last executing test programs:

17m7.818381749s ago: executing program 0 (id=16931):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0)

17m7.738096909s ago: executing program 0 (id=16932):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000006ee7907d138908231749f7ea170c1571000000000000000000000000000000000000000000000000eb14e968efa7924cce8ae48fabbdb7be9e763f2fdf6823694ee21c5cfeb490b437dd5dc532953ae91f042df615058648e4a8de9076d0a0db357d70ecb121832d6830944f15f8c05d6dfa5f948faf0a80118051efa1132a44fa86c021"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000002c0), &(0x7f0000000340)=r7}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000018000000000040000100000018110000e0ea42e2a89dacf0f63975058e51fc8eafa0414f108e9bd1a5cce565799d202d4f40254a6b640abc7297a9a0d191131b39d30a04978bf4fbfa94a3187049778a9e15538d95d2e2570a7cec1f2752f52d35ce22bce697f354de78913df34160d3354b555f4efd7f151abb7762", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r3, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)

17m7.577961278s ago: executing program 0 (id=16933):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x3}, 0x94) (async)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x5ba8aec43a755617, 0x70ad27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6358b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000000)) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r5], 0x34}}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x34}}, 0x0) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000240001800b0001007470726f78790000140002800800024000000011080001400000000a0900010073797a30"], 0xf8}}, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0xf, 0x12) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], <r9=>0x0}, 0x40) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r4}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r10, r7, 0x2d, 0x18, 0x0, @void, @value=r6, @void, @void, r9}, 0x20) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map=r11, r2, 0x5, 0x8, r2, @void, @value=r2, @void, @void, r9}, 0x20)

17m7.577522468s ago: executing program 0 (id=16934):
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000003a0000001800000004000000020000000000000c02000000000000000000000d0000000000005f008684ffc48a02c8906d6407b29e30258ec4c7fe3ab3f3d207b88241e6002be69176487daee904070116f4a247a97accdb59", @ANYRES8=r0], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f70000000000000066dc9a60b1b94c00950000000000000072853ab4988c62e76c004395b8e36ec771d86f8995371cf3e2dc18ee6c73870503517954038705e6738708f2bfb40d818d56581f912bf3a34ffad85f11cc30171e9761e41068e73cbd7820cc88609e2a8d3b752945293a54acb1b390be14347073fb811a5820e9c1740d54bb7cd1bd231e9f04d0587101109a224b784d30696229016761"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000050000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000001800038014000080080003400000000205000e4006000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=r0], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) (async)
shutdown(r4, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) (async)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000015000000000000000020"], 0x48) (async)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) (async)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018630000040000000000000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xf, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x10, 0x39}, 0x94) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

17m7.498350512s ago: executing program 0 (id=16935):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x1638, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x160c, 0x2, [@TCA_U32_ACT={0x15cc, 0x7, [@m_sample={0x88, 0x18, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffa}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2fa}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x29, 0x6, "7cc75dc199c14e4bea42bf124bf22ad7e4a357456506a9eed7949e9357434b31fdccbba474"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x14c, 0x5, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x400, 0x8, 0x4, 0x0, 0x788}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xeb, 0x6, "54f082b28e33c439260a276d6d7e5ef9654ef2094403d220a32174ef6357c20ac3e486b17f570c824fc18e1e4df3f814e172bf610df61ba661d1fc3365fafd956573cb460fff46023f2b79791fcbe33009d1fb31d06b548d9f56cd095eef60883a5d9f0ac500e397accfe63b3ddfd033321a72432d6ebff5accdf07b0f4761ab4b3e3dc9acf74322c46faaf50d52e0eb524aeb374921be10ad3e8fe823124ef13d43b9c80b82099e2e1da7044dde8305dea7d011c0f1142994a0620142c469c9931a06b3174bd55f763681777481a93d47c414ee5c618616a17252e373d9dee9836044473c425f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x1058, 0xe, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe74b9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x68, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x21, 0x6, "8c4d7b327f0154d68fb754331567c6b7489ee6bbed8d88e5f695744950"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x224, 0x20, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x4, 0x10, 0xffff8000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x3, 0x30000005, 0xba4, 0x7}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x8, 0x10000000, 0x2, 0xfffffff9}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3a5, 0x3, 0xf, 0x7ff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3ac, 0x2, 0x7, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x92bc, 0x4, 0x2, 0x2, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x7, 0xfd0, 0x1e}, 0xb2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x5c92, 0x1, 0x9, 0x1ff}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x6, 0x2, 0x9, 0x8001}, 0x2}}]}, {0xf7, 0x6, "09c9d2e0a43f6edac7b358dfe254bc42d1a6bde73cc37405f676c24176a7b6789a972359c2ac2c1017ab326c66e417c095d8005587471cb9b527a680e017c23977ee2c8654d42c9834a211151146cdd43d0a4fdf43445bc4b6a0fb2859bc56500d183a0da8b9f6507dc6cc7c108d2945fea302f296a3d4f5add7ebdeefeb6acdaee4971f29046c56dd7ea27782dcfd996fa8f5dc48333ff85212a15e76968b5e4204fb3b761a395280bbaa2dfa3d46d4c8ac3d0efae61426f8c06c71f3845cfa901f05d4510407d32cfddead79274f10af617d228850ebb0e9dc57c78ed58478b9af00fdb5caf9a4d09eb8e95ad0bc7fa92fdf"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xe0, 0x4, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x1, 0x80000000}, 0x5e}}]}, {0x93, 0x6, "ca943d6269e92c240f7705b78d693080865559c1d83c77ba34206b12cace27d46100efee8550b6859621b8101b1ef014bc717e72bb7a9a5d49929d435f21458f66cc84cdc6fdc3905f7edeb338e5e3a42a0203ed1322aaed1db476d617a0f6590dbbcb12d1e6637c5df7a91a6608dd53eef212a3a261e1e4fd6e250979d2deb66efb3f8d2f55ebb0f952fdf2373ab6"}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x7}}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x16}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0xc}}]}}]}, 0x1638}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
shutdown(r0, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000001c0)={0x80}) (async)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))

17m7.388127846s ago: executing program 0 (id=16936):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="dab8ca3daf2668cf00", @ANYBLOB="62649f8b806bfa322e1fe47f7669c7063a2d6e9082404a793296ec573d2ca84ab1dd69c81b0b9c00c54588cabfe1f40a45926c3ab8d203a2bd03f72183d356a927e09ffeea35314d88f5d00b1b51418a86b4e070f596e87d2111405313f346b206a7ae764aa587e8bec52522dffed2e2b7f7920fe9eadbfcc8cb44debc2e5f136945d497b87f0a9cfb26bc4c47d58ef08cafd465dd04a07f67c8813456165606bf36efba6ccc2007d9ade3c52a60082e0c5cb4d8", @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

16m52.367345413s ago: executing program 32 (id=16936):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="dab8ca3daf2668cf00", @ANYBLOB="62649f8b806bfa322e1fe47f7669c7063a2d6e9082404a793296ec573d2ca84ab1dd69c81b0b9c00c54588cabfe1f40a45926c3ab8d203a2bd03f72183d356a927e09ffeea35314d88f5d00b1b51418a86b4e070f596e87d2111405313f346b206a7ae764aa587e8bec52522dffed2e2b7f7920fe9eadbfcc8cb44debc2e5f136945d497b87f0a9cfb26bc4c47d58ef08cafd465dd04a07f67c8813456165606bf36efba6ccc2007d9ade3c52a60082e0c5cb4d8", @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

5m0.212482916s ago: executing program 3 (id=23781):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}})
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r6, 0x0)
ioctl$int_in(r6, 0x5421, 0x0) (async)
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa)
close(r6) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800) (async)
r7 = socket(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'})
sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x60}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xe8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x802)
getsockname$packet(r0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x40, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x200408c4)
socket(0x10, 0x3, 0x0)

5m0.162139615s ago: executing program 3 (id=23782):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x20000000000001ec, &(0x7f0000000680)=ANY=[@ANYRES8=<r2=>r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffc}, 0x94)
syz_emit_ethernet(0x192, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES16, @ANYRES64=r2], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x55, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000035000701feffffff00000000017c00000c000180060006007ffa0000"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc804)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010a0102001500000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x8d4}, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000001ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="70c8ec8e76dc0e54", 0x8}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x48894)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000004040)={{r7}, 0x0, 0xe, @unused=[0x1, 0x6, 0xffffffffffff52bd, 0xf55b], @subvolid=0xfffffffffffffff8})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x30, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r3], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x22bc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=0x0], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$pppl2tp(0x18, 0x1, 0x1)

4m59.891830646s ago: executing program 3 (id=23784):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) (async)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) (async)
close(r3)

4m59.812414001s ago: executing program 3 (id=23785):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async)
openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) (async, rerun: 64)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r3, @ANYRESDEC=r5], 0x9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde7e}, 0x94) (async, rerun: 32)
socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)

4m59.751862902s ago: executing program 3 (id=23787):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x0, 0x24, 0x0, "2c004a46dc15b929250d4ac91f4f1fb55e5961fe20187d3f548a717f53c4c278903462d20a1536d3e0dbebbed8a4146dfa98c60d4175e09fb5855304905f35f5789457049d1eb4f48635594016249d12"}, 0xd8)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4m59.65101624s ago: executing program 3 (id=23788):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

4m44.332600802s ago: executing program 33 (id=23788):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

2.728524202s ago: executing program 2 (id=26367):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000300)='br\xd2/\x7f\nidoe0\x00', 0x501a00, &(0x7f0000000580)={@align=0x4, {0x2, 0x9, 0x7fff, 0x5}}, 0xf5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000"], 0x7c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2, <r9=>0xffffffffffffffff}, 0x4)
r10 = socket(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x101, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x80, 0x8, 0xfe, 0x0, 0xfd, 0x2, 0x100}, [@RTA_TABLE={0x8, 0xf, 0x2fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0500000000000000000000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2e, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000010}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x6, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r9, 0xffffffffffffffff, r1], 0x0, 0x10, 0xffff0001}, 0x94)

2.429332011s ago: executing program 2 (id=26373):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(0xffffffffffffffff, 0x800007, 0xb, &(0x7f00000000c0)="89022f5ab86da57f8b00000000000000", 0x10)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})

1.709027136s ago: executing program 4 (id=26381):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000000180010040000000000"], 0x0, 0x26}, 0x28)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtaction={0x258, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x244, 0x1, [@m_xt={0x240, 0x13, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xce, 0x6, {0xf10a, 'nat\x00', 0x1, 0x3, "d98292e0f1d649d545307d7a85c36a4ae3641271da4e07729d1bfaed324c6c5c7e831189e04f0a5f5b04fdfebcc4393629d721727ccd724767e86f73931b0491d9f778f2216ac0d90462ceb87a95d2b8eb649bb8a506e98dd92b2951dc7d170cf62c427beb1ac0caa871453cd9874d148894e712ae777207246a63636d8922b23d8ad3ea782e2fc4af6b25ad87dc01d8a12d9e0b047c66c5e6f96307954142d5b5c1a7b4"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}]}, {0xe2, 0x6, "221d3ed61d114b2a957ca3cd97edabb0887ffb7ad82f37ff81cfedc6a34bfc72bbe72030e29ba048fe19d2e1bbefeb04dfeba609e5455da41d266bbca00177fc92e67093e3c03c6fd1dac5ce1f6e89b828e58ec62fa42ff425830d835936aee7a1d65921fc563322994e2ddc74f1db9194e7781969b3d55876b6e9a2f362e10733f51085e06a756deefb86c62b84e114d5ea367dfa13159d0521583327ccfa8deb1234017f7873e724cbaae3bde93ee37afdaafb2c0ea095a022a7c3aee9baa5e776c99d2f6585ea4355bd81bd9f4aa0cdb51da3872b3ba89cb2fb8c0a4f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x258}}, 0x20040000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) (async)
getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async, rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000001080)={r1, 0x9, 0x3, "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"}) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000f8ffffffffffffff12000414028008000a00000000000000000000000000b5a2da540f586073e84df398202b855ab1a4b211d885565c2b82ef1775a64ef73f2b496052d20b973214b9b6bcda8c5298711762f55f3e59963fcdb2143b13e8a24fd135e3222dbc7910ff710a4443241c60789dd11c790c081f0ac51a5838ab112e56ccb9171c136e2a141885c1c695f235ec8a20ed11efaa2fd67a2eb04e1581aec3ffc3e46fbe538bf3461eb40067e25a5e6b6abbc8bf2d61d007b07c90cd721c7373e578c4f9ff236ead4b7ab4ae43ddd8cf9c1c05c68e57bd626f267ae30b8f81d233bf2d5c0cb37cc79240b2859070ce2e", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
listen(0xffffffffffffffff, 0x400004) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 32)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) (async)
poll(&(0x7f0000002000)=[{r7, 0x93d4}], 0x1, 0x9) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x9, 0x12}, 0x50) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8) (async, rerun: 64)
r9 = socket(0x2b, 0x1, 0x1) (rerun: 64)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x5)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.616182075s ago: executing program 4 (id=26383):
unshare(0x400)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, &(0x7f00000001c0)='nfc\x00', 0x404700, 0x0, 0x3, &(0x7f0000000240), 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x46, 0x0, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x3, 0x1f, 0x4a, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xd}, 0x60)
getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x24}}, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, r2)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
socket(0x2, 0x2, 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

1.499515937s ago: executing program 2 (id=26384):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={<r8=>r0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e00)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x810)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r13 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r12, r2], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xf3d8, 0x0, 0x10, {[@mptcp=@ack={0x1e, 0x16, 0x8, 0x4, "a8c62540169d563df1167b340b68027cd8ac"}, @mptcp=@mp_join={0x1e, 0x3, 0x2}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x16, [0x40, 0x200, 0x1ff, 0x1, 0x800]}]}}}}}}}}, 0x0)

1.390128335s ago: executing program 4 (id=26385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f)
close(0x4) (async)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x0, @mcast1}}, 0x0, 0x0, 0x24, 0x0, "2c004a46dc15b929250d4ac91f4f1fb55e5961fe20187d3f548a717f53c4c278903462d20a1536d3e0dbebbed8a4146dfa98c60d4175e09fb5855304905f35f5789457049d1eb4f48635594016249d12"}, 0xd8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64)
syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async, rerun: 32)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 32)
openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (rerun: 32)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 32)
sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

1.329510264s ago: executing program 4 (id=26386):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0xce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)

1.14877176s ago: executing program 2 (id=26387):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @empty, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)
listen(r1, 0x0)
close(0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000480))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x44, 0x5, {0xb, 0x4, 0x3, 0x200, 0xff, 0x3226, 0x4, 0x2800, [{0x1, 0x3, 0x9ea, 0xfffffffe}, {0x2, 0x7fb, 0x9, 0xd}, {0xf, 0x7ff, 0xd6, 0xe}]}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20001091}, 0x48000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r7, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendto$inet(r8, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
recvmmsg(r8, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000120, 0x0)
socket(0x32, 0x2, 0x4)

618.637687ms ago: executing program 1 (id=26389):
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
recvfrom$inet6(r1, &(0x7f0000000d80)=""/141, 0x8d, 0x40010020, &(0x7f0000000e40)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7f}, 0x1c) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000ffffffff00000000041000001800e4ffffff00000000000002000000650000000000000018000000000000000000000000000000950000000000000084030000000500009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000005c0), 0x4) (async)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="126873159fca3fa38fb1", 0xa}], 0x2}, 0x40000) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async, rerun: 64)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x140, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x8000, 0x4, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0xac}, [@algo_crypt={0x48, 0x2, {{'ecb-des3_ede-asm\x00'}}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

549.561837ms ago: executing program 1 (id=26390):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x18)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x517ee09a17ffea8b, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000003c40), 0x4)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r5)

500.19466ms ago: executing program 1 (id=26391):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040) (async, rerun: 64)
r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0x1c) (async)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000c00)="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", 0x401}], 0x1}}], 0x1, 0x4001400) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)

499.832989ms ago: executing program 4 (id=26392):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000180))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0x21, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x52}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x101, 0xac, &(0x7f00000007c0)=""/172, 0x41100, 0x1c, '\x00', r4, @fallback=0x24, r1, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0xb, 0xd42a, 0x2cdf}, 0x10, 0x0, r1, 0x7, &(0x7f0000000900)=[r1, r1, r1], &(0x7f0000000940)=[{0x1, 0x2, 0xa, 0x9}, {0x5, 0x5, 0x6, 0x3}, {0x0, 0x1, 0x6, 0x9f3c6ccb7018bdc7}, {0x5, 0x1, 0x8, 0x4}, {0x1, 0x5, 0xa, 0x6}, {0x3, 0x4, 0x0, 0x6}, {0x4, 0x5, 0xc, 0x8}], 0x10, 0x9}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a80)=r6, 0x4)

392.743343ms ago: executing program 1 (id=26393):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0xee2b, 0xa, 0xd2, 0x8}, {0x9, 0x7, 0x3, 0xd5a}, {0x10, 0x0, 0xea, 0x9}, {0x8, 0x3, 0x6, 0xb}, {0x9, 0xf9, 0x9, 0x7f}, {0x2, 0x4c, 0x28}, {0x7, 0x2, 0xa3, 0x7fff}, {0x5, 0x4, 0xe, 0xfffffff8}]}, 0x10)
shutdown(r0, 0x0)
ioctl$int_in(r0, 0x5421, 0x0)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x1000c915}, 0x0)
socket$inet(0x2, 0x2, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket(0x2, 0x2, 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0005"], 0x28}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r7, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendto$inet(r6, &(0x7f0000000680)="c97f605fc278e0767762b72b4a938d5a3ccfc65d137515f9150006571d9791bd1f33d1b9c690f380831894f4c1959b4b2af6a81e743f446862165af2746c7b32082b22eef142bcccaec72d3aefaa1b7c9974ddb41f95f942aa17891e04dbcb05fd720d6a2e21e1e7e29bb49b749c9f2e519250eacc7e8fba9005fd5ae8f9145a2b387b796103b768172bb2248c430c4a5dbd2e44a32ddf0324264536c85e2603226a429ead68d7dd29d88ed45b01473485d4ae7ca655406b1761eb8fe956c344ea79d405dae1fb9dee2875dd9c63e175ad4304364d5a9d74b2e8635293146c484a293248af2e2afb", 0xe8, 0x4000, &(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0x7, 0x6}, {0x9, 0x1001b}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)

270.185104ms ago: executing program 1 (id=26394):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000040004850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

268.801518ms ago: executing program 2 (id=26395):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r3, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000007200000000000500000a400000000c0a010100000000000000000a0000000900010073797a310000000014000380100000800c00018006000100d1030000140700000000000000000000000000000300000ae351917087e53fad62f5c03bfb42c2627bf702"], 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)

268.257456ms ago: executing program 1 (id=26396):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000202000/0x1000)=nil, 0x1000, 0x2000001, 0x200000006c832, 0xffffffffffffffff, 0xfffff000)
socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))

199.859309ms ago: executing program 4 (id=26397):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

0s ago: executing program 2 (id=26398):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000289000/0x1000)=nil, 0x1000, 0xa, 0x10, r1, 0xbeba4000)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x200001b7, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000ec8cec500080000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
listen(r5, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r10, 0x5452, &(0x7f0000000180)=0xf51)

kernel console output (not intermixed with test programs):

 type 1 has an invalid length.
[ 2022.463217][T17273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2022.560343][T17280] geneve1: entered allmulticast mode
[ 2022.642038][T17282] __nla_validate_parse: 8 callbacks suppressed
[ 2022.642048][T17282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24207'.
[ 2022.843921][T17289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2022.948304][T17295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24209'.
[ 2023.122860][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2023.191599][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24210'.
[ 2024.049347][T17309] netlink: 120 bytes leftover after parsing attributes in process `syz.1.24213'.
[ 2024.162867][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2024.801193][T17313] netlink: 'syz.4.24214': attribute type 1 has an invalid length.
[ 2024.805763][T17313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2024.916862][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.919455][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2024.924040][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.927266][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2024.931113][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.936016][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2024.941100][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.944588][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2024.948457][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.951583][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2024.955622][T17315] netlink: 'syz.1.24215': attribute type 29 has an invalid length.
[ 2024.958142][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24215'.
[ 2025.202856][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2025.767146][T17371] validate_nla: 85 callbacks suppressed
[ 2025.767159][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.784111][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.790972][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.794234][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.796980][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.799849][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.803523][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.806364][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.809378][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2025.812186][T17371] netlink: 'syz.1.24230': attribute type 29 has an invalid length.
[ 2026.228251][T17393] xt_hashlimit: size too large, truncated to 1048576
[ 2026.243077][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2027.283033][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2027.364774][T24362] Bluetooth: hci4: command 0x041b tx timeout
[ 2027.865290][T17445] __nla_validate_parse: 182 callbacks suppressed
[ 2027.865307][T17445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24247'.
[ 2027.978522][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24249'.
[ 2027.981969][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24249'.
[ 2027.996440][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24249'.
[ 2027.996677][T20260] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2027.999528][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24249'.
[ 2028.013541][T20260] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2028.019179][T20260] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2028.028575][T20260] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2028.160518][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24249'.
[ 2028.297910][T17464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2028.322891][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2028.393847][T17471] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24255'.
[ 2028.515704][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24256'.
[ 2028.654770][T17481] veth1_to_bond: entered allmulticast mode
[ 2028.656964][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24257'.
[ 2028.672534][T17481] veth1_to_bond (unregistering): left allmulticast mode
[ 2028.766556][T17484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24258'.
[ 2029.362955][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2030.074685][T17561] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2030.360309][T17573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2030.402950][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2030.431913][T17575] xt_hashlimit: size too large, truncated to 1048576
[ 2030.928510][T17584] veth1_macvtap: left allmulticast mode
[ 2030.931493][T17584] tipc: Resetting bearer <eth:syzkaller0>
[ 2030.960424][T15412] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2030.964628][T15412] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2030.969396][T15412] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2030.974219][T15412] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2031.103471][T17596] netlink: Unknown conntrack attr (type=2304, max=9)
[ 2031.163796][T17596] validate_nla: 84 callbacks suppressed
[ 2031.163837][T17596] netlink: 'syz.4.24290': attribute type 1 has an invalid length.
[ 2031.168224][T17596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2031.443026][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2031.447896][T17600] xt_hashlimit: size too large, truncated to 1048576
[ 2032.033687][T17614] netlink: 'syz.4.24295': attribute type 1 has an invalid length.
[ 2032.482898][    C0] net_ratelimit: 1 callbacks suppressed
[ 2032.482909][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2032.667835][T17630] nbd: nbd64 already in use
[ 2032.984210][T17645] tipc: Started in network mode
[ 2032.988875][T17645] tipc: Node identity b6475b2d12db, cluster identity 4711
[ 2032.996720][T17645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2033.008696][T17645] syzkaller0: entered promiscuous mode
[ 2033.012809][T17645] syzkaller0: entered allmulticast mode
[ 2033.030096][T17644] tipc: Resetting bearer <eth:syzkaller0>
[ 2033.068545][T17644] tipc: Disabling bearer <eth:syzkaller0>
[ 2033.144895][T17648] __nla_validate_parse: 17 callbacks suppressed
[ 2033.144905][T17648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24305'.
[ 2033.151268][T17649] xt_hashlimit: size too large, truncated to 1048576
[ 2033.154095][T17648] xt_hashlimit: size too large, truncated to 1048576
[ 2033.445145][T17666] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.24309'.
[ 2033.523368][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2033.568320][T17671] netlink: 64 bytes leftover after parsing attributes in process `syz.4.24310'.
[ 2033.891071][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24314'.
[ 2033.896834][T17681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24313'.
[ 2033.999824][T17685] dvmrp0: entered allmulticast mode
[ 2034.562872][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2034.963092][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2035.070218][T17741] netlink: 'syz.2.24323': attribute type 1 has an invalid length.
[ 2035.074316][T17741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24323'.
[ 2035.078190][T17741] NCSI netlink: No device for ifindex 0
[ 2035.268863][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24327'.
[ 2035.605076][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2036.382311][T17779] netlink: 120 bytes leftover after parsing attributes in process `syz.1.24334'.
[ 2036.474916][T17784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24336'.
[ 2036.643090][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2036.657868][T17789] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24338'.
[ 2037.427519][T17798] hsr_slave_0: left promiscuous mode
[ 2037.430619][T17798] hsr_slave_1: left promiscuous mode
[ 2037.682950][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2037.883293][T17811] netlink: 'syz.1.24344': attribute type 1 has an invalid length.
[ 2037.886626][T17811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2038.722984][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2039.062828][T17818] __nla_validate_parse: 3 callbacks suppressed
[ 2039.062845][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24346'.
[ 2039.076518][T17818] xt_hashlimit: size too large, truncated to 1048576
[ 2039.762967][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2040.506363][T17805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2040.599072][T17829] netlink: 120 bytes leftover after parsing attributes in process `syz.4.24350'.
[ 2040.664850][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24349'.
[ 2040.802908][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2040.904509][T17856] netlink: 284 bytes leftover after parsing attributes in process `syz.1.24356'.
[ 2040.970498][T17864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24358'.
[ 2041.236137][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24359'.
[ 2041.243483][T17867] xt_hashlimit: size too large, truncated to 1048576
[ 2041.451621][T13834] hid_parser_main: 17 callbacks suppressed
[ 2041.451636][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.485377][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.497791][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.508217][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.524403][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.536766][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.546985][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.557381][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.567366][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.585760][T13834] hid-generic 0005:0B57:0040.0004: unknown main item tag 0x0
[ 2041.626246][T13834] hid-generic 0005:0B57:0040.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[ 2041.701685][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24367'.
[ 2041.829158][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24363'.
[ 2041.834640][T17884] xt_hashlimit: size too large, truncated to 1048576
[ 2041.842969][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2042.599868][T17908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24372'.
[ 2042.882952][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2042.930466][T17934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2042.960347][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24378'.
[ 2043.612376][T17945] netlink: 'syz.4.24382': attribute type 1 has an invalid length.
[ 2043.632029][T17945] bond2: entered promiscuous mode
[ 2043.634873][T17945] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2043.661136][T17945] bond2: (slave veth3): making interface the new active one
[ 2043.664331][T17945] veth3: entered promiscuous mode
[ 2043.669935][T17945] bond2: (slave veth3): Enslaving as an active interface with an up link
[ 2043.922887][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2044.119197][T17963] __nla_validate_parse: 1 callbacks suppressed
[ 2044.119207][T17963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.24387'.
[ 2044.300951][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24389'.
[ 2044.308706][T17967] xt_hashlimit: size too large, truncated to 1048576
[ 2044.727832][T17986] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20001
[ 2044.832834][T17996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24394'.
[ 2044.903935][T17994] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24395'.
[ 2044.955160][T18007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24399'.
[ 2044.959075][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24399'.
[ 2044.963055][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2045.200060][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24400'.
[ 2045.264752][T18012] xt_hashlimit: size too large, truncated to 1048576
[ 2045.308164][T18030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24404'.
[ 2045.608649][T18046] netlink: 'syz.1.24409': attribute type 1 has an invalid length.
[ 2045.612157][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2045.936075][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24415'.
[ 2045.939029][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24415'.
[ 2046.002952][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2046.143380][T18077] xt_hashlimit: size too large, truncated to 1048576
[ 2046.257568][T18085] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[ 2046.338955][T18089] netlink: 'syz.2.24421': attribute type 1 has an invalid length.
[ 2046.342020][T18089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2046.382029][T18091] netlink: 'syz.4.24422': attribute type 2 has an invalid length.
[ 2046.388128][T18091] netlink: 'syz.4.24422': attribute type 8 has an invalid length.
[ 2046.445005][T18100] bridge0: entered allmulticast mode
[ 2047.042945][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2047.911983][T18143] xt_hashlimit: size too large, truncated to 1048576
[ 2048.082976][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2048.329672][T18151] xt_hashlimit: size too large, truncated to 1048576
[ 2048.568506][T18158] netlink: 'syz.1.24441': attribute type 1 has an invalid length.
[ 2048.603581][T18158] nbd0: detected capacity change from 0 to 339754496
[ 2048.606850][T17117] block nbd0: Dead connection, failed to find a fallback
[ 2048.610689][T17117] block nbd0: shutting down sockets
[ 2048.613090][T17117] blk_print_req_error: 136 callbacks suppressed
[ 2048.613100][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.619075][T17117] buffer_io_error: 138 callbacks suppressed
[ 2048.619087][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.625194][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.628768][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.631924][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.635145][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.637589][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.640392][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.643362][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.648124][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.650602][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.655329][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.659902][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.665854][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.668513][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.673215][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.676836][T17117] ldm_validate_partition_table(): Disk read failed.
[ 2048.680533][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.684911][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.688302][T17117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2048.692697][T17117] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 2048.696735][T17117] Dev nbd0: unable to read RDB block 0
[ 2048.699890][T17117]  nbd0: unable to read partition table
[ 2048.705784][T17117] ldm_validate_partition_table(): Disk read failed.
[ 2048.709735][T17117] Dev nbd0: unable to read RDB block 0
[ 2048.712092][T17117]  nbd0: unable to read partition table
[ 2049.006539][T18171] netlink: 'syz.4.24443': attribute type 1 has an invalid length.
[ 2049.010090][T18171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2049.122948][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2049.450751][T18195] xt_time: unknown flags 0xf4
[ 2049.664784][T18201] __nla_validate_parse: 9 callbacks suppressed
[ 2049.664795][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24452'.
[ 2049.765352][T18201] xt_hashlimit: size too large, truncated to 1048576
[ 2049.900133][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24454'.
[ 2049.927406][T18209] xt_hashlimit: size too large, truncated to 1048576
[ 2050.162936][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2050.398758][T18227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24459'.
[ 2050.426626][T18231] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24460'.
[ 2050.429801][T18231] unsupported nlmsg_type 40
[ 2050.465358][T18233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24461'.
[ 2050.637321][T18231] xt_hashlimit: size too large, truncated to 1048576
[ 2050.707148][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24463'.
[ 2050.835132][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24462'.
[ 2051.202958][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2052.012141][T18273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24475'.
[ 2052.218916][T18295] netlink: 'syz.2.24479': attribute type 1 has an invalid length.
[ 2052.221954][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2052.242918][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2053.114142][T18301] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 2053.240819][T18308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24483'.
[ 2053.282973][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2053.288754][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24484'.
[ 2054.322942][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2054.730372][T18333] xt_hashlimit: size too large, truncated to 1048576
[ 2055.028344][T18342] netlink: 'syz.2.24492': attribute type 1 has an invalid length.
[ 2055.036577][T18342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2055.068268][T18339] netlink: 'syz.4.24491': attribute type 1 has an invalid length.
[ 2055.362915][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2055.962662][T18373] netlink: 'syz.2.24500': attribute type 1 has an invalid length.
[ 2055.980028][T18373] __nla_validate_parse: 1 callbacks suppressed
[ 2055.980039][T18373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.24500'.
[ 2056.402863][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2056.472191][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24504'.
[ 2056.483175][T18383] xt_hashlimit: size too large, truncated to 1048576
[ 2056.985816][T18409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24512'.
[ 2056.997876][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24513'.
[ 2056.997887][T18411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.24513'.
[ 2057.442988][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2057.679489][T18419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24515'.
[ 2057.711854][T18421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24514'.
[ 2057.723854][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.726668][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24517'.
[ 2057.730673][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.737533][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24517'.
[ 2057.741153][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.743972][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24517'.
[ 2057.747313][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.750014][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.753175][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2057.755996][T18424] netlink: 'syz.4.24517': attribute type 29 has an invalid length.
[ 2058.371704][T18455] xt_hashlimit: size too large, truncated to 1048576
[ 2058.483027][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2058.864160][T18463] xt_hashlimit: size too large, truncated to 1048576
[ 2059.165225][T18480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2059.368543][T18487] xt_hashlimit: size too large, truncated to 1048576
[ 2059.523075][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2059.831078][T18503] syzkaller1: entered promiscuous mode
[ 2059.836978][T18503] syzkaller1: entered allmulticast mode
[ 2060.085188][T18516] validate_nla: 15 callbacks suppressed
[ 2060.085199][T18516] netlink: 'syz.1.24538': attribute type 1 has an invalid length.
[ 2060.089492][T18516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2060.094074][T18516] netlink: 'syz.1.24538': attribute type 1 has an invalid length.
[ 2060.111967][T18516] bond42: entered promiscuous mode
[ 2060.114133][T18516] 8021q: adding VLAN 0 to HW filter on device bond42
[ 2060.189705][T18516] bond42: (slave bridge47): making interface the new active one
[ 2060.194115][T18516] bridge47: entered promiscuous mode
[ 2060.197003][T18522] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[ 2060.201751][T18516] bridge47: left promiscuous mode
[ 2060.323020][T24362] Bluetooth: hci4: command 0x041b tx timeout
[ 2060.541254][T18542] xt_hashlimit: size too large, truncated to 1048576
[ 2060.563656][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2060.803395][T18549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2061.019099][T18554] __nla_validate_parse: 35 callbacks suppressed
[ 2061.019112][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24548'.
[ 2061.028938][T18554] xt_hashlimit: size too large, truncated to 1048576
[ 2061.181457][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24549'.
[ 2061.191253][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24549'.
[ 2061.198237][T18557] netlink: 'syz.4.24549': attribute type 18 has an invalid length.
[ 2061.203855][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24549'.
[ 2061.350417][T18564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24551'.
[ 2061.362038][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24550'.
[ 2061.474288][T18569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24552'.
[ 2061.565832][T18573] netlink: 'syz.4.24553': attribute type 1 has an invalid length.
[ 2061.570082][T18573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24553'.
[ 2061.602969][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2061.650179][T18576] netlink: 'syz.4.24553': attribute type 1 has an invalid length.
[ 2061.653705][T18576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2061.824717][T18585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24556'.
[ 2061.887608][T18587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24557'.
[ 2062.403112][T24362] Bluetooth: hci4: command 0x041b tx timeout
[ 2062.551363][T18603] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2062.643057][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2062.938291][T18626] netlink: 'syz.1.24569': attribute type 1 has an invalid length.
[ 2063.682962][    C0] net_ratelimit: 1 callbacks suppressed
[ 2063.682978][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2064.722943][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2064.852395][T18674] netlink: 'syz.2.24581': attribute type 14 has an invalid length.
[ 2064.935415][T18677] netlink: 'syz.2.24581': attribute type 1 has an invalid length.
[ 2065.292173][T18690] lo speed is unknown, defaulting to 1000
[ 2065.301172][T18690] lo speed is unknown, defaulting to 1000
[ 2065.360193][T18691] xt_hashlimit: size too large, truncated to 1048576
[ 2065.763035][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2066.189108][T18707] __nla_validate_parse: 14 callbacks suppressed
[ 2066.189119][T18707] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24590'.
[ 2066.727658][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.734404][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.741602][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.757521][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.773426][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.780975][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.788857][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.795167][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.801717][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.802947][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2066.807890][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.815844][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.820728][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.830024][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.832656][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.835783][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.838336][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.841900][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2066.845288][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24592'.
[ 2066.848877][T18717] netlink: 'syz.4.24592': attribute type 29 has an invalid length.
[ 2067.423903][T18754] sctp: [Deprecated]: syz.1.24605 (pid 18754) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2067.423903][T18754] Use struct sctp_sack_info instead
[ 2067.686286][T18764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2067.842958][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2068.882915][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2068.896010][T18797] xt_hashlimit: size too large, truncated to 1048576
[ 2069.159444][T18813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2069.162004][T18813] IPv6: NLM_F_CREATE should be set when creating new route
[ 2069.164363][T18813] IPv6: NLM_F_CREATE should be set when creating new route
[ 2069.262235][T18821] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2069.599939][T18832] xt_hashlimit: size too large, truncated to 1048576
[ 2069.922931][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2070.962980][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2070.978837][T18893] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2071.214232][T18908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2071.332506][T18907] __nla_validate_parse: 137 callbacks suppressed
[ 2071.332516][T18907] netlink: 84 bytes leftover after parsing attributes in process `syz.1.24645'.
[ 2071.340057][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24645'.
[ 2071.349623][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24647'.
[ 2071.356439][T18915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24647'.
[ 2071.537308][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24651'.
[ 2071.575330][T18930] Cannot find set identified by id 65534 to match
[ 2071.755479][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24653'.
[ 2071.762143][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24653'.
[ 2071.773959][T18933] xt_hashlimit: size too large, truncated to 1048576
[ 2072.002942][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2072.027428][T18939] validate_nla: 120 callbacks suppressed
[ 2072.027443][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.034649][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24655'.
[ 2072.042658][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.046998][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24655'.
[ 2072.051950][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.055397][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24655'.
[ 2072.059375][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.067231][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.070146][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.073562][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.076261][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.079004][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2072.081789][T18939] netlink: 'syz.4.24655': attribute type 29 has an invalid length.
[ 2073.042867][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2073.079138][T18963] xt_hashlimit: size too large, truncated to 1048576
[ 2073.346008][T18967] xt_hashlimit: size too large, truncated to 1048576
[ 2073.623221][T18975] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2074.083006][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2075.123108][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2075.320899][T18952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2075.885226][T19003] xt_hashlimit: size too large, truncated to 1048576
[ 2076.162999][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2076.211593][T19010] xt_hashlimit: size too large, truncated to 1048576
[ 2076.453701][T19020] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 2076.590009][T19019] __nla_validate_parse: 28 callbacks suppressed
[ 2076.590020][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24674'.
[ 2076.607499][T19019] xt_hashlimit: size too large, truncated to 1048576
[ 2076.877753][T19039] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24680'.
[ 2076.894610][T19041] netlink: 68 bytes leftover after parsing attributes in process `syz.1.24681'.
[ 2076.955494][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24683'.
[ 2077.096393][T19046] bond42: left promiscuous mode
[ 2077.202910][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2077.733934][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24684'.
[ 2078.161817][T19063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24688'.
[ 2078.242878][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2078.496354][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24691'.
[ 2078.778469][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24694'.
[ 2078.784482][T19084] xt_hashlimit: size too large, truncated to 1048576
[ 2078.787872][T19083] xt_hashlimit: size too large, truncated to 1048576
[ 2079.178286][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24698'.
[ 2079.206676][T19102] xt_hashlimit: size too large, truncated to 1048576
[ 2079.216599][T19103] xt_hashlimit: size too large, truncated to 1048576
[ 2079.282937][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2079.640717][T19119] syzkaller1: entered promiscuous mode
[ 2079.644372][T19119] syzkaller1: entered allmulticast mode
[ 2079.747696][T19118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24702'.
[ 2079.754536][T19118] xt_hashlimit: size too large, truncated to 1048576
[ 2079.799001][T19125] validate_nla: 12 callbacks suppressed
[ 2079.799013][T19125] netlink: 'syz.4.24704': attribute type 1 has an invalid length.
[ 2079.801350][T19123] netlink: 'syz.4.24704': attribute type 1 has an invalid length.
[ 2079.823117][T19123] netlink: 'syz.4.24704': attribute type 2 has an invalid length.
[ 2079.824177][T19125] netlink: 'syz.4.24704': attribute type 2 has an invalid length.
[ 2079.837053][T19123] netlink: 'syz.4.24704': attribute type 1 has an invalid length.
[ 2079.840864][T19125] netlink: 'syz.4.24704': attribute type 1 has an invalid length.
[ 2080.102982][T19136] xt_hashlimit: size too large, truncated to 1048576
[ 2080.322900][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2080.588487][T19176] netlink: 'syz.4.24717': attribute type 1 has an invalid length.
[ 2080.591306][T19176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2081.363042][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2081.439846][T19196] netlink: 'syz.4.24722': attribute type 142 has an invalid length.
[ 2081.788674][T19208] __nla_validate_parse: 10 callbacks suppressed
[ 2081.788687][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24725'.
[ 2081.801379][T19208] xt_hashlimit: size too large, truncated to 1048576
[ 2081.957129][T19228] bond43: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2081.975539][T19228] bond43: (slave lo): Enslaving as an active interface with an up link
[ 2081.981979][T19228] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2081.997617][ T5674] lo speed is unknown, defaulting to 1000
[ 2081.999494][ T5674] syz0: Port: 1 Link ACTIVE
[ 2082.001040][ T5674] lo speed is unknown, defaulting to 1000
[ 2082.131022][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24731'.
[ 2082.402958][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2082.559834][T19256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24737'.
[ 2082.576647][T19251] netlink: 196 bytes leftover after parsing attributes in process `syz.2.24736'.
[ 2082.585613][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24736'.
[ 2082.597118][T19251] xt_hashlimit: size too large, truncated to 1048576
[ 2082.829489][T19263] netlink: 'syz.1.24739': attribute type 1 has an invalid length.
[ 2082.832885][T19263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2083.442954][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2083.643361][T19273] x_tables: ip6_tables: sctp match: only valid for protocol 132
[ 2083.652638][T19273] netlink: 120 bytes leftover after parsing attributes in process `syz.1.24742'.
[ 2083.767550][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24743'.
[ 2083.775476][T19275] xt_hashlimit: size too large, truncated to 1048576
[ 2084.073113][T19281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24744'.
[ 2084.482909][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2084.533840][T19295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24748'.
[ 2084.768979][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24750'.
[ 2084.780071][T19302] xt_hashlimit: size too large, truncated to 1048576
[ 2084.988924][T19310] netlink: 'syz.1.24751': attribute type 5 has an invalid length.
[ 2085.029819][T19313] netlink: 'syz.1.24752': attribute type 1 has an invalid length.
[ 2085.052284][T19313] bond44: entered promiscuous mode
[ 2085.055590][T19313] 8021q: adding VLAN 0 to HW filter on device bond44
[ 2085.079333][T19313] macvtap1: entered allmulticast mode
[ 2085.102100][T19313] bond44: (slave bridge47): making interface the new active one
[ 2085.105435][T19313] bridge47: entered promiscuous mode
[ 2085.109624][T19313] bond44: (slave bridge47): Enslaving as an active interface with an up link
[ 2085.522986][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2085.871378][T19345] netlink: 'syz.1.24759': attribute type 2 has an invalid length.
[ 2086.121052][T19355] netlink: 'syz.1.24762': attribute type 1 has an invalid length.
[ 2086.125401][T19355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2086.155420][T19357] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2086.562985][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2086.715577][T19364] xt_hashlimit: size too large, truncated to 1048576
[ 2086.718471][T19363] xt_hashlimit: size too large, truncated to 1048576
[ 2086.907787][T19369] __nla_validate_parse: 8 callbacks suppressed
[ 2086.907796][T19369] netlink: 324 bytes leftover after parsing attributes in process `syz.4.24765'.
[ 2086.954352][T19372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24767'.
[ 2086.986085][T19377] netlink: 'syz.1.24769': attribute type 15 has an invalid length.
[ 2086.988710][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24769'.
[ 2086.991568][T19377] netlink: 'syz.1.24769': attribute type 15 has an invalid length.
[ 2086.996687][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24769'.
[ 2087.066956][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24769'.
[ 2087.101352][T19382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24769'.
[ 2087.111215][T19384] Cannot find set identified by id 0 to match
[ 2087.603008][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2087.811770][T19403] netlink: 'syz.1.24773': attribute type 1 has an invalid length.
[ 2087.820582][T19403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2088.059282][T19415] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24777'.
[ 2088.062248][T19415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.24777'.
[ 2088.125484][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24775'.
[ 2088.179118][T19420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24778'.
[ 2088.346866][T19435] lo speed is unknown, defaulting to 1000
[ 2088.349395][T19435] lo speed is unknown, defaulting to 1000
[ 2088.605892][T19443] batadv5: entered promiscuous mode
[ 2088.609896][T19443] 8021q: adding VLAN 0 to HW filter on device batadv5
[ 2088.642927][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2088.798328][T19448] xt_hashlimit: size too large, truncated to 1048576
[ 2089.652393][T19459] netlink: 'syz.4.24789': attribute type 4 has an invalid length.
[ 2089.661869][T19459] netlink: 'syz.4.24789': attribute type 4 has an invalid length.
[ 2089.682866][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2089.849956][T19474] gretap0: left promiscuous mode
[ 2089.888358][T19474] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2089.900851][T19474] 8021q: adding VLAN 0 to HW filter on device team0
[ 2089.914614][T19474] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2089.945884][T19474] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2089.951202][T19474] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2089.964648][T19474] veth1_vlan: left promiscuous mode
[ 2089.968605][T19474] veth0_vlan: left promiscuous mode
[ 2089.970961][T19474] veth0_vlan: entered promiscuous mode
[ 2089.975244][T19474] veth1_vlan: entered promiscuous mode
[ 2089.981430][T19474] veth1_macvtap: left promiscuous mode
[ 2089.984058][T19474] veth0_macvtap: left promiscuous mode
[ 2089.986777][T19474] veth0_macvtap: entered promiscuous mode
[ 2089.989527][T19474] veth1_macvtap: entered promiscuous mode
[ 2089.995954][T19474] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2089.999614][T19474] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2090.002636][T19474] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2090.007019][T19474] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2090.011929][T19474] gretap0: entered promiscuous mode
[ 2090.016374][T19474] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2090.019664][T19474] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2090.038695][T13524] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2090.041036][T13524] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2090.046363][T13524] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2090.048783][T13524] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2090.098225][ T5667] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2090.103817][ T5667] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.110603][ T5667] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2090.117543][ T5667] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.133290][ T5667] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2090.139737][ T5667] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.149101][ T5667] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2090.158748][ T5667] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2090.502607][ T5667] tipc: Subscription rejected, illegal request
[ 2090.723010][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2091.762900][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2091.945841][T19568] __nla_validate_parse: 31 callbacks suppressed
[ 2091.945852][T19568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24820'.
[ 2092.001216][T19575] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24822'.
[ 2092.063792][T19578] netlink: 'syz.2.24823': attribute type 1 has an invalid length.
[ 2092.066516][T19578] netlink: 'syz.2.24823': attribute type 4 has an invalid length.
[ 2092.069357][T19578] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.24823'.
[ 2092.203300][T19586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24825'.
[ 2092.802995][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2093.241125][T19616] netlink: 'syz.4.24833': attribute type 10 has an invalid length.
[ 2093.247971][T19616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24833'.
[ 2093.477593][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24834'.
[ 2093.485513][T19618] xt_hashlimit: size too large, truncated to 1048576
[ 2093.554626][T19628] netlink: 'syz.2.24837': attribute type 2 has an invalid length.
[ 2093.563482][T19628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24837'.
[ 2093.710561][T19631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24838'.
[ 2093.811122][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24839'.
[ 2093.842869][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2094.003320][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24841'.
[ 2094.014193][T19637] xt_hashlimit: size too large, truncated to 1048576
[ 2094.294831][T19641] xt_hashlimit: size too large, truncated to 1048576
[ 2094.617916][T19653] netlink: 'syz.2.24844': attribute type 1 has an invalid length.
[ 2094.621201][T19653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2094.883022][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2095.194166][T19683] netlink: 'syz.1.24851': attribute type 1 has an invalid length.
[ 2095.196714][T19683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2095.240716][T19681] sctp: [Deprecated]: syz.4.24850 (pid 19681) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2095.240716][T19681] Use struct sctp_sack_info instead
[ 2095.250999][T19681] netlink: 'syz.4.24850': attribute type 1 has an invalid length.
[ 2095.681609][T19687] netlink: 'syz.2.24852': attribute type 1 has an invalid length.
[ 2095.687331][T19687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2095.923002][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2096.139170][T19692] xt_hashlimit: size too large, truncated to 1048576
[ 2096.210359][T19701] netlink: 'syz.4.24858': attribute type 1 has an invalid length.
[ 2096.213011][T19701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2096.962929][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2097.005517][T19741] __nla_validate_parse: 11 callbacks suppressed
[ 2097.005531][T19741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24870'.
[ 2097.118361][T19745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24871'.
[ 2097.293264][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24873'.
[ 2097.297925][T19747] xt_hashlimit: size too large, truncated to 1048576
[ 2097.412321][T19760] xt_hashlimit: size too large, truncated to 1048576
[ 2097.484504][T19762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24875'.
[ 2097.628904][T19766] netlink: 540 bytes leftover after parsing attributes in process `syz.2.24877'.
[ 2097.632347][T19766] netlink: 540 bytes leftover after parsing attributes in process `syz.2.24877'.
[ 2097.771493][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24883'.
[ 2097.781152][T19779] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24882'.
[ 2097.815778][T19785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24884'.
[ 2097.821016][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24884'.
[ 2098.002935][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2098.072333][T19804] netlink: 'syz.1.24890': attribute type 1 has an invalid length.
[ 2098.080844][T19804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2098.594359][T19826] xt_hashlimit: size too large, truncated to 1048576
[ 2099.043112][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2099.105381][T19851] can: request_module (can-proto-0) failed.
[ 2099.120912][T19851] xt_hashlimit: size too large, truncated to 1048576
[ 2099.207523][T21530] Bluetooth: hci4: link tx timeout
[ 2099.209195][T21530] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2100.083094][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2100.390454][T19901] syzkaller0: entered promiscuous mode
[ 2100.401307][T19901] syzkaller0: entered allmulticast mode
[ 2101.122936][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2101.282902][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2102.162920][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2102.640605][T19998] __nla_validate_parse: 8 callbacks suppressed
[ 2102.640620][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24936'.
[ 2103.202960][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[ 2103.363329][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2103.504288][T20002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24937'.
[ 2103.540218][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24937'.
[ 2103.667657][T20006] netlink: 'syz.4.24939': attribute type 4 has an invalid length.
[ 2103.673377][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24939'.
[ 2103.676941][T20006] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24939'.
[ 2103.686895][T20006] ip6tnl1: entered allmulticast mode
[ 2104.006116][T20025] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24944'.
[ 2104.038098][T20023] xt_hashlimit: size too large, truncated to 1048576
[ 2104.250444][T20035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24946'.
[ 2104.450354][T20047] netlink: 'syz.4.24949': attribute type 2 has an invalid length.
[ 2104.453305][T20047] netlink: 'syz.4.24949': attribute type 1 has an invalid length.
[ 2104.455835][T20047] netlink: 224 bytes leftover after parsing attributes in process `syz.4.24949'.
[ 2104.748434][T20057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24951'.
[ 2104.896888][T20073] netlink: 'syz.2.24957': attribute type 21 has an invalid length.
[ 2104.902403][T20073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.24957'.
[ 2104.907980][T20073] netlink: 'syz.2.24957': attribute type 4 has an invalid length.
[ 2104.910463][T20073] netlink: 'syz.2.24957': attribute type 5 has an invalid length.
[ 2104.944258][T20073] syzkaller0: entered promiscuous mode
[ 2104.946036][T20073] syzkaller0: entered allmulticast mode
[ 2105.450296][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2107.523313][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2107.573977][T20099] netlink: 'syz.1.24963': attribute type 1 has an invalid length.
[ 2107.576538][T20099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2107.836132][T20111] xt_hashlimit: size too large, truncated to 1048576
[ 2108.248348][T20117] netlink: 'syz.4.24968': attribute type 39 has an invalid length.
[ 2108.495241][T20126] netlink: 'syz.4.24970': attribute type 1 has an invalid length.
[ 2108.503185][T20126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2108.700548][T24161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2108.706929][T24161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2108.712917][T24161] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2108.715500][T24161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2108.829801][T20129] __nla_validate_parse: 4 callbacks suppressed
[ 2108.829812][T20129] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.24972'.
[ 2108.836931][T20129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.24972'.
[ 2109.189116][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24976'.
[ 2109.281352][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24978'.
[ 2109.386773][T20150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24980'.
[ 2109.394224][T20153] netlink: 84 bytes leftover after parsing attributes in process `syz.4.24981'.
[ 2109.428785][T20158] netlink: 120 bytes leftover after parsing attributes in process `syz.4.24982'.
[ 2109.603352][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2109.699192][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24984'.
[ 2109.707225][T20165] netlink: 'syz.2.24984': attribute type 1 has an invalid length.
[ 2109.710284][T20165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2110.326524][T20171] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24986'.
[ 2110.594209][T20188] lo speed is unknown, defaulting to 1000
[ 2110.710603][T20196] netlink: 120 bytes leftover after parsing attributes in process `syz.2.24994'.
[ 2110.772243][T20197] vlan4: entered promiscuous mode
[ 2110.774485][T20197] geneve1: entered promiscuous mode
[ 2110.776416][T20197] vlan4: entered allmulticast mode
[ 2110.778441][T20197] geneve1: entered allmulticast mode
[ 2111.231372][T20224] lo speed is unknown, defaulting to 1000
[ 2111.235344][T20225] lo speed is unknown, defaulting to 1000
[ 2111.235656][T20224] lo speed is unknown, defaulting to 1000
[ 2111.341707][T20225] lo speed is unknown, defaulting to 1000
[ 2112.260193][T20245] xt_hashlimit: size too large, truncated to 1048576
[ 2112.575541][T20264] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[ 2112.632179][T20264] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 2112.634843][T20264] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 2112.638895][T20264] tipc: Resetting bearer <eth:syzkaller0>
[ 2112.785651][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2112.793023][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2112.799914][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2112.809168][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2112.837893][T20267] xt_hashlimit: size too large, truncated to 1048576
[ 2112.891079][T20280] 8021q: adding VLAN 0 to HW filter on device bond46
[ 2112.921605][T20280] 8021q: adding VLAN 0 to HW filter on device bond46
[ 2112.932343][T20280] bond46: (slave vti1): The slave device specified does not support setting the MAC address
[ 2112.943706][T20280] bond46: (slave vti1): Error -95 calling set_mac_address
[ 2112.995929][T20287] netlink: 'syz.2.25019': attribute type 21 has an invalid length.
[ 2113.118968][T20292] tipc: Enabling <eth:lo> not permitted
[ 2113.121206][T20292] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[ 2113.411931][T20302] xt_hashlimit: size too large, truncated to 1048576
[ 2113.735891][T20309] bond4: entered promiscuous mode
[ 2113.737893][T20309] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2113.752498][T20309] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2113.756084][T20309] bond4: (slave sit1): The slave device specified does not support setting the MAC address
[ 2113.762368][T20309] bond4: (slave sit1): Error -95 calling set_mac_address
[ 2113.916038][T20327] netlink: 'syz.2.25030': attribute type 1 has an invalid length.
[ 2113.925325][T20327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2113.937440][T20329] rdma_op ffff888118b389f0 conn xmit_rdma 0000000000000000
[ 2114.077324][T20329] __nla_validate_parse: 23 callbacks suppressed
[ 2114.077336][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25033'.
[ 2114.118386][T20337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25035'.
[ 2114.152504][T20339] netlink: 120 bytes leftover after parsing attributes in process `syz.2.25036'.
[ 2114.376394][T20358] netlink: 76 bytes leftover after parsing attributes in process `syz.4.25041'.
[ 2114.438617][T20356] netlink: 'syz.1.25040': attribute type 39 has an invalid length.
[ 2115.219123][T20374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2115.224059][T20374] syzkaller0: entered promiscuous mode
[ 2115.230456][T20374] syzkaller0: entered allmulticast mode
[ 2115.262048][T20374] tipc: Resetting bearer <eth:syzkaller0>
[ 2115.270702][T20376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2115.275550][T20373] tipc: Resetting bearer <eth:syzkaller0>
[ 2115.296659][T20373] tipc: Disabling bearer <eth:syzkaller0>
[ 2115.301969][T20376] syzkaller0: entered promiscuous mode
[ 2115.305401][T20376] syzkaller0: entered allmulticast mode
[ 2115.317867][T20375] tipc: Resetting bearer <eth:syzkaller0>
[ 2115.350566][T20375] tipc: Disabling bearer <eth:syzkaller0>
[ 2115.436588][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25049'.
[ 2115.460765][T20380] syz.2.25049: page allocation failure: order:9, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2115.481899][T20380] CPU: 0 UID: 0 PID: 20380 Comm: syz.2.25049 Not tainted syzkaller #0 PREEMPT(full) 
[ 2115.481944][T20380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2115.481954][T20380] Call Trace:
[ 2115.481960][T20380]  <TASK>
[ 2115.481968][T20380]  dump_stack_lvl+0xe8/0x150
[ 2115.481990][T20380]  warn_alloc+0x249/0x340
[ 2115.482015][T20380]  ? __pfx_warn_alloc+0x10/0x10
[ 2115.482039][T20380]  ? __pfx___alloc_pages_direct_reclaim+0x10/0x10
[ 2115.482075][T20380]  ? wake_all_kswapds+0x167/0x280
[ 2115.482097][T20380]  __alloc_pages_slowpath+0xcac/0xd40
[ 2115.482131][T20380]  __alloc_frozen_pages_noprof+0x322/0x380
[ 2115.482152][T20380]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2115.482174][T20380]  ? __pfx_policy_nodemask+0x10/0x10
[ 2115.482191][T20380]  ? tc_new_tfilter+0xff8/0x1780
[ 2115.482205][T20380]  ? rtnetlink_rcv_msg+0x7d5/0xbe0
[ 2115.482220][T20380]  ? netlink_rcv_skb+0x232/0x4b0
[ 2115.482231][T20380]  ? netlink_unicast+0x75c/0x8e0
[ 2115.482247][T20380]  ? netlink_sendmsg+0x813/0xb40
[ 2115.482258][T20380]  ? ___sys_sendmsg+0x2a5/0x360
[ 2115.482268][T20380]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[ 2115.482278][T20380]  ? do_syscall_64+0x15f/0xf80
[ 2115.482297][T20380]  alloc_pages_mpol+0x235/0x490
[ 2115.482318][T20380]  ___kmalloc_large_node+0x4e/0x120
[ 2115.482334][T20380]  __kmalloc_large_node_noprof+0x18/0x90
[ 2115.482350][T20380]  __kmalloc_noprof+0x3e8/0x760
[ 2115.482366][T20380]  ? tcf_em_tree_validate+0x1cd/0x11b0
[ 2115.482381][T20380]  tcf_em_tree_validate+0x1cd/0x11b0
[ 2115.482400][T20380]  ? __kmalloc_cache_noprof+0x31c/0x660
[ 2115.482415][T20380]  ? tcf_exts_init_ex+0x10e/0x7c0
[ 2115.482431][T20380]  ? __pfx_tcf_em_tree_validate+0x10/0x10
[ 2115.482456][T20380]  ? tcf_exts_validate+0x42/0x60
[ 2115.482479][T20380]  cls_cgroup_change+0x3d1/0x550
[ 2115.482496][T20380]  ? __pfx_cls_cgroup_change+0x10/0x10
[ 2115.482518][T20380]  tc_new_tfilter+0xff8/0x1780
[ 2115.482547][T20380]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 2115.482571][T20380]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 2115.482595][T20380]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 2115.482607][T20380]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 2115.482624][T20380]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[ 2115.482637][T20380]  ? netlink_sendmsg+0x5d4/0xb40
[ 2115.482652][T20380]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 2115.482665][T20380]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2115.482702][T20380]  ? __lock_acquire+0x6b5/0x2cf0
[ 2115.482743][T20380]  netlink_rcv_skb+0x232/0x4b0
[ 2115.482756][T20380]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2115.482774][T20380]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2115.482792][T20380]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2115.482804][T20380]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2115.482818][T20380]  netlink_unicast+0x75c/0x8e0
[ 2115.482843][T20380]  netlink_sendmsg+0x813/0xb40
[ 2115.482863][T20380]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2115.482877][T20380]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2115.482896][T20380]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2115.482916][T20380]  ____sys_sendmsg+0x972/0x9f0
[ 2115.482956][T20380]  ? __might_fault+0xaf/0x130
[ 2115.482977][T20380]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2115.482995][T20380]  ? import_iovec+0x73/0xa0
[ 2115.483016][T20380]  ___sys_sendmsg+0x2a5/0x360
[ 2115.483028][T20380]  ? __lock_acquire+0x6b5/0x2cf0
[ 2115.483044][T20380]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2115.483060][T20380]  ? futex_wait+0x2a2/0x390
[ 2115.483088][T20380]  ? __fget_files+0x2a/0x420
[ 2115.483100][T20380]  ? __fget_files+0x3a0/0x420
[ 2115.483117][T20380]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2115.483128][T20380]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2115.483146][T20380]  ? rcu_is_watching+0x15/0xb0
[ 2115.483167][T20380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2115.483180][T20380]  do_syscall_64+0x15f/0xf80
[ 2115.483197][T20380]  ? trace_irq_disable+0x3b/0x140
[ 2115.483217][T20380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2115.483229][T20380] RIP: 0033:0x7f080299ce59
[ 2115.483242][T20380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2115.483252][T20380] RSP: 002b:00007f0803797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2115.483265][T20380] RAX: ffffffffffffffda RBX: 00007f0802c15fa0 RCX: 00007f080299ce59
[ 2115.483273][T20380] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000007
[ 2115.483280][T20380] RBP: 00007f0802a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 2115.483287][T20380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2115.483294][T20380] R13: 00007f0802c16038 R14: 00007f0802c15fa0 R15: 00007ffeaf92f098
[ 2115.483313][T20380]  </TASK>
[ 2115.702538][T20380] Mem-Info:
[ 2115.703779][T20380] active_anon:944 inactive_anon:1231 isolated_anon:0
[ 2115.703779][T20380]  active_file:645 inactive_file:1710 isolated_file:0
[ 2115.703779][T20380]  unevictable:1768 dirty:16 writeback:0
[ 2115.703779][T20380]  slab_reclaimable:11178 slab_unreclaimable:960394
[ 2115.703779][T20380]  mapped:27354 shmem:2607 pagetables:1788
[ 2115.703779][T20380]  sec_pagetables:0 bounce:0
[ 2115.703779][T20380]  kernel_misc_reclaimable:0
[ 2115.703779][T20380]  free:216339 free_pcp:3025 free_cma:0
[ 2115.725489][T20380] Node 0 active_anon:1544kB inactive_anon:2240kB active_file:276kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:67116kB dirty:32kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10752kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2115.737149][T20380] Node 1 active_anon:3732kB inactive_anon:2684kB active_file:2304kB inactive_file:6632kB unevictable:3436kB isolated(anon):100kB isolated(file):0kB mapped:43600kB dirty:32kB writeback:0kB shmem:7140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6216kB pagetables:3296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2115.749248][T20380] Node 0 DMA free:9144kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2115.778208][T20380] lowmem_reserve[]: 0 1587 2117 2117 2117
[ 2115.780428][T20380] Node 0 DMA32 free:128948kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:392kB active_file:72kB inactive_file:92kB unevictable:0kB writepending:8kB zspages:32kB present:2080636kB managed:1625132kB mlocked:0kB bounce:0kB free_pcp:6688kB local_pcp:6120kB free_cma:0kB
[ 2115.793248][T20380] lowmem_reserve[]: 0 0 530 530 530
[ 2115.794907][T20380] Node 0 Normal free:23236kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1380kB inactive_anon:1884kB active_file:288kB inactive_file:148kB unevictable:3536kB writepending:24kB zspages:4160kB present:1572868kB managed:543144kB mlocked:0kB bounce:0kB free_pcp:3444kB local_pcp:2228kB free_cma:0kB
[ 2115.805727][T20380] lowmem_reserve[]: 0 0 0 0 0
[ 2115.816959][T20380] Node 1 Normal free:696460kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7732kB inactive_anon:2684kB active_file:2304kB inactive_file:6632kB unevictable:1936kB writepending:32kB zspages:2640kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:2860kB local_pcp:1848kB free_cma:0kB
[ 2115.829702][T20380] lowmem_reserve[]: 0 0 0 0 0
[ 2115.831265][T20380] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 3*2048kB (UME) 0*4096kB = 9144kB
[ 2115.836479][T20380] Node 0 DMA32: 439*4kB (UME) 405*8kB (UME) 383*16kB (UME) 252*32kB (UME) 365*64kB (UME) 257*128kB (UM) 157*256kB (UM) 20*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 128948kB
[ 2115.853081][T20380] Node 0 Normal: 272*4kB (UME) 348*8kB (UME) 713*16kB (UME) 168*32kB (UME) 31*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23024kB
[ 2115.859865][T20380] Node 1 Normal: 398*4kB (UME) 1847*8kB (UME) 3293*16kB (UE) 915*32kB (UE) 1989*64kB (UME) 1319*128kB (UME) 800*256kB (UM) 176*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 692448kB
[ 2115.873265][T20380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2115.880279][T20380] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2115.886474][T20380] 9424 total pagecache pages
[ 2115.890411][T20380] 1207 pages in swap cache
[ 2115.891817][T20380] Free swap  = 97712kB
[ 2115.915150][T20380] Total swap = 124996kB
[ 2115.916556][T20380] 1834877 pages RAM
[ 2115.917999][T20380] 0 pages HighMem/MovableOnly
[ 2115.922390][T20380] 390297 pages reserved
[ 2115.942536][T20380] 0 pages cma reserved
[ 2115.957736][T20382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.25050'.
[ 2115.976093][T20382] xt_hashlimit: size too large, truncated to 1048576
[ 2116.068694][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25049'.
[ 2116.551736][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25054'.
[ 2116.566029][T20401] xt_hashlimit: size too large, truncated to 1048576
[ 2116.765874][T20403] netlink: 'syz.2.25055': attribute type 1 has an invalid length.
[ 2116.782639][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25055'.
[ 2116.804043][T20403] xt_hashlimit: size too large, truncated to 1048576
[ 2117.010997][T20410] netlink: 'syz.4.25057': attribute type 83 has an invalid length.
[ 2117.215990][T20427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25061'.
[ 2117.379952][T20441] xt_socket: unknown flags 0x4
[ 2117.999303][T20469] netlink: 'syz.4.25072': attribute type 1 has an invalid length.
[ 2118.001963][T20469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2118.848631][T20511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2118.850975][T20511] IPv6: NLM_F_CREATE should be set when creating new route
[ 2119.140483][T20524] __nla_validate_parse: 16 callbacks suppressed
[ 2119.140592][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25088'.
[ 2119.191147][T20527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25089'.
[ 2119.238670][T20530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25090'.
[ 2119.390063][T20539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25092'.
[ 2119.437709][T20541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.25093'.
[ 2119.985649][T20551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25096'.
[ 2120.003431][T20551] pim6reg99999991: entered allmulticast mode
[ 2120.066814][T20563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25100'.
[ 2120.071642][T20562] netlink: 'syz.2.25099': attribute type 12 has an invalid length.
[ 2120.134340][T20565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25099'.
[ 2120.144537][T20566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25101'.
[ 2120.150838][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25101'.
[ 2120.926688][T20585] bond4: entered allmulticast mode
[ 2120.947341][T20585] bond0: entered promiscuous mode
[ 2120.950822][T20585] bond_slave_0: entered promiscuous mode
[ 2120.955331][T20585] bond_slave_1: entered promiscuous mode
[ 2121.708282][T20618] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2121.919938][T20629] tipc: Resetting bearer <eth:syzkaller0>
[ 2121.936869][T20629] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 2121.940061][T20629] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 2121.952438][T20629] bond44: left promiscuous mode
[ 2121.954501][T20629] bridge47: left promiscuous mode
[ 2121.958355][T20629] macvtap1: left allmulticast mode
[ 2121.970418][T24161] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2121.975857][T24161] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2121.979941][T24161] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2121.985481][T24161] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2121.988840][T24161] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2121.991739][T24161] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2121.995043][T24161] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2121.997717][T24161] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2122.822102][T20636] xt_hashlimit: size too large, truncated to 1048576
[ 2123.009752][T20647] xt_hashlimit: size too large, truncated to 1048576
[ 2123.350007][T20664] lo: Caught tx_queue_len zero misconfig
[ 2123.446263][T20669] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 2123.557157][T20672] netlink: 'syz.4.25128': attribute type 1 has an invalid length.
[ 2123.560034][T20672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2124.405253][T20689] __nla_validate_parse: 8 callbacks suppressed
[ 2124.405269][T20689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25133'.
[ 2124.872454][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25136'.
[ 2124.959889][T20698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25135'.
[ 2125.332295][T20714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25140'.
[ 2125.386063][T20716] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2125.418063][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25143'.
[ 2125.443338][T20724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25143'.
[ 2125.447309][T20723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25143'.
[ 2125.846752][T20736] netlink: 27 bytes leftover after parsing attributes in process `syz.1.25147'.
[ 2125.906697][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25148'.
[ 2125.912964][T20744] netlink: 94 bytes leftover after parsing attributes in process `syz.1.25148'.
[ 2126.297247][T20758] xt_hashlimit: size too large, truncated to 1048576
[ 2126.352091][T20762] x_tables: duplicate underflow at hook 1
[ 2127.425704][T13524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2127.428236][T13524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2127.573716][T20828] netlink: 'syz.1.25173': attribute type 29 has an invalid length.
[ 2127.602408][T20828] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2127.924932][T20830] xt_hashlimit: size too large, truncated to 1048576
[ 2128.553749][T20844] xt_hashlimit: size too large, truncated to 1048576
[ 2128.556022][T20847] xt_hashlimit: size too large, truncated to 1048576
[ 2128.912296][T20873] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 2128.916921][T20871] netlink: 'syz.2.25184': attribute type 1 has an invalid length.
[ 2128.920141][T20873] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 2128.922463][T20871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2128.927347][T20873] tipc: Resetting bearer <eth:syzkaller0>
[ 2129.155475][T20880] xt_hashlimit: size too large, truncated to 1048576
[ 2129.449622][T20886] netlink: 'syz.1.25190': attribute type 1 has an invalid length.
[ 2129.453318][T20886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2129.468569][T20888] __nla_validate_parse: 22 callbacks suppressed
[ 2129.468579][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25191'.
[ 2129.700213][T20888] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2129.702667][T20888] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2129.716643][T20888] bond0: left promiscuous mode
[ 2129.719232][T20888] bond_slave_0: left promiscuous mode
[ 2129.720997][T20888] bond_slave_1: left promiscuous mode
[ 2129.788001][T20892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25192'.
[ 2129.869783][T20888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2129.886639][T20888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2130.030399][T20888] geneve1: left allmulticast mode
[ 2130.123428][T20888] bond2: left promiscuous mode
[ 2130.126402][T20888] veth3: left promiscuous mode
[ 2130.204704][T20888] ip6tnl1: left allmulticast mode
[ 2130.247105][T15412] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2130.252312][T15412] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2130.258444][T15412] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2130.264381][T15412] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2130.271198][T15412] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2130.286405][T15412] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2130.292660][T15412] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2130.312005][T15412] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2130.397333][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25198'.
[ 2130.450248][T20926] sctp: [Deprecated]: syz.1.25199 (pid 20926) Use of int in max_burst socket option.
[ 2130.450248][T20926] Use struct sctp_assoc_value instead
[ 2130.571769][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25201'.
[ 2130.678205][T20946] xt_socket: unknown flags 0x8
[ 2131.526917][T20972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25214'.
[ 2131.552222][T20972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25214'.
[ 2131.585975][T20975] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25215'.
[ 2131.774415][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25213'.
[ 2131.779718][T20978] xt_hashlimit: size too large, truncated to 1048576
[ 2132.692276][T21008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25224'.
[ 2132.747213][T21005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25222'.
[ 2133.589176][T21064] IPVS: length: 35 != 24
[ 2133.968232][T21083] netlink: 'syz.2.25241': attribute type 12 has an invalid length.
[ 2134.340550][T21116] netlink: 'syz.1.25250': attribute type 1 has an invalid length.
[ 2134.344345][T21116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2134.589221][T21122] __nla_validate_parse: 8 callbacks suppressed
[ 2134.589233][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25253'.
[ 2134.609840][T21122] xt_hashlimit: size too large, truncated to 1048576
[ 2134.846385][T21136] syzkaller1: entered promiscuous mode
[ 2134.848759][T21136] syzkaller1: entered allmulticast mode
[ 2134.960653][T21142] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.25259'.
[ 2134.972222][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25259'.
[ 2135.018816][T21150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25261'.
[ 2135.168042][T21158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25265'.
[ 2135.944015][T21173] openvswitch: netlink: Duplicate key (type 21).
[ 2136.112634][T21177] netlink: 'syz.1.25273': attribute type 1 has an invalid length.
[ 2136.116870][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2136.512106][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25275'.
[ 2136.672327][T21186] bridge_slave_0: left allmulticast mode
[ 2136.674697][T21186] bridge_slave_0: left promiscuous mode
[ 2136.677159][T21186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2136.681929][T21186] bridge_slave_1: left allmulticast mode
[ 2136.684681][T21186] bridge_slave_1: left promiscuous mode
[ 2136.686834][T21186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2136.696860][T21186] bond0: (slave bond_slave_0): Releasing backup interface
[ 2136.703845][T21186] bond0: (slave bond_slave_1): Releasing backup interface
[ 2136.708654][T21186] team0: Port device team_slave_0 removed
[ 2136.712468][T21186] team0: Port device team_slave_1 removed
[ 2136.715590][T21186] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2136.719096][T21186] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2136.727150][T21186] bond2: (slave veth3): Releasing backup interface
[ 2136.746198][T21186] team0: Mode changed to "activebackup"
[ 2136.898335][T21194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25280'.
[ 2136.958476][T21198] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 2137.171514][T21219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25287'.
[ 2137.174695][T21220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25287'.
[ 2137.188950][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25287'.
[ 2137.428013][T21235] netlink: 'syz.4.25291': attribute type 3 has an invalid length.
[ 2138.501343][T21269] syzkaller0: entered promiscuous mode
[ 2138.508020][T21269] syzkaller0: entered allmulticast mode
[ 2138.977372][T21284] IPVS: length: 38 != 8
[ 2139.111669][T21288] xt_hashlimit: size too large, truncated to 1048576
[ 2139.613332][T21323] __nla_validate_parse: 10 callbacks suppressed
[ 2139.613344][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25320'.
[ 2139.642389][T21323] xt_hashlimit: size too large, truncated to 1048576
[ 2140.204650][T21339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25324'.
[ 2140.400104][T21353] netlink: 'syz.4.25329': attribute type 1 has an invalid length.
[ 2140.402622][T21353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2140.436336][T21353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25329'.
[ 2140.449652][T21353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25329'.
[ 2140.450598][T21361] netlink: 148 bytes leftover after parsing attributes in process `syz.1.25332'.
[ 2140.460706][T21353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.25329'.
[ 2140.556024][T21369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25335'.
[ 2140.720939][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25336'.
[ 2140.907382][T21379] xt_hashlimit: size too large, truncated to 1048576
[ 2141.100055][T21383] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25338'.
[ 2141.228546][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25339'.
[ 2141.236917][T21385] xt_hashlimit: size too large, truncated to 1048576
[ 2141.575042][T15412] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[ 2142.317467][T21393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2142.498491][T21420] xt_hashlimit: size too large, truncated to 1048576
[ 2142.557269][T21421] xt_hashlimit: size too large, truncated to 1048576
[ 2142.933899][T21449] syzkaller1: entered promiscuous mode
[ 2142.935823][T21449] syzkaller1: entered allmulticast mode
[ 2143.074864][T21454] xt_hashlimit: size too large, truncated to 1048576
[ 2143.078756][T21456] xt_hashlimit: size too large, truncated to 1048576
[ 2143.133577][T21464] openvswitch: netlink: Flow key attr not present in new flow.
[ 2143.461500][T21468] vlan4: left promiscuous mode
[ 2143.463509][T21468] geneve1: left promiscuous mode
[ 2143.465297][T21468] vlan4: left allmulticast mode
[ 2143.467317][T21468] geneve1: left allmulticast mode
[ 2144.563524][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2145.147329][T21536] __nla_validate_parse: 16 callbacks suppressed
[ 2145.147398][T21536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25377'.
[ 2145.235830][T21539] openvswitch: netlink: Duplicate key (type 21).
[ 2145.437946][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25380'.
[ 2145.488472][T21547] xt_hashlimit: size too large, truncated to 1048576
[ 2146.434033][T21561] xt_hashlimit: size too large, truncated to 1048576
[ 2146.540324][T21575] openvswitch: netlink: Duplicate key (type 21).
[ 2146.642979][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2147.447828][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25395'.
[ 2147.459448][T21593] xt_hashlimit: size too large, truncated to 1048576
[ 2147.674767][T21597] netlink: 624 bytes leftover after parsing attributes in process `syz.1.25396'.
[ 2147.990385][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25397'.
[ 2147.997745][T21599] xt_hashlimit: size too large, truncated to 1048576
[ 2148.187590][T21607] netlink: 'syz.2.25399': attribute type 2 has an invalid length.
[ 2148.225084][T21609] netlink: 120 bytes leftover after parsing attributes in process `syz.4.25400'.
[ 2148.386505][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25402'.
[ 2148.471123][T21618] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.25402'.
[ 2148.673240][T21627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25405'.
[ 2148.704154][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25406'.
[ 2148.795892][T21633] SET target dimension over the limit!
[ 2148.799006][T21633] tipc: Resetting bearer <eth:syzkaller0>
[ 2148.806169][T21633] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 2148.808613][T21633] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 2149.668378][T21659] xt_hashlimit: size too large, truncated to 1048576
[ 2149.965383][T21670] netlink: 'syz.1.25419': attribute type 1 has an invalid length.
[ 2149.968119][T21670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2150.166491][T21683] __nla_validate_parse: 8 callbacks suppressed
[ 2150.166500][T21683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25424'.
[ 2150.367553][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25425'.
[ 2150.378093][T21685] xt_hashlimit: size too large, truncated to 1048576
[ 2150.904965][T21709] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25431'.
[ 2151.264948][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25436'.
[ 2152.083190][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2152.360139][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25442'.
[ 2152.368287][T21751] xt_hashlimit: size too large, truncated to 1048576
[ 2154.760266][T21740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2154.765484][T21755] netlink: 120 bytes leftover after parsing attributes in process `syz.4.25443'.
[ 2154.859679][T21762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25445'.
[ 2155.071970][T21769] bond26: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2155.080391][T21769] bond26: (slave lo): Enslaving as an active interface with an up link
[ 2155.083559][T21769] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2155.089486][T20176] lo speed is unknown, defaulting to 1000
[ 2155.091826][T20176] syz2: Port: 1 Link ACTIVE
[ 2155.093956][T16211] lo speed is unknown, defaulting to 1000
[ 2155.147170][T21777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25451'.
[ 2155.287968][T21791] netlink: 'syz.2.25454': attribute type 3 has an invalid length.
[ 2155.295504][T21791] netlink: 3 bytes leftover after parsing attributes in process `syz.2.25454'.
[ 2155.488452][T21796] netlink: 'syz.2.25456': attribute type 1 has an invalid length.
[ 2155.491464][T21796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2155.886599][T21802] netlink: 'syz.4.25457': attribute type 1 has an invalid length.
[ 2155.889238][T21802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2156.037025][T21806] openvswitch: netlink: Duplicate key (type 21).
[ 2156.286524][T21812] openvswitch: netlink: Duplicate key (type 21).
[ 2156.838362][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25461'.
[ 2156.857360][T21814] xt_hashlimit: size too large, truncated to 1048576
[ 2157.158878][T21826] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2157.178155][T21826] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 2157.374694][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25467'.
[ 2157.384671][T21835] xt_hashlimit: size too large, truncated to 1048576
[ 2157.388660][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25466'.
[ 2157.609992][T21848] netlink: 48 bytes leftover after parsing attributes in process `syz.4.25470'.
[ 2157.725337][T21862] openvswitch: netlink: IP tunnel dst address not specified
[ 2157.728267][T21862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2157.750332][T21864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25472'.
[ 2157.766291][T21862] netlink: 'syz.4.25471': attribute type 4 has an invalid length.
[ 2157.768777][T21862] netlink: 240 bytes leftover after parsing attributes in process `syz.4.25471'.
[ 2158.041059][T21889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25479'.
[ 2158.188326][T21906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25483'.
[ 2158.323683][T21910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25485'.
[ 2158.899315][T21941] xt_hashlimit: size too large, truncated to 1048576
[ 2159.009827][T21948] xt_hashlimit: size too large, truncated to 1048576
[ 2159.421236][T21957] sctp: [Deprecated]: syz.2.25497 (pid 21957) Use of int in max_burst socket option.
[ 2159.421236][T21957] Use struct sctp_assoc_value instead
[ 2159.961985][T21980] xt_hashlimit: size too large, truncated to 1048576
[ 2160.558969][T21999] __nla_validate_parse: 7 callbacks suppressed
[ 2160.558985][T21999] netlink: 120 bytes leftover after parsing attributes in process `syz.1.25508'.
[ 2160.690949][T22006] netlink: 'syz.1.25509': attribute type 1 has an invalid length.
[ 2160.726543][T22006] bond47: entered promiscuous mode
[ 2160.729102][T22006] 8021q: adding VLAN 0 to HW filter on device bond47
[ 2160.755279][T22006] 8021q: adding VLAN 0 to HW filter on device bond48
[ 2160.760854][T22006] bond47: (slave bond48): making interface the new active one
[ 2160.765827][T22006] bond48: entered promiscuous mode
[ 2160.769445][T22006] bond47: (slave bond48): Enslaving as an active interface with an up link
[ 2161.509741][T22035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25517'.
[ 2161.612689][T22041] netlink: 104 bytes leftover after parsing attributes in process `syz.1.25518'.
[ 2162.102545][T22056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25522'.
[ 2162.108177][T22056] netlink: 260 bytes leftover after parsing attributes in process `syz.2.25522'.
[ 2162.290905][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25524'.
[ 2162.334045][T22063] xt_hashlimit: size too large, truncated to 1048576
[ 2162.652005][T22080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.25528'.
[ 2162.699796][T22080] syzkaller1: entered promiscuous mode
[ 2162.723137][T22080] syzkaller1: entered allmulticast mode
[ 2162.847827][T22098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25532'.
[ 2162.958120][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25533'.
[ 2163.104726][T22106] netlink: 68 bytes leftover after parsing attributes in process `syz.1.25535'.
[ 2164.027372][T22130] ip6t_srh: unknown srh match flags  4000
[ 2164.147020][T22132] smc: net device wlan0 applied user defined pnetid SYZ0
[ 2164.366225][T22144] netlink: 'syz.2.25550': attribute type 4 has an invalid length.
[ 2164.377299][T22142] netlink: 'syz.1.25549': attribute type 1 has an invalid length.
[ 2164.379998][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2164.384093][T22142] netlink: 'syz.1.25549': attribute type 1 has an invalid length.
[ 2164.677381][T22163] SET target dimension over the limit!
[ 2165.475219][T22175] netlink: 'syz.1.25560': attribute type 1 has an invalid length.
[ 2165.480948][T22175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2165.539065][T22179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2165.639705][T22182] __nla_validate_parse: 6 callbacks suppressed
[ 2165.639715][T22182] netlink: 176 bytes leftover after parsing attributes in process `syz.2.25563'.
[ 2166.346785][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.350805][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.353799][T22221] netlink: 348 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.356692][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.359474][T22221] netlink: 348 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.362304][T22221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25569'.
[ 2166.559118][T22228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25571'.
[ 2167.065464][T22240] netlink: 'syz.4.25574': attribute type 1 has an invalid length.
[ 2167.068051][T22240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2167.071839][T22239] lo speed is unknown, defaulting to 1000
[ 2167.076011][T22239] lo speed is unknown, defaulting to 1000
[ 2167.099309][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25575'.
[ 2167.126820][T22243] bond49: entered promiscuous mode
[ 2167.132295][T22243] 8021q: adding VLAN 0 to HW filter on device bond49
[ 2167.166910][T22243] 8021q: adding VLAN 0 to HW filter on device bond49
[ 2167.175326][T22243] bond49: (slave vti1): The slave device specified does not support setting the MAC address
[ 2167.179556][T22243] bond49: (slave vti1): Error -95 calling set_mac_address
[ 2167.511394][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25577'.
[ 2167.611942][T22247] netlink: 'syz.2.25576': attribute type 5 has an invalid length.
[ 2167.645187][T22247] xt_hashlimit: size too large, truncated to 1048576
[ 2168.215275][T22270] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[ 2169.129814][T22303] xt_hashlimit: size too large, truncated to 1048576
[ 2169.699345][T22315] bond47: left promiscuous mode
[ 2169.701491][T22315] bond48: left promiscuous mode
[ 2170.648963][T22367] __nla_validate_parse: 7 callbacks suppressed
[ 2170.648973][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25610'.
[ 2171.727423][T22379] netlink: 120 bytes leftover after parsing attributes in process `syz.2.25614'.
[ 2171.902444][T22388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25617'.
[ 2171.947171][T22391] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 2172.301160][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25619'.
[ 2172.527827][T22407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25622'.
[ 2172.683235][T22415] netlink: 'syz.2.25624': attribute type 1 has an invalid length.
[ 2172.685860][T22412] netlink: 'syz.2.25624': attribute type 1 has an invalid length.
[ 2172.688380][T22412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2172.692280][T22415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2173.443749][T22423] netlink: 'syz.4.25626': attribute type 11 has an invalid length.
[ 2173.446419][T22423] netlink: 'syz.4.25626': attribute type 4 has an invalid length.
[ 2173.449182][T22423] netlink: 'syz.4.25626': attribute type 6 has an invalid length.
[ 2173.451735][T22423] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.25626'.
[ 2173.696598][T22440] netlink: 'syz.4.25631': attribute type 4 has an invalid length.
[ 2173.850304][T22452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25634'.
[ 2173.856620][T22452] netlink: 'syz.1.25634': attribute type 21 has an invalid length.
[ 2173.859145][T22452] netlink: 'syz.1.25634': attribute type 6 has an invalid length.
[ 2173.861648][T22452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.25634'.
[ 2173.937320][T22456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25636'.
[ 2174.414165][T22468] vlan5: entered promiscuous mode
[ 2174.415883][T22468] bridge0: entered promiscuous mode
[ 2174.457921][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25640'.
[ 2174.690960][T22484] SET target dimension over the limit!
[ 2175.514585][T22518] xt_hashlimit: size too large, truncated to 1048576
[ 2176.025970][T22530] __nla_validate_parse: 8 callbacks suppressed
[ 2176.025982][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25654'.
[ 2176.040085][T22530] xt_hashlimit: size too large, truncated to 1048576
[ 2176.220009][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25656'.
[ 2176.231070][T22540] xt_hashlimit: size too large, truncated to 1048576
[ 2176.344152][T22554] netlink: 'syz.1.25659': attribute type 4 has an invalid length.
[ 2176.409582][T22554] netlink: 'syz.1.25659': attribute type 4 has an invalid length.
[ 2176.468897][T22559] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25661'.
[ 2176.472030][T22560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25661'.
[ 2176.529012][T22564] netlink: 120 bytes leftover after parsing attributes in process `syz.1.25662'.
[ 2176.904556][T22593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25664'.
[ 2176.984990][T22603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25666'.
[ 2176.989854][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25666'.
[ 2176.996815][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25666'.
[ 2177.259370][T22609] bridge0: port 1(ipvlan2) entered blocking state
[ 2177.261563][T22609] bridge0: port 1(ipvlan2) entered disabled state
[ 2177.264294][T22609] ipvlan2: entered allmulticast mode
[ 2177.267228][T22609] ipvlan2: left allmulticast mode
[ 2177.308497][T22610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25668'.
[ 2177.314943][T22610] xt_hashlimit: size too large, truncated to 1048576
[ 2177.986188][T22640] : entered promiscuous mode
[ 2178.792618][T22690] xt_hashlimit: size too large, truncated to 1048576
[ 2179.721973][T22721] bridge_slave_1: entered allmulticast mode
[ 2179.834694][T22727] syzkaller0: entered promiscuous mode
[ 2179.836813][T22727] syzkaller0: entered allmulticast mode
[ 2179.879490][T22723] netlink: 'syz.4.25700': attribute type 1 has an invalid length.
[ 2179.886454][T22723] xt_hashlimit: size too large, truncated to 1048576
[ 2180.770375][T22783] netlink: 'syz.2.25716': attribute type 5 has an invalid length.
[ 2180.953940][T22790] openvswitch: netlink: IP tunnel dst address not specified
[ 2180.959013][T22790] xt_hashlimit: size too large, truncated to 1048576
[ 2181.185274][T22797] __nla_validate_parse: 19 callbacks suppressed
[ 2181.185284][T22797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25721'.
[ 2181.195647][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25721'.
[ 2181.359829][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25723'.
[ 2181.851363][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25729'.
[ 2182.403007][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2182.431110][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25741'.
[ 2182.440297][T22858] block nbd1: NBD_DISCONNECT
[ 2182.442240][T22858] block nbd1: Send disconnect failed -32
[ 2182.470914][T22856] bond42: option ad_actor_sys_prio: invalid value (0)
[ 2182.473689][T22856] bond42: option ad_actor_sys_prio: allowed values 1 - 65535
[ 2182.477495][T22856] bond42 (unregistering): Released all slaves
[ 2182.561114][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25744'.
[ 2182.706328][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25745'.
[ 2182.720632][T22869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25745'.
[ 2182.730880][T22869] xt_hashlimit: size too large, truncated to 1048576
[ 2182.781089][T22870] xt_hashlimit: size too large, truncated to 1048576
[ 2182.794345][T22877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25746'.
[ 2182.819019][T22874] bond5 (unregistering): Released all slaves
[ 2182.892422][T22881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25747'.
[ 2183.382483][T22901] xt_hashlimit: size too large, truncated to 1048576
[ 2184.714100][T22963] xt_hashlimit: size too large, truncated to 1048576
[ 2185.719407][T22985] netlink: 'syz.1.25776': attribute type 1 has an invalid length.
[ 2185.722591][T22985] netlink: 'syz.1.25776': attribute type 3 has an invalid length.
[ 2185.725494][T22985] NCSI netlink: No device for ifindex 813332851
[ 2186.235349][T22993] bond42: entered promiscuous mode
[ 2186.237984][T22993] 8021q: adding VLAN 0 to HW filter on device bond42
[ 2186.431763][T23001] __nla_validate_parse: 7 callbacks suppressed
[ 2186.431778][T23001] netlink: 240 bytes leftover after parsing attributes in process `syz.2.25778'.
[ 2186.695512][T23008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.25781'.
[ 2186.746060][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25781'.
[ 2186.858609][T23014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25784'.
[ 2187.030438][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25783'.
[ 2187.108179][T23019] xt_hashlimit: size too large, truncated to 1048576
[ 2187.210576][T23033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25788'.
[ 2187.336046][T23037] netlink: 72 bytes leftover after parsing attributes in process `syz.1.25788'.
[ 2187.492567][T23035] netlink: 9 bytes leftover after parsing attributes in process `syz.1.25788'.
[ 2187.498754][T23035] netlink: 5 bytes leftover after parsing attributes in process `syz.1.25788'.
[ 2187.503672][T23035] 0{X: renamed from gretap0
[ 2187.507804][T23035] 0{X: entered allmulticast mode
[ 2187.511118][T23035] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 2187.962628][T23047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.25792'.
[ 2188.001849][T23049] netlink: 'syz.2.25793': attribute type 1 has an invalid length.
[ 2188.007143][T23049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2188.551240][T23079] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 2188.554113][T23079] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 2188.560063][T23079] tipc: Resetting bearer <eth:syzkaller0>
[ 2189.443048][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2189.468117][T23107] netlink: 'syz.4.25809': attribute type 4 has an invalid length.
[ 2189.475759][T23107] netlink: 'syz.4.25809': attribute type 4 has an invalid length.
[ 2191.644899][T23160] __nla_validate_parse: 7 callbacks suppressed
[ 2191.644910][T23160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.25824'.
[ 2191.788465][T23162] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.25825'.
[ 2191.800207][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25825'.
[ 2191.914223][T23169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25827'.
[ 2191.921636][T23169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25827'.
[ 2191.976470][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25826'.
[ 2192.373455][T23189] macsec0: entered promiscuous mode
[ 2192.378662][T23189] macsec0: entered allmulticast mode
[ 2192.394898][T23189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25833'.
[ 2192.402421][T23189] netlink: 5 bytes leftover after parsing attributes in process `syz.1.25833'.
[ 2192.410524][T23189] netlink: 5 bytes leftover after parsing attributes in process `syz.1.25833'.
[ 2192.422188][T23189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25833'.
[ 2193.341151][T23206] netlink: 'syz.1.25837': attribute type 39 has an invalid length.
[ 2193.506298][T23221] netlink: 'syz.1.25840': attribute type 1 has an invalid length.
[ 2193.509231][T23221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2193.550987][T23224] netlink: 'syz.4.25842': attribute type 1 has an invalid length.
[ 2193.553900][T23224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2193.944373][T23238] netlink: 'syz.2.25846': attribute type 1 has an invalid length.
[ 2193.956460][T23238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2194.007754][T23237] netlink: 'syz.2.25846': attribute type 1 has an invalid length.
[ 2194.010934][T23237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2194.431412][T23246] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20000
[ 2195.097021][T23306] set match dimension is over the limit!
[ 2195.210765][T23310] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[ 2195.452207][T23318] lo speed is unknown, defaulting to 1000
[ 2195.455773][T23318] lo speed is unknown, defaulting to 1000
[ 2196.498688][T23364] netlink: 'syz.4.25880': attribute type 1 has an invalid length.
[ 2196.502017][T23364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2196.803366][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2196.936402][T23384] __nla_validate_parse: 11 callbacks suppressed
[ 2196.936419][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25885'.
[ 2197.466119][T23395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25887'.
[ 2197.473467][T23395] xt_hashlimit: size too large, truncated to 1048576
[ 2197.585127][T23409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25890'.
[ 2197.654801][T23411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25891'.
[ 2198.066361][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25892'.
[ 2198.072675][T23413] xt_hashlimit: size too large, truncated to 1048576
[ 2198.128024][T23424] netlink: 'syz.2.25894': attribute type 1 has an invalid length.
[ 2198.139017][T23424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2198.423560][T23442] lo speed is unknown, defaulting to 1000
[ 2198.426361][T23442] lo speed is unknown, defaulting to 1000
[ 2198.556548][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25898'.
[ 2198.560680][T23440] xt_hashlimit: size too large, truncated to 1048576
[ 2199.010352][T23461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25905'.
[ 2199.857099][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25909'.
[ 2199.861601][T23474] xt_hashlimit: size too large, truncated to 1048576
[ 2200.239235][T23486] netlink: 'syz.2.25913': attribute type 1 has an invalid length.
[ 2200.243170][T23486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2200.386141][T23489] netlink: 'syz.1.25914': attribute type 4 has an invalid length.
[ 2200.390688][T23489] netlink: 'syz.1.25914': attribute type 4 has an invalid length.
[ 2200.400594][T23489] tipc: Resetting bearer <eth:syzkaller0>
[ 2200.569037][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25915'.
[ 2201.190190][T23502] netlink: 1484 bytes leftover after parsing attributes in process `syz.4.25919'.
[ 2201.483653][T23504] xt_hashlimit: size too large, truncated to 1048576
[ 2202.354346][T23544] __nla_validate_parse: 5 callbacks suppressed
[ 2202.354361][T23544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.25931'.
[ 2202.386875][T23546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25932'.
[ 2202.745038][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25935'.
[ 2202.749749][T23558] xt_hashlimit: size too large, truncated to 1048576
[ 2203.004390][T23565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25937'.
[ 2203.008118][T23565] netlink: 'syz.1.25937': attribute type 1 has an invalid length.
[ 2203.110776][T23580] netlink: 47 bytes leftover after parsing attributes in process `syz.1.25941'.
[ 2203.264949][T23588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25944'.
[ 2203.317993][T23588] netlink: 'syz.1.25944': attribute type 1 has an invalid length.
[ 2203.320441][T23588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2203.345807][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25945'.
[ 2203.461177][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25946'.
[ 2203.465529][T23594] xt_hashlimit: size too large, truncated to 1048576
[ 2204.403123][T16128] Bluetooth: hci4: command 0x041b tx timeout
[ 2204.631536][T23615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.25952'.
[ 2204.907512][T23619] pim6reg1: entered promiscuous mode
[ 2204.911820][T23619] pim6reg1: entered allmulticast mode
[ 2204.966772][T23626] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.25956'.
[ 2205.323758][T23640] sctp: [Deprecated]: syz.2.25962 (pid 23640) Use of int in maxseg socket option.
[ 2205.323758][T23640] Use struct sctp_assoc_value instead
[ 2205.628362][T23666] xt_hashlimit: size too large, truncated to 1048576
[ 2206.175789][T23716] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[ 2206.520440][T23727] bridge_slave_1: default FDB implementation only supports local addresses
[ 2206.898469][T23755] xt_hashlimit: size too large, truncated to 1048576
[ 2207.239969][T23776] xt_hashlimit: size too large, truncated to 1048576
[ 2207.878300][T23807] __nla_validate_parse: 19 callbacks suppressed
[ 2207.878310][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26003'.
[ 2207.883625][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26003'.
[ 2207.888455][T23807] xt_hashlimit: size too large, truncated to 1048576
[ 2208.102660][T23825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26007'.
[ 2208.116860][T23827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26008'.
[ 2208.123509][T23827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26008'.
[ 2208.155165][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26007'.
[ 2208.162612][T23829] netlink: 'syz.1.26009': attribute type 1 has an invalid length.
[ 2208.165621][T23829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2208.306527][T23832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26010'.
[ 2209.239800][T23843] xt_hashlimit: size too large, truncated to 1048576
[ 2209.403385][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26018'.
[ 2209.515999][T23863] veth0_macvtap: entered allmulticast mode
[ 2209.518243][T23863] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 2209.598832][T23872] netlink: 'syz.2.26021': attribute type 30 has an invalid length.
[ 2209.756460][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26021'.
[ 2210.440002][T23880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26023'.
[ 2210.528259][T23880] 0{X: left allmulticast mode
[ 2210.530684][T23880] macsec0: left promiscuous mode
[ 2210.532899][T23880] macsec0: left allmulticast mode
[ 2210.536550][T23880] tipc: Resetting bearer <eth:syzkaller0>
[ 2210.547467][T23880] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 2210.550388][T23880] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 2210.657509][T23886] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 2210.660156][T23886] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 2210.664989][T23886] tipc: Resetting bearer <eth:syzkaller0>
[ 2210.668280][T23886] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2210.728922][T23886] netlink: 'syz.1.26025': attribute type 1 has an invalid length.
[ 2210.731611][T23886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2211.514739][T23890] xt_hashlimit: size too large, truncated to 1048576
[ 2211.814775][T23898] netlink: 'syz.1.26028': attribute type 10 has an invalid length.
[ 2212.284396][T23904] netlink: 'syz.4.26030': attribute type 1 has an invalid length.
[ 2212.289153][T23904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2212.988440][T23939] bond50: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 2212.997350][T23939] bond50 (unregistering): Released all slaves
[ 2213.105412][T23951] __nla_validate_parse: 10 callbacks suppressed
[ 2213.105424][T23951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26043'.
[ 2213.136421][T23953] bond50: Removing last ns target with arp_interval on
[ 2213.140103][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26043'.
[ 2213.207684][T23955] netlink: 'syz.1.26044': attribute type 1 has an invalid length.
[ 2213.216893][T23955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2213.280491][T23959] sctp: [Deprecated]: syz.4.26046 (pid 23959) Use of int in maxseg socket option.
[ 2213.280491][T23959] Use struct sctp_assoc_value instead
[ 2213.329353][T23961] netlink: 'syz.4.26047': attribute type 38 has an invalid length.
[ 2213.335015][T23961] netlink: 'syz.4.26047': attribute type 12 has an invalid length.
[ 2213.857647][T23964] netlink: 120 bytes leftover after parsing attributes in process `syz.2.26048'.
[ 2214.038530][T23972] sctp: [Deprecated]: syz.2.26050 (pid 23972) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2214.038530][T23972] Use struct sctp_sack_info instead
[ 2214.200292][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26053'.
[ 2214.571425][T24001] lo speed is unknown, defaulting to 1000
[ 2214.575746][T24001] lo speed is unknown, defaulting to 1000
[ 2215.327930][T24025] netlink: 120 bytes leftover after parsing attributes in process `syz.2.26064'.
[ 2215.479629][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26066'.
[ 2215.627852][T24031] tipc: Resetting bearer <eth:syzkaller0>
[ 2215.638728][T24031] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 2215.641531][T24031] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 2217.348588][T24066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26076'.
[ 2217.508677][T24073] lo speed is unknown, defaulting to 1000
[ 2217.512324][T24073] lo speed is unknown, defaulting to 1000
[ 2218.121069][T24086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26080'.
[ 2218.193899][T24090] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26081'.
[ 2218.301212][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26083'.
[ 2218.570752][T24123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26091'.
[ 2218.575576][T24121] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 2218.577978][T24121] syzkaller1: Linktype set failed because interface is up
[ 2219.433491][T24151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2219.491576][T24158] netlink: 120 bytes leftover after parsing attributes in process `syz.1.26100'.
[ 2219.637655][T24166] netlink: 'syz.1.26101': attribute type 2 has an invalid length.
[ 2219.819190][T24168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26102'.
[ 2220.312256][T24180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26106'.
[ 2220.332339][T24180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26106'.
[ 2220.920712][T24198] netlink: 120 bytes leftover after parsing attributes in process `syz.4.26110'.
[ 2221.500625][T24214] openvswitch: netlink: Message has 496 unknown bytes.
[ 2221.503978][T24214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2222.593472][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26120'.
[ 2222.599928][T24230] xt_hashlimit: size too large, truncated to 1048576
[ 2223.194015][T24250] __nla_validate_parse: 2 callbacks suppressed
[ 2223.194031][T24250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26125'.
[ 2223.799256][T24274] netlink: 'syz.2.26132': attribute type 1 has an invalid length.
[ 2223.802016][T24274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2224.068406][T24278] netlink: 'syz.4.26133': attribute type 12 has an invalid length.
[ 2224.180501][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26134'.
[ 2224.229231][T24283] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 2224.231611][T24283] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 2224.235423][T24283] tipc: Resetting bearer <eth:syzkaller0>
[ 2224.263047][T24285] block nbd1: server does not support multiple connections per device.
[ 2224.282144][T24285] block nbd1: shutting down sockets
[ 2224.328827][T24289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26135'.
[ 2224.362540][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26136'.
[ 2224.450053][T24291] tipc: Resetting bearer <eth:syzkaller0>
[ 2224.462965][T24291] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[ 2224.465449][T24291] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[ 2224.625971][T24299] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26139'.
[ 2224.634848][T24299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26139'.
[ 2224.719603][T24306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.26140'.
[ 2224.788323][T24316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26140'.
[ 2224.840337][T24306] netlink: 'syz.1.26140': attribute type 1 has an invalid length.
[ 2224.843021][T24306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2225.471356][T24339] netlink: 176 bytes leftover after parsing attributes in process `syz.4.26147'.
[ 2225.576570][T24347] netlink: 120 bytes leftover after parsing attributes in process `syz.1.26150'.
[ 2226.537443][T24374] netlink: 'syz.1.26157': attribute type 1 has an invalid length.
[ 2226.544329][T24374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2226.839905][T24384] netlink: 'syz.4.26160': attribute type 1 has an invalid length.
[ 2226.843168][T24384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2228.265959][T24454] mac80211_hwsim hwsim29 nicvf0: entered allmulticast mode
[ 2228.365829][T24458] __nla_validate_parse: 9 callbacks suppressed
[ 2228.365844][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26180'.
[ 2228.650582][T24467] netlink: 'syz.1.26183': attribute type 25 has an invalid length.
[ 2228.656612][T24467] netlink: 'syz.1.26183': attribute type 3 has an invalid length.
[ 2228.659137][T24467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26183'.
[ 2228.685398][T24472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26184'.
[ 2228.767834][T24474] bond51: Removing last arp target with arp_interval on
[ 2228.793629][T24479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26187'.
[ 2228.875517][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26189'.
[ 2228.878434][T24487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26189'.
[ 2228.881616][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26189'.
[ 2228.886899][T24487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26189'.
[ 2228.895467][T24491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26190'.
[ 2228.901507][T24491] 8021q: VLANs not supported on lo
[ 2228.949652][T24495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2228.952571][T24495] syzkaller0: entered promiscuous mode
[ 2228.956059][T24495] syzkaller0: entered allmulticast mode
[ 2228.985514][T24495] tipc: Resetting bearer <eth:syzkaller0>
[ 2228.999557][T24494] tipc: Resetting bearer <eth:syzkaller0>
[ 2229.020729][T24494] tipc: Disabling bearer <eth:syzkaller0>
[ 2229.080320][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26191'.
[ 2231.044679][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2231.781965][T24569] netlink: 'syz.1.26214': attribute type 1 has an invalid length.
[ 2231.789119][T24569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2232.576342][T24587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2232.615679][T24585] xt_hashlimit: size too large, truncated to 1048576
[ 2232.847019][T24596] xt_hashlimit: size too large, truncated to 1048576
[ 2233.122938][T21530] Bluetooth: hci4: command 0x041b tx timeout
[ 2233.339119][T24603] xt_hashlimit: size too large, truncated to 1048576
[ 2233.342357][T24604] xt_hashlimit: size too large, truncated to 1048576
[ 2233.643157][T24617] __nla_validate_parse: 8 callbacks suppressed
[ 2233.643171][T24617] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26226'.
[ 2234.445268][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26229'.
[ 2234.551553][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26230'.
[ 2234.556397][T24628] netlink: 'syz.4.26230': attribute type 7 has an invalid length.
[ 2234.592051][T24625] bridge_slave_1: left allmulticast mode
[ 2234.595135][T24625] veth0_macvtap: left allmulticast mode
[ 2234.598255][T24625] mac80211_hwsim hwsim29 nicvf0: left allmulticast mode
[ 2234.602173][T24625] bond42: left promiscuous mode
[ 2234.748770][T24634] netlink: 120 bytes leftover after parsing attributes in process `syz.4.26232'.
[ 2234.806439][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26232'.
[ 2234.925761][T24639] netlink: 120 bytes leftover after parsing attributes in process `syz.1.26233'.
[ 2235.589167][T24650] netlink: 120 bytes leftover after parsing attributes in process `syz.4.26236'.
[ 2235.989733][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26239'.
[ 2236.000852][T24659] xt_hashlimit: size too large, truncated to 1048576
[ 2236.898729][T24675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26243'.
[ 2236.902877][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26243'.
[ 2237.038014][T24678] can: request_module (can-proto-0) failed.
[ 2237.567340][T24699] netlink: 'syz.4.26250': attribute type 9 has an invalid length.
[ 2238.125093][T24719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2238.855509][T24736] __nla_validate_parse: 3 callbacks suppressed
[ 2238.855520][T24736] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26262'.
[ 2238.938719][T24738] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26263'.
[ 2238.944937][T24739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26263'.
[ 2239.181182][T24751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26266'.
[ 2239.477800][T24758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26268'.
[ 2240.494976][T24768] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26272'.
[ 2240.529071][T24768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26272'.
[ 2240.804339][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26275'.
[ 2240.809511][T24782] xt_hashlimit: size too large, truncated to 1048576
[ 2241.426952][T24814] netlink: 'syz.4.26282': attribute type 1 has an invalid length.
[ 2241.437169][T24814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2241.575405][T24822] bond52: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 2241.580176][T24822] bond52 (unregistering): Released all slaves
[ 2241.601594][T24821] bond52: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 2241.607507][T24821] bond52 (unregistering): Released all slaves
[ 2241.617690][T24825] netlink: 'syz.1.26283': attribute type 32 has an invalid length.
[ 2241.716856][T24828] netlink: 68 bytes leftover after parsing attributes in process `syz.1.26284'.
[ 2242.225862][T24842] xt_l2tp: wrong L2TP version: 0
[ 2242.265294][T24844] netlink: 120 bytes leftover after parsing attributes in process `syz.4.26290'.
[ 2242.798607][T24859] netlink: 'syz.1.26294': attribute type 33 has an invalid length.
[ 2242.806549][T24859] netlink: 'syz.1.26294': attribute type 33 has an invalid length.
[ 2243.581244][T24880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2245.355463][T24930] __nla_validate_parse: 9 callbacks suppressed
[ 2245.355473][T24930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26317'.
[ 2245.397612][T24937] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26319'.
[ 2245.456139][T24938] lo speed is unknown, defaulting to 1000
[ 2245.458637][T24938] lo speed is unknown, defaulting to 1000
[ 2245.545462][T24945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26320'.
[ 2245.595145][T24947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.26321'.
[ 2246.281046][T24956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26323'.
[ 2246.291034][T24955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26323'.
[ 2247.665530][T24986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26333'.
[ 2247.669107][T24987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26333'.
[ 2247.717156][T24991] netlink: 104 bytes leftover after parsing attributes in process `syz.4.26335'.
[ 2247.807547][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26335'.
[ 2247.811985][T24991] xt_hashlimit: size too large, truncated to 1048576
[ 2248.730001][T25049] xt_hashlimit: size too large, truncated to 1048576
[ 2250.181451][T25112] netlink: 'syz.1.26369': attribute type 11 has an invalid length.
[ 2250.525266][T25130] __nla_validate_parse: 13 callbacks suppressed
[ 2250.525276][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26375'.
[ 2250.532384][T25132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26375'.
[ 2250.543924][T25130] xt_hashlimit: size too large, truncated to 1048576
[ 2250.887464][T25143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26378'.
[ 2250.988847][T25149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.26379'.
[ 2251.050219][T25154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26381'.
[ 2251.058169][T25154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.26381'.
[ 2251.331978][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26384'.
[ 2251.338803][T25169] xt_hashlimit: size too large, truncated to 1048576
[ 2251.505525][T25181] SET target dimension over the limit!
[ 2251.642375][T25183] netlink: 'syz.2.26387': attribute type 1 has an invalid length.
[ 2251.645156][T25183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2252.031537][T25186] netlink: 9 bytes leftover after parsing attributes in process `syz.1.26388'.
[ 2252.036812][T25186] netlink: 5 bytes leftover after parsing attributes in process `syz.1.26388'.
[ 2252.040082][T25186] 1{X: renamed from 30{X
[ 2252.045675][T25186] 1{X: entered allmulticast mode
[ 2252.048352][T25186] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[ 2252.066270][T25186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26388'.
[ 2252.380750][T25204] netlink: 'syz.4.26392': attribute type 1 has an invalid length.
[ 2252.393497][T25204] netlink: 'syz.4.26392': attribute type 1 has an invalid length.
[ 2252.399175][T25204] netlink: 'syz.4.26392': attribute type 1 has an invalid length.
[ 2252.404088][T25204] netlink: 'syz.4.26392': attribute type 1 has an invalid length.
[ 2252.857410][T25220] 
[ 2252.858327][T25220] ======================================================
[ 2252.860801][T25220] WARNING: possible circular locking dependency detected
[ 2252.863108][T25220] syzkaller #0 Not tainted
[ 2252.864608][T25220] ------------------------------------------------------
[ 2252.866817][T25220] syz.2.26398/25220 is trying to acquire lock:
[ 2252.868792][T25220] ffff888103a9a638 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[ 2252.872008][T25220] 
[ 2252.872008][T25220] but task is already holding lock:
[ 2252.874269][T25220] ffff8881130f8f78 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[ 2252.877254][T25220] 
[ 2252.877254][T25220] which lock already depends on the new lock.
[ 2252.877254][T25220] 
[ 2252.880514][T25220] 
[ 2252.880514][T25220] the existing dependency chain (in reverse order) is:
[ 2252.883243][T25220] 
[ 2252.883243][T25220] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[ 2252.885659][T25220]        __might_fault+0xcb/0x130
[ 2252.887190][T25220]        _copy_from_user+0x28/0xb0
[ 2252.888773][T25220]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[ 2252.890797][T25220]        ip_generic_getfrag+0x149/0x2d0
[ 2252.892498][T25220]        __ip6_append_data+0x39cd/0x3f60
[ 2252.894270][T25220]        ip6_append_data+0x10f/0x280
[ 2252.896010][T25220]        rawv6_sendmsg+0x12d3/0x18e0
[ 2252.897697][T25220]        ____sys_sendmsg+0x80a/0x9f0
[ 2252.899468][T25220]        ___sys_sendmsg+0x2a5/0x360
[ 2252.901166][T25220]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2252.902869][T25220]        do_syscall_64+0x15f/0xf80
[ 2252.904439][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2252.906445][T25220] 
[ 2252.906445][T25220] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 2252.908951][T25220]        lock_sock_nested+0x41/0x100
[ 2252.910775][T25220]        inet_shutdown+0x6a/0x390
[ 2252.912414][T25220]        nbd_mark_nsock_dead+0x2e9/0x560
[ 2252.914224][T25220]        sock_shutdown+0x15e/0x260
[ 2252.915872][T25220]        nbd_clear_sock+0x24/0x170
[ 2252.917533][T25220]        nbd_config_put+0x2dd/0x580
[ 2252.919238][T25220]        nbd_genl_connect+0x19d5/0x1cf0
[ 2252.921117][T25220]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2252.923260][T25220]        genl_rcv_msg+0x61c/0x7a0
[ 2252.924892][T25220]        netlink_rcv_skb+0x232/0x4b0
[ 2252.926530][T25220]        genl_rcv+0x28/0x40
[ 2252.927971][T25220]        netlink_unicast+0x75c/0x8e0
[ 2252.929724][T25220]        netlink_sendmsg+0x813/0xb40
[ 2252.931427][T25220]        ____sys_sendmsg+0x972/0x9f0
[ 2252.933142][T25220]        ___sys_sendmsg+0x2a5/0x360
[ 2252.934903][T25220]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2252.936707][T25220]        do_syscall_64+0x15f/0xf80
[ 2252.938566][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2252.940682][T25220] 
[ 2252.940682][T25220] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 2252.943137][T25220]        __mutex_lock+0x1a3/0x1550
[ 2252.944782][T25220]        nbd_queue_rq+0x37b/0x1100
[ 2252.946431][T25220]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 2252.948413][T25220]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 2252.950673][T25220]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 2252.952732][T25220]        blk_mq_run_hw_queue+0x348/0x4f0
[ 2252.954502][T25220]        blk_mq_dispatch_list+0xd16/0xe10
[ 2252.956320][T25220]        blk_mq_flush_plug_list+0x48d/0x570
[ 2252.958220][T25220]        __blk_flush_plug+0x3ed/0x4d0
[ 2252.959924][T25220]        __submit_bio+0x28d/0x580
[ 2252.961592][T25220]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 2252.963539][T25220]        block_read_full_folio+0x599/0x830
[ 2252.965406][T25220]        filemap_read_folio+0x137/0x3b0
[ 2252.967076][T25220]        do_read_cache_folio+0x358/0x590
[ 2252.969015][T25220]        read_part_sector+0xb6/0x2b0
[ 2252.970911][T25220]        adfspart_check_ICS+0xb1/0x960
[ 2252.972614][T25220]        bdev_disk_changed+0x817/0x1770
[ 2252.974311][T25220]        blkdev_get_whole+0x380/0x510
[ 2252.976020][T25220]        bdev_open+0x31e/0xd30
[ 2252.977564][T25220]        blkdev_open+0x470/0x610
[ 2252.979183][T25220]        do_dentry_open+0x785/0x14e0
[ 2252.980934][T25220]        vfs_open+0x3b/0x340
[ 2252.982452][T25220]        path_openat+0x2e08/0x3860
[ 2252.984141][T25220]        do_file_open+0x23e/0x4a0
[ 2252.985748][T25220]        do_sys_openat2+0x113/0x200
[ 2252.987400][T25220]        __x64_sys_openat+0x138/0x170
[ 2252.989140][T25220]        do_syscall_64+0x15f/0xf80
[ 2252.990774][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2252.992878][T25220] 
[ 2252.992878][T25220] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 2252.995146][T25220]        __mutex_lock+0x1a3/0x1550
[ 2252.996831][T25220]        nbd_queue_rq+0xc6/0x1100
[ 2252.998584][T25220]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 2253.000556][T25220]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 2253.002775][T25220]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 2253.004904][T25220]        blk_mq_run_hw_queue+0x348/0x4f0
[ 2253.006722][T25220]        blk_mq_dispatch_list+0xd16/0xe10
[ 2253.008584][T25220]        blk_mq_flush_plug_list+0x48d/0x570
[ 2253.010552][T25220]        __blk_flush_plug+0x3ed/0x4d0
[ 2253.012353][T25220]        __submit_bio+0x28d/0x580
[ 2253.014019][T25220]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 2253.016226][T25220]        block_read_full_folio+0x599/0x830
[ 2253.018161][T25220]        filemap_read_folio+0x137/0x3b0
[ 2253.019974][T25220]        do_read_cache_folio+0x358/0x590
[ 2253.021863][T25220]        read_part_sector+0xb6/0x2b0
[ 2253.023555][T25220]        adfspart_check_ICS+0xb1/0x960
[ 2253.025280][T25220]        bdev_disk_changed+0x817/0x1770
[ 2253.027074][T25220]        blkdev_get_whole+0x380/0x510
[ 2253.028745][T25220]        bdev_open+0x31e/0xd30
[ 2253.030229][T25220]        blkdev_open+0x470/0x610
[ 2253.031856][T25220]        do_dentry_open+0x785/0x14e0
[ 2253.033536][T25220]        vfs_open+0x3b/0x340
[ 2253.035075][T25220]        path_openat+0x2e08/0x3860
[ 2253.036738][T25220]        do_file_open+0x23e/0x4a0
[ 2253.038419][T25220]        do_sys_openat2+0x113/0x200
[ 2253.040135][T25220]        __x64_sys_openat+0x138/0x170
[ 2253.041938][T25220]        do_syscall_64+0x15f/0xf80
[ 2253.043594][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.045669][T25220] 
[ 2253.045669][T25220] -> #4 (set->srcu){.+.+}-{0:0}:
[ 2253.047949][T25220]        __synchronize_srcu+0xca/0x300
[ 2253.049665][T25220]        elevator_switch+0x1e8/0x7a0
[ 2253.051437][T25220]        elevator_change+0x2cc/0x450
[ 2253.053226][T25220]        elevator_set_default+0x36c/0x430
[ 2253.055063][T25220]        blk_register_queue+0x3e9/0x4e0
[ 2253.056826][T25220]        __add_disk+0x677/0xd50
[ 2253.058449][T25220]        add_disk_fwnode+0xfb/0x480
[ 2253.060203][T25220]        nbd_dev_add+0x72c/0xb50
[ 2253.061826][T25220]        nbd_init+0x168/0x1f0
[ 2253.063472][T25220]        do_one_initcall+0x250/0x870
[ 2253.065163][T25220]        do_initcall_level+0x104/0x190
[ 2253.066964][T25220]        do_initcalls+0x59/0xa0
[ 2253.068670][T25220]        kernel_init_freeable+0x2a6/0x3e0
[ 2253.071104][T25220]        kernel_init+0x1d/0x1d0
[ 2253.073119][T25220]        ret_from_fork+0x514/0xb70
[ 2253.075075][T25220]        ret_from_fork_asm+0x1a/0x30
[ 2253.076738][T25220] 
[ 2253.076738][T25220] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 2253.079123][T25220]        __mutex_lock+0x1a3/0x1550
[ 2253.080712][T25220]        elevator_change+0x1b3/0x450
[ 2253.082445][T25220]        elevator_set_none+0xb5/0x140
[ 2253.084228][T25220]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 2253.086275][T25220]        nbd_start_device+0x17f/0xb10
[ 2253.087999][T25220]        nbd_genl_connect+0x165b/0x1cf0
[ 2253.090138][T25220]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2253.092048][T25220]        genl_rcv_msg+0x61c/0x7a0
[ 2253.093664][T25220]        netlink_rcv_skb+0x232/0x4b0
[ 2253.095343][T25220]        genl_rcv+0x28/0x40
[ 2253.096857][T25220]        netlink_unicast+0x75c/0x8e0
[ 2253.098552][T25220]        netlink_sendmsg+0x813/0xb40
[ 2253.100224][T25220]        ____sys_sendmsg+0x972/0x9f0
[ 2253.101913][T25220]        ___sys_sendmsg+0x2a5/0x360
[ 2253.103541][T25220]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2253.105352][T25220]        do_syscall_64+0x15f/0xf80
[ 2253.107031][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.109116][T25220] 
[ 2253.109116][T25220] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 2253.111867][T25220]        blk_alloc_queue+0x546/0x680
[ 2253.113564][T25220]        __blk_mq_alloc_disk+0x197/0x390
[ 2253.115414][T25220]        nbd_dev_add+0x499/0xb50
[ 2253.116993][T25220]        nbd_init+0x168/0x1f0
[ 2253.118508][T25220]        do_one_initcall+0x250/0x870
[ 2253.120232][T25220]        do_initcall_level+0x104/0x190
[ 2253.121965][T25220]        do_initcalls+0x59/0xa0
[ 2253.123557][T25220]        kernel_init_freeable+0x2a6/0x3e0
[ 2253.125392][T25220]        kernel_init+0x1d/0x1d0
[ 2253.126996][T25220]        ret_from_fork+0x514/0xb70
[ 2253.128610][T25220]        ret_from_fork_asm+0x1a/0x30
[ 2253.130335][T25220] 
[ 2253.130335][T25220] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 2253.132599][T25220]        fs_reclaim_acquire+0x71/0x100
[ 2253.134323][T25220]        kmem_cache_alloc_noprof+0x40/0x650
[ 2253.136294][T25220]        __anon_vma_prepare+0xcb/0x4a0
[ 2253.138160][T25220]        __vmf_anon_prepare+0xe1/0x1b0
[ 2253.140095][T25220]        hugetlb_no_page+0x399/0x2100
[ 2253.141743][T25220]        hugetlb_fault+0x747/0x1510
[ 2253.143417][T25220]        handle_mm_fault+0x2009/0x3170
[ 2253.145440][T25220]        __get_user_pages+0x1683/0x2720
[ 2253.147603][T25220]        populate_vma_page_range+0x2be/0x3c0
[ 2253.150048][T25220]        __mm_populate+0x25f/0x390
[ 2253.152169][T25220]        vm_mmap_pgoff+0x3aa/0x4f0
[ 2253.154272][T25220]        ksys_mmap_pgoff+0x586/0x760
[ 2253.156411][T25220]        do_syscall_64+0x15f/0xf80
[ 2253.158542][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.161172][T25220] 
[ 2253.161172][T25220] -> #0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[ 2253.164714][T25220]        __lock_acquire+0x15a5/0x2cf0
[ 2253.166912][T25220]        lock_acquire+0x106/0x350
[ 2253.168968][T25220]        __mutex_lock+0x1a3/0x1550
[ 2253.171058][T25220]        hugetlb_fault+0x3d8/0x1510
[ 2253.173189][T25220]        handle_mm_fault+0x2009/0x3170
[ 2253.175311][T25220]        do_user_addr_fault+0x75b/0x1340
[ 2253.177591][T25220]        exc_page_fault+0x6a/0xc0
[ 2253.179516][T25220]        asm_exc_page_fault+0x26/0x30
[ 2253.181728][T25220]        fault_in_readable+0x8e/0x130
[ 2253.183915][T25220]        fault_in_iov_iter_readable+0x1b4/0x2f0
[ 2253.186429][T25220]        generic_perform_write+0x7af/0x8f0
[ 2253.188719][T25220]        shmem_file_write_iter+0xf8/0x120
[ 2253.191037][T25220]        vfs_write+0x61d/0xb90
[ 2253.192967][T25220]        ksys_write+0x150/0x270
[ 2253.194822][T25220]        do_syscall_64+0x15f/0xf80
[ 2253.197008][T25220]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.199488][T25220] 
[ 2253.199488][T25220] other info that might help us debug this:
[ 2253.199488][T25220] 
[ 2253.203393][T25220] Chain exists of:
[ 2253.203393][T25220]   &hugetlb_fault_mutex_table[i] --> sk_lock-AF_INET6 --> &mm->mmap_lock
[ 2253.203393][T25220] 
[ 2253.208811][T25220]  Possible unsafe locking scenario:
[ 2253.208811][T25220] 
[ 2253.211683][T25220]        CPU0                    CPU1
[ 2253.213398][T25220]        ----                    ----
[ 2253.215385][T25220]   rlock(&mm->mmap_lock);
[ 2253.217115][T25220]                                lock(sk_lock-AF_INET6);
[ 2253.219771][T25220]                                lock(&mm->mmap_lock);
[ 2253.221905][T25220]   lock(&hugetlb_fault_mutex_table[i]);
[ 2253.223638][T25220] 
[ 2253.223638][T25220]  *** DEADLOCK ***
[ 2253.223638][T25220] 
[ 2253.226129][T25220] 4 locks held by syz.2.26398/25220:
[ 2253.227748][T25220]  #0: ffff8881f99a84f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[ 2253.230527][T25220]  #1: ffff888109458410 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[ 2253.233266][T25220]  #2: ffff8881ad1f5cf8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[ 2253.236621][T25220]  #3: ffff8881130f8f78 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[ 2253.240056][T25220] 
[ 2253.240056][T25220] stack backtrace:
[ 2253.242140][T25220] CPU: 0 UID: 0 PID: 25220 Comm: syz.2.26398 Not tainted syzkaller #0 PREEMPT(full) 
[ 2253.242149][T25220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2253.242154][T25220] Call Trace:
[ 2253.242160][T25220]  <TASK>
[ 2253.242167][T25220]  dump_stack_lvl+0xe8/0x150
[ 2253.242177][T25220]  print_circular_bug+0x2e1/0x300
[ 2253.242187][T25220]  check_noncircular+0x12e/0x150
[ 2253.242196][T25220]  __lock_acquire+0x15a5/0x2cf0
[ 2253.242204][T25220]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2253.242215][T25220]  ? __lock_acquire+0x6b5/0x2cf0
[ 2253.242222][T25220]  ? hugetlb_fault+0x3d8/0x1510
[ 2253.242228][T25220]  lock_acquire+0x106/0x350
[ 2253.242235][T25220]  ? hugetlb_fault+0x3d8/0x1510
[ 2253.242243][T25220]  __mutex_lock+0x1a3/0x1550
[ 2253.242250][T25220]  ? hugetlb_fault+0x3d8/0x1510
[ 2253.242256][T25220]  ? lock_acquire+0x106/0x350
[ 2253.242264][T25220]  ? hugetlb_fault+0x3d8/0x1510
[ 2253.242270][T25220]  ? __pfx___mutex_lock+0x10/0x10
[ 2253.242276][T25220]  ? rcu_is_watching+0x15/0xb0
[ 2253.242284][T25220]  ? __schedule+0x1837/0x5740
[ 2253.242294][T25220]  hugetlb_fault+0x3d8/0x1510
[ 2253.242302][T25220]  ? __pfx_hugetlb_fault+0x10/0x10
[ 2253.242312][T25220]  handle_mm_fault+0x2009/0x3170
[ 2253.242322][T25220]  ? __pfx_mt_find+0x10/0x10
[ 2253.242328][T25220]  ? handle_mm_fault+0xee/0x3170
[ 2253.242336][T25220]  ? mmap_read_lock_killable+0x1d/0x70
[ 2253.242345][T25220]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2253.242353][T25220]  ? find_vma+0xed/0x160
[ 2253.242361][T25220]  ? __pfx_find_vma+0x10/0x10
[ 2253.242368][T25220]  ? down_read_killable+0x1bb/0x340
[ 2253.242376][T25220]  ? lock_mm_and_find_vma+0xa7/0x340
[ 2253.242385][T25220]  do_user_addr_fault+0x75b/0x1340
[ 2253.242401][T25220]  exc_page_fault+0x6a/0xc0
[ 2253.242410][T25220]  asm_exc_page_fault+0x26/0x30
[ 2253.242418][T25220] RIP: 0010:fault_in_readable+0x8e/0x130
[ 2253.242426][T25220] Code: a9 00 00 00 0f 1f 00 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 20 ee b0 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00
[ 2253.242433][T25220] RSP: 0018:ffffc9000420faa8 EFLAGS: 00010202
[ 2253.242440][T25220] RAX: ffffffff8214d801 RBX: 0000000000000200 RCX: ffff88810b448000
[ 2253.242445][T25220] RDX: 0000000000000002 RSI: 000020000084c000 RDI: 000020000084c200
[ 2253.242449][T25220] RBP: dffffc0000000001 R08: ffff88810b448000 R09: 0000000000000002
[ 2253.242454][T25220] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000
[ 2253.242458][T25220] R13: 000020000084c000 R14: 000020000084c000 R15: 000020000084c200
[ 2253.242464][T25220]  ? fault_in_safe_writeable+0x231/0x240
[ 2253.242473][T25220]  ? fault_in_readable+0x80/0x130
[ 2253.242480][T25220]  fault_in_iov_iter_readable+0x1b4/0x2f0
[ 2253.242491][T25220]  generic_perform_write+0x7af/0x8f0
[ 2253.242503][T25220]  ? __pfx_generic_perform_write+0x10/0x10
[ 2253.242511][T25220]  ? down_write+0x16d/0x200
[ 2253.242519][T25220]  ? file_update_time_flags+0x3b3/0x4a0
[ 2253.242528][T25220]  shmem_file_write_iter+0xf8/0x120
[ 2253.242537][T25220]  vfs_write+0x61d/0xb90
[ 2253.242548][T25220]  ? __pfx_vfs_write+0x10/0x10
[ 2253.242558][T25220]  ? __fget_files+0x2a/0x420
[ 2253.242566][T25220]  ksys_write+0x150/0x270
[ 2253.242575][T25220]  ? __pfx_ksys_write+0x10/0x10
[ 2253.242585][T25220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.242592][T25220]  do_syscall_64+0x15f/0xf80
[ 2253.242601][T25220]  ? trace_irq_disable+0x3b/0x140
[ 2253.242611][T25220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2253.242618][T25220] RIP: 0033:0x7f080299ce59
[ 2253.242626][T25220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2253.242631][T25220] RSP: 002b:00007f0803797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2253.242638][T25220] RAX: ffffffffffffffda RBX: 00007f0802c15fa0 RCX: 00007f080299ce59
[ 2253.242643][T25220] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000005
[ 2253.242647][T25220] RBP: 00007f0802a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 2253.242651][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2253.242655][T25220] R13: 00007f0802c16038 R14: 00007f0802c15fa0 R15: 00007ffeaf92f098
[ 2253.242662][T25220]  </TASK>
