last executing test programs:

1m42.123408734s ago: executing program 1 (id=314):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000140)={0x3})

1m38.814854279s ago: executing program 0 (id=315):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m28.347495095s ago: executing program 1 (id=316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x1, 0xfe, 0x8}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x24}}, 0x0)

1m20.526465409s ago: executing program 0 (id=317):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)

1m10.197150821s ago: executing program 1 (id=318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x19}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

1m1.493865732s ago: executing program 0 (id=319):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, 0x0)

50.824904971s ago: executing program 1 (id=320):
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2060)

45.035892335s ago: executing program 0 (id=321):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18})

36.595191571s ago: executing program 1 (id=322):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x9, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})

25.881660272s ago: executing program 0 (id=323):
keyctl$set_reqkey_keyring(0xe, 0x5)
request_key(&(0x7f0000001340)='pkcs7_test\x00', &(0x7f0000001380)={'syz', 0x3}, &(0x7f00000013c0)='(\x00', 0x0)

6.467234643s ago: executing program 1 (id=324):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e33, 0x8001, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c)

0s ago: executing program 0 (id=325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="110000005a0081"], 0x1c}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52962' (ED25519) to the list of known hosts.
syzkaller login: [  871.312016][ T3242] cgroup: Unknown subsys name 'net'
[  873.093420][ T3242] cgroup: Unknown subsys name 'cpuset'
[  873.438843][ T3242] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  992.264178][ T3242] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[ 1175.441723][ T3254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.403586][ T3254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.212054][ T3253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1182.233505][ T3253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1221.276670][ T3254] hsr_slave_0: entered promiscuous mode
[ 1221.792616][ T3254] hsr_slave_1: entered promiscuous mode
[ 1231.641246][ T3253] hsr_slave_0: entered promiscuous mode
[ 1231.732383][ T3253] hsr_slave_1: entered promiscuous mode
[ 1231.768480][ T3253] debugfs: 'hsr0' already exists in 'hsr'
[ 1231.772495][ T3253] Cannot create hsr debugfs directory
[ 1264.990981][ T3254] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1265.444152][ T3254] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1265.640960][ T3254] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1266.271990][ T3254] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1266.667593][ T3254] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1267.333968][ T3254] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1269.381379][ T3254] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1269.942983][ T3254] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1276.210960][ T3253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1276.539692][ T3253] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1276.729246][ T3253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1277.067968][ T3253] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1277.383489][ T3253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1277.781387][ T3253] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1278.030409][ T3253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1278.424143][ T3253] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1325.182845][ T3254] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1331.319093][ T3253] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1490.027716][ T3253] veth0_vlan: entered promiscuous mode
[ 1493.335566][ T3253] veth1_vlan: entered promiscuous mode
[ 1502.990546][ T3253] veth0_macvtap: entered promiscuous mode
[ 1503.293208][ T3254] veth0_vlan: entered promiscuous mode
[ 1505.581668][ T3253] veth1_macvtap: entered promiscuous mode
[ 1507.800506][ T3254] veth1_vlan: entered promiscuous mode
[ 1516.952639][   T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1517.348197][   T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1517.664287][ T3456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1518.406322][ T3456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.579671][ T3254] veth0_macvtap: entered promiscuous mode
[ 1523.314330][ T3254] veth1_macvtap: entered promiscuous mode
[ 1535.404350][   T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.431749][   T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.521051][   T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.930041][   T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1541.548484][ T3253] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 1799.783084][ T3920] netlink: 'syz.1.17': attribute type 22 has an invalid length.
[ 1957.550472][ T3950] capability: warning: `syz.1.30' uses deprecated v2 capabilities in a way that may be insecure
[ 2283.262920][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[ 2371.317464][ T4038] syz_tun: refused to change device tx_queue_len
[ 2396.243847][ T4042] comedi comedi1: 8255: I/O base address not correctly aligned
[ 2824.530425][ T4127] netlink: 240 bytes leftover after parsing attributes in process `syz.1.99'.
[ 3338.859333][ T4233] : renamed from bond0 (while UP)
[ 3617.106010][ T4295] hsr0 speed is unknown, defaulting to 1000
[ 3617.122400][ T4295] hsr0 speed is unknown, defaulting to 1000
[ 3620.659525][ T4295] hsr0 speed is unknown, defaulting to 1000
[ 3622.651687][ T4295] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 3628.361551][ T4295] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 3633.841644][ T4295] hsr0 speed is unknown, defaulting to 1000
[ 3634.562039][ T4295] hsr0 speed is unknown, defaulting to 1000
[ 3658.131750][ T4304] IPv6: sit1: Disabled Multicast RS
[ 3774.563014][ T4330] ip6t_srh: unknown srh match flags  4000
[ 3835.510802][ T4340] raw_sendmsg: syz.1.184 forgot to set AF_INET. Fix it!
[ 4047.916400][ T4386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'.
[ 4536.350001][ T4488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.242'.
[ 4652.780078][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[ 4652.783412][ T4518] netlink: 52 bytes leftover after parsing attributes in process `syz.1.256'.
[ 4728.908730][ T4537] xt_recent: Unsupported userspace flags (000000b1)
[ 4760.686392][ T4543] siw: device registration error -23
[ 4812.530329][ T4553] cgroup: Name too long
[ 5077.918298][ T4623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.301'.
[ 5110.038927][ T4632] netlink: 'syz.0.305': attribute type 32 has an invalid length.
[ 5148.169880][ T4643] capability: warning: `syz.1.310' uses 32-bit capabilities (legacy support in use)
[ 5971.163011][   T32] INFO: task kworker/u8:6:56 blocked for more than 451 seconds.
[ 5980.921214][   T32]       Tainted: G        W           syzkaller #0
[ 5988.390590][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.