last executing test programs:

4.328077612s ago: executing program 4 (id=4619):
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000002c0)=0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc}, 0x94)
r0 = socket(0x11, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000001c0)={0x0, 0x3, 0x5})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}], 0x1}, 0x200488d4)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}]}, 0x108)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)={0x6, 0x10, 0x2, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00', @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}]}, 0x88)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast2, 0x80000001}, 0x1c)

3.977754541s ago: executing program 4 (id=4623):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
write$tun(r10, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r13 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0xc, &(0x7f0000000040)=0x8, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0x3, 0x3, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x3}, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012100800983a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a06000000000000010700000000000000c910fe8000000000000000000000000000aa000100040187040106c2040000000201060000000000000000000000001108000000000000c910fc02000000000010000000000000000007200000000106000600ffffff7f000000000000000001000000090000000000000000010000010000010000010004010500010000008000907800000000"], 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

3.554732465s ago: executing program 1 (id=4629):
unshare(0x4000400) (async)
unshare(0x4000400)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008200f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008200f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x118)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

3.206466946s ago: executing program 1 (id=4634):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100)=0x1000000, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
socket$netlink(0x10, 0x3, 0x0)
write$tun(r1, &(0x7f0000001440)={@void, @void, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0x18)
socket$inet6(0xa, 0xa, 0x47)

2.944947409s ago: executing program 0 (id=4637):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
listen(r0, 0x8)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt(r4, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000005400)={0x0, @in6={{0xa, 0x4e23, 0x46, @mcast1, 0x40}}}, 0x84)
sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8)

2.846021608s ago: executing program 4 (id=4638):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000"], 0x48) (async, rerun: 32)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'ipvlan0\x00', &(0x7f00000005c0)=@ethtool_rxfh_indir={0x38}}) (async, rerun: 64)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8)
ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000003280)={'vxcan1\x00'})

2.795679027s ago: executing program 2 (id=4639):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r3, 0x2, 0x30}, &(0x7f0000000240)=0xc) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x94}}, 0x8000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) (async, rerun: 64)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffbfff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket(0x21, 0x0, 0x5)

2.654498977s ago: executing program 1 (id=4641):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
shutdown(r2, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f00000000c0)=0x80000002, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000280)='\x00\x00', 0x2, 0x200408d0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x5, 0xa)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x22eb}, @void, @ipv4=@esp={{0x8, 0x4, 0x0, 0x2e, 0x1ae, 0x66, 0x0, 0x10, 0x32, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}]}]}}, {0x4d3, 0x4f2, @cc={0x1, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0x5, 0x0, [@ipv6=@udp={0x9, 0x6, "a38b52", 0x143, 0x11, 0x1, @private1, @private1, {[@srh={0x33, 0x6, 0x4, 0x3, 0x8, 0x0, 0x7f, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0xff}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x2, 0x0, 0x94, 0x0, 0x0, 0x7, 0x67}], {0x4e22, 0x4e20, 0x103, 0x0, @gue={{0x2, 0x1, 0x1, 0x8, 0x0, @val=0x80}, "0e7089a26ce8fdf099889f5f68e8753e5ecf0ff153ebab9b2e1f6af41037e85f85021a46990423465a7ae43a9afbd16c6ec08497c26656a90e9e2e16374eb390a85240efdbe6200c08e5c1a3a586d0f476efbf0cfdf1545d640229b41a036ad65870ac08744efb4490ab1dced7686942d3c0a8604ea5468595aa8618bdd37ccee2be93724925fa9a938a3a57c235ecc4bc7c91532edcb7dad01c96dd97d44a9d4f82af28a1f02d4a600a6b44b82906fa6ee91d0da6a6c96d646d4f6e23d71e7292ce24f55282ac39571c0d264cc3c0e3d50d0d4cb2201a84173ee48acb4dfcd5764cdab41926cba020d1a57b2d59f66c6e66c9"}}}}]}, "b0", 0x1}}}, 0x1b2)
write$tun(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef)

2.570041939s ago: executing program 0 (id=4642):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x15c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbdf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x533}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x268}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001480)={<r2=>0x0, 0x8, 0x300, 0x3}, &(0x7f00000014c0)=0x10)
sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f0000000340)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="df4b5933fb7f9f87e1c6f5b6cd3c54876d605b65f8e4c18495fef3ca104ed8b98f97286078cb8fc849aa6b8df04bc0434c515be7cba62ce63ae533e09931868c5655213a7a2c8d66364f323e772334b5f12028d187b1f049366e7aca6e1a1b4851cfec51256b8668452d3d4d193cbf161a8401f6b951d9ed78e8c6c3fdc374ecf02c7c1193885a54ceeadded377791539280", 0x92}], 0x2, &(0x7f0000001500)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x7, 0x8008, 0x8, 0xffffffff, 0x200, 0x800, 0xfffffffa, r2}}], 0x60, 0x4800}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001680)={&(0x7f00000015c0), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x3, 0x1, 0x204, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001800)=0x14)
sendmsg$inet6(r0, &(0x7f0000001ac0)={&(0x7f00000016c0)={0xa, 0x4e21, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001700)="5d2ea3d9908dec1f6b73f82ad664a7c7f313b3a1e5c2c62b45f2543180930c6ab9220b490dfeb46db70a6645d218e308fb96d754768e45b601d9ae944574929d53", 0x41}], 0x1, &(0x7f0000001840)=[@dstopts_2292={{0x78, 0x29, 0x4, {0x67, 0xb, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x8, 0xc, [0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0xf2, 0xc, 0x6e, 0xd, 0x9, 0x7bd, 0x2]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, r3}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x87, 0xa, 0x1, 0x2, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @private2]}}}, @rthdr={{0x78, 0x29, 0x39, {0x62, 0xc, 0x2, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @dev={0xfe, 0x80, '\x00', 0x40}, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3c, 0x8, 0x0, 0x8, 0x0, [@loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}}}, @rthdr={{0x38, 0x29, 0x39, {0xff, 0x4, 0x1, 0x9, 0x0, [@loopback, @loopback]}}}], 0x280}, 0x81)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b40)={0x21c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x68f0}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c47}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff05}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9f8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffdf03}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1aec}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8251}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x48000}, 0x10000880)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0xb, 0x13, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0xb, 0x7, 0x18, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x0, 0x2, 0x7, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000001ec0)='GPL\x00', 0x6, 0x69, &(0x7f0000001f00)=""/105, 0x41100, 0x12, '\x00', r3, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001fc0)={0x0, 0xe, 0x90000000, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94)
r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002100)={@map, r4, 0x2b, 0x2010, 0x0, @value=r5}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x90, 0x2, 0x0, 0x0, 0x7, 0x10}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x30, r7, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x18}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x30}}, 0x2df6d211626865)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f00000023c0), 0x4)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x20, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x4c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x20004000)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000002500)={<r8=>r6, 0x4, 0xffffffffffffffc9, 0x1})
sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x1402, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44005}, 0x8000000)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000003080)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002680)=@delchain={0x9a8, 0x65, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0xb, 0x10}, {0x2, 0x5}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}]}}, @f_tcindex={{0xc}, {0x930, 0x2, [@TCA_TCINDEX_POLICE={0x8dc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcd6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x6, 0x9, 0x3, {0x6c, 0x0, 0xfff7, 0x0, 0xff}, {0xf8, 0x1, 0x5, 0xc, 0x2, 0xd9}, 0xfffffff7, 0x4, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x5, 0x8, 0x6, 0x4, 0x3, 0x2, 0x27a, 0x9, 0x37, 0x8001, 0x401, 0x7, 0xffffffff, 0x5, 0x7ff, 0x7, 0x200, 0x1, 0x85, 0x5c, 0xffffffff, 0x9, 0x3, 0xfff, 0x5, 0x2, 0x6, 0x8, 0x6, 0x8, 0x8, 0x7f, 0x9, 0x2, 0x4, 0x21fd, 0x4, 0x8, 0xec96, 0x1, 0x5, 0x8, 0xff, 0x6, 0x1, 0xc, 0x3, 0x4, 0x8, 0xa, 0x8, 0x15e3, 0x83, 0xb, 0x2, 0x4490ae82, 0x9, 0x4c98964d, 0x9, 0x8, 0x0, 0xff, 0x100, 0xe, 0x5, 0x40, 0x2, 0x0, 0xfffffffc, 0x0, 0x1, 0xb906, 0x9, 0x0, 0xfffffffa, 0x2, 0x0, 0x481, 0x1, 0x75, 0x7ff, 0x7, 0x5, 0x0, 0x0, 0x8001, 0x7, 0x4, 0x2, 0x93f, 0x3, 0x8, 0x6, 0x400, 0x1, 0xc, 0x200, 0x209, 0x1, 0x9, 0x8000, 0x5, 0x6, 0xfffffff0, 0x0, 0x7f, 0x0, 0x7ff, 0x6, 0x6, 0x1, 0xa, 0xb5a, 0x7ff, 0x3, 0x6, 0x1, 0x2, 0x1, 0xdb8, 0x2, 0x4, 0xe7, 0x4, 0x4, 0x7ce, 0x1, 0x4, 0x0, 0x4, 0xb96, 0x9, 0x5, 0x2, 0x2, 0x1, 0x2314, 0x5, 0x5, 0x7, 0xfffffffb, 0x8, 0x2, 0x7, 0x3, 0x6, 0x3, 0x8001, 0x0, 0x11, 0x2d6, 0x81, 0x1, 0x3, 0x67155737, 0x4, 0x5, 0x4, 0x0, 0x0, 0x4, 0x10000, 0xfffffe01, 0x6, 0x5, 0x80000000, 0x5, 0x4, 0xfb, 0xfffffff8, 0x2d, 0x2, 0x9, 0x8, 0x27, 0x483, 0xb, 0x297, 0x1, 0x2, 0x0, 0x4, 0x3, 0x2, 0x3, 0x8, 0x9, 0x8, 0x4, 0x6, 0x8, 0x4, 0x6, 0xc, 0x7, 0xfffffffd, 0x8, 0x5, 0x0, 0x0, 0x3, 0x5, 0x5, 0x1, 0x9, 0x7, 0x2, 0x80, 0x5, 0xb5, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x4, 0x80000001, 0xdc5, 0x6, 0x3, 0x57a4, 0x6, 0x2c3c, 0x4, 0x7, 0xfff, 0x6bfa, 0x9, 0x10001, 0x90, 0x8, 0x800, 0x9, 0xffff, 0x5, 0x1, 0x10, 0x8, 0x4, 0x4, 0xf7, 0x3, 0xeb, 0x8, 0x3, 0xfffffffb, 0x5, 0x5, 0x5, 0x4, 0x9, 0xde89, 0x1, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb6, 0x3, 0x5, 0x81, 0x7, {0x5, 0x0, 0x9, 0x1, 0x80, 0xc}, {0x3, 0x0, 0x200, 0xa6, 0xb, 0x3}, 0x9, 0xc, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7, 0x1, 0x101, {0x0, 0x0, 0x0, 0x100, 0x0, 0x9}, {0x2f, 0x0, 0x9, 0xb6, 0x4, 0x6}, 0x768, 0x4, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x5, 0x2, 0x6, 0x6245, 0x7, 0x5, 0x1, 0x3, 0x7, 0x1, 0xfffffff7, 0xffff3e70, 0x7fff, 0x1, 0xfffffffd, 0x177510e3, 0x1ff, 0x7, 0x55ff, 0x7, 0x6, 0x80000000, 0x0, 0x1, 0x40, 0xc53, 0x7fffffff, 0xc, 0x2, 0x9, 0x2, 0x8, 0x9, 0x81, 0x0, 0x3, 0xfffffff7, 0x3, 0x200, 0x4, 0x2, 0x1, 0x0, 0xffffff32, 0x3, 0x0, 0x7, 0x5, 0x5, 0xb, 0x5, 0x5, 0x80, 0xf0, 0x6, 0x8000, 0x9, 0xff, 0xffffffff, 0x4, 0x3, 0xb, 0x2, 0x5, 0x1b, 0x2, 0x6, 0x1315, 0x16ef30ae, 0x2, 0xce0, 0x0, 0x0, 0xfffffffb, 0xb, 0x2, 0x7, 0xdac6, 0x2, 0x1, 0x80000000, 0x3, 0x8, 0x6, 0xe5a, 0x880, 0x4, 0x800, 0x5, 0x2, 0xb61c, 0x1, 0x0, 0xfffffe01, 0x1, 0x9, 0x2, 0x2, 0x4, 0x0, 0xfff, 0xa6, 0x7, 0x7, 0xfffffff7, 0xb, 0xf, 0x5b29, 0x4, 0x0, 0x81, 0x8, 0xd, 0x9, 0xfffffffe, 0x2, 0x6000, 0x5, 0xffff, 0xf40, 0x5870, 0x531e, 0x1c46f162, 0x5, 0x0, 0x7, 0x5, 0x3206b49c, 0x8001, 0x5, 0x23c000, 0x8, 0x7, 0x2, 0x9, 0x1, 0x7, 0xfffff748, 0xffffff80, 0x6, 0x6, 0x2, 0x4, 0x9, 0x3, 0x81, 0xfff, 0x8000, 0x10001, 0xf, 0x2, 0x10, 0x80, 0x4, 0x1, 0x3ff, 0x5, 0x61, 0x6, 0xffff60d6, 0x8, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x4, 0x7, 0x3, 0x3, 0x2e55, 0xff, 0x4af2, 0x4, 0x2, 0x1e9, 0xfffffffe, 0x8, 0x5, 0x6, 0x9, 0x8, 0x100, 0xc, 0x7, 0x79c, 0x4, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1000, 0x9, 0xfff, 0x9, 0x9, 0xffff, 0x9, 0xfffffffd, 0xa, 0x8, 0x4a, 0x7, 0xa, 0x0, 0x6, 0xffffffff, 0xafef, 0x302, 0x436, 0x6, 0x5, 0x564, 0x64, 0x1c46, 0x7, 0x4, 0x3ff, 0xdc71, 0x80000000, 0x100, 0x4, 0xffff, 0x3, 0x8, 0x200, 0x0, 0x2, 0x8, 0x3, 0x0, 0x6, 0x5, 0x200, 0x2, 0x4, 0xa, 0x9, 0xfffffff9, 0x29f, 0x100, 0x8, 0x1, 0x3, 0x10001, 0x6, 0x6, 0x1ad, 0x1, 0x7, 0x3, 0x9, 0xc1, 0x100]}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x9, 0x4}}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x0, 0x4, 0x7, {0xd, 0x2, 0xfffb, 0x5, 0x6, 0xffffffff}, {0x4, 0x2, 0x80, 0xffff, 0x1ff, 0x6}, 0x80000001, 0x3, 0x2a5}}]}]}}, @f_tcindex={{0xc}, {0x24, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff3, 0xfff2}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x100}]}}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x4040}, 0x20048080)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0xac, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000003240)={<r9=>0x0, 0x2, 0x1000, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000003640)={r9, 0x1, 0xffffffffffffff80, 0x1})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a80), r8)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003ac0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000003b80)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x28, r10, 0xd04, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffffb, 0x66}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48044}, 0x4040054)
bpf$PROG_LOAD(0x5, &(0x7f00000040c0)={0x12, 0x16, &(0x7f0000003bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe73d}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe309}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003c80)='GPL\x00', 0xe, 0x0, &(0x7f0000003cc0), 0x41000, 0x7c, '\x00', 0x0, @fallback=0xb, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x5, 0x0, &(0x7f0000004040)=[{0x5, 0x3, 0xb, 0x8}, {0x4, 0x1, 0x9, 0x8}, {0x2, 0x3, 0xb, 0x3}, {0x2, 0x2, 0xb, 0x28dee8b0404b4f}, {0x3, 0x5, 0xf, 0x8}], 0x10, 0x80}, 0x94)

2.249435321s ago: executing program 1 (id=4643):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{}, &(0x7f0000001000), &(0x7f0000001080)=r1}, 0x20)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r6, 0x4}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
write$cgroup_subtree(r1, &(0x7f0000001100)={[{0x2b, 'cpuacct'}]}, 0x9)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2b, 0x63, 0x0, 0x1, 0x1, @local, @private1, 0x8, 0x1, 0x10000, 0x9}})
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

2.042044546s ago: executing program 0 (id=4644):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)

2.005266227s ago: executing program 3 (id=4645):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r13, 0xc040ff0b, 0x0) (async)
ioctl$TUNSETNOCSUM(r13, 0xc040ff0b, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r13, r0, 0x4, r0}, 0x10) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r13, r0, 0x4, r0}, 0x10)
r14 = socket$pppl2tp(0x18, 0x1, 0x1)
r15 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r14, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r15, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
close(0x4)
getsockname(r14, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

1.803936899s ago: executing program 2 (id=4646):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) (async)
getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000280)) (async)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000080)={0x7}) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000078000104020000000000000007000000640000001400018008000100640000000800"], 0x2c}}, 0x0)

1.609755412s ago: executing program 0 (id=4647):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x3, {0xe, 0x8813, 0x8000000000000001, 0x8001, 0xe3}})
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = accept(r1, &(0x7f0000000080)=@tipc, &(0x7f0000000100)=0x80)
sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000140)=@sco, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="daeaa4600666e86e89c2d791960516920c865417313c13577806431f587caeab82d7703111d16ca0c69d95c63f5781a314c5ead056a39ddaaa4061b5eb79b0db50fc35628c1628a17114ccb02d025aa84c5517a067817f0ca76962750cad86c3770e74ab1a01a9160ed2ad0932bb7bf8d0915b94480fcdf9223a74705d3c8834e2b41bc85e5b3065b213420d92f9e68a899d1d3dd43f0603c2f97c3915e0cc7a", 0xa0}, {&(0x7f0000000280)="de7cc30477c92c67ae13e757f0063a2b82c90c48b630768bf4cbdbf936d5639122fbe2d70143698c", 0x28}], 0x2, &(0x7f0000000300)=[{0x50, 0x115, 0xa6c, "8a046dcbfc28a12fd4370a5762aeee797cc8bb56c911ed0bdf3276a8cfc10ccd122e033352e284ff48ff0d81b49bd3be09e1dd80394eb34ed8c1"}, {0x70, 0x11, 0x0, "5d43ab38a570d48307215c1d05bfdea5a471639a0fbfdd47301c9dfed9c1e45b7bbf8a7786b0fca61a8597743ca7b35a28d299e9a3008174da0aa6dd2e2b34dc273e4d847787c312c1cb131f17b03995682597fa6b86fcce76760259e382"}, {0x30, 0x1, 0x1, "0005ceab0d6d64bcfd7cb8c888edb8f6ec12f0be0a0a91cc1463cf0a8967"}, {0x68, 0x10b, 0x2, "ddc07147a3bdd8b0d89bd7fddc49e719641d8509ea8c66885b23e7136b117ff10bdefa3f2e26a10d52fea017d42264019c0f8c19d49c8663af90c572301edf193c9698a70f99615b94b39ed502f21b2b67c883"}, {0x28, 0x109, 0xc75, "0449b7219a664b44dfe3f42354e83e2016d7fc19e6"}, {0xf8, 0x103, 0x5, "3e5c0e982129a5c39be86401fbd24dd25820985d0317905c417d40379f85715fa1639bd21f35924539669fdd829eff89d9ffd2118a444b6ba0abf3c037ba313f6f8997ceffc955e02390cec3331106993668670c4c9a633db659db8697e031fda5db710e029980b5f1475be9be61f15f09cff1295ecdc29c40f218b256e7e4b5cb518a960f96208be1803bc8edf722b90f5587d67f1a51c60b6b5394a88e38de30283217a7445efcc3c5e358cac786d9dd4c3c43ac537033330639892ab5f1603941a2124e1250d59b437b0ba40858fc5bdd410d62d377477442eba3a4102e74e438b07eb4"}, {0x78, 0x102, 0x5, "feb6f8db4bfb8b2677275cefcc03f1ebcb7db967f54e102103a1c7a2ea023ba3271d49b470460fa3218c573f2d12e8de2d04cfc9671e0fe4a28a44b192192384ba5faee44f6ef3f39c2716e7d82b36edd74ab333706f79e258bbaf91d31f95fddd7715fa"}, {0x78, 0x104, 0x1, "d7826a34462845547db7013c8f1bc0e212a0bb742b8c6db51d1e17292eef0f43e6348a49accf739d38d7687a6e1e4d8f7e25313942d84da8d16234aaf931755e551db9b47bdc83a5f6905320eeee6edbd5de70b264818a36a7492da7d0324814c7443fa2663af539"}, {0x28, 0x109, 0x7, "c16bc2a9cfd064e7228ba1b965b9b2feacd91c4e88b11fac"}], 0x390}, 0x40800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x1, 0x3}, 0x90)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000007c0)=0x4000, 0x4)
read(r2, &(0x7f0000000800)=""/4096, 0x1000)
read(r2, &(0x7f0000001800)=""/48, 0x30)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0, <r6=>0x0}, &(0x7f0000001ac0)=0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0, <r7=>0x0}, &(0x7f0000001b40)=0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, <r8=>0x0}, &(0x7f0000001bc0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001c00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}}, {{@in=@broadcast}}}, &(0x7f0000001d00)=0xe8)
r11 = getgid()
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$unix(r2, &(0x7f0000001e80)={&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000018c0)="e9d43e387b0b", 0x6}, {&(0x7f0000001900)="13740eed21b04d57e8153c2fa8892b47727b3c3986ad1b95f8ca869a622a4c7fb6a9db8bcda32b5ce4d9f87e7c", 0x2d}, {&(0x7f0000001940)="5472411f0ffeaca34863577ec80b71ae426f0d8a1cbe59b7e9a478146e2f5508c1bd94bbd111d817fdb285c579bc648665ef53221b87291e093446adfb75854f0dd2834b24", 0x45}, {&(0x7f00000019c0)="b65d3b7503baf1a905274d0e938f98c2fc35a6530af068b23af3e412f558b966f1f0c9", 0x23}], 0x4, &(0x7f0000001d40)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r4, r1, r5, r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, r11}}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r0, r0, r0, r1, r2, r2, r12]}}], 0x130, 0x48000}, 0x4000)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001ec0)={<r13=>r12})
sendmsg$NFT_BATCH(r13, &(0x7f0000002440)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002400)={&(0x7f0000001f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3d, 0x6, "82e1809755287e8cf2954f0c47f4e51ba0cf83f1dad1f003dd3c1238d54a469e4ccf0666d553f150d8da70f97c3c4cd38294f6e31c1ff792e8"}, @NFTA_TABLE_USERDATA={0x6, 0x6, "5a8a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_USERDATA={0x58, 0x7, 0x1, 0x0, "1ca907dc700be416e8d67107b0d189c06743d8bb57d0d35ca9894912d761a6dce5e35af13e76bcc080cd89ed9c8301ab0a30e756ad83357105994d5075d6c04147eb1a8db938be177512791e43c76041a46c28ff"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x124, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xef, 0x8, "75ff0e6e7b9e508eb481405aba66e7a9914161e946df123d28f1d25029225885b6d1754a92b3ba991c021b5344165f0464fb7a856832e7b2808331f52dc44702262555d71e7e1a3dba2f0bbae036521fa16afaab25c6cf25c10420caf741a30fac7870fb817771786c121fbd21a9bcc506604df0a0b909ec418e41cd53f8686cb79b598d4564cc6d886ce72a0f715df26f685d039fd9439a3c37735a00c8c6b24bfc0b76006723a3159604c0938faf2600b2fe46e40ab9fc7d62cbbadc21ebb51923cc558f08b3f1ac7e5c5b01acd91ae60a5859d43a205f92b366dfd916de3c9da15eaeedfb003ba574ca"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x134, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0xe8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf3e}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x81}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x401}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xfffffffc}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xc1bc17b323c8040d}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5e}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}], {0x14}}, 0x4b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
setsockopt$SO_TIMESTAMP(r13, 0x1, 0x23, &(0x7f0000002480)=0x141, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), r2)
getsockopt$netlink(r12, 0x10e, 0x7, &(0x7f0000002500)=""/178, &(0x7f00000025c0)=0xb2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000002600), r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002640)='./cgroup/syz0\x00', 0x1ff)
close(r0)
setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000002680)="657ffa633f6a18eecb03d6bec27bc99895043fcf2f34e5a852d2755123cf33f03fb98604fc7a69d6cad050a9743a86cee0eddc2a5d908bb4eb9c514827febfb04de356b876a98930b5412316eff0a80f9c68ebf48c19f8c279c84e969439f5f4a4e6a9b7a4", 0x65)
ioctl$sock_inet6_SIOCSIFDSTADDR(r13, 0x8918, &(0x7f0000002700)={@mcast1, 0x58, r9})

1.609545744s ago: executing program 2 (id=4648):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x4000000)

1.435060613s ago: executing program 2 (id=4649):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async)

1.39026974s ago: executing program 0 (id=4650):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x0, @broadcast})
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000300)={<r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={@loopback, @empty, 0x1a}})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) (async)
writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc131857593a959e5702b3155894235fc9be3832a4f93619163c243e88760a44cb9489b9ec568a0fd09c567f4704c2999eacc24b3744fcd910ddb685cc0312b8f62048163", 0x57}, {&(0x7f0000000580)="d6e53f92715a3e0d76d37844c967dab58b012b9d4e4a9946469d94f363e1d8ee09b57f2851b6b0e1a940560dacf2d90b8f558385afb5a89fa6de574859bc08bc0e9ea023193263b2c5b5127d42b8b342acebc45f88516612e138bbcac1f463ef615ad0ce8a75cc989e58066795eb3950a614002b0d2f78bcaa17ff2bf8984608e3a32700bc5110b5c5585b2b5dfbdeb935e49f23284a8f4073f0f0fc8f1e415154c05ada8a55fd36b8888425e508724887568098b10d4c4b2aab605cd428df65ab854cbdd89ba423a3d7d958da165072b370b058ff2237a46309c45d7486f6aef62ced1a26e8b722ac43364a5b4b92624c330875bec057baf09bfaf32220253357800e1c6ec27753412890cc1b87857d5d0eb48bb01dbad137affde5ca0663a2cb215d787b7d98546ce209c62d5551e4debeedeabcb2f6e35a7c0f7a30e2e6e566bfcd271015e02ed85d54b071ce125f255c5c7d6785c8d77ca5aea2d229b283b80e4777e25eed22bd2f332bf7840290db736bf8310dbfc530d00938921ad6aed6642d511e487d351ae20a1b2defd2ba4c5a6d3777030524379ca1ab91ff939cbfa5a73396328aee9e4ce6180a75432962d8b9e850483ffaf345326e10658b9112957615fd2afc62e52e2fc5ebf479f1e7f1cf6db20ef7d4e16d9a6997c431013b1b741db1f0bd83a210e6cff09c31bb449b6aba95ac1163e4dec9abdd04a477d278645eff01f55456d41e2542b682b79619c4f6a4ce67c30d89c32e91832882872276a9fcfc4653bc03d4b15919d4f4afa78aba39ada927b671636cebb2606ea484f278472f3390542fb8a7d52a1ab173a0efc637731ac252f94554cbbf3ce84464efced8a6933faaf4ea780aacdf3e84e3ac96c27ba434bf5123960ccf730b465a9bbcaee1ee690586ddb52a6c26650359eadd06c7e82414712a63d835abe159ed7d876adbb6cada4919e3634541408783053084fd446c265916a80d6d64a58333a7445d1ce0dd53faacc85a4ab532a612c1844476e7a679e55a275e32fc5c950ef18bbec2c3bd2d3c99f865757e67e6da3e9c6840313073930c76ed32ed857b9e75f40f92e2c9ec6804aeb4504c2bce5210166b4b4d1fffb630f34d211b2e3ce3d79c9248f20a9be6e29e45e1f6dcf2387b75cb33a0aa5d8061493750c8cb209cc2b0a2f0cf556becbbbfb87e14ada1adf9b1399fe9242c4e22dbc7fb5d723181bc5d88afc65cebe3c560db503d99f7f9f09feb9378caefa8d9b57e6d4eab5fe15c28135bcf1116c91851eb5eb451ca3344576fa5c548e514010d9711528c25d180faf2e6f5c08168229c32ea95d13eb66ae50c33b2337088eceb0d16c8fa4fcffbe78e7220029b5a840e2c0ffe4018ee2bd8511de110ad5c323fe330f88b96d463dfccc2ab01898401871731ed49b70245698fc3e7fb59cee72bf7f9113d0d8d0ed5cff32ecf7d5aab17eb315b505d3586c63c4f8dd60f1fd7151340e25fc044680d4167ae334e2f7c1ce7c713021f0b5089ab891cd3783650796277e332f767562d6689b643ba435051e5680b0c678a56575db354b434349899c45cf5e625060bf9b22ff43ff94b7364914ab2f48cf678602cef73d3e5ae1157e404d3c5bc6da2ec9c32e634cec35933ce5362fe52ea9b95d5bc8385827a3504034ccc58d5bcac8c87a23619779ebbd638b2c3c52c1497b86d0da948b9c7bced5c6fd2da352e84438ca0725d275a00f697ec544dddfc65bd6232a6df54bff091dea01b449ab4aadaba3f86e7968b115dab0a96fbe581b16aa6b5e6bf73b3e8d9bdc3124736358ab044458dc14572b24a71393a99c012bd93d3145f55289402b88550d6df830579e4e31c2de0d1bbe7315fc872887181c8ad84280e2819a856da4fe423a81010970e4c6f47490f112eb5eee1dec90d3504be6d97b92ad6c7b93d84d3ee87aadc7f66ea3f7d401c38e34cea1188c339351c7644004ff3f52a3ec186ac78eed763920aa81efa0ebac84c5739dae0c6fe38e36e203ddc44b52f0d9084971e839b159a3d85a512ee723e39ed8218f96d05cf6de52c70c762689a7983d29524f446e97120683469942b7f27983e9a08c9d326cd70d6046a620501107f64e698b42e392478193243bca86d10dcef92f1e678df0c197f80886cfb9799a96ffd96bbcd657ba3519c75682895501ac4529451fda11a97e3f678fd4a315dc0613a338a68bcfa4b05f316fbafada22fc88390efcdafddcb01c42cdb3c04facb615754095dd561956f2f2997ac1a2f6e0b3c2ddaab567926d2336aa018f73d25ae001eec561b0bd3b29c67378481dfa56fdf244cbc31a3bbb577168d5ff34df68ccd704808a1435edef3339d227146268899ae97fa28ec3d94c5f172440a41afce1c0cd72e546549f7d78096870681f3f98fa3850ef26cf8f1d95a47230ad7fd4a78ff1f7311c9201420afc0addcfe0bcd848ab0eabe499e0fdb084f433dd60b9d1260c537761369a2bd3939265e35dfd2c6e5eb9ecacffa359cb7c537de711328bcebc7a2246b93bcb59a000ab76ed15c32c2c3cf641ee9b0fae52f2fe583ac8a962cca7f82e4a7375653a0584a28f5adb5871186cd7a5d7dacd36bbaa03f81d0e4c82ba47889980a88abc3664e62a6d5f853398a0e3f084a56ef9d4b95f4ec311e8363103506be6c60f5af12cb42ae5ee99adfff14afdee712f190cb873a64f645bea851361586d8e257e8484724adbffe55e2cad04ec786ed1b4c45794c950aab42bfa8913738acdb0e018472bf3090ade6190d3213d2e1b101565e414305c6e7174e628d5856386f1a767f0756c20ed23c385490870e206314a5eaec9d84b7467361147dc9f2bd09eac2178f940fe67ed95efd1ae533a77e01ef6933efb976f1498000390854a0488b290370ccf42c222af197100a98038318029a843a4067812709ac4184861e1a8f10af567ec147936000f14df2bbaba1b959a268ca8cdc456ab64aab46938fc1697cd8ca7c2f14c2ca410ab092091893f4a75bfff7d1a36cb4209f05b190a4c0be18329bb0b83fc66f81042acceab4e55d3fe1708ca3e89273029cf95fb5d2fe0da13d6eb703e786358c572f01164b05be94ec431286041307b2b72c66bef7b084c86774e857d23786ed1522b8096c177b27f8c1986e30af993c351806c56e48e986d83de6b3e5eb34d47f05480ece4efc7a6acdfde38f7f1b44da98ee6601540036173112251e66dd6e8a00bb5db8af7c2fcd593f622cf25607b36364dc0b271589f5ea26e9491a7657726c31f92efa8faf34db6e176c2b419d0360301eb8b344c6de998f08c5f13212c7f6e094622769d24d85621bd4a758987704b79479e5dadfb8d8489c53c130088019a57b2f4787a05b4adea4eb00896d6576444ebfb294ff5ecad05304662f8485bdef628b89efedfdb6483a4f6c90ef03e9d103410886b68a0a66395970a3f9d01656dd62a569c7417cf087e8b0b2d904e1c70c9ef7c824e24ee9e87f584c92c1f634b014e64dd05d5b611a76569b96231ce0256961c78ef33b70f757cb8f9851e5f7edd860d8b50e13a2dcf9a493850b948c21f1263645c18f7abde1e561e615295f75531ca145b063c71dd1612686ffc1396838c7b000a18c89d010120c6339c635458e0c7e74ca39f0edd16068d9e4cbc3696949710fb68a9d7de9a864962e8b6e5182cc592eb27b1e474f3953469090e99d9e4dea8162e2954899ad0556b25c385e137bd54412a791be8e9c423042896e46c4bb718b11273e0ac615f2217d6f0e48d2d7b52e83980b38d42b6fdbc509440d7c1a9a9e447b788fcdaf6d813cf5a57da5fa61281f5496427fc326eea517a9e69fcb214191bdab0449b2f1bd8a96eae0a0939e2424d9208d543379eb987387d871d3ff806c0d14a0e0e6d7a0c1ef06940ac7a0a8fe7fde598acbcd2b92b09ac9ebe5011623c51789632e30ebb50cabd726afba2388d4157fd1e99818127be75725d8e409ba99bb9955584e3ba8b8caa680b4eea9c13afbba80a94f417c3f8ca48e779357b1b1edd5d80535e8df2dd991b865c3dcdcb46d2dfc04ed3e2e1df170a682037060c5a13cae2ca7dd474beea14c1a7cb7daa145c23befb4b8b9173943862804cb2e3991dbd804f3b59d73839d41536aa5667f3faa3607b3f582ae8ec7fb179d93c813a1d029063e37d2a59da735e6ece824a7974c372647e486f48a1e6380d9190067f1e904b0cca7084a93d92d266c7c8b6f629704d3205733cee5aa933492fceef52d25f383b7fea987d5126260c1fc36b547630d71d5db8a93f3479d907e2bb264b937c92ec59e41e88efd6f55ac4293144dff3a160834cc7d194aceefd39d7272bd95d81d7b590f462cfc3e73a842641cb331f0f0ef725788de34074742e1e4323153850f42a027742d6405672ca16a538ee6796b8b407d6b4ecab7efaa846b57714f125eeb02688e92448c48c8b4d327e3739dd4b3a79f80b42768fd1a1e44637255d44753ee7fef5dc850049ccf051e26623c41ded88060ddece6b262203004fd28539b9ee180f10010935446500fe65af00a7d4ccec8bb423cf41f674fcabaf030f93d7cfa41bf529d9939c4ecc192257f8646e10e30779157949eb17da4ca7a28acf6f59ec74216b78148631695fa2d0151625f7d08ee95522dfdff0678ae4515127af312d02f119942feb99d7f49a739faef1c6ab5ebce2dc891963e003f1897b22bd392cab75db9de6c13f87793ff11c8510913cc971f9dcf3df3154f78bc9418c891b1625e1ce9fca8f04161c38bbb1e533bd451c13e1949067e506782ddf214a956404d2942757a7212335981d64339ab76fd7d4fe5b81d7151834d8fc038cbec105b5f6a2634dc57a6dc583f1df2fe2489d02e0b94eb40e45c4e81f2f4fe687129bd065af19552a98e3fd59d31fa2d40daccff7161a79397c5a616b023091db15b941ab65c8f5671d641f10f7d2b20aef536127b02d8c69e04f325536dfe847afb7e82b314d2aaff4418fde375b1305fec774c550a12cf1fdc2b2936cb57088f993123a696ca381ae524ad0ffa7c3b5a5f7a065b4e75191b18ba057033abe9c69725b548c5fc54340d22ae62d61d6bd2820760af61f1ee706802eda4b8f295804fb39ba2aa82fe903a29ca97dbca06eda31b4555a6b9797ad3a2a61afa54e9e3f17dbce0bfad6ef6491164b48118081cde23bd677411644d0f85a61616ae60b4048644a94b232bc6b3b59f01c1b129bb5f68e33d9e2e7c1f398b0e8a92a30241c5b0455b7099536c85c7a210d86e6af3b2a7285525a984fd2efa9647ed44581842425b92b6eeef5c4b99cdf924c1ded058fa14cedec58c718f1aa563655273749d75266f4353dd636d0a124bb5aa4062527cdf5fa0fb850d20741cfa0cc84cce416c684d669d671570eb128427d5d4555d61ed66e28bea9f69b0df9d40f4b9b754a03959f9e7aede08da4d2bf0b9f2cad4c79d46a05a9a06b2b2ec288b83146071494a7767e33a5187fefc1aa60954f5fd57a231f4d77ffe96b2d80facee44f900744b56efe8b8331853ec4d53f544064da7688b0e873e04344a517d4c3443dbafa8db1b20527d78458618a528dfff6ac8d11d63461b611fdb022e5c95d979ba6cc1c600269ad76c609a", 0xf98}], 0x3) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000400)={0x5000001a}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37d}, {&(0x7f0000000dc0)="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", 0x1c4}, {&(0x7f0000002200)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0", 0x23}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000841) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x2, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001fc0)=ANY=[@ANYBLOB="213fc476ae85b9aba49df2640500000000000067f398bcf5457fbfe97729d8a91053757a59cb9a2f88f83981a25fe2a59cf7b41fce8823c062634f3f74a1b2ab5442191b8f451bd057a1d233e4b3355f49c7ad213cb34b61057558c94982d49e26220def4e855f8a57b040967bfbb2772c8109df21690e1d988c9700e66b43d2f3560ff86a3e772f3cb6e5027261009b1d9663014124e4ee4c3ea0b3950f865fbee085eee1ac0e2c3908f3d0477541370cab041a19d047926e1e562ce67816a92fd16821eb8d871904a912ef6ac90106"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.233885792s ago: executing program 2 (id=4651):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'ipvlan0\x00', &(0x7f00000007c0)=@ethtool_rxnfc={0x30, 0x10, 0x2, {0xa, @usr_ip6_spec={@mcast2, @private2, 0x84, 0x0, 0x58}, {0x0, @local, 0x3, 0x800, [0x6, 0x5]}, @usr_ip4_spec={@remote, @local, 0x6, 0x8, 0x1, 0x8}, {0x0, @multicast, 0x3, 0x80, [0xfffff801, 0x1]}, 0x7, 0x9}, 0x2, [0x0, 0x1]}})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f00000012c0), 0x0}, 0x20)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r7, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000180)=0xb)
bind$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000140)=0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f0000a4ffffe200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a00000000000061118c000000000085000000cc0000009500000000000000e7edceb8db1dd015122e84ea95e1efc35fe42be3322c"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000ff738af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000500080000000000000000692204000000000095"], 0x0, 0x5}, 0x94)

1.154906218s ago: executing program 1 (id=4652):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002340)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

1.131231083s ago: executing program 4 (id=4653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x7f)
setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98060000", @ANYRES16=r2, @ANYBLOB="00032abd7000fbdbdf257500000008000300", @ANYRES32=r3, @ANYBLOB="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"/1753], 0x698}, 0x1, 0x0, 0x0, 0x800}, 0x24008084)

1.070338659s ago: executing program 0 (id=4654):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x3, {0x0, 0xf0, 0x1}, 0xfe}, 0x18)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x1f, 0x0, 0x730a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
connect$802154_dgram(r7, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000000)='bridge0\x00')
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0x5, 0x0, 0x0, 0x10, 0x10}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x0, 0xc4}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x7, 0x7, 0xf7, 0x10, 0x6, @random="2017f2c71cc2"}, 0x10) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async)
bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x3, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) (async)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x1f, 0x0, 0x730a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
connect$802154_dgram(r7, &(0x7f0000000140)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async)
ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000000)='bridge0\x00') (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) (async)

1.003915163s ago: executing program 3 (id=4655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)

790.448606ms ago: executing program 3 (id=4656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x8840) (async)
socket$nl_generic(0x10, 0x3, 0x10)

539.884383ms ago: executing program 3 (id=4657):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)

400.536141ms ago: executing program 4 (id=4658):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r1, &(0x7f0000000000)="600000042014334000000000000000000050000000000001000000000000000000000200a5000100000000", 0x2b, 0x4000, &(0x7f0000000200)={0xa, 0x0, 0x1002, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x688)

382.437554ms ago: executing program 3 (id=4659):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0)

305.726217ms ago: executing program 1 (id=4660):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
close(r1)
sendmsg$nl_route_sched(r2, &(0x7f0000000ec0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000005c0)=@newchain={0x884, 0x64, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0x7}, {0xa, 0xf}, {0x3, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x800, 0x2, [@TCA_FLOW_EMATCHES={0x7fc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xd, 0x7, 0x6b}, {{0x2, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x8000}, {0x14019858, 0x8, 0x88, 0x2000000}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x4580}, {0x1, 0x2, 0x7, 0x6}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x8}, {0x2, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xe15f, 0x2, 0x51}, {0x4, 0x3, 0x0, "d72681"}}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x40, 0x0, 0xde6e}, "9d0cf4ac0be2383d80e086d61f4a9f5536a2c81daa8331953bf47d2deccd6287e86582005fc6e028bb14aa665fd147c1c740c682a9356422a4f2f32db3f59fe8575e"}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x5, 0x4, 0xa94}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_VAR="4e28b96bb3e985e13ca8", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="1f7ad1db", @TCF_META_TYPE_VAR="f83fcce840029b", @TCF_META_TYPE_VAR="f8", @TCF_META_TYPE_VAR="75fd14"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4a18, 0x2, 0x9}, {0x101, 0x1, 0x3, "cb"}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xd912, 0x3, 0x7}, {0x805, 0x8, 0x10000, 0xfff}}}]}, @TCA_EMATCH_TREE_LIST={0x140, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x10}, {0x3, 0x3, 0xffffffff, 0x7fffffff}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x76d, 0x8, 0x401}, {0x2, 0x3, 0x3}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x10}, {0x770, 0x2, 0x6, 0x2, 0xb, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfb9d, 0x1, 0x1}, {0x2, 0x0, 0x200, 0x4, 0xb, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x66, 0x20, 0x9, 0x101}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffa, 0x3, 0x34df}, {0x2, 0x200, 0x3, 0x5}}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfffe, 0x7, 0x8}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x6c, 0x3, 0x0, 0x0, {{0x0, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x47, 0x5, "1f61026dc4e2c2eb3d8252cb5f01e55238fd7c013c8965769baf4bbaec06bfcbb29189715fb67d0ec5ae483bfc401ebbfc2580811567061a21dafee239ba46f58ba61a"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}]}, @TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100, 0x2, 0x0, 0x0, {{0x908, 0x0, 0x1}, "576687d2ab16dc1240f76374193a38e54e8021e3810729d5a07e87ef80075d32dcab954e1f8c3b7042b5dc0437fca5f7b55d94b63b1e885be822265baf4cbbf2c919dfaa69fca4015b93cd351cd76006f28280bf8adca269e6cae835a773892ffe0c958a29df27e05e9f15818a9b069fca5da85dbc6185e98a46b048313fb0da4c5d824c9274e7b7d6e2ac50ded335d46e63010db07b548d28b51f4b578b1fdf76b606c035ed18db59aa924f712f2f2984ad5c3497eb7545df88d7269084dc3bb5a7a78c41627bf5598cf02682fac65c0ab94caf4b979a7b010ce10ebd073e87fe93ac916f0da2db915ebab25a9552873d88"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x2000}, {0x6, 0x9, 0x7, 0x4, 0x7, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfffa, 0x3, 0x7fff}, {0x4, 0x6, 0x9, 0x1}}}, @TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x5, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x422, 0x3, 0x5}, {0x9, 0x5, 0x9, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x60, 0x2, 0xfff7}, {0x3ff, 0x7, 0x1, "d56c2578444b73"}}}, @TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x8001, 0x4, 0xfc00}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa3d, 0xf}, {0x8, 0x5}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="8f11", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="3713ad52ff"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x7, 0x1}, {0x5, 0x5, 0x2}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x84, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x5}, "34059cb8a1b97dc495b81af18213e6eae3a938526de6c66c03117eac4cd2793de46df0b12b8096bc5b2287fa97288c3a10e897a9699f50b3fac7f3d63e5e831a233b292a8e4ed5825f5fb9c1a35a5ce1f2edcb1d5247fe3f64231f9a8ed133703b6d5477857f7255a0ae2c7e7d806a7b330c3bf9cee6"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7a5, 0x1, 0x4d9}, {0xb, 0x101, 0x3, 0x7, 0x6, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xfffb}, {0x1, 0x0, 0x45, 0xacf}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1ff, 0x3, 0x7f}, {0x7fff, 0x2, 0x9, 0x800}}}, @TCF_EM_IPT={0xf8, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0xd9, 0x5, "73c0d4637b23c8d52eb6d654b0ca136da7c56c3abd465c2129aed66ca03a608c27147e36b6cc7bfd0eb6d04176acd9fc8f9c2deeeae9f61523d9fc17cdb00ffde8474c25c8cf474e9e36d93ddda48a2be5fac6ad4542d673f00880e93f0f7c1219d787725bd56ad1190ed92edfdf06c11e6e20762870e0eb907913ff26cbcc2e3137df0d10c44eab99c2aaf1bb3a1dfe2c5d03974629b2bcca1e28da9d558d55eeca34f16b45019f1a6c112872a356da00d5abc7d18e5cc2a23d23d24436df16d24cf305f4f139cad0a48181962cd71dce65d62aac"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x5, 0xa, 0x0, "7dac869e416be2209801"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x58d, 0x7, 0x5}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x2c, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="a53d22", @TCF_META_TYPE_VAR="8b91", @TCF_META_TYPE_VAR="fda3c0", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xda, 0x1, 0x1}, {0x6, 0x2, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3}, {0x10, 0x7f}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x83}, {0x1ff, 0x5, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xf, 0x8, 0x5870}, {0x0, 0x6, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x9}, {0x7, 0xb2, 0x3, 0xd, 0x7, 0x1, 0x3}}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0x3}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="992227e5761e216a42", @TCF_META_TYPE_VAR="3e9540e830fa81520ce2", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="38363ba21bd673fe"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="3ad8d8e943872e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5636, 0x5, 0x1}, {0x3ff, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x4}, {0x7, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="31991b1b1eebfda6", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CONTAINER={0x90, 0x3, 0x0, 0x0, {{0xc, 0x0, 0x5}, "61fc303763c11c8a553f54ce3b8b583d89f446a0076f4c52788a1ef19a362812439dbbf396afd858323a24fa61c3e21042aa8023fbed2a9ed17909b03346230f67d0d61b3f255e6ad1565c954b2f72367a5c0e9986529ad82b6c203eac2e9b2d127e5a94390b30eaa3fbf7b51b8166e501192f48cb71d74b410b13556b954ad7300a"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x6, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x884}, 0x1, 0x0, 0x0, 0x860}, 0x8040)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94)

288.249709ms ago: executing program 2 (id=4661):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) (async)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) (async)
sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000854)
shutdown(r1, 0x1)

64.877922ms ago: executing program 4 (id=4662):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000002c0)=0x4, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x40000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0xfffeffff, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x4, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x58}}, 0x24040084)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x401, &(0x7f0000000280)=0x2)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x10}]}}]}, 0x38}}, 0x24040084)

0s ago: executing program 3 (id=4663):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
listen(r1, 0x802)
syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a83d0081004000000c000000200751cbc1895588caa3220100"], 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
read(r4, &(0x7f0000000000)=""/108, 0x6c)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2=0xac14143c}})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="270086dd03000a000000140000006c07010033d411"], 0x340a)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x8dc, 0x30, 0x12f, 0x0, 0x0, {}, [{0x8c8, 0x1, [@m_police={0x8c4, 0x1, 0x0, 0x0, {{0xb}, {0x898, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x80000001, 0x100, {0x9, 0x0, 0x2, 0x5f, 0x101, 0x81}, {0x0, 0x0, 0x3, 0xee, 0x6, 0x8}, 0x101, 0x4, 0x8}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8dc}}, 0x0)

kernel console output (not intermixed with test programs):

netlink: zone id is out of range
[  473.009399][T18295] netlink: zone id is out of range
[  473.165064][T18303] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  473.298136][T18202] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.298323][T18202] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.298526][T18202] bridge_slave_0: entered allmulticast mode
[  473.326020][T18202] bridge_slave_0: entered promiscuous mode
[  473.346138][T18202] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.346968][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'.
[  473.348203][T18202] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.348442][T18202] bridge_slave_1: entered allmulticast mode
[  473.360608][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'.
[  473.387683][T18202] bridge_slave_1: entered promiscuous mode
[  473.515809][T18202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.519438][T18202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.640944][T18202] team0: Port device team_slave_0 added
[  473.670480][T18202] team0: Port device team_slave_1 added
[  473.765620][T18202] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.765641][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.765671][T18202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.775878][T18202] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.775922][T18202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.776004][T18202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.052990][T18202] hsr_slave_0: entered promiscuous mode
[  474.055915][T18202] hsr_slave_1: entered promiscuous mode
[  474.057670][T18202] debugfs: 'hsr0' already exists in 'hsr'
[  474.057694][T18202] Cannot create hsr debugfs directory
[  474.108456][T18332] netlink: 'syz.2.3151': attribute type 97 has an invalid length.
[  474.108485][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  474.108505][T18332] netlink: 'syz.2.3151': attribute type 97 has an invalid length.
[  474.108520][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  474.162566][T18334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3152'.
[  474.220480][T18335] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  474.372051][T18343] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3154'.
[  474.520362][T18348] 8021q: VLANs not supported on sit0
[  474.682266][T17089] Bluetooth: hci2: command tx timeout
[  475.598042][T18365] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  475.669380][T18369] GUP no longer grows the stack in syz.0.3162 (18369): 200000003000-20000000a000 (200000001000)
[  475.669442][T18369] CPU: 1 UID: 0 PID: 18369 Comm: syz.0.3162 Not tainted syzkaller #0 PREEMPT(full) 
[  475.669471][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  475.669496][T18369] Call Trace:
[  475.669511][T18369]  <TASK>
[  475.669522][T18369]  dump_stack_lvl+0xe8/0x150
[  475.669567][T18369]  __get_user_pages+0x23b6/0x2750
[  475.669612][T18369]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  475.669677][T18369]  ? __gup_longterm_locked+0xc3b/0x15c0
[  475.669724][T18369]  __gup_longterm_locked+0xd52/0x15c0
[  475.669763][T18369]  ? lock_acquire+0x115/0x350
[  475.669812][T18369]  gup_fast_fallback+0x1d92/0x20e0
[  475.669889][T18369]  ? __pfx_gup_fast_fallback+0x10/0x10
[  475.669926][T18369]  ? lock_acquire+0x115/0x350
[  475.669949][T18369]  ? is_valid_gup_args+0x11f/0x200
[  475.669986][T18369]  ? get_user_pages_fast+0x4d/0xb0
[  475.670022][T18369]  __iov_iter_get_pages_alloc+0x378/0xa40
[  475.670066][T18369]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  475.670109][T18369]  iov_iter_get_pages2+0x5e/0xa0
[  475.670147][T18369]  __se_sys_vmsplice+0x7b5/0x1660
[  475.670199][T18369]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  475.670229][T18369]  ? __pfx_futex_wait+0x10/0x10
[  475.670270][T18369]  ? userfaultfd_unmap_complete+0x292/0x310
[  475.670353][T18369]  do_syscall_64+0x166/0x520
[  475.670380][T18369]  ? trace_irq_disable+0x3b/0x140
[  475.670401][T18369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.670422][T18369]  ? clear_bhb_loop+0x70/0xc0
[  475.670448][T18369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.670468][T18369] RIP: 0033:0x7fd5f279e159
[  475.670488][T18369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.670506][T18369] RSP: 002b:00007fd5f09f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  475.670529][T18369] RAX: ffffffffffffffda RBX: 00007fd5f2a26090 RCX: 00007fd5f279e159
[  475.670545][T18369] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000027
[  475.670558][T18369] RBP: 00007fd5f283506b R08: 0000000000000000 R09: 0000000000000000
[  475.670572][T18369] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  475.670594][T18369] R13: 00007fd5f2a26128 R14: 00007fd5f2a26090 R15: 00007ffff1c2ff08
[  475.670629][T18369]  </TASK>
[  475.926732][T18202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.926773][T18202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.926803][T18202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.029260][T18367] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  476.029727][T18367] gretap1: entered promiscuous mode
[  476.029745][T18367] gretap1: entered allmulticast mode
[  476.200125][T18202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.200168][T18202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.200202][T18202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.292019][T18386] netlink: 'syz.1.3168': attribute type 61 has an invalid length.
[  476.450482][T18202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.450525][T18202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.450555][T18202] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.673493][T18399] netlink: 'syz.1.3171': attribute type 2 has an invalid length.
[  476.701680][T18202] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.701721][T18202] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.741305][T18202] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  476.764417][T17089] Bluetooth: hci2: command tx timeout
[  476.864294][T18402] veth9: entered promiscuous mode
[  477.000587][T18407] x_tables: duplicate entry at hook 4
[  477.006848][T18410] bond0: invalid NS target :: specified for addition
[  477.006886][T18410] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  477.008205][T18410] __nla_validate_parse: 3 callbacks suppressed
[  477.008225][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'.
[  477.008256][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'.
[  477.202840][T18202] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  477.225495][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  477.239468][T18202] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  477.263689][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  477.285335][T18202] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  477.295894][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3179'.
[  477.295937][T18418] block nbd2: Unsupported socket: should be TCP or UNIX.
[  477.329982][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  477.331060][T18202] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  477.373864][T18202] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  477.455210][T18430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3179'.
[  477.456092][T18428] bridge1: the hash_elasticity option has been deprecated and is always 16
[  477.607769][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.608047][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.608259][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.608512][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.608722][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.608921][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.629076][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.696403][T18435] netlink: 'syz.3.3182': attribute type 4 has an invalid length.
[  477.786696][T18435] net_ratelimit: 34 callbacks suppressed
[  477.786720][T18435] openvswitch: netlink: Key type 122 is out of range max 32
[  477.809375][T18202] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.857624][T18202] 8021q: adding VLAN 0 to HW filter on device team0
[  477.881132][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  477.895235][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.895349][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.974640][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.974737][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.495771][T18202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.673706][T18441] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  478.673734][T18441] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  478.762896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.763293][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.763698][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.818156][T18441] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  478.818187][T18441] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  478.843747][T17089] Bluetooth: hci2: command tx timeout
[  478.886873][T18441] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  478.886899][T18441] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  478.941206][T18202] veth0_vlan: entered promiscuous mode
[  478.957359][T18202] veth1_vlan: entered promiscuous mode
[  478.992746][T18202] veth0_macvtap: entered promiscuous mode
[  478.997160][T18202] veth1_macvtap: entered promiscuous mode
[  479.029184][T18202] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.045221][T18202] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.124124][ T8536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.124181][ T8536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.124220][ T8536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.124258][ T8536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.397541][T18429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  480.400656][T18444] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3184'.
[  480.615799][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'.
[  480.674963][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.674991][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.794557][T18465] 8021q: adding VLAN 0 to HW filter on device team0
[  480.797475][T18465] bond0: (slave team0): Enslaving as an active interface with an up link
[  480.867828][ T8529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.867854][ T8529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.016208][T18476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3189'.
[  481.307993][T18499] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  481.405457][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 300 seconds
[  481.405503][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 300 seconds
[  481.405532][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 300 seconds
[  481.405561][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 300 seconds
[  481.846583][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  481.862635][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  481.865808][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  481.869381][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  481.871569][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  482.046034][T18517] validate_nla: 5 callbacks suppressed
[  482.046060][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.046427][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.046670][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.046905][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.047135][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.047374][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.117866][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.118618][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.118875][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.119098][T18517] netlink: 'syz.3.3194': attribute type 83 has an invalid length.
[  482.227104][T18527] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3196'.
[  482.401055][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'.
[  482.819017][T18542] bond1: option packets_per_slave: invalid value (18446744073709551615)
[  482.819060][T18542] bond1: option packets_per_slave: allowed values 0 - 65535
[  482.828076][T18542] bond1 (unregistering): Released all slaves
[  482.954053][T18547] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3200'.
[  483.064722][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'.
[  483.452003][T18564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'.
[  483.857743][T18583] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3210'.
[  483.882211][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.882643][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.883036][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.883420][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.964231][T17089] Bluetooth: hci4: command tx timeout
[  483.988335][T18515] lo speed is unknown, defaulting to 1000
[  484.015148][T18592] IPv6: NLM_F_CREATE should be specified when creating new route
[  484.674381][T18616] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  484.861858][T18515] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.862378][T18515] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.862886][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[  484.863109][T18515] bridge_slave_0: entered allmulticast mode
[  484.865964][T18515] bridge_slave_0: entered promiscuous mode
[  484.910734][T18515] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.910897][T18515] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.911389][T18515] bridge_slave_1: entered allmulticast mode
[  484.944937][T18515] bridge_slave_1: entered promiscuous mode
[  484.960094][T18623] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  485.074268][T18515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.078858][T18515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.164835][T18515] team0: Port device team_slave_0 added
[  485.170378][T18515] team0: Port device team_slave_1 added
[  485.215001][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3222'.
[  485.320144][T18515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.320165][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.320195][T18515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.350480][T18515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.350541][T18515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.350614][T18515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.455328][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'.
[  485.587897][T18515] hsr_slave_0: entered promiscuous mode
[  485.588789][T18515] hsr_slave_1: entered promiscuous mode
[  485.589453][T18515] debugfs: 'hsr0' already exists in 'hsr'
[  485.589471][T18515] Cannot create hsr debugfs directory
[  485.968671][T18515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  485.968716][T18515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.042845][T17089] Bluetooth: hci4: command tx timeout
[  486.240972][T18515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.241015][T18515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.529306][T18515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.546079][T18515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.803155][T18515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.803194][T18515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.949365][T18698] x_tables: duplicate underflow at hook 1
[  487.279691][T18709] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3242'.
[  487.280364][T18709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3242'.
[  487.575771][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3246'.
[  487.808056][T18515] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  487.836186][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.837367][T18515] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  487.868260][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.909931][T18515] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  487.941077][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  487.950242][T18515] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  487.990590][T18515] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.121926][T17089] Bluetooth: hci4: command tx timeout
[  488.328490][T18762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  488.328514][T18762] IPv6: NLM_F_CREATE should be set when creating new route
[  488.328561][T18762] IPv6: NLM_F_CREATE should be set when creating new route
[  488.328590][T18762] IPv6: NLM_F_CREATE should be set when creating new route
[  488.329215][T18762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  488.416388][T18759] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3255'.
[  488.466520][T18515] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.549994][T18515] 8021q: adding VLAN 0 to HW filter on device team0
[  488.569577][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'.
[  488.604442][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.604561][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.637668][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.637779][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.673456][T18773] tls_set_device_offload_rx: netdev not found
[  488.880087][T18785] validate_nla: 59 callbacks suppressed
[  488.880115][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.880505][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.880822][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.881157][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.881542][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.933520][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.935097][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.935444][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.935729][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  488.936510][T18785] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  489.086192][T18790] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3262'.
[  489.375771][T18794] nbd: couldn't find device at index 15663104
[  489.539739][T18799] can: request_module (can-proto-3) failed.
[  489.642157][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.642524][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.642879][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.643490][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.738759][T18812] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  489.739325][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3268'.
[  489.765140][T18815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3268'.
[  490.008339][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'.
[  490.204093][T17089] Bluetooth: hci4: command tx timeout
[  490.829748][T18515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.856607][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3276'.
[  491.045206][ T1425] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  491.046470][ T8531] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  491.046520][ T8531] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  491.046562][ T8531] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  491.118987][T18855] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20000
[  491.160894][T18515] veth0_vlan: entered promiscuous mode
[  491.234398][T18515] veth1_vlan: entered promiscuous mode
[  491.318909][T18861] tunl0: entered promiscuous mode
[  491.421441][T18515] veth0_macvtap: entered promiscuous mode
[  491.459434][T18515] veth1_macvtap: entered promiscuous mode
[  491.590604][T18515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.850998][T18515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.968095][T18889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.019123][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  492.019869][ T1425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.020471][ T1425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  492.020877][ T1425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  492.367035][ T1425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.367061][ T1425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.565702][ T8531] pimreg3: left allmulticast mode
[  492.603141][ T8531] batman_adv: batadv0: Interface deactivated: gretap4
[  492.943631][ T8531] bond8 (unregistering): (slave xfrm2): Releasing backup interface
[  492.943662][ T8531] xfrm2 (unregistering): left promiscuous mode
[  493.100706][ T8531] bond4 (unregistering): (slave gretap2): Releasing active interface
[  493.134235][ T8531] batman_adv: batadv0: Removing interface: gretap3
[  493.200630][ T8531] batman_adv: batadv0: Removing interface: gretap4
[  493.268613][ T8531] bond0 (unregistering): (slave geneve2): Releasing active interface
[  493.376457][ T8531] bond5 (unregistering): (slave bridge6): Releasing backup interface
[  493.376496][ T8531] bridge6 (unregistering): left promiscuous mode
[  493.472433][ T8531] .` (unregistering): Released all slaves
[  493.499474][ T8531] bond1 (unregistering): (slave bond0): Releasing active interface
[  493.500273][ T8531] bond1 (unregistering): Released all slaves
[  493.546127][ T8531] bond2 (unregistering): Released all slaves
[  493.595065][ T8531] bond0 (unregistering): Released all slaves
[  493.615151][ T8531] bond3 (unregistering): Released all slaves
[  493.641595][ T8531] bond4 (unregistering): Released all slaves
[  493.663685][ T8531] bond5 (unregistering): Released all slaves
[  493.685761][ T8531] bond6 (unregistering): Released all slaves
[  493.720774][ T8531] bond7 (unregistering): Released all slaves
[  493.743184][ T8531] bond8 (unregistering): Released all slaves
[  493.774760][ T8531] bond9 (unregistering): Released all slaves
[  493.791592][T18923] __nla_validate_parse: 3 callbacks suppressed
[  493.791616][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'.
[  494.031663][T18921] syzkaller0: entered promiscuous mode
[  494.031694][T18921] syzkaller0: entered allmulticast mode
[  494.198651][T18923] validate_nla: 60 callbacks suppressed
[  494.198678][T18923] netlink: 'syz.4.3297': attribute type 1 has an invalid length.
[  494.198695][T18923] netlink: 'syz.4.3297': attribute type 2 has an invalid length.
[  494.201442][T18940] x_tables: unsorted entry at hook 1
[  494.249917][ T8531] : left promiscuous mode
[  494.369612][ T8531] tipc: Disabling bearer <udp:syz2>
[  494.372706][ T8531] tipc: Left network mode
[  494.421446][ T8536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.421475][ T8536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.928456][ T8531] IPVS: stopping master sync thread 11539 ...
[  495.000301][T18943] syzkaller0: entered promiscuous mode
[  495.000337][T18943] syzkaller0: entered allmulticast mode
[  495.340122][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'.
[  495.340150][T18973] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3307'.
[  495.340168][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'.
[  495.402144][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.402653][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.403037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.403404][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.565746][ T4988] udevd[4988]: worker [5973] /devices/virtual/block/nbd0 timeout; kill it
[  498.565866][ T4988] udevd[4988]: seq 11483 '/devices/virtual/block/nbd0' killed
[  498.914740][T18968] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  498.947641][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3309'.
[  499.408438][T18998] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  499.438984][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  499.453807][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.455365][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.456441][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.457088][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  499.687529][ T8531] hsr_slave_0: left promiscuous mode
[  499.725400][ T8531] hsr_slave_1: left promiscuous mode
[  499.818391][ T8531] veth1_macvtap: left promiscuous mode
[  499.818438][ T8531] veth0_macvtap: left promiscuous mode
[  499.819701][ T8531] veth1_vlan: left promiscuous mode
[  499.819811][ T8531] veth0_vlan: left promiscuous mode
[  500.532154][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.532551][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.532962][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.533310][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.752492][T19040] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.3320'.
[  500.856408][T19042] syzkaller0: entered promiscuous mode
[  500.856436][T19042] syzkaller0: entered allmulticast mode
[  500.875604][T19042] netlink: 'syz.4.3321': attribute type 1 has an invalid length.
[  501.069711][T19042] 8021q: adding VLAN 0 to HW filter on device bond2
[  501.096463][T19042] bond1: (slave bond2): making interface the new active one
[  501.097067][T19042] bond1: (slave bond2): Enslaving as an active interface with an up link
[  501.352949][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.362065][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.482320][T19075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.482397][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.482604][T19075] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.482631][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3325'.
[  501.579623][T17089] Bluetooth: hci1: command tx timeout
[  502.524171][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  503.646426][T17089] Bluetooth: hci1: command tx timeout
[  504.000631][ T8531] IPVS: stop unused estimator thread 0...
[  504.029153][T19052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  504.507073][T19005] lo speed is unknown, defaulting to 1000
[  504.739436][T19104] veth3: entered promiscuous mode
[  504.739468][T19104] veth3: entered allmulticast mode
[  505.368430][T19132] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3338'.
[  505.579914][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'.
[  505.723145][T17089] Bluetooth: hci1: command tx timeout
[  505.766055][T19005] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.766242][T19005] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.766390][T19005] bridge_slave_0: entered allmulticast mode
[  505.768452][T19005] bridge_slave_0: entered promiscuous mode
[  505.798681][T19005] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.798865][T19005] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.799036][T19005] bridge_slave_1: entered allmulticast mode
[  505.801137][T19005] bridge_slave_1: entered promiscuous mode
[  505.836958][T19150] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  505.850890][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'.
[  505.953248][T19005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.990932][T19005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.192657][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'.
[  506.192685][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'.
[  506.282126][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.282533][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.282891][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.283285][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.346161][T19005] team0: Port device team_slave_0 added
[  506.411364][T19005] team0: Port device team_slave_1 added
[  506.641046][T19005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.641069][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.641098][T19005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.654315][T19005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.654402][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.654496][T19005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.753191][T19186] netlink: 'syz.1.3349': attribute type 61 has an invalid length.
[  506.826352][T19005] hsr_slave_0: entered promiscuous mode
[  506.830610][T19005] hsr_slave_1: entered promiscuous mode
[  506.831449][T19005] debugfs: 'hsr0' already exists in 'hsr'
[  506.831472][T19005] Cannot create hsr debugfs directory
[  507.438608][T19215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3360'.
[  507.499214][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'.
[  507.685931][T19217] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.708819][T19217] team0: Port device bond1 added
[  507.805246][T17089] Bluetooth: hci1: command tx timeout
[  507.881694][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3366'.
[  507.975057][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3368'.
[  507.999563][T19229] tunl0: entered promiscuous mode
[  508.014744][T19229] netlink: 'syz.1.3365': attribute type 3 has an invalid length.
[  508.014774][T19229] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3365'.
[  508.141040][T19235] team0 (unregistering): Port device team_slave_0 removed
[  508.179836][T19235] team0 (unregistering): Port device team_slave_1 removed
[  508.238561][T19240] tipc: Invalid UDP bearer configuration
[  508.238612][T19240] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  508.241263][T19242] netlink: 'syz.3.3368': attribute type 3 has an invalid length.
[  508.306404][T19230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.660487][T19005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.660532][T19005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  508.660561][T19005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  508.699234][T19265] Bluetooth: MGMT ver 1.23
[  508.834515][T19278] netlink: 'syz.1.3372': attribute type 1 has an invalid length.
[  508.879036][T19264] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  508.893901][T19264] bond3 (unregistering): Released all slaves
[  509.016247][T19273] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  509.019898][T19273] bond3 (unregistering): Released all slaves
[  509.087075][T19284] batman_adv: batadv0: Adding interface: gretap2
[  509.087100][T19284] batman_adv: batadv0: The MTU of interface gretap2 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.087140][T19284] batman_adv: batadv0: Interface activated: gretap2
[  509.246950][T19005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.246995][T19005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  509.247024][T19005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  509.502051][T19005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.502093][T19005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  509.503912][T19005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  509.561458][T19296] netlink: 'syz.2.3378': attribute type 2 has an invalid length.
[  510.271159][T19005] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  510.295942][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  510.300189][T19005] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  510.338161][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.341675][T19005] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  510.376588][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.380667][T19005] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  510.406629][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.733719][T19005] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.797212][T19005] 8021q: adding VLAN 0 to HW filter on device team0
[  510.823063][T19332] ip6t_rpfilter: unknown options
[  510.850727][T19332] __nla_validate_parse: 6 callbacks suppressed
[  510.850756][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'.
[  510.851121][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.851230][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.902233][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.902372][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.115241][T19346] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3389'.
[  511.180891][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3390'.
[  511.402331][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.402686][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.403011][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.403336][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.459728][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'.
[  511.483371][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 330 seconds
[  511.483418][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 330 seconds
[  511.483448][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 330 seconds
[  511.483477][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 330 seconds
[  512.058164][T19005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.326121][T19005] veth0_vlan: entered promiscuous mode
[  512.342900][T19005] veth1_vlan: entered promiscuous mode
[  512.520786][T19005] veth0_macvtap: entered promiscuous mode
[  512.548572][T19005] veth1_macvtap: entered promiscuous mode
[  512.600829][T19005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.638857][T19005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.742517][ T8531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.742576][ T8531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.742615][ T8531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.777644][ T8533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.943659][T19408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3402'.
[  512.987104][ T8536] pim6reg527: left allmulticast mode
[  512.987273][ T8536] dvmrp0: left allmulticast mode
[  512.987368][ T8536] dvmrp1: left allmulticast mode
[  513.342038][T19426] netlink: 'syz.4.3405': attribute type 4 has an invalid length.
[  513.755084][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3406'.
[  513.755138][T19442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'.
[  513.990846][ T8536] bond4 (unregistering): (slave geneve2): Releasing active interface
[  514.130166][ T8536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  514.146295][ T8536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  514.149027][ T8536] bond0 (unregistering): (slave team0): Releasing backup interface
[  514.151190][ T8536] bond0 (unregistering): Released all slaves
[  514.182949][ T8536] bond1 (unregistering): Released all slaves
[  514.199229][ T8536] bond2 (unregistering): Released all slaves
[  514.217937][ T8536] bond3 (unregistering): Released all slaves
[  514.250266][ T8536] bond4 (unregistering): Released all slaves
[  514.269054][ T8536] bond5 (unregistering): (slave wireguard0): Releasing backup interface
[  514.269080][ T8536] wireguard0: left promiscuous mode
[  514.295564][ T8536] bond5 (unregistering): Released all slaves
[  514.314453][ T8536] bond6 (unregistering): Released all slaves
[  514.331865][ T8536] bond7 (unregistering): Released all slaves
[  514.437300][ T8533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.437330][ T8533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.712453][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.712482][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.759517][ T8536] tipc: Left network mode
[  514.831168][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3408'.
[  514.962547][ T8536] IPVS: stopping master sync thread 12317 ...
[  515.228780][T19463] team0: Device veth1_macvtap failed to register rx_handler
[  515.263105][T19474] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3412'.
[  515.427113][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3412'.
[  515.632136][T19483] netlink: 'syz.1.3414': attribute type 22 has an invalid length.
[  515.728722][T19483] netlink: 'syz.1.3414': attribute type 22 has an invalid length.
[  515.749584][T19493] netlink: 'syz.3.3415': attribute type 1 has an invalid length.
[  515.772141][ T8527] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  515.772200][ T8527] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  515.772241][ T8527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  515.772281][ T8527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  516.387372][T19516] pimreg: entered allmulticast mode
[  516.479113][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.479144][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.506733][ T8536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  516.506761][ T8536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.591353][ T8536] veth1_macvtap: left promiscuous mode
[  516.591461][ T8536] veth1_vlan: left promiscuous mode
[  517.127353][T19544] nbd2: detected capacity change from 0 to 63
[  517.162670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.163035][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.163390][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.163744][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.616986][T17089] block nbd2: Receive control failed (result -104)
[  517.758411][ T8536] team0 (unregistering): Port device team_slave_1 removed
[  517.784105][ T8536] team0 (unregistering): Port device team_slave_0 removed
[  518.128545][ T8536] team0 (unregistering): Port device dummy0 removed
[  519.445890][T19625] __nla_validate_parse: 4 callbacks suppressed
[  519.445916][T19625] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3440'.
[  519.506074][ T8536] IPVS: stop unused estimator thread 0...
[  519.788555][T19640] nbd: must specify a size in bytes for the device
[  519.925538][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'.
[  520.026726][T19647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'.
[  520.606879][T19671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.766231][ T8529] nci: nci_rx_work: unknown MT 0x1
[  520.998403][T19688] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3451'.
[  521.038359][T19693] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3451'.
[  521.078166][T19696] netlink: 'syz.1.3452': attribute type 10 has an invalid length.
[  521.078578][T19696] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.079269][T19696] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.111293][T19696] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.111452][T19696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.111978][T19696] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.112114][T19696] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.148047][T19696] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  521.177379][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'.
[  521.177463][T19696] bridge_slave_1: left allmulticast mode
[  521.177482][T19696] bridge_slave_1: left promiscuous mode
[  521.177783][T19696] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.229978][T19696] bridge_slave_0: left allmulticast mode
[  521.230014][T19696] bridge_slave_0: left promiscuous mode
[  521.230291][T19696] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.272811][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'.
[  521.274669][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'.
[  521.389921][T19696] bond0: (slave bridge0): Releasing backup interface
[  521.490638][T19707] syzkaller0: entered promiscuous mode
[  521.490669][T19707] syzkaller0: entered allmulticast mode
[  521.670361][T19721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'.
[  521.689952][T19720] x_tables: duplicate underflow at hook 2
[  521.894524][T19728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.953375][T19731] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3459'.
[  522.212865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.213296][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.213663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.213994][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.274536][T19740] IPVS: set_ctl: invalid protocol: 4 100.1.0.255:20004
[  522.325494][T19745] netlink: 'syz.2.3463': attribute type 4 has an invalid length.
[  522.431136][T19747] batman_adv: batadv0: Adding interface: macvtap1
[  522.431162][T19747] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.431196][T19747] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  523.610504][T19795] syzkaller1: entered promiscuous mode
[  523.610530][T19795] syzkaller1: entered allmulticast mode
[  523.679555][T19677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  524.101854][T19815] tipc: Trying to set illegal importance in message
[  524.140948][T19815] tipc: Trying to set illegal importance in message
[  524.488155][T19844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.433418][ T8531] IPVS: starting estimator thread 0...
[  525.522211][T19868] IPVS: using max 30 ests per chain, 72000 per kthread
[  525.652299][T19870] netlink: 'syz.3.3480': attribute type 9 has an invalid length.
[  525.652324][T19870] netlink: 'syz.3.3480': attribute type 4 has an invalid length.
[  526.066796][T19891] netlink: 'syz.0.3485': attribute type 28 has an invalid length.
[  526.066822][T19891] netlink: 'syz.0.3485': attribute type 3 has an invalid length.
[  526.066837][T19891] __nla_validate_parse: 1 callbacks suppressed
[  526.066849][T19891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3485'.
[  526.175127][T19891] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  527.246524][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  527.246570][T19950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.278052][T19950] netlink: 'syz.0.3501': attribute type 11 has an invalid length.
[  527.298213][T19953] netlink: 'syz.0.3501': attribute type 11 has an invalid length.
[  527.300802][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  527.300846][T19954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.354191][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3500'.
[  527.354235][T19958] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  527.402229][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.402589][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.402883][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.069725][T19984] nbd: must specify at least one socket
[  528.083614][T19984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3506'.
[  528.083657][T19984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3506'.
[  528.134754][T19984] gretap1: entered promiscuous mode
[  528.134782][T19984] gretap1: entered allmulticast mode
[  528.254279][T19993] ip6t_rt: unknown flags 36
[  528.284719][T19993] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  528.317845][T19993] netlink: 'syz.2.3507': attribute type 1 has an invalid length.
[  528.553557][T20004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.036486][T20022] syzkaller0: entered promiscuous mode
[  529.036511][T20022] syzkaller0: entered allmulticast mode
[  529.214536][T20031] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  529.715164][T20048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  529.715186][T20048] IPv6: NLM_F_CREATE should be set when creating new route
[  529.859007][T20054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3524'.
[  530.003869][T20063] xt_NETMAP: bad MAP_IPS.
[  530.466350][   T49] bond0: (slave bond_slave_0): interface is now down
[  530.466394][   T49] bond0: (slave bond_slave_1): interface is now down
[  530.546632][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  530.584940][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  530.602231][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.602585][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.604699][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  530.642005][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  530.651101][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan6
[  530.677484][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan7
[  530.695593][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan8
[  530.734761][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan9
[  530.737086][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3535'.
[  530.820182][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan10
[  530.898196][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan11
[  530.944234][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan12
[  530.977205][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan13
[  531.007232][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan14
[  531.040314][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan15
[  531.056500][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan16
[  531.073629][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan17
[  531.152511][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan18
[  531.161591][T20097] 8021q: adding VLAN 0 to HW filter on device ipvlan19
[  531.213566][T20125] netlink: 'syz.1.3537': attribute type 11 has an invalid length.
[  531.213591][T20125] netlink: 'syz.1.3537': attribute type 11 has an invalid length.
[  531.213606][T20125] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3537'.
[  531.213995][T20125] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  531.216706][T20123] xt_CT: No such helper "snmp_trap"
[  531.296643][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3538'.
[  531.510035][T20130] bond1: Unable to set up delay as MII monitoring is disabled
[  531.528454][T20130] bond1 (unregistering): Released all slaves
[  531.601347][T20143] netlink: 'syz.3.3542': attribute type 29 has an invalid length.
[  532.086171][T20162] netlink: 'syz.1.3549': attribute type 10 has an invalid length.
[  532.228741][T20167] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  532.237937][T20167] bond2 (unregistering): Released all slaves
[  532.729091][T20195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3560'.
[  533.004095][ T1425] bond0: (slave bond_slave_0): interface is now down
[  533.004128][ T1425] bond0: (slave bond_slave_1): interface is now down
[  533.043995][ T1425] bond0: now running without any active interface!
[  533.221045][T20191] infiniband syz0: set active
[  533.221075][T20191] infiniband syz0: added bond_slave_1
[  533.285597][T20191] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  533.285648][T20191] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  533.285697][T20191] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  533.398056][T20191] RDS/IB: syz0: added
[  533.416218][T20191] smc: adding ib device syz0 with port count 1
[  533.416514][T20191] smc:    ib device syz0 port 1 has no pnetid
[  534.042915][T17089] Bluetooth: hci4: command 0x0c1a tx timeout
[  534.043728][T20150] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  534.043754][T20150] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  534.442468][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.442859][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.443233][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.791263][T20150] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  534.791284][T20150] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  535.007205][T20249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'.
[  535.011146][T20249] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3574'.
[  535.123477][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'.
[  535.315633][T20255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3575'.
[  535.354275][T20265] ip_tables: iptables: counters copy to user failed while replacing table
[  535.896076][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'.
[  535.957829][T20284] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  535.979932][T20284] bond1 (unregistering): Released all slaves
[  536.316659][T20282] hsr_slave_1 (unregistering): left promiscuous mode
[  536.468526][T20293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3585'.
[  536.768025][T20309] netlink: 'syz.1.3591': attribute type 1 has an invalid length.
[  536.787139][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'.
[  536.831062][T20309] bond1: entered promiscuous mode
[  536.837353][T20309] 8021q: adding VLAN 0 to HW filter on device bond1
[  536.874262][T20309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3591'.
[  537.340429][T20337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3598'.
[  537.363693][T20340] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3597'.
[  537.441029][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'.
[  537.749501][T20352] IPVS: ip_vs_edit_dest(): server weight less than zero
[  537.819624][T20357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3602'.
[  537.848183][T20359] sctp: [Deprecated]: syz.1.3602 (pid 20359) Use of int in max_burst socket option deprecated.
[  537.848183][T20359] Use struct sctp_assoc_value instead
[  538.282287][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.282707][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.283075][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.345884][T20369] block nbd1: NBD_DISCONNECT
[  538.345916][T20369] block nbd1: Send disconnect failed -32
[  538.345938][T20369] block nbd1: shutting down sockets
[  538.715591][T20381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3610'.
[  538.844178][T20390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3611'.
[  539.036080][T20390] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3611'.
[  539.452055][T20411] netlink: 'syz.2.3615': attribute type 29 has an invalid length.
[  541.354853][T20439] netlink: 'syz.2.3620': attribute type 4 has an invalid length.
[  541.482249][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.482786][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.570638][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 360 seconds
[  541.570687][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 360 seconds
[  541.570718][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 360 seconds
[  541.570748][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 360 seconds
[  541.919942][T20449] __nla_validate_parse: 5 callbacks suppressed
[  541.919966][T20449] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3622'.
[  541.946688][T20452] syzkaller0: entered promiscuous mode
[  541.946713][T20452] syzkaller0: entered allmulticast mode
[  541.988729][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'.
[  541.989422][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'.
[  542.014208][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'.
[  542.014235][T20449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'.
[  542.083609][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.084022][T20462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3625'.
[  542.267127][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.268204][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.268462][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.268683][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.268929][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.269471][T20474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3628'.
[  542.269805][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.270066][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.270377][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.270596][T20458] netlink: 'syz.0.3625': attribute type 1 has an invalid length.
[  542.755031][ T8535] IPVS: starting estimator thread 0...
[  542.755259][T20495] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  542.759072][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3635'.
[  542.759401][T20495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3635'.
[  542.759859][T20495] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.759944][T20495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  542.759956][T20495] IPv6: NLM_F_CREATE should be set when creating new route
[  542.759994][T20495] IPv6: NLM_F_CREATE should be set when creating new route
[  542.760019][T20495] IPv6: NLM_F_CREATE should be set when creating new route
[  542.846520][T20497] IPVS: using max 25 ests per chain, 60000 per kthread
[  542.898650][T20496] netlink: 8183 bytes leftover after parsing attributes in process `syz.2.3636'.
[  543.098202][T20512] x_tables: duplicate underflow at hook 3
[  543.506237][T20525] x_tables: duplicate underflow at hook 1
[  543.887441][T20529] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  543.907384][T20529] bond4 (unregistering): Released all slaves
[  544.417955][T20559] bond2: entered promiscuous mode
[  544.420172][T20559] 8021q: adding VLAN 0 to HW filter on device bond2
[  544.465841][T20568] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  544.542053][T20563] bond2: (slave bridge1): making interface the new active one
[  544.542081][T20563] bridge1: entered promiscuous mode
[  544.543232][T20563] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  544.602725][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.603083][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.603450][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.099727][T20594] 8021q: adding VLAN 0 to HW filter on device bond1
[  545.303431][T20598] veth2: entered promiscuous mode
[  545.303456][T20598] veth2: entered allmulticast mode
[  545.439715][T20604] batman_adv: batadv0: Adding interface: syzkaller0
[  545.439738][T20604] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  545.439773][T20604] batman_adv: batadv0: Interface activated: syzkaller0
[  545.531003][T20602] 8021q: adding VLAN 0 to HW filter on device bond5
[  545.546615][T20602] bond4: (slave bond5): making interface the new active one
[  545.547115][T20602] bond4: (slave bond5): Enslaving as an active interface with an up link
[  545.547539][T20599] batman_adv: batadv0: Interface deactivated: syzkaller0
[  545.610402][T20599] batman_adv: batadv0: Removing interface: syzkaller0
[  545.643500][T20613] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  545.647239][T20621] 8021q: adding VLAN 0 to HW filter on device bond4
[  545.994273][T20633] nbd: socks must be embedded in a SOCK_ITEM attr
[  546.049024][T20639] Bluetooth: MGMT ver 1.23
[  546.257686][T20646] bond0: (slave bond_slave_0): Releasing backup interface
[  546.305439][T20646] bond0: (slave bond_slave_1): Releasing backup interface
[  546.344899][T20646] team0: Port device team_slave_0 removed
[  546.372836][T20646] team0: Port device team_slave_1 removed
[  546.374936][T20646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.374961][T20646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  546.378567][T20646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.378591][T20646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  546.400098][T20646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  547.171068][T20702] xt_NETMAP: bad rangesize 37.
[  547.252063][T20709] xt_NETMAP: bad rangesize 37.
[  547.333738][ T1714] block nbd2: Possible stuck request ffff888027737000: control (read@0,1024B). Runtime 30 seconds
[  547.333789][ T1714] block nbd2: Possible stuck request ffff8880277371c0: control (read@1024,1024B). Runtime 30 seconds
[  547.333822][ T1714] block nbd2: Possible stuck request ffff888027737380: control (read@2048,2048B). Runtime 30 seconds
[  547.425485][T20713] __nla_validate_parse: 14 callbacks suppressed
[  547.425510][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'.
[  547.425528][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'.
[  547.881063][T20738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  547.881526][T20739] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  547.929433][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'.
[  548.199493][T20744] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3702'.
[  548.378930][T20764] validate_nla: 61 callbacks suppressed
[  548.378953][T20764] netlink: 'syz.2.3706': attribute type 49 has an invalid length.
[  548.430695][T20771] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  548.456669][T17089] block nbd1: Receive control failed (result -32)
[  548.458035][ T5621] block nbd1: Receive control failed (result -32)
[  548.623365][T20764] ip6gretap0: entered promiscuous mode
[  548.623391][T20764] ip6gretap0: entered allmulticast mode
[  548.737618][T20773] macvtap2: entered promiscuous mode
[  548.759148][T20773] macvtap2: entered allmulticast mode
[  548.759177][T20773] veth1_vlan: entered allmulticast mode
[  549.691302][T20820] atomic_op ffff8880314f31e0 conn xmit_atomic 0000000000000000
[  549.802208][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.802586][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.802911][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.937432][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'.
[  550.151466][T20839] syzkaller1: entered promiscuous mode
[  550.151495][T20839] syzkaller1: entered allmulticast mode
[  550.645463][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3726'.
[  550.649564][T20854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3726'.
[  550.695405][T20853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3726'.
[  550.695435][T20853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3726'.
[  551.009614][T20859] bond6 (unregistering): Released all slaves
[  551.285029][T20857] bond6 (unregistering): Released all slaves
[  551.336742][T20876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3732'.
[  551.336781][T20876] netlink: 'syz.0.3732': attribute type 7 has an invalid length.
[  551.336796][T20876] netlink: 'syz.0.3732': attribute type 8 has an invalid length.
[  551.443592][T20884] netlink: 'syz.3.3731': attribute type 16 has an invalid length.
[  551.443618][T20884] netlink: 'syz.3.3731': attribute type 17 has an invalid length.
[  551.690521][T20884] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  552.051230][T20900] ip6tnl0: entered allmulticast mode
[  552.148106][T20910] netlink: 'syz.3.3737': attribute type 12 has an invalid length.
[  552.148131][T20910] netlink: 'syz.3.3737': attribute type 29 has an invalid length.
[  552.152635][T20900] xt_hashlimit: overflow, try lower: 3/0
[  552.215588][T20912] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  552.215619][T20912] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  552.604025][T20932] netlink: 'syz.1.3747': attribute type 1 has an invalid length.
[  552.640000][T20932] 8021q: adding VLAN 0 to HW filter on device bond2
[  552.691973][T20932] bond2: (slave geneve2): making interface the new active one
[  552.695236][T20932] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  552.843776][T20937] __nla_validate_parse: 8 callbacks suppressed
[  552.843815][T20937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3749'.
[  552.936886][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3751'.
[  552.936914][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3751'.
[  553.002151][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.002480][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.045409][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3749'.
[  553.112180][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.112445][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.112674][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.112905][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.113112][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.113356][T20960] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3752'.
[  553.727650][T20989] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication
[  553.969772][T20997] netlink: 'syz.3.3767': attribute type 1 has an invalid length.
[  554.043532][T20997] bond3: entered promiscuous mode
[  554.045838][T20997] 8021q: adding VLAN 0 to HW filter on device bond3
[  554.079869][T21007] IPVS: length: 8 != 1152
[  554.139412][T20997] 8021q: adding VLAN 0 to HW filter on device bond3
[  554.150192][T20997] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  554.150219][T20997] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  554.183380][T20997] bond3: (slave ip6gre1): making interface the new active one
[  554.183408][T20997] ip6gre1: entered promiscuous mode
[  554.188217][T20997] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  554.366595][T21017] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.367808][T21017] syz_tun: entered promiscuous mode
[  554.387201][T21017] netlink: 'syz.2.3773': attribute type 1 has an invalid length.
[  554.730686][T21035] veth0_to_bond: default FDB implementation only supports local addresses
[  554.741063][T21038] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  554.789365][T21039] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes.
[  555.099482][T21052] netlink: 'syz.1.3783': attribute type 7 has an invalid length.
[  555.654852][T21073] bond3 (unregistering): Released all slaves
[  556.052721][T21091] ip_tables: iptables: counters copy to user failed while replacing table
[  556.202094][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.202499][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.202859][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.276383][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.276422][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.276688][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.276704][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.276927][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.276943][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.277164][T21106] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  556.751612][ T1375] IPVS: starting estimator thread 0...
[  556.832566][T21130] IPVS: using max 28 ests per chain, 67200 per kthread
[  557.071289][ T1375] IPVS: starting estimator thread 0...
[  557.151996][T21146] IPVS: using max 34 ests per chain, 81600 per kthread
[  558.148136][T21185] __nla_validate_parse: 121 callbacks suppressed
[  558.148169][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3819'.
[  558.377517][T21188] ip6gre1: entered allmulticast mode
[  559.053830][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'.
[  559.227440][T21222] geneve3: entered promiscuous mode
[  559.239993][T21229] veth0: entered promiscuous mode
[  559.439343][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'.
[  559.439381][T21234] validate_nla: 39 callbacks suppressed
[  559.439394][T21234] netlink: 'syz.4.3832': attribute type 5 has an invalid length.
[  559.439411][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3832'.
[  559.527419][T21234] geneve2: entered promiscuous mode
[  559.527447][T21234] geneve2: entered allmulticast mode
[  559.529004][T21231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3831'.
[  559.529252][   T38] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  559.529490][   T38] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  559.529555][   T38] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  559.530177][T21227] veth0: left promiscuous mode
[  559.533878][   T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  559.539130][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3832'.
[  559.539213][T21237] netlink: 'syz.4.3832': attribute type 5 has an invalid length.
[  559.539263][T21237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3832'.
[  559.677300][T21246] netlink: 'syz.1.3833': attribute type 6 has an invalid length.
[  559.701960][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3833'.
[  560.000761][T21258] bond6: option packets_per_slave: invalid value (18446744073709551615)
[  560.000794][T21258] bond6: option packets_per_slave: allowed values 0 - 65535
[  560.023195][T21267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3835'.
[  560.023195][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3835'.
[  560.028780][T21258] bond6 (unregistering): Released all slaves
[  561.280698][T21318] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  561.962207][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.962678][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.963028][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.963406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.177389][T21353] ip_tables: iptables: counters copy to user failed while replacing table
[  562.179409][T21353] netlink: 'syz.0.3860': attribute type 10 has an invalid length.
[  562.179893][T21353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  562.550155][T21377] tipc: Failed to remove unknown binding: 66,1,1/0:3184456122/3184456124
[  562.566523][T21377] netlink: 'syz.3.3864': attribute type 4 has an invalid length.
[  562.647577][T21380] netlink: 'syz.3.3864': attribute type 1 has an invalid length.
[  563.080182][T21404] netlink: 'syz.2.3874': attribute type 1 has an invalid length.
[  563.307209][T21404] 8021q: adding VLAN 0 to HW filter on device bond2
[  563.357730][T21408] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  563.432048][ T8525] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  563.534972][T21428] __nla_validate_parse: 15 callbacks suppressed
[  563.534997][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.535017][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.547790][ T8530] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  563.580096][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.580125][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.646794][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.646824][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.657928][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.658001][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.691063][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.691102][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3878'.
[  563.965129][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  564.344848][T21450] 8021q: adding VLAN 0 to HW filter on device bond4
[  564.629066][T21484] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  564.741669][T21461] xt_CT: No such helper "pptp"
[  567.722248][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.722531][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.722752][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.722966][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.643624][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 390 seconds
[  571.643673][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 390 seconds
[  571.643702][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 390 seconds
[  571.643731][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 390 seconds
[  572.762410][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.762694][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.762953][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.407759][ T1714] block nbd2: Possible stuck request ffff888027737000: control (read@0,1024B). Runtime 60 seconds
[  577.407799][ T1714] block nbd2: Possible stuck request ffff8880277371c0: control (read@1024,1024B). Runtime 60 seconds
[  577.407820][ T1714] block nbd2: Possible stuck request ffff888027737380: control (read@2048,2048B). Runtime 60 seconds
[  577.415924][ T4988] udevd[4988]: worker [5978] /devices/virtual/block/nbd2 is taking a long time
[  578.522413][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.522874][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.523236][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.722181][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.722491][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.722745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.722980][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.142471][T21516] netlink: 'syz.2.3890': attribute type 1 has an invalid length.
[  587.222080][T21516] bond3: entered promiscuous mode
[  587.222610][T21516] 8021q: adding VLAN 0 to HW filter on device bond3
[  587.247227][T21521] netlink: 'syz.0.3893': attribute type 1 has an invalid length.
[  587.247251][T21521] netlink: 'syz.0.3893': attribute type 2 has an invalid length.
[  587.248296][T21521] netlink: 'syz.0.3893': attribute type 1 has an invalid length.
[  587.248322][T21521] netlink: 'syz.0.3893': attribute type 2 has an invalid length.
[  587.319138][T21515] bond3: (slave bridge2): making interface the new active one
[  587.319164][T21515] bridge2: entered promiscuous mode
[  587.320454][T21515] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  587.442953][T21526] netlink: 'syz.4.3895': attribute type 1 has an invalid length.
[  587.485415][T21530] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  587.506087][T21530] __nla_validate_parse: 56 callbacks suppressed
[  587.506111][T21530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3896'.
[  587.510217][T21530] netlink: 'syz.3.3896': attribute type 21 has an invalid length.
[  587.510242][T21530] IPv6: NLM_F_CREATE should be specified when creating new route
[  587.749912][T21535] netlink: 'syz.2.3898': attribute type 9 has an invalid length.
[  588.066298][T21544] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3897'.
[  588.188168][T21550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3902'.
[  588.242892][T21551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3902'.
[  588.407084][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'.
[  588.455990][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'.
[  588.458356][T21568] netlink: 'syz.1.3905': attribute type 10 has an invalid length.
[  588.676730][T21568] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  589.359813][T21609] netlink: 'syz.2.3917': attribute type 1 has an invalid length.
[  589.404999][T21609] 8021q: adding VLAN 0 to HW filter on device bond4
[  589.420330][T21613] pimreg: entered allmulticast mode
[  589.446880][T21609] bond4: (slave geneve3): making interface the new active one
[  589.460031][T21609] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  589.460337][T21612] pimreg: left allmulticast mode
[  589.492107][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.492534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.492885][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.493382][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.888431][T21696] sctp: [Deprecated]: syz.0.3937 (pid 21696) Use of int in maxseg socket option.
[  590.888431][T21696] Use struct sctp_assoc_value instead
[  590.889605][T21696] ieee802154 phy1 wpan1: encryption failed: -22
[  590.925040][T21692] veth3: entered promiscuous mode
[  590.925065][T21692] veth3: entered allmulticast mode
[  591.346037][T21711] veth5: entered allmulticast mode
[  591.351104][T21711] bond3: (slave veth5): Enslaving as an active interface with a down link
[  591.367039][T21711] bond3: (slave veth0_to_bond): making interface the new active one
[  591.375858][T21711] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  591.854534][T21735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3946'.
[  591.854566][T21735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3946'.
[  592.419323][T21764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3958'.
[  592.419367][T21764] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  592.477699][T21765] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3959'.
[  592.573923][T21780] syzkaller1: entered promiscuous mode
[  592.573951][T21780] syzkaller1: entered allmulticast mode
[  592.630686][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'.
[  592.699901][T21786] netlink: Unknown conntrack attr (type=16134, max=9)
[  592.699936][T21786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  592.732561][T21786] validate_nla: 2 callbacks suppressed
[  592.732582][T21786] netlink: 'syz.4.3964': attribute type 2 has an invalid length.
[  593.363568][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3971'.
[  593.363610][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3971'.
[  593.398860][T21809] geneve3: entered promiscuous mode
[  593.443612][T21819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3975'.
[  593.534670][T21815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3974'.
[  593.564897][T21828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3974'.
[  593.655815][T21831] netlink: 'syz.2.3976': attribute type 4 has an invalid length.
[  593.734203][T21834] netlink: 'syz.2.3976': attribute type 4 has an invalid length.
[  593.738711][T21835] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3977'.
[  593.807449][T21839] x_tables: duplicate underflow at hook 1
[  593.936190][T21830] IPVS: length: 10 != 8
[  594.214605][T21854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3982'.
[  594.214645][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  594.403167][T21861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.522144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.522547][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.522921][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.523411][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.816720][T21873] Cannot find del_set index 3 as target
[  595.131878][T21888] ip_tables: iptables: counters copy to user failed while replacing table
[  595.221351][T21888] ip6t_REJECT: ECHOREPLY is not supported
[  595.240707][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'.
[  595.575899][T21905] xt_l2tp: v2 sid > 0xffff: 1114112
[  595.723384][T21926] tipc: Started in network mode
[  595.723419][T21926] tipc: Node identity 421bcfa452d4, cluster identity 4711
[  595.723599][T21926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.723957][T21927] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.949078][T21926] syzkaller0: entered promiscuous mode
[  595.949104][T21926] syzkaller0: entered allmulticast mode
[  595.949795][T21926] tipc: Resetting bearer <eth:syzkaller0>
[  595.994965][T21925] tipc: Resetting bearer <eth:syzkaller0>
[  597.088054][T21971] ipt_REJECT: TCP_RESET invalid for non-tcp
[  599.725166][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.725581][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.725936][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.900314][T21925] tipc: Disabling bearer <eth:syzkaller0>
[  599.937992][ T5713] tipc: Node number set to 282054564
[  600.079623][T21973] ip_tables: iptables: counters copy to user failed while replacing table
[  600.080367][T21973] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1
[  600.211218][T21982] __nla_validate_parse: 4 callbacks suppressed
[  600.211240][T21982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4009'.
[  600.305457][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'.
[  600.413161][T21993] IPv4: Oversized IP packet from 127.202.26.0
[  600.816103][T22013] bridge2: the hash_elasticity option has been deprecated and is always 16
[  600.897277][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.897580][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.897870][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.898139][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.898416][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.900374][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.900642][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  600.900892][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'.
[  601.530850][T22038] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  601.567251][T22042] netlink: 'syz.4.4030': attribute type 1 has an invalid length.
[  601.600665][T22042] 8021q: adding VLAN 0 to HW filter on device bond6
[  601.634679][T22042] bond6: (slave geneve3): making interface the new active one
[  601.635884][T22042] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  601.726067][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 420 seconds
[  601.726117][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 420 seconds
[  601.726147][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 420 seconds
[  601.726176][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 420 seconds
[  601.815703][T22049] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[  602.065145][T22057] netlink: 'syz.2.4034': attribute type 39 has an invalid length.
[  602.628709][T22082] netlink: zone id is out of range
[  602.629185][T22082] netlink: zone id is out of range
[  602.712411][T22082] batadv_slave_0: entered promiscuous mode
[  602.718345][T22082] bridge_slave_0: entered promiscuous mode
[  602.836052][T22095] netlink: 'syz.4.4044': attribute type 10 has an invalid length.
[  602.836410][T22095] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.837105][T22095] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.876380][T22095] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.876473][T22095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.876753][T22095] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.876882][T22095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  602.930092][T22095] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  603.233280][T22108] tipc: Failed to remove unknown binding: 66,0,0/0:903769112/903769113
[  603.258980][T22108] tipc: Failed to remove unknown binding: 66,0,0/0:903769112/903769113
[  603.350000][T22114] netlink: 'syz.1.4051': attribute type 21 has an invalid length.
[  604.032938][T22105] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma?
[  605.278966][T22197] __nla_validate_parse: 65 callbacks suppressed
[  605.278988][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4067'.
[  605.303885][T22205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4069'.
[  605.980780][T22227] xt_hashlimit: size too large, truncated to 1048576
[  606.079203][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4074'.
[  606.116219][T22237] netlink: 'syz.4.4075': attribute type 1 has an invalid length.
[  606.122109][    C0] net_ratelimit: 16 callbacks suppressed
[  606.122132][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.122491][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.123425][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  606.205883][T22242] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4078'.
[  606.206569][T22242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4078'.
[  606.378502][T22237] bond7: entered promiscuous mode
[  606.378992][T22237] 8021q: adding VLAN 0 to HW filter on device bond7
[  606.462690][T22243] 8021q: adding VLAN 0 to HW filter on device bond7
[  606.470666][T22243] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  606.470694][T22243] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  606.511414][T22243] bond7: (slave wireguard0): making interface the new active one
[  606.514894][T22243] wireguard0: entered promiscuous mode
[  606.520334][T22243] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  606.595503][T22248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  606.974905][T22277] ip_tables: iptables: counters copy to user failed while replacing table
[  606.997276][T22277] netlink: 'syz.4.4079': attribute type 4 has an invalid length.
[  607.000397][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4081'.
[  607.000420][T22281] bridge: RTM_NEWNEIGH with invalid ether address
[  607.076141][T22282] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4081'.
[  607.100872][T22277] netlink: 'syz.4.4079': attribute type 2 has an invalid length.
[  607.114437][T22277] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  607.168885][T22289] netlink: 'syz.0.4083': attribute type 3 has an invalid length.
[  607.168909][T22289] netlink: 'syz.0.4083': attribute type 2 has an invalid length.
[  607.455471][T22305] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4085'.
[  607.457409][T22302] lo: entered promiscuous mode
[  607.457596][T22302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.484181][ T1714] block nbd2: Possible stuck request ffff888027737000: control (read@0,1024B). Runtime 90 seconds
[  607.484315][ T1714] block nbd2: Possible stuck request ffff8880277371c0: control (read@1024,1024B). Runtime 90 seconds
[  607.484389][ T1714] block nbd2: Possible stuck request ffff888027737380: control (read@2048,2048B). Runtime 90 seconds
[  607.590430][T22305] netlink: 'syz.3.4085': attribute type 5 has an invalid length.
[  607.907417][T22329] xt_hashlimit: size too large, truncated to 1048576
[  608.308370][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'.
[  608.507268][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4097'.
[  608.696696][T22370] ip_tables: iptables: counters copy to user failed while replacing table
[  608.949238][T22384] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  608.963373][T22384] netlink: 'syz.1.4104': attribute type 1 has an invalid length.
[  609.001654][T22391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  609.008849][T22391] veth0_to_bond: entered allmulticast mode
[  609.358113][T22408] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  609.875287][T22416] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  610.372908][T22451] sctp: [Deprecated]: syz.2.4125 (pid 22451) Use of struct sctp_assoc_value in delayed_ack socket option.
[  610.372908][T22451] Use struct sctp_sack_info instead
[  610.456742][T22460] IPVS: length: 8 != 1152
[  610.456993][T22460] __nla_validate_parse: 6 callbacks suppressed
[  610.457009][T22460] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4128'.
[  610.656616][T22463] batman_adv: batadv0: Adding interface: macvtap0
[  610.656635][T22463] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.656665][T22463] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  610.755652][T22476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4132'.
[  610.776871][T22468] bond3: entered allmulticast mode
[  610.799364][T22474] team0: entered promiscuous mode
[  610.799390][T22474] team_slave_0: entered promiscuous mode
[  610.799617][T22474] team_slave_1: entered promiscuous mode
[  610.957865][T22468] 8021q: adding VLAN 0 to HW filter on device bond4
[  610.959260][T22468] bond4: entered allmulticast mode
[  610.959641][T22468] bond3: (slave bond4): Enslaving as an active interface with an up link
[  611.011335][T22486] netlink: 'syz.4.4133': attribute type 1 has an invalid length.
[  611.158467][T22486] 8021q: adding VLAN 0 to HW filter on device bond9
[  611.242212][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.242544][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.242792][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.591371][T22511] ieee802154 phy1 wpan1: encryption failed: -22
[  611.636721][T22516] netlink: 400 bytes leftover after parsing attributes in process `syz.3.4142'.
[  611.678376][ T5283] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  611.730040][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'.
[  611.850584][T22526] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4146'.
[  611.850613][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4146'.
[  611.871134][T22526] netlink: 'syz.2.4146': attribute type 3 has an invalid length.
[  611.871156][T22526] netlink: 'syz.2.4146': attribute type 1 has an invalid length.
[  612.049127][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'.
[  612.063884][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'.
[  612.450154][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4149'.
[  612.558859][T22557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4152'.
[  612.641383][T22557] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.654910][T22557] 8021q: adding VLAN 0 to HW filter on device team0
[  612.654999][T22563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  612.713242][T22557] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  612.716784][T22557] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  612.769496][T22564] bridge3: entered allmulticast mode
[  613.034616][T22574] rdma_op ffff8880669c7a38 conn xmit_rdma 0000000000000000
[  613.079112][T22584] syzkaller1: entered promiscuous mode
[  613.079135][T22584] syzkaller1: entered allmulticast mode
[  613.787759][T22619] macvtap3: entered promiscuous mode
[  613.787786][T22619] vlan0: entered promiscuous mode
[  613.788550][T22619] macvtap3: entered allmulticast mode
[  613.788570][T22619] vlan0: entered allmulticast mode
[  613.788584][T22619] veth0_vlan: entered allmulticast mode
[  613.826147][T22620] IPVS: Unknown mcast interface: caif0
[  614.038700][T22629] netlink: 'syz.1.4170': attribute type 1 has an invalid length.
[  614.240436][T22640] netlink: 'syz.2.4175': attribute type 1 has an invalid length.
[  614.297725][T22640] 8021q: adding VLAN 0 to HW filter on device bond5
[  614.380826][T22642] bond5: (slave bridge4): making interface the new active one
[  614.399970][T22642] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  614.442238][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.442634][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.443007][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.916543][T22660] macvtap1: entered promiscuous mode
[  614.916570][T22660] vlan0: entered promiscuous mode
[  614.918250][T22660] macvtap1: entered allmulticast mode
[  614.918271][T22660] vlan0: entered allmulticast mode
[  614.918285][T22660] veth0_vlan: entered allmulticast mode
[  614.929748][T22663] syzkaller1: entered promiscuous mode
[  614.929817][T22663] syzkaller1: entered allmulticast mode
[  615.329127][T22693] netlink: 'syz.1.4185': attribute type 1 has an invalid length.
[  615.572809][ T8528] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  615.574256][   T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  615.574331][   T38] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  615.574369][   T38] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  615.668307][T22709] __nla_validate_parse: 14 callbacks suppressed
[  615.668331][T22709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4189'.
[  615.718636][T22716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4190'.
[  615.810055][T22716] team0: Port device team_slave_0 removed
[  615.860634][T22725] netlink: 'syz.1.4191': attribute type 1 has an invalid length.
[  615.876212][T22714] veth0_to_bond: entered allmulticast mode
[  615.979659][T22725] bond5: entered promiscuous mode
[  615.980093][T22725] 8021q: adding VLAN 0 to HW filter on device bond5
[  616.028781][T22714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4191'.
[  616.028973][T22714] bond5: entered allmulticast mode
[  616.198003][T22714] bond6 (unregistering): Released all slaves
[  616.217784][T22741] x_tables: duplicate underflow at hook 1
[  616.250619][T22742] tipc: Failed to remove unknown binding: 66,0,0/282054564:4125748377/4125748378
[  616.279968][T22742] tipc: Failed to remove unknown binding: 66,0,0/282054564:4125748377/4125748378
[  616.392844][T22725] bond5: (slave bridge3): making interface the new active one
[  616.392889][T22725] bridge3: entered promiscuous mode
[  616.393077][T22725] bridge3: entered allmulticast mode
[  616.395381][T22725] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  616.809637][T22755] veth0: entered promiscuous mode
[  616.810039][T22755] veth0: left promiscuous mode
[  616.828600][T22758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'.
[  616.830284][T22759] openvswitch: netlink: Unknown key attributes 20
[  617.173350][T22773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.224780][T22779] netlink: 268 bytes leftover after parsing attributes in process `syz.0.4210'.
[  617.290262][T22781] syzkaller0: MTU too low for tipc bearer
[  617.290316][T22781] tipc: Disabling bearer <eth:syzkaller0>
[  617.407026][T22786] netlink: Invalid conntrack helper
[  617.407060][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.407500][T22786] netlink: Invalid conntrack helper
[  617.407526][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.410378][T22786] netlink: Invalid conntrack helper
[  617.410408][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.418091][T22786] netlink: Invalid conntrack helper
[  617.418172][T22786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.431150][T22786] netlink: Invalid conntrack helper
[  617.717442][T22794] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  617.717487][T22794] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  617.717532][T22794] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  617.779372][T22794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  617.799829][T22796] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4213'.
[  618.070134][   T60] smbdirect: ib_dev[syz2] removed
[  618.199812][T22812] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4220'.
[  618.508931][T22820] bond2: (slave syz_tun): Removing an active aggregator
[  618.523776][T22820] bond2: (slave syz_tun): Releasing backup interface
[  618.583615][T22820] bridge_slave_0: left allmulticast mode
[  618.583647][T22820] bridge_slave_0: left promiscuous mode
[  618.605495][T22820] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.657426][T22820] bridge_slave_1: left allmulticast mode
[  618.657676][T22820] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.750599][T22820] bond0: (slave bond_slave_0): Releasing backup interface
[  618.797289][T22820] bond0: (slave bond_slave_1): Releasing backup interface
[  618.821219][T22820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.821247][T22820] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.848308][T22820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.848337][T22820] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.043950][T22837] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  619.044504][T22838] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  619.122407][T22846] xt_cgroup: no path or classid specified
[  619.219716][T22848] erspan0: entered promiscuous mode
[  619.352503][T22855] netlink: 'syz.1.4231': attribute type 1 has an invalid length.
[  619.453186][T22855] 8021q: adding VLAN 0 to HW filter on device bond6
[  619.662866][T22879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4234'.
[  619.740519][T22880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4235'.
[  619.777732][T22883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4238'.
[  621.320923][T22936] __nla_validate_parse: 92 callbacks suppressed
[  621.320945][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.321224][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.321499][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.361600][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.375285][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.375567][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.375855][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.376127][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.376378][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  621.442009][T22936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4250'.
[  623.317136][T23019] nbd: illegal input index -8454144
[  623.360352][T23015] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  623.373614][T23015] bond5 (unregistering): Released all slaves
[  623.521038][T23029] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0
[  623.569994][T23024] veth0: entered promiscuous mode
[  623.570241][T23026] veth0: left promiscuous mode
[  623.618524][T23024] xt_hashlimit: size too large, truncated to 1048576
[  623.724345][T23021] pimreg: entered allmulticast mode
[  624.037179][T23042] netlink: 'syz.0.4272': attribute type 1 has an invalid length.
[  624.320312][T23051] net_ratelimit: 130 callbacks suppressed
[  624.320337][T23051] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  624.545864][T23058] netlink: 'syz.2.4279': attribute type 1 has an invalid length.
[  624.602144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.602650][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.740974][T23058] 8021q: adding VLAN 0 to HW filter on device bond6
[  624.822918][T23060] macvlan4: entered promiscuous mode
[  624.822961][T23060] macvlan4: entered allmulticast mode
[  624.919907][T23066] xt_MASQUERADE: bad MAP_IPS.
[  625.254947][T23075] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  625.336737][T23082] netlink: 'syz.3.4288': attribute type 1 has an invalid length.
[  625.340221][T23077] netlink: 'syz.0.4284': attribute type 1 has an invalid length.
[  625.409639][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  625.466952][T23077] bond4: entered promiscuous mode
[  625.467426][T23077] 8021q: adding VLAN 0 to HW filter on device bond4
[  625.542112][T23084] 8021q: adding VLAN 0 to HW filter on device bond4
[  625.544793][T23084] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  625.544821][T23084] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  625.629933][T23084] bond4: (slave wireguard0): making interface the new active one
[  625.629964][T23084] wireguard0: entered promiscuous mode
[  625.650459][T23084] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  625.931466][T23109] batadv0: entered promiscuous mode
[  625.949941][T23109] macsec1: entered promiscuous mode
[  625.969954][T23109] 8021q: adding VLAN 0 to HW filter on device macsec1
[  625.986587][T23109] batadv0: left promiscuous mode
[  626.284597][T23125] veth0: entered promiscuous mode
[  626.289185][T23124] veth0: left promiscuous mode
[  626.640022][T23146] __nla_validate_parse: 35 callbacks suppressed
[  626.640046][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4305'.
[  626.640070][T23146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4305'.
[  626.718174][T23148] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4304'.
[  627.409912][T23191] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4318'.
[  627.417940][T23192] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4318'.
[  627.732111][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.732529][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.732874][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.786685][T23216] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  628.858646][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4332'.
[  628.978591][T23243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.587943][T23301] tls_set_device_offload: netdev not found
[  629.601105][T23294] erspan0: entered promiscuous mode
[  629.625240][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4343'.
[  630.080564][T23314] tipc: Started in network mode
[  630.080595][T23314] tipc: Node identity 9ee019e1158f, cluster identity 4711
[  630.080758][T23314] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  630.093498][T23322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  630.193227][T23310] tipc: Resetting bearer <eth:syzkaller0>
[  630.271037][T23310] tipc: Disabling bearer <eth:syzkaller0>
[  630.335544][T23326] syzkaller0: entered promiscuous mode
[  630.335571][T23326] syzkaller0: entered allmulticast mode
[  630.799223][T23362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4358'.
[  630.844538][T23364] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  631.052752][T23374] netlink: 'syz.3.4363': attribute type 5 has an invalid length.
[  631.052779][T23374] netlink: 'syz.3.4363': attribute type 9 has an invalid length.
[  631.052795][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'.
[  631.056693][T23374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4363'.
[  631.792861][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'.
[  631.792890][T23406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'.
[  631.888895][ T1714] block nbd0: Possible stuck request ffff888027637000: control (read@0,1024B). Runtime 450 seconds
[  631.888942][ T1714] block nbd0: Possible stuck request ffff88802763e000: control (read@1024,1024B). Runtime 450 seconds
[  631.888972][ T1714] block nbd0: Possible stuck request ffff88802763e1c0: control (read@2048,1024B). Runtime 450 seconds
[  631.889001][ T1714] block nbd0: Possible stuck request ffff88802763e380: control (read@3072,1024B). Runtime 450 seconds
[  632.019019][T23408] netlink: 'syz.3.4375': attribute type 61 has an invalid length.
[  632.045961][T23416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4377'.
[  632.077314][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'.
[  632.077360][T23410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4375'.
[  632.189626][T23410] geneve4: entered promiscuous mode
[  632.189651][T23410] geneve4: entered allmulticast mode
[  632.548096][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'.
[  632.739848][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4387'.
[  632.739878][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4387'.
[  632.787020][T23453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4381'.
[  632.968550][   T31] audit: type=1107 audit(1790349725.277:5): pid=23462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ý<(öû¬š“b×ÎýM/÷wõœÈ0PÙ@}(¯DçÚ<Øoyååf�ø�ÀØÇØÅ{)Àçdö몽õM`–+¼Ž!·Ç“Äjèí?ø‘~¢o–~N?Ë}ú£äØuv'
[  633.002640][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.003083][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.003526][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.003891][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.140490][T23466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4392'.
[  633.962707][T23508] ieee802154 phy1 wpan1: encryption failed: -22
[  634.244607][T23511] bond11 (unregistering): Released all slaves
[  634.669976][T23526] netlink: 'syz.3.4413': attribute type 2 has an invalid length.
[  634.682074][T23526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.080067][T23573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  636.966419][T23614] __nla_validate_parse: 12 callbacks suppressed
[  636.966442][T23614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4437'.
[  637.552867][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'.
[  637.563426][ T1714] block nbd2: Possible stuck request ffff888027737000: control (read@0,1024B). Runtime 120 seconds
[  637.563471][ T1714] block nbd2: Possible stuck request ffff8880277371c0: control (read@1024,1024B). Runtime 120 seconds
[  637.563501][ T1714] block nbd2: Possible stuck request ffff888027737380: control (read@2048,2048B). Runtime 120 seconds
[  637.765221][T23653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'.
[  637.771310][T23656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4450'.
[  638.225927][T23674] xt_MASQUERADE: bad rangesize 2147483646
[  638.265778][T23676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4456'.
[  638.430723][T23680] netlink: 'syz.2.4458': attribute type 23 has an invalid length.
[  638.762148][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.762591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.762987][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.763379][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.012825][T23706] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4464'.
[  639.277081][T23714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4465'.
[  639.614650][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4469'.
[  639.703328][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4469'.
[  639.900620][T23736] netlink: 'syz.1.4471': attribute type 9 has an invalid length.
[  640.136688][T23740] syzkaller1: entered promiscuous mode
[  640.136713][T23740] syzkaller1: entered allmulticast mode
[  640.431206][T23757] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  640.431244][T23757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  640.740767][T23764] vlan3: entered allmulticast mode
[  640.740792][T23764] bond0: entered allmulticast mode
[  640.748608][T23764] bond_slave_0: entered allmulticast mode
[  640.748682][T23764] bond_slave_1: entered allmulticast mode
[  640.875044][T23766] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20002
[  641.084912][T23776] xt_hashlimit: size too large, truncated to 1048576
[  641.152966][T23777] xt_hashlimit: size too large, truncated to 1048576
[  641.242982][T23779] x_tables: duplicate underflow at hook 3
[  641.784129][T23790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'.
[  641.948190][T23803] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  641.948331][T23803] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  642.149273][T23807] pimreg3: entered allmulticast mode
[  642.166616][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'.
[  642.270219][T23809] syzkaller1: entered promiscuous mode
[  642.270253][T23809] syzkaller1: entered allmulticast mode
[  642.326532][T23812] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4496'.
[  642.975575][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4500'.
[  642.981236][T23834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4500'.
[  643.040303][T23838] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000
[  643.148746][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4502'.
[  643.338385][T23848] sctp: [Deprecated]: syz.0.4504 (pid 23848) Use of int in maxseg socket option.
[  643.338385][T23848] Use struct sctp_assoc_value instead
[  643.652412][T23859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4506'.
[  643.892164][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.892600][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.892976][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.893340][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.256511][T23879] netlink: 'syz.3.4511': attribute type 29 has an invalid length.
[  644.302792][T23879] netlink: 'syz.3.4511': attribute type 29 has an invalid length.
[  644.516430][T23892] netlink: 'syz.3.4516': attribute type 2 has an invalid length.
[  644.516455][T23892] netlink: 'syz.3.4516': attribute type 8 has an invalid length.
[  644.516469][T23892] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4516'.
[  644.706356][T23903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4517'.
[  644.846247][T23909] syzkaller0: entered promiscuous mode
[  644.846298][T23909] syzkaller0: entered allmulticast mode
[  645.017048][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4523'.
[  645.167012][T23927] netlink: 'syz.4.4524': attribute type 1 has an invalid length.
[  645.203556][T23925] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  645.210543][T23925] bond11 (unregistering): Released all slaves
[  645.375981][T23925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4524'.
[  645.420366][T23931] syzkaller1: entered promiscuous mode
[  645.420391][T23931] syzkaller1: entered allmulticast mode
[  645.689694][T23944] netlink: 'syz.1.4528': attribute type 1 has an invalid length.
[  645.762812][T23944] lo speed is unknown, defaulting to 1000
[  645.999829][T23951] netlink: 'syz.4.4532': attribute type 21 has an invalid length.
[  646.179105][T23960] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  646.773164][T23974] ip_tables: iptables: counters copy to user failed while replacing table
[  646.776052][T23968] bond5: option arp_all_targets: invalid value (18446744073709551613)
[  646.805196][T23968] bond5 (unregistering): Released all slaves
[  647.054447][T23972] netlink: 'syz.3.4541': attribute type 1 has an invalid length.
[  647.160499][T23985] netlink: 'syz.4.4543': attribute type 1 has an invalid length.
[  647.338930][T23988] netlink: 'syz.0.4544': attribute type 1 has an invalid length.
[  647.561414][T23988] bond5: entered promiscuous mode
[  647.585571][T23988] bond5: entered allmulticast mode
[  647.586031][T23988] 8021q: adding VLAN 0 to HW filter on device bond5
[  647.656254][T23989] erspan1: entered allmulticast mode
[  648.849442][T24029] ip_tables: iptables: counters copy to user failed while replacing table
[  648.876918][T24033] xt_connbytes: Forcing CT accounting to be enabled
[  648.877193][T24033] set match dimension is over the limit!
[  648.919634][T24030] bond8: option arp_all_targets: invalid value (18446744073709551613)
[  648.934656][T24037] __nla_validate_parse: 8 callbacks suppressed
[  648.934675][T24037] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4554'.
[  648.937928][T24030] bond8 (unregistering): Released all slaves
[  648.992347][T24039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4557'.
[  649.084851][T24037] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4554'.
[  649.313148][T24054] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  649.338364][T24057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4557'.
[  649.647020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.647257][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.647523][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.647796][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.734799][T24054] veth0_macvtap: entered allmulticast mode
[  649.734957][T24054] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  650.316666][T24077] validate_nla: 2 callbacks suppressed
[  650.316692][T24077] netlink: 'syz.4.4566': attribute type 1 has an invalid length.
[  650.318204][T24082] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  650.504285][T24077] bond11: entered promiscuous mode
[  650.506134][T24077] 8021q: adding VLAN 0 to HW filter on device bond11
[  650.653376][T24100] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  650.793432][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4577'.
[  650.794060][T24120] netlink: 8812 bytes leftover after parsing attributes in process `syz.1.4577'.
[  651.052017][T24134] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4581'.
[  651.053136][T24134] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4581'.
[  651.089720][T24136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4582'.
[  651.224857][T24142] vcan0: tx address claim with different name
[  651.351012][T24153] netlink: 'syz.2.4588': attribute type 5 has an invalid length.
[  651.351037][T24153] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4588'.
[  651.400274][T24157] set match dimension is over the limit!
[  651.586717][T24164] netlink: 'syz.0.4591': attribute type 10 has an invalid length.
[  651.640037][T24164] dummy0: entered promiscuous mode
[  651.658060][T24164] team0: Port device dummy0 added
[  651.828580][T24170] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  653.219699][T24256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.676452][T24279] ipvlan20: entered allmulticast mode
[  653.676480][T24279] syz_tun: entered allmulticast mode
[  653.729130][T24283] unsupported nlmsg_type 40
[  654.325953][T24310] IPVS: length: 239 != 24
[  654.375683][T24310] netlink: 'syz.0.4633': attribute type 12 has an invalid length.
[  654.375709][T24310] netlink: 'syz.0.4633': attribute type 29 has an invalid length.
[  654.375724][T24310] __nla_validate_parse: 8 callbacks suppressed
[  654.375737][T24310] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4633'.
[  654.375759][T24310] netlink: 'syz.0.4633': attribute type 1 has an invalid length.
[  654.375773][T24310] netlink: 'syz.0.4633': attribute type 2 has an invalid length.
[  654.375786][T24310] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4633'.
[  654.966369][T24330] netlink: 'syz.3.4640': attribute type 1 has an invalid length.
[  655.069244][T24345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4640'.
[  655.179192][T24330] 8021q: adding VLAN 0 to HW filter on device bond5
[  655.402143][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.402605][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.403027][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.403460][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.600586][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4644'.
[  656.413923][T24388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4652'.
[  656.579555][T24395] netlink: 'syz.3.4655': attribute type 1 has an invalid length.
[  657.403048][   T32] INFO: task udevd:5973 blocked in I/O wait for more than 143 seconds.
[  657.403074][   T32]       Not tainted syzkaller #0
[  657.404492][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  657.404506][   T32] task:udevd           state:D stack:25160 pid:5973  tgid:5973  ppid:4988   task_flags:0x400140 flags:0x00080802
[  657.404575][   T32] Call Trace:
[  657.404583][   T32]  <TASK>
[  657.404598][   T32]  __schedule+0x17db/0x58f0
[  657.404901][   T32]  ? __lock_acquire+0x747/0x2de0
[  657.404985][   T32]  ? __pfx___schedule+0x10/0x10
[  657.405021][   T32]  ? schedule+0x90/0x2b0
[  657.405052][   T32]  schedule+0x164/0x2b0
[  657.405082][   T32]  io_schedule+0x7f/0xd0
[  657.405113][   T32]  folio_wait_bit_common+0x836/0xbc0
[  657.405158][   T32]  ? filemap_get_entry+0xcd/0x3f0
[  657.405205][   T32]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  657.405231][   T32]  ? filemap_read_folio+0x234/0x3a0
[  657.408252][   T32]  ? __pfx_wake_page_function+0x10/0x10
[  657.409190][   T32]  ? __filemap_get_folio_mpol+0x7c8/0x1000
[  657.409236][   T32]  do_read_cache_folio+0x1ac/0x590
[  657.410804][   T32]  ? __pfx_blkdev_read_folio+0x10/0x10
[  657.410994][   T32]  read_part_sector+0xb6/0x2b0
[  657.411088][   T32]  adfspart_check_POWERTEC+0x9a/0x7a0
[  657.411120][   T32]  ? rcu_is_watching+0x16/0xb0
[  657.411166][   T32]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  657.411195][   T32]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  657.411233][   T32]  ? __kmalloc_cache_noprof+0x14d/0x600
[  657.411309][   T32]  ? bdev_disk_changed+0x56c/0x17a0
[  657.411335][   T32]  ? bdev_disk_changed+0x56c/0x17a0
[  657.411370][   T32]  bdev_disk_changed+0x851/0x17a0
[  657.411424][   T32]  ? __pfx_bdev_disk_changed+0x10/0x10
[  657.411463][   T32]  blkdev_get_whole+0x372/0x510
[  657.411496][   T32]  bdev_open+0x324/0xd70
[  657.436327][   T32]  blkdev_open+0x461/0x600
[  657.436382][   T32]  ? __pfx_blkdev_open+0x10/0x10
[  657.436416][   T32]  do_dentry_open+0x816/0x1380
[  657.436505][   T32]  vfs_open+0x3b/0x340
[  657.436533][   T32]  ? path_openat+0x1428/0x1d60
[  657.436562][   T32]  path_openat+0x1443/0x1d60
[  657.436661][   T32]  do_file_open+0x23e/0x4a0
[  657.436698][   T32]  ? __pfx_do_file_open+0x10/0x10
[  657.436756][   T32]  ? _raw_spin_unlock+0x28/0x50
[  657.436785][   T32]  ? alloc_fd+0x651/0x6c0
[  657.436850][   T32]  do_sys_openat2+0x115/0x200
[  657.436889][   T32]  ? __pfx_do_sys_openat2+0x10/0x10
[  657.436920][   T32]  ? __x64_sys_epoll_wait+0x1d7/0x230
** replaying previous printk message **
[  657.436920][   T32]  ? __x64_sys_epoll_wait+0x1d7/0x230
[  657.436968][   T32]  __x64_sys_openat+0x138/0x170
[  657.437008][   T32]  do_syscall_64+0x166/0x520
[  657.437109][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.437167][   T32]  ? clear_bhb_loop+0x70/0xc0
[  657.437200][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.437227][   T32] RIP: 0033:0x7fba0b0a7407
[  657.437251][   T32] RSP: 002b:00007ffc10a24f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  657.437311][   T32] RAX: ffffffffffffffda RBX: 00007fba0b83d880 RCX: 00007fba0b0a7407
[  657.437332][   T32] RDX: 00000000000a0800 RSI: 000056512f202170 RDI: ffffffffffffff9c
[  657.437351][   T32] RBP: 000056512f1f0910 R08: 0000000000000000 R09: 0000000000000000
[  657.437368][   T32] R10: 0000000000000000 R11: 0000000000000202 R12: 000056512f203e20
[  657.437385][   T32] R13: 000056512f1fe190 R14: 0000000000000000 R15: 000056512f203e20
[  657.437427][   T32]  </TASK>
[  657.437523][   T32] 
[  657.437523][   T32] Showing all locks held in the system:
[  657.437536][   T32] locks held by pr/ttyS0/16: 1, last CPU#1:
[  657.437554][   T32]  #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  657.437634][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  657.437652][   T32]  #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  657.437751][   T32] locks held by kworker/u8:9/1284: 3, on CPU#1:
[  657.437769][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.437861][   T32]  #1: ffffc9000584fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.569846][   T32]  #2: ffffffff90254b80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  657.570267][   T32] locks held by udevd/4988: 1, on CPU#0:
[  657.570310][   T32]  #0: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650
[  657.571055][   T32] locks held by getty/5384: 2, on CPU#0:
[  657.571096][   T32]  #0: ffff8880358650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  657.571374][   T32]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  657.571578][   T32] locks held by udevd/5973: 1, on CPU#1:
[  657.571632][   T32]  #0: ffff88802752d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  657.588862][   T32] locks held by udevd/5978: 1, on CPU#0:
[  657.588905][   T32]  #0: ffff88802671d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  657.589065][   T32] locks held by kworker/u8:17/8527: 2, last CPU#0:
[  657.589107][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.589263][   T32]  #1: ffffc90003c27c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.589440][   T32] locks held by kworker/0:3/17492: 2, last CPU#0:
[  657.589481][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.589639][   T32]  #1: ffffc900034d7c40 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.589834][   T32] locks held by syz-executor/18202: 1, last CPU#1:
[  657.589876][   T32]  #0: ffff88803210cce0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400
[  657.596869][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4661'.
[  657.613032][   T32] locks held by kworker/0:6/18461: 2, last CPU#0:
[  657.613057][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.613128][   T32]  #1: ffffc9000573fc40 (cleanup_vm_area){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.613190][   T32] locks held by kworker/0:7/18462: 3, on CPU#0:
[  657.613206][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.613265][   T32]  #1: ffffc9000553fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  657.613325][   T32]  #2: ffffffff8ee8bf20 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40
[  657.613636][   T32] locks held by syz.0.4654/24389: 1, on CPU#1:
[  657.613678][   T32]  #0: ffff88807f40b6b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  657.613857][   T32] locks held by syz.0.4654/24405: 2, last CPU#0:
[  657.613899][   T32]  #0: ffff88807f40b6b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390
[  657.614049][   T32]  #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x5a/0x580
[  657.618396][   T32] locks held by syz.1.4660/24414: 2, on CPU#0:
[  657.618446][   T32]  #0: ffffffff90254b80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  657.631181][   T32]  #1: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  657.631264][   T32] locks held by syz.2.4661/24417: 2, last CPU#0:
[  657.631283][   T32]  #0: ffff8880500c94e0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xbb8/0x2d00
[  657.631473][   T32]  #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: sctp_copy_local_addr_list+0xa3/0x4e0
[  657.640881][   T32] 
[  657.640912][   T32] =============================================
[  657.640912][   T32] 
[  657.640962][   T32] NMI backtrace for cpu 0
[  657.641010][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  657.641068][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.641108][   T32] Call Trace:
[  657.641129][   T32]  <TASK>
[  657.641158][   T32]  dump_stack_lvl+0xe8/0x150
[  657.641274][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  657.641416][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  657.641536][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  657.641608][   T32]  sys_info+0x135/0x170
[  657.641691][   T32]  watchdog+0xfd7/0x1030
[  657.641806][   T32]  ? watchdog+0x1c7/0x1030
[  657.641851][   T32]  kthread+0x38b/0x480
[  657.641874][   T32]  ? __pfx_watchdog+0x10/0x10
[  657.641894][   T32]  ? __pfx_kthread+0x10/0x10
[  657.641918][   T32]  ret_from_fork+0x514/0xb70
[  657.641943][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  657.641965][   T32]  ? __switch_to+0xc89/0x1420
[  657.642016][   T32]  ? __pfx_kthread+0x10/0x10
[  657.642041][   T32]  ret_from_fork_asm+0x1a/0x30
[  657.642100][   T32]  </TASK>
[  657.642880][   T32] Sending NMI from CPU 0 to CPUs 1:
[  657.642981][    C1] NMI backtrace for cpu 1
[  657.642995][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  657.643016][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  657.643028][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  657.643092][    C1] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  657.643108][    C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002
[  657.643126][    C1] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000
[  657.643139][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  657.643151][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  657.643163][    C1] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000
[  657.643177][    C1] R13: 0000000000000000 R14: ffffffff9ad41300 R15: 0000000000000000
[  657.643190][    C1] FS:  0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000
[  657.643205][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  657.643218][    C1] CR2: 00007f64117556c8 CR3: 000000004d660000 CR4: 00000000003526f0
[  657.643235][    C1] Call Trace:
[  657.643242][    C1]  <TASK>
[  657.643251][    C1]  wait_for_lsr+0x184/0x2f0
[  657.643282][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  657.643316][    C1]  serial8250_console_write+0xaa1/0x1200
[  657.643343][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  657.643363][    C1]  ? __schedule+0x17f1/0x58f0
[  657.643395][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  657.643425][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  657.643450][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  657.643479][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  657.643503][    C1]  nbcon_kthread_func+0x679/0x880
[  657.643526][    C1]  ? nbcon_kthread_func+0x163/0x880
[  657.643545][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  657.643569][    C1]  ? __kthread_parkme+0x71/0x1f0
[  657.643597][    C1]  ? __kthread_parkme+0x199/0x1f0
[  657.643627][    C1]  kthread+0x38b/0x480
[  657.643644][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  657.643662][    C1]  ? __pfx_kthread+0x10/0x10
[  657.643681][    C1]  ret_from_fork+0x514/0xb70
[  657.643700][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  657.643717][    C1]  ? __switch_to+0xc89/0x1420
[  657.643744][    C1]  ? __pfx_kthread+0x10/0x10
[  657.643762][    C1]  ret_from_fork_asm+0x1a/0x30
[  657.643801][    C1]  </TASK>
[  657.674334][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  658.556770][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  658.565919][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  658.576093][   T32] Call Trace:
[  658.579399][   T32]  <TASK>
[  658.582807][   T32]  vpanic+0x56d/0xa60
[  658.586920][   T32]  ? __pfx___schedule+0x10/0x10
[  658.592100][   T32]  ? __pfx_vpanic+0x10/0x10
[  658.596817][   T32]  panic+0xc5/0xd0
[  658.600854][   T32]  ? __pfx_panic+0x10/0x10
[  658.606092][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  658.611620][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  658.617423][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  658.623794][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  658.630603][   T32]  watchdog+0x1030/0x1030
[  658.634987][   T32]  ? watchdog+0x1c7/0x1030
[  658.639565][   T32]  kthread+0x38b/0x480
[  658.643679][   T32]  ? __pfx_watchdog+0x10/0x10
[  658.648387][   T32]  ? __pfx_kthread+0x10/0x10
[  658.653196][   T32]  ret_from_fork+0x514/0xb70
[  658.657845][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  658.663163][   T32]  ? __switch_to+0xc89/0x1420
[  658.667900][   T32]  ? __pfx_kthread+0x10/0x10
[  658.672633][   T32]  ret_from_fork_asm+0x1a/0x30
[  658.677817][   T32]  </TASK>
[  658.681468][   T32] Kernel Offset: disabled
[  658.685845][   T32] Rebooting in 86400 seconds..