last executing test programs:

11m51.606412213s ago: executing program 4 (id=519):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

11m47.641231534s ago: executing program 4 (id=536):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, 0x0, 0x0, 0x20004086)

11m47.49864158s ago: executing program 4 (id=537):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000002"], 0x2a)

11m46.577907098s ago: executing program 4 (id=541):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x191, 0x4)
connect$inet(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0)

11m46.035123098s ago: executing program 4 (id=545):
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

11m44.760482649s ago: executing program 4 (id=546):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0)

11m44.322960004s ago: executing program 1 (id=550):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r1, 0x5, 0x0, 0x1dffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4c040)

11m44.049287864s ago: executing program 1 (id=553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10)
sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x0, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x100000002dd6, 0x800, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x40000)

11m43.696577272s ago: executing program 1 (id=554):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_udp_encap(r5, 0x28, 0x64, 0x0, 0xff08)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
ioprio_get$pid(0x2, r1)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xe)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001440)=ANY=[@ANYBLOB="150138d7d79df59f081300"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
unlink(&(0x7f0000000180)='./bus\x00')
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
socket$netlink(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000780)=""/205, 0xcd}], 0x1, 0x4, 0x2)

11m42.49886342s ago: executing program 1 (id=556):
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0)

11m42.282561976s ago: executing program 1 (id=559):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

11m41.979693322s ago: executing program 1 (id=561):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x2, 0x9, 0x7, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x2, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x5, 0xb, 0x3, 0x2, 0x6, 0xd, 0x100], [0xfff1, 0xfffd, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x1, 0x2c, 0x40, 0x100, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

11m29.314117648s ago: executing program 32 (id=546):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0)

11m26.390750036s ago: executing program 33 (id=561):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x2, 0x9, 0x7, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x2, 0x4, 0x10, 0x4], 0x3, [0x8b, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x5, 0xb, 0x3, 0x2, 0x6, 0xd, 0x100], [0xfff1, 0xfffd, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x1, 0x2c, 0x40, 0x100, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close(r6)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.473106265s ago: executing program 6 (id=5176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="1feb010018000000000000400c00005d9f8df8d0a9118513c650d103d9d9d4000c0000000500000009e9ffffffffff07050000000000305f00"], &(0x7f00000004c0)=""/83, 0x29, 0x53, 0x0, 0xffffffff, 0x10000}, 0x28)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r0], 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x0, 0xf, 0x9})
pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40302)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f28, 0x5, 0x4, 0x47, 0x2, 0xcc7, 0x71, 0x0, 0x0, 0x3ff, 0x7f, 0x15fe, 0x4, 0x8, 0x4000003, 0xe1cf, 0xff7fffc4, 0x9, 0x20002, 0x3f, 0x80000089, 0xfffffffb, 0x7, 0x7ff, 0x0, 0x3, 0x1003c, 0x5, 0x6, 0x8000000, 0x1ff]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c8}, 0x501)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000826bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="7f027aec69dd2fb1319739dea4b0ae930c9a4bab83ad7360e2bebf1e20094216bf64cebcd51eff30e0231a79ad2b6441f719fa20d6c678d7e989df94f4f586c5014c4bd89fbd488ca4f3bd44abbf993d70602f5e3f37a34253552416c7a1b5a881e51f58717cd31b7204000000000000003919f7ef11e03b190058658a5e01b9c02d82addc671d6b10ad803dae5562ea2ba3454497eea73d9b789fabe7c0d291"], 0x38}, 0x1, 0x0, 0x0, 0x10004000}, 0x8)

3.238342953s ago: executing program 3 (id=5182):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x30)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x400300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

3.233984521s ago: executing program 6 (id=5183):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r1, 0x8, 0x12}}, 0x1c}}, 0x10)

2.957194255s ago: executing program 3 (id=5186):
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)

2.907027485s ago: executing program 6 (id=5188):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7, 0x0, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0xe900)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r9, 0x0, 0x2b)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.711568563s ago: executing program 3 (id=5189):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4000, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r5, &(0x7f00000002c0)="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", 0xfc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x32600)
pwritev(r3, 0x0, 0x0, 0x8001, 0x80)

2.300757176s ago: executing program 2 (id=5191):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000d80)}], 0x1}}], 0x1, 0x4048810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

2.292735658s ago: executing program 0 (id=5192):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008815}, 0x4880)

2.19378686s ago: executing program 2 (id=5193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000010000000000000000000100181100009e9e316feb92031769a934be871879b97a803de288deefeff285e0bae9d7cec49b8d40367336cb39a44c5a25a9c78330497519a72df6795cdc0ec5fe47383aa56f252563ee4961c553bf0a714a7b38d65710e7ccf4bdeda4424a841d30f100101bf30ededbc96494cbaa52e3ef27dc72bffb12376376029ab43d63b45f72c91cb90780499395387cd438d7d6c562d8b6697e83f3bef16895754f23fc31cca878769032db9feeb239154c64ccc05abfc1e2fda76f4b02569e53036e939a73bc6f11378820aee7c613722f9ca198d18c15b8e69600000000000000000000000000886d0982642acb146a277a3ecbb92bb7f39b68aecdde505d10b54db4b61cb33375906161db96eb822f06b537fc940974836470fad9937ddf272ad3159c7aa34dbef9f8b1b7c9873b9e77561bf8e89adc0c4e9dcdbcb44f9c3e5ffaaf", @ANYRESHEX=r0, @ANYBLOB="00db20cbe63f00000000000000b70800ff070000007b8af8ff00caffffffb703000008000000b7040000000000008500400082000009ff1000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(0x4)
pipe(0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='rxrpc_rx_icmp\x00'}, 0x18)
write(0xffffffffffffffff, &(0x7f0000000500)="cbb7537e0100288b957fe50064f1e611292a89df594317fd81132f53ef3b6a287175ba9edecbe0e220e7d1ce0ec845913ef61a8efb23bbb31b7ae2e3f9c22fcc1ea0c4caeca48aabf6e0212c2c1b8d84a471238b46414c1f0d1edc9ffefbe364957b6b06d3aad9ae49b552597ef36ff815efac32fdc9fb3bdf3d64faf9cc9af79ef879bfa0b354b3096b22ab8fd06e9ec8a4ce32627ff83371efd7002341281bffcefa8522b8", 0xa6)
write(r4, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x3, 0x3c)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2.150732391s ago: executing program 0 (id=5194):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab07000400"], 0xfe33)

2.127167592s ago: executing program 0 (id=5195):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4000, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
write(r4, &(0x7f00000002c0)="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", 0xfc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, 0x0, 0xff00)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

2.039103346s ago: executing program 2 (id=5196):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x30)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x400300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

1.980547793s ago: executing program 2 (id=5197):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000840)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000090601030000000000000000020000000900020073797a310000000005000100070800000c0007800800094000007f"], 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000eb2900008500000083000000bf090055090100000000009500000000000000b84ff696b475000000000000b702000001000000850000000591fdff000000b7000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=@newtaction={0x7a8, 0x30, 0xb15, 0x70bd2a, 0x25dfdbfb, {}, [{0x794, 0x1, [@m_ipt={0xfc, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x84, 0x6, {0x8, 'security\x00', 0x3, 0x7f, "7242651f364e108221d4835e4e5753efec57bb194a92f240407d18082ac8e42ee4a9f582c2e0f4ce96975efc0b2d6b3ff6eec232db8bf4fe2c1528a0529c81087b9157b91c6f9c0dbda8d064bc0460858cb4fea4d8f3747a2e44"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xc, 0x6, "06bab24f65ad2c5c"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ipt={0xa0, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x78, 0x6, "93146f7b9c0014aaff01aac5a748e9fe21929f9840e12b3ff757d6c3b97ebd2da40590a50d9b3cbe10319de2aac4b1634fca7667024489012b9983a271b5355037608aa39bd50c7c8aa02d61a1fd4e29327aa2c647372fed16fbc32bdad95e3ce62da3d3df0c22d6eae4e77732537d79905c9ca6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xb0, 0x4, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x5b, 0x6, "d54254ce005390dc2e1a43dffe59894215a5077f385bf84b6d2c593aa85187c82c47800c609ebbabbfbb96eb55c96810349b7990a2eb9f04885999c72c1d48ae541abc5a64a720d325861c08375340cb5920f0582c1c51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x170, 0x9, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd1, 0x6, {0x0, 'nat\x00', 0x30, 0x8000, "a88540687f9f0f9111c37217236ac0e20d9769ea7ca85396261613b74884755a2b2a58e4f8032f8db979bc439e9f65391d87b013f9d13cf60bd264c46f1d88eae548ce4f5b8bf1cc12d6477237a7f575b9f48f1645bd130bc407e0e7a7bfb535411a3698593cd10850cfab8f650e68e8f4dd5a6481432737c3015bfa84e6b94928fb802eb584eff8f5e3ea63689f2574b17643309b06ae28d1539533e9585b09d006d29ee1d6ef"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x46, 0x6, "90196dbaf13c028151d98051e9b2a94ae345e137ce3c59d8b9df5431a33275a081b120989c10fdc04b3ca43a0353835246ab0c2eb6307cdf7524d9a86b1401ecddd1"}, {0xc, 0x7, {0x1, 0xa5bd43b6d0083b46}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_TARG={0x76, 0x6, {0x1400, 'nat\x00', 0x0, 0xe1, "081ec290e8845a42f4f5f6e26bea900e9f571dc5fc10b11573a595744d859b3c7256ebc11de990acd16bfc2f72ab067275467e1c54b656de5984632f27e61079003bbfd9b24f35ad72f3f11e"}}]}, {0x1b, 0x6, "275958b9ace1fe16773c7f89885604851f3aebb4d05edd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x14c, 0xf, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x33, 0x6, {0x1, 'filter\x00', 0xe, 0x1, "bb022de797a739b264"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xb80, 'mangle\x00', 0x4, 0xa}}]}, {0xbb, 0x6, "4dcd0a30ef129a1c256550dc1d8aeedd7b43bcbba3fdbe0a4bf1e1d31db436d64376b0bc2d48027d97e37af5e890f99d18c488acd7ce7840e0b3cc24891b00b36c61f8fcec6dd0d2ba886b7f078979446f15d671f819448542ebba5a4b8f4e673518705d3e557393a3d5f0e3e037553bdc2092ecabc41f2f6f464c1a711042014423713979b4ff08c06b0b65bf864f446b3b720dc56770b5ab79f7fdc762ba5cc4869dff12656dd8c931b3be629f2b7fb7eb83730dec64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xaf, 0x6, "3e635022ec2cd80a7f98a11d6abf7ddeba7d2e7c5e3c00dfc7b71e476f885cace0cd98d4913c6deddce252e0a4b3ee20fc5012ebf8c67718289cc7258a5890271656feec94200a73a3212f4c736b24f8ece089320d37c14e048c6b75b1542e8ae3396b5bb8c6983680d20a7fbc4e4a4b43c747ee4d1317ccd77c5601c8fd69b508895301f7d949da118322469f6911494d1cb703161ecbaf8f5013544f5929b1382b80f59f8da1e9025f76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0xb8, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x90, 0x6, "0d1698b803289b5c866e355659d3c4db9b5d3faa914fefea39d4ca663fc9b0728a298e38a34ec8f2b180eebce7861cca552d200b87ca265a705be18069635beed8b79b09417a9fb7bcca0097d15841d9da4f232a3e733441b0b7804a36b1f8d04eb71ac370712a3299f7ee6e22c2add7e18c668667f13ef5bf171316bcc05b49d8f75b8051fb37c9aeb5c965"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x40054}, 0x48840)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)

1.946902245s ago: executing program 5 (id=5198):
pipe(&(0x7f0000000040))
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7f}, 0x18)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

1.75858847s ago: executing program 6 (id=5199):
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)

1.671478705s ago: executing program 6 (id=5200):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$alg(0x26, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/56, 0x38}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f0000000740)=""/83, 0x53}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000d00)=""/103, 0x67}, {0x0}, {&(0x7f0000000e00)=""/55, 0x37}], 0x4}}], 0x2, 0x41, 0x0)
recvmsg(r6, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0)=0x4, 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={<r8=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
write(r7, &(0x7f00000000c0), 0x0)
recvmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r9 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r1, 0x0)

1.670795194s ago: executing program 2 (id=5201):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="1feb010018000000000000400c00005d9f8df8d0a9118513c650d103d9d9d4000c0000000500000009e9ff"], &(0x7f00000004c0)=""/83, 0x29, 0x53, 0x0, 0xffffffff, 0x10000}, 0x28)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r0], 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xb, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x0, 0xf, 0x9})
pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40302)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f28, 0x5, 0x4, 0x47, 0x2, 0xcc7, 0x71, 0x0, 0x0, 0x3ff, 0x7f, 0x15fe, 0x4, 0x8, 0x4000003, 0xe1cf, 0xff7fffc4, 0x9, 0x20002, 0x3f, 0x80000089, 0xfffffffb, 0x7, 0x7ff, 0x0, 0x3, 0x1003c, 0x5, 0x6, 0x8000000, 0x1ff]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c8}, 0x501)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000826bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="7f027aec69dd2fb1319739dea4b0ae930c9a4bab83ad7360e2bebf1e20094216bf64cebcd51eff30e0231a79ad2b6441f719fa20d6c678d7e989df94f4f586c5014c4bd89fbd488ca4f3bd44abbf993d70602f5e3f37a34253552416c7a1b5a881e51f58717cd31b7204000000000000003919f7ef11e03b190058658a5e01b9c02d82addc671d6b10ad803dae5562ea2ba3454497eea73d9b789fabe7c0d291"], 0x38}, 0x1, 0x0, 0x0, 0x10004000}, 0x8)

1.670533985s ago: executing program 3 (id=5202):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x110, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x110}}, 0x0)

1.670120572s ago: executing program 5 (id=5203):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000d80)="6442740e247b17bd4d19bd1c3479aa6b61", 0x11}], 0x1}}], 0x1, 0x4048810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)

1.56948799s ago: executing program 3 (id=5204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x300, 0x0, 0x148, 0x300, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x2e0, 0xff00, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@hashlimit2={{0x150}, {'wg0\x00', {0x273baa19, 0xe488, 0x0, 0x6, 0x9, 0x4, 0x2, 0x78, 0x20}, {0x7fffffffffffffff}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x1, 0x6}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xdce, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x62, 0xffff, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8040, 0x700, 0x8, 0x6}})
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newchain={0x68, 0x64, 0x800, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xf, 0x6}, {0x6, 0x15}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @multicast}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x1}, @TCA_FLOWER_KEY_IP_PROTO={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c)

1.418832412s ago: executing program 5 (id=5205):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33)

432.706832ms ago: executing program 5 (id=5206):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x20008815}, 0x4880)

419.240031ms ago: executing program 0 (id=5207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="00db20cbe63f00000000000000b70800ff070000007b8af8ff00caffffffb703000008000000b7040000000000008500400082000009ff1000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(0x4)
pipe(0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='rxrpc_rx_icmp\x00'}, 0x18)
write(0xffffffffffffffff, &(0x7f0000000500)="cbb7537e0100288b957fe50064f1e611292a89df594317fd81132f53ef3b6a287175ba9edecbe0e220e7d1ce0ec845913ef61a8efb23bbb31b7ae2e3f9c22fcc1ea0c4caeca48aabf6e0212c2c1b8d84a471238b46414c1f0d1edc9ffefbe364957b6b06d3aad9ae49b552597ef36ff815efac32fdc9fb3bdf3d64faf9cc9af79ef879bfa0b354b3096b22ab8fd06e9ec8a4ce32627ff83371efd7002341281bffcefa8522b8e40e5368cb69142a97edfe2160b9413257f46e800b5eb3aa57620d94", 0xc2)
write(r4, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x3, 0x3c)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

398.51536ms ago: executing program 2 (id=5208):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
socket(0x400000000010, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000007c0), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, 0x0, 0x0, 0x9200000000000000)
recvmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0)

198.799152ms ago: executing program 3 (id=5209):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7, 0x0, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0xe900)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r9, 0x0, 0x2b)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000000)=0x80000001, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

162.230699ms ago: executing program 5 (id=5210):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x30)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x400300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)

132.546211ms ago: executing program 6 (id=5211):
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38)

93.370922ms ago: executing program 5 (id=5212):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
recvmmsg(r2, &(0x7f0000001580)=[{{&(0x7f0000000440)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000680)=""/195, 0xc3}], 0x4, &(0x7f0000000780)=""/125, 0x7d}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/238, 0xee}, 0x9e8}], 0x2, 0x42, &(0x7f0000001440)={0x0, 0x3938700})

71.139124ms ago: executing program 0 (id=5213):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8)
sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000840)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000090601030000000000000000020000000900020073797a310000000005000100070800000c0007800800094000007f"], 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000eb2900008500000083000000bf090055090100000000009500000000000000b84ff696b475000000000000b702000001000000850000000591fdff000000b7000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000b80)=@newtaction={0x7b4, 0x30, 0xb15, 0x70bd2a, 0x25dfdbfb, {}, [{0x7a0, 0x1, [@m_ipt={0xfc, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x84, 0x6, {0x8, 'security\x00', 0x3, 0x7f, "7242651f364e108221d4835e4e5753efec57bb194a92f240407d18082ac8e42ee4a9f582c2e0f4ce96975efc0b2d6b3ff6eec232db8bf4fe2c1528a0529c81087b9157b91c6f9c0dbda8d064bc0460858cb4fea4d8f3747a2e44"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xc, 0x6, "06bab24f65ad2c5c"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ipt={0xa0, 0x9, 0x0, 0x0, {{0x8}, {0x4}, {0x78, 0x6, "93146f7b9c0014aaff01aac5a748e9fe21929f9840e12b3ff757d6c3b97ebd2da40590a50d9b3cbe10319de2aac4b1634fca7667024489012b9983a271b5355037608aa39bd50c7c8aa02d61a1fd4e29327aa2c647372fed16fbc32bdad95e3ce62da3d3df0c22d6eae4e77732537d79905c9ca6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xb0, 0x4, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x5b, 0x6, "d54254ce005390dc2e1a43dffe59894215a5077f385bf84b6d2c593aa85187c82c47800c609ebbabbfbb96eb55c96810349b7990a2eb9f04885999c72c1d48ae541abc5a64a720d325861c08375340cb5920f0582c1c51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x170, 0x9, 0x0, 0x0, {{0x8}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd1, 0x6, {0x0, 'nat\x00', 0x30, 0x8000, "a88540687f9f0f9111c37217236ac0e20d9769ea7ca85396261613b74884755a2b2a58e4f8032f8db979bc439e9f65391d87b013f9d13cf60bd264c46f1d88eae548ce4f5b8bf1cc12d6477237a7f575b9f48f1645bd130bc407e0e7a7bfb535411a3698593cd10850cfab8f650e68e8f4dd5a6481432737c3015bfa84e6b94928fb802eb584eff8f5e3ea63689f2574b17643309b06ae28d1539533e9585b09d006d29ee1d6ef"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x46, 0x6, "90196dbaf13c028151d98051e9b2a94ae345e137ce3c59d8b9df5431a33275a081b120989c10fdc04b3ca43a0353835246ab0c2eb6307cdf7524d9a86b1401ecddd1"}, {0xc, 0x7, {0x1, 0xa5bd43b6d0083b46}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0xcc, 0x9, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_TARG={0x76, 0x6, {0x1400, 'nat\x00', 0x0, 0xe1, "081ec290e8845a42f4f5f6e26bea900e9f571dc5fc10b11573a595744d859b3c7256ebc11de990acd16bfc2f72ab067275467e1c54b656de5984632f27e61079003bbfd9b24f35ad72f3f11e"}}]}, {0x1b, 0x6, "275958b9ace1fe16773c7f89885604851f3aebb4d05edd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x14c, 0xf, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x33, 0x6, {0x1, 'filter\x00', 0xe, 0x1, "bb022de797a739b264"}}, @TCA_IPT_TARG={0x2a, 0x6, {0xb80, 'mangle\x00', 0x4, 0xa}}]}, {0xbb, 0x6, "4dcd0a30ef129a1c256550dc1d8aeedd7b43bcbba3fdbe0a4bf1e1d31db436d64376b0bc2d48027d97e37af5e890f99d18c488acd7ce7840e0b3cc24891b00b36c61f8fcec6dd0d2ba886b7f078979446f15d671f819448542ebba5a4b8f4e673518705d3e557393a3d5f0e3e037553bdc2092ecabc41f2f6f464c1a711042014423713979b4ff08c06b0b65bf864f446b3b720dc56770b5ab79f7fdc762ba5cc4869dff12656dd8c931b3be629f2b7fb7eb83730dec64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ipt={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xaf, 0x6, "3e635022ec2cd80a7f98a11d6abf7ddeba7d2e7c5e3c00dfc7b71e476f885cace0cd98d4913c6deddce252e0a4b3ee20fc5012ebf8c67718289cc7258a5890271656feec94200a73a3212f4c736b24f8ece089320d37c14e048c6b75b1542e8ae3396b5bb8c6983680d20a7fbc4e4a4b43c747ee4d1317ccd77c5601c8fd69b508895301f7d949da118322469f6911494d1cb703161ecbaf8f5013544f5929b1382b80f59f8da1e9025f76"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0xc4, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x9a, 0x6, "0d1698b803289b5c866e355659d3c4db9b5d3faa914fefea39d4ca663fc9b0728a298e38a34ec8f2b180eebce7861cca552d200b87ca265a705be18069635beed8b79b09417a9fb7bcca0097d15841d9da4f232a3e733441b0b7804a36b1f8d04eb71ac370712a3299f7ee6e22c2add7e18c668667f13ef5bf171316bcc05b49d8f75b8051fb37c9aeb5c96573a07ea2141154a330dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x40054}, 0x48840)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)

0s ago: executing program 0 (id=5214):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r2, 0x0, 0x0)
sendmsg$rds(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

275325][T16033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  762.299230][T16039] syzkaller0: entered promiscuous mode
[  762.299258][T16039] syzkaller0: entered allmulticast mode
[  762.315155][T16035] syzkaller0: entered promiscuous mode
[  762.315181][T16035] syzkaller0: entered allmulticast mode
[  762.320416][T16025] tipc: Resetting bearer <eth:syzkaller0>
[  762.383264][T16024] tipc: Resetting bearer <eth:syzkaller0>
[  762.513999][T16024] tipc: Disabling bearer <eth:syzkaller0>
[  763.174291][T16018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.258663][T16064] dvmrp0: entered allmulticast mode
[  763.441777][T16075] netlink: 'syz.6.3003': attribute type 1 has an invalid length.
[  763.592317][T16018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.896717][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3006'.
[  763.896754][T16085] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3006'.
[  764.094952][T16018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.703025][   T74] block nbd0: Possible stuck request ffff888028070000: control (read@0,1024B). Runtime 60 seconds
[  764.703070][   T74] block nbd0: Possible stuck request ffff8880280701c0: control (read@1024,1024B). Runtime 60 seconds
[  764.703098][   T74] block nbd0: Possible stuck request ffff888028070380: control (read@2048,1024B). Runtime 60 seconds
[  764.703125][   T74] block nbd0: Possible stuck request ffff888028070540: control (read@3072,1024B). Runtime 60 seconds
[  765.090412][  T161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  765.138870][  T161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  765.263987][  T161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  765.322336][  T161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.490078][T16109] netlink: 'syz.0.3015': attribute type 1 has an invalid length.
[  765.683533][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3018'.
[  765.683567][T16115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3018'.
[  765.776796][T16121] openvswitch: netlink: Flow actions attr not present in new flow.
[  766.346220][T16131] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3021'.
[  767.108690][T16141] netlink: 'syz.5.3027': attribute type 12 has an invalid length.
[  767.387241][T16145] netlink: 'syz.2.3028': attribute type 1 has an invalid length.
[  767.934868][T16152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  767.956834][T16152] tipc: Resetting bearer <eth:syzkaller0>
[  768.328585][T16151] tipc: Disabling bearer <eth:syzkaller0>
[  768.543118][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 120 seconds
[  768.543162][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 120 seconds
[  768.543189][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 120 seconds
[  768.543215][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 120 seconds
[  769.475535][T16173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  769.581332][T16173] tipc: Resetting bearer <eth:syzkaller0>
[  769.796946][T16172] tipc: Disabling bearer <eth:syzkaller0>
[  769.823089][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 90 seconds
[  769.823136][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 90 seconds
[  769.823164][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 90 seconds
[  769.823190][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 90 seconds
[  769.823228][   T74] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 90 seconds
[  769.823260][   T74] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 90 seconds
[  769.920675][T16070] Set syz1 is full, maxelem 65536 reached
[  770.115467][T16203] netlink: 'syz.3.3045': attribute type 4 has an invalid length.
[  770.144544][T16200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  770.145379][T16200] syzkaller0: entered promiscuous mode
[  770.145394][T16200] syzkaller0: entered allmulticast mode
[  770.203444][T16199] tipc: Resetting bearer <eth:syzkaller0>
[  770.337343][T16199] tipc: Disabling bearer <eth:syzkaller0>
[  770.743897][T16209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  770.746196][T16212] syzkaller0: entered promiscuous mode
[  770.746223][T16212] syzkaller0: entered allmulticast mode
[  770.762852][T16209] tipc: Resetting bearer <eth:syzkaller0>
[  770.803436][T16208] tipc: Resetting bearer <eth:syzkaller0>
[  770.965454][T16208] tipc: Disabling bearer <eth:syzkaller0>
[  771.059041][T16227] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3057'.
[  771.103161][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 120 seconds
[  771.103206][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 120 seconds
[  771.103234][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 120 seconds
[  771.103262][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 120 seconds
[  771.144768][T16228] netlink: 'syz.5.3056': attribute type 12 has an invalid length.
[  771.171653][T16228] netlink: 'syz.5.3056': attribute type 4 has an invalid length.
[  771.383800][T16238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  771.385086][T16238] syzkaller0: entered promiscuous mode
[  771.385110][T16238] syzkaller0: entered allmulticast mode
[  771.395662][T16238] tipc: Resetting bearer <eth:syzkaller0>
[  771.434258][T16233] tipc: Resetting bearer <eth:syzkaller0>
[  771.570058][T16233] tipc: Disabling bearer <eth:syzkaller0>
[  771.850386][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3067'.
[  771.884340][T16251] vlan2: entered promiscuous mode
[  771.884362][T16251] bridge0: entered promiscuous mode
[  771.955164][T16254] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3068'.
[  771.957432][T16254] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3068'.
[  772.064822][T16258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  772.066102][T16258] syzkaller0: entered promiscuous mode
[  772.066128][T16258] syzkaller0: entered allmulticast mode
[  772.094800][T16258] tipc: Resetting bearer <eth:syzkaller0>
[  772.147413][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3074'.
[  772.162278][T16257] tipc: Resetting bearer <eth:syzkaller0>
[  772.274418][T16257] tipc: Disabling bearer <eth:syzkaller0>
[  772.586900][T16276] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3078'.
[  772.951049][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'.
[  773.415250][T16320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3093'.
[  773.777319][T16332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  773.806130][T16332] tipc: Resetting bearer <eth:syzkaller0>
[  774.104921][T16330] tipc: Disabling bearer <eth:syzkaller0>
[  774.351339][T16358] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3105'.
[  774.837987][T16375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.838956][T16375] syzkaller0: entered promiscuous mode
[  774.838979][T16375] syzkaller0: entered allmulticast mode
[  775.021963][T16384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3117'.
[  775.041468][T16386] netlink: 'syz.3.3116': attribute type 1 has an invalid length.
[  775.123723][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.183498][T16374] tipc: Resetting bearer <eth:syzkaller0>
[  775.416250][T16374] tipc: Disabling bearer <eth:syzkaller0>
[  775.606440][T16390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  775.607334][T16396] syzkaller0: entered promiscuous mode
[  775.607368][T16396] syzkaller0: entered allmulticast mode
[  775.662165][T16407] tipc: Resetting bearer <eth:syzkaller0>
[  775.706451][T16387] tipc: Resetting bearer <eth:syzkaller0>
[  775.780458][T16412] libceph: resolve '0.' (ret=-3): failed
[  775.854983][T16387] tipc: Disabling bearer <eth:syzkaller0>
[  776.546442][T16441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  776.547390][T16441] syzkaller0: entered promiscuous mode
[  776.547413][T16441] syzkaller0: entered allmulticast mode
[  776.710611][T16452] __nla_validate_parse: 1 callbacks suppressed
[  776.710631][T16452] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3138'.
[  776.755564][T16450] netlink: 'syz.5.3137': attribute type 12 has an invalid length.
[  776.759084][T16450] netlink: 'syz.5.3137': attribute type 4 has an invalid length.
[  776.803262][T16440] tipc: Resetting bearer <eth:syzkaller0>
[  776.990291][T16440] tipc: Disabling bearer <eth:syzkaller0>
[  777.306226][T16470] netlink: 'syz.6.3143': attribute type 1 has an invalid length.
[  777.555256][T16477] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3146'.
[  777.659405][T16479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  777.660562][T16479] syzkaller0: entered promiscuous mode
[  777.660585][T16479] syzkaller0: entered allmulticast mode
[  777.698563][T16478] tipc: Resetting bearer <eth:syzkaller0>
[  777.812655][T16478] tipc: Disabling bearer <eth:syzkaller0>
[  777.855717][T16486] netlink: 'syz.3.3148': attribute type 4 has an invalid length.
[  778.163521][T16484] netlink: 'syz.3.3148': attribute type 12 has an invalid length.
[  778.361371][T16489] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3150'.
[  778.649648][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3155'.
[  778.683658][T16496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  778.684913][T16496] syzkaller0: entered promiscuous mode
[  778.684938][T16496] syzkaller0: entered allmulticast mode
[  778.711981][T16496] tipc: Resetting bearer <eth:syzkaller0>
[  778.824854][T16495] tipc: Resetting bearer <eth:syzkaller0>
[  778.825335][T16501] netlink: 'syz.3.3156': attribute type 1 has an invalid length.
[  779.081802][T16495] tipc: Disabling bearer <eth:syzkaller0>
[  779.270619][T16510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  779.273876][T16508] syzkaller0: entered promiscuous mode
[  779.273900][T16508] syzkaller0: entered allmulticast mode
[  779.280361][T16508] tipc: Resetting bearer <eth:syzkaller0>
[  779.329853][T16507] tipc: Resetting bearer <eth:syzkaller0>
[  779.456178][T16507] tipc: Disabling bearer <eth:syzkaller0>
[  780.363491][ T5813] tipc: Node number set to 2134283171
[  780.515005][T16524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  780.517576][T16527] syzkaller0: entered promiscuous mode
[  780.517602][T16527] syzkaller0: entered allmulticast mode
[  780.553830][T16513] tipc: Resetting bearer <eth:syzkaller0>
[  780.634576][T16545] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3169'.
[  780.686518][T16513] tipc: Disabling bearer <eth:syzkaller0>
[  781.111992][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3175'.
[  781.353853][   T74] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 150 seconds
[  781.353898][   T74] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 150 seconds
[  781.353927][   T74] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 150 seconds
[  781.353953][   T74] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 150 seconds
[  781.560686][T16575] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3180'.
[  781.605352][T16555] netlink: 'syz.6.3174': attribute type 1 has an invalid length.
[  781.605375][T16555] netlink: 'syz.6.3174': attribute type 4 has an invalid length.
[  781.605387][T16555] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3174'.
[  781.756374][T16580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  781.759709][T16580] syzkaller0: entered promiscuous mode
[  781.759735][T16580] syzkaller0: entered allmulticast mode
[  781.803922][T16579] tipc: Resetting bearer <eth:syzkaller0>
[  781.867985][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3187'.
[  781.966434][T16579] tipc: Disabling bearer <eth:syzkaller0>
[  782.154612][T16584] vlan2: entered promiscuous mode
[  782.515209][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'.
[  782.515230][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'.
[  782.516016][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'.
[  782.516034][T16607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'.
[  782.763283][T16618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  782.818545][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3203'.
[  783.102572][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3209'.
[  783.598161][T16654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  783.600517][T16654] syzkaller0: entered promiscuous mode
[  783.600543][T16654] syzkaller0: entered allmulticast mode
[  783.649202][T16653] tipc: Resetting bearer <eth:syzkaller0>
[  783.825896][T16653] tipc: Disabling bearer <eth:syzkaller0>
[  784.034186][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3224'.
[  784.208439][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3229'.
[  784.208475][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3229'.
[  784.423066][T16689] netlink: 'syz.5.3231': attribute type 12 has an invalid length.
[  784.433936][T16689] netlink: 'syz.5.3231': attribute type 4 has an invalid length.
[  784.573094][   T74] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 150 seconds
[  784.573138][   T74] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 150 seconds
[  784.573165][   T74] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 150 seconds
[  784.573192][   T74] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 150 seconds
[  785.178242][T16717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.179243][T16717] syzkaller0: entered promiscuous mode
[  785.179265][T16717] syzkaller0: entered allmulticast mode
[  785.187230][T16717] tipc: Resetting bearer <eth:syzkaller0>
[  785.234929][T16716] tipc: Resetting bearer <eth:syzkaller0>
[  785.238942][T16719] openvswitch: netlink: Flow actions attr not present in new flow.
[  785.384555][T16716] tipc: Disabling bearer <eth:syzkaller0>
[  786.276950][T16752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  786.288431][T16759] netlink: 'syz.2.3254': attribute type 12 has an invalid length.
[  786.297652][T16759] netlink: 'syz.2.3254': attribute type 4 has an invalid length.
[  787.007781][ T5817] Bluetooth: hci3: link tx timeout
[  787.008285][ T5817] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  787.287978][T16791] __nla_validate_parse: 7 callbacks suppressed
[  787.287998][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  787.288027][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  787.288746][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  787.288767][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3271'.
[  787.900709][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'.
[  788.187884][T16787] netlink: 'syz.2.3269': attribute type 1 has an invalid length.
[  788.188001][T16787] netlink: 'syz.2.3269': attribute type 4 has an invalid length.
[  788.188015][T16787] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3269'.
[  788.422357][T16821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  789.308181][ T5814] Bluetooth: hci3: command 0x0406 tx timeout
[  789.824659][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  789.824689][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  789.825420][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  789.825442][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'.
[  790.210197][T16801] vti0: entered promiscuous mode
[  790.732241][T16856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  790.742640][T16856] syzkaller0: entered promiscuous mode
[  790.742665][T16856] syzkaller0: entered allmulticast mode
[  790.893484][T16855] tipc: Resetting bearer <eth:syzkaller0>
[  791.089891][T16848] netlink: 'syz.3.3289': attribute type 1 has an invalid length.
[  791.089913][T16848] netlink: 'syz.3.3289': attribute type 4 has an invalid length.
[  791.123352][T16855] tipc: Disabling bearer <eth:syzkaller0>
[  791.298814][T16871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.307552][T16870] syzkaller0: entered promiscuous mode
[  791.307575][T16870] syzkaller0: entered allmulticast mode
[  791.324397][T16870] tipc: Resetting bearer <eth:syzkaller0>
[  791.362287][T16869] tipc: Resetting bearer <eth:syzkaller0>
[  791.561455][T16869] tipc: Disabling bearer <eth:syzkaller0>
[  791.983114][T16901] netlink: 'syz.0.3307': attribute type 4 has an invalid length.
[  792.331177][T16907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.332321][T16907] syzkaller0: entered promiscuous mode
[  792.332343][T16907] syzkaller0: entered allmulticast mode
[  792.557688][T16906] tipc: Resetting bearer <eth:syzkaller0>
[  792.624743][T16905] netlink: 'syz.5.3309': attribute type 1 has an invalid length.
[  792.624759][T16905] netlink: 'syz.5.3309': attribute type 4 has an invalid length.
[  792.624766][T16905] __nla_validate_parse: 4 callbacks suppressed
[  792.624771][T16905] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3309'.
[  792.625349][T16905] netlink: 'syz.5.3309': attribute type 1 has an invalid length.
[  792.625359][T16905] netlink: 'syz.5.3309': attribute type 4 has an invalid length.
[  792.625366][T16905] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3309'.
[  792.838538][T16906] tipc: Disabling bearer <eth:syzkaller0>
[  792.974431][T16919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3314'.
[  793.108303][T16921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3315'.
[  793.535866][T16946] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3326'.
[  793.608525][T16948] netlink: 'syz.2.3323': attribute type 4 has an invalid length.
[  794.787476][   T74] block nbd0: Possible stuck request ffff888028070000: control (read@0,1024B). Runtime 90 seconds
[  794.787520][   T74] block nbd0: Possible stuck request ffff8880280701c0: control (read@1024,1024B). Runtime 90 seconds
[  794.787547][   T74] block nbd0: Possible stuck request ffff888028070380: control (read@2048,1024B). Runtime 90 seconds
[  794.787573][   T74] block nbd0: Possible stuck request ffff888028070540: control (read@3072,1024B). Runtime 90 seconds
[  794.995945][T16951] netlink: 'syz.3.3325': attribute type 1 has an invalid length.
[  794.995968][T16951] netlink: 'syz.3.3325': attribute type 4 has an invalid length.
[  794.995980][T16951] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3325'.
[  795.231713][T16983] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3340'.
[  795.677190][T16985] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3342'.
[  795.677949][T16985] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3342'.
[  796.597859][T17009] validate_nla: 5 callbacks suppressed
[  796.597879][T17009] netlink: 'syz.5.3351': attribute type 1 has an invalid length.
[  796.597892][T17009] netlink: 'syz.5.3351': attribute type 4 has an invalid length.
[  796.597905][T17009] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3351'.
[  797.110662][T17023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.156424][T17018] tipc: Disabling bearer <eth:syzkaller0>
[  797.378184][T17038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  797.499528][T17053] Bluetooth: MGMT ver 1.23
[  797.601185][T17040] netlink: 'syz.6.3362': attribute type 1 has an invalid length.
[  797.601207][T17040] netlink: 'syz.6.3362': attribute type 4 has an invalid length.
[  797.602097][T17040] netlink: 'syz.6.3362': attribute type 1 has an invalid length.
[  797.602123][T17040] netlink: 'syz.6.3362': attribute type 4 has an invalid length.
[  797.749055][T17061] openvswitch: netlink: Flow actions attr not present in new flow.
[  798.228876][T17083] __nla_validate_parse: 4 callbacks suppressed
[  798.228896][T17083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3377'.
[  798.636953][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 150 seconds
[  798.636998][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 150 seconds
[  798.637228][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 150 seconds
[  798.637256][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 150 seconds
[  799.100440][T17106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3387'.
[  799.299037][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3389'.
[  799.344021][T17118] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3388'.
[  799.345124][T17116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3389'.
[  799.788012][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3402'.
[  799.788049][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3402'.
[  799.893558][T17147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  799.898119][T17139] syzkaller0: entered promiscuous mode
[  799.898146][T17139] syzkaller0: entered allmulticast mode
[  799.903054][   T74] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 120 seconds
[  799.903088][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 120 seconds
[  799.903095][   T74] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 120 seconds
[  799.903123][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 120 seconds
[  799.903149][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 120 seconds
[  799.903176][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 120 seconds
[  800.077678][T17147] tipc: Resetting bearer <eth:syzkaller0>
[  800.130231][T17138] tipc: Resetting bearer <eth:syzkaller0>
[  800.315072][T17138] tipc: Disabling bearer <eth:syzkaller0>
[  800.461795][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3408'.
[  801.193159][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 150 seconds
[  801.193189][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 150 seconds
[  801.193204][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 150 seconds
[  801.193218][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 150 seconds
[  801.724923][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  801.741896][T17204] libceph: resolve '0.' (ret=-3): failed
[  802.210019][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3428'.
[  802.532044][ T5167] udevd[5167]: worker [14278] /devices/virtual/block/nbd0 is taking a long time
[  802.677241][T17240] libceph: resolve '0.' (ret=-3): failed
[  803.317480][T17260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  803.345284][T17260] syzkaller0: entered promiscuous mode
[  803.345312][T17260] syzkaller0: entered allmulticast mode
[  803.373287][T17259] tipc: Resetting bearer <eth:syzkaller0>
[  803.526232][T17259] tipc: Disabling bearer <eth:syzkaller0>
[  803.725131][T17276] libceph: resolve '0.' (ret=-3): failed
[  805.055956][T17340] __nla_validate_parse: 5 callbacks suppressed
[  805.055975][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3477'.
[  805.321454][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3483'.
[  805.321492][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3483'.
[  805.776219][T17365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  805.777201][T17365] syzkaller0: entered promiscuous mode
[  805.777223][T17365] syzkaller0: entered allmulticast mode
[  805.964625][T17364] tipc: Resetting bearer <eth:syzkaller0>
[  806.032991][T17357] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  806.033014][T17357] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3487'.
[  806.248312][T17364] tipc: Disabling bearer <eth:syzkaller0>
[  806.620187][T17410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  806.621272][T17410] syzkaller0: entered promiscuous mode
[  806.621296][T17410] syzkaller0: entered allmulticast mode
[  806.632363][T17410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3509'.
[  806.643516][T17410] tipc: Resetting bearer <eth:syzkaller0>
[  806.683638][T17409] tipc: Resetting bearer <eth:syzkaller0>
[  806.844051][T17409] tipc: Disabling bearer <eth:syzkaller0>
[  807.022771][T17421] nbd: nbd3 already in use
[  807.027562][T17421] block nbd3: NBD_DISCONNECT
[  807.038719][T17421] block nbd3: Send disconnect failed -32
[  807.038746][T17421] block nbd3: shutting down sockets
[  807.376059][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'.
[  807.530429][T17437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  807.531515][T17437] syzkaller0: entered promiscuous mode
[  807.531537][T17437] syzkaller0: entered allmulticast mode
[  807.600644][T17441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.720819][T17445] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3521'.
[  807.723603][T17436] tipc: Resetting bearer <eth:syzkaller0>
[  807.796021][T17424] netlink: 'syz.2.3514': attribute type 1 has an invalid length.
[  807.796045][T17424] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3514'.
[  807.896671][T17436] tipc: Disabling bearer <eth:syzkaller0>
[  808.163354][T17455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  808.164904][T17455] syzkaller0: entered promiscuous mode
[  808.164928][T17455] syzkaller0: entered allmulticast mode
[  808.171951][T17455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3526'.
[  808.214459][T17455] tipc: Resetting bearer <eth:syzkaller0>
[  808.255080][T17453] tipc: Resetting bearer <eth:syzkaller0>
[  808.393954][T17453] tipc: Disabling bearer <eth:syzkaller0>
[  808.582356][T17458] 8021q: adding VLAN 0 to HW filter on device bond1
[  808.636448][T17464] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  808.829985][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  809.349935][T17496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  809.596455][T17497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  809.621076][T17491] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3537'.
[  809.626023][T17506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  809.629625][T17506] syzkaller0: entered promiscuous mode
[  809.629650][T17506] syzkaller0: entered allmulticast mode
[  809.642056][T17506] tipc: Resetting bearer <eth:syzkaller0>
[  809.681233][T17505] tipc: Resetting bearer <eth:syzkaller0>
[  809.793931][T17505] tipc: Disabling bearer <eth:syzkaller0>
[  809.978084][T17499] syzkaller0: entered promiscuous mode
[  809.978111][T17499] syzkaller0: entered allmulticast mode
[  809.981018][T17518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  809.982093][T17520] syzkaller0: entered promiscuous mode
[  809.982116][T17520] syzkaller0: entered allmulticast mode
[  810.093176][T17490] tipc: Resetting bearer <eth:syzkaller0>
[  810.226341][T17490] tipc: Disabling bearer <eth:syzkaller0>
[  810.345332][T17515] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3542'.
[  810.349467][T17518] tipc: Resetting bearer <eth:syzkaller0>
[  810.414715][T17510] tipc: Resetting bearer <eth:syzkaller0>
[  810.535902][T17510] tipc: Disabling bearer <eth:syzkaller0>
[  811.054563][T17557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3557'.
[  811.054602][T17557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3557'.
[  811.163713][T17559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3559'.
[  811.163739][T17559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3559'.
[  811.163756][T17559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3559'.
[  811.164114][T17559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3559'.
[  811.216009][T17563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3560'.
[  811.423054][   T74] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 180 seconds
[  811.423100][   T74] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 180 seconds
[  811.423128][   T74] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 180 seconds
[  811.423156][   T74] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 180 seconds
[  811.946571][T17594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'.
[  812.795817][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3583'.
[  812.894745][T17632] syzkaller0: entered promiscuous mode
[  812.894772][T17632] syzkaller0: entered allmulticast mode
[  812.962080][T17615] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  812.962835][T17615] netlink: 'syz.0.3581': attribute type 1 has an invalid length.
[  814.315112][T17692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  814.316093][T17692] syzkaller0: entered promiscuous mode
[  814.316114][T17692] syzkaller0: entered allmulticast mode
[  814.351976][T17692] tipc: Resetting bearer <eth:syzkaller0>
[  814.384394][T17691] tipc: Resetting bearer <eth:syzkaller0>
[  814.544233][T17691] tipc: Disabling bearer <eth:syzkaller0>
[  814.623242][   T74] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 180 seconds
[  814.623287][   T74] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 180 seconds
[  814.623315][   T74] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 180 seconds
[  814.623342][   T74] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 180 seconds
[  816.084066][T17723] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  816.357248][T17763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  816.516864][T17770] __nla_validate_parse: 5 callbacks suppressed
[  816.516885][T17770] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3642'.
[  816.679492][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3644'.
[  816.679530][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'.
[  816.758564][T17780] netlink: 'syz.0.3646': attribute type 1 has an invalid length.
[  816.813988][T17780] 8021q: adding VLAN 0 to HW filter on device bond2
[  817.104484][T17795] block nbd0: NBD_DISCONNECT
[  817.104685][T17795] block nbd0: Send disconnect failed -32
[  817.104710][T17795] block nbd0: shutting down sockets
[  817.146568][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.146603][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  817.146815][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.146840][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  817.146905][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.146927][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  817.147242][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.147278][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  817.161011][T14278] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161147][T14278] Buffer I/O error on dev nbd0, logical block 0, async page read
[  817.161316][T14278] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161336][T14278] Buffer I/O error on dev nbd0, logical block 1, async page read
[  817.161474][T14278] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161494][T14278] Buffer I/O error on dev nbd0, logical block 2, async page read
[  817.161631][T14278] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161651][T14278] Buffer I/O error on dev nbd0, logical block 3, async page read
[  817.161821][T14278] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161842][T14278] Buffer I/O error on dev nbd0, logical block 0, async page read
[  817.161976][T14278] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  817.161997][T14278] Buffer I/O error on dev nbd0, logical block 1, async page read
[  817.185313][T14278] ldm_validate_partition_table(): Disk read failed.
[  817.192091][T14278] Dev nbd0: unable to read RDB block 0
[  817.204480][T14278]  nbd0: unable to read partition table
[  817.244621][T14278] ldm_validate_partition_table(): Disk read failed.
[  817.252661][T14278] Dev nbd0: unable to read RDB block 0
[  817.271145][T14278]  nbd0: unable to read partition table
[  817.814533][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3662'.
[  817.815038][T17820] IPv6: Can't replace route, no match found
[  819.326641][T17873] syzkaller0: entered promiscuous mode
[  819.326668][T17873] syzkaller0: entered allmulticast mode
[  820.383402][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3693'.
[  820.896276][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'.
[  820.896304][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3698'.
[  820.896321][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'.
[  820.896491][T17909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3698'.
[  821.666745][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'.
[  822.935665][ T5167] udevd[5167]: worker [13373] /devices/virtual/block/nbd10 timeout; kill it
[  822.935777][ T5167] udevd[5167]: seq 17707 '/devices/virtual/block/nbd10' killed
[  822.935823][ T5167] udevd[5167]: worker [13156] /devices/virtual/block/nbd9 timeout; kill it
[  822.935898][ T5167] udevd[5167]: seq 17653 '/devices/virtual/block/nbd9' killed
[  823.007712][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3724'.
[  823.007746][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3724'.
[  823.402578][T17982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  823.403857][T17982] syzkaller0: entered promiscuous mode
[  823.403890][T17982] syzkaller0: entered allmulticast mode
[  823.504055][T17982] tipc: Resetting bearer <eth:syzkaller0>
[  823.576860][T17981] tipc: Resetting bearer <eth:syzkaller0>
[  823.591183][T17995] block nbd6: NBD_DISCONNECT
[  823.591208][T17995] block nbd6: Send disconnect failed -32
[  823.765026][T17981] tipc: Disabling bearer <eth:syzkaller0>
[  823.923177][T17999] netlink: 'syz.2.3734': attribute type 25 has an invalid length.
[  823.923790][T17999] netlink: 'syz.2.3734': attribute type 7 has an invalid length.
[  824.018748][T18013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3740'.
[  824.018783][T18013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3740'.
[  824.536114][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3748'.
[  825.059974][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3755'.
[  826.247688][T18074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3761'.
[  826.249138][T18074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3761'.
[  826.268440][ T5817] Bluetooth: hci0: command 0x0406 tx timeout
[  826.434615][T18080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3762'.
[  826.618515][T18089] netlink: 'syz.5.3769': attribute type 1 has an invalid length.
[  826.621923][T18089] netlink: 'syz.5.3769': attribute type 1 has an invalid length.
[  826.798890][T18098] __nla_validate_parse: 4 callbacks suppressed
[  826.798911][T18098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3772'.
[  826.799655][T18098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3772'.
[  826.921185][T18103] netlink: 'syz.0.3773': attribute type 1 has an invalid length.
[  826.921207][T18103] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3773'.
[  827.124640][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3777'.
[  827.277723][T18122] netlink: 'syz.0.3782': attribute type 1 has an invalid length.
[  827.277746][T18122] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3782'.
[  827.278725][T18122] netlink: 'syz.0.3782': attribute type 1 has an invalid length.
[  827.278741][T18122] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3782'.
[  827.447469][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3785'.
[  827.541755][T18133] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  827.541776][T18133] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3787'.
[  827.609939][T18131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.612440][T18131] syzkaller0: entered promiscuous mode
[  827.612464][T18131] syzkaller0: entered allmulticast mode
[  827.663834][T18130] tipc: Resetting bearer <eth:syzkaller0>
[  827.784923][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'.
[  827.827453][T18130] tipc: Disabling bearer <eth:syzkaller0>
[  827.908139][T18154] netlink: 'syz.3.3794': attribute type 1 has an invalid length.
[  827.908161][T18154] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3794'.
[  827.909068][T18154] netlink: 'syz.3.3794': attribute type 1 has an invalid length.
[  828.304440][T18170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.305383][T18170] syzkaller0: entered promiscuous mode
[  828.305405][T18170] syzkaller0: entered allmulticast mode
[  828.310390][T18170] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  828.369574][T18170] tipc: Resetting bearer <eth:syzkaller0>
[  828.396617][T18166] tipc: Resetting bearer <eth:syzkaller0>
[  828.544610][T18166] tipc: Disabling bearer <eth:syzkaller0>
[  828.703170][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 180 seconds
[  828.703224][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 180 seconds
[  828.703250][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 180 seconds
[  828.703276][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 180 seconds
[  828.767084][T18189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.881962][T18190] syzkaller0: entered promiscuous mode
[  828.881981][T18190] syzkaller0: entered allmulticast mode
[  828.933280][T18183] tipc: Resetting bearer <eth:syzkaller0>
[  829.059389][T18183] tipc: Disabling bearer <eth:syzkaller0>
[  829.232652][T18198] syzkaller0: entered promiscuous mode
[  829.232682][T18198] syzkaller0: entered allmulticast mode
[  829.720870][T18232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  829.733150][ T5167] udevd[5167]: worker [13346] /devices/virtual/block/nbd12 timeout; kill it
[  829.733255][ T5167] udevd[5167]: seq 17821 '/devices/virtual/block/nbd12' killed
[  829.750581][T18232] syzkaller0: entered promiscuous mode
[  829.750610][T18232] syzkaller0: entered allmulticast mode
[  829.923276][T18231] tipc: Resetting bearer <eth:syzkaller0>
[  829.983070][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 150 seconds
[  829.983175][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 150 seconds
[  829.983205][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 150 seconds
[  829.983232][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 150 seconds
[  829.994314][   T74] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 150 seconds
[  829.994356][   T74] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 150 seconds
[  830.205062][T18231] tipc: Disabling bearer <eth:syzkaller0>
[  830.536310][T18274] openvswitch: netlink: Flow actions attr not present in new flow.
[  831.263291][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 180 seconds
[  831.263336][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 180 seconds
[  831.263361][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 180 seconds
[  831.263386][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 180 seconds
[  831.291938][T18316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  831.821382][T18332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  831.822356][T18332] syzkaller0: entered promiscuous mode
[  831.822379][T18332] syzkaller0: entered allmulticast mode
[  831.984054][T18332] tipc: Resetting bearer <eth:syzkaller0>
[  831.984721][T18332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.984839][T18332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.988708][T18343] openvswitch: netlink: Flow actions attr not present in new flow.
[  832.044553][T18331] tipc: Resetting bearer <eth:syzkaller0>
[  832.337557][T18331] tipc: Disabling bearer <eth:syzkaller0>
[  832.737927][ T5167] udevd[5167]: worker [13755] /devices/virtual/block/nbd13 timeout; kill it
[  832.738033][ T5167] udevd[5167]: seq 17829 '/devices/virtual/block/nbd13' killed
[  832.828389][T18368] __nla_validate_parse: 13 callbacks suppressed
[  832.828410][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3872'.
[  832.828437][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3872'.
[  832.933804][T18372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  833.068471][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3875'.
[  833.216757][T18387] validate_nla: 2 callbacks suppressed
[  833.216788][T18387] netlink: 'syz.3.3879': attribute type 1 has an invalid length.
[  833.216802][T18387] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3879'.
[  833.217925][T18387] netlink: 'syz.3.3879': attribute type 1 has an invalid length.
[  833.217941][T18387] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3879'.
[  833.571990][T18398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.574102][T18398] syzkaller0: entered promiscuous mode
[  833.574126][T18398] syzkaller0: entered allmulticast mode
[  833.579808][T18398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3883'.
[  833.624677][T18397] tipc: Resetting bearer <eth:syzkaller0>
[  833.683560][T18402] openvswitch: netlink: Flow actions attr not present in new flow.
[  833.811880][T18397] tipc: Disabling bearer <eth:syzkaller0>
[  834.143309][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'.
[  834.143344][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3888'.
[  834.361765][T18416] netlink: 'syz.3.3890': attribute type 1 has an invalid length.
[  834.361786][T18416] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3890'.
[  834.368023][T18416] netlink: 'syz.3.3890': attribute type 1 has an invalid length.
[  834.368044][T18416] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3890'.
[  834.668784][T18420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.669802][T18420] syzkaller0: entered promiscuous mode
[  834.669826][T18420] syzkaller0: entered allmulticast mode
[  834.690152][T18420] sch_tbf: peakrate 786 is lower than or equals to rate 19658 !
[  834.718415][T18420] tipc: Resetting bearer <eth:syzkaller0>
[  834.753298][T18419] tipc: Resetting bearer <eth:syzkaller0>
[  834.886228][T18419] tipc: Disabling bearer <eth:syzkaller0>
[  835.281690][T18441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.289855][T18441] syzkaller0: entered promiscuous mode
[  835.289882][T18441] syzkaller0: entered allmulticast mode
[  835.334556][T18440] tipc: Resetting bearer <eth:syzkaller0>
[  835.456192][T18440] tipc: Disabling bearer <eth:syzkaller0>
[  835.624576][T18446] veth0: entered promiscuous mode
[  835.683674][T18444] veth0: left promiscuous mode
[  836.292220][T18491] syzkaller0: entered promiscuous mode
[  836.292244][T18491] syzkaller0: entered allmulticast mode
[  837.417347][T18524] netlink: 'syz.6.3924': attribute type 1 has an invalid length.
[  837.418323][T18524] netlink: 'syz.6.3924': attribute type 1 has an invalid length.
[  837.443914][T18514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  837.502632][T18508] tipc: Resetting bearer <eth:syzkaller0>
[  837.507389][T18518] syzkaller0: entered promiscuous mode
[  837.507414][T18518] syzkaller0: entered allmulticast mode
[  837.533194][T18505] tipc: Resetting bearer <eth:syzkaller0>
[  837.663736][T18505] tipc: Disabling bearer <eth:syzkaller0>
[  838.151386][T18549] __nla_validate_parse: 15 callbacks suppressed
[  838.151406][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3933'.
[  838.151433][T18549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3933'.
[  838.589102][T18556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.590031][T18556] syzkaller0: entered promiscuous mode
[  838.590055][T18556] syzkaller0: entered allmulticast mode
[  838.617445][T18558] netlink: 'syz.5.3937': attribute type 1 has an invalid length.
[  838.617468][T18558] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3937'.
[  838.618620][T18558] netlink: 'syz.5.3937': attribute type 1 has an invalid length.
[  838.618638][T18558] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.3937'.
[  838.681077][T18556] tipc: Resetting bearer <eth:syzkaller0>
[  838.687546][T18560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.724233][T18555] tipc: Resetting bearer <eth:syzkaller0>
[  838.874177][T18555] tipc: Disabling bearer <eth:syzkaller0>
[  839.003716][T18560] syzkaller0: entered promiscuous mode
[  839.003736][T18560] syzkaller0: entered allmulticast mode
[  839.037574][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3943'.
[  839.105378][T18566] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3938'.
[  839.113707][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'.
[  839.113731][T18568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3942'.
[  839.113747][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'.
[  839.113997][T18568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3942'.
[  839.186912][T18559] tipc: Resetting bearer <eth:syzkaller0>
[  839.374710][T18559] tipc: Disabling bearer <eth:syzkaller0>
[  839.664319][T18592] netlink: 'syz.5.3949': attribute type 1 has an invalid length.
[  839.665877][T18592] netlink: 'syz.5.3949': attribute type 1 has an invalid length.
[  839.905304][T18602] netlink: 'syz.2.3954': attribute type 1 has an invalid length.
[  840.069974][T18604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.070957][T18604] syzkaller0: entered promiscuous mode
[  840.070980][T18604] syzkaller0: entered allmulticast mode
[  840.128149][T18604] tipc: Resetting bearer <eth:syzkaller0>
[  840.155268][T18603] tipc: Resetting bearer <eth:syzkaller0>
[  840.300234][T18603] tipc: Disabling bearer <eth:syzkaller0>
[  840.611016][T18621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  840.868472][T18620] tipc: Disabling bearer <eth:syzkaller0>
[  841.507140][   T74] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 210 seconds
[  841.507186][   T74] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 210 seconds
[  841.507215][   T74] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 210 seconds
[  841.507243][   T74] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 210 seconds
[  841.631669][ T5814] Bluetooth: hci2: command 0x0406 tx timeout
[  842.450570][T18664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  843.051936][T18714] netlink: 'syz.3.3998': attribute type 1 has an invalid length.
[  843.281794][T18724] __nla_validate_parse: 32 callbacks suppressed
[  843.281813][T18724] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4002'.
[  843.314548][T18727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4004'.
[  843.610678][T18740] netlink: 'syz.2.4010': attribute type 1 has an invalid length.
[  843.610701][T18740] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.4010'.
[  843.897214][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4015'.
[  844.140297][T18765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4018'.
[  844.562252][T18779] netlink: 'syz.0.4023': attribute type 1 has an invalid length.
[  844.562324][T18779] netlink: 16134 bytes leftover after parsing attributes in process `syz.0.4023'.
[  844.713057][T18647] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 210 seconds
[  844.713102][T18647] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 210 seconds
[  844.713131][T18647] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 210 seconds
[  844.713158][T18647] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 210 seconds
[  845.003619][T18784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4025'.
[  845.189583][T18791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'.
[  845.440758][T18801] netlink: 'syz.3.4034': attribute type 1 has an invalid length.
[  845.440779][T18801] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.4034'.
[  845.469994][T18803] netlink: 'syz.6.4033': attribute type 1 has an invalid length.
[  845.470019][T18803] netlink: 16134 bytes leftover after parsing attributes in process `syz.6.4033'.
[  845.473614][T18803] netlink: 'syz.6.4033': attribute type 1 has an invalid length.
[  845.936622][T18833] netlink: 'syz.5.4048': attribute type 1 has an invalid length.
[  846.004764][T18837] netlink: 'syz.2.4049': attribute type 1 has an invalid length.
[  846.005852][T18837] netlink: 'syz.2.4049': attribute type 1 has an invalid length.
[  846.260043][T18851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.261029][T18851] syzkaller0: entered promiscuous mode
[  846.261052][T18851] syzkaller0: entered allmulticast mode
[  846.310578][T18855] openvswitch: netlink: Flow actions attr not present in new flow.
[  846.396275][T18857] tipc: Resetting bearer <eth:syzkaller0>
[  846.433354][T18850] tipc: Resetting bearer <eth:syzkaller0>
[  846.586890][T18850] tipc: Disabling bearer <eth:syzkaller0>
[  846.625317][T18862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  847.517787][T18896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  847.521546][T18893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  847.522537][T18893] syzkaller0: entered promiscuous mode
[  847.522560][T18893] syzkaller0: entered allmulticast mode
[  847.694993][T18900] tipc: Resetting bearer <eth:syzkaller0>
[  847.710119][T18903] openvswitch: netlink: Flow actions attr not present in new flow.
[  847.743531][T18892] tipc: Resetting bearer <eth:syzkaller0>
[  847.933661][T18892] tipc: Disabling bearer <eth:syzkaller0>
[  848.479643][T18925] __nla_validate_parse: 15 callbacks suppressed
[  848.479663][T18925] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4081'.
[  848.850978][T18944] netlink: 'syz.6.4089': attribute type 5 has an invalid length.
[  848.851000][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4089'.
[  848.983873][T18938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  848.984380][T18942] syzkaller0: entered promiscuous mode
[  848.984396][T18942] syzkaller0: entered allmulticast mode
[  848.985911][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4088'.
[  848.985936][T18941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4088'.
[  848.985951][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4088'.
[  848.986106][T18941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4088'.
[  849.230485][T18953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4093'.
[  849.291809][T18955] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4094'.
[  849.396590][T18946] tipc: Resetting bearer <eth:syzkaller0>
[  849.475467][T18962] openvswitch: netlink: Flow actions attr not present in new flow.
[  849.492772][T18934] tipc: Resetting bearer <eth:syzkaller0>
[  849.775678][T18934] tipc: Disabling bearer <eth:syzkaller0>
[  849.936881][T18978] netlink: 'syz.6.4101': attribute type 5 has an invalid length.
[  849.936898][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4101'.
[  850.072550][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4103'.
[  850.144017][T18987] netlink: 'syz.3.4104': attribute type 1 has an invalid length.
[  850.144038][T18987] netlink: 'syz.3.4104': attribute type 4 has an invalid length.
[  850.154645][T18985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  850.166521][T18985] tipc: Resetting bearer <eth:syzkaller0>
[  850.418663][T18984] tipc: Disabling bearer <eth:syzkaller0>
[  850.762433][T19003] netlink: 'syz.0.4113': attribute type 5 has an invalid length.
[  850.851528][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  850.873976][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  850.875424][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  850.886204][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  850.890705][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  851.105570][T19009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  851.106576][T19009] syzkaller0: entered promiscuous mode
[  851.106599][T19009] syzkaller0: entered allmulticast mode
[  851.279009][T19017] netlink: 'syz.3.4118': attribute type 1 has an invalid length.
[  851.279033][T19017] netlink: 'syz.3.4118': attribute type 4 has an invalid length.
[  851.280075][T19017] netlink: 'syz.3.4118': attribute type 1 has an invalid length.
[  851.280100][T19017] netlink: 'syz.3.4118': attribute type 4 has an invalid length.
[  851.369574][T19021] openvswitch: netlink: Flow actions attr not present in new flow.
[  851.575510][T19012] tipc: Resetting bearer <eth:syzkaller0>
[  851.673267][T19008] tipc: Resetting bearer <eth:syzkaller0>
[  851.843766][T19008] tipc: Disabling bearer <eth:syzkaller0>
[  852.287100][T19004] chnl_net:caif_netlink_parms(): no params data found
[  852.665214][T19004] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.665416][T19004] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.665657][T19004] bridge_slave_0: entered allmulticast mode
[  852.668890][T19004] bridge_slave_0: entered promiscuous mode
[  852.706225][T19004] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.706442][T19004] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.706691][T19004] bridge_slave_1: entered allmulticast mode
[  852.709672][T19004] bridge_slave_1: entered promiscuous mode
[  852.939150][T19004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.970192][T19004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.993739][ T5817] Bluetooth: hci1: command tx timeout
[  853.150421][T19074] openvswitch: netlink: Flow actions attr not present in new flow.
[  853.348223][T19004] team0: Port device team_slave_0 added
[  853.358915][T19004] team0: Port device team_slave_1 added
[  853.506025][T19086] netlink: 'syz.3.4142': attribute type 1 has an invalid length.
[  853.506040][T19086] netlink: 'syz.3.4142': attribute type 4 has an invalid length.
[  853.506046][T19086] __nla_validate_parse: 10 callbacks suppressed
[  853.506052][T19086] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4142'.
[  853.589719][T19004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  853.589736][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.589760][T19004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.592270][T19004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.592284][T19004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  853.592309][T19004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  853.835805][T19092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  853.940692][T19004] hsr_slave_0: entered promiscuous mode
[  853.941735][T19004] hsr_slave_1: entered promiscuous mode
[  853.942580][T19004] debugfs: 'hsr0' already exists in 'hsr'
[  853.942597][T19004] Cannot create hsr debugfs directory
[  853.950501][T19092] tipc: Resetting bearer <eth:syzkaller0>
[  854.123948][T19091] tipc: Disabling bearer <eth:syzkaller0>
[  854.244279][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4149'.
[  854.244306][T19104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4149'.
[  854.244323][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4149'.
[  854.251363][T19104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4149'.
[  854.451752][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4153'.
[  854.649624][T19120] 8021q: adding VLAN 0 to HW filter on device bond2
[  854.926451][T19130] openvswitch: netlink: Flow actions attr not present in new flow.
[  855.070200][ T5817] Bluetooth: hci1: command tx timeout
[  855.422010][T19004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.456477][T19145] validate_nla: 3 callbacks suppressed
[  855.456489][T19145] netlink: 'syz.0.4160': attribute type 4 has an invalid length.
[  855.530158][T19141] netlink: 'syz.0.4160': attribute type 12 has an invalid length.
[  855.530457][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4161'.
[  855.530477][T19143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4161'.
[  855.530493][T19143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4161'.
[  855.530723][T19143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4161'.
[  855.832705][T19004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.162350][T19004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.443955][T19004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.750454][T19175] netlink: 'syz.5.4173': attribute type 1 has an invalid length.
[  856.811983][T19175] 8021q: adding VLAN 0 to HW filter on device bond3
[  856.908142][T19182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.910891][T19178] syzkaller0: entered promiscuous mode
[  856.910914][T19178] syzkaller0: entered allmulticast mode
[  857.063639][T19182] tipc: Resetting bearer <eth:syzkaller0>
[  857.133440][T19176] tipc: Resetting bearer <eth:syzkaller0>
[  857.143223][ T5817] Bluetooth: hci1: command tx timeout
[  857.323893][T19176] tipc: Disabling bearer <eth:syzkaller0>
[  857.456029][T19185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.457634][T19189] syzkaller0: entered promiscuous mode
[  857.457662][T19189] syzkaller0: entered allmulticast mode
[  857.628642][T19198] tipc: Resetting bearer <eth:syzkaller0>
[  857.743318][T19184] tipc: Resetting bearer <eth:syzkaller0>
[  857.864690][T19184] tipc: Disabling bearer <eth:syzkaller0>
[  857.989738][T19004] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  858.079799][T19004] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  858.112815][T19004] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  858.166619][T19004] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  858.453615][T19004] 8021q: adding VLAN 0 to HW filter on device bond0
[  858.497044][T19004] 8021q: adding VLAN 0 to HW filter on device team0
[  858.539292][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.539437][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  858.602586][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.602750][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.783210][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 210 seconds
[  858.783255][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 210 seconds
[  858.783283][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 210 seconds
[  858.783446][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 210 seconds
[  858.849629][T19240] netlink: 'syz.5.4192': attribute type 1 has an invalid length.
[  858.932474][T19240] 8021q: adding VLAN 0 to HW filter on device bond4
[  859.200275][T19252] __nla_validate_parse: 5 callbacks suppressed
[  859.200294][T19252] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4196'.
[  859.233464][ T5817] Bluetooth: hci1: command tx timeout
[  859.369539][T19262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4198'.
[  859.413836][T19261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4199'.
[  859.413871][T19261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4199'.
[  859.799337][T19004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  860.063094][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 180 seconds
[  860.063139][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 180 seconds
[  860.063165][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 180 seconds
[  860.063191][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 180 seconds
[  860.083224][T18647] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 180 seconds
[  860.083268][T18647] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 180 seconds
[  860.334042][T19295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4211'.
[  860.389806][T19299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4210'.
[  860.453963][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4212'.
[  860.454000][T19301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4212'.
[  860.701522][T19004] veth0_vlan: entered promiscuous mode
[  860.867660][T19004] veth1_vlan: entered promiscuous mode
[  860.919501][T19322] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  861.013156][ T5167] udevd[5167]: worker [13466] /devices/virtual/block/nbd14 timeout; kill it
[  861.013289][ T5167] udevd[5167]: seq 18078 '/devices/virtual/block/nbd14' killed
[  861.013330][ T5167] udevd[5167]: worker [13465] /devices/virtual/block/nbd15 timeout; kill it
[  861.013430][ T5167] udevd[5167]: seq 18089 '/devices/virtual/block/nbd15' killed
[  861.047436][T19004] veth0_macvtap: entered promiscuous mode
[  861.078487][T19004] veth1_macvtap: entered promiscuous mode
[  861.108690][T19004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  861.172356][T19004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  861.209534][ T1180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  861.222369][ T1180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  861.222413][ T1180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  861.222446][ T1180] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  861.343049][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 210 seconds
[  861.343094][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 210 seconds
[  861.343121][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 210 seconds
[  861.343147][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 210 seconds
[  861.689492][T19346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4226'.
[  861.692290][ T6514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  861.692311][ T6514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  862.042663][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  862.042683][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  862.408222][T19366] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  862.952979][T19381] netlink: 'syz.3.4234': attribute type 12 has an invalid length.
[  862.954830][T19381] netlink: 'syz.3.4234': attribute type 4 has an invalid length.
[  863.892374][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  863.914774][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  863.916098][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  863.917368][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  863.918185][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  864.074166][T19405] netlink: 'syz.0.4246': attribute type 1 has an invalid length.
[  864.411514][T19405] 8021q: adding VLAN 0 to HW filter on device bond3
[  864.472715][T19412] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  864.637672][T19428] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4251'.
[  864.663288][T19428] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4251'.
[  864.757815][T19433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4254'.
[  864.948522][T19440] netlink: 'syz.0.4253': attribute type 4 has an invalid length.
[  865.044909][T19436] netlink: 'syz.0.4253': attribute type 12 has an invalid length.
[  865.045117][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'.
[  865.045137][T19438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4255'.
[  865.045154][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'.
[  865.454394][T19452] netlink: 'syz.6.4259': attribute type 1 has an invalid length.
[  865.533984][T19454] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4260'.
[  865.547154][T19399] chnl_net:caif_netlink_parms(): no params data found
[  865.702292][T19458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4262'.
[  865.779769][T19460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  865.810782][T19465] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4264'.
[  866.023815][ T5814] Bluetooth: hci4: command tx timeout
[  866.226244][T19473] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  866.399296][T19399] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.399416][T19399] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.399725][T19399] bridge_slave_0: entered allmulticast mode
[  866.402518][T19399] bridge_slave_0: entered promiscuous mode
[  866.452861][T19399] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.458341][T19399] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.458631][T19399] bridge_slave_1: entered allmulticast mode
[  866.461515][T19399] bridge_slave_1: entered promiscuous mode
[  866.642366][T19493] netlink: 'syz.0.4270': attribute type 1 has an invalid length.
[  866.723613][T19493] 8021q: adding VLAN 0 to HW filter on device bond4
[  866.830223][T19399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  866.848668][T19399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  866.914877][T19504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4274'.
[  867.021153][T19512] netlink: 'syz.3.4272': attribute type 4 has an invalid length.
[  867.068838][T19505] netlink: 'syz.3.4272': attribute type 12 has an invalid length.
[  867.168140][T19515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  867.356641][T19399] team0: Port device team_slave_0 added
[  867.409617][T19399] team0: Port device team_slave_1 added
[  867.615886][T19399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.615911][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.616088][T19399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.658143][T19399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.658160][T19399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.658184][T19399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.094985][T19530] netlink: 'syz.6.4282': attribute type 1 has an invalid length.
[  868.110937][ T5814] Bluetooth: hci4: command tx timeout
[  868.157170][T19399] hsr_slave_0: entered promiscuous mode
[  868.159078][T19399] hsr_slave_1: entered promiscuous mode
[  868.160308][T19399] debugfs: 'hsr0' already exists in 'hsr'
[  868.160332][T19399] Cannot create hsr debugfs directory
[  868.202585][T19531] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  870.075126][T19605] __nla_validate_parse: 1 callbacks suppressed
[  870.075147][T19605] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4304'.
[  870.094044][T19399] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.193126][ T5814] Bluetooth: hci4: command tx timeout
[  870.281030][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  870.379478][T19620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  870.514311][T19399] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.577498][T19625] netlink: 'syz.3.4309': attribute type 4 has an invalid length.
[  870.603143][T19622] netlink: 'syz.3.4309': attribute type 12 has an invalid length.
[  870.603648][T19618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4310'.
[  870.830073][T19399] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.912016][T19627] netlink: 'syz.2.4311': attribute type 1 has an invalid length.
[  870.972376][T19627] 8021q: adding VLAN 0 to HW filter on device bond1
[  871.198761][T19399] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  871.275570][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4316'.
[  871.275607][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4316'.
[  871.291012][T19636] syzkaller0: entered promiscuous mode
[  871.291039][T19636] syzkaller0: entered allmulticast mode
[  871.503972][T19634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4313'.
[  871.639476][T18647] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 240 seconds
[  871.639519][T18647] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 240 seconds
[  871.639545][T18647] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 240 seconds
[  871.639567][T18647] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 240 seconds
[  872.161160][T19658] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4321'.
[  872.161307][T19659] netlink: 'syz.2.4322': attribute type 1 has an invalid length.
[  872.213458][T19663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4322'.
[  872.262490][T19659] 8021q: adding VLAN 0 to HW filter on device bond2
[  872.271933][ T5814] Bluetooth: hci4: command tx timeout
[  872.375075][T19399] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  872.394857][T19669] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.4325'.
[  872.406022][T19669] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.4325'.
[  872.446095][T19670] netlink: 'syz.6.4324': attribute type 12 has an invalid length.
[  872.450257][T19399] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  872.549889][T19399] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  872.555525][T19670] netlink: 'syz.6.4324': attribute type 4 has an invalid length.
[  872.662750][T19399] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  872.935062][T19399] 8021q: adding VLAN 0 to HW filter on device bond0
[  872.972429][T19399] 8021q: adding VLAN 0 to HW filter on device team0
[  873.001074][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.001214][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  873.048192][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.048304][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  873.488260][T19698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4333'.
[  873.604352][T19701] netlink: 'syz.2.4334': attribute type 1 has an invalid length.
[  873.711336][T19701] 8021q: adding VLAN 0 to HW filter on device bond3
[  873.846443][T19399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  874.438728][T19399] veth0_vlan: entered promiscuous mode
[  874.467229][T19399] veth1_vlan: entered promiscuous mode
[  874.564409][T19742] netlink: 'syz.3.4351': attribute type 1 has an invalid length.
[  874.672724][T19742] 8021q: adding VLAN 0 to HW filter on device bond2
[  874.689321][T19399] veth0_macvtap: entered promiscuous mode
[  874.717092][T19399] veth1_macvtap: entered promiscuous mode
[  874.783285][T18647] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 240 seconds
[  874.783327][T18647] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 240 seconds
[  874.783353][T18647] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 240 seconds
[  874.783375][T18647] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 240 seconds
[  874.852066][T19399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.920620][T19399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  874.951466][ T5945] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  874.951514][ T5945] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  874.951547][ T5945] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  874.951662][ T5945] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.548021][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.548038][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  875.619378][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  875.619398][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.439170][T19808] netlink: 'syz.2.4374': attribute type 12 has an invalid length.
[  876.442606][T19808] netlink: 'syz.2.4374': attribute type 4 has an invalid length.
[  878.237278][T19848] syzkaller0: entered promiscuous mode
[  878.237304][T19848] syzkaller0: entered allmulticast mode
[  878.443198][T19851] __nla_validate_parse: 4 callbacks suppressed
[  878.443218][T19851] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4391'.
[  879.753225][T19889] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4404'.
[  880.154848][T19903] netlink: 'syz.6.4411': attribute type 12 has an invalid length.
[  880.156656][T19903] netlink: 'syz.6.4411': attribute type 4 has an invalid length.
[  880.779747][T19921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4417'.
[  880.933731][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4418'.
[  880.933766][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4418'.
[  881.231497][T19930] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4421'.
[  881.845952][T19952] syzkaller0: entered promiscuous mode
[  881.845980][T19952] syzkaller0: entered allmulticast mode
[  882.180185][T19966] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4434'.
[  882.557460][T19978] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4440'.
[  882.926457][T19996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.578527][T20026] netlink: 'syz.3.4459': attribute type 12 has an invalid length.
[  883.581253][T20026] netlink: 'syz.3.4459': attribute type 4 has an invalid length.
[  884.858655][T20064] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4475'.
[  884.919748][T20067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4476'.
[  884.919781][T20067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4476'.
[  885.190073][T20072] netlink: 'syz.0.4478': attribute type 12 has an invalid length.
[  885.191845][T20072] netlink: 'syz.0.4478': attribute type 4 has an invalid length.
[  885.737448][T20082] syzkaller0: entered promiscuous mode
[  885.737473][T20082] syzkaller0: entered allmulticast mode
[  885.740505][T20084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  886.385031][T20105] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4492'.
[  886.467757][T20111] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.4495'.
[  887.208433][T20132] syzkaller0: entered promiscuous mode
[  887.208461][T20132] syzkaller0: entered allmulticast mode
[  887.669357][T20144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  887.805665][T20152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4510'.
[  887.805703][T20152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4510'.
[  887.878736][T20158] netlink: 'syz.5.4513': attribute type 1 has an invalid length.
[  887.924426][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'.
[  887.924448][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'.
[  888.376301][T20174] syzkaller0: entered promiscuous mode
[  888.376326][T20174] syzkaller0: entered allmulticast mode
[  888.863075][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 240 seconds
[  888.863121][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 240 seconds
[  888.863150][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 240 seconds
[  888.863178][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 240 seconds
[  888.937147][T20189] netlink: 'syz.2.4525': attribute type 1 has an invalid length.
[  888.981252][T20189] 8021q: adding VLAN 0 to HW filter on device bond4
[  888.993313][T20189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'.
[  889.595568][T20218] veth0: entered promiscuous mode
[  889.608517][T20216] veth0: left promiscuous mode
[  890.143172][T18647] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 210 seconds
[  890.143216][T18647] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 210 seconds
[  890.153085][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 210 seconds
[  890.153125][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 210 seconds
[  890.153151][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 210 seconds
[  890.153175][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 210 seconds
[  891.436314][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 240 seconds
[  891.436357][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 240 seconds
[  891.436385][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 240 seconds
[  891.436412][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 240 seconds
[  892.312006][T20301] __nla_validate_parse: 2 callbacks suppressed
[  892.312025][T20301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4567'.
[  893.327555][T20331] netlink: 'syz.2.4579': attribute type 1 has an invalid length.
[  893.327578][T20331] netlink: 'syz.2.4579': attribute type 4 has an invalid length.
[  893.327591][T20331] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4579'.
[  893.329475][T20331] netlink: 'syz.2.4579': attribute type 1 has an invalid length.
[  893.329493][T20331] netlink: 'syz.2.4579': attribute type 4 has an invalid length.
[  893.329505][T20331] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4579'.
[  893.385506][T20333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  893.467797][T20337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4582'.
[  893.963502][T20348] netlink: 'syz.6.4587': attribute type 1 has an invalid length.
[  894.029019][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4587'.
[  894.076019][T20348] 8021q: adding VLAN 0 to HW filter on device bond1
[  894.608735][T20367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4593'.
[  894.880532][T20381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4597'.
[  895.308724][T20399] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4604'.
[  895.640644][T20389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  895.842724][T20410] netlink: 'syz.0.4609': attribute type 1 has an invalid length.
[  895.842738][T20410] netlink: 'syz.0.4609': attribute type 4 has an invalid length.
[  895.842745][T20410] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4609'.
[  895.851759][T20410] netlink: 'syz.0.4609': attribute type 1 has an invalid length.
[  895.851779][T20410] netlink: 'syz.0.4609': attribute type 4 has an invalid length.
[  895.851791][T20410] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4609'.
[  896.633338][T20429] netlink: 'syz.5.4613': attribute type 12 has an invalid length.
[  896.810214][T20435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  896.827630][T20433] tipc: Resetting bearer <eth:syzkaller0>
[  897.050505][T20430] tipc: Disabling bearer <eth:syzkaller0>
[  897.533496][T20471] __nla_validate_parse: 5 callbacks suppressed
[  897.533517][T20471] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4632'.
[  898.137133][T20499] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4645'.
[  898.462584][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4651'.
[  898.462620][T20513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4651'.
[  899.349434][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4666'.
[  899.349472][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4666'.
[  899.429065][T20553] validate_nla: 7 callbacks suppressed
[  899.429085][T20553] netlink: 'syz.2.4668': attribute type 1 has an invalid length.
[  899.429098][T20553] netlink: 'syz.2.4668': attribute type 4 has an invalid length.
[  899.429110][T20553] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4668'.
[  899.437885][T20553] netlink: 'syz.2.4668': attribute type 1 has an invalid length.
[  899.437903][T20553] netlink: 'syz.2.4668': attribute type 4 has an invalid length.
[  899.437914][T20553] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4668'.
[  900.180742][T20583] netlink: 'syz.2.4679': attribute type 1 has an invalid length.
[  900.180764][T20583] netlink: 'syz.2.4679': attribute type 4 has an invalid length.
[  900.180775][T20583] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4679'.
[  900.219390][T20583] netlink: 'syz.2.4679': attribute type 1 has an invalid length.
[  900.219411][T20583] netlink: 'syz.2.4679': attribute type 4 has an invalid length.
[  900.219423][T20583] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4679'.
[  900.344860][T20588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  901.064473][T20611] syzkaller0: entered promiscuous mode
[  901.064512][T20611] syzkaller0: entered allmulticast mode
[  901.094848][T20615] netlink: 'syz.6.4694': attribute type 1 has an invalid length.
[  901.094870][T20615] netlink: 'syz.6.4694': attribute type 4 has an invalid length.
[  901.879214][T20637] team0: Port device dummy0 added
[  902.175745][T20642] team0: Port device dummy0 removed
[  902.182238][T20642] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  902.303326][T18647] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 270 seconds
[  902.304141][T18647] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 270 seconds
[  902.304174][T18647] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 270 seconds
[  902.304201][T18647] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 270 seconds
[  902.546230][T20673] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  902.873960][T20684] __nla_validate_parse: 5 callbacks suppressed
[  902.874148][T20684] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4718'.
[  903.412748][T20704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4728'.
[  903.713215][T20712] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4731'.
[  904.880126][T18647] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 270 seconds
[  904.880179][T18647] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 270 seconds
[  904.880208][T18647] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 270 seconds
[  904.880235][T18647] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 270 seconds
[  917.970797][T20754] syzkaller1: entered promiscuous mode
[  917.970825][T20754] syzkaller1: entered allmulticast mode
[  918.545608][T20767] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4747'.
[  918.749308][T20781] validate_nla: 6 callbacks suppressed
[  918.749329][T20781] netlink: 'syz.5.4748': attribute type 4 has an invalid length.
[  918.943015][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 270 seconds
[  918.943059][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 270 seconds
[  918.943087][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 270 seconds
[  918.943113][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 270 seconds
[  919.226982][T20775] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  919.227050][T20773] netlink: 'syz.5.4748': attribute type 12 has an invalid length.
[  919.228786][T20792] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4749'.
[  920.008069][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4757'.
[  920.131821][T20828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4761'.
[  920.131854][T20828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4761'.
[  920.163548][T20821] syzkaller0: entered promiscuous mode
[  920.163567][T20821] syzkaller0: entered allmulticast mode
[  920.223176][T18647] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 240 seconds
[  920.223184][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 240 seconds
[  920.223220][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 240 seconds
[  920.223220][T18647] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 240 seconds
[  920.223250][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 240 seconds
[  920.223275][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 240 seconds
[  920.751623][T20836] netlink: 'syz.0.4764': attribute type 12 has an invalid length.
[  920.774816][T20836] netlink: 'syz.0.4764': attribute type 4 has an invalid length.
[  920.802602][T20839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  920.910297][T20846] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4765'.
[  921.260822][T20856] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4768'.
[  921.503065][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 270 seconds
[  921.503111][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 270 seconds
[  921.503207][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 270 seconds
[  921.503235][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 270 seconds
[  922.300448][T20873] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4774'.
[  922.508461][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'.
[  922.651163][T20887] syzkaller0: entered promiscuous mode
[  922.651187][T20887] syzkaller0: entered allmulticast mode
[  923.549033][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4784'.
[  923.578985][T20908] netlink: 'syz.3.4783': attribute type 12 has an invalid length.
[  923.580365][T20908] netlink: 'syz.3.4783': attribute type 4 has an invalid length.
[  923.832210][T20921] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4789'.
[  923.923051][T10689] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  924.084568][T20931] netlink: 'syz.0.4790': attribute type 4 has an invalid length.
[  924.099317][T10689] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[  924.099344][T10689] usb 6-1: config 0 has no interface number 0
[  924.099389][T10689] usb 6-1: config 0 interface 148 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9
[  924.099416][T10689] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x9 has invalid maxpacket 101, setting to 64
[  924.103787][T10689] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  924.103814][T10689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.103832][T10689] usb 6-1: Product: syz
[  924.103845][T10689] usb 6-1: Manufacturer: syz
[  924.103857][T10689] usb 6-1: SerialNumber: syz
[  924.175156][T10689] usb 6-1: config 0 descriptor??
[  924.176094][T20912] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  924.179228][T10689] kobil_sct 6-1:0.148: required endpoints missing
[  924.267317][T20926] netlink: 'syz.0.4790': attribute type 12 has an invalid length.
[  924.373794][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4793'.
[  924.376232][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4793'.
[  924.413737][ T5813] usb 6-1: USB disconnect, device number 2
[  924.931538][T20946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4798'.
[  925.163579][T20952] capability: warning: `syz.3.4800' uses deprecated v2 capabilities in a way that may be insecure
[  926.432343][T20977] netlink: 'syz.6.4804': attribute type 4 has an invalid length.
[  926.475276][T20971] netlink: 'syz.6.4804': attribute type 12 has an invalid length.
[  926.477817][T20978] netlink: 'syz.3.4806': attribute type 12 has an invalid length.
[  926.479303][T20978] netlink: 'syz.3.4806': attribute type 4 has an invalid length.
[  926.720924][T20983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4809'.
[  928.163781][T21012] netlink: 'syz.3.4820': attribute type 12 has an invalid length.
[  928.165654][T21012] netlink: 'syz.3.4820': attribute type 4 has an invalid length.
[  928.346888][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4821'.
[  928.346924][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4821'.
[  929.494995][T21029] netlink: 'syz.5.4824': attribute type 12 has an invalid length.
[  929.496572][T21029] netlink: 'syz.5.4824': attribute type 4 has an invalid length.
[  930.943555][T21058] netlink: 'syz.3.4833': attribute type 12 has an invalid length.
[  930.944610][T21058] netlink: 'syz.3.4833': attribute type 4 has an invalid length.
[  931.173021][   T44] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  931.308849][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4838'.
[  931.308873][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4838'.
[  931.347887][   T44] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[  931.347912][   T44] usb 1-1: config 0 has no interface number 0
[  931.347952][   T44] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 101, setting to 64
[  931.378535][   T44] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  931.378562][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.378572][   T44] usb 1-1: Product: syz
[  931.378579][   T44] usb 1-1: Manufacturer: syz
[  931.378587][   T44] usb 1-1: SerialNumber: syz
[  931.382095][   T44] usb 1-1: config 0 descriptor??
[  931.388120][T21061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  931.429669][   T44] kobil_sct 1-1:0.148: required endpoints missing
[  931.473278][T21074] netlink: 'syz.6.4839': attribute type 12 has an invalid length.
[  931.475087][T21074] netlink: 'syz.6.4839': attribute type 4 has an invalid length.
[  931.601323][    T9] usb 1-1: USB disconnect, device number 5
[  931.710328][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  931.713337][T21075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  932.303680][T21090] netlink: 'syz.6.4843': attribute type 12 has an invalid length.
[  932.305837][T21090] netlink: 'syz.6.4843': attribute type 4 has an invalid length.
[  932.385307][T18647] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 300 seconds
[  932.385351][T18647] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 300 seconds
[  932.385377][T18647] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 300 seconds
[  932.385404][T18647] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 300 seconds
[  933.216851][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4850'.
[  933.216890][T21111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4850'.
[  933.535889][T21119] netlink: 'syz.3.4851': attribute type 12 has an invalid length.
[  933.536498][T21120] netlink: 'syz.2.4853': attribute type 12 has an invalid length.
[  934.723037][   T44] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  934.875868][   T44] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  934.875894][   T44] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  934.875913][   T44] usb 1-1: config 6 has no interface number 0
[  934.875961][   T44] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  934.879793][   T44] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  934.879823][   T44] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  934.879843][   T44] usb 1-1: Product: syz
[  934.879856][   T44] usb 1-1: Manufacturer: syz
[  934.879871][   T44] usb 1-1: SerialNumber: syz
[  934.909146][   T44] hso 1-1:6.2: Failed to find INT IN ep
[  934.963129][T18647] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 300 seconds
[  934.963173][T18647] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 300 seconds
[  934.963200][T18647] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 300 seconds
[  934.963226][T18647] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 300 seconds
[  935.119879][   T44] usb 1-1: USB disconnect, device number 6
[  935.306649][T21165] validate_nla: 2 callbacks suppressed
[  935.306667][T21165] netlink: 'syz.6.4868': attribute type 12 has an invalid length.
[  935.308231][T21165] netlink: 'syz.6.4868': attribute type 4 has an invalid length.
[  935.830331][T21174] netlink: 'syz.5.4871': attribute type 12 has an invalid length.
[  935.831775][T21174] netlink: 'syz.5.4871': attribute type 4 has an invalid length.
[  937.908350][   T44] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  938.140194][   T44] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[  938.140223][   T44] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  938.140243][   T44] usb 7-1: config 6 has no interface number 0
[  938.140293][   T44] usb 7-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  938.147947][   T44] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  938.148094][   T44] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  938.148114][   T44] usb 7-1: Product: syz
[  938.148128][   T44] usb 7-1: Manufacturer: syz
[  938.148142][   T44] usb 7-1: SerialNumber: syz
[  938.161450][   T44] hso 7-1:6.2: Failed to find INT IN ep
[  938.395515][   T44] usb 7-1: USB disconnect, device number 2
[  938.500106][T21223] netlink: 'syz.3.4887': attribute type 12 has an invalid length.
[  938.501789][T21223] netlink: 'syz.3.4887': attribute type 4 has an invalid length.
[  940.350855][T21270] netlink: 'syz.2.4898': attribute type 4 has an invalid length.
[  940.463741][T21259] netlink: 'syz.2.4898': attribute type 12 has an invalid length.
[  941.475981][T21277] netlink: 'syz.0.4903': attribute type 12 has an invalid length.
[  941.527935][T21277] netlink: 'syz.0.4903': attribute type 4 has an invalid length.
[  942.060514][T21298] netlink: 'syz.2.4910': attribute type 12 has an invalid length.
[  942.070543][T21298] netlink: 'syz.2.4910': attribute type 4 has an invalid length.
[  943.043637][T21320] netlink: 'syz.0.4915': attribute type 4 has an invalid length.
[  943.113912][T21316] netlink: 'syz.0.4915': attribute type 12 has an invalid length.
[  943.157158][T21324] netlink: 'syz.5.4918': attribute type 12 has an invalid length.
[  943.160184][T21324] netlink: 'syz.5.4918': attribute type 4 has an invalid length.
[  945.755688][ T1229] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  945.823020][   T44] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  945.827983][T21373] netlink: 'syz.5.4932': attribute type 12 has an invalid length.
[  945.829802][T21373] netlink: 'syz.5.4932': attribute type 4 has an invalid length.
[  945.907896][ T1229] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[  945.907923][ T1229] usb 1-1: config 0 has no interface number 0
[  945.907975][ T1229] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  945.908000][ T1229] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 101, setting to 64
[  945.910489][ T1229] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  945.910518][ T1229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.910544][ T1229] usb 1-1: Product: syz
[  945.910557][ T1229] usb 1-1: Manufacturer: syz
[  945.910565][ T1229] usb 1-1: SerialNumber: syz
[  945.918509][ T1229] usb 1-1: config 0 descriptor??
[  945.945060][T21361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  945.949768][ T1229] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected
[  945.960390][ T1229] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  946.088350][   T44] usb 7-1: config 15 has an invalid interface number: 7 but max is 0
[  946.088379][   T44] usb 7-1: config 15 has no interface number 0
[  946.088441][   T44] usb 7-1: config 15 interface 7 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  946.088467][   T44] usb 7-1: config 15 interface 7 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  946.088491][   T44] usb 7-1: config 15 interface 7 altsetting 0 endpoint 0x82 has invalid maxpacket 64005, setting to 64
[  946.088520][   T44] usb 7-1: config 15 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 96, setting to 64
[  946.088543][   T44] usb 7-1: config 15 interface 7 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[  946.088567][   T44] usb 7-1: config 15 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  946.088591][   T44] usb 7-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  946.088620][   T44] usb 7-1: config 15 interface 7 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 1023
[  946.088645][   T44] usb 7-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  946.088665][   T44] usb 7-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  946.088686][   T44] usb 7-1: config 15 interface 7 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  946.091825][   T44] usb 7-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=dc.82
[  946.091853][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.091873][   T44] usb 7-1: Product: syz
[  946.091888][   T44] usb 7-1: Manufacturer: syz
[  946.091903][   T44] usb 7-1: SerialNumber: syz
[  946.222849][    T9] usb 1-1: USB disconnect, device number 7
[  946.259382][T21378] netlink: 'syz.2.4934': attribute type 12 has an invalid length.
[  946.261071][T21378] netlink: 'syz.2.4934': attribute type 4 has an invalid length.
[  946.426623][T21359] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  946.486539][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  946.489254][    T9] kobil_sct 1-1:0.148: device disconnected
[  946.709326][   T44] usb 7-1: USB disconnect, device number 3
[  946.913118][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  947.124557][    T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  947.124587][    T9] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  947.124606][    T9] usb 6-1: Product: syz
[  947.124619][    T9] usb 6-1: Manufacturer: syz
[  947.124633][    T9] usb 6-1: SerialNumber: syz
[  947.140482][    T9] usb 6-1: config 0 descriptor??
[  947.428891][T21391] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  947.429918][T21391] syzkaller0: entered promiscuous mode
[  947.429941][T21391] syzkaller0: entered allmulticast mode
[  948.119142][    T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  948.119175][    T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  948.121375][    T9] asix 6-1:0.0: probe with driver asix failed with error -71
[  948.354031][    T9] usb 6-1: USB disconnect, device number 3
[  948.913764][T21411] netlink: 'syz.6.4943': attribute type 4 has an invalid length.
[  949.013411][T21405] netlink: 'syz.6.4943': attribute type 12 has an invalid length.
[  949.025628][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 300 seconds
[  949.025671][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 300 seconds
[  949.025699][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 300 seconds
[  949.025726][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 300 seconds
[  949.068644][T21417] netlink: 'syz.2.4947': attribute type 12 has an invalid length.
[  949.070691][T21417] netlink: 'syz.2.4947': attribute type 4 has an invalid length.
[  949.268679][T21422] netlink: 'syz.3.4948': attribute type 12 has an invalid length.
[  949.271049][T21422] netlink: 'syz.3.4948': attribute type 4 has an invalid length.
[  949.653185][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  949.828216][    T9] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[  949.828243][    T9] usb 6-1: config 0 has no interface number 0
[  949.828293][    T9] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  949.828319][    T9] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 101, setting to 64
[  949.870575][    T9] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  949.870604][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.870623][    T9] usb 6-1: Product: syz
[  949.870636][    T9] usb 6-1: Manufacturer: syz
[  949.870651][    T9] usb 6-1: SerialNumber: syz
[  949.907180][    T9] usb 6-1: config 0 descriptor??
[  949.961058][T21426] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  949.973397][    T9] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected
[  949.979128][    T9] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  950.211374][    T9] usb 6-1: USB disconnect, device number 4
[  950.303370][   T32] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 270 seconds
[  950.303384][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 270 seconds
[  950.303415][   T32] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 270 seconds
[  950.303416][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 270 seconds
[  950.303444][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 270 seconds
[  950.303471][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 270 seconds
[  950.658528][    T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  950.659065][    T9] kobil_sct 6-1:0.148: device disconnected
[  951.576427][T21449] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  951.577430][T21449] syzkaller0: entered promiscuous mode
[  951.577452][T21449] syzkaller0: entered allmulticast mode
[  951.613078][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 300 seconds
[  951.613120][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 300 seconds
[  951.613144][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 300 seconds
[  951.613167][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 300 seconds
[  951.903212][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  952.057725][ T5916] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  952.057749][ T5916] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  952.057760][ T5916] usb 1-1: Product: syz
[  952.057767][ T5916] usb 1-1: Manufacturer: syz
[  952.057774][ T5916] usb 1-1: SerialNumber: syz
[  952.061247][ T5916] usb 1-1: config 0 descriptor??
[  952.540142][T21477] netlink: 'syz.5.4964': attribute type 12 has an invalid length.
[  952.542606][T21477] netlink: 'syz.5.4964': attribute type 4 has an invalid length.
[  952.570193][T21478] netlink: 'syz.2.4965': attribute type 12 has an invalid length.
[  952.572325][T21478] netlink: 'syz.2.4965': attribute type 4 has an invalid length.
[  952.879135][ T5916] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  952.879166][ T5916] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  952.879520][ T5916] asix 1-1:0.0: probe with driver asix failed with error -71
[  952.888057][ T5916] usb 1-1: USB disconnect, device number 8
[  954.704467][T21492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4970'.
[  955.077145][T21492] dummy0: entered promiscuous mode
[  955.077321][T21492] macvtap1: entered promiscuous mode
[  955.077512][T21492] macvtap1: entered allmulticast mode
[  955.077533][T21492] dummy0: entered allmulticast mode
[  955.331359][T21508] syzkaller0: entered promiscuous mode
[  955.331386][T21508] syzkaller0: entered allmulticast mode
[  955.714609][ T5916] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  955.762010][T21529] netlink: 'syz.6.4978': attribute type 4 has an invalid length.
[  955.793364][T21524] netlink: 'syz.6.4978': attribute type 12 has an invalid length.
[  955.868767][ T5916] usb 1-1: config 15 has an invalid interface number: 7 but max is 0
[  955.868791][ T5916] usb 1-1: config 15 has no interface number 0
[  955.868820][ T5916] usb 1-1: config 15 interface 7 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  955.868834][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  955.868846][ T5916] usb 1-1: config 15 interface 7 altsetting 0 endpoint 0x82 has invalid maxpacket 64005, setting to 64
[  955.868861][ T5916] usb 1-1: config 15 interface 7 altsetting 0 endpoint 0x8 has invalid maxpacket 96, setting to 64
[  955.868874][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[  955.868887][ T5916] usb 1-1: config 15 interface 7 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  955.868899][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  955.868911][ T5916] usb 1-1: config 15 interface 7 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 1023
[  955.868925][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  955.868936][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  955.868947][ T5916] usb 1-1: config 15 interface 7 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[  955.871568][ T5916] usb 1-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=dc.82
[  955.871585][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.871595][ T5916] usb 1-1: Product: syz
[  955.871601][ T5916] usb 1-1: Manufacturer: syz
[  955.871609][ T5916] usb 1-1: SerialNumber: syz
[  955.935671][T21501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  956.063988][T21531] netlink: 'syz.2.4981': attribute type 12 has an invalid length.
[  956.066457][T21531] netlink: 'syz.2.4981': attribute type 4 has an invalid length.
[  956.174935][ T5916] usb 1-1: USB disconnect, device number 9
[  956.585141][T21536] syzkaller1: entered promiscuous mode
[  956.585168][T21536] syzkaller1: entered allmulticast mode
[  956.956394][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4985'.
[  957.343014][ T1229] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  957.512277][ T1229] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[  957.512304][ T1229] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  957.512332][ T1229] usb 7-1: config 6 has no interface number 0
[  957.512377][ T1229] usb 7-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  957.559032][ T1229] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  957.559169][ T1229] usb 7-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  957.559190][ T1229] usb 7-1: Product: syz
[  957.559205][ T1229] usb 7-1: Manufacturer: syz
[  957.559218][ T1229] usb 7-1: SerialNumber: syz
[  957.615163][ T1229] hso 7-1:6.2: Failed to find INT IN ep
[  957.685998][T21562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4991'.
[  957.708596][T21562] macvtap2: entered promiscuous mode
[  957.708809][T21562] macvtap2: entered allmulticast mode
[  957.828387][   T44] usb 7-1: USB disconnect, device number 4
[  957.844496][T21567] netlink: 'syz.2.4992': attribute type 12 has an invalid length.
[  957.845658][T21567] netlink: 'syz.2.4992': attribute type 4 has an invalid length.
[  958.390332][T21573] netlink: 'syz.0.4995': attribute type 12 has an invalid length.
[  958.405863][T21573] netlink: 'syz.0.4995': attribute type 4 has an invalid length.
[  959.052384][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5003'.
[  959.464258][T21605] syzkaller1: entered promiscuous mode
[  959.464283][T21605] syzkaller1: entered allmulticast mode
[  960.061675][T21625] netlink: 'syz.6.5014': attribute type 12 has an invalid length.
[  960.064205][T21625] netlink: 'syz.6.5014': attribute type 4 has an invalid length.
[  960.079468][T21626] netlink: 'syz.0.5013': attribute type 12 has an invalid length.
[  960.081679][T21626] netlink: 'syz.0.5013': attribute type 4 has an invalid length.
[  960.177334][T21628] syzkaller0: entered promiscuous mode
[  960.177360][T21628] syzkaller0: entered allmulticast mode
[  960.916775][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5023'.
[  961.104922][T21653] syzkaller0: entered promiscuous mode
[  961.104949][T21653] syzkaller0: entered allmulticast mode
[  961.227585][T21657] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5027'.
[  961.899245][T21674] netlink: 'syz.5.5035': attribute type 12 has an invalid length.
[  961.900808][T21674] netlink: 'syz.5.5035': attribute type 4 has an invalid length.
[  962.463123][T18647] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 330 seconds
[  962.463167][T18647] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 330 seconds
[  962.463263][T18647] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 330 seconds
[  962.463290][T18647] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 330 seconds
[  963.055340][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5045'.
[  963.166032][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5053'.
[  963.166070][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5053'.
[  963.528350][T21724] syzkaller1: entered promiscuous mode
[  963.528369][T21724] syzkaller1: entered allmulticast mode
[  963.797843][T21732] validate_nla: 2 callbacks suppressed
[  963.797863][T21732] netlink: 'syz.0.5057': attribute type 12 has an invalid length.
[  963.811731][T21732] netlink: 'syz.0.5057': attribute type 4 has an invalid length.
[  963.860711][T21737] netlink: 'syz.6.5058': attribute type 12 has an invalid length.
[  963.866001][T21737] netlink: 'syz.6.5058': attribute type 4 has an invalid length.
[  964.543087][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5066'.
[  964.543126][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5066'.
[  965.566342][T18647] block nbd10: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 330 seconds
[  965.566389][T18647] block nbd10: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 330 seconds
[  965.566416][T18647] block nbd10: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 330 seconds
[  965.566440][T18647] block nbd10: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 330 seconds
[  966.009819][T21783] syzkaller0: entered promiscuous mode
[  966.009844][T21783] syzkaller0: entered allmulticast mode
[  966.147873][T21780] syzkaller1: entered promiscuous mode
[  966.147901][T21780] syzkaller1: entered allmulticast mode
[  966.149838][T21787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5075'.
[  966.190160][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5078'.
[  966.190198][T21792] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5078'.
[  966.341794][T21795] netlink: 'syz.5.5077': attribute type 4 has an invalid length.
[  966.456665][T21793] netlink: 'syz.5.5077': attribute type 12 has an invalid length.
[  967.094458][T21809] netlink: 'syz.0.5081': attribute type 4 has an invalid length.
[  967.650672][T21805] netlink: 'syz.0.5081': attribute type 12 has an invalid length.
[  967.896348][T21822] syzkaller0: entered promiscuous mode
[  967.896374][T21822] syzkaller0: entered allmulticast mode
[  968.535232][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5092'.
[  968.554331][T21841] syzkaller0: entered promiscuous mode
[  968.554358][T21841] syzkaller0: entered allmulticast mode
[  968.776665][T21838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5089'.
[  969.080086][T21860] netlink: 'syz.6.5094': attribute type 4 has an invalid length.
[  969.193503][T21858] netlink: 'syz.6.5094': attribute type 12 has an invalid length.
[  969.295226][T21864] netlink: 'syz.3.5095': attribute type 12 has an invalid length.
[  969.304304][T21864] netlink: 'syz.3.5095': attribute type 4 has an invalid length.
[  969.821377][T21883] syzkaller0: entered promiscuous mode
[  969.821402][T21883] syzkaller0: entered allmulticast mode
[  970.425820][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5108'.
[  970.953263][T21905] syzkaller0: entered promiscuous mode
[  970.953298][T21905] syzkaller0: entered allmulticast mode
[  970.977187][T21900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5109'.
[  972.245174][T21934] netlink: 'syz.5.5116': attribute type 12 has an invalid length.
[  972.259876][T21934] netlink: 'syz.5.5116': attribute type 4 has an invalid length.
[  972.529166][T21945] syzkaller0: entered promiscuous mode
[  972.529191][T21945] syzkaller0: entered allmulticast mode
[  972.655040][T21953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5124'.
[  974.743726][ T5814] Bluetooth: hci1: command 0x0406 tx timeout
[  974.772406][T21996] netlink: 'syz.6.5135': attribute type 12 has an invalid length.
[  974.774245][T21996] netlink: 'syz.6.5135': attribute type 4 has an invalid length.
[  975.866411][T22007] syzkaller0: entered promiscuous mode
[  975.866436][T22007] syzkaller0: entered allmulticast mode
[  976.398506][T22041] netlink: 'syz.6.5153': attribute type 12 has an invalid length.
[  976.400181][T22041] netlink: 'syz.6.5153': attribute type 4 has an invalid length.
[  976.939641][   T44] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  977.099872][   T44] usb 4-1: config 0 has an invalid interface number: 148 but max is 0
[  977.099899][   T44] usb 4-1: config 0 has no interface number 0
[  977.099945][   T44] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  977.099970][   T44] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x7 has invalid maxpacket 101, setting to 64
[  977.102699][   T44] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec
[  977.102738][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.102756][   T44] usb 4-1: Product: syz
[  977.102769][   T44] usb 4-1: Manufacturer: syz
[  977.102783][   T44] usb 4-1: SerialNumber: syz
[  977.114907][   T44] usb 4-1: config 0 descriptor??
[  977.124082][T22047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  977.139817][   T44] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected
[  977.214903][   T44] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  977.489505][ T1229] usb 4-1: USB disconnect, device number 6
[  977.656302][ T1229] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  977.673068][ T1229] kobil_sct 4-1:0.148: device disconnected
[  978.391097][T22076] syzkaller0: entered promiscuous mode
[  978.391124][T22076] syzkaller0: entered allmulticast mode
[  978.807419][T22106] netlink: 'syz.2.5172': attribute type 4 has an invalid length.
[  978.809567][T22097] netlink: 'syz.2.5172': attribute type 12 has an invalid length.
[  978.824872][T22096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5173'.
[  978.847357][T22102] syzkaller0: entered promiscuous mode
[  978.847384][T22102] syzkaller0: entered allmulticast mode
[  979.103068][   T59] block nbd12: Possible stuck request ffff8880252d0000: control (read@0,1024B). Runtime 330 seconds
[  979.103112][   T59] block nbd12: Possible stuck request ffff8880252d01c0: control (read@1024,1024B). Runtime 330 seconds
[  979.103140][   T59] block nbd12: Possible stuck request ffff8880252d0380: control (read@2048,1024B). Runtime 330 seconds
[  979.103164][   T59] block nbd12: Possible stuck request ffff8880252d0540: control (read@3072,1024B). Runtime 330 seconds
[  980.409876][T18647] block nbd14: Possible stuck request ffff8880253ee000: control (read@0,1024B). Runtime 300 seconds
[  980.409919][T18647] block nbd14: Possible stuck request ffff8880253ee1c0: control (read@1024,1024B). Runtime 300 seconds
[  980.413067][   T59] block nbd15: Possible stuck request ffff888025425080: control (read@0,1024B). Runtime 300 seconds
[  980.413110][   T59] block nbd15: Possible stuck request ffff888025425240: control (read@1024,1024B). Runtime 300 seconds
[  980.413138][   T59] block nbd15: Possible stuck request ffff888025425400: control (read@2048,1024B). Runtime 300 seconds
[  980.413165][   T59] block nbd15: Possible stuck request ffff8880254255c0: control (read@3072,1024B). Runtime 300 seconds
[  980.656902][T22136] syzkaller0: entered promiscuous mode
[  980.656928][T22136] syzkaller0: entered allmulticast mode
[  980.995266][T22154] netlink: 'syz.3.5189': attribute type 4 has an invalid length.
[  981.113811][T22151] netlink: 'syz.3.5189': attribute type 12 has an invalid length.
[  981.507175][T22170] netlink: 'syz.0.5195': attribute type 12 has an invalid length.
[  981.522697][T22170] netlink: 'syz.0.5195': attribute type 4 has an invalid length.
[  981.693513][   T59] block nbd13: Possible stuck request ffff888025377000: control (read@0,1024B). Runtime 330 seconds
[  981.693556][   T59] block nbd13: Possible stuck request ffff8880253771c0: control (read@1024,1024B). Runtime 330 seconds
[  981.693584][   T59] block nbd13: Possible stuck request ffff888025377380: control (read@2048,1024B). Runtime 330 seconds
[  981.693610][   T59] block nbd13: Possible stuck request ffff888025377540: control (read@3072,1024B). Runtime 330 seconds
[  983.543537][   T38] INFO: task udevd:13156 blocked for more than 143 seconds.
[  983.543573][   T38]       Not tainted syzkaller #0
[  983.543583][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  983.543591][   T38] task:udevd           state:D stack:22152 pid:13156 tgid:13156 ppid:1      task_flags:0x400140 flags:0x00080003
[  983.543650][   T38] Call Trace:
[  983.543659][   T38]  <TASK>
[  983.543743][   T38]  __schedule+0x16f3/0x4c20
[  983.543786][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.543821][   T38]  ? __pfx___schedule+0x10/0x10
[  983.543857][   T38]  ? schedule+0x91/0x360
[  983.543880][   T38]  schedule+0x165/0x360
[  983.543902][   T38]  io_schedule+0x81/0xe0
[  983.543925][   T38]  folio_wait_bit_common+0x6b5/0xb90
[  983.543947][   T38]  ? filemap_get_entry+0xad/0x2f0
[  983.543985][   T38]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  983.544007][   T38]  ? __pfx_wake_page_function+0x10/0x10
[  983.544027][   T38]  ? filemap_add_folio+0x3db/0x620
[  983.544046][   T38]  ? __filemap_get_folio+0x7f6/0xa40
[  983.544072][   T38]  ? __filemap_get_folio+0x6ed/0xa40
[  983.544091][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.544114][   T38]  do_read_cache_folio+0x1a4/0x560
[  983.544149][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.544171][   T38]  read_part_sector+0xb8/0x2b0
[  983.544196][   T38]  adfspart_check_POWERTEC+0x8c/0xf30
[  983.544219][   T38]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  983.544244][   T38]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  983.544265][   T38]  ? set_page_refcounted+0xa0/0x1e0
[  983.544300][   T38]  bdev_disk_changed+0x75f/0x14b0
[  983.544344][   T38]  ? __pfx_bdev_disk_changed+0x10/0x10
[  983.544377][   T38]  blkdev_get_whole+0x2e5/0x480
[  983.544408][   T38]  bdev_open+0x31e/0xcc0
[  983.544448][   T38]  blkdev_open+0x46c/0x610
[  983.544474][   T38]  ? __pfx_blkdev_open+0x10/0x10
[  983.544490][   T38]  do_dentry_open+0x9b1/0x1350
[  983.544529][   T38]  vfs_open+0x3b/0x350
[  983.544542][   T38]  ? path_openat+0x2ed9/0x3840
[  983.544562][   T38]  path_openat+0x2ef1/0x3840
[  983.544584][   T38]  ? try_to_take_rt_mutex+0x840/0xb00
[  983.544628][   T38]  ? __pfx_path_openat+0x10/0x10
[  983.544648][   T38]  ? do_raw_spin_lock+0x121/0x290
[  983.544680][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.544703][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.544726][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  983.544756][   T38]  do_filp_open+0x1fa/0x410
[  983.544778][   T38]  ? __pfx_do_filp_open+0x10/0x10
[  983.544795][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  983.544839][   T38]  ? alloc_fd+0x64f/0x6c0
[  983.544874][   T38]  do_sys_openat2+0x121/0x1c0
[  983.544892][   T38]  ? __pfx_do_sys_openat2+0x10/0x10
[  983.544927][   T38]  __x64_sys_openat+0x138/0x170
[  983.544951][   T38]  do_syscall_64+0xfa/0xfa0
[  983.544983][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.544999][   T38]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  983.545016][   T38]  ? clear_bhb_loop+0x60/0xb0
[  983.545038][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.545056][   T38] RIP: 0033:0x7f492dfd5407
[  983.545072][   T38] RSP: 002b:00007fff880da630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  983.545113][   T38] RAX: ffffffffffffffda RBX: 00007f492dee7880 RCX: 00007f492dfd5407
[  983.545134][   T38] RDX: 00000000000a0800 RSI: 000055ee7ddae480 RDI: ffffffffffffff9c
[  983.545147][   T38] RBP: 000055ee7ddad910 R08: 0000000000000000 R09: 0000000000000000
[  983.545158][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ee7ddce7d0
[  983.545175][   T38] R13: 000055ee7ddbb190 R14: 0000000000000000 R15: 000055ee7ddce7d0
[  983.545210][   T38]  </TASK>
[  983.545219][   T38] INFO: task udevd:13346 blocked for more than 143 seconds.
[  983.545231][   T38]       Not tainted syzkaller #0
[  983.545241][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  983.545249][   T38] task:udevd           state:D stack:22504 pid:13346 tgid:13346 ppid:1      task_flags:0x400140 flags:0x00080003
[  983.545292][   T38] Call Trace:
[  983.545299][   T38]  <TASK>
[  983.545311][   T38]  __schedule+0x16f3/0x4c20
[  983.545347][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.545378][   T38]  ? __pfx___schedule+0x10/0x10
[  983.545415][   T38]  ? schedule+0x91/0x360
[  983.545437][   T38]  schedule+0x165/0x360
[  983.545459][   T38]  io_schedule+0x81/0xe0
[  983.545481][   T38]  folio_wait_bit_common+0x6b5/0xb90
[  983.545504][   T38]  ? filemap_get_entry+0xad/0x2f0
[  983.545543][   T38]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  983.545567][   T38]  ? __pfx_wake_page_function+0x10/0x10
[  983.545592][   T38]  ? filemap_add_folio+0x3db/0x620
[  983.545613][   T38]  ? __filemap_get_folio+0x7f6/0xa40
[  983.545643][   T38]  ? __filemap_get_folio+0x6ed/0xa40
[  983.545677][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.545701][   T38]  do_read_cache_folio+0x1a4/0x560
[  983.545724][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.545747][   T38]  read_part_sector+0xb8/0x2b0
[  983.545773][   T38]  adfspart_check_POWERTEC+0x8c/0xf30
[  983.545797][   T38]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  983.545822][   T38]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  983.545844][   T38]  ? set_page_refcounted+0xa0/0x1e0
[  983.545877][   T38]  bdev_disk_changed+0x75f/0x14b0
[  983.545922][   T38]  ? __pfx_bdev_disk_changed+0x10/0x10
[  983.545970][   T38]  blkdev_get_whole+0x2e5/0x480
[  983.546070][   T38]  bdev_open+0x31e/0xcc0
[  983.546128][   T38]  blkdev_open+0x46c/0x610
[  983.546152][   T38]  ? __pfx_blkdev_open+0x10/0x10
[  983.546169][   T38]  do_dentry_open+0x9b1/0x1350
[  983.546209][   T38]  vfs_open+0x3b/0x350
[  983.546223][   T38]  ? path_openat+0x2ed9/0x3840
[  983.546245][   T38]  path_openat+0x2ef1/0x3840
[  983.546270][   T38]  ? try_to_take_rt_mutex+0x840/0xb00
[  983.546316][   T38]  ? __pfx_path_openat+0x10/0x10
[  983.546335][   T38]  ? do_raw_spin_lock+0x121/0x290
[  983.546365][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.546387][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.546409][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  983.546436][   T38]  do_filp_open+0x1fa/0x410
[  983.546460][   T38]  ? __pfx_do_filp_open+0x10/0x10
[  983.546477][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  983.546522][   T38]  ? alloc_fd+0x64f/0x6c0
[  983.546560][   T38]  do_sys_openat2+0x121/0x1c0
[  983.546583][   T38]  ? __pfx_do_sys_openat2+0x10/0x10
[  983.546619][   T38]  __x64_sys_openat+0x138/0x170
[  983.546644][   T38]  do_syscall_64+0xfa/0xfa0
[  983.546667][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.546685][   T38]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  983.546702][   T38]  ? clear_bhb_loop+0x60/0xb0
[  983.546722][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.546740][   T38] RIP: 0033:0x7f492dfd5407
[  983.546756][   T38] RSP: 002b:00007fff880da630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  983.546775][   T38] RAX: ffffffffffffffda RBX: 00007f492dee7880 RCX: 00007f492dfd5407
[  983.546790][   T38] RDX: 00000000000a0800 RSI: 000055ee7ddae570 RDI: ffffffffffffff9c
[  983.546804][   T38] RBP: 000055ee7ddad910 R08: 0000000000000000 R09: 0000000000000000
[  983.546815][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ee7ddd09d0
[  983.546826][   T38] R13: 000055ee7ddbb190 R14: 0000000000000000 R15: 000055ee7ddd09d0
[  983.546856][   T38]  </TASK>
[  983.546865][   T38] INFO: task udevd:13373 blocked for more than 143 seconds.
[  983.546878][   T38]       Not tainted syzkaller #0
[  983.546887][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  983.546896][   T38] task:udevd           state:D stack:21776 pid:13373 tgid:13373 ppid:1      task_flags:0x400140 flags:0x00080003
[  983.546938][   T38] Call Trace:
[  983.546945][   T38]  <TASK>
[  983.546957][   T38]  __schedule+0x16f3/0x4c20
[  983.546993][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.547177][   T38]  ? __pfx___schedule+0x10/0x10
[  983.547218][   T38]  ? schedule+0x91/0x360
[  983.547242][   T38]  schedule+0x165/0x360
[  983.547266][   T38]  io_schedule+0x81/0xe0
[  983.547289][   T38]  folio_wait_bit_common+0x6b5/0xb90
[  983.547313][   T38]  ? filemap_get_entry+0xad/0x2f0
[  983.547350][   T38]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  983.547436][   T38]  ? __pfx_wake_page_function+0x10/0x10
[  983.547460][   T38]  ? filemap_add_folio+0x3db/0x620
[  983.547480][   T38]  ? __filemap_get_folio+0x7f6/0xa40
[  983.547511][   T38]  ? __filemap_get_folio+0x6ed/0xa40
[  983.547532][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.547554][   T38]  do_read_cache_folio+0x1a4/0x560
[  983.547579][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.547603][   T38]  read_part_sector+0xb8/0x2b0
[  983.547631][   T38]  adfspart_check_POWERTEC+0x8c/0xf30
[  983.547655][   T38]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  983.547678][   T38]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  983.547699][   T38]  ? set_page_refcounted+0xa0/0x1e0
[  983.547734][   T38]  bdev_disk_changed+0x75f/0x14b0
[  983.547779][   T38]  ? __pfx_bdev_disk_changed+0x10/0x10
[  983.547815][   T38]  blkdev_get_whole+0x2e5/0x480
[  983.547845][   T38]  bdev_open+0x31e/0xcc0
[  983.547880][   T38]  blkdev_open+0x46c/0x610
[  983.547903][   T38]  ? __pfx_blkdev_open+0x10/0x10
[  983.547921][   T38]  do_dentry_open+0x9b1/0x1350
[  983.547959][   T38]  vfs_open+0x3b/0x350
[  983.547974][   T38]  ? path_openat+0x2ed9/0x3840
[  983.547994][   T38]  path_openat+0x2ef1/0x3840
[  983.548019][   T38]  ? try_to_take_rt_mutex+0x840/0xb00
[  983.548063][   T38]  ? __pfx_path_openat+0x10/0x10
[  983.548085][   T38]  ? do_raw_spin_lock+0x121/0x290
[  983.548124][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.548143][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.548167][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  983.548196][   T38]  do_filp_open+0x1fa/0x410
[  983.548217][   T38]  ? __pfx_do_filp_open+0x10/0x10
[  983.548234][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  983.548276][   T38]  ? alloc_fd+0x64f/0x6c0
[  983.548311][   T38]  do_sys_openat2+0x121/0x1c0
[  983.548333][   T38]  ? __pfx_do_sys_openat2+0x10/0x10
[  983.548369][   T38]  __x64_sys_openat+0x138/0x170
[  983.548391][   T38]  do_syscall_64+0xfa/0xfa0
[  983.548412][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.548432][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.548448][   T38]  ? clear_bhb_loop+0x60/0xb0
[  983.548470][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.548487][   T38] RIP: 0033:0x7f492dfd5407
[  983.548503][   T38] RSP: 002b:00007fff880da630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  983.548522][   T38] RAX: ffffffffffffffda RBX: 00007f492dee7880 RCX: 00007f492dfd5407
[  983.548536][   T38] RDX: 00000000000a0800 RSI: 000055ee7ddbf150 RDI: ffffffffffffff9c
[  983.548549][   T38] RBP: 000055ee7ddad910 R08: 0000000000000000 R09: 0000000000000000
[  983.548561][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ee7ddc2830
[  983.548573][   T38] R13: 000055ee7ddbb190 R14: 0000000000000000 R15: 000055ee7ddc2830
[  983.548606][   T38]  </TASK>
[  983.548616][   T38] INFO: task udevd:13755 blocked for more than 143 seconds.
[  983.548629][   T38]       Not tainted syzkaller #0
[  983.548639][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  983.548647][   T38] task:udevd           state:D stack:22504 pid:13755 tgid:13755 ppid:1      task_flags:0x400140 flags:0x00080003
[  983.548688][   T38] Call Trace:
[  983.548694][   T38]  <TASK>
[  983.548706][   T38]  __schedule+0x16f3/0x4c20
[  983.548740][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.548772][   T38]  ? __pfx___schedule+0x10/0x10
[  983.548810][   T38]  ? schedule+0x91/0x360
[  983.548835][   T38]  schedule+0x165/0x360
[  983.548858][   T38]  io_schedule+0x81/0xe0
[  983.548881][   T38]  folio_wait_bit_common+0x6b5/0xb90
[  983.548903][   T38]  ? filemap_get_entry+0xad/0x2f0
[  983.548943][   T38]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  983.548968][   T38]  ? __pfx_wake_page_function+0x10/0x10
[  983.548989][   T38]  ? filemap_add_folio+0x3db/0x620
[  983.549009][   T38]  ? __filemap_get_folio+0x7f6/0xa40
[  983.549039][   T38]  ? __filemap_get_folio+0x6ed/0xa40
[  983.549059][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.549082][   T38]  do_read_cache_folio+0x1a4/0x560
[  983.549112][   T38]  ? __pfx_blkdev_read_folio+0x10/0x10
[  983.549133][   T38]  read_part_sector+0xb8/0x2b0
[  983.549160][   T38]  adfspart_check_POWERTEC+0x8c/0xf30
[  983.549185][   T38]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  983.549208][   T38]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  983.549230][   T38]  ? set_page_refcounted+0xa0/0x1e0
[  983.549259][   T38]  bdev_disk_changed+0x75f/0x14b0
[  983.549293][   T38]  ? __pfx_bdev_disk_changed+0x10/0x10
[  983.549318][   T38]  blkdev_get_whole+0x2e5/0x480
[  983.549341][   T38]  bdev_open+0x31e/0xcc0
[  983.549368][   T38]  blkdev_open+0x46c/0x610
[  983.549385][   T38]  ? __pfx_blkdev_open+0x10/0x10
[  983.549398][   T38]  do_dentry_open+0x9b1/0x1350
[  983.549427][   T38]  vfs_open+0x3b/0x350
[  983.549439][   T38]  ? path_openat+0x2ed9/0x3840
[  983.549456][   T38]  path_openat+0x2ef1/0x3840
[  983.549477][   T38]  ? try_to_take_rt_mutex+0x840/0xb00
[  983.549516][   T38]  ? __pfx_path_openat+0x10/0x10
[  983.549531][   T38]  ? do_raw_spin_lock+0x121/0x290
[  983.549555][   T38]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  983.549573][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.549592][   T38]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  983.549617][   T38]  do_filp_open+0x1fa/0x410
[  983.549636][   T38]  ? __pfx_do_filp_open+0x10/0x10
[  983.549649][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  983.549687][   T38]  ? alloc_fd+0x64f/0x6c0
[  983.549718][   T38]  do_sys_openat2+0x121/0x1c0
[  983.549736][   T38]  ? __pfx_do_sys_openat2+0x10/0x10
[  983.549771][   T38]  __x64_sys_openat+0x138/0x170
[  983.549794][   T38]  do_syscall_64+0xfa/0xfa0
[  983.549813][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  983.549834][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.549849][   T38]  ? clear_bhb_loop+0x60/0xb0
[  983.549871][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.549888][   T38] RIP: 0033:0x7f492dfd5407
[  983.549902][   T38] RSP: 002b:00007fff880da630 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  983.549920][   T38] RAX: ffffffffffffffda RBX: 00007f492dee7880 RCX: 00007f492dfd5407
[  983.549932][   T38] RDX: 00000000000a0800 RSI: 000055ee7ddae480 RDI: ffffffffffffff9c
[  983.549944][   T38] RBP: 000055ee7ddad910 R08: 0000000000000000 R09: 0000000000000000
[  983.549956][   T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ee7ddd1ba0
[  983.549967][   T38] R13: 000055ee7ddbb190 R14: 0000000000000000 R15: 000055ee7ddd1ba0
[  983.549999][   T38]  </TASK>
[  983.550073][   T38] 
[  983.550073][   T38] Showing all locks held in the system:
[  983.550088][   T38] 1 lock held by rcu_tasks_trace/36:
[  983.550105][   T38]  #0: ffffffff8d5ab1c0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  983.550153][   T38] 1 lock held by khungtaskd/38:
[  983.550163][   T38]  #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  983.550212][   T38] 3 locks held by kworker/u8:6/161:
[  983.550222][   T38]  #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  983.550270][   T38]  #1: ffffc90003affba0 ((work_completion)(&copy->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  983.550312][   T38]  #2: ffffffff8d5ab2f0 (rcu_tasks_trace.barrier_q_mutex){+.+.}-{4:4}, at: rcu_barrier_tasks_generic+0x64/0x480
[  983.550376][   T38] 2 locks held by getty/5558:
[  983.550387][   T38]  #0: ffff88823bf3c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  983.550431][   T38]  #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400
[  983.550478][   T38] 5 locks held by kworker/u8:13/6096:
[  983.550487][   T38] 3 locks held by kworker/u8:14/6514:
[  983.550496][   T38]  #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  983.550536][   T38]  #1: ffffc90006487ba0 ((work_completion)(&copy->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  983.550579][   T38]  #2: ffffffff8d5ab2f0 (rcu_tasks_trace.barrier_q_mutex){+.+.}-{4:4}, at: rcu_barrier_tasks_generic+0x64/0x480
[  983.550620][   T38] 1 lock held by udevd/13156:
[  983.550629][   T38]  #0: ffff888024ba54c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550675][   T38] 1 lock held by udevd/13346:
[  983.550685][   T38]  #0: ffff8880251814c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550726][   T38] 1 lock held by udevd/13373:
[  983.550736][   T38]  #0: ffff8880252224c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550780][   T38] 1 lock held by udevd/13465:
[  983.550790][   T38]  #0: ffff8880253194c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550835][   T38] 1 lock held by udevd/13466:
[  983.550844][   T38]  #0: ffff8880253014c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550889][   T38] 1 lock held by udevd/13755:
[  983.550899][   T38]  #0: ffff8880252564c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0
[  983.550952][   T38] 1 lock held by syz.5.5212/22215:
[  983.550962][   T38]  #0: ffff88803b979280 (&kcm->tx_mutex){+.+.}-{4:4}, at: kcm_sendmsg+0x1bd/0x2ad0
[  983.551002][   T38] 1 lock held by syz.0.5214/22222:
[  983.551012][   T38]  #0: ffff888053556358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_setsockopt+0x53d/0x12c0
[  983.551340][   T38] 
[  983.551346][   T38] =============================================
[  983.551346][   T38] 
[  983.551365][   T38] NMI backtrace for cpu 1
[  983.551389][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  983.551409][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  983.551420][   T38] Call Trace:
[  983.551427][   T38]  <TASK>
[  983.551435][   T38]  dump_stack_lvl+0x189/0x250
[  983.551464][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[  983.551488][   T38]  ? __pfx__printk+0x10/0x10
[  983.551522][   T38]  nmi_cpu_backtrace+0x39e/0x3d0
[  983.551544][   T38]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  983.551565][   T38]  ? __pfx__printk+0x10/0x10
[  983.551587][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  983.551607][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  983.551627][   T38]  watchdog+0xf60/0xfa0
[  983.551655][   T38]  ? watchdog+0x1e2/0xfa0
[  983.551682][   T38]  kthread+0x711/0x8a0
[  983.551706][   T38]  ? __pfx_watchdog+0x10/0x10
[  983.551728][   T38]  ? __pfx_kthread+0x10/0x10
[  983.551746][   T38]  ? rt_spin_unlock+0x150/0x200
[  983.551765][   T38]  ? rt_spin_unlock+0x161/0x200
[  983.551778][   T38]  ? __pfx_kthread+0x10/0x10
[  983.551976][   T38]  ret_from_fork+0x4bc/0x870
[  983.552000][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  983.552016][   T38]  ? __switch_to_asm+0x39/0x70
[  983.552026][   T38]  ? __switch_to_asm+0x33/0x70
[  983.552034][   T38]  ? __pfx_kthread+0x10/0x10
[  983.552049][   T38]  ret_from_fork_asm+0x1a/0x30
[  983.552068][   T38]  </TASK>
[  983.552072][   T38] Sending NMI from CPU 1 to CPUs 0:
[  983.552127][    C0] NMI backtrace for cpu 0
[  983.552142][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  983.552159][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  983.552168][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  983.552189][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 f7 27 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  983.552203][    C0] RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2
[  983.552217][    C0] RAX: 7878b60e888b9f00 RBX: ffffffff81954ce7 RCX: 7878b60e888b9f00
[  983.552230][    C0] RDX: 0000000000000001 RSI: ffffffff8cd8c5cf RDI: ffffffff8b3ddbe0
[  983.552241][    C0] RBP: ffffffff8d207ea8 R08: ffff8880b88334db R09: 1ffff1101710669b
[  983.552252][    C0] R10: dffffc0000000000 R11: ffffed101710669c R12: ffffffff8ed62970
[  983.552264][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1a60640
[  983.552275][    C0] FS:  0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000
[  983.552292][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  983.552304][    C0] CR2: 00007f488b25df98 CR3: 000000005259c000 CR4: 00000000003526f0
[  983.552319][    C0] Call Trace:
[  983.552326][    C0]  <TASK>
[  983.552332][    C0]  default_idle+0x13/0x20
[  983.552352][    C0]  default_idle_call+0x73/0xb0
[  983.552371][    C0]  do_idle+0x1e7/0x510
[  983.552390][    C0]  ? __pfx_do_idle+0x10/0x10
[  983.552412][    C0]  cpu_startup_entry+0x44/0x60
[  983.552427][    C0]  rest_init+0x2de/0x300
[  983.552442][    C0]  start_kernel+0x3ae/0x410
[  983.552544][    C0]  x86_64_start_reservations+0x24/0x30
[  983.552590][    C0]  x86_64_start_kernel+0x143/0x1c0
[  983.552609][    C0]  common_startup_64+0x13e/0x147
[  983.552640][    C0]  </TASK>
[  992.543155][T18647] block nbd9: Possible stuck request ffff8880251c7000: control (read@0,1024B). Runtime 360 seconds
[  992.544785][T18647] block nbd9: Possible stuck request ffff8880251c71c0: control (read@1024,1024B). Runtime 360 seconds
[  992.544816][T18647] block nbd9: Possible stuck request ffff8880251c7380: control (read@2048,1024B). Runtime 360 seconds
[  992.544858][T18647] block nbd9: Possible stuck request ffff8880251c7540: control (read@3072,1024B). Runtime 360 seconds
[  993.149668][ T1321] ieee802154 phy0 wpan0: encryption failed: -22