last executing test programs:

1m23.675765184s ago: executing program 1 (id=5474):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @mss={0x2, 0x1}, @mss={0x2, 0x5}], 0x20000000000001cf)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newqdisc={0x90, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x5}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0xd, 0x1, 0x6, 0x8, 0x6, 0xc, 0x5, 0x9, 0x2, 0xa, 0x1, 0x9, 0xc, 0xe, 0x2, 0xe], 0x0, [0x5, 0x3e2, 0x81b, 0x389, 0xfff, 0x1, 0x6, 0x8, 0x1000, 0x8, 0x3ff, 0x9, 0x7f, 0x4, 0x92f, 0x4], [0x7b, 0x8, 0x6, 0x5, 0x800, 0x100, 0x6, 0x4, 0x800, 0x1, 0xb, 0x7, 0x7, 0x7, 0xfff7, 0x8000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3]}]}}]}]}]}}]}, 0x78}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x8}}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair(0x26, 0x5, 0xb, &(0x7f0000000440))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1m21.981653618s ago: executing program 2 (id=5475):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c", 0xa6}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209d", 0x23}], 0x2}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec", 0x69}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9", 0x3a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2", 0x4f}, {&(0x7f0000000500)}, {0x0}], 0x6)
write(r0, &(0x7f0000001e00)="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", 0x349)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m20.27678748s ago: executing program 3 (id=5476):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0xc, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast2}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="143c02040000000000006d58ceadc1d43200dd205f7234664fb405f8f07e9b375051ba599060e60fb09769595d37b1537a45b004007a500600000077f02313a9296e628277d5a0f7bd4fcc2fa8ebffe6701fa81d1cc3"], 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x44091)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000780)={0x1, 0x4481c8471422c0d4, 0x1000, 0x8, &(0x7f0000000480)="f482bc814ee359ff", 0x0, 0x0, 0x0})
write(0xffffffffffffffff, &(0x7f0000000340)="270000001400070703f5fe009dafb112ff000000008a151ffffb00000000000000000000008cef4e4aa9403f25b4ab89697fa37dd8238ac4aab283b8f78609ed55bcad3b7d68e90e7d285615f0bf", 0x4e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd7000040000000200000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094)
readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f00000002c0)=""/119, 0x77}], 0x3)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x67, 0xba, &(0x7f00000003c0)="92530b0ab457ab9b8fdaa86261781c104a8b572a8a7d858f65974f4f9f5553398affc42b05327bf6341c1224dc1fc15c7ee83cb43831a326df518a7fe45d7734a564064443bcb5ad5094478e861d617baf441ba706343d9db26c80ab2eb2e997e24c5236d80a12", &(0x7f00000004c0)=""/186, 0x7fff, 0x0, 0xfd, 0x5f, &(0x7f0000000800)="eed0961f11efed94e03044a48c86b125153e93ef39ca798fef8c87ce34ee579f0be10a0be841f938ff6f34932f32d5d0c0a882bf584a98ccad978d04d62a7723f6a2196d1c67e310b64519c4d18750365daf9350e5e8a0bf8e06ea34045bed0deb701a87ada4ee4646911c1a3ec32bde84189e6f254d7bfc8637db83fb387187f76cda8d3eeab983c66fa453b7dce09ed7a2a38ca26965f6b578c3527cbf28b87ca5a2af0cfd50c724f6833ce82a3f6022fd8a4d7b00fd8889cf8ce94be12eb073a934194f1cfecb22e34f368a715cb7aad953a2bcf2807844496aadee46d86d31f35e1f7d54817708b2f29d8f2a7ef55d6aeaffe0324eeaf6841550ff", &(0x7f0000000980)="a115e5559d46afae9c082b37d3550dad93793215f517361162d0afaadbfdb8d545b4675ce5863e8a146473e69b699a660c93d461e38e2a7c95fd97e9ace5d5be91c7b7da128f5a178c01d62223837cf898ace4167d46d1247436a4e3a2ef2f", 0x0, 0x0, 0x9}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x40)
r8 = socket(0x400000000010, 0x2, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988006c616e000000001800060001000700000008000500"/38, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1m19.412940739s ago: executing program 0 (id=5477):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000700)={<r0=>0xffffffffffffffff, 0x5, 0x81, 0x5})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000740)={0x8, 0x100000000, 0x86})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r2, 0x1, 0x3, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000040)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x9, 0xbfd, 0xffffffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x1], &(0x7f0000000140)=[{0x5, 0x3, 0x1, 0x4}, {0x2, 0x1, 0x2, 0x4}, {0x0, 0x1, 0x5, 0xc}, {0x3, 0x3, 0x9}, {0x1, 0x1, 0x4, 0xb}, {0x4, 0x2, 0x2, 0x4}]}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x280, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x86a4c99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac9eee7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44a6b13e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x137a0f3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5baee98b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x742f4989}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1094df5a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ffa8c27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe921dd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e141f7e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17ab5abf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48a17637}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f355a76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1337e0bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25334b52}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39054033}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x574b167d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x170, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x832d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x266daf35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf67c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf38d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x777b42ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fab}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7004}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5141ece9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2286316e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2373520e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f9387a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6020137a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x704b99aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b3d132c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9493}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fbb71ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69dda4f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf35e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2278}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64dd59b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d0a0a8a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f44f7a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fe0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x383a1d5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fe779fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f435b68}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dd9df65}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc98d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x280}, 0x1, 0x0, 0x0, 0x4004090}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0xfffffffffffffca3, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0)
r4 = epoll_create1(0x0)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x80002008})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000340)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x41, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, @alu={0x7, 0x0, 0x7, 0x7, 0x8}, @map_idx={0x18, 0x94a47743122015cb}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x32}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x89}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}]}, &(0x7f00000004c0)='GPL\x00', 0x426076b, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xf, 0x3, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x94)
bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r3, 0x0, r10}, 0x10)

1m18.764104349s ago: executing program 4 (id=5478):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
r1 = socket$inet(0x2, 0x2, 0x1)
socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r3, 0x1) (async)
shutdown(r3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0)="1f00d10000000000", 0x8) (async)
setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0)="1f00d10000000000", 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000000c0)={r8, 0x0, 0x2, 0x3}, &(0x7f0000000140)=0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x8}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x2e8, 0xc, 0xa, 0xdaa68a0f8285dacf, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x288, 0x3, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x40}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6}]}}}, {0xe8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xdc, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x70, 0x1, "8ecd9cd83233c006dd909005b5b4afb80967a747b8223acc245ddf41d02d7f692de173a8fa862155913957a0e4d0a3aea50e7812a3980ffd240be7765abe6de1b9459d93c1dbe770e372da2d77b21fa8c8a58251fdde3cd49b9704f1c2f4ba0281d63f4c907f3ea66b200b8f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000008}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "6f9480e46da4404e854fe7b3450ee42c6bb91479b9ba3404ce1bf9a8e6f4b9321cc4c30ccd685b143ff5e06c09b2f592183fa8d8fbfafa5313cd1d937fcddf50e45cfe1d216470a95f593e4abbdedeaa6154ddcc886f815b4ca2e8"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x77e4966e8949877c, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x418659c0}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x214, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x5d4}}, 0x20004840) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x2e8, 0xc, 0xa, 0xdaa68a0f8285dacf, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x288, 0x3, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x40}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6}]}}}, {0xe8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xdc, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x70, 0x1, "8ecd9cd83233c006dd909005b5b4afb80967a747b8223acc245ddf41d02d7f692de173a8fa862155913957a0e4d0a3aea50e7812a3980ffd240be7765abe6de1b9459d93c1dbe770e372da2d77b21fa8c8a58251fdde3cd49b9704f1c2f4ba0281d63f4c907f3ea66b200b8f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000008}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x5f, 0x6, 0x1, 0x0, "6f9480e46da4404e854fe7b3450ee42c6bb91479b9ba3404ce1bf9a8e6f4b9321cc4c30ccd685b143ff5e06c09b2f592183fa8d8fbfafa5313cd1d937fcddf50e45cfe1d216470a95f593e4abbdedeaa6154ddcc886f815b4ca2e8"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x77e4966e8949877c, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x418659c0}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2b}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x214, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x5d4}}, 0x20004840)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x700}, {&(0x7f0000000280)='4', 0x1}], 0x3}, 0x804)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000240)="5537c4e1433b3a5e1f86d229056495423c6f6c14ce4bbc13d8", 0x19)

1m15.776977345s ago: executing program 1 (id=5479):
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x2, 0xc, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x10000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}]}, 0x60}}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0xa4ff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0))
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r5, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)
ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000380)={r1, 0x0, 0xffffffffdb6ad275, 0xc, 0x3, 0x2, [0x6, 0x4, 0xfffffffffffffff7, 0x6adf, 0xf14, 0x1]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="8b330400000001dcdf25050000dad800000000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x2004c820)
socket$inet_sctp(0x2, 0x5, 0x84)

1m12.552347046s ago: executing program 3 (id=5480):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
connect$x25(r0, &(0x7f0000000500), 0x12)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>r0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
connect$x25(r0, 0x0, 0x0)

1m11.481487528s ago: executing program 2 (id=5481):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
writev(r0, &(0x7f0000000400), 0x0)

1m9.945821038s ago: executing program 0 (id=5482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x441}, @IFA_LOCAL={0xf, 0x2, @remote}]}, 0x34}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x500}, 0x48)
mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x9, {{0x2c, 0x4, 0x2, 0x2e, 0xb0, 0x66, 0x0, 0x40, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@cipso={0x86, 0x3f, 0x3, [{0x6, 0x9, "be490619e247c7"}, {0x6, 0x4, "f98e"}, {0x2, 0xf, "a8b7be2dcbdd23bf2c7b98e49e"}, {0x2, 0x7, "fbb2e2c6c8"}, {0x7, 0x4, '7\v'}, {0x5, 0x12, "af70ac9c76d20a4fbd567050580d42dd"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x2, [{@rand_addr=0x64010100, 0xe}]}, @timestamp_prespec={0x44, 0x1c, 0x18, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x1000}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x40, 0x1, 0x1, [{@private=0xa010100, 0x784}, {@empty, 0x2}, {@remote, 0x3875}]}, @timestamp={0x44, 0x14, 0x9a, 0x0, 0x0, [0x2, 0xffff, 0xd, 0x0]}]}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1e}, 0x2a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x97}, 0x20)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b20, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}}, 0x0)

1m9.120671724s ago: executing program 4 (id=5483):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000000)="628c", 0x2}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', <r4=>0x0}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="7800000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000058001a8006000600"], 0x78}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xffff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004921}, 0x44860)

1m8.217435075s ago: executing program 3 (id=5484):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd24, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x4000}}, 0x23}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x3c, &(0x7f0000000300)={&(0x7f00000000c0)={0xfffffffffffffd04, r2, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0x2000c004)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf25010000000000000007410000004c00180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001663dac1868cf728e37af70b5d6b32a23b776ceb7d66c724fd65874510978787c976ce16411854bdb6411780cfd3489f49eed000ac5fcc14d8cfc218b733534367c5f4256089b3ab66984fad0edb7c515b36ce1280e0db826e4f8087b631aa9dd31af0ae232b7369a75239d3ec84d71f59b48373e5628e51415ba22d5618480af8b13b151217555e122828129a79"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x800)

1m6.875814549s ago: executing program 1 (id=5485):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0x601, 0x200000, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0x601, 0x200000, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xf}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0)

1m5.43365019s ago: executing program 2 (id=5486):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300b68c530300000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008"], 0xa4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYBLOB="080004"], 0x44}}, 0x4000880)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17}, 0x20)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x2b}, 0x94)

1m2.352890783s ago: executing program 0 (id=5487):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000001) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x84)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) (async)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x800) (async)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4) (async)
syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), r0) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r7, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@deltaction={0xdc, 0x31, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5466a456}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040804}, 0x40890) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r0) (rerun: 32)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r8, 0x113, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}}, 0x4000) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x40}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x5c}}, 0x440c2) (async, rerun: 32)
r10 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
bind$tipc(r10, &(0x7f0000000b40)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10) (async)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x24008001) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x1a8, r12, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x532}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x26, 0x3, "a5c3c8bdd2ac7531343ac5e48f31437105fb2e00e140652d3f275e3fcbade0b14c81"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb8b}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe189}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1200}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x880}, 0x10)
r13 = accept(r11, &(0x7f0000000f40)=@ieee802154, &(0x7f0000000fc0)=0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r13, 0x84, 0x1c, &(0x7f0000001000), &(0x7f0000001040)=0x4) (async)
r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080), 0x4) (async, rerun: 32)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001240)={<r15=>r13, &(0x7f0000001140)='NET_DM\x00', 0x51d881, &(0x7f0000001180)={@align=0x9, {0x5, 0x4, 0x8, 0xc}}, 0x5, &(0x7f00000011c0)={@_ha_fsid}, &(0x7f0000001200)=0x7ff}) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@bloom_filter={0x1e, 0x8, 0x1, 0x1, 0x8100, 0x1, 0x1000, '\x00', 0x0, r14, 0x4, 0x1, 0x2, 0x7, @value=r15}, 0x50)

1m0.083971704s ago: executing program 3 (id=5488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f00b0f44ed0a28cba18905146f5eb010018000000000000001000000010000000050000001000925265f52e209356fbf5000000000011010000"], 0x0, 0x2d}, 0x28)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0xec, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, {0xf, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0xbc, 0x2, [@TCA_FLOW_EMATCHES={0xa8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x644, 0x3, 0x9}, {0x5, 0x4, 0xa10, 0x5cd4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x0, 0x0, 0x1, 0x1}, {0x4}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x3}, {0xffffffb2, 0x5, 0x6, 0xc0000000}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x8}, {0x3, 0x4, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x49}, {0x8, 0x80000000, 0x10, 0x4, 0xa, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x5, 0x1, 0x8, 0x6, 0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="0c0200d3", @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf253a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008880)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$inet(0x2, 0x800, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r12, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x2, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8c}}, 0x0)
write$tun(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="000000f56314f75a00003b0120010000000000000000000000000000ff0200000000000000000000000000010cd637c3c5edb63af3b6691452226cb2abc1d52251727238f5b0965ef473cf621a471376c6abca52a9d27b"], 0x2c)
socket$nl_generic(0x10, 0x3, 0x10)

59.41429358s ago: executing program 4 (id=5489):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0, 0x200000000000000}, 0x20)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r6, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, &(0x7f0000000400)="86ff3b518c8a", 0x6, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0x4, 0x6, @broadcast}, 0x14)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x62, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4800, 0x0, 0x0, 0x2ca}, [@IFLA_GSO_MAX_SIZE={0x0, 0x29, 0x27781}]}, 0x3c}, 0x1, 0xff7f}, 0x0)

56.161972606s ago: executing program 2 (id=5490):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)

54.858979759s ago: executing program 1 (id=5491):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, &(0x7f0000004900)={0x0, 0x3938700})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffff9}, 0x8}, 0x94)

52.709328868s ago: executing program 0 (id=5492):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f0000000000000000000000000000000000002752c441e5bb8d677a13140177b4b71834513ec744995089da92bf62c4e363773d3c93c96ad540cac214ea3cec1c1f555130c9c74e565836d7d9d5e34d3a171629fef99f77c43ad78283e6de4119dcd30f537fb3602370eec688827197fe36cfc7493482a1c83566fca6d1f3cd8258be1fcf6d4432f4cd19442a787c5b36aae3b7a3a49d8c04aae2e00c36273ab679b874cf3b6ac32b47287e563f239c2867d558642e7f5e38098007e05b62d56f802f962c75ae2a1ca23b14163cc03b11c3664bb6a85fdd139f3246476af09f9bd34a9042e8524a7bdd69a9b6231cb5a3ea3350c8a0dacff1ec683215b321dce71cb84c50b947b2887a585f081813cac96c1201b2890fea8ead4dc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000ff738af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, &(0x7f0000000100)="6e64099227b4ab2f135fb219d3df7f48c012fb1a5b", &(0x7f0000000540)=""/122}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000500080000000000000000692204000000000095"], 0x0, 0x5}, 0x94)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@initdev, @remote, <r5=>0x0}, &(0x7f00000000c0)=0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x21, 0x0, 0x0, 0x2, 0x8, 0xb}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x1, 0x106)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
accept4$alg(r8, 0x0, 0x0, 0x0)
close(0x4)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000081)

50.365287129s ago: executing program 3 (id=5493):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000200))
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00e24e86f60100", @ANYRES32=r0, @ANYBLOB="0c0005002801000000000000"], 0x48}}, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

50.214178233s ago: executing program 4 (id=5494):
r0 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000054) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000054)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

49.309239235s ago: executing program 2 (id=5495):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0xc25, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}]}, 0x1c}}, 0x44)

48.44538462s ago: executing program 1 (id=5496):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(0xca, &(0x7f0000000180)="0402000000fa", 0x6)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4)
shutdown(r3, 0x1)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), 0x4)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x5}, 0x10)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r6, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x20, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0x4008030) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
write(0xca, &(0x7f0000000180)="0402000000fa", 0x6) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) (async)
shutdown(r3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000), 0x4) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
bind$phonet(r5, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x5}, 0x10) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
connect$phonet_pipe(r6, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e208000140000000000800014000000007ebfd014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000008"], 0x140}}, 0x0) (async)

46.212469976s ago: executing program 0 (id=5497):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r0, &(0x7f0000000000)='{\x00', 0x80200, &(0x7f0000000040)={@align=0xffffffffffffffff, {0x7, 0x8, 0x9, 0x4}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x7})
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x56)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0)

45.549492369s ago: executing program 4 (id=5498):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/144, 0x90}, {&(0x7f0000001040)=""/4100, 0x1004}], 0x2}, 0x2}, {{0x0, 0x0, 0x0}, 0x102}], 0x2, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_pwait(r1, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0)

44.845846032s ago: executing program 3 (id=5499):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_IFALIASn={0x4}]}, 0x50}}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={<r2=>0x0, 0x1c, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x10}]}, &(0x7f00000006c0)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="ff0ff500ac85f168ed974277bfcc19e4a508aff6a0ea6b5e55d7432644f72eefb964deffebc92020a1c647fad696bd8dffb589963856bdbb26dc01fb306ee8d6f8ceb0994ef9fa10684657001f41f9862412260f88772b63fda6c91d7c5753271c8b43f810a297bffffd31afd98d43d2d2d5b84ddac5f47869f26b9c2dccb559f5980ed8d9e2d13903ad02215bb7347e144b3235cecffea99e954f7b8c9834f12a0fb9710af5f8543a80345e6a4ee5f9d9804e5b02ececc5fbcd3649d89a9502f99bfc15e4402413ac6ed6bd709286910087e3f97729403000"/233], 0xfd)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8000000020100010000000000000000050000044400108008000140000000090800034000000004080001400000000608000140ffffffff080001400040000a080002400000040008000340000000070800034000008000100005800b000100616d616e64610000140019800800020010000000080002000204000024001700000000090000317800000006000000010000000000014000000004890000000520000180140001800300000000000000080002000000000006000340000300000800084000000005"], 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)

41.202985929s ago: executing program 2 (id=5500):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071117a00000000008510000002000000850000000000000095000000000000009500a50500000000d734a048b7aa40d717b974180638d8c2f7e9a9a407705b5aa7c88c15d0a4a787338522657e64e15be97bda91e7dfb5988bac599b7ef8f7e6227f2e5b12976385bc386b6f3241880e32122ac8154d8e7caf5d0f780c35281a2c6c7be2aec93c9bbf4b6f06f6cc6a151b8f21ab7af95976d7d0bee1000a3e70539fd9978f8a64d104abd34f0470f4e9fd4e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

35.499722386s ago: executing program 1 (id=5501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007000006060a030600000000000000000a0000050900010073797a310000000014000480100001800a00010072616e67650000000b00020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007000006060a030600000000000000000a0000050900010073797a310000000014000480100001800a00010072616e67650000000b00020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x21, 0x2, 0x2) (async)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd0}}, 0x40800)
socket(0x2, 0x80805, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000802}, 0x4000c01)

33.453266677s ago: executing program 4 (id=5502):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4004001)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
accept$alg(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000002c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x67}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07000000000000002000050000001c0003800800040024b380000800020020000000080005007180bbda180001801400020073797a5f74295e756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64001000000c00028008001f0004"], 0x3c}}, 0x0)
recvmsg(r9, &(0x7f0000000480)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, &(0x7f0000000440)=""/48, 0x30}, 0x10000)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000300))

32.986205642s ago: executing program 0 (id=5503):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xb, 0x0, &(0x7f0000000640)) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r4=>0x0})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="e9ab8ec232be59cbf1ffe367316ae1e7012d672f42579dc5e1279c6f6136", 0x1e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}, @ip_retopts={{0x10}}], 0x40}}], 0x2, 0x0) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

26.019756425s ago: executing program 32 (id=5499):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_IFALIASn={0x4}]}, 0x50}}, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000680)={<r2=>0x0, 0x1c, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x10}]}, &(0x7f00000006c0)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="ff0ff500ac85f168ed974277bfcc19e4a508aff6a0ea6b5e55d7432644f72eefb964deffebc92020a1c647fad696bd8dffb589963856bdbb26dc01fb306ee8d6f8ceb0994ef9fa10684657001f41f9862412260f88772b63fda6c91d7c5753271c8b43f810a297bffffd31afd98d43d2d2d5b84ddac5f47869f26b9c2dccb559f5980ed8d9e2d13903ad02215bb7347e144b3235cecffea99e954f7b8c9834f12a0fb9710af5f8543a80345e6a4ee5f9d9804e5b02ececc5fbcd3649d89a9502f99bfc15e4402413ac6ed6bd709286910087e3f97729403000"/233], 0xfd)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8000000020100010000000000000000050000044400108008000140000000090800034000000004080001400000000608000140ffffffff080001400040000a080002400000040008000340000000070800034000008000100005800b000100616d616e64610000140019800800020010000000080002000204000024001700000000090000317800000006000000010000000000014000000004890000000520000180140001800300000000000000080002000000000006000340000300000800084000000005"], 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)

16.250137723s ago: executing program 33 (id=5500):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{0x0, 0x2e}, {&(0x7f0000001540)="b14fd5c9ed46fc05cb05337b620526fc93357903607902406c5d3113ad5b3117cd7ab604fe18c0a4717acb86bf141c9d67389bb77368bab92cc5ffd0cee540eb78e1ba67d3b806dfabdb7397045f6b9b274e5525f7685e2ae80f938f72c8a4bb80730d3f371777a8464d4ff0526a6d5e300099595dbee7f24a46262e74f3890bde0dba4022fb79c1d4d4c9f4c432db8abd757945bf17ae5d8fd2414637caa26ebbcdd4a00f50eb0be0abcae38a496dce098e3b9e27f3b13a20fc8f1dce38ef24fe458f326f04e84a1ab657c0b0a78aa1a3dde94aa7ad52e782c71174a62360ab7304b18180060d63b70a00"/247, 0xf7}, {&(0x7f0000001440)="0140af782ea71510ebcfd5c3880daaca30eb4ddfd1190f01dac5cc2160550208aa8f6f3c85bd65169dd45f5caa4788465ee417f77820ecf053694578f4867b3474351de79f8d6fe29167a9168e3f94eab347cffbe1e10e26f78e07aa5e55d5300d47fa5f4cd6fdebbc910784cdecd67f3dcfb16a337b249cbedf778670aced7949755b01ee9933dcbda88acabaf582364493745c5af709eb3e35f80ef0b74520bcae499942abf3409df984a6ba8bfe41ed05bfc6fe67b2e8d0a572c6d17bb59b9da76db7da7aae8f27ce8f3602a3f3c0637fb866ead3d15676c2c265ed72839d6f901fa4af56b6d778d7bb9cd9a7d1c1da8e0490d9", 0xf5}], 0x3}, 0x20008890)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071117a00000000008510000002000000850000000000000095000000000000009500a50500000000d734a048b7aa40d717b974180638d8c2f7e9a9a407705b5aa7c88c15d0a4a787338522657e64e15be97bda91e7dfb5988bac599b7ef8f7e6227f2e5b12976385bc386b6f3241880e32122ac8154d8e7caf5d0f780c35281a2c6c7be2aec93c9bbf4b6f06f6cc6a151b8f21ab7af95976d7d0bee1000a3e70539fd9978f8a64d104abd34f0470f4e9fd4e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

11.29403208s ago: executing program 34 (id=5503):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1d0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x23, 0x6}, {0xffffffffffffffff, 0x1, 0x2}, 0x100, 0x964}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x5, 0x0, 0x2]}, {0xfffc, [0x0, 0x5, 0x0, 0x2, 0x0, 0x1], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xb, 0x0, &(0x7f0000000640)) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r4=>0x0})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="e9ab8ec232be59cbf1ffe367316ae1e7012d672f42579dc5e1279c6f6136", 0x1e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}, @ip_retopts={{0x10}}], 0x40}}], 0x2, 0x0) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

6.778738681s ago: executing program 35 (id=5501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007000006060a030600000000000000000a0000050900010073797a310000000014000480100001800a00010072616e67650000000b00020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007000006060a030600000000000000000a0000050900010073797a310000000014000480100001800a00010072616e67650000000b00020073797a3200000000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x21, 0x2, 0x2) (async)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd0}}, 0x40800)
socket(0x2, 0x80805, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000802}, 0x4000c01)

0s ago: executing program 36 (id=5502):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x4004001)
r2 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
accept$alg(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00000002c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffff, 0x67}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07000000000000002000050000001c0003800800040024b380000800020020000000080005007180bbda180001801400020073797a5f74295e756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010427fd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="29000000000400001c00128009000100626f6e64001000000c00028008001f0004"], 0x3c}}, 0x0)
recvmsg(r9, &(0x7f0000000480)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, &(0x7f0000000440)=""/48, 0x30}, 0x10000)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000300))

kernel console output (not intermixed with test programs):

56956][T22027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3921'.
[  490.356970][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'.
[  490.814959][T22049] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.874514][T22062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'.
[  490.874846][T22060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'.
[  490.935402][T22054] ip_tables: iptables: counters copy to user failed while replacing table
[  491.007628][T22064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3931'.
[  491.341159][T22082] netlink: 'syz.2.3935': attribute type 1 has an invalid length.
[  491.481303][T22071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3935'.
[  491.501107][T22081] netlink: 'syz.4.3937': attribute type 11 has an invalid length.
[  491.501129][T22081] netlink: 'syz.4.3937': attribute type 6 has an invalid length.
[  491.501144][T22081] netlink: 3732 bytes leftover after parsing attributes in process `syz.4.3937'.
[  491.762596][T22095] ipt_ah: unknown flags FF
[  491.952649][T22100] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  491.953478][T22105] netlink: 'syz.4.3945': attribute type 24 has an invalid length.
[  492.016723][T22100] bond4 (unregistering): Released all slaves
[  492.038755][T22112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.124143][T22102] batman_adv: batadv0: Adding interface: syzkaller0
[  492.124162][T22102] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.124189][T22102] batman_adv: batadv0: Interface activated: syzkaller0
[  492.225320][T22112] bond0: entered promiscuous mode
[  492.225412][T22112] bond0: entered allmulticast mode
[  492.228696][T22112] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.260464][T22098] batman_adv: batadv0: Interface deactivated: syzkaller0
[  492.344108][T22121] netlink: 'syz.4.3948': attribute type 1 has an invalid length.
[  492.375534][T22098] batman_adv: batadv0: Removing interface: syzkaller0
[  492.394516][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'.
[  492.572151][T22127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.639287][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.639598][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.639731][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.639859][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.639985][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.640112][T22130] netlink: 'syz.4.3952': attribute type 1 has an invalid length.
[  492.982087][T22137] gre1: entered promiscuous mode
[  492.982112][T22137] gre1: entered allmulticast mode
[  493.277400][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  493.787198][T22176] block nbd0: not configured, cannot reconfigure
[  494.123522][T22184] openvswitch: netlink: Flow key attr not present in new flow.
[  494.365648][T22196] veth0_to_bond: default FDB implementation only supports local addresses
[  494.763746][T22212] syzkaller1: entered promiscuous mode
[  494.763771][T22212] syzkaller1: entered allmulticast mode
[  494.783354][T22217] trusted_key: syz.2.3972 sent an empty control message without MSG_MORE.
[  495.693424][T22254] sctp: [Deprecated]: syz.4.3980 (pid 22254) Use of int in maxseg socket option.
[  495.693424][T22254] Use struct sctp_assoc_value instead
[  495.806944][T22258] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  496.298710][T22284] __nla_validate_parse: 7 callbacks suppressed
[  496.298732][T22284] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.3989'.
[  496.324931][T22279] lo speed is unknown, defaulting to 1000
[  496.827939][T22292] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  497.023195][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3996'.
[  497.023976][T22305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3996'.
[  497.132858][T22315] bridge2: port 1(erspan0) entered blocking state
[  497.134647][T22315] bridge2: port 1(erspan0) entered disabled state
[  497.134814][T22315] erspan0: entered allmulticast mode
[  497.170620][T22315] erspan0: entered promiscuous mode
[  497.234134][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3999'.
[  497.931677][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'.
[  497.952138][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'.
[  497.983032][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'.
[  497.983261][T22351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4006'.
[  498.108000][T22346] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4005'.
[  498.325713][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'.
[  498.591546][T22375] xt_IDLETIMER: timeout value is zero
[  498.990650][T22394] batadv_slave_0: entered promiscuous mode
[  498.990758][T22387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.070181][T22397] macvtap1: entered promiscuous mode
[  499.070203][T22397] bond2: entered promiscuous mode
[  499.071235][T22397] macvtap1: entered allmulticast mode
[  499.071251][T22397] bond2: entered allmulticast mode
[  499.071772][T22397] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  499.172415][T22392] batadv_slave_0: left promiscuous mode
[  499.665992][T22424] xt_TCPMSS: Only works on TCP SYN packets
[  501.225507][T22509] IPv6: NLM_F_CREATE should be specified when creating new route
[  501.243999][T22508] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  501.353660][   T52] Bluetooth: hci5: ISO packet for unknown connection handle 2723
[  501.459289][T22515] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  501.592487][T22520] __nla_validate_parse: 6 callbacks suppressed
[  501.592506][T22520] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4056'.
[  501.597280][T22520] validate_nla: 60 callbacks suppressed
[  501.597298][T22520] netlink: 'syz.4.4056': attribute type 4 has an invalid length.
[  501.935215][T22539] netlink: 'syz.2.4060': attribute type 39 has an invalid length.
[  502.025320][T22546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4064'.
[  502.274637][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'.
[  502.285153][T22554] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[  502.305951][T22549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4065'.
[  502.853564][T22585] netlink: 'syz.1.4074': attribute type 2 has an invalid length.
[  502.904383][T22582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4072'.
[  502.905903][T22590] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4071'.
[  502.905926][T22590] nbd: illegal input index 65508
[  503.876685][T22622] syz_tun: entered allmulticast mode
[  503.913821][T22622] pimreg: entered allmulticast mode
[  503.916237][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4082'.
[  503.942937][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4083'.
[  503.984246][T22616] syz_tun: left allmulticast mode
[  503.984378][T22616] pimreg: left allmulticast mode
[  504.094633][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'.
[  504.164053][T22630] netlink: Unknown nat attribute (0)
[  504.164088][T22630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.346954][T22638] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  504.628246][T22653] Cannot find del_set index 4 as target
[  504.674203][T22652] netlink: 'syz.0.4094': attribute type 21 has an invalid length.
[  504.674224][T22652] netlink: 'syz.0.4094': attribute type 22 has an invalid length.
[  504.674237][T22652] netlink: 'syz.0.4094': attribute type 23 has an invalid length.
[  504.674250][T22652] netlink: 'syz.0.4094': attribute type 25 has an invalid length.
[  504.674263][T22652] netlink: 'syz.0.4094': attribute type 26 has an invalid length.
[  504.674276][T22652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4094'.
[  504.875431][T22659] bond1 (unregistering): Released all slaves
[  505.017512][T22667] bond1 (unregistering): Released all slaves
[  505.504962][T22697] netlink: Unknown NAT attribute (type=2049, max=9)
[  505.505003][T22697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  505.557686][T22699] netlink: 'syz.2.4103': attribute type 1 has an invalid length.
[  505.814516][T22711] tipc: Started in network mode
[  505.814548][T22711] tipc: Node identity 9ec900ba63c, cluster identity 4711
[  505.814818][T22711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.965919][T22716] syzkaller0: mtu less than device minimum
[  506.422398][T22740] batman_adv: batadv0: Adding interface: dvmrp0
[  506.422419][T22740] batman_adv: batadv0: The MTU of interface dvmrp0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.422449][T22740] batman_adv: batadv0: Not using interface dvmrp0 (retrying later): interface not active
[  506.584068][ T8172] tipc: Subscription rejected, illegal request
[  506.930559][ T5722] tipc: Node number set to 4245225658
[  507.206845][T22788] __nla_validate_parse: 15 callbacks suppressed
[  507.206867][T22788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4125'.
[  507.206888][T22788] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4125'.
[  507.827877][T22807] ªªªªª»: renamed from dummy0 (while UP)
[  508.038291][T22818] sit0: entered promiscuous mode
[  508.058645][T22818] netlink: 'syz.0.4133': attribute type 1 has an invalid length.
[  508.060439][T22818] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4133'.
[  508.106520][T22824] netlink: 'syz.0.4133': attribute type 1 has an invalid length.
[  508.106544][T22824] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4133'.
[  508.387321][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4138'.
[  508.402169][T22835] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4137'.
[  508.477681][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4136'.
[  508.479058][T22832] bridge_slave_1: left allmulticast mode
[  508.479080][T22832] bridge_slave_1: left promiscuous mode
[  508.479311][T22832] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.536829][T22832] bridge_slave_0: left allmulticast mode
[  508.536857][T22832] bridge_slave_0: left promiscuous mode
[  508.537092][T22832] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.802090][T22839] netlink: 'syz.3.4139': attribute type 2 has an invalid length.
[  508.823132][T22853] netlink: 'syz.3.4139': attribute type 2 has an invalid length.
[  509.053134][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'.
[  509.056182][T22862] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.056787][T22862] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.139092][T22862] netlink: 'syz.1.4144': attribute type 1 has an invalid length.
[  509.286105][T22875] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4147'.
[  509.307994][T22871] IPVS: length: 24 != 135192
[  509.327389][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4144'.
[  509.440687][T22876] geneve0: entered allmulticast mode
[  510.254175][T22906] netlink: 'syz.3.4154': attribute type 2 has an invalid length.
[  510.337507][T22906] : entered promiscuous mode
[  510.910497][T22930] bridge0: port 1(batadv1) entered blocking state
[  510.911600][T22930] bridge0: port 1(batadv1) entered disabled state
[  510.911927][T22930] batadv1: entered allmulticast mode
[  510.940212][T22930] batadv1: entered promiscuous mode
[  511.197947][T22946] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  511.219250][T22946] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  511.227078][T22951] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  511.228368][T22946] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  511.269035][   T31] audit: type=1800 audit(1791085057.071:13): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4166" name="memory.events" dev="tmpfs" ino=787 res=0 errno=0
[  511.381622][ T3391] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  511.381643][ T3391] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  511.793075][T22974] ip_tables: iptables: counters copy to user failed while replacing table
[  512.263687][T22978] netlink: Failed to add  helper -22
[  512.263751][T22978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.272173][T22985] __nla_validate_parse: 6 callbacks suppressed
[  512.272193][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4173'.
[  512.272208][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4173'.
[  512.334020][T22980] netlink: 'syz.2.4173': attribute type 10 has an invalid length.
[  512.386919][T22982] netlink: Failed to add  helper -22
[  512.387923][T22982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.385838][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4178'.
[  513.750856][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'.
[  514.246774][T23048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4189'.
[  514.366190][T23068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4189'.
[  514.636495][T23072] bridge0: port 3(syz_tun) entered blocking state
[  514.637348][T23072] bridge0: port 3(syz_tun) entered disabled state
[  514.637526][T23072] syz_tun: entered allmulticast mode
[  514.762850][T23084] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes.
[  514.915401][T23087] ip6t_rt: unknown flags 36
[  515.394384][T23106] syzkaller0: entered promiscuous mode
[  515.394409][T23106] syzkaller0: entered allmulticast mode
[  515.444784][T23106] simple: /dev/video#_3
[  515.444805][T23106] simple: /dev/video#_6
[  515.444815][T23106] simple: /dev/video#_9
[  515.444825][T23106] simple: /dev/video#_12
[  515.444836][T23106] simple: /dev/video#_15
[  515.444845][T23106] simple: /dev/video#_18
[  515.444855][T23106] simple: /dev/video#_21
[  515.444865][T23106] simple: /dev/video#_24
[  515.444875][T23106] simple: /dev/video#_27
[  515.444884][T23106] simple: /dev/video#_30
[  515.444894][T23106] simple: /dev/video#_33
[  515.444904][T23106] simple: /dev/video#_36
[  515.444914][T23106] simple: /dev/video#_39
[  515.444923][T23106] simple: /dev/video#_42
[  515.444933][T23106] simple: /dev/video#_45
[  515.444942][T23106] simple: /dev/video#_48
[  515.444952][T23106] simple: /dev/video#_51
[  515.444962][T23106] simple: /dev/video#_54
[  515.444970][T23106] simple: /dev/video#_57
[  515.444980][T23106] simple: /dev/video#_60
[  515.444989][T23106] simple: /dev/video#_63
[  515.444999][T23106] simple: /dev/video#_66
[  515.445009][T23106] simple: /dev/video#_69
[  515.445019][T23106] simple: /dev/video#_72
[  515.445028][T23106] simple: /dev/video#_75
[  515.445038][T23106] simple: /dev/video#_78
[  515.445048][T23106] simple: /dev/video#_81
[  515.445057][T23106] simple: /dev/video#_84
[  515.445067][T23106] simple: /dev/video#_87
[  515.445076][T23106] simple: /dev/video#_90
[  515.445086][T23106] simple: /dev/video#_93
[  515.445095][T23106] simple: /dev/video#_96
[  516.158220][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  516.209150][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  516.258495][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  516.547105][T23151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4216'.
[  516.609060][T23154] syzkaller0: entered promiscuous mode
[  516.609083][T23154] syzkaller0: entered allmulticast mode
[  516.649823][ T8172] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  516.649869][ T8172] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  516.649902][ T8172] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  516.649934][ T8172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  517.054089][T23170] sctp: [Deprecated]: syz.4.4222 (pid 23170) Use of struct sctp_assoc_value in delayed_ack socket option.
[  517.054089][T23170] Use struct sctp_sack_info instead
[  517.515012][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.525252][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.540956][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.549204][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.551624][T23136] infiniband syz1: set active
[  517.559103][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.566859][T23190] netlink: 'syz.2.4226': attribute type 3 has an invalid length.
[  517.571432][T23136] infiniband syz1: added netdevsim0
[  517.668337][   T10] netdevsim0 speed is unknown, defaulting to 1000
[  517.762317][T23136] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  517.762358][T23136] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  517.762399][T23136] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  518.017300][T23136] RDS/IB: syz1: added
[  518.017359][T23136] smc: adding ib device syz1 with port count 1
[  518.017381][T23136] smc:    ib device syz1 port 1 has no pnetid
[  518.037550][   T10] netdevsim0 speed is unknown, defaulting to 1000
[  518.048998][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  518.371981][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'.
[  519.014956][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  519.085658][T23224] net_ratelimit: 1 callbacks suppressed
[  519.085679][T23224] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.758952][T23211] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  519.758977][T23211] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  519.932418][T23250] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  519.974719][T23250] netlink: 'syz.0.4235': attribute type 1 has an invalid length.
[  519.974744][T23250] netlink: 'syz.0.4235': attribute type 2 has an invalid length.
[  519.979518][T23250] netlink: 'syz.0.4235': attribute type 1 has an invalid length.
[  519.979540][T23250] netlink: 'syz.0.4235': attribute type 2 has an invalid length.
[  520.057480][T23250] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4235'.
[  520.184485][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  520.187508][T23211] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  520.187530][T23211] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  520.582906][T23211] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  520.582929][T23211] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  520.870335][ T8172] IPVS: starting estimator thread 0...
[  520.960154][T23273] IPVS: using max 37 ests per chain, 88800 per kthread
[  521.060078][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  521.084218][T23211] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  521.084240][T23211] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  521.234437][T23211] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  521.234460][T23211] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  521.985186][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4246'.
[  522.113897][T23312] team0 (unregistering): Port device team_slave_0 removed
[  522.212794][T23312] team0 (unregistering): Port device team_slave_1 removed
[  522.318046][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  522.669740][T23322] sctp: [Deprecated]: syz.1.4250 (pid 23322) Use of struct sctp_assoc_value in delayed_ack socket option.
[  522.669740][T23322] Use struct sctp_sack_info instead
[  522.746806][T23330] netlink: 'syz.0.4252': attribute type 1 has an invalid length.
[  522.905649][T23330] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.263648][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  524.194359][T23136] netdevsim0 speed is unknown, defaulting to 1000
[  525.126866][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4267'.
[  525.567371][T23421] syzkaller1: entered promiscuous mode
[  525.567396][T23421] syzkaller1: entered allmulticast mode
[  525.659316][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'.
[  525.784520][T23440] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4271'.
[  525.792658][T23436] syz_tun: entered allmulticast mode
[  525.831982][T23436] pimreg: entered allmulticast mode
[  525.841669][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'.
[  525.885917][T23436] simple: /dev/video#_1
[  525.885939][T23436] simple: /dev/video#_2
[  525.885949][T23436] simple: /dev/video#_3
[  525.885959][T23436] simple: /dev/video#_4
[  525.885968][T23436] simple: /dev/video#_5
[  525.885978][T23436] simple: /dev/video#_6
[  525.885987][T23436] simple: /dev/video#_7
[  525.885996][T23436] simple: /dev/video#_8
[  525.886005][T23436] simple: /dev/video#_9
[  525.886015][T23436] simple: /dev/video#_10
[  525.886029][T23436] simple: /dev/video#_11
[  525.886038][T23436] simple: /dev/video#_12
[  525.886048][T23436] simple: /dev/video#_13
[  525.886056][T23436] simple: /dev/video#_14
[  525.886066][T23436] simple: /dev/video#_15
[  525.886076][T23436] simple: /dev/video#_16
[  525.886085][T23436] simple: /dev/video#_17
[  525.886095][T23436] simple: /dev/video#_18
[  525.886104][T23436] simple: /dev/video#_19
[  525.886114][T23436] simple: /dev/video#_20
[  525.886124][T23436] simple: /dev/video#_21
[  525.886134][T23436] simple: /dev/video#_22
[  525.886143][T23436] simple: /dev/video#_23
[  525.886152][T23436] simple: /dev/video#_24
[  525.886162][T23436] simple: /dev/video#_25
[  525.886172][T23436] simple: /dev/video#_26
[  525.886182][T23436] simple: /dev/video#_27
[  525.886191][T23436] simple: /dev/video#_28
[  525.886201][T23436] simple: /dev/video#_29
[  525.886210][T23436] simple: /dev/video#_30
[  525.886220][T23436] simple: /dev/video#_31
[  525.886229][T23436] simple: /dev/video#_32
[  525.886240][T23436] TC_ACT_REPEAT abuse ?
[  525.933566][T23435] syz_tun: left allmulticast mode
[  525.933669][T23435] pimreg: left allmulticast mode
[  526.577495][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'.
[  526.704699][T23476] ip_tables: iptables: counters copy to user failed while replacing table
[  526.987549][T23481] netlink: 'syz.1.4283': attribute type 39 has an invalid length.
[  527.622386][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'.
[  528.647807][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4302'.
[  528.727493][T23550] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4303'.
[  528.750595][T23550] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.821136][T23550] smc: net device lo applied user defined pnetid SYZ0
[  528.821682][T23550] smc: smcd device lo applied user defined pnetid SYZ0
[  528.957489][T23561] netlink: 'syz.1.4306': attribute type 11 has an invalid length.
[  528.957512][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4306'.
[  529.001982][T23561] netlink: 'syz.1.4306': attribute type 11 has an invalid length.
[  529.002005][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4306'.
[  529.009525][  T183] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  529.026565][ T1139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  529.026616][ T1139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  529.026649][ T1139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  529.568012][T23573] can: request_module (can-proto-5) failed.
[  529.626599][T23581] bond2 (unregistering): Released all slaves
[  530.235571][T23609] 0: reclassify loop, rule prio 0, protocol 03
[  530.983793][T23634] netlink: 'syz.2.4323': attribute type 1 has an invalid length.
[  531.045392][T23634] 8021q: adding VLAN 0 to HW filter on device bond4
[  531.072461][T23638] __nla_validate_parse: 2 callbacks suppressed
[  531.072483][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'.
[  531.095681][T23636] netlink: 'syz.2.4323': attribute type 1 has an invalid length.
[  531.451993][T23656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4329'.
[  531.950303][T23670] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4333'.
[  532.208012][T23681] netlink: 'syz.3.4337': attribute type 3 has an invalid length.
[  532.208037][T23681] netlink: 'syz.3.4337': attribute type 1 has an invalid length.
[  532.208052][T23681] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4337'.
[  532.208074][T23681] NCSI netlink: No device for ifindex 813332851
[  532.253912][T23683] netlink: 'syz.2.4338': attribute type 1 has an invalid length.
[  532.341312][T23683] bond5: entered promiscuous mode
[  532.341832][T23683] 8021q: adding VLAN 0 to HW filter on device bond5
[  532.516726][T23691] bond5: (slave bridge3): making interface the new active one
[  532.516755][T23691] bridge3: entered promiscuous mode
[  532.534532][T23691] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  532.801980][T23702] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4344'.
[  533.110944][T23725] ip_tables: iptables: counters copy to user failed while replacing table
[  533.137549][T23727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4349'.
[  533.421403][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'.
[  533.421679][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'.
[  533.421905][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'.
[  533.423459][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4350'.
[  533.681631][T23752] netlink: 'syz.3.4354': attribute type 1 has an invalid length.
[  533.757432][T23752] 8021q: adding VLAN 0 to HW filter on device bond2
[  533.774828][T23750] netlink: 'syz.0.4353': attribute type 1 has an invalid length.
[  533.797787][T23754] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  533.991223][T23766] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.015142][T23766] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.015270][T23766] bridge0: port 2(bridge_slave_1) entered forwarding state
[  534.048667][T23766] bridge0: entered promiscuous mode
[  534.070629][T23766] team0: Port device bridge0 added
[  534.242987][T23779] ip_tables: iptables: counters copy to user failed while replacing table
[  534.357441][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.357692][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.383105][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.383340][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.385115][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.385361][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.386027][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.386234][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.386456][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.386653][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.386843][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.387049][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.387273][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.387458][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.387699][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.387897][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.389933][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.399017][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.401500][T23786] tipc: Started in network mode
[  534.401528][T23786] tipc: Node identity 92232063a86d, cluster identity 4711
[  534.402295][T23786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.407077][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.485002][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.524539][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.525344][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.527350][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.529242][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.536363][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.565661][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.568540][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.581861][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.600100][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.608684][T23785] syzkaller0: entered promiscuous mode
[  534.608710][T23785] syzkaller0: entered allmulticast mode
[  534.609306][T23785] tipc: Resetting bearer <eth:syzkaller0>
[  534.619025][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.634523][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.649445][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.769443][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.770694][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.773392][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.779955][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.791900][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.797490][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.800179][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.803290][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.814480][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.818744][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.825197][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.826862][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.835627][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.839918][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.846338][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.852413][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.858588][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.865658][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.956299][ T3391] tipc: Resetting bearer <eth:syzkaller0>
[  534.975917][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  534.987150][T23792] netlink: 'syz.0.4366': attribute type 1 has an invalid length.
[  535.040285][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.044284][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.063690][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.072847][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.073096][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.073768][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.074031][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.074229][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.074421][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.074619][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.075132][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.075375][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.076237][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.079084][T23782] Bluetooth: hci0: Opcode 0x080f failed: -22
[  535.218002][T23781] tipc: Resetting bearer <eth:syzkaller0>
[  535.238734][T23803] netlink: 'syz.1.4365': attribute type 1 has an invalid length.
[  535.516782][T23811] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  535.645146][T23813] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20001
[  536.255943][T23821] __nla_validate_parse: 38 callbacks suppressed
[  536.255964][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4373'.
[  537.291744][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.323501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.349693][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.055537][T23781] tipc: Disabling bearer <eth:syzkaller0>
[  540.150688][T23809] bond5: (slave bridge2): making interface the new active one
[  540.151162][T23809] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  540.151228][   T10] tipc: Node number set to 978198627
[  540.152641][T23818] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  540.338142][T23828] netlink: 'syz.4.4375': attribute type 4 has an invalid length.
[  540.338167][T23828] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4375'.
[  540.347468][T23828] .`: renamed from bond0
[  540.418719][T23830] batman_adv: batadv0: Adding interface: dummy0
[  540.418738][T23830] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  540.418767][T23830] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  540.470059][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.563150][T23840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4379'.
[  540.574928][T23840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4379'.
[  540.829566][T23848] x_tables: unsorted entry at hook 1
[  540.850738][T23849] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  540.870899][T23849] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4383'.
[  540.873198][T23851] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4381'.
[  540.888915][T23849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4383'.
[  540.911593][T23849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4383'.
[  541.167035][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4385'.
[  541.244683][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244683][T23874] Use struct sctp_sack_info instead
[  541.244718][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244718][T23874] Use struct sctp_sack_info instead
[  541.244743][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244743][T23874] Use struct sctp_sack_info instead
[  541.244768][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244768][T23874] Use struct sctp_sack_info instead
[  541.244793][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244793][T23874] Use struct sctp_sack_info instead
[  541.244816][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244816][T23874] Use struct sctp_sack_info instead
[  541.244841][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244841][T23874] Use struct sctp_sack_info instead
[  541.244865][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244865][T23874] Use struct sctp_sack_info instead
[  541.244890][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244890][T23874] Use struct sctp_sack_info instead
[  541.244914][T23874] sctp: [Deprecated]: syz.3.4388 (pid 23874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.244914][T23874] Use struct sctp_sack_info instead
[  541.510148][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.870967][ T1139] tipc: Subscription rejected, illegal request
[  541.876612][T23896] netlink: 'syz.0.4394': attribute type 23 has an invalid length.
[  541.982453][T23907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4396'.
[  541.984145][T23906] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  542.041130][T23906] openvswitch: netlink: nsh attr 350 is out of range max 3
[  542.550090][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.397519][T23955] Cannot find set identified by id 4 to match
[  543.709287][T23970] netlink: 'syz.0.4410': attribute type 1 has an invalid length.
[  543.709313][T23970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4410'.
[  543.771996][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4411'.
[  543.772028][T23972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4411'.
[  544.212694][T23987] syzkaller0: left promiscuous mode
[  544.212717][T23987] syzkaller0: left allmulticast mode
[  544.449590][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'.
[  544.549918][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.958151][T24015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4422'.
[  545.105701][T24026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4422'.
[  545.105724][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4422'.
[  545.122007][T24026] netlink: 'syz.4.4422': attribute type 4 has an invalid length.
[  545.122029][T24026] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4422'.
[  545.352137][T24031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4426'.
[  545.589699][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.998947][T24069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.147536][T24069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.247331][T24072] erspan0: entered promiscuous mode
[  546.629596][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.227577][T24118] __nla_validate_parse: 9 callbacks suppressed
[  547.227597][T24118] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4453'.
[  547.322603][T24122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4453'.
[  548.629737][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.966493][T24188] sock: sock_set_timeout: `syz.3.4469' (pid 24188) tries to set negative timeout
[  549.054071][T24194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4472'.
[  549.202144][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.227926][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.289140][T24198] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.311111][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'.
[  549.567718][T24212] netlink: 'syz.3.4477': attribute type 23 has an invalid length.
[  549.639848][T24215] atomic_op ffff8880317761e0 conn xmit_atomic 0000000000000000
[  549.669840][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.709700][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.402307][T24253] netlink: 'syz.2.4485': attribute type 1 has an invalid length.
[  551.456826][T24253] bond6: entered promiscuous mode
[  551.457425][T24253] 8021q: adding VLAN 0 to HW filter on device bond6
[  551.582621][T24265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4489'.
[  551.582658][T24265] netlink: 'syz.0.4489': attribute type 7 has an invalid length.
[  551.582671][T24265] netlink: 'syz.0.4489': attribute type 8 has an invalid length.
[  551.582684][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'.
[  551.637083][T24265] 
: entered promiscuous mode
[  551.637107][T24265] bond_slave_0: entered promiscuous mode
[  551.637349][T24265] bond_slave_1: entered promiscuous mode
[  551.661092][T24265] 
: left promiscuous mode
[  551.661115][T24265] bond_slave_0: left promiscuous mode
[  551.661326][T24265] bond_slave_1: left promiscuous mode
[  551.684910][T24268] netlink: 'syz.4.4490': attribute type 10 has an invalid length.
[  551.822554][T24268] veth0_vlan: entered allmulticast mode
[  551.824010][T24268] veth0_vlan: left promiscuous mode
[  551.824965][T24273] netlink: 'syz.3.4492': attribute type 21 has an invalid length.
[  551.830565][T24268] team0: Device veth0_vlan failed to register rx_handler
[  551.909668][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'.
[  551.957191][T24273] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  551.959337][T24273] bond3 (unregistering): Released all slaves
[  552.260565][T24285] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  552.384300][T24293] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4494'.
[  552.434656][T24293] ip_tables: iptables: counters copy to user failed while replacing table
[  552.689267][ T3391] bridge_slave_0: left allmulticast mode
[  552.689294][ T3391] bridge_slave_0: left promiscuous mode
[  552.702969][ T3391] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.806426][ T3391] pimreg: left allmulticast mode
[  552.829305][ T3391] batman_adv: batadv0: Interface deactivated: syzkaller0
[  554.111897][ T3391] batman_adv: batadv0: Removing interface: syzkaller0
[  554.195716][ T3391] bond2 (unregistering): (slave bridge4): Releasing backup interface
[  554.234553][ T3391] bond5 (unregistering): (slave bridge8): Releasing backup interface
[  554.234580][ T3391] bridge8 (unregistering): left promiscuous mode
[  554.234600][ T3391] bridge8 (unregistering): left allmulticast mode
[  554.307056][ T3391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  554.321052][ T3391] bond0 (unregistering): Released all slaves
[  554.328037][ T3391] bond1 (unregistering): Released all slaves
[  554.354996][ T3391] bond2 (unregistering): Released all slaves
[  554.384249][ T3391] bond3 (unregistering): Released all slaves
[  554.407277][ T3391] bond4 (unregistering): Released all slaves
[  554.452022][ T3391] bond5 (unregistering): Released all slaves
[  554.474153][ T3391] bond6 (unregistering): Released all slaves
[  554.923390][T24336] macvtap2: entered promiscuous mode
[  554.923414][T24336] hsr0: entered promiscuous mode
[  554.923806][T24336] macvtap2: entered allmulticast mode
[  554.923821][T24336] hsr0: entered allmulticast mode
[  554.923834][T24336] hsr_slave_0: entered allmulticast mode
[  554.923849][T24336] hsr_slave_1: entered allmulticast mode
[  554.973067][ T3391] : left promiscuous mode
[  555.094529][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'.
[  555.127491][ T3391] tipc: Disabling bearer <udp:syz0>
[  555.140675][ T3391] tipc: Left network mode
[  555.171750][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'.
[  555.571108][T24360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4514'.
[  555.645404][T24366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4516'.
[  555.794117][T24375] netlink: 'syz.3.4519': attribute type 12 has an invalid length.
[  556.132894][T24384] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4523'.
[  556.747731][T24402] bond7: Removing last arp target with arp_interval on
[  557.120800][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.125793][T24418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4533'.
[  557.538567][T24428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4534'.
[  557.538599][T24428] bridge: RTM_NEWNEIGH with invalid ether address
[  557.540639][ T8172] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  557.578323][T24428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4534'.
[  557.578348][T24428] bridge: RTM_NEWNEIGH with invalid ether address
[  557.701421][T24432] netlink: 'syz.0.4534': attribute type 1 has an invalid length.
[  557.701447][T24432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4534'.
[  558.055896][T24442] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4539'.
[  558.149702][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.697385][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'.
[  558.894866][ T3391] hsr_slave_0: left promiscuous mode
[  558.897523][ T3391] hsr_slave_1: left promiscuous mode
[  558.918069][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  558.918259][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_0
[  558.951062][ T3391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  558.951250][ T3391] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.147917][ T3391] veth0_macvtap: left allmulticast mode
[  559.148269][ T3391] veth0_macvtap: left promiscuous mode
[  559.166961][ T3391] veth1_vlan: left promiscuous mode
[  559.168568][ T3391] v: left promiscuous mode
[  559.189594][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.964075][ T3391] team0 (unregistering): Port device team_slave_1 removed
[  562.043778][ T3391] team0 (unregistering): Port device team_slave_0 removed
[  562.737196][T24487] ip6_vti0: mtu greater than device maximum
[  562.740042][T24491] netlink: 'syz.3.4551': attribute type 12 has an invalid length.
[  563.243571][T24519] netlink: 'syz.2.4555': attribute type 83 has an invalid length.
[  564.339184][ T3391] IPVS: stop unused estimator thread 0...
[  564.660580][T24550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4560'.
[  564.771112][T24558] netlink: 872 bytes leftover after parsing attributes in process `syz.3.4562'.
[  564.773657][T24557] netlink: 872 bytes leftover after parsing attributes in process `syz.3.4562'.
[  565.228716][T24572] ip_tables: iptables: counters copy to user failed while replacing table
[  565.677108][T24577] netlink: 'syz.0.4565': attribute type 10 has an invalid length.
[  565.934205][T24577] team0: Device veth0_macvtap failed to register rx_handler
[  566.124525][T24587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4567'.
[  566.124555][T24587] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4567'.
[  566.124570][T24587] netlink: 'syz.3.4567': attribute type 5 has an invalid length.
[  566.124584][T24587] netlink: 'syz.3.4567': attribute type 6 has an invalid length.
[  566.124598][T24587] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4567'.
[  566.299919][T24595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4570'.
[  566.477456][T24604] Cannot find add_set index 2 as target
[  566.477883][T24603] Cannot find add_set index 2 as target
[  566.615891][T24604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4571'.
[  566.926940][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4571'.
[  567.741812][T24632] syzkaller0: entered promiscuous mode
[  567.741870][T24632] syzkaller0: entered allmulticast mode
[  568.728039][T24660] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  568.739664][T24658] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  568.893190][T24658] xt_l2tp: missing protocol rule (udp|l2tpip)
[  568.927834][T24662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4588'.
[  569.003182][T24660] netlink: 'syz.1.4587': attribute type 1 has an invalid length.
[  569.461519][T24679] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available
[  569.678550][T24693] openvswitch: netlink: Invalid VLAN frame
[  569.908039][T24688] netlink: 'syz.1.4593': attribute type 12 has an invalid length.
[  569.921754][T24689] netlink: 'syz.1.4593': attribute type 12 has an invalid length.
[  569.972199][T24706] __nla_validate_parse: 1 callbacks suppressed
[  569.972237][T24706] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4593'.
[  570.009300][T24707] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4593'.
[  570.236716][T24688] bond6: option primary_reselect: invalid value (255)
[  570.268894][T24688] bond6 (unregistering): Released all slaves
[  570.482995][T24689] bond6: option primary_reselect: invalid value (255)
[  570.685025][T24689] bond6 (unregistering): Released all slaves
[  571.800745][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4603'.
[  571.817377][T24750] No such timeout policy "syz0"
[  572.008689][T24755] netlink: 'syz.2.4604': attribute type 21 has an invalid length.
[  572.008957][T24755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4604'.
[  572.147014][T24761] ip_tables: iptables: counters copy to user failed while replacing table
[  572.273437][T24767] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4607'.
[  573.337346][T24789] nftables ruleset with unbound chain
[  573.749843][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.220300][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4618'.
[  574.708046][T24822] netlink: 'syz.3.4621': attribute type 32 has an invalid length.
[  574.733428][T24822] lo speed is unknown, defaulting to 1000
[  574.733490][T24822] lo speed is unknown, defaulting to 1000
[  574.734417][T24822] lo speed is unknown, defaulting to 1000
[  574.745448][T24822] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  574.745485][T24822] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  574.745523][T24822] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  574.791565][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.020822][T24822] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  575.364039][T24822] lo speed is unknown, defaulting to 1000
[  575.394515][T24822] lo speed is unknown, defaulting to 1000
[  575.442784][T24822] lo speed is unknown, defaulting to 1000
[  575.454915][T24822] lo speed is unknown, defaulting to 1000
[  575.484409][T24822] lo speed is unknown, defaulting to 1000
[  575.526494][T24822] lo speed is unknown, defaulting to 1000
[  575.829639][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.985326][T24845] syzkaller1: entered promiscuous mode
[  575.985374][T24845] syzkaller1: entered allmulticast mode
[  576.604522][T24865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4631'.
[  577.055328][T24872] ip_tables: iptables: counters copy to user failed while replacing table
[  578.033551][T24902] ip_tables: iptables: counters copy to user failed while replacing table
[  578.135581][T24907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4637'.
[  578.402345][T24913] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  578.402420][T24913] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  578.402492][T24913] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  578.998293][T24928] veth0: entered promiscuous mode
[  579.370707][T24930] siw: device registration error -23
[  579.385223][T24930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4642'.
[  579.598513][T24927] veth0: left promiscuous mode
[  580.565305][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4649'.
[  580.565330][T24967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4649'.
[  580.893171][T24973] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4650'.
[  581.082401][T24973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'.
[  582.163739][T24991] netlink: 'syz.1.4656': attribute type 1 has an invalid length.
[  582.163780][T24991] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4656'.
[  582.650199][T24998] openvswitch: netlink: Message has 1 unknown bytes.
[  585.324946][T25033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4666'.
[  585.802340][T25076] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4675'.
[  585.956751][T25078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4676'.
[  586.018383][T25085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4677'.
[  586.326259][T25085] bond8 (unregistering): Released all slaves
[  586.340707][T25090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4678'.
[  587.143033][T25105] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4682'.
[  587.533933][T25109] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  587.871610][T25128] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  587.871682][T25128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.995640][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'.
[  588.634572][T25141] syzkaller0: entered promiscuous mode
[  588.634629][T25141] syzkaller0: entered allmulticast mode
[  588.932972][T25145] netlink: 'syz.2.4687': attribute type 11 has an invalid length.
[  588.933030][T25145] netlink: 'syz.2.4687': attribute type 4 has an invalid length.
[  588.933062][T25145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4687'.
[  589.348834][T25162] ip6t_srh: unknown srh match flags  4000
[  589.483792][T25155] syzkaller1: entered promiscuous mode
[  589.483847][T25155] syzkaller1: entered allmulticast mode
[  589.574647][T25166] netlink: 'syz.0.4691': attribute type 10 has an invalid length.
[  589.934880][T25176] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4693'.
[  590.038355][T25166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  590.190578][T25179] netlink: 'syz.2.4694': attribute type 1 has an invalid length.
[  590.708712][T25179] 8021q: adding VLAN 0 to HW filter on device bond8
[  590.919290][T25188] macvlan1: entered promiscuous mode
[  590.919335][T25188] macvlan1: entered allmulticast mode
[  591.478436][T25195] netlink: 'syz.3.4697': attribute type 5 has an invalid length.
[  591.712701][T25209] ip_tables: iptables: counters copy to user failed while replacing table
[  591.791052][T25204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4698'.
[  591.828825][T25210] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  592.597147][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4705'.
[  592.772471][T25235] erspan0: entered promiscuous mode
[  592.806918][T25240] syzkaller0: entered promiscuous mode
[  592.806960][T25240] syzkaller0: entered allmulticast mode
[  593.156916][T25252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4712'.
[  594.630938][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'.
[  594.630967][T25289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4723'.
[  594.630984][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'.
[  594.632727][T25289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4723'.
[  594.632748][T25289] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4723'.
[  595.226960][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'.
[  595.636745][T25316] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  598.293822][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4738'.
[  598.327213][T25375] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4740'.
[  598.523315][T25378] netlink: 'syz.3.4740': attribute type 1 has an invalid length.
[  598.523338][T25378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4740'.
[  600.178918][T25400] ip_tables: iptables: counters copy to user failed while replacing table
[  600.212143][T25400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4745'.
[  600.244220][T25400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'.
[  600.363191][T25400] macvtap3: entered promiscuous mode
[  600.365873][T25400] macvtap3: entered allmulticast mode
[  601.250349][T25423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  602.200350][T25458] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4757'.
[  602.286301][T25460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4758'.
[  602.286328][T25460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4758'.
[  602.286342][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4758'.
[  602.686748][T25473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4762'.
[  602.840253][T25477] nbd: socks must be embedded in a SOCK_ITEM attr
[  602.952591][T25476] syzkaller0: left promiscuous mode
[  602.952798][T25476] syzkaller0: left allmulticast mode
[  603.312454][T25497] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4766'.
[  603.834802][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.969229][T25492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4766'.
[  605.600231][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4774'.
[  605.689870][T25542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.272385][T25554] xt_hashlimit: overflow, try lower: 3/0
[  606.390331][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.528052][   T31] audit: type=1804 audit(1791085152.331:14): pid=25562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4780" name="/newroot/358/cgroup.controllers" dev="tmpfs" ino=1855 res=1 errno=0
[  606.585581][   T31] audit: type=1800 audit(1791085152.391:15): pid=25562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4780" name="cgroup.controllers" dev="tmpfs" ino=1855 res=0 errno=0
[  607.098011][T25574] syzkaller1: entered promiscuous mode
[  607.098205][T25574] syzkaller1: entered allmulticast mode
[  607.335869][T25587] ip6t_srh: unknown srh invflags 4000
[  607.430052][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.558730][T25596] xt_ecn: cannot match TCP bits for non-tcp packets
[  607.567337][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4788'.
[  608.253864][T25612] netlink: 'syz.3.4790': attribute type 1 has an invalid length.
[  608.402857][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'.
[  608.402904][T25623] block nbd0: Unsupported socket: should be TCP or UNIX.
[  608.457619][T25621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4792'.
[  608.457645][T25621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4792'.
[  608.469719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.654196][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4795'.
[  608.654272][T25632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4795'.
[  608.826140][T25622] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  608.898797][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4790'.
[  609.073939][T25641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4798'.
[  609.146032][T25612] veth5: entered promiscuous mode
[  609.163033][T25638] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4796'.
[  609.163079][T25638] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  609.366429][T25612] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  609.693769][T25636] bond7: option packets_per_slave: invalid value (18446744073709551615)
[  609.693829][T25636] bond7: option packets_per_slave: allowed values 0 - 65535
[  609.730692][T25636] bond7 (unregistering): Released all slaves
[  610.058381][  T182] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  610.131664][T25622] 8021q: adding VLAN 0 to HW filter on device bond3
[  610.234913][ T3391] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  610.324572][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4796'.
[  610.545699][T25664] syzkaller0: entered promiscuous mode
[  610.545756][T25664] syzkaller0: entered allmulticast mode
[  611.019306][T25686] netlink: 5632 bytes leftover after parsing attributes in process `syz.2.4805'.
[  612.316749][T25716] ip_tables: iptables: counters copy to user failed while replacing table
[  612.339798][T25712] netlink: 'syz.2.4810': attribute type 1 has an invalid length.
[  612.364147][T25712] netlink: 'syz.2.4810': attribute type 1 has an invalid length.
[  612.398644][T25693] syzkaller0: entered promiscuous mode
[  612.398712][T25693] syzkaller0: entered allmulticast mode
[  618.168359][T25712] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  618.178184][T25735] netlink: 'syz.2.4810': attribute type 1 has an invalid length.
[  618.178225][T25735] __nla_validate_parse: 1 callbacks suppressed
[  618.178254][T25735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4810'.
[  618.178287][T25735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'.
[  618.385000][T25723] bond9 (unregistering): Released all slaves
[  618.703174][T25732] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  619.346122][T25755] netlink: 'syz.2.4820': attribute type 1 has an invalid length.
[  619.421902][T25757] netlink: 'syz.0.4818': attribute type 10 has an invalid length.
[  619.510994][T25761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4818'.
[  619.540561][T25763] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4820'.
[  619.573716][T25767] netlink: 'syz.0.4818': attribute type 10 has an invalid length.
[  619.822626][T25755] 8021q: adding VLAN 0 to HW filter on device bond9
[  619.970513][T25763] bond9: (slave geneve2): making interface the new active one
[  619.995085][T25763] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  620.505030][T25785] veth3: entered promiscuous mode
[  620.505232][T25785] veth3: entered allmulticast mode
[  620.857935][T25796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4825'.
[  620.920001][T25801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4825'.
[  622.434906][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4837'.
[  622.518447][T25832] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  623.046453][T25857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4839'.
[  623.076916][T25858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4838'.
[  623.124978][T25858] netlink: 'syz.4.4838': attribute type 16 has an invalid length.
[  623.125003][T25858] netlink: 'syz.4.4838': attribute type 17 has an invalid length.
[  623.225830][T25858] gretap0: entered promiscuous mode
[  623.246260][T25858] bridge2: port 1(erspan0) entered blocking state
[  623.248197][T25858] bridge2: port 1(erspan0) entered forwarding state
[  623.347233][T25858] 8021q: adding VLAN 0 to HW filter on device team0
[  623.368988][T25858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.411597][T25866] netlink: 'syz.3.4841': attribute type 1 has an invalid length.
[  623.704149][T25858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.752486][T25858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.876316][T25858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  623.876363][T25858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  623.924516][T25858] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  623.926730][   T30] lo speed is unknown, defaulting to 1000
[  623.926979][   T30] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE
[  623.966755][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.966933][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.993952][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.994133][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.339528][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  624.661444][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  624.666051][    C0] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  624.848285][T25885] netlink: 'syz.2.4846': attribute type 1 has an invalid length.
[  625.332495][T25890] bond10: (slave veth0_to_bond): making interface the new active one
[  625.337699][T25890] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  625.444675][T25891] macvlan1: entered promiscuous mode
[  625.444716][T25891] macvlan1: entered allmulticast mode
[  625.446318][T25891] bond10: entered promiscuous mode
[  625.446353][T25891] veth0_to_bond: entered promiscuous mode
[  625.476650][T25891] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  625.477603][T25891] bond10: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  625.477688][T25891] bond10: left promiscuous mode
[  625.477708][T25891] veth0_to_bond: left promiscuous mode
[  626.385311][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'.
[  626.463579][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4857'.
[  626.463607][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4857'.
[  626.515244][T25927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4858'.
[  626.515268][T25927] bridge: RTM_NEWNEIGH with invalid ether address
[  626.516905][T25924] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4857'.
[  626.516927][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4857'.
[  626.582807][T25931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4857'.
[  626.972007][T25946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4859'.
[  627.009627][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'.
[  627.499259][T25955] netlink: 'syz.4.4866': attribute type 1 has an invalid length.
[  627.584583][T25958] netlink: 'syz.0.4867': attribute type 153 has an invalid length.
[  628.005724][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'.
[  628.067512][T25966] netlink: 'syz.3.4871': attribute type 1 has an invalid length.
[  628.067535][T25966] netlink: 'syz.3.4871': attribute type 3 has an invalid length.
[  628.397654][T25979] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  628.619136][T25979] 8021q: adding VLAN 0 to HW filter on device bond7
[  628.694868][T25986] bond7: (slave geneve2): making interface the new active one
[  628.740052][T25986] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  629.174742][T26001] netlink: 'syz.0.4880': attribute type 1 has an invalid length.
[  629.233941][T26002] netlink: 'syz.0.4880': attribute type 1 has an invalid length.
[  629.305650][T26007] netlink: 'syz.2.4882': attribute type 1 has an invalid length.
[  629.614244][T26008] 8021q: adding VLAN 0 to HW filter on device bond11
[  629.728303][T26010] macvlan1: entered promiscuous mode
[  629.728487][T26010] macvlan1: entered allmulticast mode
[  629.740691][T26010] bond11: entered promiscuous mode
[  629.752350][T26010] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  629.808485][T26010] bond11: left promiscuous mode
[  629.905916][T26025] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  630.378473][T26013] veth5: entered allmulticast mode
[  630.702035][T26026] team0 (unregistering): Port device team_slave_0 removed
[  630.839166][T26026] team0 (unregistering): Port device team_slave_1 removed
[  630.896163][T26026] team0 (unregistering): Port device dummy0 removed
[  631.673962][T26066] __nla_validate_parse: 7 callbacks suppressed
[  631.673997][T26066] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4891'.
[  631.707830][T26067] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4891'.
[  632.235361][T26076] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4892'.
[  632.237721][T26074] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4892'.
[  632.275962][T26063] syzkaller1: entered promiscuous mode
[  632.276004][T26063] syzkaller1: entered allmulticast mode
[  632.495055][T26090] netlink: 'syz.4.4897': attribute type 1 has an invalid length.
[  632.495129][T26090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.650726][T26090] netlink: 'syz.4.4897': attribute type 1 has an invalid length.
[  632.650971][T26090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  633.001829][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4898'.
[  633.003270][T26108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4898'.
[  633.009211][T26109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4898'.
[  633.653549][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4902'.
[  633.960780][T26123] bridge0: port 4(bond0) entered blocking state
[  633.962192][T26123] bridge0: port 4(bond0) entered disabled state
[  633.962553][T26123] bond0: entered allmulticast mode
[  633.962588][T26123] batadv1: entered allmulticast mode
[  634.057686][T26123] bond0: entered promiscuous mode
[  634.057744][T26123] batadv1: entered promiscuous mode
[  634.120499][T26131] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4906'.
[  634.641127][ T8175] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  634.641149][ T8175] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  634.933072][T26144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4908'.
[  635.216486][T26151] tipc: Failed to remove unknown binding: 66,0,0/0:3221673292/3221673294
[  635.246904][T26151] tipc: Failed to remove unknown binding: 66,0,0/0:3221673292/3221673293
[  635.250919][T26151] tipc: Failed to remove unknown binding: 66,0,0/0:3221673292/3221673294
[  635.251101][T26151] tipc: Failed to remove unknown binding: 66,0,0/0:3221673292/3221673293
[  636.698187][T26182] __nla_validate_parse: 4 callbacks suppressed
[  636.698236][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'.
[  636.764507][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'.
[  637.205974][T26190] netlink: 'syz.0.4920': attribute type 10 has an invalid length.
[  637.206060][T26190] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[  637.748357][T26195] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4921'.
[  637.859184][T26199] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4923'.
[  637.984931][T26200] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4922'.
[  638.230719][T26209] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4926'.
[  638.769183][T26214] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  639.088013][T26228] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4932'.
[  639.088042][T26228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'.
[  639.088060][T26228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'.
[  639.088076][T26228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4932'.
[  639.444354][T26231] tipc: New replicast peer: 172.20.20.187
[  639.467159][T26231] tipc: Enabled bearer <udp:syz0>, priority 10
[  639.923392][T26245] sctp: [Deprecated]: syz.4.4936 (pid 26245) Use of int in max_burst socket option deprecated.
[  639.923392][T26245] Use struct sctp_assoc_value instead
[  641.012729][T26282] netlink: 'syz.3.4948': attribute type 23 has an invalid length.
[  641.183962][T26285] tipc: Invalid UDP bearer configuration
[  641.184057][T26285] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  641.187601][T26288] netlink: 'syz.3.4948': attribute type 23 has an invalid length.
[  642.928442][T26311] __nla_validate_parse: 2 callbacks suppressed
[  642.928482][T26311] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4956'.
[  643.071297][T26315] netlink: 'syz.2.4958': attribute type 1 has an invalid length.
[  643.071322][T26315] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4958'.
[  643.071339][T26315] netlink: 'syz.2.4958': attribute type 1 has an invalid length.
[  643.071352][T26315] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.4958'.
[  643.575833][T26321] netlink: 'syz.2.4960': attribute type 4 has an invalid length.
[  644.131430][T26328] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4962'.
[  644.131490][T26328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4962'.
[  644.131630][T26330] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4962'.
[  644.131645][T26330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4962'.
[  644.132440][T26298] syzkaller1: entered promiscuous mode
[  644.132476][T26298] syzkaller1: entered allmulticast mode
[  644.509085][T26333] xt_hashlimit: invalid interval
[  644.647511][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4965'.
[  645.389310][T26357] vlan0: entered promiscuous mode
[  645.389364][T26357] veth0_vlan: entered promiscuous mode
[  645.390421][T26357] vlan0: entered allmulticast mode
[  645.585555][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'.
[  648.220251][T26400] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.224692][T26400] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.224856][T26400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.338802][T26413] netlink: 'syz.1.4986': attribute type 1 has an invalid length.
[  648.503569][T26423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4985'.
[  648.933577][T26447] x_tables: duplicate underflow at hook 1
[  649.583040][T26414] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  650.092345][T26477] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4992'.
[  650.477534][T26487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4991'.
[  651.225133][T26465] 8021q: adding VLAN 0 to HW filter on device bond2
[  651.633270][T26494] bond12 (unregistering): Released all slaves
[  652.100950][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'.
[  652.100982][T26503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4998'.
[  652.262312][T26518] netlink: 'syz.3.5000': attribute type 4 has an invalid length.
[  652.294460][T26516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5001'.
[  652.351569][T26517] nbd: must specify at least one socket
[  652.715354][T26503] bond0: left promiscuous mode
[  652.715558][T26503] bond0: left allmulticast mode
[  652.797216][T26526] netlink: 'syz.1.5004': attribute type 3 has an invalid length.
[  653.085398][T26531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5005'.
[  653.402244][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  653.552258][T26529] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  653.552390][ T5714] lo speed is unknown, defaulting to 1000
[  653.552495][ T5714] syz2: Port: 1 Link DOWN
[  653.635921][T26539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5007'.
[  654.041522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  654.257432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  654.308827][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  654.384540][T26530] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  654.387154][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5008'.
[  655.177110][T26548] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  655.235168][T26548] bond12 (unregistering): Released all slaves
[  656.008260][T26587] netlink: 'syz.2.5013': attribute type 14 has an invalid length.
[  656.251046][T26593] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  656.417835][T26588] xt_CT: No such helper "pptp"
[  656.930969][T26611] sit1: entered allmulticast mode
[  658.249988][T26628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5026'.
[  658.283928][T26628] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  658.304250][T26628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5026'.
[  658.404338][T26632] ipt_ECN: cannot use operation on non-tcp rule
[  658.428504][T26637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5031'.
[  658.475050][T26637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'.
[  659.361739][T26655] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5036'.
[  659.575131][T26657] netlink: 'syz.1.5036': attribute type 4 has an invalid length.
[  659.575155][T26657] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5036'.
[  659.580159][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5032'.
[  659.580182][T26653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5032'.
[  659.580197][T26653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5032'.
[  659.580866][T26653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5032'.
[  659.580883][T26653] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5032'.
[  659.644784][   T52] block nbd0: Receive control failed (result -32)
[  660.926890][T26685] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  660.999210][T26685] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  663.084492][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'.
[  663.084949][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'.
[  663.129327][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5052'.
[  663.428511][T26737] syzkaller0: left promiscuous mode
[  663.428693][T26737] syzkaller0: left allmulticast mode
[  663.684916][   T31] audit: type=1800 audit(1791085209.491:16): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5057" name="memory.events" dev="tmpfs" ino=1767 res=0 errno=0
[  663.697040][   T31] audit: type=1804 audit(1791085209.501:17): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.5057" name="/newroot/342/memory.events" dev="tmpfs" ino=1767 res=1 errno=0
[  664.773831][T26760] netlink: 'syz.3.5060': attribute type 1 has an invalid length.
[  664.872931][T26760] __nla_validate_parse: 62 callbacks suppressed
[  664.872986][T26760] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5060'.
[  664.882423][T26767] batadv_slave_0: Caught tx_queue_len zero misconfig
[  665.756214][T26790] netlink: 'syz.1.5068': attribute type 21 has an invalid length.
[  665.756235][T26790] netlink: 'syz.1.5068': attribute type 22 has an invalid length.
[  665.756247][T26790] netlink: 'syz.1.5068': attribute type 23 has an invalid length.
[  665.756258][T26790] netlink: 'syz.1.5068': attribute type 25 has an invalid length.
[  665.756269][T26790] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5068'.
[  667.623019][T26844] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[  667.623201][T26844] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  667.683619][T26843] syzkaller0: entered promiscuous mode
[  667.683685][T26843] syzkaller0: entered allmulticast mode
[  667.716529][T26843] simple: /dev/video#_3
[  667.716578][T26843] simple: /dev/video#_6
[  667.716589][T26843] simple: /dev/video#_9
[  667.716614][T26843] simple: /dev/video#_12
[  667.716624][T26843] simple: /dev/video#_15
[  667.716648][T26843] simple: /dev/video#_18
[  667.716658][T26843] simple: /dev/video#_21
[  667.716682][T26843] simple: /dev/video#_24
[  667.716692][T26843] simple: /dev/video#_27
[  667.716714][T26843] simple: /dev/video#_30
[  667.716724][T26843] simple: /dev/video#_33
[  667.716748][T26843] simple: /dev/video#_36
[  667.716758][T26843] simple: /dev/video#_39
[  667.716781][T26843] simple: /dev/video#_42
[  667.716790][T26843] simple: /dev/video#_45
[  667.716814][T26843] simple: /dev/video#_48
[  667.716824][T26843] simple: /dev/video#_51
[  667.716848][T26843] simple: /dev/video#_54
[  667.716857][T26843] simple: /dev/video#_57
[  667.716881][T26843] simple: /dev/video#_60
[  667.716909][T26843] simple: /dev/video#_63
[  667.716919][T26843] simple: /dev/video#_66
[  667.716942][T26843] simple: /dev/video#_69
[  667.716953][T26843] simple: /dev/video#_72
[  667.716976][T26843] simple: /dev/video#_75
[  667.716986][T26843] simple: /dev/video#_78
[  667.717009][T26843] simple: /dev/video#_81
[  667.717019][T26843] simple: /dev/video#_84
[  667.717042][T26843] simple: /dev/video#_87
[  667.717053][T26843] simple: /dev/video#_90
[  667.717077][T26843] simple: /dev/video#_93
[  667.717087][T26843] simple: /dev/video#_96
[  667.717112][T26843] TC_ACT_REPEAT abuse ?
[  669.072149][T26874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5087'.
[  669.772446][T26896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5092'.
[  670.003213][T26898] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  670.003243][T26898] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  671.254295][T26920] netlink: 'syz.1.5099': attribute type 2 has an invalid length.
[  674.818953][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'.
[  675.059087][T26995] netlink: 'syz.4.5119': attribute type 1 has an invalid length.
[  675.206107][T26996] bond0: (slave gretap1): making interface the new active one
[  675.251997][T26996] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  675.573677][T26986] Can't find ip_set type bitmap:ip,mac
[  675.631140][ T8170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.291243][T27035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5125'.
[  676.443882][T27040] netlink: 83 bytes leftover after parsing attributes in process `syz.0.5126'.
[  676.710162][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.916876][T27045] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5127'.
[  676.987886][T27045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  677.053470][T27046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5129'.
[  677.057340][T27046] sctp: [Deprecated]: syz.4.5129 (pid 27046) Use of int in max_burst socket option deprecated.
[  677.057340][T27046] Use struct sctp_assoc_value instead
[  677.727908][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5133'.
[  677.749634][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.027390][T27075] openvswitch: netlink: Missing key (keys=40, expected=100)
[  678.368014][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5137'.
[  678.368083][T27080] netlink: 'syz.0.5137': attribute type 10 has an invalid length.
[  678.368123][T27080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5137'.
[  678.410029][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5137'.
[  678.410124][T27081] netlink: 'syz.0.5137': attribute type 10 has an invalid length.
[  678.410156][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5137'.
[  678.520369][T27080] geneve2: entered promiscuous mode
[  678.520429][T27080] geneve2: entered allmulticast mode
[  678.870217][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.104445][T27103] tc_dump_action: action bad kind
[  679.577529][T27117] ovs-s: entered promiscuous mode
[  679.605542][T27118] openvswitch: ovs-s: Dropping previously announced user features
[  679.875630][T27128] openvswitch: netlink: Duplicate or invalid key (type 0).
[  679.875718][T27128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  679.919957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.115278][T27129] __nla_validate_parse: 2 callbacks suppressed
[  680.115321][T27129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5149'.
[  680.256824][T27129] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  680.516417][T27134] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  680.696454][T27143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'.
[  680.895108][T27139] netlink: 'syz.4.5153': attribute type 10 has an invalid length.
[  680.959823][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.000711][T27151] netlink: 'syz.4.5153': attribute type 10 has an invalid length.
[  681.047054][T27129] veth1_macvtap (unregistering): left allmulticast mode
[  681.114851][T27141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.232796][T27141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.464818][T27141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.622859][T27141] xt_CT: You must specify a L4 protocol and not use inversions on it
[  681.780778][T27161] siw: device registration error -23
[  681.851170][T27160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5158'.
[  682.425542][T27180] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  682.952441][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.256923][T27196] netlink: 'syz.0.5163': attribute type 10 has an invalid length.
[  683.278094][T27196] veth0_vlan: entered allmulticast mode
[  683.677391][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'.
[  683.785663][T27213] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.785875][T27213] bridge0: port 2(bridge_slave_1) entered forwarding state
[  683.989864][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.063283][T27220] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5172'.
[  684.085722][T27221] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5172'.
[  684.199356][T27222] netlink: 'syz.4.5171': attribute type 2 has an invalid length.
[  684.421629][T27228] nbd: must specify a device to reconfigure
[  684.770422][T27239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5174'.
[  684.903674][T27242] netlink: zone id is out of range
[  684.903725][T27242] netlink: del zone limit has 4 unknown bytes
[  685.039826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.098924][T27249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5178'.
[  685.320201][T27252] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  685.393616][T27252] netlink: 'syz.1.5180': attribute type 1 has an invalid length.
[  686.193134][T27269] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5184'.
[  686.292256][T27277] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  687.011011][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5190'.
[  687.011070][T27288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5190'.
[  687.011102][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5190'.
[  687.033941][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.418437][T27296] pim6reg527: entered allmulticast mode
[  687.984801][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5198'.
[  687.984842][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5198'.
[  688.069676][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  688.557925][T27321] nbd: nbd0 already in use
[  688.565061][T27321] block nbd0: NBD_DISCONNECT
[  688.565086][T27321] block nbd0: Send disconnect failed -32
[  688.565102][T27321] block nbd0: shutting down sockets
[  688.665572][T27297] bridge1: entered promiscuous mode
[  688.665660][T27297] bridge1: entered allmulticast mode
[  689.076583][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'.
[  689.107337][T27325] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5201'.
[  689.110877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  689.144656][T27345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5203'.
[  689.162224][T27345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5203'.
[  689.620334][T27351] syzkaller1: entered promiscuous mode
[  689.620375][T27351] syzkaller1: entered allmulticast mode
[  689.714624][T27353] x_tables: duplicate underflow at hook 1
[  690.602623][T27379] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 0
[  691.452507][T27403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.533232][T27403] netlink: 'syz.1.5217': attribute type 7 has an invalid length.
[  692.788734][T27430] __nla_validate_parse: 5 callbacks suppressed
[  692.788754][T27430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5224'.
[  694.005585][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5220'.
[  694.242210][T27451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5229'.
[  694.477432][T27457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5229'.
[  695.351862][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.571486][T27461] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  696.362920][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5234'.
[  696.389744][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.173008][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5237'.
[  697.429661][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.795442][T27491] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  698.278483][T27505] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5246'.
[  698.350664][T27505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.435338][T27512] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5247'.
[  699.363151][T27526] netlink: 'syz.1.5252': attribute type 1 has an invalid length.
[  699.744889][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5252'.
[  700.358738][T27531] 8021q: adding VLAN 0 to HW filter on device bond9
[  700.380208][T27531] bond8: (slave bond9): making interface the new active one
[  700.382503][T27531] bond8: (slave bond9): Enslaving as an active interface with an up link
[  700.418602][T27544] 8021q: adding VLAN 0 to HW filter on device bond8
[  700.871092][T27563] netlink: 'syz.3.5256': attribute type 3 has an invalid length.
[  701.002128][T27569] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5259'.
[  701.727691][T27583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5264'.
[  702.147175][T27590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  702.995656][T27621] netlink: 'syz.3.5273': attribute type 21 has an invalid length.
[  702.995827][T27621] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5273'.
[  703.139070][T27618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5273'.
[  704.323578][T27642] tipc: Enabled bearer <eth:team0>, priority 0
[  705.097394][T27666] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5286'.
[  705.178138][T27673] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48
[  705.212069][T27669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5288'.
[  705.213177][T27678] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48
[  705.746847][T27683] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5290'.
[  706.320921][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5295'.
[  706.478747][T27706] syz.2.5296 (27706) used obsolete PPPIOCDETACH ioctl
[  706.674901][T27704] batman_adv: batadv0: Adding interface: macvtap1
[  706.674937][T27704] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  706.675025][T27704] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  706.978794][T27718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5299'.
[  707.439800][T27725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5300'.
[  707.746640][T27733] smc: net device lo erased user defined pnetid SYZ0
[  707.746935][T27733] smc: smcd device lo erased user defined pnetid SYZ0
[  707.774360][T27733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5303'.
[  708.382194][T27742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5306'.
[  708.382233][T27742] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  709.071903][T27761] netlink: 'syz.4.5311': attribute type 9 has an invalid length.
[  709.254972][T27765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5312'.
[  709.800511][T27783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  709.927995][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5317'.
[  710.440417][T27793] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  710.642080][T27797] __nla_validate_parse: 2 callbacks suppressed
[  710.642144][T27797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5321'.
[  710.805949][T27797] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.910759][T27798] netdevsim netdevsim2 
: renamed from netdevsim0 (while UP)
[  711.104157][T27805] gtp0: entered promiscuous mode
[  711.115369][T27805] gtp0: entered allmulticast mode
[  711.465211][T27817] netlink: 'syz.2.5327': attribute type 12 has an invalid length.
[  711.465267][T27817] netlink: 'syz.2.5327': attribute type 29 has an invalid length.
[  711.465297][T27817] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5327'.
[  711.465331][T27817] netlink: 'syz.2.5327': attribute type 1 has an invalid length.
[  711.465361][T27817] netlink: 'syz.2.5327': attribute type 2 has an invalid length.
[  711.465373][T27817] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5327'.
[  711.989857][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.026038][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5333'.
[  712.051402][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'.
[  712.066454][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5332'.
[  712.939940][T27846] netlink: 'syz.4.5335': attribute type 1 has an invalid length.
[  713.029692][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  713.223313][T27846] bond2: entered promiscuous mode
[  713.262710][T27846] 8021q: adding VLAN 0 to HW filter on device bond2
[  713.491415][T27848] bond2: (slave bridge3): making interface the new active one
[  713.491452][T27848] bridge3: entered promiscuous mode
[  713.522654][T27848] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  714.069597][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  714.295578][T27876] ip_tables: iptables: counters copy to user failed while replacing table
[  714.495029][T27881] syzkaller1: entered promiscuous mode
[  714.495223][T27881] syzkaller1: entered allmulticast mode
[  715.285507][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5344'.
[  715.392143][T27894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5344'.
[  717.483037][T27929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'.
[  717.651342][T27927] IPVS: persistence engine module ip_vs_pe_À
 not found
[  717.701765][T27929] 8021q: adding VLAN 0 to HW filter on device bond12
[  717.981188][T27935] macvlan1: entered promiscuous mode
[  717.981369][T27935] macvlan1: entered allmulticast mode
[  717.984858][T27935] bond12: entered promiscuous mode
[  717.988128][T27935] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  718.126786][T27935] bond12: left promiscuous mode
[  718.365083][ T5279] veth1_vlan: left promiscuous mode
[  718.626115][T27958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  718.681524][T27938] macvlan1: entered promiscuous mode
[  718.681560][T27938] macvlan1: entered allmulticast mode
[  718.682996][T27938] bond12: entered promiscuous mode
[  718.685758][T27938] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  718.698963][T27962] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  718.758310][T27938] bond12: left promiscuous mode
[  719.043067][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'.
[  719.043167][T27966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5360'.
[  719.319019][T27971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5361'.
[  719.319079][T27971] netlink: 'syz.2.5361': attribute type 6 has an invalid length.
[  719.457000][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5364'.
[  719.457043][T27973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5364'.
[  720.259097][T27982] veth3: entered promiscuous mode
[  720.259659][T27982] veth3: entered allmulticast mode
[  723.914765][T28044] netlink: 'syz.1.5376': attribute type 1 has an invalid length.
[  725.678006][T28072] ip6gre1: entered promiscuous mode
[  726.177295][T28088] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5387'.
[  726.365564][T28095] IPVS: length: 91 != 24
[  726.378407][T28099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5390'.
[  726.500215][T28101] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  726.727527][T28104] netlink: 'syz.4.5392': attribute type 21 has an invalid length.
[  726.727569][T28104] netlink: 'syz.4.5392': attribute type 22 has an invalid length.
[  726.727599][T28104] netlink: 'syz.4.5392': attribute type 23 has an invalid length.
[  726.727630][T28104] netlink: 'syz.4.5392': attribute type 25 has an invalid length.
[  726.727660][T28104] netlink: 'syz.4.5392': attribute type 26 has an invalid length.
[  726.727692][T28104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5392'.
[  726.857128][T28108] syzkaller1: entered promiscuous mode
[  726.857323][T28108] syzkaller1: entered allmulticast mode
[  726.995675][T28118] netlink: 'syz.1.5394': attribute type 3 has an invalid length.
[  726.995738][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5394'.
[  728.507576][T28146] C: renamed from lo
[  728.535478][T28146] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  728.561708][T28145] ip_tables: iptables: counters copy to user failed while replacing table
[  728.875896][T28154] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5404'.
[  728.877737][T28153] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  729.075950][T28160] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5407'.
[  729.206207][T28168] block nbd0: not configured, cannot reconfigure
[  729.363697][T28167] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.454626][T28217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5424'.
[  731.670064][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.670314][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.792535][T28173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5413'.
[  732.147324][T28241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5430'.
[  732.378481][T28246] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5433'.
[  732.531958][T28246] tipc: New replicast peer: 255.255.255.255
[  732.543976][T28246] tipc: Enabled bearer <udp:syz2>, priority 10
[  732.551440][T28246] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[  733.265304][T28263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5437'.
[  733.335337][T28263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5437'.
[  733.862462][ T5771] tipc: Node number set to 496903529
[  734.200832][T28277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5442'.
[  735.112383][T28313] netlink: Setting conntrack mark requires 'commit' flag.
[  735.112415][T28313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  735.517644][T28323] netlink: 'syz.2.5455': attribute type 1 has an invalid length.
[  735.517668][T28323] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5455'.
[  735.517685][T28323] netlink: 'syz.2.5455': attribute type 1 has an invalid length.
[  735.776728][T28320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5453'.
[  735.858184][T28320] 8021q: adding VLAN 0 to HW filter on device bond3
[  735.871660][T28320] bond0: (slave bond3): Enslaving as an active interface with an up link
[  741.365446][T28345] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[  741.375719][T28345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5461'.
[  742.837398][T28351] netlink: 252 bytes leftover after parsing attributes in process `syz.3.5460'.
[  744.634284][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.929406][    C0] sched: DL replenish lagged too much
[  745.672115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.709829][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.160888][T28376] netlink: 'syz.4.5467': attribute type 3 has an invalid length.
[  751.632207][T28377] syzkaller0: entered promiscuous mode
[  751.632401][T28377] syzkaller0: entered allmulticast mode
[  753.840471][T28386] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5469'.
[  753.898590][T28382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  754.440372][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'.
[  755.678334][T28395] openvswitch: netlink: Multiple metadata blocks provided
[  761.190752][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5474'.
[  763.258657][T28425] netlink: zone id is out of range
[  763.258676][T28425] netlink: zone id is out of range
[  763.258685][T28425] netlink: zone id is out of range
[  763.258693][T28425] netlink: zone id is out of range
[  763.258701][T28425] netlink: zone id is out of range
[  763.258727][T28425] netlink: zone id is out of range
[  763.258966][T28425] netlink: zone id is out of range
[  763.258975][T28425] netlink: zone id is out of range
[  763.258983][T28425] netlink: zone id is out of range
[  763.258991][T28425] netlink: zone id is out of range
[  779.353495][T28478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5486'.
[  781.773979][T28477] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  782.902239][T28477] bond10 (unregistering): Released all slaves
[  784.256385][T28479] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  792.921358][T28519] nbd: socks must be embedded in a SOCK_ITEM attr
[  792.921977][T28519] block nbd0: shutting down sockets
[  793.798264][T28524] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  793.798899][T28525] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  794.533543][T28524] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  794.902352][T28528] netlink: 'syz.2.5495': attribute type 12 has an invalid length.
[  794.902378][T28528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5495'.
[  795.024443][T28526] netlink: 'syz.1.5496': attribute type 2 has an invalid length.
[  814.587616][ T8173] net_ratelimit: 4 callbacks suppressed
[  814.587637][ T8173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.589657][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.629825][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.749810][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.789677][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.829658][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.880212][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.909882][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.949895][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.991878][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.039834][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.069761][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.189922][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.229630][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.269611][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.229859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.269701][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.309632][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  837.429915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.471500][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.509679][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.869909][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.909870][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  852.949624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.069980][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  855.109947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.149642][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  856.398479][T28574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  856.412572][T28574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  856.414038][T28574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  856.415968][T28574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  856.417354][T28574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  860.746059][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  862.515116][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  862.825548][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  863.476513][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  863.487045][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  865.561622][T28580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  865.915198][ T5622] Bluetooth: hci1: command tx timeout
[  865.916618][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  865.918542][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  865.949370][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  866.329035][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  866.465333][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  866.475578][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  866.494918][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  866.535296][T28585] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  866.535990][T28585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  866.537918][T28585] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  866.538577][T28585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  867.160008][T28580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  868.030052][T28580] Bluetooth: hci1: command tx timeout
[  868.031462][T28580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  868.033194][T28580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  868.742604][T28574] Bluetooth: hci8: command tx timeout
[  868.794128][T28574] Bluetooth: hci7: command tx timeout
[  870.077848][T28574] Bluetooth: hci1: command tx timeout
[  871.221984][T28574] Bluetooth: hci8: command tx timeout
[  871.222962][T28574] Bluetooth: hci7: command tx timeout
[  871.599549][T28580] Bluetooth: hci6: command tx timeout
[  872.229479][T28580] Bluetooth: hci1: command tx timeout
[  873.270102][T28574] Bluetooth: hci7: command tx timeout
[  873.271017][T28574] Bluetooth: hci8: command tx timeout
[  873.699485][T28585] Bluetooth: hci6: command tx timeout
[  874.323554][T28585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  874.499704][T28585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  874.503344][T28585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  875.383308][T28585] Bluetooth: hci8: command tx timeout
[  875.385140][T28585] Bluetooth: hci7: command tx timeout
[  875.750747][T28574] Bluetooth: hci6: command tx timeout
[  875.835533][T28574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  877.066513][T28574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  877.839943][T28574] Bluetooth: hci6: command tx timeout
[  882.100027][T28574] Bluetooth: hci2: command tx timeout
[  883.509910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.153516][T28574] Bluetooth: hci2: command tx timeout
[  884.549635][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.589621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.262037][T28574] Bluetooth: hci2: command tx timeout
[  886.709867][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.749700][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.315681][T28574] Bluetooth: hci2: command tx timeout
[  888.789794][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.449508][T18362] syz_tun (unregistering): left promiscuous mode
[  900.849887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.579447][T28580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  918.887239][T28580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  919.063050][T28580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  919.246973][T28580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  919.248282][T28580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  920.418988][T28574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  920.889827][T28574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  921.016108][T28574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  921.257589][T28574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  921.504078][T28574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  922.229682][T28580] Bluetooth: hci3: command tx timeout
[  924.553922][T28574] Bluetooth: hci3: command tx timeout
[  924.710578][T28574] Bluetooth: hci4: command tx timeout
[  926.876988][T28574] Bluetooth: hci3: command tx timeout
[  926.878229][T28574] Bluetooth: hci4: command tx timeout
[  928.949642][T28580] Bluetooth: hci4: command tx timeout
[  928.949677][T28580] Bluetooth: hci3: command tx timeout
[  931.119565][T28574] Bluetooth: hci4: command tx timeout
[  933.021211][T28580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  933.590529][T28580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  933.593028][T28580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  933.762046][T28580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  933.787739][T28580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  935.241433][T28580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  935.680012][T28580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  935.798304][T28580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  935.878736][T28580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  936.112275][T28580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  936.471015][T28574] Bluetooth: hci5: command tx timeout
[  938.259481][T28580] Bluetooth: hci0: command tx timeout
[  938.654371][T28580] Bluetooth: hci5: command tx timeout
[  939.200957][T28580] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  939.230516][T28580] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  939.496566][T28580] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  939.701630][T28580] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  939.702914][T28580] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  940.629851][T28574] Bluetooth: hci0: command tx timeout
[  940.747955][T28574] Bluetooth: hci5: command tx timeout
[  941.836018][T28574] Bluetooth: hci9: command tx timeout
[  942.870994][T28574] Bluetooth: hci0: command tx timeout
[  942.871029][T28574] Bluetooth: hci5: command tx timeout
[  943.910504][T28580] Bluetooth: hci9: command tx timeout
[  944.951703][T28580] Bluetooth: hci0: command tx timeout
[  946.064012][T28574] Bluetooth: hci9: command tx timeout
[  948.090097][T28574] Bluetooth: hci9: command tx timeout
[  949.128278][T17787] tipc: Resetting bearer <eth:syz_tun>
[  952.591591][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  953.589641][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  954.629658][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  955.671650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.709642][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  957.750033][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  959.030028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.069675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.109724][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.151447][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.189646][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.229813][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.271051][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.309667][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  967.349710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  972.470141][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  973.509657][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.549622][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.310067][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  977.350228][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  978.389849][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.578267][T28580] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  984.029158][T28580] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  984.135173][T28580] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  984.817648][T28580] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  984.883378][T28580] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  986.288605][T17787] syz_tun (unregistering): left allmulticast mode
[  986.289219][T17787] bridge0: port 3(syz_tun) entered disabled state
[  988.542678][T28586] Bluetooth: hci10: command tx timeout
[  989.109874][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  989.919962][T28586] Bluetooth: hci1: command 0x0406 tx timeout
[  989.920007][T28586] Bluetooth: hci8: command 0x0406 tx timeout
[  989.920033][T28586] Bluetooth: hci7: command 0x0406 tx timeout
[  990.149659][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.549859][   T52] Bluetooth: hci10: command tx timeout
[  991.189631][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  992.671868][   T52] Bluetooth: hci10: command tx timeout
[  992.955921][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.999983][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  994.714374][T28586] Bluetooth: hci10: command tx timeout
[  994.843429][ T5622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  994.940691][ T5622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  995.010353][ T5622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  995.039817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  995.070582][ T5622] Bluetooth: hci6: command 0x0406 tx timeout
[  995.535633][T28670] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  996.147966][T28670] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  997.637267][T28585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  997.843755][T28585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  997.850708][T28585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  997.867678][T28585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  997.868978][T28585] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1005.990614][T28675] Bluetooth: hci2: command 0x0406 tx timeout
[ 1006.322571][T28675] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1006.580282][T28675] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1007.051280][T28675] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1007.053262][T28675] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1007.054524][T28675] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1009.621955][T28682] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1010.200107][   T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1010.202279][   T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1010.204272][   T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1010.205560][   T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1016.925607][T17787] tipc: Disabling bearer <eth:syz_tun>
[ 1018.390244][ T5622] Bluetooth: hci12: command tx timeout
[ 1020.400388][ T5622] Bluetooth: hci11: command tx timeout
[ 1020.469929][ T5622] Bluetooth: hci12: command tx timeout
[ 1021.749992][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.520106][T28580] Bluetooth: hci11: command tx timeout
[ 1022.700242][T28580] Bluetooth: hci12: command tx timeout
[ 1022.700572][ T5622] Bluetooth: hci13: command tx timeout
[ 1022.789944][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.829719][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1024.588660][ T5622] Bluetooth: hci11: command tx timeout
[ 1024.797041][ T5622] Bluetooth: hci12: command tx timeout
[ 1024.797076][ T5622] Bluetooth: hci13: command tx timeout
[ 1025.600302][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.629852][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1026.692510][T28675] Bluetooth: hci11: command tx timeout
[ 1026.869628][T28675] Bluetooth: hci13: command tx timeout
[ 1027.512510][T28675] Bluetooth: hci14: command tx timeout
[ 1027.669774][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.949630][T28580] Bluetooth: hci13: command tx timeout
[ 1029.651141][T28580] Bluetooth: hci14: command tx timeout
[ 1031.739706][T28580] Bluetooth: hci14: command tx timeout
[ 1033.749637][T28580] Bluetooth: hci14: command tx timeout
[ 1046.549943][T28675] Bluetooth: hci3: command 0x0406 tx timeout
[ 1053.918031][T28675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1054.057459][T28675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1054.071139][T28675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1054.211041][T28675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1054.212512][T28675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1056.310226][T28580] Bluetooth: hci1: command tx timeout
[ 1057.101659][T28675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1057.553013][T28675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1057.555321][T28675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1057.586585][T28675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1057.596744][T28675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1058.389961][T28675] Bluetooth: hci1: command tx timeout
[ 1060.500024][ T5622] Bluetooth: hci1: command tx timeout
[ 1060.527508][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1060.542022][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1061.429687][ T5622] Bluetooth: hci4: command tx timeout
[ 1061.454093][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1061.457417][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1061.458886][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1061.597073][T28574] Bluetooth: hci0: command 0x0406 tx timeout
[ 1061.598467][ T5622] Bluetooth: hci5: command 0x0406 tx timeout
[ 1062.549944][T28574] Bluetooth: hci1: command tx timeout
[ 1063.523611][T28574] Bluetooth: hci4: command tx timeout
[ 1065.620123][T28586] Bluetooth: hci4: command tx timeout
[ 1066.734015][T28580] Bluetooth: hci9: command 0x0406 tx timeout
[ 1067.669590][T28580] Bluetooth: hci4: command tx timeout
[ 1068.890659][T28675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1068.928013][T28675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1068.942596][T28675] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1070.154160][T28675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1070.758540][T28675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1073.359909][T28574] Bluetooth: hci6: command tx timeout
[ 1073.681341][T28574] Bluetooth: hci7: command tx timeout
[ 1075.429845][T28574] Bluetooth: hci6: command tx timeout
[ 1075.819938][T28574] Bluetooth: hci7: command tx timeout
[ 1077.660007][T28574] Bluetooth: hci6: command tx timeout
[ 1077.864247][T28574] Bluetooth: hci7: command tx timeout
[ 1078.377446][   T32] INFO: task syz-executor:18761 blocked for more than 144 seconds.
[ 1078.377796][   T32]       Not tainted syzkaller #0
[ 1078.378099][   T32]       Blocked by coredump.
[ 1078.378428][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1078.378723][   T32] task:syz-executor    state:D stack:22280 pid:18761 tgid:18761 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1078.379468][   T32] Call Trace:
[ 1078.380020][   T32]  <TASK>
[ 1078.380386][   T32]  __schedule+0x17db/0x58f0
[ 1078.381017][   T32]  ? __pfx_stack_trace_save+0x10/0x10
[ 1078.381625][   T32]  ? stack_depot_save_flags+0x33/0x7f0
[ 1078.382513][   T32]  ? __pfx___schedule+0x10/0x10
[ 1078.382785][   T32]  ? schedule+0x90/0x2b0
[ 1078.383071][   T32]  schedule+0x164/0x2b0
[ 1078.383338][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1078.383609][   T32]  __mutex_lock+0x7c1/0x1550
[ 1078.383895][   T32]  ? __mutex_lock+0x5d4/0x1550
[ 1078.384646][   T32]  ? tun_chr_close+0x3e/0x1c0
[ 1078.384908][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1078.385686][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[ 1078.385955][   T32]  tun_chr_close+0x3e/0x1c0
[ 1078.386250][   T32]  ? __pfx_tun_chr_close+0x10/0x10
[ 1078.386507][   T32]  __fput+0x418/0xa50
[ 1078.387562][   T32]  task_work_run+0x1d9/0x270
[ 1078.387889][   T32]  ? __pfx_task_work_run+0x10/0x10
[ 1078.388389][   T32]  ? do_exit+0x735/0x2360
[ 1078.388668][   T32]  ? kmem_cache_free+0x182/0x650
[ 1078.388936][   T32]  ? put_net+0x191/0x260
[ 1078.619799][   T32]  do_exit+0x73a/0x2360
[ 1078.620094][   T32]  ? lock_acquire+0x115/0x350
[ 1078.620660][   T32]  ? __pfx_do_exit+0x10/0x10
[ 1078.621396][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1078.621996][   T32]  do_group_exit+0x22d/0x2f0
[ 1078.622251][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1078.623048][   T32]  get_signal+0x121b/0x12c0
[ 1078.624491][   T32]  arch_do_signal_or_restart+0xbb/0x860
[ 1078.625080][   T32]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1078.625927][   T32]  ? ksys_read+0x1fc/0x270
[ 1078.626489][   T32]  exit_to_user_mode_loop+0x10e/0x770
[ 1078.626784][   T32]  ? rcu_is_watching+0x16/0xb0
[ 1078.627370][   T32]  do_syscall_64+0x328/0x520
[ 1078.627982][   T32]  ? trace_irq_disable+0x3b/0x140
[ 1078.628287][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.628846][   T32]  ? clear_bhb_loop+0x70/0xc0
[ 1078.629360][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.630045][   T32] RIP: 0033:0x7fccdfb5e98e
[ 1078.630374][   T32] RSP: 002b:00007fff222c3658 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1078.631138][   T32] RAX: fffffffffffffe00 RBX: 000055557b001500 RCX: 00007fccdfb5e98e
[ 1078.631372][   T32] RDX: 0000000000000030 RSI: 00007fff222c3750 RDI: 00000000000000f9
[ 1078.631637][   T32] RBP: 00007fff222c36fc R08: 0000000000000000 R09: 0000000000000000
[ 1078.631880][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001be
[ 1078.631892][   T32] R13: 000000000000000b R14: 00000000000c74de R15: 00007fff222c3750
[ 1078.632411][   T32]  </TASK>
[ 1078.634109][   T32] 
[ 1078.634109][   T32] Showing all locks held in the system:
[ 1078.634764][   T32] locks held by kworker/0:1/10: 3, on CPU#0:
[ 1078.635125][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691001][   T32]  #1: ffffc900000f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691064][   T32]  #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[ 1078.691124][   T32] locks held by kworker/u8:1/13: 3, on CPU#1:
[ 1078.691138][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691192][   T32]  #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691245][   T32]  #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1078.691376][   T32] locks held by pr/ttyS0/16: 1, last CPU#1:
[ 1078.691401][   T32]  #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[ 1078.691462][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[ 1078.691476][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1078.691533][   T32] locks held by kworker/u8:2/42: 3, last CPU#1:
[ 1078.691547][   T32]  #0: ffff888044e3e940 ((wq_completion)krds_cp_wq#13/1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691640][   T32]  #1: ffffc90000b27c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.691694][   T32]  #2: ffff888032719b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1078.692003][   T32] locks held by kworker/u8:4/59: 4, last CPU#0:
[ 1078.692017][   T32]  #0: ffff888044e3a940 ((wq_completion)krds_cp_wq#13/4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692083][   T32]  #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692135][   T32]  #2: ffff888056ba7c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1078.692192][   T32]  #3: ffff888055ff3860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[ 1078.692242][   T32] locks held by kworker/u8:6/182: 4, last CPU#1:
[ 1078.692256][   T32]  #0: ffff888046632940 ((wq_completion)wg-kex-wg1#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692314][   T32]  #1: ffffc90002e97c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692368][   T32]  #2: ffff88805b0e1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 1078.692417][   T32]  #3: ffff88807c3d3ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 1078.692470][   T32] locks held by kworker/u8:9/1182: 2, last CPU#0:
[ 1078.692484][   T32]  #0: ffff888032995940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692536][   T32]  #1: ffffc9000520fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692602][   T32] locks held by kworker/u8:10/3365: 3, last CPU#1:
[ 1078.692617][   T32]  #0: ffff888044e3f140 ((wq_completion)krds_cp_wq#13/7#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692675][   T32]  #1: ffffc9000e35fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.692728][   T32]  #2: ffff888056ba7380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1078.861333][   T32] locks held by kworker/u8:11/3391: 4, last CPU#0:
[ 1078.861602][   T32]  #0: ffff8880783e7940 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.862672][   T32]  #1: ffffc9000e54fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.863278][   T32]  #2: ffff888057d39440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 1078.864228][   T32]  #3: ffff88807c3d2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 1078.866444][   T32] locks held by klogd/4973: 1, last CPU#1:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1078.866775][ 
** replaying previous printk message **
[ 1078.866775][   T32]  #0: ffffffff8ed4eb20 (syslog_lock){+.+.}-{4:4}, at: __hrtimer_run_queues+0x466/0xa10
[ 1078.867837][   T32] locks held by getty/5370: 2, on CPU#1:
[ 1078.868193][   T32]  #0: ffff8880288960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1078.870080][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1078.871297][   T32] locks held by kworker/0:3/5714: 2, last CPU#0:
[ 1078.871589][   T32]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.872440][   T32]  #1: ffffc900040f7c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.873795][   T32] locks held by kworker/1:7/5771: 3, on CPU#1:
[ 1078.874309][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.875399][   T32]  #1: ffffc900047d7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1078.876548][   T32]  #2: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770
[ 1078.878306][   T32] locks held by kworker/u8:15/8173: 3, last CPU#0:
[ 1078.878637][   T32]  #0: ffff888044e3c940 ((wq_completion)krds_cp_wq#13/3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.436936][   T32]  #1: ffffc90002e17c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.436993][   T32]  #2: ffff888032719580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1079.437055][   T32] locks held by kworker/u8:17/8175: 6, last CPU#1:
[ 1079.437070][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.437123][   T32]  #1: ffffc90002587c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.437176][   T32]  #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20
[ 1079.437273][   T32]  #3: ffffffff8ee38bc0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0
[ 1079.437323][   T32]  #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[ 1079.437379][   T32]  #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1079.437449][   T32] locks held by syz-executor/18362: 1, on CPU#1:
[ 1079.437464][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x781/0x1060
[ 1079.437513][   T32] locks held by syz-executor/18761: 1, on CPU#1:
[ 1079.437527][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1079.437578][   T32] locks held by syz-executor/19355: 1, last CPU#1:
[ 1079.437592][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1079.437654][   T32] locks held by kworker/u8:0/26696: 4, last CPU#1:
[ 1079.437668][   T32]  #0: ffff888044e38140 ((wq_completion)krds_cp_wq#13/5#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.437726][   T32]  #1: ffffc90009c77c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.437966][   T32]  #2: ffff888056ba7980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1079.438024][   T32]  #3: ffff88807adc8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[ 1079.438072][   T32] locks held by kworker/u8:3/26698: 2, on CPU#1:
[ 1079.438086][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438138][   T32]  #1: ffffc9000d5f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438193][   T32] locks held by kworker/u8:5/28545: 3, last CPU#1:
[ 1079.438208][   T32]  #0: ffff888044e3e140 ((wq_completion)krds_cp_wq#13/2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438265][   T32]  #1: ffffc90005fbfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438318][   T32]  #2: ffff8880760b8260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110
[ 1079.438436][   T32] locks held by kworker/u8:18/28553: 6, on CPU#1:
[ 1079.438451][   T32]  #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438503][   T32]  #1: ffffc90009857c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1079.438556][   T32]  #2: ffffffff90246408 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[ 1079.438608][   T32]  #3: ffff88807bce1128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 1079.438708][   T32]  #4: ffff888067c29258 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 1079.438948][   T32]  #5: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[ 1079.439002][   T32] locks held by syz-executor/28590: 1, last CPU#1:
[ 1079.439016][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[ 1079.439074][   T32] locks held by syz-executor/28617: 1, on CPU#1:
[ 1079.849617][T28574] Bluetooth: hci6: command tx timeout
[ 1079.919495][T28574] Bluetooth: hci7: command tx timeout
[ 1080.552211][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.552279][   T32] locks held by syz-executor/28625: 1, on CPU#1:
[ 1080.552294][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.552349][   T32] locks held by syz-executor/28631: 1, on CPU#1:
[ 1080.552363][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.552410][   T32] locks held by syz-executor/28634: 1, on CPU#1:
[ 1080.552424][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.552470][   T32] locks held by kworker/u8:22/28641: 2, on CPU#1:
[ 1080.552484][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1080.552539][   T32]  #1: ffffc90003ed7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1080.552593][   T32] locks held by kworker/u8:24/28646: 3, last CPU#0:
[ 1080.552608][   T32]  #0: ffff888044e3f140 ((wq_completion)krds_cp_wq#13/7#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1080.552666][   T32]  #1: ffffc90004107c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1080.552719][   T32]  #2: ffff888056ba7380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1080.552959][   T32] locks held by syz-executor/28658: 1, on CPU#1:
[ 1080.552974][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.553022][   T32] locks held by syz-executor/28667: 1, on CPU#1:
[ 1080.553036][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.553082][   T32] locks held by syz-executor/28676: 1, last CPU#1:
[ 1080.553096][   T32]  #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0
[ 1080.553184][   T32] locks held by syz-executor/28677: 1, on CPU#1:
[ 1080.553200][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.553250][   T32] locks held by syz-executor/28705: 1, on CPU#0:
[ 1080.553265][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.553321][   T32] locks held by syz-executor/28706: 1, on CPU#0:
[ 1080.553337][   T32]  #0: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[ 1080.553386][   T32] locks held by udevd/28709: 1, last CPU#0:
[ 1080.553401][   T32]  #0: ffff8880469c8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[ 1080.553461][   T32] locks held by syz-executor/28710: 1, last CPU#0:
[ 1080.553477][   T32]  #0: ffff8880255f0340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[ 1080.553531][   T32] locks held by dhcpcd/28723: 2, on CPU#1:
[ 1080.553545][   T32]  #0: ffff888058128800 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0
[ 1080.553664][   T32]  #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 1080.553721][   T32] locks held by modprobe/28724: 2, last CPU#0:
[ 1080.553735][   T32]  #0: ffff88807814e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[ 1080.553971][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1080.554026][   T32] locks held by modprobe/28725: 2, last CPU#1:
[ 1080.554040][   T32]  #0: ffff88807814a800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[ 1080.554095][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[ 1080.554146][   T32] locks held by syz-executor/28726: 2, last CPU#0:
[ 1080.554161][   T32]  #0: ffff88807f4a3e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1080.554207][   T32]  #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[ 1081.191121][   T32] 
[ 1081.191383][   T32] =============================================
[ 1081.191383][   T32] 
[ 1081.191614][   T32] NMI backtrace for cpu 0
[ 1081.191659][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1081.191682][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1081.191694][   T32] Call Trace:
[ 1081.191703][   T32]  <TASK>
[ 1081.191713][   T32]  dump_stack_lvl+0xe8/0x150
[ 1081.191777][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[ 1081.191869][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1081.191910][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 1081.191938][   T32]  sys_info+0x135/0x170
[ 1081.191957][   T32]  watchdog+0xfd7/0x1030
[ 1081.191987][   T32]  ? watchdog+0x1c7/0x1030
[ 1081.192015][   T32]  kthread+0x38b/0x480
[ 1081.192037][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1081.192056][   T32]  ? __pfx_kthread+0x10/0x10
[ 1081.192077][   T32]  ret_from_fork+0x514/0xb70
[ 1081.192107][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1081.192127][   T32]  ? __switch_to+0xc89/0x1420
[ 1081.192158][   T32]  ? __pfx_kthread+0x10/0x10
[ 1081.192180][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1081.192225][   T32]  </TASK>
[ 1081.192590][   T32] Sending NMI from CPU 0 to CPUs 1:
[ 1081.193529][    C1] NMI backtrace for cpu 1
[ 1081.193545][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1081.193568][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1081.193581][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[ 1081.193648][    C1] Code: e8 7e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 7f 76 06 cc 44 89 f9 80 e1 07
[ 1081.193700][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[ 1081.193718][    C1] RAX: 1ffffffff35a8800 RBX: 00000000000003fd RCX: 0000000000000000
[ 1081.193733][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[ 1081.193746][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1081.193760][    C1] R10: dffffc0000000000 R11: ffffffff85736a40 R12: dffffc0000000000
[ 1081.193778][    C1] R13: 0000000000000000 R14: ffffffff9ad44300 R15: 0000000000000000
[ 1081.193792][    C1] FS:  0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000
[ 1081.193809][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1081.193823][    C1] CR2: 00007fe9c02584c0 CR3: 0000000074140000 CR4: 00000000003526f0
[ 1081.193841][    C1] Call Trace:
[ 1081.193848][    C1]  <TASK>
[ 1081.193859][    C1]  wait_for_lsr+0x184/0x2f0
[ 1081.193884][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[ 1081.193918][    C1]  serial8250_console_write+0xaa1/0x1200
[ 1081.193941][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1081.193973][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1081.193996][    C1]  ? __schedule+0x17f1/0x58f0
[ 1081.194027][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[ 1081.194059][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 1081.194086][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[ 1081.194116][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[ 1081.194143][    C1]  nbcon_kthread_func+0x679/0x880
[ 1081.194168][    C1]  ? nbcon_kthread_func+0x163/0x880
[ 1081.194190][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1081.194215][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1081.194243][    C1]  ? __kthread_parkme+0x199/0x1f0
[ 1081.194273][    C1]  kthread+0x38b/0x480
[ 1081.194292][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1081.194312][    C1]  ? __pfx_kthread+0x10/0x10
[ 1081.194332][    C1]  ret_from_fork+0x514/0xb70
[ 1081.194352][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1081.194371][    C1]  ? __switch_to+0xc89/0x1420
[ 1081.194406][    C1]  ? __pfx_kthread+0x10/0x10
[ 1081.194426][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1081.194464][    C1]  </TASK>
[ 1081.194528][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1082.407398][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1082.416602][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1082.426670][   T32] Call Trace:
[ 1082.429978][   T32]  <TASK>
[ 1082.432915][   T32]  vpanic+0x56d/0xa60
[ 1082.436940][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1082.441461][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[ 1082.447054][   T32]  panic+0xc5/0xd0
[ 1082.450969][   T32]  ? __pfx_panic+0x10/0x10
[ 1082.455404][   T32]  ? __pfx_preempt_count_add+0x10/0x10
[ 1082.461010][   T32]  ? wq_watchdog_touch+0xf9/0x160
[ 1082.466054][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 1082.472220][   T32]  watchdog+0x1030/0x1030
[ 1082.476574][   T32]  ? watchdog+0x1c7/0x1030
[ 1082.480999][   T32]  kthread+0x38b/0x480
[ 1082.485074][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1082.489755][   T32]  ? __pfx_kthread+0x10/0x10
[ 1082.494354][   T32]  ret_from_fork+0x514/0xb70
[ 1082.498952][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1082.504073][   T32]  ? __switch_to+0xc89/0x1420
[ 1082.508767][   T32]  ? __pfx_kthread+0x10/0x10
[ 1082.513364][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1082.518166][   T32]  </TASK>
[ 1082.521546][   T32] Kernel Offset: disabled
[ 1082.525878][   T32] Rebooting in 86400 seconds..