531] IPv6: NLM_F_CREATE should be set when creating new route
[  781.955124][T20531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  781.957398][T20531] IPv6: NLM_F_CREATE should be set when creating new route
[  782.209896][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20683'.
[  782.296998][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20687'.
[  782.300353][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20687'.
[  784.100729][T20641] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  784.916589][   T34] audit: type=1107 audit(1772923087.072:19): pid=20691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  785.157780][T20721] vxcan1: entered allmulticast mode
[  785.423496][T20743] nbd: nbd0 already in use
[  785.425214][T20743] block nbd0: NBD_DISCONNECT
[  785.427140][T20743] block nbd0: Send disconnect failed -32
[  785.428854][T20743] block nbd0: shutting down sockets
[  785.444706][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20765'.
[  785.507534][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20765'.
[  785.543292][T20748] lo speed is unknown, defaulting to 1000
[  785.574780][T20749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20765'.
[  785.701795][T20748] lo speed is unknown, defaulting to 1000
[  786.110806][T20785] netlink: 'syz.1.20783': attribute type 1 has an invalid length.
[  787.461814][T20889] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  787.500301][T20886] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.20830'.
[  787.682265][T20908] netlink: 'syz.0.20839': attribute type 6 has an invalid length.
[  787.898530][T20934] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  788.044366][T20948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20856'.
[  788.458724][T20981] SET target dimension over the limit!
[  788.512161][T20987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.20871'.
[  788.528825][T20987] netlink: 'syz.1.20871': attribute type 11 has an invalid length.
[  788.531949][T20987] netlink: 'syz.1.20871': attribute type 23 has an invalid length.
[  788.535009][T20987] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20871'.
[  788.711856][T20998] macsec6: entered allmulticast mode
[  788.714077][T20998] bridge0: entered allmulticast mode
[  788.718054][T20998] bridge0: port 1(macsec6) entered blocking state
[  788.720651][T20998] bridge0: port 1(macsec6) entered disabled state
[  788.726268][T20998] bridge0: left allmulticast mode
[  788.742519][T20995] lo speed is unknown, defaulting to 1000
[  788.941459][T20995] lo speed is unknown, defaulting to 1000
[  788.941703][T20999] lo speed is unknown, defaulting to 1000
[  789.008375][T21011] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  789.011346][T21011] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  789.038988][T21011] tipc: Resetting bearer <eth:syzkaller0>
[  789.041280][T21011] syzkaller0: left promiscuous mode
[  789.042947][T21011] syzkaller0: left allmulticast mode
[  789.049050][T21011] ip6gre9: left promiscuous mode
[  789.110662][T21011] veth0_to_bond: left allmulticast mode
[  789.118919][T21011] macvlan6: left allmulticast mode
[  789.127139][T21011] ip6tnl13: left allmulticast mode
[  789.210821][ T5838] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  789.213538][ T5838] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  789.218354][T20999] lo speed is unknown, defaulting to 1000
[  789.218377][ T5838] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  789.223883][ T5838] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  789.618580][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20887'.
[  789.632596][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20887'.
[  789.645776][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20887'.
[  789.863322][T21051] netlink: 'syz.0.20896': attribute type 19 has an invalid length.
[  789.875272][T21051] netlink: 'syz.0.20896': attribute type 20 has an invalid length.
[  790.758762][T21064] __nla_validate_parse: 9 callbacks suppressed
[  790.758773][T21064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20900'.
[  790.764126][T21064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20900'.
[  790.898781][T21079] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20908'.
[  790.954646][T21086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20912'.
[  790.981120][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20911'.
[  791.119319][T21096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  791.294665][T21110] openvswitch: netlink: Actions may not be safe on all matching packets
[  791.574365][T21138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.325682][T21209] netlink: 160 bytes leftover after parsing attributes in process `syz.1.20971'.
[  792.328438][T21209] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  792.401272][T21216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.639531][T21235] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  792.875438][T21256] openvswitch: netlink: IP tunnel dst address not specified
[  792.961791][T21264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20998'.
[  793.475883][T21316] netlink: 'syz.1.21021': attribute type 11 has an invalid length.
[  793.614904][T21329] : renamed from team_slave_1
[  794.230299][T21367] delete_channel: no stack
[  794.300793][T21375] lo speed is unknown, defaulting to 1000
[  794.339459][T21378] netlink: 'syz.1.21042': attribute type 2 has an invalid length.
[  794.346300][T21378] !: entered promiscuous mode
[  794.500840][T21375] lo speed is unknown, defaulting to 1000
[  794.617755][T21386] lo speed is unknown, defaulting to 1000
[  794.811060][T21388] lo speed is unknown, defaulting to 1000
[  794.840124][T21390] IPVS: length: 132 != 8
[  794.922999][T21386] lo speed is unknown, defaulting to 1000
[  794.926257][T21388] lo speed is unknown, defaulting to 1000
[  795.165469][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  795.188653][T21398] lo speed is unknown, defaulting to 1000
[  795.433297][T21398] lo speed is unknown, defaulting to 1000
[  795.438191][T21412] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21047'.
[  795.888815][T21427] delete_channel: no stack
[  795.926493][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21053'.
[  795.966537][T21438] netlink: 666 bytes leftover after parsing attributes in process `syz.2.21054'.
[  796.319129][T21471] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21060'.
[  796.363791][T21473] netlink: 'syz.1.21063': attribute type 13 has an invalid length.
[  796.416791][T21476] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.21063'.
[  796.428462][T21476] netlink: 'syz.1.21063': attribute type 3 has an invalid length.
[  796.435790][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21063'.
[  796.476154][T20148] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  796.488788][T21478] delete_channel: no stack
[  796.659331][T21488] lo speed is unknown, defaulting to 1000
[  796.683096][T21490] delete_channel: no stack
[  796.793530][T21488] lo speed is unknown, defaulting to 1000
[  796.904130][T21501] xt_TPROXY: Can be used only with -p tcp or -p udp
[  796.927276][T21500] delete_channel: no stack
[  797.018173][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21076'.
[  797.047211][T20148] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  797.883938][T21530] delete_channel: no stack
[  797.885539][T21532] netlink: 'syz.1.21082': attribute type 13 has an invalid length.
[  797.910487][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21082'.
[  797.926381][  T783] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  797.979321][T21534] delete_channel: no stack
[  798.100340][T21540] lo speed is unknown, defaulting to 1000
[  798.284621][T21540] lo speed is unknown, defaulting to 1000
[  798.284784][T21545] lo speed is unknown, defaulting to 1000
[  798.482119][T21545] lo speed is unknown, defaulting to 1000
[  798.497959][T21552] delete_channel: no stack
[  798.653017][T21556] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003
[  798.687773][T20148] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  798.790231][T21568] netlink: 'syz.0.21094': attribute type 13 has an invalid length.
[  798.931434][T21571] delete_channel: no stack
[  798.951142][T21573] lo speed is unknown, defaulting to 1000
[  799.113484][T21588] netlink: 52 bytes leftover after parsing attributes in process `syz.0.21101'.
[  799.143858][T21588] bond24 (unregistering): Released all slaves
[  799.171558][T21573] lo speed is unknown, defaulting to 1000
[  799.172050][T21580] lo speed is unknown, defaulting to 1000
[  799.430396][T21580] lo speed is unknown, defaulting to 1000
[  799.500230][T21596] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001
[  799.648449][T21611] lo speed is unknown, defaulting to 1000
[  799.952512][T21611] lo speed is unknown, defaulting to 1000
[  799.987870][T21643] ipt_rpfilter: unknown options
[  800.085527][T21643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21114'.
[  800.194882][T21643] lo speed is unknown, defaulting to 1000
[  800.203573][T21647] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21115'.
[  800.339211][T21643] lo speed is unknown, defaulting to 1000
[  800.339395][T21649] lo speed is unknown, defaulting to 1000
[  800.526720][T21656] netlink: 'syz.2.21118': attribute type 13 has an invalid length.
[  800.772974][T21669] lo speed is unknown, defaulting to 1000
[  800.801802][T21649] lo speed is unknown, defaulting to 1000
[  800.925810][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 120 seconds
[  800.929968][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 120 seconds
[  800.933888][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 120 seconds
[  800.938006][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 120 seconds
[  801.164757][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.171692][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.178224][T21669] lo speed is unknown, defaulting to 1000
[  801.179797][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.190555][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.195081][T21676] lo speed is unknown, defaulting to 1000
[  801.208100][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.236342][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.285826][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.306552][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.332197][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.339596][T21681] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  801.361215][T21676] lo speed is unknown, defaulting to 1000
[  801.586634][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21125'.
[  801.606625][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21125'.
[  801.610382][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21125'.
[  801.613595][T21689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21125'.
[  801.834978][T21706] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.21129'.
[  801.846190][T21706] netlink: Conntrack attr has 4 unknown bytes
[  801.878959][T21705] lo speed is unknown, defaulting to 1000
[  802.207978][T21705] lo speed is unknown, defaulting to 1000
[  802.389625][T21729] delete_channel: no stack
[  802.502372][T21736] delete_channel: no stack
[  802.718784][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21141'.
[  803.027830][T21747] netlink: 120 bytes leftover after parsing attributes in process `syz.2.21142'.
[  803.031447][T21747] netlink: 'syz.2.21142': attribute type 1 has an invalid length.
[  803.034639][T21747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.21142'.
[  803.067694][T21747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  803.145574][T14831] block nbd2: NBD_DISCONNECT
[  803.147952][T14831] block nbd2: Send disconnect failed -32
[  803.150511][T14831] block nbd2: shutting down sockets
[  803.328845][T21755] delete_channel: no stack
[  803.579881][T21766] delete_channel: no stack
[  803.607463][T21772] netlink: 'syz.2.21151': attribute type 13 has an invalid length.
[  803.689933][T21779] delete_channel: no stack
[  803.789622][T21784] delete_channel: no stack
[  803.915942][T21799] lo speed is unknown, defaulting to 1000
[  804.067849][T21807] lo speed is unknown, defaulting to 1000
[  804.070046][T21799] lo speed is unknown, defaulting to 1000
[  804.280791][T21807] lo speed is unknown, defaulting to 1000
[  804.649288][T21817] delete_channel: no stack
[  804.740253][T21826] delete_channel: no stack
[  804.953447][T21844] delete_channel: no stack
[  805.014339][T21856] pim6reg: entered allmulticast mode
[  805.021981][T21856] pim6reg: left allmulticast mode
[  805.053355][T21859] lo speed is unknown, defaulting to 1000
[  805.191971][T21863] lo speed is unknown, defaulting to 1000
[  805.206171][T21865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  805.206371][T21859] lo speed is unknown, defaulting to 1000
[  805.306282][T21865] macsec0: entered allmulticast mode
[  805.337157][T21863] lo speed is unknown, defaulting to 1000
[  805.569398][T21874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21179'.
[  820.856700][ T5196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  820.861421][ T5196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  820.865567][ T5196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  820.872806][T21903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  820.879944][T21903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  820.882816][T21903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  820.886697][T21903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  820.889184][T21903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  820.891705][T21903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  820.895676][T21903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  820.899915][T21903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  820.904631][T21903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  820.908224][ T5196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  820.918200][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  820.921607][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  820.923969][T21903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  820.927722][T21903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  820.930273][T21903] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  820.933763][T21899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  820.936613][T21899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  820.939326][T21899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  820.942103][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  820.944698][T21899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  820.947576][T21899] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  820.950845][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  820.997193][T21898] lo speed is unknown, defaulting to 1000
[  821.122346][T21904] lo speed is unknown, defaulting to 1000
[  821.125992][T21898] lo speed is unknown, defaulting to 1000
[  821.221554][T21898] chnl_net:caif_netlink_parms(): no params data found
[  821.283953][T21898] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.286232][T21898] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.288398][T21898] bridge_slave_0: entered allmulticast mode
[  821.291157][T21898] bridge_slave_0: entered promiscuous mode
[  821.294012][T21904] lo speed is unknown, defaulting to 1000
[  821.294525][T21898] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.298264][T21898] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.300647][T21898] bridge_slave_1: entered allmulticast mode
[  821.303363][T21898] bridge_slave_1: entered promiscuous mode
[  821.306603][T21897] lo speed is unknown, defaulting to 1000
[  821.339479][T21898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.347272][T21898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.389220][T21898] team0: Port device team_slave_0 added
[  821.394690][T21898] team0: Port device team_slave_1 added
[  821.419769][T21898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  821.422434][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.432115][T21898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  821.450303][T21898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  821.452866][T21898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  821.462455][T21898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.478506][T21897] lo speed is unknown, defaulting to 1000
[  821.531864][T21898] hsr_slave_0: entered promiscuous mode
[  821.534694][T21898] hsr_slave_1: entered promiscuous mode
[  821.654245][T21904] chnl_net:caif_netlink_parms(): no params data found
[  821.818747][T21904] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.821584][T21904] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.824379][T21904] bridge_slave_0: entered allmulticast mode
[  821.828941][T21904] bridge_slave_0: entered promiscuous mode
[  821.836023][T21897] chnl_net:caif_netlink_parms(): no params data found
[  821.850921][T21904] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.853069][T21904] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.855265][T21904] bridge_slave_1: entered allmulticast mode
[  821.858200][T21904] bridge_slave_1: entered promiscuous mode
[  821.897207][T21904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.907143][T21904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.951444][T21904] team0: Port device team_slave_0 added
[  821.964289][T21904] team0: Port device team_slave_1 added
[  821.966965][T21897] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.969145][T21897] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.971440][T21897] bridge_slave_0: entered allmulticast mode
[  821.974431][T21897] bridge_slave_0: entered promiscuous mode
[  821.989385][T21897] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.991475][T21897] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.993594][T21897] bridge_slave_1: entered allmulticast mode
[  821.997007][T21897] bridge_slave_1: entered promiscuous mode
[  822.018660][T21904] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.021262][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.031450][T21904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.046639][T21904] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.049288][T21904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.059217][T21904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.068395][T21897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  822.081976][T21897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.121274][T21897] team0: Port device team_slave_0 added
[  822.134437][T21897] team0: Port device team_slave_1 added
[  822.140423][T21904] hsr_slave_0: entered promiscuous mode
[  822.142901][T21904] hsr_slave_1: entered promiscuous mode
[  822.145107][T21904] debugfs: 'hsr0' already exists in 'hsr'
[  822.148050][T21904] Cannot create hsr debugfs directory
[  822.183238][T21897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.186266][T21897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.193671][T21897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.202572][T21897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.204761][T21897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.212729][T21897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.284431][T21897] hsr_slave_0: entered promiscuous mode
[  822.287267][T21897] hsr_slave_1: entered promiscuous mode
[  822.289312][T21897] debugfs: 'hsr0' already exists in 'hsr'
[  822.291031][T21897] Cannot create hsr debugfs directory
[  823.005855][T21903] Bluetooth: hci3: command tx timeout
[  823.005907][T21899] Bluetooth: hci5: command tx timeout
[  823.015575][T21899] Bluetooth: hci4: command tx timeout
[  825.085569][T21899] Bluetooth: hci3: command tx timeout
[  825.095717][T21899] Bluetooth: hci4: command tx timeout
[  825.096011][T21903] Bluetooth: hci5: command tx timeout
[  827.165620][T21903] Bluetooth: hci5: command tx timeout
[  827.175918][T21903] Bluetooth: hci4: command tx timeout
[  827.176210][T21899] Bluetooth: hci3: command tx timeout
[  829.245565][T21899] Bluetooth: hci4: command tx timeout
[  829.245758][T21903] Bluetooth: hci5: command tx timeout
[  829.248441][ T5874] Bluetooth: hci3: command tx timeout
[  831.015844][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 150 seconds
[  831.019988][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 150 seconds
[  831.023441][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 150 seconds
[  831.027398][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 150 seconds
[  860.445571][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  861.095711][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 180 seconds
[  861.099744][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 180 seconds
[  861.103886][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 180 seconds
[  861.108490][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 180 seconds
[  861.533028][ T5255] udevd[5255]: worker [13774] /devices/virtual/block/nbd1 timeout; kill it
[  861.535752][ T5255] udevd[5255]: seq 28408 '/devices/virtual/block/nbd1' killed
[  880.847226][ T5874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  880.850922][ T5874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  880.854262][ T5874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  880.857694][ T5874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  880.860440][ T5874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  880.887483][T21936] lo speed is unknown, defaulting to 1000
[  880.992683][T21936] lo speed is unknown, defaulting to 1000
[  881.077638][T21936] chnl_net:caif_netlink_parms(): no params data found
[  881.146323][T21936] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.149240][T21936] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.152408][T21936] bridge_slave_0: entered allmulticast mode
[  881.156445][T21936] bridge_slave_0: entered promiscuous mode
[  881.162950][T21936] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.166575][T21936] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.169491][T21936] bridge_slave_1: entered allmulticast mode
[  881.173353][T21936] bridge_slave_1: entered promiscuous mode
[  881.200906][T21936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.208225][T21936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  881.234628][T21936] team0: Port device team_slave_0 added
[  881.238201][T21936] team0: Port device team_slave_1 added
[  881.256098][T21936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.258769][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.268538][T21936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  881.274187][T21936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  881.276865][T21936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  881.286651][T21936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  881.329885][T21936] hsr_slave_0: entered promiscuous mode
[  881.333052][T21936] hsr_slave_1: entered promiscuous mode
[  881.335954][T21936] debugfs: 'hsr0' already exists in 'hsr'
[  881.338287][T21936] Cannot create hsr debugfs directory
[  881.891707][ T5196] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  881.896280][T21903] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  881.901665][T21903] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  881.905221][T21903] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  881.905611][ T5196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  881.911651][ T5196] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  881.917286][T21903] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  881.920274][T21903] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  881.923507][T21903] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  881.926698][ T5196] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  881.967123][T21946] lo speed is unknown, defaulting to 1000
[  882.104886][T21946] lo speed is unknown, defaulting to 1000
[  882.104901][T21947] lo speed is unknown, defaulting to 1000
[  882.237638][T21946] chnl_net:caif_netlink_parms(): no params data found
[  882.256587][T21947] lo speed is unknown, defaulting to 1000
[  882.322500][T21946] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.324681][T21946] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.327518][T21946] bridge_slave_0: entered allmulticast mode
[  882.330220][T21946] bridge_slave_0: entered promiscuous mode
[  882.338366][T21946] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.340741][T21946] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.343251][T21946] bridge_slave_1: entered allmulticast mode
[  882.346467][T21946] bridge_slave_1: entered promiscuous mode
[  882.367357][T21946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  882.374382][T21946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.405571][T21946] team0: Port device team_slave_0 added
[  882.412708][T21946] team0: Port device team_slave_1 added
[  882.435913][T21946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.438054][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.448586][T21946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.456436][T21946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.458535][T21946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.466764][T21946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.470681][T21947] chnl_net:caif_netlink_parms(): no params data found
[  882.544474][T21946] hsr_slave_0: entered promiscuous mode
[  882.547478][T21946] hsr_slave_1: entered promiscuous mode
[  882.549992][T21946] debugfs: 'hsr0' already exists in 'hsr'
[  882.551752][T21946] Cannot create hsr debugfs directory
[  882.581253][T21947] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.583563][T21947] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.585976][T21947] bridge_slave_0: entered allmulticast mode
[  882.588677][T21947] bridge_slave_0: entered promiscuous mode
[  882.597147][T21947] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.599339][T21947] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.601942][T21947] bridge_slave_1: entered allmulticast mode
[  882.604708][T21947] bridge_slave_1: entered promiscuous mode
[  882.640483][T21947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  882.649943][T21947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  882.682499][T21947] team0: Port device team_slave_0 added
[  882.690490][T21947] team0: Port device team_slave_1 added
[  882.727765][T21947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  882.729879][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.737644][T21947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.747217][T21947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.749304][T21947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  882.756981][T21947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.802763][T21947] hsr_slave_0: entered promiscuous mode
[  882.805129][T21947] hsr_slave_1: entered promiscuous mode
[  882.808534][T21947] debugfs: 'hsr0' already exists in 'hsr'
[  882.810299][T21947] Cannot create hsr debugfs directory
[  882.935542][T21903] Bluetooth: hci6: command tx timeout
[  883.975567][ T5874] Bluetooth: hci7: command tx timeout
[  883.976834][T21903] Bluetooth: hci8: command tx timeout
[  885.005600][T21903] Bluetooth: hci6: command tx timeout
[  886.045650][T21903] Bluetooth: hci8: command tx timeout
[  886.047415][T21903] Bluetooth: hci7: command tx timeout
[  887.085638][T21903] Bluetooth: hci6: command tx timeout
[  888.125566][T21903] Bluetooth: hci7: command tx timeout
[  888.135570][T21903] Bluetooth: hci8: command tx timeout
[  889.165772][T21903] Bluetooth: hci6: command tx timeout
[  890.205569][ T5874] Bluetooth: hci7: command tx timeout
[  890.207693][T21903] Bluetooth: hci8: command tx timeout
[  891.175574][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 210 seconds
[  891.179790][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 210 seconds
[  891.183916][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 210 seconds
[  891.188407][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 210 seconds
[  921.275507][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 240 seconds
[  921.278688][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 240 seconds
[  921.281887][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 240 seconds
[  921.285191][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 240 seconds
[  940.864922][ T5874] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  940.868925][ T5874] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  940.872386][ T5874] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  940.877982][ T5874] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  940.881246][ T5874] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  940.914612][T21963] lo speed is unknown, defaulting to 1000
[  941.032384][T21963] lo speed is unknown, defaulting to 1000
[  941.117746][T21963] chnl_net:caif_netlink_parms(): no params data found
[  941.170021][T21963] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.172254][T21963] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.174698][T21963] bridge_slave_0: entered allmulticast mode
[  941.180536][T21963] bridge_slave_0: entered promiscuous mode
[  941.186693][T21963] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.188873][T21963] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.191045][T21963] bridge_slave_1: entered allmulticast mode
[  941.193682][T21963] bridge_slave_1: entered promiscuous mode
[  941.219818][T21963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  941.227039][T21963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  941.247854][T21963] team0: Port device team_slave_0 added
[  941.251859][T21963] team0: Port device team_slave_1 added
[  941.268568][T21963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.270578][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.278120][T21963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.282451][T21963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.284745][T21963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.292280][T21963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.320765][T21963] hsr_slave_0: entered promiscuous mode
[  941.323111][T21963] hsr_slave_1: entered promiscuous mode
[  941.325240][T21963] debugfs: 'hsr0' already exists in 'hsr'
[  941.327352][T21963] Cannot create hsr debugfs directory
[  942.898144][T21902] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  942.902230][T21902] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  942.906664][T21902] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  942.911583][T21902] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  942.915072][T21902] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  942.928051][T21899] Bluetooth: hci9: command tx timeout
[  942.944350][T21906] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  942.948911][T21906] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  942.952357][T21906] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  942.954590][T21973] lo speed is unknown, defaulting to 1000
[  942.956817][T21906] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  942.962672][T21906] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  943.113512][T21975] lo speed is unknown, defaulting to 1000
[  943.116403][T21973] lo speed is unknown, defaulting to 1000
[  943.222487][T21975] lo speed is unknown, defaulting to 1000
[  943.267263][T21973] chnl_net:caif_netlink_parms(): no params data found
[  943.331928][T21973] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.334089][T21973] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.336549][T21973] bridge_slave_0: entered allmulticast mode
[  943.340585][T21973] bridge_slave_0: entered promiscuous mode
[  943.358469][T21973] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.361541][T21973] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.364800][T21973] bridge_slave_1: entered allmulticast mode
[  943.369594][T21973] bridge_slave_1: entered promiscuous mode
[  943.410868][T21973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.420655][T21973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.452317][T21973] team0: Port device team_slave_0 added
[  943.454462][T21975] chnl_net:caif_netlink_parms(): no params data found
[  943.463031][T21973] team0: Port device team_slave_1 added
[  943.511709][T21973] batman_adv: batadv0: Adding interface: batadv_slave_0
[  943.514668][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.525712][T21973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  943.542633][T21973] batman_adv: batadv0: Adding interface: batadv_slave_1
[  943.545759][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.556438][T21973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  943.590908][T21975] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.593248][T21975] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.596076][T21975] bridge_slave_0: entered allmulticast mode
[  943.599064][T21975] bridge_slave_0: entered promiscuous mode
[  943.625799][T21975] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.628466][T21975] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.631019][T21975] bridge_slave_1: entered allmulticast mode
[  943.634732][T21975] bridge_slave_1: entered promiscuous mode
[  943.643354][T21973] hsr_slave_0: entered promiscuous mode
[  943.647302][T21973] hsr_slave_1: entered promiscuous mode
[  943.650304][T21973] debugfs: 'hsr0' already exists in 'hsr'
[  943.652331][T21973] Cannot create hsr debugfs directory
[  943.676324][T21975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.691473][T21975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.748498][T21975] team0: Port device team_slave_0 added
[  943.759381][T21975] team0: Port device team_slave_1 added
[  943.803390][T21975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  943.810759][T21975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.820990][T21975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  943.832395][T21975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  943.835029][T21975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  943.845233][T21975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  943.919678][T21975] hsr_slave_0: entered promiscuous mode
[  943.922885][T21975] hsr_slave_1: entered promiscuous mode
[  943.926063][T21975] debugfs: 'hsr0' already exists in 'hsr'
[  943.928259][T21975] Cannot create hsr debugfs directory
[  944.447357][T21906] Bluetooth: hci3: command 0x0406 tx timeout
[  944.449669][T21976] Bluetooth: hci5: command 0x0406 tx timeout
[  944.451463][T21902] Bluetooth: hci4: command 0x0406 tx timeout
[  945.005491][T21903] Bluetooth: hci9: command tx timeout
[  945.007415][T21903] Bluetooth: hci11: command tx timeout
[  945.010188][T21903] Bluetooth: hci10: command tx timeout
[  947.085871][ T5196] Bluetooth: hci10: command tx timeout
[  947.085901][ T5874] Bluetooth: hci11: command tx timeout
[  947.088161][T21903] Bluetooth: hci9: command tx timeout
[  949.165672][T21903] Bluetooth: hci9: command tx timeout
[  949.165806][ T5874] Bluetooth: hci10: command tx timeout
[  949.167824][T21903] Bluetooth: hci11: command tx timeout
[  951.245730][ T5196] Bluetooth: hci11: command tx timeout
[  951.255728][ T5196] Bluetooth: hci10: command tx timeout
[  951.325958][   T11] block nbd1: Possible stuck request ffff888022d8a800: control (read@0,1024B). Runtime 270 seconds
[  951.330063][   T11] block nbd1: Possible stuck request ffff888022d8aa00: control (read@1024,1024B). Runtime 270 seconds
[  951.334139][   T11] block nbd1: Possible stuck request ffff888022d8ac00: control (read@2048,1024B). Runtime 270 seconds
[  951.338779][   T11] block nbd1: Possible stuck request ffff888022d8ae00: control (read@3072,1024B). Runtime 270 seconds
[  956.445838][   T35] INFO: task syz.1.21178:21865 blocked for more than 143 seconds.
[  956.448879][   T35]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  956.450971][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  956.454426][   T35] task:syz.1.21178     state:D stack:25976 pid:21865 tgid:21864 ppid:5866   task_flags:0x480140 flags:0x00080002
[  956.460935][   T35] Call Trace:
[  956.462254][   T35]  <TASK>
[  956.463434][   T35]  __schedule+0x15dd/0x52d0
[  956.465231][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.468185][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  956.470177][   T35]  ? __pfx___schedule+0x10/0x10
[  956.472089][   T35]  ? schedule+0x90/0x360
[  956.473736][   T35]  schedule+0x164/0x360
[  956.476373][   T35]  blk_mq_freeze_queue_wait+0x101/0x180
[  956.478531][   T35]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  956.480867][   T35]  ? __pfx_autoremove_wake_function+0x10/0x10
[  956.483218][   T35]  queue_limits_commit_update_frozen+0x55/0xd0
[  956.486158][   T35]  nbd_set_size+0x454/0x680
[  956.488003][   T35]  ? __pfx_nbd_set_size+0x10/0x10
[  956.489982][   T35]  ? nla_memcpy+0x5b/0xc0
[  956.491677][   T35]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  956.493714][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  956.496718][   T35]  ? rcu_is_watching+0x15/0xb0
[  956.498623][   T35]  ? trace_kmalloc+0x2a/0x110
[  956.500449][   T35]  ? __nla_parse+0x40/0x60
[  956.502188][   T35]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  956.504626][   T35]  genl_family_rcv_msg_doit+0x22a/0x330
[  956.506948][   T35]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  956.509662][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.511608][   T35]  genl_rcv_msg+0x61c/0x7a0
[  956.513321][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.515495][   T35]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  956.517912][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.519877][   T35]  netlink_rcv_skb+0x232/0x4b0
[  956.521739][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.523679][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.526328][   T35]  ? down_read+0x272/0x2e0
[  956.528357][   T35]  ? genl_rcv+0xd/0x40
[  956.529970][   T35]  genl_rcv+0x28/0x40
[  956.531521][   T35]  netlink_unicast+0x80f/0x9b0
[  956.533340][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  956.535561][   T35]  ? netlink_sendmsg+0x650/0xb40
[  956.537804][   T35]  ? skb_put+0x11b/0x210
[  956.539480][   T35]  netlink_sendmsg+0x813/0xb40
[  956.541210][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.543098][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  956.548032][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.551380][   T35]  ____sys_sendmsg+0x972/0x9f0
[  956.553130][   T35]  ? futex_unqueue+0x211/0x240
[  956.554929][   T35]  ? __pfx_____sys_sendmsg+0x10/0x10
[  956.557481][   T35]  ? import_iovec+0x73/0xa0
[  956.559157][   T35]  ___sys_sendmsg+0x2a5/0x360
[  956.560898][   T35]  ? __pfx____sys_sendmsg+0x10/0x10
[  956.562755][   T35]  ? futex_wait+0x29a/0x380
[  956.564376][   T35]  ? __fget_files+0x2a/0x420
[  956.566268][   T35]  ? __fget_files+0x3a0/0x420
[  956.568279][   T35]  __x64_sys_sendmsg+0x1bd/0x2a0
[  956.570011][   T35]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  956.571941][   T35]  do_syscall_64+0x14d/0xf80
[  956.573616][   T35]  ? trace_irq_disable+0x3b/0x150
[  956.575970][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.580118][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.581985][   T35] RIP: 0033:0x7fa90bb9c799
[  956.583313][   T35] RSP: 002b:00007fa90cb20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.587167][   T35] RAX: ffffffffffffffda RBX: 00007fa90be15fa0 RCX: 00007fa90bb9c799
[  956.589667][   T35] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 0000000000000009
[  956.592111][   T35] RBP: 00007fa90bc32bd9 R08: 0000000000000000 R09: 0000000000000000
[  956.594653][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  956.597874][   T35] R13: 00007fa90be16038 R14: 00007fa90be15fa0 R15: 00007ffdb7b620e8
[  956.600147][   T35]  </TASK>
[  956.601170][   T35] INFO: task syz.0.21180:21876 blocked for more than 143 seconds.
[  956.603684][   T35]       Not tainted syzkaller #0
[  956.605174][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  956.608222][   T35] task:syz.0.21180     state:D stack:25752 pid:21876 tgid:21875 ppid:5865   task_flags:0x400140 flags:0x00080002
[  956.611799][   T35] Call Trace:
[  956.612871][   T35]  <TASK>
[  956.613828][   T35]  __schedule+0x15dd/0x52d0
[  956.615844][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.631856][   T35]  ? __pfx___schedule+0x10/0x10
[  956.633366][   T35]  ? schedule+0x90/0x360
[  956.634748][   T35]  schedule+0x164/0x360
[  956.636298][   T35]  schedule_preempt_disabled+0x13/0x30
[  956.638249][   T35]  __mutex_lock+0x7fe/0x1300
[  956.639733][   T35]  ? is_bpf_text_address+0x26/0x2b0
[  956.641327][   T35]  ? __mutex_lock+0x5ac/0x1300
[  956.642889][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  956.644508][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  956.646421][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.648491][   T35]  ? radix_tree_lookup+0x240/0x290
[  956.650136][   T35]  genl_rcv_msg+0x10b/0x7a0
[  956.651509][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.653130][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.654713][   T35]  netlink_rcv_skb+0x232/0x4b0
[  956.656640][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.658927][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.661340][   T35]  ? down_read+0x272/0x2e0
[  956.663285][   T35]  ? genl_rcv+0xd/0x40
[  956.664930][   T35]  genl_rcv+0x28/0x40
[  956.666658][   T35]  netlink_unicast+0x80f/0x9b0
[  956.668787][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  956.670801][   T35]  ? netlink_sendmsg+0x650/0xb40
[  956.672530][   T35]  ? skb_put+0x11b/0x210
[  956.673843][   T35]  netlink_sendmsg+0x813/0xb40
[  956.676282][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.678342][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  956.680102][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.682062][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.684117][   T35]  __sys_sendto+0x672/0x710
[  956.686023][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  956.688323][   T35]  ? exc_page_fault+0x6a/0xc0
[  956.690184][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  956.692217][   T35]  __x64_sys_sendto+0xde/0x100
[  956.694039][   T35]  do_syscall_64+0x14d/0xf80
[  956.696036][   T35]  ? trace_irq_disable+0x3b/0x150
[  956.698181][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.700477][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.702703][   T35] RIP: 0033:0x7f77d4d5cfce
[  956.704408][   T35] RSP: 002b:00007f77d5be8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  956.708733][   T35] RAX: ffffffffffffffda RBX: 00007f77d5bea6c0 RCX: 00007f77d4d5cfce
[  956.711032][   T35] RDX: 0000000000000028 RSI: 00007f77d5be9000 RDI: 0000000000000009
[  956.713384][   T35] RBP: 0000000000000000 R08: 00007f77d5be8f04 R09: 000000000000000c
[  956.716556][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[  956.718992][   T35] R13: 00007f77d5be8f58 R14: 00007f77d5be9000 R15: 0000000000000000
[  956.721113][   T35]  </TASK>
[  956.721989][   T35] INFO: task syz.0.21180:21882 blocked for more than 143 seconds.
[  956.724382][   T35]       Not tainted syzkaller #0
[  956.726003][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  956.728870][   T35] task:syz.0.21180     state:D stack:26336 pid:21882 tgid:21875 ppid:5865   task_flags:0x400140 flags:0x00080002
[  956.732370][   T35] Call Trace:
[  956.733419][   T35]  <TASK>
[  956.734379][   T35]  __schedule+0x15dd/0x52d0
[  956.736113][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.737623][   T35]  ? __pfx___schedule+0x10/0x10
[  956.739101][   T35]  ? schedule+0x90/0x360
[  956.740384][   T35]  schedule+0x164/0x360
[  956.741642][   T35]  schedule_preempt_disabled+0x13/0x30
[  956.743261][   T35]  __mutex_lock+0x7fe/0x1300
[  956.744762][   T35]  ? is_bpf_text_address+0x26/0x2b0
[  956.746944][   T35]  ? __mutex_lock+0x5ac/0x1300
[  956.748776][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  956.750560][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  956.752482][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.754355][   T35]  ? radix_tree_lookup+0x240/0x290
[  956.756124][   T35]  genl_rcv_msg+0x10b/0x7a0
[  956.758053][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.759974][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.761811][   T35]  netlink_rcv_skb+0x232/0x4b0
[  956.763616][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.765665][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.767824][   T35]  ? down_read+0x272/0x2e0
[  956.769212][   T35]  ? genl_rcv+0xd/0x40
[  956.770455][   T35]  genl_rcv+0x28/0x40
[  956.771660][   T35]  netlink_unicast+0x80f/0x9b0
[  956.773088][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  956.774741][   T35]  ? netlink_sendmsg+0x650/0xb40
[  956.776328][   T35]  ? skb_put+0x11b/0x210
[  956.777840][   T35]  netlink_sendmsg+0x813/0xb40
[  956.779299][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.780914][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  956.782410][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.784231][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.786169][   T35]  __sys_sendto+0x672/0x710
[  956.787897][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  956.789434][   T35]  ? fd_install+0x94/0x3d0
[  956.790787][   T35]  ? fd_install+0x306/0x3d0
[  956.792150][   T35]  __x64_sys_sendto+0xde/0x100
[  956.793588][   T35]  do_syscall_64+0x14d/0xf80
[  956.795148][   T35]  ? trace_irq_disable+0x3b/0x150
[  956.797132][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.799010][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.800799][   T35] RIP: 0033:0x7f77d4d5cfce
[  956.802089][   T35] RSP: 002b:00007f77d5bc7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  956.804622][   T35] RAX: ffffffffffffffda RBX: 00007f77d5bc96c0 RCX: 00007f77d4d5cfce
[  956.807403][   T35] RDX: 0000000000000020 RSI: 00007f77d5bc8000 RDI: 000000000000000b
[  956.809829][   T35] RBP: 0000000000000000 R08: 00007f77d5bc7f04 R09: 000000000000000c
[  956.812213][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  956.814727][   T35] R13: 00007f77d5bc7f58 R14: 00007f77d5bc8000 R15: 0000000000000000
[  956.817460][   T35]  </TASK>
[  956.818418][   T35] INFO: task syz.2.21182:21884 blocked for more than 143 seconds.
[  956.820749][   T35]       Not tainted syzkaller #0
[  956.822208][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  956.824891][   T35] task:syz.2.21182     state:D stack:28648 pid:21884 tgid:21883 ppid:5867   task_flags:0x400040 flags:0x00080002
[  956.829079][   T35] Call Trace:
[  956.830119][   T35]  <TASK>
[  956.831007][   T35]  __schedule+0x15dd/0x52d0
[  956.832393][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.833981][   T35]  ? __pfx___schedule+0x10/0x10
[  956.835614][   T35]  ? schedule+0x90/0x360
[  956.837324][   T35]  schedule+0x164/0x360
[  956.838597][   T35]  schedule_preempt_disabled+0x13/0x30
[  956.840225][   T35]  __mutex_lock+0x7fe/0x1300
[  956.841624][   T35]  ? is_bpf_text_address+0x26/0x2b0
[  956.843169][   T35]  ? __mutex_lock+0x5ac/0x1300
[  956.844718][   T35]  ? genl_rcv_msg+0x10b/0x7a0
[  956.846883][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  956.848423][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.849906][   T35]  ? radix_tree_lookup+0x240/0x290
[  956.851425][   T35]  genl_rcv_msg+0x10b/0x7a0
[  956.852760][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.854491][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  956.856533][   T35]  netlink_rcv_skb+0x232/0x4b0
[  956.858019][   T35]  ? __pfx_genl_rcv_msg+0x10/0x10
[  956.859709][   T35]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.861459][   T35]  ? down_read+0x272/0x2e0
[  956.863008][   T35]  ? genl_rcv+0xd/0x40
[  956.864332][   T35]  genl_rcv+0x28/0x40
[  956.865723][   T35]  netlink_unicast+0x80f/0x9b0
[  956.867415][   T35]  ? __pfx_netlink_unicast+0x10/0x10
[  956.869055][   T35]  ? netlink_sendmsg+0x650/0xb40
[  956.870624][   T35]  ? skb_put+0x11b/0x210
[  956.871856][   T35]  netlink_sendmsg+0x813/0xb40
[  956.873401][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.875096][   T35]  ? aa_sock_msg_perm+0xf1/0x1b0
[  956.876704][   T35]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.878521][   T35]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.880121][   T35]  __sys_sendto+0x672/0x710
[  956.881459][   T35]  ? __pfx___sys_sendto+0x10/0x10
[  956.882985][   T35]  ? exc_page_fault+0x6a/0xc0
[  956.884400][   T35]  ? do_user_addr_fault+0xc6f/0x1340
[  956.886244][   T35]  __x64_sys_sendto+0xde/0x100
[  956.887979][   T35]  do_syscall_64+0x14d/0xf80
[  956.889367][   T35]  ? trace_irq_disable+0x3b/0x150
[  956.890879][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.892726][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.894479][   T35] RIP: 0033:0x7fb77d55cfce
[  956.896270][   T35] RSP: 002b:00007fb77e48ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  956.899077][   T35] RAX: ffffffffffffffda RBX: 00007fb77e48e6c0 RCX: 00007fb77d55cfce
[  956.901458][   T35] RDX: 0000000000000020 RSI: 00007fb77e48d000 RDI: 0000000000000003
[  956.903826][   T35] RBP: 0000000000000000 R08: 00007fb77e48cf04 R09: 000000000000000c
[  956.906322][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  956.908831][   T35] R13: 00007fb77e48cf58 R14: 00007fb77e48d000 R15: 0000000000000000
[  956.911160][   T35]  </TASK>
[  956.912138][   T35] 
[  956.912138][   T35] Showing all locks held in the system:
[  956.914424][   T35] 1 lock held by khungtaskd/35:
[  956.916178][   T35]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  956.919149][   T35] 2 locks held by getty/5633:
[  956.920830][   T35]  #0: ffff888174a8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  956.923748][   T35]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  956.927824][   T35] 3 locks held by kworker/u8:2/5838:
[  956.929474][   T35]  #0: ffff88812103ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  956.932323][   T35]  #1: ffff888121024588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  956.934830][   T35]  #2: ffff888121026118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  956.937612][   T35] 1 lock held by udevd/13774:
[  956.939182][   T35]  #0: ffff88816b09e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  956.941805][   T35] 6 locks held by syz.1.21178/21865:
[  956.943364][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.946361][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.949052][   T35]  #2: ffff8881b8b2d278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  956.952621][   T35]  #3: ffff88816a054978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  956.956301][   T35]  #4: ffff88816a054318 (&q->q_usage_counter(io)#71){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  956.960707][   T35]  #5: ffff88816a054350 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  956.964253][   T35] 2 locks held by syz.0.21180/21876:
[  956.966019][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.968466][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.971037][   T35] 2 locks held by syz.0.21180/21882:
[  956.972600][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.975010][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.977847][   T35] 2 locks held by syz.2.21182/21884:
[  956.979649][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.982008][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.984420][   T35] 2 locks held by syz-executor/21897:
[  956.986112][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.988702][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.991425][   T35] 2 locks held by syz-executor/21898:
[  956.993147][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  956.995909][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  956.998881][   T35] 2 locks held by syz-executor/21904:
[  957.000674][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.002918][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.006215][   T35] 2 locks held by syz-executor/21936:
[  957.007883][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.010320][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.012944][   T35] 2 locks held by syz-executor/21946:
[  957.014617][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.017072][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.019970][   T35] 2 locks held by syz-executor/21947:
[  957.021591][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.024201][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.027209][   T35] 2 locks held by syz-executor/21963:
[  957.028802][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.031316][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.034209][   T35] 2 locks held by syz-executor/21973:
[  957.036089][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.038785][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.041463][   T35] 2 locks held by syz-executor/21975:
[  957.043049][   T35]  #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  957.045816][   T35]  #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  957.048931][   T35] 
[  957.049677][   T35] =============================================
[  957.049677][   T35] 
[  957.052111][   T35] NMI backtrace for cpu 1
[  957.052120][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  957.052129][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  957.052134][   T35] Call Trace:
[  957.052139][   T35]  <TASK>
[  957.052145][   T35]  dump_stack_lvl+0xe8/0x150
[  957.052160][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  957.052171][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  957.052183][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  957.052195][   T35]  sys_info+0x135/0x170
[  957.052203][   T35]  watchdog+0xfd9/0x1030
[  957.052218][   T35]  ? watchdog+0x21a/0x1030
[  957.052233][   T35]  kthread+0x388/0x470
[  957.052241][   T35]  ? __pfx_watchdog+0x10/0x10
[  957.052252][   T35]  ? __pfx_kthread+0x10/0x10
[  957.052260][   T35]  ret_from_fork+0x51e/0xb90
[  957.052273][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  957.052283][   T35]  ? __switch_to+0xc7d/0x1450
[  957.052294][   T35]  ? __pfx_kthread+0x10/0x10
[  957.052302][   T35]  ret_from_fork_asm+0x1a/0x30
[  957.052319][   T35]  </TASK>
[  957.052323][   T35] Sending NMI from CPU 1 to CPUs 0:
[  957.089203][    C0] NMI backtrace for cpu 0
[  957.089216][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  957.089225][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  957.089231][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  957.089248][    C0] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 a0 1b 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  957.089255][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000202
[  957.089263][    C0] RAX: 00000000004f5b97 RBX: ffffffff819a88ed RCX: 0000000080000001
[  957.089269][    C0] RDX: 0000000000000001 RSI: ffffffff8def3477 RDI: ffffffff8c27b280
[  957.089275][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[  957.089280][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff901196b0
[  957.089286][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  957.089291][    C0] FS:  0000000000000000(0000) GS:ffff88818de61000(0000) knlGS:0000000000000000
[  957.089297][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  957.089303][    C0] CR2: 00005619d2da3e38 CR3: 000000000e54c000 CR4: 00000000000006f0
[  957.089329][    C0] Call Trace:
[  957.089334][    C0]  <TASK>
[  957.089337][    C0]  default_idle+0x9/0x20
[  957.089346][    C0]  default_idle_call+0x72/0xb0
[  957.089356][    C0]  do_idle+0x1bd/0x500
[  957.089366][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  957.089377][    C0]  ? __pfx_do_idle+0x10/0x10
[  957.089388][    C0]  cpu_startup_entry+0x43/0x60
[  957.089398][    C0]  rest_init+0x2de/0x300
[  957.089407][    C0]  start_kernel+0x385/0x3d0
[  957.089416][    C0]  x86_64_start_reservations+0x24/0x30
[  957.089427][    C0]  x86_64_start_kernel+0x143/0x1c0
[  957.089437][    C0]  common_startup_64+0x13e/0x147
[  957.089451][    C0]  </TASK>
[  957.149837][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  957.151882][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  957.154552][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  957.157506][   T35] Call Trace:
[  957.158515][   T35]  <TASK>
[  957.159419][   T35]  vpanic+0x56c/0xa60
[  957.160628][   T35]  ? __pfx___schedule+0x10/0x10
[  957.162075][   T35]  ? __pfx_vpanic+0x10/0x10
[  957.163424][   T35]  ? __pfx_console_unlock+0x10/0x10
[  957.165195][   T35]  panic+0xc5/0xd0
[  957.166401][   T35]  ? __pfx_panic+0x10/0x10
[  957.167809][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  957.169457][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  957.171310][   T35]  watchdog+0x1023/0x1030
[  957.172623][   T35]  ? watchdog+0x21a/0x1030
[  957.173957][   T35]  kthread+0x388/0x470
[  957.175266][   T35]  ? __pfx_watchdog+0x10/0x10
[  957.176723][   T35]  ? __pfx_kthread+0x10/0x10
[  957.178114][   T35]  ret_from_fork+0x51e/0xb90
[  957.179513][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  957.181065][   T35]  ? __switch_to+0xc7d/0x1450
[  957.182495][   T35]  ? __pfx_kthread+0x10/0x10
[  957.183842][   T35]  ret_from_fork_asm+0x1a/0x30
[  957.185266][   T35]  </TASK>
[  957.186806][   T35] Kernel Offset: disabled
[  957.188108][   T35] Rebooting in 86400 seconds..
