last executing test programs:

9m38.10989141s ago: executing program 1 (id=427):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x2, 0x1, 0x64000000, [@private1]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x50}, 0x4)

9m38.044574207s ago: executing program 1 (id=428):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0)
r0 = socket(0x2d, 0x2, 0x0)
sendto(r0, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "000001000000080108000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}, 0x80)

9m38.044250445s ago: executing program 1 (id=429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001a80200004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)

9m37.934764264s ago: executing program 1 (id=430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x1000, 0x7fffbffe}, &(0x7f0000000680)=0x3, 0x0, 0x8b1a, 0x3, 0x8, 0x9, 0x7c, 0x4939}}], 0x58}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000140))
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20)

9m37.823578956s ago: executing program 1 (id=432):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000002580)="200700002e82af220c7f133940bb1d2e10ec2593beba2d06665be35587c5e0cf24fd6839eddeffe4297d54431ab6246a1df53db7aee6adbc84f0312536a37c396af07de5cd682f58220f0caf4097ec26c6b21a6cb97e44dd988264b1de223fe0e8b032972c62be8493589409bd0557a42effbe22509bf444435a1ec5bfba91d39bc2825953c27d1bb16a06da9565220eeba09db09de7ecd535ca4dc25b15cd2d24a015a5f73622a8b82882ef7f8001a083a94baee4605fba9f3c2f572200"/203, 0xcb}, {&(0x7f0000000100)="3d682b1e2e948303206a1c7fc6c9386fa4dca836195f57d176245bbabff82f7a08733f793bdc7c8b30f7d0b744c745fcb2caeb0fe251fdd1de6a6423ac60931287c6e878d216f16a8c3579d231b3efbf9c72c113132bf88b9731f41a0273572305b510e94943a98c9dd18458696fa78fa7333c64762f1370d8910df46624bc", 0x7f}, {&(0x7f0000000280)="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", 0xeb6}], 0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x325, 0xb1, 0x1, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = accept(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000001c0)=0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x33)
accept4$inet(r3, &(0x7f0000001140)={0x2, 0x0, @local}, &(0x7f0000001180)=0x10, 0x80c00)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getchain={0x2c, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x15, 0xfff3}, {0x6, 0x6}, {0xc, 0xffff}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x800)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48)

9m37.820671654s ago: executing program 1 (id=433):
r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'})
sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

9m22.800439711s ago: executing program 32 (id=433):
r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00'})
sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

8m0.791225987s ago: executing program 2 (id=1431):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, 0x8)
socket$kcm(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="330724bd7000ffdbdf254a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000010000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111cc00000000009500000020000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x4, 0x0, @val=@tcx}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x4}, 0x5)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000280)=r8, 0x4)
r10 = socket$phonet(0x23, 0x2, 0x1)
bind(r10, &(0x7f0000000000)=@rc={0x1f, @none, 0x3}, 0x80)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000094fb04289c0200"/28, @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000000100"/76], 0x98}, 0x0)

8m0.582501856s ago: executing program 2 (id=1434):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48)

8m0.441745513s ago: executing program 2 (id=1435):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4002a65189d450991fbb95a9d10bb4028d5bfd9a62085793e4b623a5b5d702ddbd2badb9ac6c964805137daedf187d05e3bb58fa6fc090ef408516f96a17c6c9f028ba1bcf0df1d6e3d2c612010dc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4002a65189d450991fbb95a9d10bb4028d5bfd9a62085793e4b623a5b5d702ddbd2badb9ac6c964805137daedf187d05e3bb58fa6fc090ef408516f96a17c6c9f028ba1bcf0df1d6e3d2c612010dc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000041000701fefffffffbffffff017c0000040042800c00018006000600800a0000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48084}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaeaabb86dd6000000000303afffe88000000000000000000a7c6858fd7648871574b3103d23c5d0000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r6, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r6, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r10, 0x0)
getsockname$packet(r10, &(0x7f0000000740)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xc0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r3}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000140)=0xfffffff9, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20)

8m0.272122555s ago: executing program 2 (id=1438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0x5000000, @mcast2, 0x9}}}, 0x88) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x0, 0x6}}]}, 0x48}}, 0x4840)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async, rerun: 32)
r3 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x200480d0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x844)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809, "b2fd8cba"}}}}, 0x1e)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48)

7m59.7802319s ago: executing program 2 (id=1443):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r6, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xeb43}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40800) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20)

7m59.470045575s ago: executing program 2 (id=1446):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = socket(0x10, 0x3, 0x0)
unshare(0x28000600)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
ioctl$FICLONE(r10, 0x40049409, r9)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

7m44.401021408s ago: executing program 33 (id=1446):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r10 = socket(0x10, 0x3, 0x0)
unshare(0x28000600)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
ioctl$FICLONE(r10, 0x40049409, r9)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

7m32.723757386s ago: executing program 3 (id=1638):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48)
socket$netlink(0x10, 0x3, 0x12)
r0 = socket$inet(0xa, 0x6, 0x200085)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x81000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)="2f099c7af34d8ea80723648e0574b245289c39d8b9d36fc54de9dfbc31ffe44334f4f158abf38e6952d29d975a471ce46aaf734e25d17de19a724feb16fe896f211dd078745855f4b44862feedf3bc2aa3cd7e293de872a7282580694caf5b2e3efa6b0406ef2e206f", 0x69}, {&(0x7f0000000380)="cf0d1b50ae1b1ab03028ee5e35a39b9666ab98e0c7e0a2258b6387af549b5fc2ff6bf787e3f169d9cc9cd1301eeec04df00ca67f511aec94c3a7fd1f46d2df6c85253d1f1e57a3026eda06ed155f2f17fba08bc1eac51e434e5736c4a06450036dbec16af7f468a5f10ba907bbfcc9a7addc93203328b8c83dea0d007373d45a86f5", 0x82}], 0x2)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd05000000000000080003400007000001"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
socket(0x2b, 0x1, 0x1)

7m32.260551047s ago: executing program 3 (id=1639):
socket(0x0, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="126efb8e70bbd1ead86a9bb7258eae8f8cd869a89ddcfedcc6368f7472", &(0x7f0000000280)=""/121}, 0x20)

7m32.135787331s ago: executing program 3 (id=1642):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x7, 0x1, 0x10, 0x80000001}, &(0x7f00000005c0)=0x10)
getpeername(r0, 0x0, &(0x7f00000000c0)) (async)
getpeername(r0, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x1, 0x0) (async)
socket$kcm(0x10, 0x1, 0x0)
socket$inet(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/46, 0x2e}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000001880)=""/251, 0xfb}], 0x5}, 0x8000}], 0x1, 0x20, 0x0) (async)
recvmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/46, 0x2e}, {&(0x7f0000001780)=""/182, 0xb6}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f0000001880)=""/251, 0xfb}], 0x5}, 0x8000}], 0x1, 0x20, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="68020000000501040000000000000000030000045402010003000060"], 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f0000000580)={0x1f, @any, 0x7}, 0xa)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, &(0x7f0000000200)=[{&(0x7f00000003c0)="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", 0x10f}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff9c, &(0x7f0000000200)=[{&(0x7f00000003c0)="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", 0x10f}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000001a6dc8d2cadd46e5ba000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000001a6dc8d2cadd46e5ba000000200000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) (async)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000002c0)=0x4)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @val=@tcx}, 0x1c) (async)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x0, @val=@tcx}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x4}, 0x5)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500))
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000680)=r8, 0x4)

7m31.433662841s ago: executing program 0 (id=1650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FICLONERANGE(r2, 0x4020940d, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
socket$packet(0x11, 0x2, 0x300) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet6(0xa, 0x80002, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async)
bind$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @mcast2, 0xa}, 0x1c)
sendmmsg$sock(r6, &(0x7f0000002140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x8000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8070bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="f6c70000", @ANYRES16=r8, @ANYRESDEC=r6], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20001000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)

7m31.183261974s ago: executing program 3 (id=1652):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x6}, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c4400000000000e0feb5def6abea1817cb000095cab350db6ff82e8ef312be9f8d16c0fe8d76b13fe0ab4610966d044a9d22b88be03c9c454721d67f5c7f20f91cb95c8953e90aa7cb496d0e0ff09bc8f6d57eb32e969b2ff88e9750a3b744f88ca22124"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @remote}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x8000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffff0000, @private2, 0x7}}, 0x0, 0xffff}, 0x90) (async)
sendmsg$inet_sctp(r3, &(0x7f00000004c0)={&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="ada132a0e02f499d1865b67603e83843762377d069b22986bbc44357efba46e39ba8221974da931aa398b05218cde87e027702a0eda20acc203911ed3d1f8393cfa484555b0a655e7bb1130c7142c58de0aa0287181a47388b7b7ce979b5d41bc088ebb6d646b165559b011bc5db612c", 0x70}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000008400000006000000faff00000000000018000000000000008400000007003600640101000000000030000000000000008400000001000000fdffff00080000000000060000010000faffffff0100000007000062", @ANYRES32=r2, @ANYBLOB="1800000000000000840000000000000000a2000289008000200000000000000084000000020000000a00000000000000ff000000", @ANYRES32=r8, @ANYBLOB="18000000000000008400000006000000ff00000000000000"], 0xb0, 0x40015}, 0x804)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r5, 0x7, 0x0, 0x9, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

7m31.182748597s ago: executing program 0 (id=1653):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000000)=0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
r3 = socket(0x15, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = socket(0x10, 0x3, 0x0)
unshare(0x28000600)
close(0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0)
ioctl$FICLONE(r5, 0x40049409, r4)
getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000140)=0x8)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r1, 0x0, &(0x7f0000003100)=""/245}, 0x20)

7m31.076324138s ago: executing program 4 (id=1654):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400010401000000000000002d000000010000000500020008000000"], 0x20}}, 0x0)
r0 = socket(0x2d, 0x2, 0x0)
sendto(r0, &(0x7f0000000600)="010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0xc8, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c900"}, 0x80)

7m31.011665359s ago: executing program 0 (id=1655):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
close(r0)
perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x80, 0x35, 0x1, 0x2, 0x0, 0x6, 0x1102c, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000001d00), 0x5}, 0x8000, 0xaa, 0x1, 0x0, 0x22, 0x6, 0x2081, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r0, 0x9)

7m31.009532364s ago: executing program 3 (id=1656):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040)) (async)
socket$kcm(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0x2, 0x0) (async)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000580), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000200)={0x1c, 0x76, 0xe0b, 0x70bd27, 0x0, "", [@typed={0x8, 0xa7, 0x0, 0x0, @u32=0x94e}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8000040}, 0x44) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) (async)
sendmsg$inet(r9, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

7m30.931188386s ago: executing program 4 (id=1657):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000100154e0400000008008c"], 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000100000000200000000000000000000000000000000000000000000000200000000000000960700002dbd70000735000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040000000c"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

7m30.833787388s ago: executing program 0 (id=1658):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYRES16=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', <r2=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r2, 0x32, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000180)={<r3=>r0, &(0x7f0000000000)='!+.{$/}\x00', 0x100, &(0x7f00000000c0)={@align=0x8000000000000001, {0x7, 0x6, 0x46, 0xfffffffffffffffb}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1ff})
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2)

7m30.764126358s ago: executing program 4 (id=1659):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x40000012, 0x4040, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r3, 0xc0189436, &(0x7f0000000080))
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x603f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x526}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)

7m30.651766194s ago: executing program 0 (id=1660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x801)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x3, 0x7, "8cc30a16fbcd07"}, 0xf)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000000140), 0x0}, 0x20)

7m30.651270478s ago: executing program 3 (id=1661):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0)) (async)
getpeername(r0, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040))
socket$kcm(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) (async)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) (async)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x1f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010100, @private=0xa010101, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11}}], 0xa0}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x1f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010100, @private=0xa010101, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11}}], 0xa0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

7m30.533435557s ago: executing program 0 (id=1662):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$kcm(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x28, 0x0, 0x204, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x3f}}}}}, 0x28}}, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r9=>0x0})
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r8, r9, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
close(r10)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000017c0)={r5, r6, 0x5, 0x0, @val=@tracing={0x0, 0x258b2ebb}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r5, 0x4}, 0x5) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r13 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x161) (async)
sendmsg$inet(r13, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

7m30.500115963s ago: executing program 4 (id=1663):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x4, 0x4}, &(0x7f00000001c0)=0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x20040004) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x20040004)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r3=>0x0, 0x58, "4624164e65c55010041cd37b489c5a93c2b88347ae78da40a14f074b65474e4a8945df4ba1bf37177ee1260bc4b11a9fc94a01572ae2c120019116747fd4224f52e313c177c479d1c10ba565ee27ab81cbddba942edcfbaa"}, &(0x7f0000000080)=0x60)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r3, 0xf}, &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r3, 0xf}, &(0x7f0000000100)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x40000012}, 0x48)

7m16.218446159s ago: executing program 4 (id=1664):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)='[', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0xa, 0x6, 0x5478}}], 0x20, 0x4855}, 0x40000d6)
close(r0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x80, 0x35, 0x1, 0x2, 0x0, 0x6, 0x1102c, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000001d00), 0x5}, 0x8000, 0xaa, 0x1, 0x0, 0x22, 0x6, 0x2081, 0x0, 0x4, 0x0, 0x3ff}, 0xffffffffffffffff, 0x1, r0, 0x9)

7m11.12609943s ago: executing program 34 (id=1662):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$kcm(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x28, 0x0, 0x204, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x3f}}}}}, 0x28}}, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r9=>0x0})
r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r8, r9, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
close(r10)
r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000017c0)={r5, r6, 0x5, 0x0, @val=@tracing={0x0, 0x258b2ebb}}, 0x20)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r11, r5, 0x4}, 0x5) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r13 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x161) (async)
sendmsg$inet(r13, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

7m2.217280139s ago: executing program 35 (id=1661):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
getpeername(r0, 0x0, &(0x7f00000000c0)) (async)
getpeername(r0, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040))
socket$kcm(0x10, 0x3, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) (async)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a0007"], 0x5c}}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) (async)
setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x1f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010100, @private=0xa010101, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11}}], 0xa0}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x1f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @private=0xa010100, @private=0xa010101, @private=0xa010100]}]}}}, @ip_tos_u8={{0x11}}], 0xa0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

7m0.252405902s ago: executing program 4 (id=1667):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
socketpair(0x1a, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000190004002dbd7000fcdbdf2502008081ff02fe06002400000c001680050005007f00000008000400", @ANYRES32=0x0, @ANYBLOB="08000640000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x40081)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000340), 0x0}, 0x20)

6m37.235453967s ago: executing program 36 (id=1667):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000)
socketpair(0x1a, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000190004002dbd7000fcdbdf2502008081ff02fe06002400000c001680050005007f00000008000400", @ANYRES32=0x0, @ANYBLOB="08000640000000"], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x40081)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000340), 0x0}, 0x20)

6m13.618366091s ago: executing program 6 (id=1666):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48)
socket$netlink(0x10, 0x3, 0x12)
r0 = socket$inet(0xa, 0x6, 0x200085)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x81000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)="2f099c7af34d8ea80723648e0574b245289c39d8b9d36fc54de9dfbc31ffe44334f4f158abf38e6952d29d975a471ce46aaf734e25d17de19a724feb16fe896f211dd078745855f4b44862feedf3bc2aa3cd7e293de872a7282580694caf5b2e3efa6b0406ef2e206f", 0x69}, {&(0x7f0000000380)="cf0d1b50ae1b1ab03028ee5e35a39b9666ab98e0c7e0a2258b6387af549b5fc2ff6bf787e3f169d9cc9cd1301eeec04df00ca67f511aec94c3a7fd1f46d2df6c85253d1f1e57a3026eda06ed155f2f17fba08bc1eac51e434e5736c4a06450036dbec16af7f468a5f10ba907bbfcc9a7addc93203328b8c83dea0d007373d45a86f5", 0x82}], 0x2)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd05000000000000080003400007000001"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
socket$inet_sctp(0x2, 0x1, 0x84)

1m39.794539089s ago: executing program 5 (id=1665):
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000100154e0400000008008c"], 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff030000001a0000000200000000000000000000000000000000000000000000000200000000000000960700002dbd70000735000000000002be0000000000000000000000b1a0010008001f00040000000c0015005b073500040000000c"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

0s ago: executing program 6 (id=1666):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48)
socket$netlink(0x10, 0x3, 0x12)
r0 = socket$inet(0xa, 0x6, 0x200085)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x81000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000200)="2f099c7af34d8ea80723648e0574b245289c39d8b9d36fc54de9dfbc31ffe44334f4f158abf38e6952d29d975a471ce46aaf734e25d17de19a724feb16fe896f211dd078745855f4b44862feedf3bc2aa3cd7e293de872a7282580694caf5b2e3efa6b0406ef2e206f", 0x69}, {&(0x7f0000000380)="cf0d1b50ae1b1ab03028ee5e35a39b9666ab98e0c7e0a2258b6387af549b5fc2ff6bf787e3f169d9cc9cd1301eeec04df00ca67f511aec94c3a7fd1f46d2df6c85253d1f1e57a3026eda06ed155f2f17fba08bc1eac51e434e5736c4a06450036dbec16af7f468a5f10ba907bbfcc9a7addc93203328b8c83dea0d007373d45a86f5", 0x82}], 0x2)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd05000000000000080003400007000001"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
socket$inet_sctp(0x2, 0x1, 0x84)

kernel console output (not intermixed with test programs):

T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.258474][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.258481][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.258494][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.310322][ T5597] hsr_slave_0: entered promiscuous mode
[   59.310779][ T5597] hsr_slave_1: entered promiscuous mode
[   59.311122][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   59.311157][ T5597] Cannot create hsr debugfs directory
[   59.321671][ T5600] team0: Port device team_slave_0 added
[   59.342661][ T5600] team0: Port device team_slave_1 added
[   59.371752][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.374583][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.383247][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.391279][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.394349][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.402085][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.459685][ T5600] hsr_slave_0: entered promiscuous mode
[   59.460310][ T5600] hsr_slave_1: entered promiscuous mode
[   59.460876][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   59.460888][ T5600] Cannot create hsr debugfs directory
[   59.481728][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.488964][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.510412][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.515229][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.518085][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.523012][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.525806][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.531004][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.657353][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.657488][ T5593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.658126][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.658336][ T5593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.661306][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.674417][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.676409][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.679673][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.687240][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.693064][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.693793][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.698160][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.761395][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.767522][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   59.771720][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.776609][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   59.779293][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.783761][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   59.786559][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.790323][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   59.797547][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.800382][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.890382][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.933663][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[   59.947662][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.947791][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.954176][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.964156][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.964306][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.990618][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   60.010656][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.010769][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.038449][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.038561][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.054117][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.097076][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   60.105047][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.105111][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.129316][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.129437][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.332394][ T5596] Bluetooth: hci1: command tx timeout
[   60.332639][ T5596] Bluetooth: hci0: command tx timeout
[   60.413957][   T55] Bluetooth: hci2: command tx timeout
[   60.449162][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.479793][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.503225][ T5597] veth0_vlan: entered promiscuous mode
[   60.517924][ T5597] veth1_vlan: entered promiscuous mode
[   60.528935][ T5593] veth0_vlan: entered promiscuous mode
[   60.541479][ T5593] veth1_vlan: entered promiscuous mode
[   60.562960][ T5597] veth0_macvtap: entered promiscuous mode
[   60.566874][ T5597] veth1_macvtap: entered promiscuous mode
[   60.591457][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.605624][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.611785][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.618198][ T5593] veth0_macvtap: entered promiscuous mode
[   60.627342][ T5593] veth1_macvtap: entered promiscuous mode
[   60.665864][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.672116][ T5651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.672333][ T5651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.672349][ T5651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.672362][ T5651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.697661][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.747797][ T5600] veth0_vlan: entered promiscuous mode
[   60.769899][ T5600] veth1_vlan: entered promiscuous mode
[   60.775093][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.779162][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.829572][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.832612][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.854758][ T5600] veth0_macvtap: entered promiscuous mode
[   60.860489][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.860552][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.868761][ T5600] veth1_macvtap: entered promiscuous mode
[   60.902708][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.904437][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.904451][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.913483][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.923500][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.022056][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.022299][ T5651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.022326][ T5651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.062051][ T5651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.062505][ T5651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.062700][ T5651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.062862][ T5651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.063019][ T5651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.065117][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.065130][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.120914][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.120975][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.280160][ T5715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   61.353736][ T5724] netlink: 284 bytes leftover after parsing attributes in process `syz.2.9'.
[   61.477304][ T5736] netlink: 'syz.0.12': attribute type 30 has an invalid length.
[   61.497161][ T5739] netlink: 'syz.2.13': attribute type 4 has an invalid length.
[   61.754341][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'.
[   61.802373][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   61.807304][ T5761] Zero length message leads to an empty skb
[   62.016998][ T5766] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   62.017057][ T5766] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   62.017093][ T5766] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   62.183986][ T5775] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET)
[   62.337345][ T5778] netlink: 284 bytes leftover after parsing attributes in process `syz.1.23'.
[   62.412863][ T5596] Bluetooth: hci1: command tx timeout
[   62.412971][   T55] Bluetooth: hci0: command tx timeout
[   62.450430][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   62.451620][ T5782] unsupported nla_type 140
[   62.492129][   T55] Bluetooth: hci2: command tx timeout
[   62.559104][   T34] audit: type=1107 audit(1789817043.190:2): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='~ɴo'
[   63.016395][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   63.017394][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'.
[   63.286146][ T5826] netlink: 'syz.2.38': attribute type 7 has an invalid length.
[   63.290020][ T5826] netlink: 'syz.2.38': attribute type 3 has an invalid length.
[   63.294562][ T5826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.38'.
[   63.567791][ T5843] syzkaller0: entered promiscuous mode
[   63.568052][ T5843] syzkaller0: entered allmulticast mode
[   63.739573][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'.
[   63.762538][ T5651] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.762602][ T5651] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.762655][ T5651] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.762700][ T5651] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.873983][ T5866] Bluetooth: MGMT ver 1.23
[   63.875935][ T5866] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[   63.881972][ T5864] netlink: 'syz.1.50': attribute type 7 has an invalid length.
[   63.882014][ T5864] netlink: 'syz.1.50': attribute type 3 has an invalid length.
[   63.926193][ T5869] xt_hashlimit: size too large, truncated to 1048576
[   63.943795][ T5870] xt_hashlimit: size too large, truncated to 1048576
[   64.116036][ T5880] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   64.116779][ T5879] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   64.492659][ T5596] Bluetooth: hci1: command tx timeout
[   64.492754][   T55] Bluetooth: hci0: command tx timeout
[   64.549996][ T5910] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   64.573150][   T55] Bluetooth: hci2: command tx timeout
[   64.993837][   T53] cfg80211: failed to load regulatory.db
[   65.469547][ T5946] tipc: Started in network mode
[   65.469611][ T5946] tipc: Node identity 56e5ee163f4b, cluster identity 4711
[   65.471024][ T5946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.515719][ T5955] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP)
[   65.647533][ T5940] tipc: Disabling bearer <eth:syzkaller0>
[   65.880226][ T6013] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   66.129481][ T6036] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[   66.129533][ T6036] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[   66.285862][ T6059] __nla_validate_parse: 14 callbacks suppressed
[   66.286053][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'.
[   66.341692][ T6063] netlink: 284 bytes leftover after parsing attributes in process `syz.1.92'.
[   66.417436][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[   66.444344][ T6074] xt_CONNSECMARK: invalid mode: 254
[   66.572023][   T55] Bluetooth: hci0: command tx timeout
[   66.572171][   T55] Bluetooth: hci1: command tx timeout
[   66.652767][ T5596] Bluetooth: hci2: command tx timeout
[   66.683748][ T6096] nbd: must specify a size in bytes for the device
[   66.688511][ T6096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'.
[   66.751242][ T6102] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   66.754307][ T6102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.806839][ T6106] netlink: 284 bytes leftover after parsing attributes in process `syz.1.104'.
[   66.835407][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.105'.
[   66.888306][ T6112] netlink: 284 bytes leftover after parsing attributes in process `syz.1.106'.
[   66.969372][ T6117] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   67.010238][ T6117] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.052403][ T6117] bond2: (slave geneve2): making interface the new active one
[   67.062201][ T6117] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   67.193992][ T6132] netlink: 284 bytes leftover after parsing attributes in process `syz.2.113'.
[   67.274302][ T6144] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   67.540301][ T6173] x_tables: duplicate underflow at hook 2
[   67.659252][ T6180] netlink: 'syz.2.129': attribute type 11 has an invalid length.
[   67.738076][ T6184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.131'.
[   67.748323][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.131'.
[   67.935586][ T6203] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   68.023003][ T6210] netlink: 'syz.2.137': attribute type 1 has an invalid length.
[   68.076730][ T6210] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.096543][ T6210] bond2: (slave geneve2): making interface the new active one
[   68.099193][ T6210] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   68.610615][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd899800: rx timeout, send abort
[   69.110874][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd89b800: rx timeout, send abort
[   69.114450][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd899800: abort rx timeout. Force session deactivation
[   69.611005][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd89b800: abort rx timeout. Force session deactivation
[   69.872505][ T1107] IPVS: starting estimator thread 0...
[   69.898839][ T6291] IPVS: Scheduler module ip_vs_mh  not found
[   69.963253][ T6292] IPVS: using max 48 ests per chain, 115200 per kthread
[   70.094090][ T6305] ip_tables: iptables: counters copy to user failed while replacing table
[   70.594843][ T6328] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   70.620541][ T6328] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.644535][ T6328] bond2: (slave geneve2): making interface the new active one
[   70.647992][ T6328] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   70.732312][   T55] Bluetooth: hci0: command 0x0c3a tx timeout
[   70.733099][ T5596] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[   70.754428][ T6268] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   70.851090][ T6341] ieee802154 phy0 wpan0: encryption failed: -22
[   71.309015][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[   71.309439][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[   71.340040][ T6383] netlink: 'syz.2.192': attribute type 1 has an invalid length.
[   71.362831][ T6383] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.396257][ T6383] bond3: (slave geneve3): making interface the new active one
[   71.399537][ T6383] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   71.610706][ T6396] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   71.659014][ T6396] batman_adv: batadv0: Adding interface: syzkaller0
[   71.662273][ T6396] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.673204][ T6396] batman_adv: batadv0: Interface activated: syzkaller0
[   71.686453][ T6394] batman_adv: batadv0: Interface deactivated: syzkaller0
[   71.701478][ T6394] batman_adv: batadv0: Removing interface: syzkaller0
[   71.949670][ T6415] __nla_validate_parse: 17 callbacks suppressed
[   71.949757][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'.
[   72.346930][ T6431] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.206'.
[   72.470299][ T5995] IPVS: starting estimator thread 0...
[   72.478569][ T6446] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[   72.552892][ T6445] IPVS: using max 46 ests per chain, 110400 per kthread
[   72.616974][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   72.617022][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'.
[   72.617061][ T6460] netlink: 'syz.1.215': attribute type 11 has an invalid length.
[   72.814210][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'.
[   72.914695][ T6480] netlink: 284 bytes leftover after parsing attributes in process `syz.0.222'.
[   72.924797][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'.
[   73.047265][ T6487] openvswitch: netlink: Message has 8 unknown bytes.
[   73.053208][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.083811][ T5651] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.084017][ T5651] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.084172][ T5651] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.084195][ T5651] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.453073][ T6510] netlink: 9 bytes leftover after parsing attributes in process `syz.0.234'.
[   73.456735][ T6510] 0: renamed from hsr0 (while UP)
[   73.464899][ T6510] 0: entered allmulticast mode
[   73.464949][ T6510] hsr_slave_0: entered allmulticast mode
[   73.465038][ T6510] hsr_slave_1: entered allmulticast mode
[   73.465445][ T6510] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   73.627217][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[   73.652983][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'.
[   73.807760][ T6539] x_tables: duplicate underflow at hook 2
[   74.061789][ T6569] netlink: 'syz.2.253': attribute type 23 has an invalid length.
[   74.144739][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.216340][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.273769][ T6586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.668283][ T6610] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   74.688836][ T6610] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.722730][ T6610] bond3: (slave geneve3): making interface the new active one
[   74.727558][ T6610] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   75.644228][ T6653] openvswitch: netlink: IPv4 tun info is not correct
[   76.006578][ T6672] team0: No ports can be present during mode change
[   76.659206][ T6708] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[   76.696123][ T6708] veth3: entered allmulticast mode
[   76.698831][ T6708] bond4: (slave veth3): Enslaving as an active interface with a down link
[   76.706379][ T6708] bond4: (slave veth0_to_bond): making interface the new active one
[   76.706987][ T6708] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   76.714031][ T6708] macvlan2: entered promiscuous mode
[   76.714040][ T6708] macvlan2: entered allmulticast mode
[   76.714403][ T6708] bond4: entered promiscuous mode
[   76.714410][ T6708] veth0_to_bond: entered promiscuous mode
[   76.715413][ T6708] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.715701][ T6708] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   76.715783][ T6708] bond4: left promiscuous mode
[   76.715789][ T6708] veth0_to_bond: left promiscuous mode
[   77.157677][ T6746] __nla_validate_parse: 14 callbacks suppressed
[   77.157884][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.390651][ T6758] netlink: 'syz.2.303': attribute type 1 has an invalid length.
[   77.522151][ T6758] 8021q: adding VLAN 0 to HW filter on device bond4
[   78.991457][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'.
[   79.261279][ T6809] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   79.326680][ T6813] warning: `syz.1.317' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.340963][ T6813] netlink: 'syz.1.317': attribute type 7 has an invalid length.
[   79.378194][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'.
[   79.570208][ T6824] netlink: 'syz.2.321': attribute type 1 has an invalid length.
[   79.595993][ T6824] bond5: entered promiscuous mode
[   79.599281][ T6824] 8021q: adding VLAN 0 to HW filter on device bond5
[   79.637395][ T6824] bond5: (slave bridge1): making interface the new active one
[   79.637498][ T6824] bridge1: entered promiscuous mode
[   79.648364][ T6824] bond5: (slave bridge1): Enslaving as an active interface with an up link
[   79.921413][ T6841] netlink: 'syz.2.327': attribute type 1 has an invalid length.
[   79.940151][ T6841] 8021q: adding VLAN 0 to HW filter on device bond6
[   79.944984][ T6839] bond0: option min_links: invalid value (18446744073709551615)
[   79.945683][ T6839] bond0: option min_links: allowed values 0 - 2147483647
[   79.972153][ T6841] bond6: (slave geneve4): making interface the new active one
[   79.973169][ T6841] bond6: (slave geneve4): Enslaving as an active interface with an up link
[   80.105922][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'.
[   80.266113][ T6853] openvswitch: netlink: Message has 8 unknown bytes.
[   80.400010][ T6850] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.418190][ T6850] bond5: left promiscuous mode
[   80.418230][ T6850] bridge1: left promiscuous mode
[   80.497182][ T6869] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[   80.554116][ T6869] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.678645][ T6869] bond5: (slave geneve4): making interface the new active one
[   80.694939][ T6869] bond5: (slave geneve4): Enslaving as an active interface with an up link
[   80.846032][ T6882] x_tables: duplicate underflow at hook 1
[   80.933837][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[   81.447333][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'.
[   81.475127][ T6915] bond3: option broadcast_neighbor: invalid value (3)
[   81.479459][ T6918] netlink: 'syz.0.344': attribute type 1 has an invalid length.
[   81.488042][ T6915] bond3 (unregistering): Released all slaves
[   81.536519][ T6918] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.665107][ T6918] bond6: (slave geneve5): making interface the new active one
[   81.680366][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   81.685406][ T6927] netlink: 284 bytes leftover after parsing attributes in process `syz.2.347'.
[   81.691998][ T6918] bond6: (slave geneve5): Enslaving as an active interface with an up link
[   81.721950][ T6925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   81.929205][ T6939] x_tables: duplicate underflow at hook 3
[   84.828534][ T6933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   85.186917][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'.
[   85.267659][ T6971] Bluetooth: ISO socket layer initialized
[   85.470997][ T6976] netlink: 284 bytes leftover after parsing attributes in process `syz.0.357'.
[   85.691793][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'.
[   85.691865][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'.
[   85.719598][ T6990] openvswitch: netlink: Message has 8 unknown bytes.
[   86.204308][ T7026] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.217675][ T7024] netlink: 'syz.0.367': attribute type 1 has an invalid length.
[   86.285658][ T7024] 8021q: adding VLAN 0 to HW filter on device bond7
[   86.391624][ T7024] bond7: (slave geneve6): making interface the new active one
[   86.399287][ T7024] bond7: (slave geneve6): Enslaving as an active interface with an up link
[   86.627098][ T7053] netlink: 112 bytes leftover after parsing attributes in process `syz.0.374'.
[   86.730982][ T7051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.371'.
[   86.847115][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[   86.854807][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[   87.140380][ T7067] netlink: 284 bytes leftover after parsing attributes in process `syz.0.378'.
[   87.641483][ T7072] can: request_module (can-proto-0) failed.
[   87.924870][ T7104] netlink: 284 bytes leftover after parsing attributes in process `syz.0.386'.
[   88.083845][ T5651] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.084798][ T5651] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.085272][ T5651] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.085317][ T5651] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.259522][ T5596] Bluetooth: hci1: ISO packet for unknown connection handle 3684
[   88.388431][ T7126] syzkaller0: entered promiscuous mode
[   88.388482][ T7126] syzkaller0: entered allmulticast mode
[   89.023341][ T7163] bond8: option packets_per_slave: invalid value (7627118)
[   89.026536][ T7163] bond8: option packets_per_slave: allowed values 0 - 65535
[   89.031705][ T7163] bond8 (unregistering): Released all slaves
[   89.091744][ T7167] netlink: 'syz.1.401': attribute type 1 has an invalid length.
[   89.179518][ T7167] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.211141][ T7167] bond3: (slave geneve3): making interface the new active one
[   89.218704][ T7167] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   89.328584][ T7165] bond8: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[   89.343997][ T7165] bond8: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[   89.344863][ T7165] bond8: entered allmulticast mode
[   89.345190][ T7165] 8021q: adding VLAN 0 to HW filter on device bond8
[   89.784266][ T1118] IPVS: starting estimator thread 0...
[   89.891962][ T7185] IPVS: using max 52 ests per chain, 124800 per kthread
[   89.950962][ T7189] nbd: must specify at least one socket
[   90.384276][ T7208] syzkaller0: entered promiscuous mode
[   90.384344][ T7208] syzkaller0: entered allmulticast mode
[   90.446503][ T7204] __nla_validate_parse: 5 callbacks suppressed
[   90.446572][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.409'.
[   91.029565][ T7236] ipt_ah: unknown flags FF
[   91.475367][ T7247] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[   91.542098][ T7247] 8021q: adding VLAN 0 to HW filter on device bond7
[   91.604313][ T7247] bond7: (slave geneve5): making interface the new active one
[   91.609686][ T7247] bond7: (slave geneve5): Enslaving as an active interface with an up link
[   91.712770][ T7253] netlink: 284 bytes leftover after parsing attributes in process `syz.0.422'.
[   91.812154][ T7267] No such timeout policy "syz1"
[   92.049594][ T7280] bridge0: port 3(veth0) entered blocking state
[   92.052544][ T7280] bridge0: port 3(veth0) entered disabled state
[   92.055656][ T7280] veth0: entered allmulticast mode
[   92.059386][ T7280] veth0: entered promiscuous mode
[   92.062333][ T7280] bridge0: port 3(veth0) entered blocking state
[   92.062904][ T7280] bridge0: port 3(veth0) entered forwarding state
[   92.119221][ T7282] atomic_op ffff888109a7f1e0 conn xmit_atomic 0000000000000000
[   92.166355][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.172170][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.177156][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.181361][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.188713][ T7284] netlink: 108 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.188726][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.732636][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   94.619137][ T7346] Driver unsupported XDP return value 0 on prog  (id 499) dev N/A, expect packet loss!
[   95.410110][ T7370] Cannot find add_set index 0 as target
[   95.448161][ T7374] tipc: Enabling <eth:lo> not permitted
[   95.450064][ T7374] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   95.529267][ T7374] tipc: Enabling <eth:lo> not permitted
[   95.529325][ T7374] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[   95.609358][ T7383] netlink: 284 bytes leftover after parsing attributes in process `syz.0.454'.
[   95.816125][ T7392] netlink: 284 bytes leftover after parsing attributes in process `syz.0.457'.
[   96.868178][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'.
[   97.499303][ T7438] geneve1: entered promiscuous mode
[   97.682785][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.732390][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'.
[   97.817811][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'.
[   97.846820][ T7459] team1: entered promiscuous mode
[   97.849148][ T7459] team1: entered allmulticast mode
[   97.853143][ T7459] 8021q: adding VLAN 0 to HW filter on device team1
[   98.113033][ T7467] netlink: 284 bytes leftover after parsing attributes in process `syz.2.478'.
[   99.127117][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[   99.249723][ T7497] x_tables: duplicate underflow at hook 1
[   99.338413][ T7491] syzkaller0: entered promiscuous mode
[   99.345489][ T7491] syzkaller0: entered allmulticast mode
[  100.211849][    C1] sched: DL replenish lagged too much
[  100.866176][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'.
[  101.000304][ T7518] team1: left promiscuous mode
[  101.007312][ T7518] openvswitch: netlink: Message has 8 unknown bytes.
[  101.202180][ T6274] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.202224][ T6274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.227937][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'.
[  101.691599][ T7546] netlink: 284 bytes leftover after parsing attributes in process `syz.2.500'.
[  102.035554][ T7555] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  102.179706][ T7560] netlink: 530 bytes leftover after parsing attributes in process `syz.0.506'.
[  102.635233][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'.
[  102.747833][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'.
[  103.272304][ T7602] netlink: 'syz.2.519': attribute type 2 has an invalid length.
[  103.303362][ T7602] : entered promiscuous mode
[  103.439340][ T7611] xt_connbytes: Forcing CT accounting to be enabled
[  104.229733][ T7637] netlink: 17 bytes leftover after parsing attributes in process `syz.0.531'.
[  107.308269][ T7685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'.
[  107.577243][ T7690] netlink: 43 bytes leftover after parsing attributes in process `syz.0.546'.
[  107.606989][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.614840][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.620417][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.626031][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.630165][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.062344][ T7725] netlink: 'syz.2.552': attribute type 1 has an invalid length.
[  109.163250][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.165442][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.165581][ T7693] bridge_slave_0: entered allmulticast mode
[  109.178345][ T7693] bridge_slave_0: entered promiscuous mode
[  109.191302][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.198799][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.202556][ T7693] bridge_slave_1: entered allmulticast mode
[  109.215814][ T7693] bridge_slave_1: entered promiscuous mode
[  109.272157][ T7727] macvtap0: entered allmulticast mode
[  109.317688][ T5651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.324725][ T5651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.416110][ T7725] macvtap1: entered allmulticast mode
[  109.460431][ T7727] bond8: (slave bridge3): making interface the new active one
[  109.467393][ T7727] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  109.475968][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.485904][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.663793][ T5651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.663854][ T5651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.693442][ T5596] Bluetooth: hci3: command tx timeout
[  109.709894][ T7693] team0: Port device team_slave_0 added
[  109.721065][ T7693] team0: Port device team_slave_1 added
[  109.854370][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.860346][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.860403][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.886156][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.888993][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.901515][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.959206][ T5651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.963775][ T5651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.097791][ T5651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.097849][ T5651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.171328][ T7693] hsr_slave_0: entered promiscuous mode
[  110.178108][ T7693] hsr_slave_1: entered promiscuous mode
[  110.181273][ T7693] debugfs: 'hsr0' already exists in 'hsr'
[  110.185371][ T7693] Cannot create hsr debugfs directory
[  110.735765][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.736989][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.165224][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.206022][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.772085][ T5596] Bluetooth: hci3: command tx timeout
[  112.031241][ T7754] team1: left allmulticast mode
[  112.038403][ T7754] macvtap0: left allmulticast mode
[  112.041343][ T7754] macvtap1: left allmulticast mode
[  112.189977][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'.
[  112.195187][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.195230][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.195283][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.195310][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.195342][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.195371][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.388512][ T5651] veth0: left allmulticast mode
[  112.388576][ T5651] veth0: left promiscuous mode
[  112.389323][ T5651] bridge0: port 3(veth0) entered disabled state
[  112.410167][ T5651] bridge_slave_1: left allmulticast mode
[  112.424123][ T5651] bridge_slave_1: left promiscuous mode
[  112.424347][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.443389][ T5651] bridge_slave_0: left allmulticast mode
[  112.448343][ T5651] bridge_slave_0: left promiscuous mode
[  112.448663][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.069799][ T5651] bond3 (unregistering): (slave geneve3): Releasing active interface
[  113.089051][ T5651] bond2 (unregistering): (slave geneve2): Releasing active interface
[  113.140175][ T5651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.151363][ T5651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.157532][ T5651] bond0 (unregistering): Released all slaves
[  113.167446][ T5651] bond1 (unregistering): Released all slaves
[  113.184622][ T5651] bond2 (unregistering): Released all slaves
[  113.198163][ T5651] bond3 (unregistering): Released all slaves
[  113.217292][ T5341] 8021q: adding VLAN 0 to HW filter on device eth1
[  113.331489][ T7693] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.355102][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  113.361406][ T7693] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.370518][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  113.381415][ T5651] IPVS: stopping master sync thread 6446 ...
[  113.387534][ T7693] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.402732][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  113.403162][ T7693] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.437167][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  113.852095][ T5596] Bluetooth: hci3: command tx timeout
[  114.078110][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[  114.078167][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[  114.220001][ T5651] hsr_slave_0: left promiscuous mode
[  114.227976][ T5651] hsr_slave_1: left promiscuous mode
[  114.228989][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.229046][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.244685][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.248000][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.301716][ T5651] veth1_vlan: left promiscuous mode
[  114.316031][ T5651] veth0_vlan: left promiscuous mode
[  114.375408][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'.
[  114.584204][ T7800] ip_tables: iptables: counters copy to user failed while replacing table
[  114.959385][ T5651] team0 (unregistering): Port device team_slave_1 removed
[  115.010602][ T5651] team0 (unregistering): Port device team_slave_0 removed
[  115.087882][ T7828] xt_connbytes: Forcing CT accounting to be enabled
[  115.404668][ T5341] 8021q: adding VLAN 0 to HW filter on device eth2
[  115.457308][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.578508][ T7693] 8021q: adding VLAN 0 to HW filter on device team0
[  115.594391][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.594457][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.626673][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.626739][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.910821][ T5651] IPVS: stop unused estimator thread 0...
[  115.942851][ T5596] Bluetooth: hci3: command tx timeout
[  116.015526][ T5341] 8021q: adding VLAN 0 to HW filter on device eth3
[  116.136886][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.580'.
[  116.217748][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.229778][ T5341] 8021q: adding VLAN 0 to HW filter on device eth4
[  116.264981][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'.
[  116.300035][ T7693] veth0_vlan: entered promiscuous mode
[  116.308097][ T7900] netlink: 'syz.2.584': attribute type 12 has an invalid length.
[  116.311047][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'.
[  116.326125][ T7693] veth1_vlan: entered promiscuous mode
[  116.415456][ T7693] veth0_macvtap: entered promiscuous mode
[  116.421753][ T7693] veth1_macvtap: entered promiscuous mode
[  116.440744][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.447563][ T7910] netlink: 64 bytes leftover after parsing attributes in process `syz.0.586'.
[  116.449182][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.514800][ T5651] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.514861][ T5651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.514901][ T5651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.514942][ T5651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.580275][ T6554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.580319][ T6554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.620293][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.620336][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.739649][ T7928] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  116.839336][ T7921] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  116.843822][ T7921] netlink: 224 bytes leftover after parsing attributes in process `syz.2.589'.
[  116.848756][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.589'.
[  116.857676][ T7921] netlink: 'syz.2.589': attribute type 4 has an invalid length.
[  116.862008][ T7922] netlink: 'syz.2.589': attribute type 4 has an invalid length.
[  116.903440][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'.
[  117.162347][ T7958] geneve7: entered promiscuous mode
[  117.314443][ T7974] sock: sock_set_timeout: `syz.2.604' (pid 7974) tries to set negative timeout
[  117.338422][ T7981] netlink: 'syz.3.606': attribute type 3 has an invalid length.
[  117.338467][ T7981] netlink: 'syz.3.606': attribute type 2 has an invalid length.
[  117.489457][ T7990] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  117.491265][ T7990] bond1 (unregistering): Released all slaves
[  117.521109][ T7996] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20004
[  117.684522][ T8007] ieee802154 phy0 wpan0: encryption failed: -90
[  118.137417][ T8030] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  118.293414][ T8005] macvlan0: entered promiscuous mode
[  118.355875][ T8044] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004
[  118.386318][ T8042] sock: sock_set_timeout: `syz.3.623' (pid 8042) tries to set negative timeout
[  118.733190][ T8072] netlink: 'syz.2.632': attribute type 9 has an invalid length.
[  118.925706][ T8093] Bluetooth: MGMT ver 1.23
[  119.068218][ T8103] smc: net device vlan1 applied user defined pnetid SYZ2
[  119.154478][ T8111] __nla_validate_parse: 19 callbacks suppressed
[  119.154541][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'.
[  119.154570][ T8111] netlink: 'syz.3.644': attribute type 4 has an invalid length.
[  119.154593][ T8111] netlink: 'syz.3.644': attribute type 1 has an invalid length.
[  119.421189][ T8128] netlink: 'syz.3.652': attribute type 21 has an invalid length.
[  119.421285][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.652'.
[  119.481246][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'.
[  119.712985][ T7872] IPVS: starting estimator thread 0...
[  119.726580][ T8150] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  119.812679][ T8151] IPVS: using max 82 ests per chain, 196800 per kthread
[  119.825242][ T8148] nbd: nbd64 already in use
[  119.849335][ T8160] macsec1: entered promiscuous mode
[  119.897467][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'.
[  119.898774][ T8170] netlink: 284 bytes leftover after parsing attributes in process `syz.2.664'.
[  119.989803][ T8175] netlink: 284 bytes leftover after parsing attributes in process `syz.0.665'.
[  119.990248][ T8172] netlink: 284 bytes leftover after parsing attributes in process `syz.0.665'.
[  120.217030][ T8201] netlink: 3 bytes leftover after parsing attributes in process `syz.2.670'.
[  120.429500][ T8218] 8021q: adding VLAN 0 to HW filter on device bond9
[  120.444513][ T8226] netlink: 284 bytes leftover after parsing attributes in process `syz.2.680'.
[  120.458003][ T8224] syzkaller0: entered promiscuous mode
[  120.460251][ T8224] syzkaller0: entered allmulticast mode
[  120.886546][ T8268] netlink: 284 bytes leftover after parsing attributes in process `syz.3.692'.
[  125.106162][ T8303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.191020][ T8335] __nla_validate_parse: 3 callbacks suppressed
[  125.196077][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.710'.
[  125.591690][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'.
[  125.596192][ T8360] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.648249][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'.
[  125.696661][ T8362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'.
[  125.835084][ T8378] 0: reclassify loop, rule prio 0, protocol 800
[  125.966843][ T8388] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  126.280117][ T8401] block nbd0: not configured, cannot reconfigure
[  126.387534][ T8402] syzkaller1: entered promiscuous mode
[  126.387595][ T8402] syzkaller1: entered allmulticast mode
[  126.484026][ T8411] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  126.484099][ T8407] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  126.526296][ T8412] validate_nla: 2 callbacks suppressed
[  126.526380][ T8412] netlink: 'syz.2.734': attribute type 34 has an invalid length.
[  126.526412][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'.
[  126.554452][ T8412] bond9: option lacp_strict: invalid value (64)
[  126.590115][ T8412] bond9 (unregistering): Released all slaves
[  126.788039][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'.
[  127.367770][ T8479] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  127.383535][ T8479] 8021q: adding VLAN 0 to HW filter on device bond10
[  127.407071][ T8479] bond10: (slave geneve8): making interface the new active one
[  127.413065][ T8479] bond10: (slave geneve8): Enslaving as an active interface with an up link
[  127.626641][ T8501] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  130.770019][ T8595] netlink: 'syz.3.751': attribute type 1 has an invalid length.
[  130.798766][ T8595] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.802654][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'.
[  130.839731][ T8595] bond1: (slave geneve2): making interface the new active one
[  130.843140][ T8595] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  130.930165][ T8605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.754'.
[  130.932882][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  130.932900][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  130.974722][ T8614] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[  131.037819][ T8614] bond11: entered promiscuous mode
[  131.040342][ T8614] 8021q: adding VLAN 0 to HW filter on device bond11
[  131.058184][ T8614] bond11: (slave bridge1): making interface the new active one
[  131.065768][ T8614] bridge1: entered promiscuous mode
[  131.066465][ T8614] bond11: (slave bridge1): Enslaving as an active interface with an up link
[  131.127151][ T8612] bond11: (slave bridge2): Enslaving as a backup interface with an up link
[  131.141229][ T8614] bond11: (slave bridge3): Enslaving as a backup interface with an up link
[  131.155177][ T8630] xt_nfacct: accounting object `' does not exist
[  131.218976][ T8638] netlink: 'syz.3.761': attribute type 1 has an invalid length.
[  131.239918][ T8638] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.284607][ T8638] bond2: (slave geneve3): making interface the new active one
[  131.288951][ T8638] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  131.312329][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'.
[  131.392515][ T8659] syzkaller0: entered promiscuous mode
[  131.392566][ T8659] syzkaller0: entered allmulticast mode
[  131.408069][ T8661] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT
[  131.408455][ T8654] netlink: 284 bytes leftover after parsing attributes in process `syz.3.765'.
[  131.460830][ T8665] tc action pedit 'at' offset 5 out of bounds
[  131.572590][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'.
[  131.575171][ T8673] netlink: 284 bytes leftover after parsing attributes in process `syz.0.770'.
[  131.579965][ T8669] sock: sock_set_timeout: `syz.3.769' (pid 8669) tries to set negative timeout
[  131.624226][ T8675] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  131.644121][ T8675] 8021q: adding VLAN 0 to HW filter on device bond12
[  131.663211][ T8675] bond12: (slave geneve9): making interface the new active one
[  131.667398][ T8675] bond12: (slave geneve9): Enslaving as an active interface with an up link
[  131.767499][ T8686] netlink: 'syz.3.773': attribute type 2 has an invalid length.
[  131.770890][ T8686] netlink: 'syz.3.773': attribute type 11 has an invalid length.
[  131.778012][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.773'.
[  131.854100][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'.
[  131.917696][ T8693] sock: sock_set_timeout: `syz.0.779' (pid 8693) tries to set negative timeout
[  131.949736][ T8697] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  131.966384][ T8697] 8021q: adding VLAN 0 to HW filter on device bond13
[  131.984677][ T8697] bond13: (slave geneve10): making interface the new active one
[  131.989222][ T8697] bond13: (slave geneve10): Enslaving as an active interface with an up link
[  132.265220][ T8714] vlan0: entered promiscuous mode
[  132.285664][ T8714] team0: Port device vlan0 added
[  132.602219][ T8733] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[  132.644513][ T8733] 8021q: adding VLAN 0 to HW filter on device bond9
[  132.698971][ T8733] bond9: (slave geneve6): making interface the new active one
[  132.708625][ T8733] bond9: (slave geneve6): Enslaving as an active interface with an up link
[  132.734429][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  132.734512][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  132.737830][ T8741] xt_IDLETIMER: label is empty or not nul-terminated
[  132.743150][ T6685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.743260][ T6685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.744055][ T6685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.830402][ T8751] syzkaller1: entered promiscuous mode
[  132.832534][ T8751] syzkaller1: entered allmulticast mode
[  133.224627][ T8772] vlan12: entered allmulticast mode
[  133.224689][ T8772] bridge4: entered allmulticast mode
[  133.226574][ T8772] bridge4: port 1(erspan0) entered blocking state
[  133.226707][ T8772] bridge4: port 1(erspan0) entered disabled state
[  133.226800][ T8772] erspan0: entered allmulticast mode
[  133.228312][ T8772] erspan0: entered promiscuous mode
[  133.229285][ T8772] bridge4: port 1(erspan0) entered blocking state
[  133.229373][ T8772] bridge4: port 1(erspan0) entered forwarding state
[  133.366004][ T8779] netlink: 'syz.0.809': attribute type 10 has an invalid length.
[  133.381107][ T8777] syzkaller0: entered promiscuous mode
[  133.381172][ T8777] syzkaller0: entered allmulticast mode
[  133.399449][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.406226][ T8779] team0: Port device netdevsim1 added
[  133.407909][ T8779] netlink: 'syz.0.809': attribute type 10 has an invalid length.
[  133.415915][ T8779] team0: Port device netdevsim1 removed
[  133.419571][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  133.424609][ T8779] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  135.579494][ T8874] syzkaller1: entered promiscuous mode
[  135.581444][ T8874] syzkaller1: entered allmulticast mode
[  135.806218][ T8891] netlink: 'syz.3.841': attribute type 1 has an invalid length.
[  135.838301][ T8891] 8021q: adding VLAN 0 to HW filter on device bond3
[  135.865473][ T8891] bond3: (slave geneve4): making interface the new active one
[  135.868807][ T8891] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  136.383894][ T8901] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  136.449229][ T8902] __nla_validate_parse: 20 callbacks suppressed
[  136.449307][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'.
[  136.452336][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'.
[  136.618569][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'.
[  136.905516][ T8917] netlink: 'syz.3.849': attribute type 1 has an invalid length.
[  136.908028][ T8917] netlink: 'syz.3.849': attribute type 2 has an invalid length.
[  136.910646][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'.
[  137.090150][ T8926] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  137.166161][ T5651] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe2
[  137.250272][ T8932] netlink: 76 bytes leftover after parsing attributes in process `syz.0.852'.
[  137.347201][ T8940] netlink: 'syz.0.853': attribute type 1 has an invalid length.
[  137.364275][ T8940] 8021q: adding VLAN 0 to HW filter on device bond14
[  137.389103][ T8940] bond14: (slave geneve11): making interface the new active one
[  137.394104][ T8940] bond14: (slave geneve11): Enslaving as an active interface with an up link
[  137.914283][ T8926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.083366][ T8952] netlink: 'syz.3.856': attribute type 2 has an invalid length.
[  138.268732][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'.
[  138.829493][ T9010] netlink: 'syz.3.872': attribute type 2 has an invalid length.
[  138.829551][ T9010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.872'.
[  138.829778][ T9011] netlink: 'syz.3.872': attribute type 2 has an invalid length.
[  138.829793][ T9011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.872'.
[  138.956861][ T9021] netlink: 'syz.3.875': attribute type 1 has an invalid length.
[  138.980520][ T9021] 8021q: adding VLAN 0 to HW filter on device bond4
[  139.014767][ T9021] bond4: (slave geneve5): making interface the new active one
[  139.018006][ T9021] bond4: (slave geneve5): Enslaving as an active interface with an up link
[  139.166211][ T9036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.879'.
[  139.261053][ T9043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.341214][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'.
[  139.945640][ T9094] netlink: 'syz.3.891': attribute type 1 has an invalid length.
[  140.001437][ T9094] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.188640][ T9115] syzkaller0: entered promiscuous mode
[  140.188703][ T9115] syzkaller0: entered allmulticast mode
[  141.250761][ T9173] netlink: 'syz.3.905': attribute type 1 has an invalid length.
[  141.274173][ T9173] 8021q: adding VLAN 0 to HW filter on device bond6
[  141.463141][ T9179] __nla_validate_parse: 4 callbacks suppressed
[  141.463224][ T9179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'.
[  141.998446][ T9184] netlink: 284 bytes leftover after parsing attributes in process `syz.0.909'.
[  142.064546][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.910'.
[  142.256124][ T9207] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.260749][ T9207] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.063106][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.916'.
[  143.346958][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[  143.557590][ T9247] netlink: 284 bytes leftover after parsing attributes in process `syz.0.922'.
[  143.708968][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'.
[  144.068195][ T9268] Bluetooth: MGMT ver 1.23
[  144.126730][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'.
[  144.235936][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.932'.
[  144.241452][ T9279] netlink: 284 bytes leftover after parsing attributes in process `syz.3.932'.
[  144.270595][ T9276] bond10: entered allmulticast mode
[  144.386224][ T9282] 8021q: adding VLAN 0 to HW filter on device bond11
[  144.391726][ T9282] bond11: entered allmulticast mode
[  144.395515][ T9282] bond10: (slave bond11): Enslaving as an active interface with an up link
[  144.412006][ T9276] bond10 (unregistering): (slave bond11): Releasing backup interface
[  144.418619][ T9276] bond11: left allmulticast mode
[  144.425223][ T9276] bond10 (unregistering): Released all slaves
[  146.236019][ T9352] nbd: device at index 64 is going down
[  146.498702][ T9365] __nla_validate_parse: 10 callbacks suppressed
[  146.498810][ T9365] netlink: 284 bytes leftover after parsing attributes in process `syz.2.951'.
[  146.637359][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[  146.641664][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'.
[  146.669935][ T9371] netlink: 'syz.2.955': attribute type 1 has an invalid length.
[  146.723138][ T9371] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.777443][ T9371] bond10: (slave geneve7): making interface the new active one
[  146.783266][ T9371] bond10: (slave geneve7): Enslaving as an active interface with an up link
[  146.898668][ T9379] syzkaller0: entered promiscuous mode
[  146.898843][ T9379] syzkaller0: entered allmulticast mode
[  147.082861][ T9385] netlink: 'syz.2.961': attribute type 16 has an invalid length.
[  147.082912][ T9385] netlink: 156 bytes leftover after parsing attributes in process `syz.2.961'.
[  147.090149][ T9385] x_tables: duplicate entry at hook 4
[  147.220119][ T9391] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  147.236950][ T9390] netlink: 284 bytes leftover after parsing attributes in process `syz.2.963'.
[  147.259929][ T9391] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.301727][ T9391] bond15: (slave geneve12): making interface the new active one
[  147.306196][ T9391] bond15: (slave geneve12): Enslaving as an active interface with an up link
[  147.422259][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'.
[  147.462551][ T9395] ip6gre1: entered promiscuous mode
[  147.466619][ T9395] ip6gre1: entered allmulticast mode
[  147.605419][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  147.655800][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'.
[  147.674429][ T9403] netlink: 80 bytes leftover after parsing attributes in process `syz.0.968'.
[  147.761615][ T9417] netlink: 9 bytes leftover after parsing attributes in process `syz.3.972'.
[  147.806592][ T9429] nftables ruleset with unbound chain
[  147.877123][ T9430] Unknown options in mask 6
[  148.033539][ T9443] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.208345][ T9456] netlink: 'syz.0.982': attribute type 1 has an invalid length.
[  148.255525][ T9456] 8021q: adding VLAN 0 to HW filter on device bond16
[  148.285464][ T9460] 0: renamed from hsr0 (while UP)
[  148.292560][ T9460] 0: entered allmulticast mode
[  148.292625][ T9460] hsr_slave_0: entered allmulticast mode
[  148.292890][ T9460] hsr_slave_1: entered allmulticast mode
[  148.293321][ T9460] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  148.305825][ T9456] bond16: (slave geneve13): making interface the new active one
[  148.309487][ T9456] bond16: (slave geneve13): Enslaving as an active interface with an up link
[  149.857614][ T9527] bond12: Removing last arp target with arp_interval on
[  150.259836][ T9564] netlink: 'syz.3.1011': attribute type 1 has an invalid length.
[  150.285606][ T9564] 8021q: adding VLAN 0 to HW filter on device bond8
[  150.315374][ T9564] bond8: (slave geneve7): making interface the new active one
[  150.320860][ T9564] bond8: (slave geneve7): Enslaving as an active interface with an up link
[  150.325368][ T9567] syzkaller0: entered promiscuous mode
[  150.325426][ T9567] syzkaller0: entered allmulticast mode
[  150.534485][ T9576] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000
[  150.668435][ T9572] erspan0: left allmulticast mode
[  150.668499][ T9572] erspan0: left promiscuous mode
[  150.670904][ T9572] bridge4: port 1(erspan0) entered disabled state
[  150.735885][ T9572] bridge_slave_0: left allmulticast mode
[  150.735948][ T9572] bridge_slave_0: left promiscuous mode
[  150.739698][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.757516][ T9572] bridge_slave_1: left allmulticast mode
[  150.757580][ T9572] bridge_slave_1: left promiscuous mode
[  150.759052][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.784132][ T9572] bond4: (slave veth0_to_bond): Releasing active interface
[  150.806886][ T9572] bond0: (slave bond_slave_0): Releasing backup interface
[  150.848632][ T9572] bond0: (slave bond_slave_1): Releasing backup interface
[  150.876704][ T9572] team0: Port device team_slave_0 removed
[  150.900529][ T9572] team0: Port device team_slave_1 removed
[  150.908967][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.909040][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.920044][ T9572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.920107][ T9572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.929034][ T9572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  151.185538][ T9611] xt_hashlimit: size too large, truncated to 1048576
[  151.232433][ T9616] xt_hashlimit: size too large, truncated to 1048576
[  151.519868][ T9631] __nla_validate_parse: 115 callbacks suppressed
[  151.523431][ T9631] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1033'.
[  151.847131][ T9646] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  151.847332][ T9646] xt_SECMARK: invalid mode: 9
[  152.190810][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'.
[  152.255495][ T9669] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1048'.
[  152.274633][ T9668] syzkaller1: entered promiscuous mode
[  152.274695][ T9668] syzkaller1: entered allmulticast mode
[  152.400021][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  152.400081][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1050'.
[  152.481541][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'.
[  152.564052][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1055'.
[  152.664508][ T9699] syzkaller0: entered promiscuous mode
[  152.664557][ T9699] syzkaller0: entered allmulticast mode
[  152.833730][ T9708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.834347][ T9708] syzkaller0: entered promiscuous mode
[  152.834691][ T9708] syzkaller0: entered allmulticast mode
[  152.836308][ T9708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  152.873887][ T9708] tipc: Resetting bearer <eth:syzkaller0>
[  152.899038][ T9706] tipc: Resetting bearer <eth:syzkaller0>
[  152.927835][ T9706] tipc: Disabling bearer <eth:syzkaller0>
[  153.016343][ T9712] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1063'.
[  153.100735][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'.
[  153.186035][ T9719] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1066'.
[  153.438688][ T9737] netlink: 'syz.2.1070': attribute type 30 has an invalid length.
[  153.660122][ T9752] netlink: 'syz.3.1075': attribute type 1 has an invalid length.
[  153.706381][ T9752] 8021q: adding VLAN 0 to HW filter on device bond9
[  153.768463][ T9752] bond9: (slave geneve8): making interface the new active one
[  153.785580][ T9752] bond9: (slave geneve8): Enslaving as an active interface with an up link
[  153.845211][ T9764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.845268][ T9764] IPv6: NLM_F_CREATE should be set when creating new route
[  153.845320][ T9764] IPv6: NLM_F_CREATE should be set when creating new route
[  154.610189][ T9796] sock: sock_set_timeout: `syz.2.1087' (pid 9796) tries to set negative timeout
[  154.673700][ T9800] block nbd0: server does not support multiple connections per device.
[  154.678644][ T9800] block nbd0: shutting down sockets
[  154.970419][ T9818] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  155.018996][ T9825] sock: sock_set_timeout: `syz.0.1094' (pid 9825) tries to set negative timeout
[  155.462030][ T5630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.462106][ T5630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.462161][ T5630] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.475370][ T9902] netlink: 'syz.3.1111': attribute type 1 has an invalid length.
[  156.524006][ T9907] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.526775][ T9907] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  156.613561][ T9917] __nla_validate_parse: 15 callbacks suppressed
[  156.617286][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'.
[  156.693020][ T9921] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1117'.
[  156.737354][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1118'.
[  156.766803][ T9924] bridge_slave_0: left allmulticast mode
[  156.766860][ T9924] bridge_slave_0: left promiscuous mode
[  156.767307][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.776337][ T9924] bridge_slave_1: left allmulticast mode
[  156.776398][ T9924] bridge_slave_1: left promiscuous mode
[  156.776594][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.789808][ T9924] bond0: (slave bond_slave_0): Releasing backup interface
[  156.796955][ T9924] bond0: (slave bond_slave_1): Releasing backup interface
[  156.805928][ T9924] team0: Port device team_slave_0 removed
[  156.815564][ T9924] team0: Port device team_slave_1 removed
[  156.815892][ T9924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.831525][ T9924] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.838479][ T9924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  156.860861][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'.
[  156.865700][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'.
[  156.930360][ T9930] tipc: Can't bind to reserved service type 1
[  157.024811][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'.
[  157.471589][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'.
[  157.646049][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'.
[  157.646108][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'.
[  157.769209][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'.
[  158.125025][ T9999] nbd0: detected capacity change from 0 to 63
[  158.136426][   T56] block nbd0: Receive control failed (result -104)
[  158.367647][T10008] block nbd1: server does not support multiple connections per device.
[  158.368132][T10008] block nbd1: shutting down sockets
[  158.473226][T10025] sock: sock_set_timeout: `syz.0.1137' (pid 10025) tries to set negative timeout
[  159.861101][T10101] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  159.896373][T10101] 8021q: adding VLAN 0 to HW filter on device bond17
[  159.903605][T10100] netlink: 'syz.0.1148': attribute type 34 has an invalid length.
[  159.921316][T10100] bond18: option lacp_strict: invalid value (110)
[  159.925580][T10100] bond18 (unregistering): Released all slaves
[  160.684001][T10114] nbd: nbd64 already in use
[  160.845698][T10125] ipt_REJECT: TCP_RESET invalid for non-tcp
[  161.074193][T10137] 8021q: adding VLAN 0 to HW filter on device bond18
[  163.637754][T10114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.640456][T10115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.801301][T10146] netlink: 'syz.3.1161': attribute type 1 has an invalid length.
[  163.801350][T10146] netlink: 'syz.3.1161': attribute type 4 has an invalid length.
[  163.801395][T10146] __nla_validate_parse: 14 callbacks suppressed
[  163.801441][T10146] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1161'.
[  163.818059][T10146] netlink: 'syz.3.1161': attribute type 1 has an invalid length.
[  163.822430][T10146] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1161'.
[  163.823479][T10146] netlink: 'syz.3.1161': attribute type 1 has an invalid length.
[  163.823512][T10146] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.1161'.
[  163.840547][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'.
[  163.850581][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'.
[  163.856238][T10146] netlink: 'syz.3.1161': attribute type 11 has an invalid length.
[  163.856287][T10146] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.1161'.
[  164.166214][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'.
[  164.327087][T10186] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  164.341994][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'.
[  164.734010][  T202] block nbd0: Connection timed out, retrying (0/1 alive)
[  164.739565][  T202] block nbd0: Connection timed out, retrying (0/1 alive)
[  164.739653][  T202] block nbd0: Connection timed out, retrying (0/1 alive)
[  164.739730][  T202] block nbd0: Connection timed out, retrying (0/1 alive)
[  164.739971][  T202] block nbd0: Dead connection, failed to find a fallback
[  164.740005][  T202] block nbd0: shutting down sockets
[  164.740091][  T202] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.740170][  T202] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.740243][  T202] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.740280][  T202] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.740316][  T202] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.740352][  T202] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.740387][  T202] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.740422][  T202] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.743207][  T202] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  164.743228][  T202] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.743239][  T202] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.743249][  T202] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.743258][  T202] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.743407][  T202] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.743422][  T202] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.743505][  T202] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.743520][  T202] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.743582][  T202] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.743654][  T202] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.743866][  T202] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  164.745178][ T9798] ldm_validate_partition_table(): Disk read failed.
[  164.746136][ T9798] Dev nbd0: unable to read RDB block 0
[  164.747262][ T9798]  nbd0: unable to read partition table
[  164.756853][ T9798] ldm_validate_partition_table(): Disk read failed.
[  164.757384][ T9798] Dev nbd0: unable to read RDB block 0
[  164.758537][ T9798]  nbd0: unable to read partition table
[  165.216391][T10220] tun0: tun_chr_ioctl cmd 1074025675
[  165.216450][T10220] tun0: persist enabled
[  165.216777][T10220] tun0: tun_chr_ioctl cmd 1074025675
[  165.216892][T10220] tun0: persist disabled
[  165.238733][T10220] tun0: tun_chr_ioctl cmd 1074025675
[  165.238791][T10220] tun0: persist enabled
[  165.239091][T10220] tun0: tun_chr_ioctl cmd 1074025675
[  165.239100][T10220] tun0: persist disabled
[  165.250801][T10223] tun0: tun_chr_ioctl cmd 1074025673
[  165.375770][T10228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.380946][T10230] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1186'.
[  165.418138][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  165.545046][T10236] syzkaller1: entered promiscuous mode
[  165.545106][T10236] syzkaller1: entered allmulticast mode
[  165.772266][T10249] bond10: entered promiscuous mode
[  165.774706][T10249] bond10: entered allmulticast mode
[  165.777913][T10249] 8021q: adding VLAN 0 to HW filter on device bond10
[  165.800282][T10253] bond11: entered promiscuous mode
[  165.804990][T10253] bond11: entered allmulticast mode
[  165.808889][T10253] 8021q: adding VLAN 0 to HW filter on device bond11
[  165.816111][T10249] netlink: 'syz.3.1196': attribute type 39 has an invalid length.
[  165.819508][T10258] netlink: 'syz.3.1196': attribute type 39 has an invalid length.
[  165.883289][T10260] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI %
[  165.923886][T10260] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  166.031490][T10266] ip_tables: iptables: counters copy to user failed while replacing table
[  166.607093][T10311] tipc: Started in network mode
[  166.607156][T10311] tipc: Node identity fe095b12858c, cluster identity 4711
[  166.607302][T10311] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.630519][T10310] tipc: Disabling bearer <eth:syzkaller0>
[  166.848674][T10321] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  166.968534][T10321] netlink: 'syz.0.1217': attribute type 5 has an invalid length.
[  167.264207][T10337] netlink: 'syz.3.1223': attribute type 1 has an invalid length.
[  167.300748][T10337] 8021q: adding VLAN 0 to HW filter on device bond12
[  167.329661][T10337] bond12: (slave geneve9): making interface the new active one
[  167.333203][T10337] bond12: (slave geneve9): Enslaving as an active interface with an up link
[  167.660898][T10366] netlink: 'syz.3.1230': attribute type 1 has an invalid length.
[  167.679742][T10366] 8021q: adding VLAN 0 to HW filter on device bond13
[  167.705583][T10366] bond13: (slave geneve10): making interface the new active one
[  167.709603][T10366] bond13: (slave geneve10): Enslaving as an active interface with an up link
[  167.769639][T10375] ip_tables: iptables: counters copy to user failed while replacing table
[  167.769986][T10375] ip_tables: iptables: counters copy to user failed while replacing table
[  167.770247][T10375] ip_tables: iptables: counters copy to user failed while replacing table
[  167.770482][T10375] ip_tables: iptables: counters copy to user failed while replacing table
[  167.770747][T10375] ip_tables: iptables: counters copy to user failed while replacing table
[  168.860450][T10407] netlink: 'syz.3.1238': attribute type 1 has an invalid length.
[  168.918921][T10407] 8021q: adding VLAN 0 to HW filter on device bond14
[  168.959300][T10407] bond14: (slave geneve11): making interface the new active one
[  168.967400][T10407] bond14: (slave geneve11): Enslaving as an active interface with an up link
[  169.205772][T10424] __nla_validate_parse: 32 callbacks suppressed
[  169.205849][T10424] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1244'.
[  169.305108][T10431] netlink: 'syz.3.1246': attribute type 1 has an invalid length.
[  169.344142][T10431] 8021q: adding VLAN 0 to HW filter on device bond15
[  169.368254][T10431] bond15: (slave geneve12): making interface the new active one
[  169.372662][T10431] bond15: (slave geneve12): Enslaving as an active interface with an up link
[  169.525909][T10441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'.
[  169.553904][T10446] Bluetooth: MGMT ver 1.23
[  170.155086][T10478] netlink: 'syz.3.1258': attribute type 1 has an invalid length.
[  170.201388][T10478] 8021q: adding VLAN 0 to HW filter on device bond16
[  170.377533][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1263'.
[  170.526973][T10501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1266'.
[  170.535707][T10501] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1266'.
[  170.541690][T10499] netlink: 'syz.3.1267': attribute type 1 has an invalid length.
[  170.546113][T10500] netlink: 'syz.3.1267': attribute type 1 has an invalid length.
[  170.549814][T10500] netlink: 1368 bytes leftover after parsing attributes in process `syz.3.1267'.
[  170.556845][T10499] netlink: 1368 bytes leftover after parsing attributes in process `syz.3.1267'.
[  170.596995][T10504] x_tables: unsorted underflow at hook 3
[  170.642223][T10506] sctp: [Deprecated]: syz.3.1269 (pid 10506) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.642223][T10506] Use struct sctp_sack_info instead
[  170.823835][T10528] net_ratelimit: 3 callbacks suppressed
[  170.824178][T10528] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  170.840529][T10528] netlink: 'syz.0.1275': attribute type 39 has an invalid length.
[  170.896597][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1274'.
[  171.676399][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'.
[  171.726865][T10549] block nbd2: not configured, cannot reconfigure
[  171.820946][T10555] syzkaller0: entered promiscuous mode
[  171.821005][T10555] syzkaller0: entered allmulticast mode
[  172.090115][T10568] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1287'.
[  172.558288][T10598] netlink: zone id is out of range
[  172.558330][T10598] netlink: zone id is out of range
[  172.558378][T10598] netlink: zone id is out of range
[  172.558404][T10598] netlink: zone id is out of range
[  172.558431][T10598] netlink: zone id is out of range
[  172.558456][T10598] netlink: zone id is out of range
[  172.558692][T10598] netlink: zone id is out of range
[  172.558721][T10598] netlink: zone id is out of range
[  172.558747][T10598] netlink: zone id is out of range
[  172.590871][T10595] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.613147][T10598] xt_time: invalid argument - start or stop time greater than 23:59:59
[  172.705955][T10607] team0 (unregistering): Port device team_slave_0 removed
[  172.715558][T10607] team0 (unregistering): Port device team_slave_1 removed
[  173.735052][T10682] nbd: must specify at least one socket
[  173.735149][T10682] nbd: must specify at least one socket
[  173.755189][T10677] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  174.161017][T10705] 8021q: adding VLAN 0 to HW filter on device team0
[  174.170272][T10705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.226011][T10705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.226061][T10705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.230022][T10705] veth1_vlan: left promiscuous mode
[  174.230497][T10705] veth0_vlan: left promiscuous mode
[  174.231175][T10705] veth0_vlan: entered promiscuous mode
[  174.234439][T10705] veth1_vlan: entered promiscuous mode
[  174.247199][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.250337][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.255219][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.313316][T10709] __nla_validate_parse: 42 callbacks suppressed
[  174.313474][T10709] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1321'.
[  174.353112][ T5651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.355038][ T5651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.355344][ T5651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.417133][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'.
[  174.422934][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'.
[  174.509617][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.509839][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.510091][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.510293][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.510467][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.510748][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  174.510923][T10721] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1324'.
[  175.028073][T10768] netlink: 'syz.3.1343': attribute type 1 has an invalid length.
[  175.623205][T10819] ieee802154 phy1 wpan1: encryption failed: -22
[  175.690531][   T34] audit: type=1804 audit(1789817156.320:3): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1364" name="/newroot/469/cgroup.controllers" dev="tmpfs" ino=2434 res=1 errno=0
[  175.700215][   T34] audit: type=1800 audit(1789817156.320:4): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1364" name="cgroup.controllers" dev="tmpfs" ino=2434 res=0 errno=0
[  175.703162][   T34] audit: type=1804 audit(1789817156.340:5): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1364" name="/newroot/469/cgroup.controllers" dev="tmpfs" ino=2434 res=1 errno=0
[  175.737523][   T34] audit: type=1800 audit(1789817156.370:6): pid=10827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1364" name="cgroup.controllers" dev="tmpfs" ino=2434 res=0 errno=0
[  175.807203][T10831] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.931306][T10839] net_ratelimit: 1708 callbacks suppressed
[  175.931382][T10839] openvswitch: netlink: Message has 8 unknown bytes.
[  175.939131][T10837] vlan0: left promiscuous mode
[  175.942384][T10837] geneve1: left promiscuous mode
[  175.955874][T10837] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.978576][T10837] 8021q: adding VLAN 0 to HW filter on device bond4
[  175.994101][T10837] geneve7: left promiscuous mode
[  176.003774][T10837] bond11: left promiscuous mode
[  176.005975][T10837] bridge1: left promiscuous mode
[  176.090455][T10842] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  176.109612][   T13] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  176.125176][   T13] bond4: (slave veth3): making interface the new active one
[  176.138532][   T13] bond4: active interface up!
[  176.405521][T10872] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  176.435313][T10872] 8021q: adding VLAN 0 to HW filter on device bond13
[  176.511014][T10872] bond13: (slave geneve8): making interface the new active one
[  176.518858][T10872] bond13: (slave geneve8): Enslaving as an active interface with an up link
[  176.550041][T10872] syz.2.1375 (10872) used greatest stack depth: 20072 bytes left
[  176.849194][T10907] netlink: 'syz.3.1386': attribute type 1 has an invalid length.
[  176.891442][T10907] 8021q: adding VLAN 0 to HW filter on device bond17
[  176.928609][T10907] bond17: (slave geneve13): making interface the new active one
[  176.935218][T10907] bond17: (slave geneve13): Enslaving as an active interface with an up link
[  177.378844][T10936] netlink: 'syz.3.1394': attribute type 1 has an invalid length.
[  177.422234][T10936] 8021q: adding VLAN 0 to HW filter on device bond18
[  177.476850][T10936] bond18: (slave geneve14): making interface the new active one
[  177.483392][T10936] bond18: (slave geneve14): Enslaving as an active interface with an up link
[  177.900313][T10961] netlink: 'syz.0.1401': attribute type 1 has an invalid length.
[  177.935080][T10961] 8021q: adding VLAN 0 to HW filter on device bond19
[  178.549677][T10973] bond19: (slave geneve14): making interface the new active one
[  178.589782][T10973] bond19: (slave geneve14): Enslaving as an active interface with an up link
[  178.845420][T10988] netlink: 'syz.0.1406': attribute type 11 has an invalid length.
[  179.699065][T10995] __nla_validate_parse: 14 callbacks suppressed
[  179.699135][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'.
[  179.736599][T10995] syzkaller0: create flow: hash 4037225293 index 2
[  179.782973][T10993] syzkaller0: delete flow: hash 4037225293 index 2
[  180.413345][T11012] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1416'.
[  180.438584][T11010] netlink: 'syz.3.1414': attribute type 2 has an invalid length.
[  180.438650][T11010] netlink: 'syz.3.1414': attribute type 2 has an invalid length.
[  180.828662][T11032] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1422'.
[  180.892136][T10989] Bluetooth: hci1: command 0x0406 tx timeout
[  180.893027][T10989] Bluetooth: hci2: command 0x0405 tx timeout
[  188.938680][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[  189.506549][T11063] ipvlan2: entered promiscuous mode
[  189.659146][T11071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.677023][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'.
[  190.677082][T11112] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1445'.
[  190.722895][T11117] netlink: 'syz.3.1447': attribute type 9 has an invalid length.
[  190.918610][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1449'.
[  194.179239][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  195.839899][T11177] sock: sock_set_timeout: `syz.3.1465' (pid 11177) tries to set negative timeout
[  196.127389][T11189] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  196.138283][T11189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1468'.
[  196.801505][T11211] bridge0: port 1(bond0) entered blocking state
[  196.809257][T11211] bridge0: port 1(bond0) entered disabled state
[  196.809472][T11211] bond0: entered allmulticast mode
[  196.809765][T11211] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  196.862332][T11211] bond0: entered promiscuous mode
[  196.866684][T11211] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  196.871670][T11211] bridge0: port 1(bond0) entered blocking state
[  196.872916][T11211] bridge0: port 1(bond0) entered forwarding state
[  196.925355][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1474'.
[  197.024844][T11211] hsr_slave_1 (unregistering): left promiscuous mode
[  197.100970][T11217] netlink: 'syz.3.1476': attribute type 1 has an invalid length.
[  197.129042][T11217] 8021q: adding VLAN 0 to HW filter on device bond19
[  197.189033][T11217] bond19: (slave geneve15): making interface the new active one
[  197.196565][T11217] bond19: (slave geneve15): Enslaving as an active interface with an up link
[  197.366752][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'.
[  197.949230][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'.
[  198.286936][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'.
[  198.446321][T11248] ip6gre1: entered promiscuous mode
[  198.450397][T11248] ip6gre1: entered allmulticast mode
[  199.040661][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'.
[  199.807253][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  199.825761][T11295] netlink: 'syz.0.1500': attribute type 11 has an invalid length.
[  199.834694][T11295] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1500'.
[  200.639988][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'.
[  201.112936][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'.
[  201.415544][T11335] bond0: left allmulticast mode
[  201.415599][T11335] netdevsim netdevsim0 netdevsim1: left allmulticast mode
[  201.415771][T11335] bond0: left promiscuous mode
[  201.415806][T11335] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  201.416356][T11335] bridge0: port 1(bond0) entered disabled state
[  201.525346][T11335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  201.540117][T11337] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1513'.
[  201.837919][T11350] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.1515'.
[  202.136511][T11357] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  202.136511][T11357] Please contact the netfilter-devel mailing list or update your nftables rules.
[  202.311401][ T6686] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  202.783497][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'.
[  202.855233][T11383] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1524'.
[  203.106476][T11387] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1526'.
[  203.173787][ T6686] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.173842][ T6686] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.283358][T11393] netlink: 'syz.0.1529': attribute type 1 has an invalid length.
[  203.367857][T11393] 8021q: adding VLAN 0 to HW filter on device bond21
[  203.427925][T11393] bond21: (slave geneve15): making interface the new active one
[  203.438640][T11393] bond21: (slave geneve15): Enslaving as an active interface with an up link
[  203.569779][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'.
[  204.208192][T11428] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  204.249218][T11428] 8021q: adding VLAN 0 to HW filter on device bond22
[  204.352411][T11437] bond22: (slave geneve16): making interface the new active one
[  204.358021][T11437] bond22: (slave geneve16): Enslaving as an active interface with an up link
[  205.228891][T11456] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  205.698719][T11478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1550'.
[  205.967911][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  205.980863][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  205.987029][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  205.991636][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  205.995762][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.426532][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'.
[  206.440693][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'.
[  206.709447][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'.
[  206.709523][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1557'.
[  207.531865][T11530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1562'.
[  207.549345][T11524] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.622817][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'.
[  207.622855][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.622888][T11524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.636045][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.639063][T11524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.826975][T11483] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.833729][T11483] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.836243][T11483] bridge_slave_0: entered allmulticast mode
[  207.842582][T11483] bridge_slave_0: entered promiscuous mode
[  207.849901][T11483] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.853119][T11483] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.855884][T11483] bridge_slave_1: entered allmulticast mode
[  207.856676][T11483] bridge_slave_1: entered promiscuous mode
[  207.872793][T11545] ip_tables: iptables: counters copy to user failed while replacing table
[  207.917825][T11483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.926148][T11483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.934083][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'.
[  208.039786][T11483] team0: Port device team_slave_0 added
[  208.049356][T11483] team0: Port device team_slave_1 added
[  208.093646][ T5596] Bluetooth: hci0: command tx timeout
[  208.128730][T11483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.128773][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.128820][T11483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.159433][T11483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.159560][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.159608][T11483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.220253][T11483] hsr_slave_0: entered promiscuous mode
[  208.224073][T11483] hsr_slave_1: entered promiscuous mode
[  208.474176][T11559] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1572'.
[  208.509635][T11483] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  208.557163][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.563100][T11483] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  208.574328][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  208.580136][T11483] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  208.594111][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  208.601302][T11483] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  208.607761][T11483] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  208.613763][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'.
[  208.677544][T11569] : option downdelay: invalid value (18446744073709547007)
[  208.680009][T11569] : option downdelay: allowed values 0 - 2147483647
[  208.686310][T11569]  (unregistering): Released all slaves
[  208.831433][T11483] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.858975][T11483] 8021q: adding VLAN 0 to HW filter on device team0
[  208.876324][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.876393][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.892441][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.892551][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.937874][T11579] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  208.945129][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.198326][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'.
[  209.417114][T11483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.655059][T11483] veth0_vlan: entered promiscuous mode
[  209.664737][T11483] veth1_vlan: entered promiscuous mode
[  209.704517][T11483] veth0_macvtap: entered promiscuous mode
[  209.713304][T11483] veth1_macvtap: entered promiscuous mode
[  209.732570][T11483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.745358][T11483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.183020][ T5596] Bluetooth: hci0: command tx timeout
[  210.404931][ T6685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.429770][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.433352][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.442040][ T7657] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.442100][ T7657] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.442154][ T7657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.512833][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.512879][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.686566][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'.
[  210.929337][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  211.148999][T11638] syzkaller1: entered promiscuous mode
[  211.149051][T11638] syzkaller1: entered allmulticast mode
[  211.280387][T11649] netlink: 'syz.3.1592': attribute type 1 has an invalid length.
[  211.340809][T11649] 8021q: adding VLAN 0 to HW filter on device bond20
[  211.361069][T11651] bond20: (slave geneve16): making interface the new active one
[  211.368995][T11651] bond20: (slave geneve16): Enslaving as an active interface with an up link
[  211.415382][T11651] syz.3.1592 (11651) used greatest stack depth: 19976 bytes left
[  211.544917][T11653] block nbd1: server does not support multiple connections per device.
[  211.563766][T11653] block nbd1: shutting down sockets
[  211.583510][T11654] block nbd2: server does not support multiple connections per device.
[  211.590700][T11654] block nbd2: shutting down sockets
[  212.252116][ T5596] Bluetooth: hci0: command tx timeout
[  212.322491][T11657] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  212.322542][T11657] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  212.508243][T11657] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  212.508291][T11657] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  212.542462][T11657] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  212.542535][T11657] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  213.021860][T11689] __nla_validate_parse: 2 callbacks suppressed
[  213.022608][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'.
[  213.107298][T11694] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  213.130916][T11690] openvswitch: netlink: Message has 8 unknown bytes.
[  213.280794][T11698] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1601'.
[  213.698227][T11705] sctp: [Deprecated]: syz.0.1605 (pid 11705) Use of int in maxseg socket option.
[  213.698227][T11705] Use struct sctp_assoc_value instead
[  213.906441][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1604'.
[  214.473000][T11720] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1609'.
[  214.985134][T11741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'.
[  214.985186][T11741] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  215.257517][T11748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.346134][T11747] netlink: 'syz.3.1616': attribute type 9 has an invalid length.
[  215.346185][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1616'.
[  215.509129][T11747] bond21 (unregistering): Released all slaves
[  216.458478][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1624'.
[  216.486185][T11781] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1626'.
[  217.389128][T11816] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1637'.
[  217.576511][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'.
[  217.611886][T11816] syzkaller0: entered promiscuous mode
[  217.613265][T11816] syzkaller0: entered allmulticast mode
[  218.693161][T11856] netlink: 'syz.4.1649': attribute type 11 has an invalid length.
[  218.697775][T11856] __nla_validate_parse: 1 callbacks suppressed
[  218.697838][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1649'.
[  218.869838][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1651'.
[  218.869887][T11862] nbd: socks must be embedded in a SOCK_ITEM attr
[  219.212316][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1657'.
[  219.430590][T11884] IPVS: Scheduler module ip_vs_sip not found
[  255.687176][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  262.653774][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  263.293286][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  263.312640][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  263.374117][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.442545][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  267.716317][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.222819][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.229192][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  270.223264][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.735693][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.373318][ T5596] Bluetooth: hci1: command tx timeout
[  274.162683][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.581843][ T5596] Bluetooth: hci1: command tx timeout
[  276.173899][   T55] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  276.937016][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.322822][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.379303][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.768608][ T5596] Bluetooth: hci1: command tx timeout
[  279.512828][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  279.532851][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  279.942441][   T55] Bluetooth: hci1: command tx timeout
[  281.612006][   T55] Bluetooth: hci4: command 0x0c39 tx timeout
[  281.613328][T11921] Bluetooth: hci4: Opcode 0x0c39 failed: -110
[  303.384079][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.806371][ T4995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.831435][ T4995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.863477][ T4995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  304.266382][ T4995] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.612001][ T4995] Bluetooth: hci4: command tx timeout
[  309.693305][ T4995] Bluetooth: hci4: command tx timeout
[  311.933778][ T4995] Bluetooth: hci4: command tx timeout
[  314.022032][   T55] Bluetooth: hci4: command tx timeout
[  317.061500][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  358.522545][ T4995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.625572][ T4995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.631755][ T4995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.668706][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  358.673151][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.678858][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.006030][T11951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.852450][   T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.928184][   T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.934622][   T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.650663][ T4995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.326417][ T4995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.522625][ T4995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.577171][ T4995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.104829][ T4995] Bluetooth: hci2: command tx timeout
[  363.611961][T11951] Bluetooth: hci6: Opcode 0x0c14 failed: -110
[  364.122169][T11951] Bluetooth: hci5: command tx timeout
[  364.172543][T11951] Bluetooth: hci2: command tx timeout
[  366.122502][T11951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  366.841578][T11951] Bluetooth: hci5: command tx timeout
[  366.843563][T11951] Bluetooth: hci2: command tx timeout
[  367.697524][ T4995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  368.968154][ T4995] Bluetooth: hci2: command tx timeout
[  368.968889][ T4995] Bluetooth: hci5: command tx timeout
[  369.074874][T11951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.393421][T11951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.103955][T11951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.072012][T11951] Bluetooth: hci5: command tx timeout
[  372.661987][T11951] Bluetooth: hci6: command tx timeout
[  374.735521][T11951] Bluetooth: hci6: command tx timeout
[  377.081930][T11951] Bluetooth: hci6: command tx timeout
[  378.879133][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  379.201856][T11951] Bluetooth: hci6: command tx timeout
[  411.253325][ T4995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.977795][ T4995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  413.102452][ T4995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  413.127265][ T4995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  413.145260][ T4995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  422.012146][ T4995] Bluetooth: hci0: command tx timeout
[  424.093092][ T4995] Bluetooth: hci0: command tx timeout
[  426.171944][ T4995] Bluetooth: hci0: command tx timeout
[  428.252027][ T4995] Bluetooth: hci0: command tx timeout
[  432.323906][ T4995] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  433.602959][ T4995] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  435.142649][ T4995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  435.262100][ T4995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  435.554921][ T4995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  435.967714][ T4995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  438.643790][ T4995] Bluetooth: hci1: command tx timeout
[  439.937667][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  440.672020][ T4995] Bluetooth: hci1: command tx timeout
[  441.763078][T11951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  441.769237][T11951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  441.774430][T11951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  442.069927][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  442.074150][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  442.736594][ T4995] Bluetooth: hci1: command tx timeout
[  444.822221][ T4995] Bluetooth: hci1: command tx timeout
[  445.102074][ T4995] Bluetooth: hci4: command tx timeout
[  447.142017][ T4995] Bluetooth: hci4: command tx timeout
[  449.212540][ T4995] Bluetooth: hci4: command tx timeout
[  451.292224][ T4995] Bluetooth: hci4: command tx timeout
[  483.012801][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  486.106318][ T5651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.107002][ T5651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.172015][T11951] Bluetooth: hci5: command 0x0406 tx timeout
[  489.715337][ T5596] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  489.721970][ T5596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  489.727423][ T5596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  489.737673][ T5596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  491.772063][T11951] Bluetooth: hci7: Opcode 0x0c38 failed: -110
[  493.281973][T10989] Bluetooth: hci6: command 0x0406 tx timeout
[  493.282544][T10989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  493.514135][T11951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  493.782711][T11951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  493.816293][T11951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  493.821765][T11951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  497.781995][T11951] Bluetooth: hci7: command tx timeout
[  498.742805][ T5596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  498.981275][   T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  499.450523][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  500.062029][   T55] Bluetooth: hci7: command tx timeout
[  500.064381][   T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  500.479781][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  500.847948][ T5596] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  500.864824][T11951] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  500.875428][T11951] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  501.162898][T11951] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  501.170716][T11951] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  501.378419][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  502.247953][   T55] Bluetooth: hci7: command tx timeout
[  504.441990][   T55] Bluetooth: hci7: command tx timeout
[  504.442541][   T55] Bluetooth: hci8: command tx timeout
[  506.011931][ T5596] Bluetooth: hci9: command tx timeout
[  506.523276][ T5596] Bluetooth: hci8: command tx timeout
[  508.241719][ T5596] Bluetooth: hci9: command tx timeout
[  509.302025][ T5596] Bluetooth: hci8: command tx timeout
[  510.423476][ T5596] Bluetooth: hci9: command tx timeout
[  511.392171][ T5596] Bluetooth: hci8: command tx timeout
[  512.755445][ T5596] Bluetooth: hci9: command tx timeout
[  545.788888][ T5651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.772933][ T5651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.905626][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  555.038322][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.052431][   T55] Bluetooth: hci3: command 0x1001 tx timeout
[  557.056128][ T5596] Bluetooth: hci3: Opcode 0x1001 failed: -110
[  557.072837][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  557.077255][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.083816][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  558.333440][T11951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  558.368412][T11951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  559.144641][ T5596] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  563.287295][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  566.081389][T10989] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  566.592719][T10989] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  566.831971][T10989] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  567.062593][T10989] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  567.347561][T10989] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  569.372002][   T55] Bluetooth: hci10: Opcode 0x0c16 failed: -110
[  571.621941][ T5596] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  571.622531][ T5596] Bluetooth: hci3: command tx timeout
[  572.064117][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  572.068137][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  572.074748][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  574.231978][   T55] Bluetooth: hci3: command tx timeout
[  574.248701][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  576.452616][   T55] Bluetooth: hci3: command tx timeout
[  578.622012][   T55] Bluetooth: hci3: command tx timeout
[  589.141861][   T55] Bluetooth: hci10: command tx timeout
[  591.281847][   T55] Bluetooth: hci10: command tx timeout
[  593.291961][   T55] Bluetooth: hci10: command tx timeout
[  595.412003][   T55] Bluetooth: hci10: command tx timeout
[  612.312218][ T5651] bond0: (slave netdevsim1): Releasing backup interface
[  621.279849][ T5651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  621.280373][ T5651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.377192][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  634.247938][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  634.257167][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  634.259676][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  634.267326][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  636.401973][   T55] Bluetooth: hci0: Opcode 0x0c38 failed: -110
[  637.782965][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  637.783674][ T5596] Bluetooth: hci0: unexpected event for opcode 0x0c38
[  637.784391][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  639.224467][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  639.227878][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  641.984822][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  641.991358][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  644.091972][ T5596] Bluetooth: hci0: command tx timeout
[  646.442018][ T5596] Bluetooth: hci0: command tx timeout
[  648.492031][ T5596] Bluetooth: hci0: command tx timeout
[  650.633300][ T5596] Bluetooth: hci0: command tx timeout
[  652.873883][ T5596] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  652.905615][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  655.651976][ T5596] Bluetooth: hci1: command 0x1003 tx timeout
[  656.432827][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  658.642025][T12046] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  660.418859][T11951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  662.727129][ T5596] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  663.583314][T11951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  664.025807][T11951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  665.116327][T11951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  665.302441][T11951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  665.305105][T11951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  670.261996][T11951] Bluetooth: hci2: command tx timeout
[  672.600257][T11951] Bluetooth: hci2: command tx timeout
[  674.652025][T11951] Bluetooth: hci2: command tx timeout
[  676.732190][T11951] Bluetooth: hci2: command tx timeout
[  685.698944][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  693.927325][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  695.932427][T11951] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  697.043632][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  697.875107][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  697.877498][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  697.889417][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  697.892384][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  707.382124][T11951] Bluetooth: hci1: command tx timeout
[  709.562093][T11951] Bluetooth: hci1: command tx timeout
[  711.612006][T11951] Bluetooth: hci1: command tx timeout
[  713.703051][T11951] Bluetooth: hci1: command tx timeout
[  731.726383][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  731.872525][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  731.902842][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  732.053229][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  732.057605][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  734.361530][ T5596] Bluetooth: hci3: command tx timeout
[  736.202689][T11951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  736.573005][T11951] Bluetooth: hci3: command tx timeout
[  736.619190][T11951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  736.623673][T11951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  737.319314][T11951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  737.326739][T11951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  738.719159][ T5596] Bluetooth: hci3: command tx timeout
[  739.386877][ T5596] Bluetooth: hci4: command tx timeout
[  740.732962][ T5596] Bluetooth: hci3: command tx timeout
[  741.471865][T11951] Bluetooth: hci4: command tx timeout
[  743.717853][T11951] Bluetooth: hci4: command tx timeout
[  745.783759][T11951] Bluetooth: hci4: command tx timeout
[  747.431285][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  764.013184][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  765.076519][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  765.079169][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  765.083467][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  765.086448][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  768.253211][ T5596] Bluetooth: hci5: command tx timeout
[  770.332015][ T5596] Bluetooth: hci5: command tx timeout
[  772.412033][ T5596] Bluetooth: hci5: command tx timeout
[  774.513942][ T5596] Bluetooth: hci5: command tx timeout
[  801.344230][T11951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  801.353454][T11951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  801.358892][T11951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  801.612297][T11951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  802.708069][T11951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  803.120901][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  803.128171][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  803.133004][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  803.141427][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  804.045420][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  806.092032][T11951] Bluetooth: hci2: command tx timeout
[  807.301932][T11951] Bluetooth: hci0: command tx timeout
[  808.204092][T11951] Bluetooth: hci2: command tx timeout
[  809.167122][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  809.385864][T11951] Bluetooth: hci0: command tx timeout
[  810.341895][T11951] Bluetooth: hci2: command tx timeout
[  811.491851][T11951] Bluetooth: hci0: command tx timeout
[  812.437906][T11951] Bluetooth: hci2: command tx timeout
[  813.541144][T11951] Bluetooth: hci0: command tx timeout
[  821.712443][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  821.723407][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  822.292569][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  822.299189][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  823.386013][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  827.818152][ T5596] Bluetooth: hci1: command tx timeout
[  830.060409][ T5596] Bluetooth: hci1: command tx timeout
[  832.147640][ T5596] Bluetooth: hci1: command tx timeout
[  834.171951][ T5596] Bluetooth: hci1: command tx timeout
[  856.927710][ T5596] Bluetooth: hci3: command 0x0406 tx timeout
[  861.932024][ T5596] Bluetooth: hci4: command 0x0406 tx timeout
[  870.017573][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  872.082876][T11951] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  872.887113][T11951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  875.356715][T11951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  877.481211][T11951] Bluetooth: hci6: command 0x1001 tx timeout
[  877.484663][T12126] Bluetooth: hci6: Opcode 0x1001 failed: -110
[  879.417188][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  879.422764][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  879.427203][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  881.692015][T11951] Bluetooth: hci7: Opcode 0x1005 failed: -110
[  882.763238][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  883.442772][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  883.445522][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  883.750359][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  883.873730][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  885.932059][   T55] Bluetooth: hci7: command tx timeout
[  888.157545][   T55] Bluetooth: hci7: command tx timeout
[  889.572415][   T35] INFO: task kworker/u9:19:9415 blocked for more than 150 seconds.
[  889.572965][   T35]       Not tainted syzkaller #0
[  889.572971][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  889.572975][   T35] task:kworker/u9:19   state:D stack:23848 pid:9415  tgid:9415  ppid:2      task_flags:0x4208060 flags:0x00080000
[  889.572998][   T35] Workqueue: events_unbound linkwatch_event
[  889.573012][   T35] Call Trace:
[  889.573016][   T35]  <TASK>
[  889.573022][   T35]  __schedule+0x17db/0x58f0
[  889.573054][   T35]  ? __pfx___schedule+0x10/0x10
[  889.573077][   T35]  ? schedule+0x90/0x2b0
[  889.573095][   T35]  schedule+0x164/0x2b0
[  889.573108][   T35]  schedule_preempt_disabled+0x13/0x30
[  889.573118][   T35]  __mutex_lock+0x7c1/0x1550
[  889.573133][   T35]  ? __mutex_lock+0x5d4/0x1550
[  889.573147][   T35]  ? linkwatch_event+0xe/0x60
[  889.573163][   T35]  ? __pfx___mutex_lock+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  889.573176][   T35]  ? lock_acquire+0x115/0x350
[  889.573194][   T35]  ? rcu_is_watching+0x16/0xb0
[  889.573209][   T35]  ? process_scheduled_works+0x97a/0x1630
[  889.573224][   T35]  linkwatch_event+0xe/0x60
[  889.573237][   T35]  process_scheduled_works+0xc3d/0x1630
[  889.573277][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  889.573298][   T35]  ? assign_work+0x3cf/0x5d0
[  889.573343][   T35]  worker_thread+0xa47/0xfb0
[  889.573374][   T35]  kthread+0x38b/0x480
[  889.573387][   T35]  ? __pfx_worker_thread+0x10/0x10
[  889.573401][   T35]  ? __pfx_kthread+0x10/0x10
[  889.573414][   T35]  ret_from_fork+0x514/0xb70
[  889.573427][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  889.573444][   T35]  ? __switch_to+0xc89/0x1420
[  889.573461][   T35]  ? __pfx_kthread+0x10/0x10
[  889.573474][   T35]  ret_from_fork_asm+0x1a/0x30
[  889.573502][   T35]  </TASK>
[  889.573526][   T35] 
[  889.573526][   T35] Showing all locks held in the system:
[  889.573532][   T35] locks held by kworker/u8:0/12: 3, last CPU#0:
[  889.573541][   T35]  #0: ffff888012a36140 ((wq_completion)krds_cp_wq#3/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573575][   T35]  #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573606][   T35]  #2: ffff88811308fc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  889.573637][   T35] locks held by kworker/u8:1/13: 4, last CPU#0:
[  889.573646][   T35]  #0: ffff888115a0e140 ((wq_completion)krds_cp_wq#3/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573676][   T35]  #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573696][   T35]  #2: ffff8881186b4c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  889.573714][   T35]  #3: ffff88810a018fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  889.573739][   T35] locks held by pr/ttyS0/16: 2, last CPU#1:
[  889.573747][   T35]  #0: ffffffff8ec36338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  889.573777][   T35]  #1: ffffffff9ad35118 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  889.573811][   T35] locks held by kworker/u10:0/28: 3, last CPU#0:
[  889.573819][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573849][   T35]  #1: ffffc90000a37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573880][   T35]  #2: ffff888027b50258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  889.573915][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  889.573922][   T35]  #0: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  889.573952][   T35] locks held by kworker/0:2/53: 3, last CPU#0:
[  889.573960][   T35]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.573990][   T35]  #1: ffffc90000bf7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574021][   T35]  #2: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890
[  889.574058][   T35] locks held by kworker/u9:12/1116: 2, last CPU#0:
[  889.574066][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574095][   T35]  #1: ffffc900075d7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574134][   T35] locks held by dhcpcd/5341: 2, on CPU#0:
[  889.574142][   T35]  #0: ffff88811a80c6e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  889.574173][   T35]  #1: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14a0
[  889.574202][   T35] locks held by getty/5427: 2, on CPU#0:
[  889.574210][   T35]  #0: ffff8881171890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  889.574240][   T35]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  889.574277][   T35] locks held by kworker/u8:2/5630: 4, last CPU#0:
[  889.574285][   T35]  #0: ffff88811683d140 ((wq_completion)krds_cp_wq#3/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574341][   T35]  #1: ffffc90004cffc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574372][   T35]  #2: ffff8881186b4680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  889.574402][   T35]  #3: ffff88810a018260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  889.574434][   T35] locks held by kworker/1:3/5647: 4, last CPU#1:
[  889.574442][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574472][   T35]  #1: ffffc90004defc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574502][   T35]  #2: ffffc90004def770 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  889.574537][   T35]  #3: ffffc90004def798 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  889.574570][   T35] locks held by kworker/u8:3/5651: 5, last CPU#0:
[  889.574578][   T35]  #0: ffff8881012d5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574606][   T35]  #1: ffffc90004e2fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574636][   T35]  #2: ffffffff90242f68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  889.574664][   T35]  #3: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0
[  889.574691][   T35]  #4: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0xac/0x580
[  889.574720][   T35] locks held by kworker/u10:10/5985: 3, last CPU#0:
[  889.574727][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574748][   T35]  #1: ffffc90007a47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574767][   T35]  #2: ffff88810c6aa258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  889.574795][   T35] locks held by kworker/u8:5/6683: 4, last CPU#0:
[  889.574803][   T35]  #0: ffff888115a0f940 ((wq_completion)krds_cp_wq#3/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574832][   T35]  #1: ffffc900069c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574863][   T35]  #2: ffff8881186b4f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  889.574892][   T35]  #3: ffff88810a01b860 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  889.574921][   T35] locks held by kworker/u8:6/6685: 3, on CPU#0:
[  889.574930][   T35]  #0: ffff88811
** replaying previous printk message **
[  889.574930][   T35]  #0: ffff888114294140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574960][   T35]  #1: ffffc90006997c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.574991][   T35]  #2: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  889.575019][   T35] locks held by kworker/u8:7/6686: 3, last CPU#0:
[  889.575027][   T35]  #0: ffff888012a35140 ((wq_completion)krds_cp_wq#3/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.575057][   T35]  #1: ffffc90006947c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  889.575087][   T35]  #2: ffff8881186b4380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  889.575118][   T35] locks held by kworker/u8:8/7657: 4, last CPU#1:
[  889.575126][   T35]  #0: ffff8881153c2140 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  890.262031][   T55] Bluetooth: hci7: command tx timeout
[  891.822247][   T35]  #1: ffffc90008bf7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822283][   T35]  #2: ffff8881186b5280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  891.822328][   T35]  #3: ffff88812103bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  891.822351][   T35] locks held by kworker/u8:9/7658: 4, last CPU#0:
[  891.822356][   T35]  #0: ffff888115a0b940 ((wq_completion)krds_cp_wq#3/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822376][   T35]  #1: ffffc900094a7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822394][   T35]  #2: ffff8881186b4980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  891.822413][   T35]  #3: ffff88811456e0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[  891.822432][   T35] locks held by kworker/u8:10/7659: 2, last CPU#0:
[  891.822437][   T35]  #0: ffff88811452e140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822456][   T35]  #1: ffffc90008bd7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822481][   T35] locks held by kworker/u9:19/9415: 3, on CPU#0:
[  891.822486][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822505][   T35]  #1: ffffc90008157c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822523][   T35]  #2: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  891.822542][   T35] locks held by kworker/u9:22/9422: 3, last CPU#1:
[  891.822548][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822566][   T35]  #1: ffffc90008117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822586][   T35]  #2: ffff888027b50258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  891.822612][   T35] locks held by kworker/u8:13/11911: 4, last CPU#0:
[  891.822618][   T35]  #0: ffff8881b6f0d140 ((wq_completion)bond2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822638][   T35]  #1: ffffc9000459fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822657][   T35]  #2: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820
[  891.822677][   T35]  #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: alb_send_learning_packets+0x138/0x300
[  891.822696][   T35] locks held by kworker/u8:14/11940: 3, last CPU#1:
[  891.822701][   T35]  #0: ffff888012a35940 ((wq_completion)krds_cp_wq#3/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822720][   T35]  #1: ffffc90006d4fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822738][   T35]  #2: ffff8881186b4080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  891.822757][   T35] locks held by kworker/u8:15/11995: 3, last CPU#0:
[  891.822762][   T35]  #0: ffff888012a36140 ((wq_completion)krds_cp_wq#3/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822785][   T35]  #1: ffffc9000348fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822804][   T35]  #2: ffff88811308fc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  891.822822][   T35] locks held by kworker/1:6/12004: 3, on CPU#1:
[  891.822827][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822846][   T35]  #1: ffffc900017d7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822864][   T35]  #2: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770
[  891.822883][   T35] locks held by kworker/u9:1/12015: 2, last CPU#0:
[  891.822888][   T35]  #0: ffff88810e663940 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822908][   T35]  #1: ffffc900080a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.822928][   T35] locks held by syz-executor/12076: 1, on CPU#1:
[  891.822933][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.822953][   T35] locks held by syz-executor/12080: 1, on CPU#0:
[  891.822958][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.822976][   T35] locks held by syz-executor/12091: 1, on CPU#0:
[  891.822981][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.823000][   T35] locks held by syz-executor/12104: 1, on CPU#1:
[  891.823005][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.823023][   T35] locks held by syz-executor/12107: 1, on CPU#0:
[  891.823029][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.823047][   T35] locks held by syz-executor/12114: 1, on CPU#1:
[  891.823052][   T35]  #0: ffffffff902517c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0
[  891.823077][   T35] locks held by kworker/1:0/12116: 3, on CPU#1:
[  891.823084][   T35]  #0: ffff88811429cd40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.823110][   T35]  #1: ffffc900034efc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  891.823139][   T35]  #2: ffff888023933530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60
[  891.823164][   T35] locks held by syz-executor/12127: 2, on CPU#1:
[  891.823169][   T35]  #0: ffff88816a934ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  891.823191][   T35]  #1: ffffffff8ed62b28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  891.823224][   T35] 
[  891.823227][   T35] =============================================
[  891.823227][   T35] 
[  891.823233][   T35] NMI backtrace for cpu 1
[  891.823240][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  891.823250][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  891.823257][   T35] Call Trace:
[  891.823262][   T35]  <TASK>
[  891.823267][   T35]  dump_stack_lvl+0xe8/0x150
[  891.823286][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  891.823329][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  891.823347][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  891.823362][   T35]  sys_info+0x135/0x170
[  891.823373][   T35]  watchdog+0xfd7/0x1030
[  891.823386][   T35]  ? watchdog+0x1c7/0x1030
[  891.823399][   T35]  kthread+0x38b/0x480
[  891.823410][   T35]  ? __pfx_watchdog+0x10/0x10
[  891.823418][   T35]  ? __pfx_kthread+0x10/0x10
[  891.823429][   T35]  ret_from_fork+0x514/0xb70
[  891.823440][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  891.823455][   T35]  ? __switch_to+0xc89/0x1420
[  891.823470][   T35]  ? __pfx_kthread+0x10/0x10
[  891.823482][   T35]  ret_from_fork_asm+0x1a/0x30
[  891.823508][   T35]  </TASK>
[  891.823513][   T35] Sending NMI from CPU 1 to CPUs 0:
[  891.824238][    C0] NMI backtrace for cpu 0
[  891.824252][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  891.824266][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  891.824273][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  891.824288][    C0] Code: e8 6e 84 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 69 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 58 75 06 cc 44 89 f9 80 e1 07
[  891.824324][    C0] RSP: 0018:ffffc90000157978 EFLAGS: 00000006
[  891.824336][    C0] RAX: 1ffffffff35a6a05 RBX: 00000000000003f9 RCX: 0000000000000000
[  891.824344][    C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020
[  891.824352][    C0] RBP: ffffc90000157ad0 R08: 0000000000000003 R09: 0000000000000004
[  891.824360][    C0] R10: dffffc0000000000 R11: ffffffff85724090 R12: dffffc0000000000
[  891.824369][    C0] R13: 1ffffffff35a6a2a R14: ffffffff9ad35140 R15: 0000000000000000
[  891.824376][    C0] FS:  0000000000000000(0000) GS:ffff88818d6d6000(0000) knlGS:0000000000000000
[  891.824382][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  891.824387][    C0] CR2: 00007f1e0a902e10 CR3: 00000001ac668000 CR4: 00000000000006f0
[  891.824415][    C0] Call Trace:
[  891.824420][    C0]  <TASK>
[  891.824424][    C0]  serial8250_console_write+0xed/0x1200
[  891.824434][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  891.824440][    C0]  ? __schedule+0x17f1/0x58f0
[  891.824453][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  891.824464][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  891.824472][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  891.824481][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  891.824491][    C0]  nbcon_kthread_func+0x679/0x880
[  891.824499][    C0]  ? nbcon_kthread_func+0x163/0x880
[  891.824505][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  891.824513][    C0]  ? __kthread_parkme+0x71/0x1f0
[  891.824523][    C0]  ? __kthread_parkme+0x199/0x1f0
[  891.824532][    C0]  kthread+0x38b/0x480
[  891.824539][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  891.824545][    C0]  ? __pfx_kthread+0x10/0x10
[  891.824551][    C0]  ret_from_fork+0x514/0xb70
[  891.824558][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  891.824569][    C0]  ? __switch_to+0xc89/0x1420
[  891.824578][    C0]  ? __pfx_kthread+0x10/0x10
[  891.824584][    C0]  ret_from_fork_asm+0x1a/0x30
[  891.824597][    C0]  </TASK>
[  891.825546][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  892.191654][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  892.194439][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  892.197978][   T35] Call Trace:
[  892.199068][   T35]  <TASK>
[  892.200019][   T35]  vpanic+0x56d/0xa60
[  892.201324][   T35]  ? __pfx_vpanic+0x10/0x10
[  892.202859][   T35]  ? console_srcu_read_unlock+0x3a/0x60
[  892.204745][   T35]  panic+0xc5/0xd0
[  892.206173][   T35]  ? __pfx_panic+0x10/0x10
[  892.207893][   T35]  ? wq_watchdog_touch+0xf9/0x160
[  892.209799][   T35]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  892.211774][   T35]  watchdog+0x1030/0x1030
[  892.213128][   T35]  ? watchdog+0x1c7/0x1030
[  892.214576][   T35]  kthread+0x38b/0x480
[  892.215863][   T35]  ? __pfx_watchdog+0x10/0x10
[  892.217365][   T35]  ? __pfx_kthread+0x10/0x10
[  892.218817][   T35]  ret_from_fork+0x514/0xb70
[  892.220279][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  892.222089][   T35]  ? __switch_to+0xc89/0x1420
[  892.223627][   T35]  ? __pfx_kthread+0x10/0x10
[  892.224966][   T35]  ret_from_fork_asm+0x1a/0x30
[  892.226759][   T35]  </TASK>
[  892.228675][   T35] Kernel Offset: disabled
[  892.230426][   T35] Rebooting in 86400 seconds..
