last executing test programs:

28m3.664686653s ago: executing program 1 (id=8864):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000019240)=ANY=[@ANYBLOB="9feb01000c0000000000000064000000640000000e0000000a0000000000001102030000000a000000040000840400000003000000030000000600000000000000000000007e00000007000000000000000800000010000000030000000600000002000000000000120300000000004f5f0000000000002e2e5f00"/138], 0x0, 0x8a}, 0x28)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000240)=""/102390, &(0x7f0000000040)=0x18ff6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
socket$netlink(0x10, 0x3, 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000019880)=[{&(0x7f0000000400)}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136c9c68fdc0340c6fd3f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)

28m3.597887945s ago: executing program 1 (id=8865):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000001200860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

28m3.415089733s ago: executing program 1 (id=8866):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)

28m3.414598137s ago: executing program 1 (id=8867):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40008004}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f00000001c0)={0x2c, 0x7, 0xa, 0xa, 0x7, 0x81})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0xc41, 0xdf, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
pipe(0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast})
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

28m3.323000581s ago: executing program 1 (id=8868):
r0 = socket(0x10, 0x803, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r1=>0x0})
gettid()
r2 = socket(0x2a, 0x803, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x50, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000304f9fffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="08980500075005001400ee9347137468315f6d6176746170000000"], 0x34}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=r4, @ANYRES32=r4], 0x40}}, 0x200008d0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r8, 0x0)
ioctl$int_in(r8, 0x5421, 0x0)
connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa)
close(r8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
r10 = socket(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r11)
sendmsg$NFC_CMD_START_POLL(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r10, @ANYRES32=0x0, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x5820a61ca228659, 0x0, 0x400000, {0x0, 0x0, 0x0, r1, {0x1, 0x9}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4ab1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x5}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40c2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xffffff11}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}]}}]}, 0x78}}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

28m3.274483454s ago: executing program 1 (id=8869):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

27m47.963414165s ago: executing program 32 (id=8869):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

5m9.343425748s ago: executing program 2 (id=21205):
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @remote}, 0x200, 0x0, 0x0, 0x0, 0x34d, &(0x7f00000002c0)='macvlan0\x00', 0x8, 0x3fb, 0x9})
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, 0xffffffffffffffff, 0xffffe000)
ioctl$XFS_IOC_INUMBERS(r1, 0x40603d10, &(0x7f0000000800)={{0x5, 0x4, 0x1000e, 0x200a, 0x2}})
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r3 = socket$key(0xf, 0x3, 0x2)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000000000080050000000500000030220000", @ANYRES32=r3, @ANYBLOB="100700"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000002000000030000000600"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f0000000080)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300020e0000000000000000000005000600000000000a00000000000000000000000000000000000000000000010100000000000000a68975c311bb3e1487d0687e717b03010000000000000000fd00002f0000000000fe8000000000008000000000"], 0x70}, 0x1, 0x7}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r8, 0x89e1, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}})
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000280)={&(0x7f0000000200)=[{0x9, 0x7, 0x4, 0x200, 0x3}, {0x0, 0x2, 0x5, 0x7, 0x6570}, {0x4000000000, 0xffffffffffffffff, 0x800, 0x70, 0x8}], 0x3, 0x28, 0x6, 0xa26000000})
ioctl$XFS_IOC_SCRUB_METADATA(r9, 0xc040583c, &(0x7f0000000100)={0xe, 0x9c, 0x806c63d2e3, 0xb, 0xa})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r10)
r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$int_in(r11, 0x5421, &(0x7f0000000440)=0xfffffffffffffffe)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r11)

5m9.342962821s ago: executing program 2 (id=21206):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, 0xffffffffffffffff, 0x7}, 0x14)
bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x9, 0x7, 0x2}, {0x8001, 0x0, 0x6, 0x3}, {0x4bd2, 0x2, 0x7f, 0x132}, {0x7, 0x7, 0xe, 0x1717}]})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000004c0)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910770000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10}, 0x94)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x0, 0x0})
syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000c00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x198, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xf7, 0x3, "77e202a559390cfc75e83c46aeef8c22b43a42455c706c4a80d74cdec5eac9dc1bd4b57e3972de58b77e4532b06f49bef1789baeb897e87d1b371eef02e31963bbaea495fbde764caf2797a6408af2f039267b26f521f64585b1edb2c07bcdb71c985ff80988c1987cf2d05d0ffb8791452070c8f8b893ba5167cdb3a583fd11a348694a07fbad540d1bd12a948efb2152843c12f33ab8d9d2cb504f8a76a5ee5c51615af30a5b80fd54882e396c45ef4a60318f03a285e388bdef0b5b0c9af011abe1c813f563f9fa6813f1ed3b56c6a96f3692837f0718d27255d64d349ea9b9c0ef90b08a39911aae7fc8c634614ce81292"}, @ETHTOOL_A_WOL_SOPASS={0x75, 0x3, "a6f6231869897bd0e534e8774963074e5a9fcc73319e527c4090caeefe4f7271a2727ebc9a6a5883cdd3c2f7ea0af6ebe11f2b64cf6a9e22d58ae648cbbda17e37dc18fc58e0263b8b3eaf5c251b3bc36e674806f193eb0a1b4c2dd657cb4139e6b81e33f6e7b0ba3ce8e1f4a67b5d3605"}, @ETHTOOL_A_WOL_SOPASS={0x13, 0x3, "622aeca48eeeff5eb3ec9b254d5bfd"}]}, 0x198}, 0x1, 0x0, 0x0, 0x2008040}, 0x40000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = accept4(r0, &(0x7f0000000400)=@rc={0x1f, @none}, &(0x7f0000000480)=0x80, 0x40800)
connect$qrtr(r10, &(0x7f0000000500)={0x2a, 0x5, 0xfffffffe}, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4c010}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f00000001c0)={0x6, 0x7f})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x50)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)

5m9.154078527s ago: executing program 2 (id=21208):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x40040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r0, 0x981, 0x2, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x6008014}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1200"/12, @ANYRES32=0x0, @ANYBLOB="14999a3e9781288781d4987828d7ba1d917d8b69b6c228e7bd485ace26f8f98d03e4987d4349e02bb629185a000c1cce07e2f24bbdc3d4cfbed253f442b06c33d9", @ANYRES64=0x0], 0x20) (async, rerun: 32)
unshare(0x400) (async, rerun: 32)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) (async, rerun: 64)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf094, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m9.083638999s ago: executing program 2 (id=21209):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x204}, 0x50)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="08ac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0xf38a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf3}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xfff3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x40050)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
close(r0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x204}, 0x50) (async)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
shutdown(r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="08ac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0xf38a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf3}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0xfff3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x40050) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0)) (async)

5m8.783363593s ago: executing program 2 (id=21213):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 32)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340), 0x12) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) (async)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12) (async)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a8b353cb7c7275c787114", 0x10) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRESDEC=r8, @ANYRESDEC=r5], 0x9)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r10=>0x0})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x80002011}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41000, 0x31, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
socket$l2tp(0x2, 0x2, 0x73)

5m8.782806336s ago: executing program 2 (id=21214):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x109280, 0x0)
ioctl$XFS_IOC_INUMBERS(r3, 0x40043d04, &(0x7f0000000800)={{0x5, 0x4, 0xe, 0xa, 0x3}, [{0x80, 0x4, 0x5d, 0x5}, {0xffffffffffffffff, 0x200000000000000, 0x1, 0x15}, {0x0, 0x20000afd, 0x0, 0x8}]})
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000c40), 0x12)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r9, @ANYBLOB="a1167992b4f46d08d58f67f82855373505a8b8024aa4cc0800a382b1c3e8841f9bd22b5227e5d732bb61712ae160db089f526a1f34097798ca2c14f36d33ae0d8de9800a8938d97573c237c520b3039d6596361886b84e08824d7ef74ad05e62e9df92edf8fdfc8988ac0b14b8cf91bc1456b584f98fa488c840d84b715c5bc7097b6d77064222253d8cac5976fac70c8e677850554f94219042667f96cd93ff6685cb2f9bdce64a95bebb63b9fdd98f91bccd0e9f92aa4d5e1ee56f26", @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="03202a010000000000"], 0x9)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'geneve0\x00'})

4m53.748454048s ago: executing program 33 (id=21214):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x109280, 0x0)
ioctl$XFS_IOC_INUMBERS(r3, 0x40043d04, &(0x7f0000000800)={{0x5, 0x4, 0xe, 0xa, 0x3}, [{0x80, 0x4, 0x5d, 0x5}, {0xffffffffffffffff, 0x200000000000000, 0x1, 0x15}, {0x0, 0x20000afd, 0x0, 0x8}]})
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000c40), 0x12)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r9, @ANYBLOB="a1167992b4f46d08d58f67f82855373505a8b8024aa4cc0800a382b1c3e8841f9bd22b5227e5d732bb61712ae160db089f526a1f34097798ca2c14f36d33ae0d8de9800a8938d97573c237c520b3039d6596361886b84e08824d7ef74ad05e62e9df92edf8fdfc8988ac0b14b8cf91bc1456b584f98fa488c840d84b715c5bc7097b6d77064222253d8cac5976fac70c8e677850554f94219042667f96cd93ff6685cb2f9bdce64a95bebb63b9fdd98f91bccd0e9f92aa4d5e1ee56f26", @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="03202a010000000000"], 0x9)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'geneve0\x00'})

2.561156128s ago: executing program 0 (id=23804):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000feffff10850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0xff}}, 0x20)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000400)=@gcm_128={{0x9}, "3b0f2e75c6165cd6", "98bb4c2e78ba9b21b425354215f7a97b", "34faa1c8", "11788e469c86852e"}, 0x28)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x1c, 0x80, 0xff, 0xfffff010}, {0x6, 0x0, 0xff}]}, 0x10)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000900)={{'\x00', 0x1}, {0x4}, 0x2, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)="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", 0x14b, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x155})
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x9, @loopback, 0x1}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d01000000a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000180)}}, 0x10)
r4 = socket(0x11, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x40044}}], 0x1, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c)
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14)

1.670295988s ago: executing program 0 (id=23816):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x1, 0x3], &(0x7f00000002c0)=[0x5, 0x5, 0x4, 0x3, 0x4], 0x0, 0x2}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/28, 0x1c, <r2=>0x0, &(0x7f0000000180)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94)

1.610932251s ago: executing program 0 (id=23817):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7a}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

820.795844ms ago: executing program 4 (id=23834):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b4000000000000006111ac0000000000060000000000000095000000000000008433607a70e48264fc9bf5b94b6623179dec03c742b93d3dece6d232508e43a4469d60d4371f796f3c2d5ecda2096caf8014a3c73caf1c93aae0fb0f0407a2cf1d7d506f67a453fd22ab07f15e5d729f542cd2b321ba5227559877d6e3f8937b8b4e0735"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a000000aa604c4ffdce65d00000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030173797a300000000060000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d70002000022764ca33f60e48ba00fa000000080002400000000208000140000000150900010073797a300000000005000740a8000000140000001100010000000000000000000700000a"], 0xd4}}, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000180)={<r4=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b0, 0x400]}, {0x2, 0x9, 0x8000, 0x5}}, 0x80f6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000240)=0x1})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9febfaff1700000093620000000000001800000004000000020000000000000c02000b0060a9d788ef97000d0000000000005f00"], 0x0, 0x34, 0x0, 0x0, 0x3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800b49f8b00000000000400000000010000950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0xc140)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r7, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r5}, 0x4)
r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000007dffffff181100006a4a77fccca1c88d6ae4d1330c0c8e9c75c2cb65666777b0a1cb915ca81c97821c4168f7d404", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES16=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000000600000018110000401fca067a8752ec2a4385dc3144dfb3acfbb65975599fa9b74518130c70e369d0ce5cc26384c71a7d24d9c3d7b15f07679bd52375955a7cf960a71187c6392bc48bdf342dc40e1482dd060a293bbc0f88d06c9612ae7cee4b17c3f30d7f5732df38f1c22830071b15364221186915cc3ac1d1248a8657dd8336ac11ca55402b7075a8d92910147de5a5ae0f6e2166aeb7849925186f7505ec3dbef26e74fbac7e47c4", @ANYRES64=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018630000040000000000000008000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x2, 0x2, &(0x7f0000000bc0)=""/2, 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x8, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r5, r11, r4], 0x0, 0x10, 0xffff0005}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x7e, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6026843500480601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="101e160840a8c62540169d563df1167b340b68027cd8ac1e0302040205160000000500000200002001ff0008000100000800000000d3e35bf32b5c9567a732200e183d113a6636fbb63eb7ba41288e617947221cfa139505ed5f5c9e457ca0360d807561bc4fbbd9eada2cf6c3fd47864c5aadbd66e686f781733ff1c0e94cedf8551b34e1913f1f0ef4bcdfa4eb291000a046ee36349445d67baa00c13d516a2e3bda640562060088f3e704c9229b00000000000000"], 0x0)

736.562385ms ago: executing program 0 (id=23835):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async, rerun: 32)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 32)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) (async, rerun: 64)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="6220d7512a0d47d17c"], 0x9) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r12, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async, rerun: 32)
setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) (rerun: 32)

611.02869ms ago: executing program 0 (id=23838):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x40240c4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330283ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x3}]}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f]}}, 0x0, 0x35}, 0x28)
readv(r3, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000180100002800c0001800800010016"], 0x28}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={<r11=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc0}}, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r11}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r11, 0x211d9572}, &(0x7f00000001c0)=0x8)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000c00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1c0, r13, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x130, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96c3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ce}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bef0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x400d}, 0x44004)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

610.694532ms ago: executing program 3 (id=23839):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) (rerun: 32)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x80003, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x10000, 0x9, 0x4, 0x5}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, r0, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$igmp6(0xa, 0x3, 0x2)
splice(r6, 0xfffffffffffffffe, r7, 0x0, 0x8, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))

481.297004ms ago: executing program 3 (id=23840):
syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4, 0x200000006c832, r0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]})
ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0)
write$ppp(r6, &(0x7f0000000480)="1e08", 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)={0x5c, r4, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
pselect6(0x81, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESOCT=r2], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd)

480.532712ms ago: executing program 4 (id=23841):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0)
shutdown(r5, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3}, 0x4)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r11 = socket(0x9, 0x3, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x1, &(0x7f0000000980)=@raw=[@jmp={0x5, 0x1, 0x5, 0x9, 0xa, 0x100, 0x1}], &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xa, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r3, r2], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x4000, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

271.535259ms ago: executing program 3 (id=23842):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000080)={'dvmrp1\x00', @local})
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000c40), 0x12)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=@delqdisc={0x40, 0x25, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xffe0, 0x1}, {0xa, 0xd}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x10)
write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='| *:* wm\x00'], 0x9)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000})

211.303877ms ago: executing program 4 (id=23843):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000240)=0x40080)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be844484"], 0xfdef)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, [@RTA_TABLE={0x8, 0xf, 0xb5f}]}, 0x24}}, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7, <r9=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000380)=r8}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r11, &(0x7f0000000100), 0x0}, 0x20)
connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x1, 0xffffc85e, {{0x46, 0x4, 0x2, 0x38, 0x118, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@lsrr={0x83, 0x2b, 0x26, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010102, @empty, @multicast2, @empty, @local, @empty, @empty]}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x5, "e6f470"}, {0x202505d51eb8ef56, 0x12, "d536a6832d008049d03d05a74ae67ef2"}]}, @rr={0x7, 0xf, 0xa4, [@broadcast, @private=0xa010100, @loopback]}, @ssrr={0x89, 0x2b, 0x57, [@multicast1, @multicast2, @empty, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @private=0xa010100, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x22, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x400}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@multicast2, 0x4}, {@private=0xa010102, 0x9}]}, @cipso={0x86, 0x34, 0x2, [{0x5, 0x9, "6354f26969f97d"}, {0x2, 0xe, "a83fd46afb7da6a0f42d5cdc"}, {0x5, 0x11, "ae41d38d0092baa7407a21ba618f27"}, {0x6, 0x6, "51ee3179"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xfd, [@empty, @broadcast, @private=0xa010102, @broadcast, @multicast1, @local]}]}}}}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

210.834044ms ago: executing program 3 (id=23844):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))
unshare(0x2c020400)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x20008001)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async)
unshare(0x2c020400) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000080)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x3f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x20008001) (async)

140.873608ms ago: executing program 3 (id=23845):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000a50765c6ecbee148000000000c02000000000000000000000d"], 0x0, 0x34}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2, <r8=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r9 = socket(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000010c0)={{r8, &(0x7f0000000300)='{.-(N#\x00', 0x4a041, &(0x7f0000000d80)={@align=0x6f, {0xac, 0x4, 0x4, 0x1}}, 0xfffffff2, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10}, 0x2, &(0x7f0000000440)=[{0x1, 0x10001, &(0x7f0000000e40)='NFQUEUE\x00', &(0x7f0000000e80)="f52c8778b764bb5ebc8f5ed63d2f73f202566451e83a7f2cd16b1c4a3a93a25e72f99df0b88ef844bd9bbd0876a1ff60f2513bf76092340579f535ca0d1261ce144c328d85575753c2d91eaea35856fd8539591e4ad52c118a1fc2174a87e0145cd73de8887a19575164fbd725be439dae144da1ebfb89cc9df9e613c86531e6c62900b65df0426eeb294d9cccd3cc", 0x8f, 0x18}, {0x3, 0xbf0, &(0x7f0000000540)='\\\x8f\x00\xbe\xe1\xf8\xc5e\xca\x9a\xce\xd4\xbd\xe74\x04\xe4\xb8H\x8e\xa1\x1c\xcd\xc5\xe8\xf6g\xa2\xe6\xeb\x9d%\xc2\xafC\\\xdb(\xee\x13qa\x89\x87\xfb\xad\xd2\xea\xf2\x19\xab\xee\xdc\x9b\x06;\f\xf9\xb7&\xb5\x1c\x1b\xc8\x8f\x94\xb0\x10\xdbn,\x8a4\xc7\x99\xd6\xd8\xfe\xa1\x99\xde\x90\x13\xc0z;`\xd1\xbe\xad;\x04\xfa\xdd\x8f\xd2\\2\x95Yw#}Q%\x1c6\xee\xa0\xd1Z\xb1$\x196\x052A\t\xf7\xf0\xc2K`\xb0\x14\xa3\xe9\xfe\xb1|_Q\xf6\xd9\x16\xbb\xf7,\xdc\x9a', &(0x7f0000000f80)="44d31227241e9b70e354b630dbc66292d937d32a1d7eda719585bd47e6d10bb2e42cb2fca81990dd43851a8dc8c89132ba67104d4dae8f8a2e51a8f939901966e283087d884f2dcffe08e472f2ef320605d09d406b74f428224a9c53ccde7569499238a0529216ad769acb8a50dde797b856f5a6fb2fe4200a65cdeb8ece1a0baa0e94863ebdda37e39cb133516bf85c5b5808991105ebc1f3cb72c2cb2e320a8655165a58d097f51fab0f4245c3f24a644040b57d8b6d9110dcd645c08db993685b9478c9e5be6d9cef007e6cdd1202cfcbd33fd1b22fce7717d2e3f1fbc435d53e", 0xe2}]})
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000001140)={0x9, 0x2010001, 0x4, 0x5}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)

61.453149ms ago: executing program 4 (id=23846):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) (async)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000400)={&(0x7f00000003c0)=[{&(0x7f0000000300)="1ba6f33b1fe19d1f02caeb7033003b3256f7ce32f9df44bbe87fea7b4852d00e7c733515ef0e6ee9817c096df66b5999240522d195e6b7c13f2d3ec57732562ce12c512748ecda0c9c27b1375b0f879d6494694177773fca1cca9b7fe17cc22c1fe58f580675365e73c22f8191132d9e140b800d8cdbc9f6728103a3b4", 0x7d}, {&(0x7f0000000380)="6f122ea7b59c72d9731ecb6ab2eee8db60aa389365387fa35bde88329ce7", 0x1e}], 0x2, 0x8, 0x0, 0x3, 0xffffffffffffffff, 0x5, 0x4, 0x7}) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0) (async)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94) (async)
socket$l2tp(0x2, 0x2, 0x73)

60.640976ms ago: executing program 4 (id=23847):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r5, 0x0)
ioctl$int_in(r5, 0x5421, 0x0)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa)
close(r5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x23b3, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x2, 0x8000}, 0x50)
sendmsg$nl_route(r3, 0x0, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x20004185}, 0x4040800)
r8 = socket(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r9)
sendmsg$NFC_CMD_START_POLL(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x2c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x60}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xe8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x802)
getsockname$packet(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x40, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x200408c4)
socket(0x10, 0x3, 0x0)

8.656088ms ago: executing program 4 (id=23848):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
unshare(0x22020400)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x1000)
ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000100)={0x19, 0x40, 0x6, 0xb, 0x6})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r6, 0x5421, &(0x7f0000000440)=0x6)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa)
close(r6)

7.981451ms ago: executing program 0 (id=23849):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x6004040)
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r4, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000000))
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r6, &(0x7f00000013c0)=[{&(0x7f00000014c0)=""/4075, 0xfeb}, {&(0x7f00000000c0)=""/4092, 0xffc}, {&(0x7f00000010c0)=""/242, 0xf2}], 0x3, 0x5, 0x45)
getsockopt(0xffffffffffffffff, 0x114, 0x1002724, 0x0, &(0x7f00000000c0))

0s ago: executing program 3 (id=23850):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x4, 0x0) (async, rerun: 64)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62302a940791466d00", @ANYRESDEC=r4, @ANYRESDEC=r6], 0x9) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'geneve0\x00'}) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)={0xe0000000}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xef88}, 0x94) (async, rerun: 32)
socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)

kernel console output (not intermixed with test programs):

butes in process `syz.4.21547'.
[ 2316.426304][    C1] net_ratelimit: 3 callbacks suppressed
[ 2316.426325][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2316.431349][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2316.434953][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2316.809407][T20571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21556'.
[ 2317.164455][T20585] netlink: 'syz.4.21558': attribute type 1 has an invalid length.
[ 2317.168017][T20585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2317.466248][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2317.468582][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2317.590528][T20598] xt_hashlimit: size too large, truncated to 1048576
[ 2317.598506][T20599] xt_hashlimit: size too large, truncated to 1048576
[ 2317.713754][T20602] netlink: 'syz.0.21564': attribute type 1 has an invalid length.
[ 2317.716845][T20602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2318.464934][T20635] tc_dump_action: action bad kind
[ 2318.506266][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2318.508757][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2318.511079][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2318.689424][T20640] Cannot find del_set index 4 as target
[ 2318.718233][T20641] Cannot find del_set index 4 as target
[ 2319.546324][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2319.549366][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2319.613539][T20684] netlink: 'syz.0.21582': attribute type 1 has an invalid length.
[ 2320.127706][T20701] __nla_validate_parse: 10 callbacks suppressed
[ 2320.127816][T20701] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21587'.
[ 2320.141188][T20701] syzkaller1: entered promiscuous mode
[ 2320.143268][T20701] syzkaller1: entered allmulticast mode
[ 2320.169934][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21586'.
[ 2320.180344][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21586'.
[ 2320.190966][T20699] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21586'.
[ 2320.262674][T20704] netlink: 'syz.4.21588': attribute type 21 has an invalid length.
[ 2320.265391][T20704] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2320.450623][T20707] can: request_module (can-proto-0) failed.
[ 2320.471791][T20707] xt_hashlimit: size too large, truncated to 1048576
[ 2320.687671][T20733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21598'.
[ 2320.945776][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21599'.
[ 2321.058326][T20761] netlink: 'syz.4.21603': attribute type 1 has an invalid length.
[ 2321.127210][T20767] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21605'.
[ 2321.194892][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21606'.
[ 2321.282826][T20777] netlink: 120 bytes leftover after parsing attributes in process `syz.4.21607'.
[ 2321.464512][T20789] netlink: 'syz.3.21610': attribute type 1 has an invalid length.
[ 2321.626322][    C1] net_ratelimit: 3 callbacks suppressed
[ 2321.626337][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2321.630496][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2322.167673][T20796] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21612'.
[ 2322.645854][T20786] syz.3.21610 (20786) used greatest stack depth: 19352 bytes left
[ 2322.666199][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2322.668468][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2322.751375][T20820] netlink: 'syz.3.21618': attribute type 1 has an invalid length.
[ 2322.753836][T20820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2323.706331][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2323.709361][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2323.786454][T20851] xt_hashlimit: size too large, truncated to 1048576
[ 2324.426701][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2324.725570][T20878] xt_hashlimit: size too large, truncated to 1048576
[ 2324.746306][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2324.749127][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2324.983921][T20894] infiniband uyz0: set down
[ 2324.996215][T20894] infiniband uyz0: added bridge_slave_1
[ 2324.999104][T20894] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 2325.002392][T20894] infiniband uyz0: Couldn't open port 1
[ 2325.016743][T20894] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 2325.026782][T20894] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 2325.037798][T20894] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 2325.041166][T20906] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2325.076940][T20906] syzkaller0: entered promiscuous mode
[ 2325.078801][T20906] syzkaller0: entered allmulticast mode
[ 2325.081072][T20906] tipc: Resetting bearer <eth:syzkaller0>
[ 2325.084957][T20894] RDS/IB: uyz0: added
[ 2325.088400][T20894] smc: adding ib device uyz0 with port count 1
[ 2325.090367][T20894] smc:    ib device uyz0 port 1 has no pnetid
[ 2325.148918][T20905] tipc: Resetting bearer <eth:syzkaller0>
[ 2325.283548][T20910] __nla_validate_parse: 18 callbacks suppressed
[ 2325.283562][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21643'.
[ 2325.296594][T20910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21643'.
[ 2325.299480][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21643'.
[ 2325.302218][T20910] netlink: 'syz.4.21643': attribute type 5 has an invalid length.
[ 2325.786372][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2326.826302][    C1] net_ratelimit: 1 callbacks suppressed
[ 2326.826323][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2326.831467][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2327.312016][T20905] tipc: Disabling bearer <eth:syzkaller0>
[ 2327.528284][T20913] xt_hashlimit: size too large, truncated to 1048576
[ 2327.850777][T20933] x_tables: duplicate underflow at hook 1
[ 2327.866248][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2327.868784][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2328.060528][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21652'.
[ 2328.071517][T20938] xt_hashlimit: size too large, truncated to 1048576
[ 2328.308801][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21655'.
[ 2328.324539][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21660'.
[ 2328.327467][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21660'.
[ 2328.330334][T20966] netlink: 'syz.0.21660': attribute type 5 has an invalid length.
[ 2328.333356][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21660'.
[ 2328.338390][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21660'.
[ 2328.341209][T20966] netlink: 'syz.0.21660': attribute type 5 has an invalid length.
[ 2328.374604][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21661'.
[ 2328.427536][T20973] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[ 2328.488122][T20970] gre0: left promiscuous mode
[ 2328.517295][T20970] ip6gretap1: left promiscuous mode
[ 2328.523186][T20970] ip6gretap1: left allmulticast mode
[ 2328.558970][T20973] netlink: 'syz.4.21662': attribute type 9 has an invalid length.
[ 2328.906429][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2328.909391][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2329.266655][T21054] netlink: 'syz.0.21678': attribute type 1 has an invalid length.
[ 2329.270844][T21054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2329.906355][T21059] xt_hashlimit: size too large, truncated to 1048576
[ 2329.946423][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2329.948853][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2330.783580][T21085] xt_hashlimit: size too large, truncated to 1048576
[ 2330.921161][T21093] __nla_validate_parse: 12 callbacks suppressed
[ 2330.921181][T21093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21688'.
[ 2330.986260][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2331.419421][T21111] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.21693'.
[ 2331.661179][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21694'.
[ 2331.665692][T21114] netlink: 76 bytes leftover after parsing attributes in process `syz.3.21694'.
[ 2331.672123][T21114] xt_hashlimit: size too large, truncated to 1048576
[ 2332.026178][    C1] net_ratelimit: 1 callbacks suppressed
[ 2332.026193][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2332.030363][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2332.741759][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21698'.
[ 2333.066200][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2333.068321][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2333.621766][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21702'.
[ 2333.638709][T21145] xt_hashlimit: size too large, truncated to 1048576
[ 2333.727152][T21155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21704'.
[ 2334.106187][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2334.108452][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2334.151690][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21706'.
[ 2334.164075][T21167] xt_hashlimit: size too large, truncated to 1048576
[ 2334.241572][T21172] xt_hashlimit: max too large, truncated to 1048576
[ 2334.246562][T21172] ecn_mt_check4: 55 callbacks suppressed
[ 2334.246596][T21172] xt_ecn: cannot match TCP bits for non-tcp packets
[ 2334.251064][T21172] netlink: 'syz.0.21708': attribute type 4 has an invalid length.
[ 2334.314388][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21710'.
[ 2334.319875][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21710'.
[ 2334.498223][T21186] tipc: MTU too low for tipc bearer
[ 2334.696986][T21189] xt_hashlimit: size too large, truncated to 1048576
[ 2335.146362][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2335.148810][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2335.217924][T21213] xt_hashlimit: size too large, truncated to 1048576
[ 2335.957112][T21237] xt_policy: neither incoming nor outgoing policy selected
[ 2335.957621][T21238] xt_policy: neither incoming nor outgoing policy selected
[ 2336.019613][T21240] __nla_validate_parse: 3 callbacks suppressed
[ 2336.019633][T21240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21726'.
[ 2336.185724][T21247] netlink: 120 bytes leftover after parsing attributes in process `syz.3.21728'.
[ 2336.189779][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2336.189933][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2336.467113][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.471014][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.474076][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.479852][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.483797][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.487858][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.491128][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21732'.
[ 2336.494153][T21261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21731'.
[ 2336.873221][T21285] netlink: 'syz.4.21737': attribute type 1 has an invalid length.
[ 2337.226279][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2337.229563][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2338.247830][T21325] netlink: 'syz.0.21746': attribute type 1 has an invalid length.
[ 2338.257165][T21325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2338.270631][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2338.273694][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2338.746930][T11282] page_pool_release_retry() stalled pool shutdown: id 1134, 3329 inflight 241 sec
[ 2339.208110][T21336] xt_hashlimit: size too large, truncated to 1048576
[ 2339.306296][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2339.309210][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2339.554568][T21351] xt_hashlimit: size too large, truncated to 1048576
[ 2340.111516][T21362] netlink: 'syz.3.21757': attribute type 1 has an invalid length.
[ 2340.117682][T21362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2340.346281][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2340.349332][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2340.520919][T21373] xt_hashlimit: size too large, truncated to 1048576
[ 2340.772880][T21378] xt_hashlimit: size too large, truncated to 1048576
[ 2341.226182][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2341.735496][T21393] __nla_validate_parse: 72 callbacks suppressed
[ 2341.735519][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21766'.
[ 2342.426230][    C1] net_ratelimit: 3 callbacks suppressed
[ 2342.426250][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2342.431542][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2342.657207][T21405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21771'.
[ 2342.829147][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21769'.
[ 2342.837496][T21411] xt_hashlimit: size too large, truncated to 1048576
[ 2342.882596][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21772'.
[ 2342.899539][T21413] xt_hashlimit: size too large, truncated to 1048576
[ 2343.019294][T21418] netlink: 'syz.4.21773': attribute type 1 has an invalid length.
[ 2343.022642][T21418] netlink: 'syz.4.21773': attribute type 2 has an invalid length.
[ 2343.025803][T21418] netlink: 'syz.4.21773': attribute type 1 has an invalid length.
[ 2343.029429][T21418] netlink: 'syz.4.21773': attribute type 3 has an invalid length.
[ 2343.032541][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21773'.
[ 2343.265644][T21424] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[ 2343.466292][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2343.468766][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2343.641789][T21442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21777'.
[ 2343.768992][T21451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21779'.
[ 2343.986199][T21478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21786'.
[ 2344.275168][T21492] netlink: 'syz.0.21791': attribute type 3 has an invalid length.
[ 2344.339332][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21790'.
[ 2344.350591][T21490] xt_hashlimit: size too large, truncated to 1048576
[ 2344.402208][T21506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21794'.
[ 2344.479475][T21508] netlink: 'syz.0.21795': attribute type 2 has an invalid length.
[ 2344.495147][T21508] netlink: 'syz.0.21795': attribute type 1 has an invalid length.
[ 2344.500514][T21508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2344.506221][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2344.509263][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2345.546307][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2345.548982][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2347.626258][    C1] net_ratelimit: 2 callbacks suppressed
[ 2347.626272][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2347.630460][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2348.666254][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2348.669090][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2349.706429][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2349.709347][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2350.746244][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2350.748509][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2351.786334][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2351.789199][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2352.826209][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2352.828633][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2353.866277][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2353.869116][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2354.906521][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2354.909376][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2355.946302][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2355.949156][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2356.294617][T21560] __nla_validate_parse: 3 callbacks suppressed
[ 2356.294636][T21560] netlink: 120 bytes leftover after parsing attributes in process `syz.3.21811'.
[ 2356.450451][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21808'.
[ 2356.456683][T21565] xt_hashlimit: size too large, truncated to 1048576
[ 2356.986267][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2356.989117][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2357.434520][T21598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21819'.
[ 2357.438688][T21597] netlink: 176 bytes leftover after parsing attributes in process `syz.4.21818'.
[ 2358.026152][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2358.028458][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2358.298033][T21615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21823'.
[ 2358.421595][T21627] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21827'.
[ 2358.533251][T21629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21828'.
[ 2359.066151][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2359.068460][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2359.466198][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2359.626481][T21658] netlink: 'syz.0.21836': attribute type 1 has an invalid length.
[ 2359.629268][T21658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2359.830266][T21660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21837'.
[ 2359.842986][T21660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21837'.
[ 2359.885102][T21662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21838'.
[ 2360.106275][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2360.108546][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2361.146182][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2361.149014][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2361.946774][T21754] __nla_validate_parse: 5 callbacks suppressed
[ 2361.946821][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21860'.
[ 2361.972744][T21754] xt_hashlimit: size too large, truncated to 1048576
[ 2361.998000][T21762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21862'.
[ 2362.001595][T21762] nbd: must specify at least one socket
[ 2362.096568][T21768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21863'.
[ 2362.105655][T21769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21863'.
[ 2362.123340][T21769] xt_check_match_common: 23 callbacks suppressed
[ 2362.123360][T21769] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 2362.151559][T21770] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 2362.186227][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2362.323345][T21775] netlink: 'syz.0.21865': attribute type 21 has an invalid length.
[ 2362.333311][T21775] netlink: 164 bytes leftover after parsing attributes in process `syz.0.21865'.
[ 2362.440240][T21772] netlink: 84 bytes leftover after parsing attributes in process `syz.3.21864'.
[ 2362.579163][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21867'.
[ 2362.583628][T21782] xt_hashlimit: size too large, truncated to 1048576
[ 2362.637655][T21789] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21869'.
[ 2362.671902][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21868'.
[ 2362.714079][T21791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21870'.
[ 2362.810887][T21793] bond19: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2362.823204][T21793] bond19: (slave lo): Enslaving as an active interface with an up link
[ 2363.226376][    C1] net_ratelimit: 2 callbacks suppressed
[ 2363.226389][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2363.231506][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2364.009312][T21864] netlink: 'syz.4.21894': attribute type 4 has an invalid length.
[ 2364.142055][T21868] syzkaller0: entered promiscuous mode
[ 2364.146283][T21868] syzkaller0: entered allmulticast mode
[ 2364.266257][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2364.268702][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2364.456863][T21897] bond19: (slave lo): Releasing backup interface
[ 2364.462094][T21897] bond19: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2364.467228][T21897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2364.630792][T21908] netlink: 'syz.0.21908': attribute type 1 has an invalid length.
[ 2364.637509][T21908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2365.073244][T21930] netlink: 'syz.3.21913': attribute type 1 has an invalid length.
[ 2365.073814][T21931] netlink: 'syz.3.21913': attribute type 1 has an invalid length.
[ 2365.076445][T21930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2365.078650][T21931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2365.306406][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2365.309502][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2365.353330][T21933] netlink: 'syz.4.21914': attribute type 11 has an invalid length.
[ 2365.462081][T21943] syzkaller1: entered promiscuous mode
[ 2365.464320][T21943] syzkaller1: entered allmulticast mode
[ 2365.469985][T21943] x_tables: duplicate underflow at hook 1
[ 2366.591275][T22008] netlink: 'syz.3.21931': attribute type 1 has an invalid length.
[ 2367.145521][T22021] ip6_vti0 speed is unknown, defaulting to 1000
[ 2367.255664][T22021] lo speed is unknown, defaulting to 1000
[ 2367.317406][T22033] __nla_validate_parse: 16 callbacks suppressed
[ 2367.317420][T22033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21937'.
[ 2367.397917][T22036] netlink: 'syz.3.21938': attribute type 1 has an invalid length.
[ 2368.114870][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21941'.
[ 2368.120038][T22045] xt_hashlimit: size too large, truncated to 1048576
[ 2368.426232][    C1] net_ratelimit: 5 callbacks suppressed
[ 2368.426251][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2368.431390][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2368.444815][T22049] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.21942'.
[ 2368.454044][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21942'.
[ 2368.649375][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21944'.
[ 2368.671774][T22053] xt_hashlimit: size too large, truncated to 1048576
[ 2369.147879][T22073] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2369.274460][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21949'.
[ 2369.330005][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21950'.
[ 2369.334373][T22085] xt_hashlimit: size too large, truncated to 1048576
[ 2369.370561][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21951'.
[ 2369.466152][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2369.468644][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2369.470938][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2369.549723][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21953'.
[ 2369.733864][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21955'.
[ 2369.742064][T22108] xt_hashlimit: size too large, truncated to 1048576
[ 2370.108487][T22115] : entered promiscuous mode
[ 2370.343763][T22123] netlink: 'syz.3.21960': attribute type 1 has an invalid length.
[ 2370.349336][T22123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2370.480066][T22137] netlink: 'syz.0.21964': attribute type 1 has an invalid length.
[ 2370.483280][T22137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2370.506345][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2370.508452][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2370.807773][ T9153] Bluetooth: hci4: link tx timeout
[ 2370.815856][ T9153] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 2370.862699][T22149] xt_hashlimit: size too large, truncated to 1048576
[ 2371.556748][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2371.636511][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2371.670484][T22166] netlink: 'syz.4.21971': attribute type 1 has an invalid length.
[ 2373.627551][    C1] net_ratelimit: 4 callbacks suppressed
[ 2373.627567][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2373.631639][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2373.706350][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2374.300876][T22195] __nla_validate_parse: 5 callbacks suppressed
[ 2374.300898][T22195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21977'.
[ 2374.310045][T22195] xt_hashlimit: size too large, truncated to 1048576
[ 2374.666263][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2374.668725][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2374.753357][T22170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2374.758823][T22177] tipc: Bearer <eth:erspan0>: already 2 bearers with priority 10
[ 2374.762552][T22177] tipc: Bearer <eth:erspan0>: trying with adjusted priority
[ 2374.783547][T22177] tipc: Enabled bearer <eth:erspan0>, priority 9
[ 2374.849176][T22202] sctp: [Deprecated]: syz.0.21979 (pid 22202) Use of int in max_burst socket option deprecated.
[ 2374.849176][T22202] Use struct sctp_assoc_value instead
[ 2374.942562][T22210] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21981'.
[ 2374.947861][T22210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21981'.
[ 2374.992625][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21983'.
[ 2375.236414][T22228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21986'.
[ 2375.290885][T22225] syzkaller1: entered promiscuous mode
[ 2375.297667][T22225] syzkaller1: entered allmulticast mode
[ 2375.311269][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21985'.
[ 2375.648863][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21990'.
[ 2375.669445][T22242] xt_hashlimit: size too large, truncated to 1048576
[ 2375.706228][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2375.708817][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2375.960883][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21995'.
[ 2376.746355][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2376.749493][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2376.971460][T22275] netlink: 'syz.3.21999': attribute type 5 has an invalid length.
[ 2376.980201][T22275] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.21999'.
[ 2376.990051][T22276] rdma_rxe: rxe_newlink: failed to add lo
[ 2377.310537][T22298] netlink: 'syz.4.22002': attribute type 1 has an invalid length.
[ 2377.321123][T22298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2378.047736][T22321] sctp: [Deprecated]: syz.0.22007 (pid 22321) Use of int in maxseg socket option.
[ 2378.047736][T22321] Use struct sctp_assoc_value instead
[ 2378.094170][T22324] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[ 2378.180943][T22326] x_tables: duplicate underflow at hook 1
[ 2378.267064][T22331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22011'.
[ 2378.351518][T22335] netlink: 'syz.4.22013': attribute type 1 has an invalid length.
[ 2378.354148][T22335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2378.470068][T22333] xt_hashlimit: size too large, truncated to 1048576
[ 2379.316863][T22352] syzkaller0: entered promiscuous mode
[ 2379.322528][T22352] syzkaller0: entered allmulticast mode
[ 2379.700028][T22378] netlink: 'syz.4.22021': attribute type 1 has an invalid length.
[ 2379.702763][T22378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2380.374266][T22383] __nla_validate_parse: 2 callbacks suppressed
[ 2380.374283][T22383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22024'.
[ 2380.508738][T10364] wlan1: Trigger new scan to find an IBSS to join
[ 2380.584848][T22390] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22026'.
[ 2380.647762][T22393] syzkaller0: entered promiscuous mode
[ 2380.650369][T22393] syzkaller0: entered allmulticast mode
[ 2381.233236][T22403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22029'.
[ 2381.239042][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22029'.
[ 2381.319982][T22409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22031'.
[ 2381.465848][T22419] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22034'.
[ 2383.180170][T22451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.22040'.
[ 2383.189854][T22451] netlink: 2 bytes leftover after parsing attributes in process `syz.3.22040'.
[ 2383.257025][T22455] netlink: 280 bytes leftover after parsing attributes in process `syz.0.22042'.
[ 2383.274945][T22454] netlink: 'syz.3.22043': attribute type 1 has an invalid length.
[ 2383.281156][T22454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2383.367861][T22455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22042'.
[ 2383.652586][T22472] ksmbd: Unknown IPC event: 14, ignore.
[ 2383.748470][T22475] netlink: 'syz.4.22049': attribute type 1 has an invalid length.
[ 2383.751554][T22475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2384.563735][T22503] sctp: [Deprecated]: syz.4.22058 (pid 22503) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2384.563735][T22503] Use struct sctp_sack_info instead
[ 2384.575773][T22503] syzkaller1: entered promiscuous mode
[ 2384.578692][T22503] syzkaller1: entered allmulticast mode
[ 2384.893325][T22516] macvtap1: entered promiscuous mode
[ 2384.895489][T22516] bridge_slave_1: entered promiscuous mode
[ 2384.899302][T22516] macvtap1: entered allmulticast mode
[ 2384.902841][T22516] bridge_slave_1: entered allmulticast mode
[ 2384.910093][T22516] bridge_slave_1: left allmulticast mode
[ 2384.912503][T22516] bridge_slave_1: left promiscuous mode
[ 2384.915101][T22516] macvtap1: left promiscuous mode
[ 2384.917722][T22516] macvtap1: left allmulticast mode
[ 2385.225171][T22534] netlink: 'syz.0.22067': attribute type 62 has an invalid length.
[ 2385.461062][T22539] __nla_validate_parse: 6 callbacks suppressed
[ 2385.461076][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22069'.
[ 2385.484271][T22539] xt_hashlimit: size too large, truncated to 1048576
[ 2385.705161][T22557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22074'.
[ 2385.741950][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22072'.
[ 2385.753895][T22553] xt_hashlimit: size too large, truncated to 1048576
[ 2385.801683][T22570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22077'.
[ 2386.158144][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22081'.
[ 2386.165700][T22581] xt_hashlimit: size too large, truncated to 1048576
[ 2386.565116][T22620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22090'.
[ 2387.288350][T22662] netlink: 'syz.3.22101': attribute type 1 has an invalid length.
[ 2387.292676][T22662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2387.515235][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22104'.
[ 2387.522350][T22672] xt_hashlimit: size too large, truncated to 1048576
[ 2387.904089][T22697] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22111'.
[ 2388.097165][T22706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22114'.
[ 2388.217349][T22717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22118'.
[ 2388.809186][T22735] netlink: 'syz.4.22122': attribute type 1 has an invalid length.
[ 2388.811745][T22735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2389.021297][T22737] bond21: entered promiscuous mode
[ 2389.023165][T22737] bond21: entered allmulticast mode
[ 2389.330379][T22752] xt_hashlimit: size too large, truncated to 1048576
[ 2389.498695][T22760] xt_hashlimit: size too large, truncated to 1048576
[ 2389.899992][T22793] xt_hashlimit: size too large, truncated to 1048576
[ 2390.987587][T22819] __nla_validate_parse: 77 callbacks suppressed
[ 2390.987601][T22819] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.22144'.
[ 2391.004756][T22823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22145'.
[ 2391.037429][T22828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22147'.
[ 2391.082392][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22146'.
[ 2392.153198][T22859] IPVS: Error connecting to the multicast addr
[ 2392.191424][T22861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22156'.
[ 2392.332652][T22866] netlink: 72 bytes leftover after parsing attributes in process `syz.3.22157'.
[ 2392.338319][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22157'.
[ 2392.615854][T22874] netlink: 'syz.3.22159': attribute type 8 has an invalid length.
[ 2392.622506][T22874] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.22159'.
[ 2392.633339][T22873] netlink: 'syz.3.22159': attribute type 1 has an invalid length.
[ 2392.635913][T22873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2392.961955][T22879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22161'.
[ 2393.090619][T22887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22163'.
[ 2393.669635][T22899] bond21: left promiscuous mode
[ 2393.673678][T22899] bond21: left allmulticast mode
[ 2393.731222][T22908] syzkaller1: entered promiscuous mode
[ 2393.733629][T22908] syzkaller1: entered allmulticast mode
[ 2394.040670][T22919] netlink: 'syz.0.22172': attribute type 1 has an invalid length.
[ 2394.043915][T22919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2394.065267][T22915] ip6_vti0 speed is unknown, defaulting to 1000
[ 2394.168361][T22915] lo speed is unknown, defaulting to 1000
[ 2394.281962][T22931] netlink: 'syz.0.22175': attribute type 1 has an invalid length.
[ 2394.289802][T22931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2395.392209][T22951] xt_hashlimit: size too large, truncated to 1048576
[ 2395.554324][T22959] netlink: 'syz.4.22183': attribute type 1 has an invalid length.
[ 2395.557764][T22959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2396.546086][T22977] __nla_validate_parse: 9 callbacks suppressed
[ 2396.546099][T22977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22189'.
[ 2396.588259][T22982] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22191'.
[ 2396.625778][T22985] netlink: 'syz.4.22192': attribute type 58 has an invalid length.
[ 2396.628680][T22985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22192'.
[ 2396.837670][T23004] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[ 2396.875060][T23009] netlink: 96 bytes leftover after parsing attributes in process `syz.0.22197'.
[ 2396.878835][T23009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22197'.
[ 2396.935810][T27159] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 2397.769431][T23021] netlink: 'syz.4.22199': attribute type 1 has an invalid length.
[ 2397.772796][T23021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2398.636102][T23024] syzkaller1: entered promiscuous mode
[ 2398.638016][T23024] syzkaller1: entered allmulticast mode
[ 2398.739242][T23026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2399.067488][T13148] page_pool_release_retry() stalled pool shutdown: id 1134, 3329 inflight 301 sec
[ 2399.595095][T23031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22202'.
[ 2399.826223][T23004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2399.904849][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22203'.
[ 2400.228017][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22206'.
[ 2400.409788][T23051] xt_hashlimit: size too large, truncated to 1048576
[ 2400.829746][T23065] syzkaller1: entered promiscuous mode
[ 2400.832026][T23067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22213'.
[ 2400.836593][T23065] syzkaller1: entered allmulticast mode
[ 2400.869114][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22211'.
[ 2400.873758][T23062] xt_hashlimit: size too large, truncated to 1048576
[ 2401.444878][T23101] xt_hashlimit: size too large, truncated to 1048576
[ 2401.626290][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2402.872804][T23129] __nla_validate_parse: 5 callbacks suppressed
[ 2402.872818][T23129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22229'.
[ 2403.085067][T23141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22232'.
[ 2403.527612][T23160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22237'.
[ 2403.535357][T23160] xt_hashlimit: size too large, truncated to 1048576
[ 2403.795204][T23175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22241'.
[ 2404.565223][T23183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22242'.
[ 2405.433097][T23186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22243'.
[ 2406.747545][T23170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2406.836865][T23191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22246'.
[ 2406.938962][T23211] netlink: 'syz.3.22249': attribute type 1 has an invalid length.
[ 2406.939375][T23205] netlink: 'syz.0.22248': attribute type 1 has an invalid length.
[ 2406.944711][T23205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2406.981264][T23211] bond22: (slave bridge49): making interface the new active one
[ 2406.992255][T23211] bond22: (slave bridge49): Enslaving as an active interface with an up link
[ 2407.829949][T23238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22254'.
[ 2407.833575][T23214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2408.024873][T23234] ip6_vti0 speed is unknown, defaulting to 1000
[ 2408.040016][T23242] netlink: 'syz.4.22256': attribute type 1 has an invalid length.
[ 2408.044254][T23242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2408.134672][T23234] lo speed is unknown, defaulting to 1000
[ 2408.294533][T23249] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22257'.
[ 2408.471765][T23254] netlink: 'syz.0.22259': attribute type 1 has an invalid length.
[ 2408.474490][T23254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2408.983856][T23264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22263'.
[ 2408.990860][T23267] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22264'.
[ 2408.993959][T23266] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22264'.
[ 2409.029599][T23270] syzkaller1: entered promiscuous mode
[ 2409.031467][T23270] syzkaller1: entered allmulticast mode
[ 2409.158505][T23274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22266'.
[ 2409.299362][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22269'.
[ 2409.396919][T23295] netlink: 44 bytes leftover after parsing attributes in process `syz.4.22273'.
[ 2409.462298][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22272'.
[ 2409.469442][T23293] xt_hashlimit: size too large, truncated to 1048576
[ 2409.500203][T23304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22274'.
[ 2409.504075][T23303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22274'.
[ 2409.594341][T23300] xt_hashlimit: size too large, truncated to 1048576
[ 2409.829345][T23321] xt_CT: No such helper "netbios-ns"
[ 2409.865160][T23327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2410.023294][T23341] netlink: 'syz.4.22279': attribute type 1 has an invalid length.
[ 2410.027649][T23341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2410.283779][T23359] netlink: 'syz.4.22284': attribute type 1 has an invalid length.
[ 2410.291799][T23359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2410.324748][T23361] netlink: 'syz.0.22285': attribute type 10 has an invalid length.
[ 2410.471295][T23370] syzkaller1: entered promiscuous mode
[ 2410.473225][T23370] syzkaller1: entered allmulticast mode
[ 2412.166281][T23417] netlink: 'syz.4.22300': attribute type 1 has an invalid length.
[ 2412.169410][T23417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2412.196279][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2412.793053][T23430] netlink: 'syz.0.22304': attribute type 1 has an invalid length.
[ 2412.797839][T23430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2413.653751][T23454] __nla_validate_parse: 15 callbacks suppressed
[ 2413.653769][T23454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22312'.
[ 2413.691185][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22312'.
[ 2413.753104][T23470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22316'.
[ 2413.764908][T23470] netlink: 200 bytes leftover after parsing attributes in process `syz.0.22316'.
[ 2413.770030][T23470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22316'.
[ 2413.774510][T23464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22314'.
[ 2414.670845][T23496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22323'.
[ 2414.812186][T23502] tc action pedit 'at' offset 9 out of bounds
[ 2415.688010][T23509] ip6_vti0 speed is unknown, defaulting to 1000
[ 2415.706225][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2415.798442][T23509] lo speed is unknown, defaulting to 1000
[ 2415.923416][T23517] sctp: [Deprecated]: syz.4.22331 (pid 23517) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2415.923416][T23517] Use struct sctp_sack_info instead
[ 2415.943356][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22330'.
[ 2415.962795][T23515] xt_hashlimit: size too large, truncated to 1048576
[ 2416.240352][T23531] netlink: 'syz.3.22334': attribute type 2 has an invalid length.
[ 2416.249183][T23531] netlink: 'syz.3.22334': attribute type 1 has an invalid length.
[ 2416.254798][T23531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.22334'.
[ 2416.264739][T23533] netlink: 'syz.3.22334': attribute type 4 has an invalid length.
[ 2416.272736][T23533] netlink: 420 bytes leftover after parsing attributes in process `syz.3.22334'.
[ 2417.461841][T23571] netlink: 'syz.3.22344': attribute type 1 has an invalid length.
[ 2417.465707][T23571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2417.912125][T23588] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2418.333254][T23609] xt_hashlimit: size too large, truncated to 1048576
[ 2418.904626][T23628] openvswitch: netlink: Message has 4 unknown bytes.
[ 2419.150710][T23636] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 2419.157147][T23636] pim6reg0: linktype set to 780
[ 2419.219856][T23637] __nla_validate_parse: 9 callbacks suppressed
[ 2419.219870][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22362'.
[ 2419.235790][T23634] xt_hashlimit: size too large, truncated to 1048576
[ 2419.260484][T23639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22364'.
[ 2419.427979][T23644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22365'.
[ 2419.437978][T23644] xt_hashlimit: size too large, truncated to 1048576
[ 2419.641530][T23651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22367'.
[ 2420.058886][T23675] netlink: 384 bytes leftover after parsing attributes in process `syz.0.22373'.
[ 2420.120939][T23683] veth0_to_team: entered promiscuous mode
[ 2420.128403][T23684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22375'.
[ 2420.190557][T23688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22378'.
[ 2420.318157][T23706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22383'.
[ 2420.700860][T23722] syzkaller0: entered promiscuous mode
[ 2420.703020][T23722] syzkaller0: entered allmulticast mode
[ 2420.708733][T23721] netlink: 76 bytes leftover after parsing attributes in process `syz.4.22386'.
[ 2420.715448][T23721] netlink: 'syz.4.22386': attribute type 1 has an invalid length.
[ 2420.719838][T23721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2421.259959][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22387'.
[ 2421.590702][T23754] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 2421.978227][T23776] xt_hashlimit: size too large, truncated to 1048576
[ 2422.104731][T23780] netlink: 'syz.4.22402': attribute type 1 has an invalid length.
[ 2422.264502][T23784] netlink: 'syz.4.22403': attribute type 1 has an invalid length.
[ 2422.349357][T23784] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2422.412976][T23787] bond2: (slave ip6erspan0): making interface the new active one
[ 2422.417698][T23787] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[ 2422.656501][T23797] xt_hashlimit: size too large, truncated to 1048576
[ 2422.781369][T23804] xt_hashlimit: size too large, truncated to 1048576
[ 2423.334528][T23849] netlink: 'syz.3.22420': attribute type 1 has an invalid length.
[ 2423.366914][T23849] 8021q: adding VLAN 0 to HW filter on device bond23
[ 2423.374064][T23849] veth0_to_bond: left allmulticast mode
[ 2423.376639][T23849] veth0_to_bond: left promiscuous mode
[ 2423.378563][T23849] bridge4: port 1(veth0_to_bond) entered disabled state
[ 2423.405616][T23849] bond23: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 2423.539571][T23856] netlink: 'syz.4.22423': attribute type 1 has an invalid length.
[ 2423.542680][T23856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2423.728685][T23867] netlink: 'syz.3.22426': attribute type 1 has an invalid length.
[ 2423.731890][T23867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2424.617580][T23891] __nla_validate_parse: 11 callbacks suppressed
[ 2424.617594][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22431'.
[ 2424.673412][T23893] xt_CONNSECMARK: invalid mode: 0
[ 2424.798124][T23910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22435'.
[ 2424.989852][T23910] syz_tun: left promiscuous mode
[ 2425.033905][T23926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22439'.
[ 2425.042835][T23910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2425.047583][T23910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2425.200004][T23910] veth0_to_team: left promiscuous mode
[ 2425.230559][T23910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2425.249569][T23910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2425.576743][T27159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2425.580977][T27159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2425.585536][T27159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2425.589511][T27159] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2425.824862][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22441'.
[ 2425.832164][T23938] xt_hashlimit: size too large, truncated to 1048576
[ 2426.732949][T23961] netlink: 'syz.0.22447': attribute type 1 has an invalid length.
[ 2426.740739][T23961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2426.917652][T23965] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22449'.
[ 2426.922024][T23966] syzkaller1: entered promiscuous mode
[ 2426.923951][T23966] syzkaller1: entered allmulticast mode
[ 2427.591735][T23991] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22456'.
[ 2427.706834][T23996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22457'.
[ 2427.709969][T23995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22457'.
[ 2427.995038][T24019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22462'.
[ 2427.999553][T24019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22462'.
[ 2428.004879][T24019] xt_hashlimit: size too large, truncated to 1048576
[ 2428.144229][T24028] netlink: 'syz.0.22464': attribute type 2 has an invalid length.
[ 2428.148147][T24028] netlink: 'syz.0.22464': attribute type 1 has an invalid length.
[ 2428.151886][T24028] netlink: 'syz.0.22464': attribute type 1 has an invalid length.
[ 2428.408157][T24041] netlink: 'syz.3.22468': attribute type 5 has an invalid length.
[ 2429.644292][T24073] tipc: Invalid UDP bearer configuration
[ 2429.644342][T24073] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2429.824274][T24076] __nla_validate_parse: 10 callbacks suppressed
[ 2429.824288][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22477'.
[ 2429.833506][T24076] xt_hashlimit: size too large, truncated to 1048576
[ 2429.971543][T24080] netlink: 'syz.3.22478': attribute type 58 has an invalid length.
[ 2430.066130][T24082] hmac(sha2: entered promiscuous mode
[ 2430.071625][T24082] netlink: 'syz.3.22479': attribute type 3 has an invalid length.
[ 2430.074236][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22479'.
[ 2430.122412][T24084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22480'.
[ 2430.126452][T24084] xt_TCPMSS: Only works on TCP SYN packets
[ 2430.238674][T24084] netlink: 'syz.3.22480': attribute type 1 has an invalid length.
[ 2430.242453][T24084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2430.537322][T24096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22483'.
[ 2430.544006][T24096] xt_hashlimit: size too large, truncated to 1048576
[ 2430.882873][T24103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22485'.
[ 2431.169490][T24111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22487'.
[ 2431.180426][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22487'.
[ 2431.281227][T24117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22489'.
[ 2431.362022][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22491'.
[ 2431.369843][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22491'.
[ 2431.907741][T24148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2431.918126][T24152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2433.158771][T24196] xt_hashlimit: size too large, truncated to 1048576
[ 2433.372388][T24215] netlink: 'syz.0.22513': attribute type 2 has an invalid length.
[ 2433.511509][T24215] xt_hashlimit: size too large, truncated to 1048576
[ 2434.375138][T24230] xt_hashlimit: size too large, truncated to 1048576
[ 2434.616126][T24240] netlink: 'syz.3.22520': attribute type 1 has an invalid length.
[ 2434.625028][T24240] netlink: 'syz.3.22520': attribute type 1 has an invalid length.
[ 2434.627955][T24240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2434.691451][T24240] block nbd3: Unsupported socket: should be TCP or UNIX.
[ 2435.421446][T24255] __nla_validate_parse: 13 callbacks suppressed
[ 2435.421459][T24255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22524'.
[ 2435.638132][T24267] netlink: 'syz.4.22528': attribute type 12 has an invalid length.
[ 2435.644446][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22528'.
[ 2435.655466][T24260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22526'.
[ 2435.666069][T24260] netlink: 'syz.3.22526': attribute type 4 has an invalid length.
[ 2435.690709][T24270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22529'.
[ 2435.699515][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22529'.
[ 2435.813653][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22531'.
[ 2435.820987][T24278] netlink: 34 bytes leftover after parsing attributes in process `syz.3.22532'.
[ 2435.821952][T24276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22531'.
[ 2436.052507][T24294] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2436.128434][T24302] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2436.282671][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22539'.
[ 2436.307170][T24301] xt_hashlimit: size too large, truncated to 1048576
[ 2436.475546][T24315] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[ 2436.721140][T24322] xt_hashlimit: size too large, truncated to 1048576
[ 2436.769871][T24320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22544'.
[ 2437.071759][T24330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2437.171048][T24334] netlink: 'syz.4.22548': attribute type 1 has an invalid length.
[ 2437.174306][T24334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2437.273326][T24339] 8021q: adding VLAN 0 to HW filter on device bond24
[ 2437.284849][T24339] 8021q: adding VLAN 0 to HW filter on device bond24
[ 2437.288606][T24339] bond24: (slave vcan0): The slave device specified does not support setting the MAC address
[ 2437.292778][T24339] bond24: (slave vcan0): Error -95 calling set_mac_address
[ 2437.390352][T24348] syzkaller0: entered promiscuous mode
[ 2437.392513][T24348] syzkaller0: entered allmulticast mode
[ 2440.328537][T24398] netlink: 'syz.4.22564': attribute type 1 has an invalid length.
[ 2440.356920][T24398] nbd0: detected capacity change from 63 to 339754496
[ 2440.361196][T15340] block nbd0: Dead connection, failed to find a fallback
[ 2440.363884][T24398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2440.592322][T24406] netlink: 'syz.4.22566': attribute type 1 has an invalid length.
[ 2440.594842][T24406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2441.240621][T24413] __nla_validate_parse: 7 callbacks suppressed
[ 2441.240635][T24413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22569'.
[ 2441.355569][T24411] netlink: 'syz.0.22568': attribute type 1 has an invalid length.
[ 2441.358629][T24411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.22568'.
[ 2441.369315][T24411] netlink: 658 bytes leftover after parsing attributes in process `syz.0.22568'.
[ 2441.373098][T24411] netlink: 'syz.0.22568': attribute type 1 has an invalid length.
[ 2441.376738][T24411] netlink: 'syz.0.22568': attribute type 1 has an invalid length.
[ 2441.745188][T24426] ip6_vti0 speed is unknown, defaulting to 1000
[ 2441.872388][T24441] openvswitch: netlink: nsh attr 14 is out of range max 3
[ 2441.874749][T24441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2441.921456][T24426] lo speed is unknown, defaulting to 1000
[ 2442.279199][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2442.441833][T24447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22578'.
[ 2442.919834][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22581'.
[ 2442.927319][T24458] xt_hashlimit: size too large, truncated to 1048576
[ 2443.126560][T24465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22583'.
[ 2443.405295][T24479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2443.436997][T24467] ip6_vti0 speed is unknown, defaulting to 1000
[ 2443.596892][T24467] lo speed is unknown, defaulting to 1000
[ 2443.688765][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22590'.
[ 2443.695398][T24490] xt_hashlimit: size too large, truncated to 1048576
[ 2444.057255][T24494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[ 2444.185109][T24494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22591'.
[ 2444.233663][T24494] xt_hashlimit: size too large, truncated to 1048576
[ 2444.879870][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22601'.
[ 2445.109090][T24545] netlink: 'syz.3.22602': attribute type 1 has an invalid length.
[ 2445.112447][T24545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2445.854480][T24552] netlink: 'syz.3.22605': attribute type 1 has an invalid length.
[ 2445.857877][T24552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2446.112085][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22606'.
[ 2446.119473][T24554] xt_hashlimit: size too large, truncated to 1048576
[ 2446.377434][T24567] netlink: 'syz.0.22609': attribute type 83 has an invalid length.
[ 2446.544280][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22610'.
[ 2446.551185][T24569] netlink: 256 bytes leftover after parsing attributes in process `syz.0.22610'.
[ 2446.561687][T24569] xt_hashlimit: size too large, truncated to 1048576
[ 2446.854674][T24586] netlink: 260 bytes leftover after parsing attributes in process `syz.4.22615'.
[ 2446.859098][T24583] netlink: 'syz.0.22614': attribute type 1 has an invalid length.
[ 2446.861669][T24583] netlink: 2704 bytes leftover after parsing attributes in process `syz.0.22614'.
[ 2446.931315][T24593] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22616'.
[ 2446.959087][T24596] netlink: 'syz.0.22617': attribute type 5 has an invalid length.
[ 2447.781351][T24613] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22622'.
[ 2447.784491][T24613] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22622'.
[ 2447.788626][T24613] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22622'.
[ 2447.793024][T24613] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22622'.
[ 2447.797258][T24613] netlink: 120 bytes leftover after parsing attributes in process `syz.4.22622'.
[ 2447.850747][T24620] netlink: 'syz.4.22624': attribute type 11 has an invalid length.
[ 2447.854219][T24621] netlink: 'syz.4.22624': attribute type 11 has an invalid length.
[ 2448.012819][T24629] netlink: 'syz.4.22625': attribute type 1 has an invalid length.
[ 2448.018691][T24629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2448.478881][T24641] xt_hashlimit: size too large, truncated to 1048576
[ 2448.765209][T24652] netlink: 'syz.0.22633': attribute type 13 has an invalid length.
[ 2448.768654][T24652] netlink: 'syz.0.22633': attribute type 13 has an invalid length.
[ 2448.832636][T24659] erspan0: MTU too low for tipc bearer
[ 2448.837700][T24659] tipc: Disabling bearer <eth:erspan0>
[ 2449.580901][T24666] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 2449.922182][T24690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2450.366833][T24743] xt_hashlimit: size too large, truncated to 1048576
[ 2450.942174][T24767] xt_hashlimit: size too large, truncated to 1048576
[ 2450.964751][T24763] xt_hashlimit: size too large, truncated to 1048576
[ 2451.553526][T24794] __nla_validate_parse: 16 callbacks suppressed
[ 2451.553539][T24794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22669'.
[ 2451.814150][T24810] netlink: 'syz.4.22671': attribute type 1 has an invalid length.
[ 2452.009768][T24815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22673'.
[ 2452.019251][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22673'.
[ 2452.022538][T24815] netlink: 'syz.0.22673': attribute type 26 has an invalid length.
[ 2452.025574][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22673'.
[ 2452.030892][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22673'.
[ 2452.035288][T24815] netlink: 'syz.0.22673': attribute type 26 has an invalid length.
[ 2452.038853][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22673'.
[ 2452.674347][T24827] nft_compat: unsupported protocol 0
[ 2452.714413][T24829] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22678'.
[ 2452.733157][T24830] netlink: 'syz.4.22677': attribute type 1 has an invalid length.
[ 2452.736194][T24830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2453.049146][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22681'.
[ 2453.517813][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22682'.
[ 2453.576398][T24849] netlink: 'syz.4.22682': attribute type 1 has an invalid length.
[ 2453.579801][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2454.581636][T24881] netlink: 'syz.3.22693': attribute type 1 has an invalid length.
[ 2454.584733][T24881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2454.608791][T24883] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.22694'.
[ 2454.612245][T24883] 8021q: VLANs not supported on lo
[ 2454.733078][T24885] netlink: 'syz.4.22695': attribute type 21 has an invalid length.
[ 2455.213975][T24898] xt_hashlimit: size too large, truncated to 1048576
[ 2455.381391][T24908] netlink: 'syz.0.22701': attribute type 1 has an invalid length.
[ 2455.384934][T24908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2455.493395][T24916] netlink: 'syz.3.22703': attribute type 1 has an invalid length.
[ 2455.496789][T24916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2455.733341][T24933] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2456.276236][T24947] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[ 2456.692646][T24967] xt_bpf: check failed: parse error
[ 2456.724159][T24971] netlink: 'syz.3.22721': attribute type 1 has an invalid length.
[ 2456.760359][T24976] __nla_validate_parse: 11 callbacks suppressed
[ 2456.760374][T24976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22722'.
[ 2456.766314][T24978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22723'.
[ 2456.973788][T24988] veth0_to_hsr: entered promiscuous mode
[ 2457.098185][T24998] validate_nla: 3 callbacks suppressed
[ 2457.098202][T24998] netlink: 'syz.3.22729': attribute type 1 has an invalid length.
[ 2457.107814][T24998] netlink: 228 bytes leftover after parsing attributes in process `syz.3.22729'.
[ 2457.171795][T25010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22732'.
[ 2457.254893][T25015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22734'.
[ 2457.318092][T25020] netlink: 'syz.3.22735': attribute type 4 has an invalid length.
[ 2457.648050][T25028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22737'.
[ 2457.723517][T25035] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20004
[ 2457.786313][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2458.043774][T25050] netlink: 76 bytes leftover after parsing attributes in process `syz.4.22743'.
[ 2458.049986][T25050] syzkaller0: entered promiscuous mode
[ 2458.051939][T25050] syzkaller0: entered allmulticast mode
[ 2458.406421][T25060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22745'.
[ 2458.419808][T25060] xt_hashlimit: size too large, truncated to 1048576
[ 2458.668685][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22746'.
[ 2458.684301][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22746'.
[ 2459.247632][T25089] atomic_op ffff8881143b5998 conn xmit_atomic 0000000000000000
[ 2459.396699][T18080] page_pool_release_retry() stalled pool shutdown: id 1134, 3329 inflight 361 sec
[ 2459.714329][T25113] syzkaller0: entered promiscuous mode
[ 2459.718124][T25113] syzkaller0: entered allmulticast mode
[ 2460.473921][T25129] netlink: 'syz.4.22765': attribute type 2 has an invalid length.
[ 2460.483079][T25129] xt_hashlimit: size too large, truncated to 1048576
[ 2460.610139][T25146] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20004
[ 2461.398091][T25177] xt_hashlimit: size too large, truncated to 1048576
[ 2461.894104][T25185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2461.934986][T25185] syzkaller0: entered promiscuous mode
[ 2461.937937][T25185] syzkaller0: entered allmulticast mode
[ 2461.940971][T25185] tipc: Resetting bearer <eth:syzkaller0>
[ 2462.011435][T25188] __nla_validate_parse: 11 callbacks suppressed
[ 2462.011453][T25188] netlink: 120 bytes leftover after parsing attributes in process `syz.3.22781'.
[ 2462.093240][T25184] tipc: Resetting bearer <eth:syzkaller0>
[ 2462.970854][T25203] netlink: 'syz.3.22784': attribute type 1 has an invalid length.
[ 2462.975924][T25203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2465.261057][T25184] tipc: Disabling bearer <eth:syzkaller0>
[ 2465.325079][T25207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22786'.
[ 2465.416707][T25213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22787'.
[ 2465.802232][T25229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22792'.
[ 2465.855420][T25231] netlink: 'syz.4.22793': attribute type 11 has an invalid length.
[ 2465.861461][T25231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22793'.
[ 2465.865568][T25231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22793'.
[ 2465.883268][T25227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22791'.
[ 2465.892081][T25227] xt_hashlimit: size too large, truncated to 1048576
[ 2466.152758][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22795'.
[ 2466.157004][T25241] netlink: 76 bytes leftover after parsing attributes in process `syz.0.22795'.
[ 2466.164671][T25236] xt_hashlimit: size too large, truncated to 1048576
[ 2466.484609][T25250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22798'.
[ 2466.857627][T25260] xt_hashlimit: size too large, truncated to 1048576
[ 2467.151538][T25265] __nla_validate_parse: 3 callbacks suppressed
[ 2467.151559][T25265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22802'.
[ 2467.161678][T25265] xt_hashlimit: size too large, truncated to 1048576
[ 2467.723546][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22811'.
[ 2467.731258][T25304] xt_hashlimit: size too large, truncated to 1048576
[ 2467.894146][T25311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22812'.
[ 2467.935711][T25308] netlink: 'syz.0.22813': attribute type 1 has an invalid length.
[ 2467.939541][T25308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2467.942928][T25308] netlink: 'syz.0.22813': attribute type 1 has an invalid length.
[ 2467.945459][T25308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22813'.
[ 2467.949237][T25310] netlink: 'syz.0.22813': attribute type 1 has an invalid length.
[ 2467.952508][T25310] netlink: 224 bytes leftover after parsing attributes in process `syz.0.22813'.
[ 2468.148690][T25320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22815'.
[ 2468.157813][T25320] xt_hashlimit: size too large, truncated to 1048576
[ 2468.404541][T25329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22817'.
[ 2468.439271][T25329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22817'.
[ 2468.479902][T25331] xt_hashlimit: overflow, rate too high: 0
[ 2468.763114][T25341] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 2468.836567][T25353] ip6tnl7: entered allmulticast mode
[ 2468.866351][T25357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[ 2468.956308][T25350] xt_hashlimit: size too large, truncated to 1048576
[ 2469.112184][T25366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22828'.
[ 2469.120103][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22828'.
[ 2469.154267][T25368] netlink: Unknown conntrack attr (type=2304, max=9)
[ 2469.193016][T25371] x_tables: duplicate underflow at hook 1
[ 2470.333117][T25409] bond35: Unable to set down delay as MII monitoring is disabled
[ 2470.337032][T25409] bond35 (unregistering): Released all slaves
[ 2470.629479][T25415] xt_hashlimit: size too large, truncated to 1048576
[ 2470.966534][T25428] netlink: 'syz.0.22846': attribute type 10 has an invalid length.
[ 2471.698495][   T55] block nbd3: Receive control failed (result -22)
[ 2471.739092][T25453] nbd3: detected capacity change from 0 to 32
[ 2471.744037][T22445] block nbd3: Dead connection, failed to find a fallback
[ 2471.746689][T22445] block nbd3: shutting down sockets
[ 2471.748535][T22445] blk_print_req_error: 138 callbacks suppressed
[ 2471.748543][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.753460][T22445] buffer_io_error: 138 callbacks suppressed
[ 2471.753468][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.760479][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.763984][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.767351][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.770375][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.773071][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.776530][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.779347][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.782410][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.785102][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.788747][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.793085][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.799669][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.806413][T25457] tc_dump_action: action bad kind
[ 2471.807171][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.813046][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.821640][T22445] ldm_validate_partition_table(): Disk read failed.
[ 2471.824049][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.827980][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.831808][T22445] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2471.835385][T22445] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 2471.839155][T22445] Dev nbd3: unable to read RDB block 0
[ 2471.841671][T22445]  nbd3: unable to read partition table
[ 2471.845813][T22445] ldm_validate_partition_table(): Disk read failed.
[ 2471.850422][T22445] Dev nbd3: unable to read RDB block 0
[ 2471.852749][T22445]  nbd3: unable to read partition table
[ 2471.966689][T25459] xt_hashlimit: size too large, truncated to 1048576
[ 2472.701609][T25478] __nla_validate_parse: 11 callbacks suppressed
[ 2472.701624][T25478] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.22861'.
[ 2472.707495][T25478] netlink: Conntrack attr has 3 unknown bytes
[ 2472.748179][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22861'.
[ 2472.937901][T25483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22862'.
[ 2473.041028][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22863'.
[ 2473.123284][T25500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22866'.
[ 2473.167228][T25505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22867'.
[ 2473.242151][T25509] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.22868'.
[ 2473.251116][T25505] veth0_to_hsr: left promiscuous mode
[ 2473.262355][T25505] ip6tnl7: left allmulticast mode
[ 2473.290101][T25512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22869'.
[ 2473.389197][T25518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22872'.
[ 2474.154744][T25537] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22877'.
[ 2474.518412][T25552] xt_hashlimit: size too large, truncated to 1048576
[ 2474.683282][T25558] xt_hashlimit: size too large, truncated to 1048576
[ 2474.735364][T25560] netlink: 'syz.0.22885': attribute type 1 has an invalid length.
[ 2474.740722][T25560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2475.942859][T25567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2476.004865][T25578] netlink: 'syz.4.22889': attribute type 1 has an invalid length.
[ 2476.929611][T25612] xt_hashlimit: size too large, truncated to 1048576
[ 2477.611960][T25646] 8021q: adding VLAN 0 to HW filter on device bond35
[ 2477.642609][T25642] xt_hashlimit: size too large, truncated to 1048576
[ 2477.890304][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2477.990917][T25665] __nla_validate_parse: 15 callbacks suppressed
[ 2477.990936][T25665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22914'.
[ 2478.041736][T25663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22913'.
[ 2478.046999][T25663] netlink: 'syz.0.22913': attribute type 1 has an invalid length.
[ 2478.049569][T25663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2478.219348][T25680] block nbd4: Unsupported socket: should be TCP or UNIX.
[ 2478.603440][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22923'.
[ 2478.611724][T25697] xt_hashlimit: size too large, truncated to 1048576
[ 2478.615852][T25704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22925'.
[ 2478.854394][T25718] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22930'.
[ 2478.869520][T25718] netlink: 'syz.0.22930': attribute type 12 has an invalid length.
[ 2478.875808][T25718] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.22930'.
[ 2478.930706][T25727] Cannot find del_set index 4 as target
[ 2478.930814][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22932'.
[ 2479.043963][T25738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22935'.
[ 2479.088355][T25059] IPVS: starting estimator thread 0...
[ 2479.176067][T25743] IPVS: using max 85 ests per chain, 204000 per kthread
[ 2479.223195][T25753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22940'.
[ 2479.284490][T25753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22940'.
[ 2479.795353][T25782] tc_dump_action: action bad kind
[ 2479.918500][T25787] bridge0: port 1(ipvlan0) entered blocking state
[ 2479.922636][T25787] bridge0: port 1(ipvlan0) entered disabled state
[ 2479.925823][T25787] ipvlan0: entered allmulticast mode
[ 2479.931570][T25787] bridge0: entered allmulticast mode
[ 2479.937788][T25787] ipvlan0: left allmulticast mode
[ 2479.940074][T25787] bridge0: left allmulticast mode
[ 2480.147963][T25795] xt_hashlimit: size too large, truncated to 1048576
[ 2482.676296][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2482.703642][T25962] xt_hashlimit: size too large, truncated to 1048576
[ 2483.162939][T25985] netlink: 'syz.3.22988': attribute type 1 has an invalid length.
[ 2483.165863][T25984] netlink: 'syz.3.22988': attribute type 1 has an invalid length.
[ 2483.166513][T25985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2483.168697][T25984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2483.769595][T25987] __nla_validate_parse: 10 callbacks suppressed
[ 2483.769608][T25987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22989'.
[ 2485.892042][T25969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2486.081325][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22992'.
[ 2486.088953][T25997] xt_hashlimit: size too large, truncated to 1048576
[ 2486.258902][T26011] pim6reg1: entered promiscuous mode
[ 2486.264004][T26011] pim6reg1: entered allmulticast mode
[ 2486.357448][T26015] netlink: 'syz.4.22996': attribute type 1 has an invalid length.
[ 2486.360558][T26015] netlink: 'syz.4.22996': attribute type 2 has an invalid length.
[ 2486.562992][T26019] netlink: 'syz.3.22997': attribute type 1 has an invalid length.
[ 2486.565572][T26019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2486.570384][T26019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22997'.
[ 2487.339267][T26022] netlink: 'syz.3.22998': attribute type 1 has an invalid length.
[ 2487.342645][T26022] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[ 2487.367840][T26028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2487.832111][T26055] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23008'.
[ 2488.947232][T26068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23012'.
[ 2489.041624][T26074] syzkaller1: entered promiscuous mode
[ 2489.044006][T26074] syzkaller1: entered allmulticast mode
[ 2489.153108][T26078] syzkaller0: entered promiscuous mode
[ 2489.155419][T26078] syzkaller0: entered allmulticast mode
[ 2489.182457][T26078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23016'.
[ 2489.367493][T26086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23019'.
[ 2489.376538][T26084] netlink: 84 bytes leftover after parsing attributes in process `syz.0.23018'.
[ 2489.733004][T26104] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23025'.
[ 2490.017894][T26114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23026'.
[ 2490.593972][T26121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23029'.
[ 2490.612239][T26121] syzkaller0: entered promiscuous mode
[ 2490.614078][T26121] syzkaller0: entered allmulticast mode
[ 2490.620724][T26121] 0: reclassify loop, rule prio 0, protocol 800
[ 2490.711291][T26123] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2490.845560][T26132] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23033'.
[ 2490.926145][T26143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23037'.
[ 2490.958164][T26141] netlink: 120 bytes leftover after parsing attributes in process `syz.4.23036'.
[ 2491.131243][T26158] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 2491.993827][T26187] xt_hashlimit: size too large, truncated to 1048576
[ 2492.177450][T26196] netlink: 'syz.0.23050': attribute type 29 has an invalid length.
[ 2492.180416][T26196] netlink: 'syz.0.23050': attribute type 29 has an invalid length.
[ 2492.821643][T26211] netlink: 'syz.4.23053': attribute type 1 has an invalid length.
[ 2492.826612][T26211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2494.027554][T26262] __nla_validate_parse: 9 callbacks suppressed
[ 2494.027568][T26262] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23066'.
[ 2494.424313][T26283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23071'.
[ 2494.517427][T26289] netlink: 'syz.0.23072': attribute type 21 has an invalid length.
[ 2495.566817][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23079'.
[ 2495.579637][T26321] xt_hashlimit: size too large, truncated to 1048576
[ 2496.278050][T26333] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23082'.
[ 2496.470635][T26345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23085'.
[ 2496.576697][T26349] netlink: 320 bytes leftover after parsing attributes in process `syz.3.23087'.
[ 2496.580682][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23087'.
[ 2496.583768][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23087'.
[ 2496.587383][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23087'.
[ 2496.591073][T26349] netlink: 'syz.3.23087': attribute type 1 has an invalid length.
[ 2496.593963][T26349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2497.400923][T26363] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip_vti0, syncid = 3, id = 0
[ 2497.401007][T26364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23090'.
[ 2497.612873][T26371] xt_hashlimit: size too large, truncated to 1048576
[ 2498.641086][T26398] netlink: 'syz.3.23100': attribute type 1 has an invalid length.
[ 2498.660202][T26398] 8021q: adding VLAN 0 to HW filter on device bond25
[ 2498.678918][T26398] vlan3: entered promiscuous mode
[ 2498.684136][T26398] bond25: entered promiscuous mode
[ 2498.688204][T26398] vlan3: entered allmulticast mode
[ 2498.690259][T26398] bond25: entered allmulticast mode
[ 2498.704898][T26398] bond25: (slave bridge52): making interface the new active one
[ 2498.709188][T26398] bridge52: entered promiscuous mode
[ 2498.711179][T26398] bridge52: entered allmulticast mode
[ 2498.714518][T26398] bond25: (slave bridge52): Enslaving as an active interface with an up link
[ 2498.723646][T26398] netlink: 'syz.3.23100': attribute type 1 has an invalid length.
[ 2498.828377][T26404] ipt_ECN: cannot use operation on non-tcp rule
[ 2498.839687][T26403] netlink: 'syz.3.23102': attribute type 1 has an invalid length.
[ 2498.842373][T26403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2499.053228][T26414] __nla_validate_parse: 6 callbacks suppressed
[ 2499.053247][T26414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23106'.
[ 2499.060453][T26414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23106'.
[ 2499.121357][T26416] netlink: 'syz.4.23107': attribute type 3 has an invalid length.
[ 2499.124236][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23107'.
[ 2499.224575][ T5778] Bluetooth: hci4: link tx timeout
[ 2499.227422][ T5778] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[ 2499.276767][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23108'.
[ 2499.285406][T26420] xt_hashlimit: size too large, truncated to 1048576
[ 2499.454146][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23109'.
[ 2499.461966][T26425] xt_hashlimit: size too large, truncated to 1048576
[ 2500.037925][T26432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23111'.
[ 2500.102538][T26434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23112'.
[ 2500.186369][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2500.632177][T26464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23120'.
[ 2500.699403][T26466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23117'.
[ 2500.714153][T26466] xt_hashlimit: size too large, truncated to 1048576
[ 2500.775895][T26481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23123'.
[ 2500.858280][T26485] bond23: entered allmulticast mode
[ 2500.860143][T26485] vcan0: entered allmulticast mode
[ 2500.862329][T26485] bond23: left allmulticast mode
[ 2500.863961][T26485] vcan0: left allmulticast mode
[ 2501.130229][T26490] xt_hashlimit: size too large, truncated to 1048576
[ 2501.898653][T26502] syz.3.23130 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 2501.902419][T26502] CPU: 1 UID: 0 PID: 26502 Comm: syz.3.23130 Not tainted syzkaller #0 PREEMPT(full) 
[ 2501.902437][T26502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2501.902452][T26502] Call Trace:
[ 2501.902461][T26502]  <TASK>
[ 2501.902468][T26502]  dump_stack_lvl+0xe8/0x150
[ 2501.902498][T26502]  dump_header+0xd3/0x4c0
[ 2501.902520][T26502]  oom_kill_process+0x3ab/0x970
[ 2501.902538][T26502]  out_of_memory+0x106c/0x1410
[ 2501.902548][T26502]  ? try_charge_memcg+0xbb9/0x1570
[ 2501.902572][T26502]  ? __pfx___mutex_lock+0x10/0x10
[ 2501.902597][T26502]  ? __pfx_out_of_memory+0x10/0x10
[ 2501.902610][T26502]  ? do_raw_spin_unlock+0x4d/0x210
[ 2501.902637][T26502]  try_charge_memcg+0xc77/0x1570
[ 2501.902667][T26502]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2501.902707][T26502]  ? percpu_ref_tryget+0x15/0x180
[ 2501.902744][T26502]  ? charge_memcg+0x23/0x2b0
[ 2501.902758][T26502]  charge_memcg+0x1a2/0x2b0
[ 2501.902769][T26502]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[ 2501.902779][T26502]  mem_cgroup_swapin_charge_folio+0x262/0x390
[ 2501.902789][T26502]  __swap_cache_prepare_and_add+0xdc/0x700
[ 2501.902803][T26502]  ? page_rmappable_folio+0x9a/0x170
[ 2501.902817][T26502]  swap_cache_alloc_folio+0xf1/0x240
[ 2501.902827][T26502]  swap_cluster_readahead+0x355/0x670
[ 2501.902838][T26502]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2501.902851][T26502]  ? get_vma_policy+0x27b/0x3c0
[ 2501.902877][T26502]  swapin_readahead+0x196/0xc50
[ 2501.902886][T26502]  ? swap_table_get+0x1e/0x260
[ 2501.902896][T26502]  ? __pfx_swapin_readahead+0x10/0x10
[ 2501.902905][T26502]  ? swap_table_get+0x1e/0x260
[ 2501.902912][T26502]  ? swap_table_get+0x1e/0x260
[ 2501.902918][T26502]  ? swap_table_get+0x1e/0x260
[ 2501.902925][T26502]  ? swap_table_get+0x216/0x260
[ 2501.902934][T26502]  ? swap_cache_get_folio+0x2e4/0x2f0
[ 2501.902944][T26502]  do_swap_page+0x555/0x5120
[ 2501.902955][T26502]  ? __pte_offset_map+0x29/0x240
[ 2501.902969][T26502]  ? __pte_offset_map+0x29/0x240
[ 2501.902981][T26502]  ? do_swap_page+0x128/0x5120
[ 2501.902988][T26502]  ? __pfx_do_swap_page+0x10/0x10
[ 2501.902995][T26502]  ? __pte_offset_map+0x1ae/0x240
[ 2501.903004][T26502]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2501.903014][T26502]  handle_mm_fault+0x12d4/0x3170
[ 2501.903028][T26502]  ? handle_mm_fault+0xee/0x3170
[ 2501.903039][T26502]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2501.903046][T26502]  ? lock_vma_under_rcu+0x45a/0x500
[ 2501.903066][T26502]  do_user_addr_fault+0xa73/0x1340
[ 2501.903078][T26502]  ? rcu_is_watching+0x15/0xb0
[ 2501.903090][T26502]  ? trace_page_fault_user+0x84/0x1e0
[ 2501.903098][T26502]  exc_page_fault+0x6a/0xc0
[ 2501.903111][T26502]  asm_exc_page_fault+0x26/0x30
[ 2501.903120][T26502] RIP: 0033:0x7ff6aad57fb8
[ 2501.903130][T26502] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[ 2501.903136][T26502] RSP: 002b:00007ffecf9f35d0 EFLAGS: 00010246
[ 2501.903145][T26502] RAX: 0000000000000000 RBX: 00005555695fe500 RCX: 00007ff6aad5d68e
[ 2501.903150][T26502] RDX: 00007ffecf9f3620 RSI: 0000000000000000 RDI: 0000000000000000
[ 2501.903154][T26502] RBP: 00007ff6ab017da0 R08: 0000000000000000 R09: 0000000000000000
[ 2501.903158][T26502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000262e18
[ 2501.903163][T26502] R13: 00007ff6ab01609c R14: 0000000000262b5e R15: 00007ff6ab016090
[ 2501.903176][T26502]  </TASK>
[ 2501.903180][T26502] memory: usage 307200kB, limit 307200kB, failcnt 1582
[ 2502.064396][T26502] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0
[ 2502.068038][T26502] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[ 2502.071069][T26502] Memory cgroup stats for /syz3:
[ 2502.071168][T26502] cache 0
[ 2502.074387][T26502] rss 28672
[ 2502.075707][T26502] rss_huge 0
[ 2502.077225][T26502] shmem 0
[ 2502.078439][T26502] mapped_file 0
[ 2502.079875][T26502] dirty 0
[ 2502.081101][T26502] writeback 0
[ 2502.082506][T26502] workingset_refault_anon 41
[ 2502.084405][T26502] workingset_refault_file 0
[ 2502.087329][T26502] swap 180224
[ 2502.088815][T26502] swapcached 716800
[ 2502.090375][T26502] pgpgin 2182089
[ 2502.091855][T26502] pgpgout 2182082
[ 2502.093294][T26502] pgfault 2646677
[ 2502.094766][T26502] pgmajfault 124
[ 2502.096441][T26502] inactive_anon 4096
[ 2502.098190][T26502] active_anon 24576
[ 2502.099756][T26502] inactive_file 0
[ 2502.101261][T26502] active_file 0
[ 2502.102703][T26502] unevictable 0
[ 2502.104159][T26502] hierarchical_memory_limit 314572800
[ 2502.112318][T26502] hierarchical_memsw_limit 9223372036854771712
[ 2502.115753][T26502] total_cache 0
[ 2502.118030][T26502] total_rss 28672
[ 2502.119558][T26502] total_rss_huge 0
[ 2502.120998][T26502] total_shmem 0
[ 2502.123919][T26502] total_mapped_file 0
[ 2502.126317][T26502] total_dirty 0
[ 2502.127872][T26502] total_writeback 0
[ 2502.129437][T26502] total_workingset_refault_anon 41
[ 2502.131466][T26502] total_workingset_refault_file 0
[ 2502.133524][T26502] total_swap 180224
[ 2502.135144][T26502] total_swapcached 716800
[ 2502.137126][T26502] total_pgpgin 2182115
[ 2502.138819][T26502] total_pgpgout 2182108
[ 2502.140522][T26502] total_pgfault 2646740
[ 2502.142191][T26502] total_pgmajfault 124
[ 2502.143837][T26502] total_inactive_anon 4096
[ 2502.145611][T26502] total_active_anon 24576
[ 2502.155055][T26502] total_inactive_file 0
[ 2502.157246][T26502] total_active_file 0
[ 2502.158969][T26502] total_unevictable 0
[ 2502.160578][T26502] anon_cost 0
[ 2502.161884][T26502] file_cost 0
[ 2502.163242][T26502] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.23130,pid=26502,uid=0
[ 2502.169586][T26502] Memory cgroup out of memory: Killed process 26502 (syz.3.23130) total-vm:102364kB, anon-rss:260kB, file-rss:23144kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 2502.266703][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2502.658139][T26529] netlink: 'syz.0.23137': attribute type 9 has an invalid length.
[ 2505.519617][T26522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2505.648335][T26555] syzkaller0: entered promiscuous mode
[ 2505.650200][T26555] syzkaller0: entered allmulticast mode
[ 2505.712671][T26564] --map-set only usable from mangle table
[ 2505.725546][T26566] openvswitch: netlink: IP tunnel dst address not specified
[ 2505.916211][T26577] __nla_validate_parse: 8 callbacks suppressed
[ 2505.916230][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23147'.
[ 2505.929526][T26577] xt_hashlimit: size too large, truncated to 1048576
[ 2506.162534][T26606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23154'.
[ 2506.178143][T26606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23154'.
[ 2506.327447][T26613] syzkaller1: entered promiscuous mode
[ 2506.330952][T26613] syzkaller1: entered allmulticast mode
[ 2506.688375][T26637] netlink: 'syz.3.23162': attribute type 1 has an invalid length.
[ 2506.693566][T26637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2507.368175][T26642] netlink: 'syz.0.23165': attribute type 1 has an invalid length.
[ 2507.372147][T26642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2507.714874][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23167'.
[ 2507.727294][T26651] xt_hashlimit: size too large, truncated to 1048576
[ 2507.771657][T26659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23169'.
[ 2507.780789][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23169'.
[ 2507.866452][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2508.214917][T26668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23172'.
[ 2508.218770][T26668] netlink: 212 bytes leftover after parsing attributes in process `syz.0.23172'.
[ 2508.222039][T26668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23172'.
[ 2508.322156][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23172'.
[ 2508.440254][T26677] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 2508.694830][T26693] netlink: 'syz.0.23179': attribute type 1 has an invalid length.
[ 2508.697368][T26693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2508.948246][T26706] netlink: 'syz.4.23184': attribute type 1 has an invalid length.
[ 2508.951453][T26706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2509.401572][T26709] netlink: 'syz.3.23185': attribute type 1 has an invalid length.
[ 2509.408425][T26709] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[ 2509.556605][T26723] IPVS: Error connecting to the multicast addr
[ 2509.946273][ T5778] Bluetooth: hci4: command 0x0405 tx timeout
[ 2510.298303][T26754] netlink: 'syz.0.23197': attribute type 1 has an invalid length.
[ 2510.301069][T26754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2511.232580][T26782] __nla_validate_parse: 4 callbacks suppressed
[ 2511.232593][T26782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23204'.
[ 2511.490104][T26786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23206'.
[ 2511.633884][T26789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23207'.
[ 2511.656934][T26789] xt_hashlimit: size too large, truncated to 1048576
[ 2511.791445][T26792] netlink: 120 bytes leftover after parsing attributes in process `syz.4.23208'.
[ 2512.225911][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23211'.
[ 2512.314808][T26801] netlink: 'syz.3.23211': attribute type 1 has an invalid length.
[ 2512.317619][T26801] netlink: 248 bytes leftover after parsing attributes in process `syz.3.23211'.
[ 2512.423999][T26809] netlink: 'syz.3.23213': attribute type 3 has an invalid length.
[ 2512.475264][T26816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23215'.
[ 2512.651450][T26825] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23217'.
[ 2512.657114][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23217'.
[ 2512.882014][T26828] xt_hashlimit: size too large, truncated to 1048576
[ 2513.432962][T26832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23219'.
[ 2513.732135][T26842] xt_hashlimit: size too large, truncated to 1048576
[ 2514.669790][T26866] bond24: (slave lo): Releasing backup interface
[ 2514.672559][T26866] bond24: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2514.680083][T26866] bond21: (slave bridge35): Releasing active interface
[ 2514.685119][T26866] bond23: (slave vcan0): Releasing backup interface
[ 2514.689311][T26866] bond0: (slave gretap5): Releasing active interface
[ 2514.694126][T26866] bond26: (slave veth33): Releasing active interface
[ 2514.698912][T26866] bond32: (slave bridge58): Releasing backup interface
[ 2514.702811][T26866] gretap6: left allmulticast mode
[ 2514.704613][T26866] gretap6: left promiscuous mode
[ 2514.707191][T26866] bridge59: port 1(gretap6) entered disabled state
[ 2514.715314][T26866] bond34: (slave bridge60): Releasing active interface
[ 2514.721876][T26866] bond34: (slave ip6gretap1): Releasing active interface
[ 2515.592071][T26921] 8021q: VLANs not supported on v
[ 2516.139247][T26969] netlink: 'syz.0.23248': attribute type 39 has an invalid length.
[ 2516.212357][T26970] team0: entered promiscuous mode
[ 2516.216339][T26970] team0: entered allmulticast mode
[ 2516.220812][T26970] 8021q: adding VLAN 0 to HW filter on device team0
[ 2516.228229][T26969] team1 (uninitialized): Failed to send options change via netlink (err -105)
[ 2516.241008][T26969] team1: entered promiscuous mode
[ 2516.242797][T26969] team1: entered allmulticast mode
[ 2516.244745][T26969] 8021q: adding VLAN 0 to HW filter on device team1
[ 2516.250236][T26969] __nla_validate_parse: 13 callbacks suppressed
[ 2516.250245][T26969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23248'.
[ 2516.654620][T26976] netlink: 'syz.3.23250': attribute type 1 has an invalid length.
[ 2516.657547][T26976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2516.932218][T26988] syzkaller0: entered promiscuous mode
[ 2516.934117][T26988] syzkaller0: entered allmulticast mode
[ 2516.960735][T26988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23253'.
[ 2518.198429][T27030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23264'.
[ 2518.205897][T27032] netlink: 120 bytes leftover after parsing attributes in process `syz.4.23265'.
[ 2518.347472][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23267'.
[ 2518.354628][T27039] xt_hashlimit: size too large, truncated to 1048576
[ 2518.494606][T27046] netlink: 100 bytes leftover after parsing attributes in process `syz.4.23269'.
[ 2519.138170][T27058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23274'.
[ 2519.648898][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23278'.
[ 2519.659096][T27070] xt_hashlimit: size too large, truncated to 1048576
[ 2519.716221][T13148] page_pool_release_retry() stalled pool shutdown: id 1134, 3329 inflight 422 sec
[ 2519.759319][T27077] netlink: 'syz.4.23280': attribute type 1 has an invalid length.
[ 2519.761902][T27077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2520.700208][T27090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23285'.
[ 2520.707273][T27090] xt_hashlimit: size too large, truncated to 1048576
[ 2521.054118][T27106] xt_hashlimit: size too large, truncated to 1048576
[ 2521.214388][T27125] netlink: 'syz.3.23295': attribute type 1 has an invalid length.
[ 2521.224431][T27125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2521.345604][T27129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23296'.
[ 2521.353269][T27129] xt_hashlimit: size too large, truncated to 1048576
[ 2521.834013][T27141] netlink: 120 bytes leftover after parsing attributes in process `syz.4.23299'.
[ 2521.938450][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23300'.
[ 2522.094252][T27144] team0: left promiscuous mode
[ 2522.096287][T27144] team0: left allmulticast mode
[ 2522.102417][T27144] team1: left promiscuous mode
[ 2522.104398][T27144] team1: left allmulticast mode
[ 2522.294280][T27165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2522.414671][T27180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23307'.
[ 2522.597708][T27195] netlink: 'syz.3.23311': attribute type 1 has an invalid length.
[ 2522.600479][T27195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2522.681925][T27197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23312'.
[ 2522.890119][T27218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23317'.
[ 2523.020049][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23318'.
[ 2523.027032][T27220] xt_hashlimit: size too large, truncated to 1048576
[ 2523.523883][T27229] netlink: 'syz.3.23321': attribute type 1 has an invalid length.
[ 2523.526677][T27229] netlink: 'syz.3.23321': attribute type 2 has an invalid length.
[ 2523.659342][T27243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23325'.
[ 2523.705433][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23325'.
[ 2523.764830][T27249] netlink: 'syz.4.23326': attribute type 1 has an invalid length.
[ 2523.772410][T27249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2523.795623][T27252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23327'.
[ 2523.817732][T27241] xt_hashlimit: size too large, truncated to 1048576
[ 2524.200393][T27274] xt_hashlimit: size too large, truncated to 1048576
[ 2524.577493][T27289] dvmrp0: entered allmulticast mode
[ 2524.746957][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2524.995016][T27316] xt_hashlimit: size too large, truncated to 1048576
[ 2525.888683][T27360] netlink: 'syz.4.23356': attribute type 1 has an invalid length.
[ 2525.891467][T27360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2526.392230][T27378] __nla_validate_parse: 9 callbacks suppressed
[ 2526.392243][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23361'.
[ 2526.503729][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23362'.
[ 2526.826156][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2526.916799][T27413] netlink: 120 bytes leftover after parsing attributes in process `syz.3.23371'.
[ 2526.954986][T27411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23370'.
[ 2526.963943][T27411] xt_hashlimit: size too large, truncated to 1048576
[ 2527.143018][T27425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23373'.
[ 2528.498616][T27456] netlink: 'syz.3.23381': attribute type 1 has an invalid length.
[ 2528.501987][T27456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2528.861830][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23382'.
[ 2529.309162][T27472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23386'.
[ 2529.410511][T27476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23387'.
[ 2529.464611][T27481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23388'.
[ 2529.638902][T27487] netlink: 120 bytes leftover after parsing attributes in process `syz.3.23390'.
[ 2529.649123][T27484] netlink: 'syz.4.23389': attribute type 1 has an invalid length.
[ 2529.651974][T27484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2530.580969][T27505] netlink: 'syz.4.23396': attribute type 1 has an invalid length.
[ 2530.614222][T27505] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2530.627651][T27505] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 2530.641640][T27505] syzkaller0: entered promiscuous mode
[ 2530.643480][T27505] syzkaller0: entered allmulticast mode
[ 2531.007300][T27539] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2531.010619][T27539] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2531.174359][T27542] nbd: nbd3 already in use
[ 2531.176858][T27542] block nbd3: NBD_DISCONNECT
[ 2531.178943][T27542] block nbd3: Send disconnect failed -107
[ 2531.186963][T27542] siw: device registration error -23
[ 2531.750504][T27548] ipt_REJECT: ECHOREPLY no longer supported.
[ 2531.899822][T27548] __nla_validate_parse: 10 callbacks suppressed
[ 2531.899834][T27548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23406'.
[ 2531.910701][T27548] xt_hashlimit: size too large, truncated to 1048576
[ 2531.920416][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23409'.
[ 2532.114224][T27568] netlink: 120 bytes leftover after parsing attributes in process `syz.4.23411'.
[ 2532.310389][T27579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23414'.
[ 2532.382407][T27581] netlink: 'syz.0.23415': attribute type 1 has an invalid length.
[ 2532.385028][T27581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2532.446235][T27585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23417'.
[ 2532.600844][T27587] netlink: 'syz.3.23418': attribute type 1 has an invalid length.
[ 2532.604403][T27587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2532.609650][T27587] netlink: 'syz.3.23418': attribute type 1 has an invalid length.
[ 2532.613464][T27587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2532.673843][T27594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23419'.
[ 2532.815675][T27596] netlink: 292 bytes leftover after parsing attributes in process `syz.3.23420'.
[ 2532.883468][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23421'.
[ 2532.981942][T27601] vlan3: left promiscuous mode
[ 2532.987151][T27601] bond25: left promiscuous mode
[ 2532.990225][T27601] bridge52: left promiscuous mode
[ 2532.990459][T27605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23422'.
[ 2532.992403][T27601] vlan3: left allmulticast mode
[ 2532.998098][T27601] bond25: left allmulticast mode
[ 2532.999868][T27601] bridge52: left allmulticast mode
[ 2533.238083][T27613] syzkaller0: entered promiscuous mode
[ 2533.240581][T27613] syzkaller0: entered allmulticast mode
[ 2533.458416][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23425'.
[ 2533.465845][T27616] xt_hashlimit: size too large, truncated to 1048576
[ 2533.626162][T27625] xt_hashlimit: size too large, truncated to 1048576
[ 2534.517529][T27663] netlink: 'syz.3.23437': attribute type 1 has an invalid length.
[ 2534.521000][T27663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2534.630249][T27668] netlink: 'syz.0.23439': attribute type 62 has an invalid length.
[ 2534.636725][T27668] xt_hashlimit: size too large, truncated to 1048576
[ 2535.275204][T27710] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2535.558438][T27732] xt_hashlimit: size too large, truncated to 1048576
[ 2535.591510][T27729] netlink: 'syz.3.23457': attribute type 1 has an invalid length.
[ 2535.596205][T27729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2535.877400][T27747] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 2535.889468][T27747] xt_hashlimit: size too large, truncated to 1048576
[ 2537.984864][T27812] __nla_validate_parse: 19 callbacks suppressed
[ 2537.984878][T27812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23476'.
[ 2537.993698][T27812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23476'.
[ 2537.996838][T27813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23476'.
[ 2538.002287][T27812] xt_hashlimit: size too large, truncated to 1048576
[ 2538.007446][T27813] xt_hashlimit: size too large, truncated to 1048576
[ 2538.055224][T27821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23478'.
[ 2538.133627][T27823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23479'.
[ 2538.224703][T27839] netlink: 'syz.4.23484': attribute type 1 has an invalid length.
[ 2538.227438][T27839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2538.230280][T27837] netlink: 52 bytes leftover after parsing attributes in process `syz.3.23483'.
[ 2538.273343][T27842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23485'.
[ 2538.278264][T27842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23485'.
[ 2538.288824][T27844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.23486'.
[ 2538.355635][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23488'.
[ 2538.690374][T27881] netlink: 'syz.0.23495': attribute type 1 has an invalid length.
[ 2538.696670][T27881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2539.451569][T27910] pimreg: entered allmulticast mode
[ 2539.704018][T27934] netlink: 'syz.4.23512': attribute type 1 has an invalid length.
[ 2539.710209][T27934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2539.865874][T27949] xt_hashlimit: overflow, try lower: 6/0
[ 2540.210451][T27976] veth0_to_team: entered promiscuous mode
[ 2540.213052][T27976] veth0_to_team: entered allmulticast mode
[ 2540.556393][T27985] ip6_vti0 speed is unknown, defaulting to 1000
[ 2540.621815][T27997] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[ 2540.742680][T27988] ip6_vti0 speed is unknown, defaulting to 1000
[ 2540.750025][T27985] lo speed is unknown, defaulting to 1000
[ 2540.917790][T27988] lo speed is unknown, defaulting to 1000
[ 2541.087355][T28014] netlink: 'syz.0.23536': attribute type 1 has an invalid length.
[ 2541.089992][T28014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2542.184678][T28048] syzkaller0: entered promiscuous mode
[ 2542.191337][T28048] syzkaller0: entered allmulticast mode
[ 2542.380405][T28057] netlink: 'syz.0.23546': attribute type 14 has an invalid length.
[ 2542.383081][T28057] netlink: 'syz.0.23546': attribute type 14 has an invalid length.
[ 2542.385800][T28057] netlink: 'syz.0.23546': attribute type 14 has an invalid length.
[ 2542.441695][T28059] netlink: 'syz.3.23548': attribute type 1 has an invalid length.
[ 2542.444552][T28059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2543.270210][T28065] __nla_validate_parse: 13 callbacks suppressed
[ 2543.270229][T28065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23550'.
[ 2543.781492][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23553'.
[ 2543.790828][T28086] xt_hashlimit: size too large, truncated to 1048576
[ 2544.170449][T28092] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23555'.
[ 2544.466566][T28100] syzkaller0: entered promiscuous mode
[ 2544.468402][T28100] syzkaller0: entered allmulticast mode
[ 2544.603263][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23558'.
[ 2544.697312][T28104] veth0_to_team: left promiscuous mode
[ 2544.699237][T28104] veth0_to_team: left allmulticast mode
[ 2545.172821][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23561'.
[ 2545.177882][T28110] xt_hashlimit: size too large, truncated to 1048576
[ 2546.113203][T29778] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2546.116976][T29778] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2546.120487][T29778] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2546.123739][T29778] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2548.305433][T28115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2548.308515][T28119] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23562'.
[ 2548.376838][T28133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23565'.
[ 2548.397757][T28136] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23566'.
[ 2548.534451][T28145] netlink: 'syz.4.23568': attribute type 1 has an invalid length.
[ 2548.539775][T28145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2548.788660][T28160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23572'.
[ 2548.793183][T28160] netlink: 96 bytes leftover after parsing attributes in process `syz.0.23572'.
[ 2548.799940][T28160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23572'.
[ 2548.809628][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23572'.
[ 2548.905674][T28162] netlink: 'syz.0.23573': attribute type 1 has an invalid length.
[ 2548.908601][T28162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2549.106640][T28166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23574'.
[ 2549.718274][T28177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.23577'.
[ 2549.722343][T28177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23577'.
[ 2550.015336][T28187] syzkaller0: entered promiscuous mode
[ 2550.017584][T28187] syzkaller0: entered allmulticast mode
[ 2550.318800][T28202] netlink: 'syz.0.23584': attribute type 10 has an invalid length.
[ 2550.328255][T28202] tap0: tun_chr_ioctl cmd 1074025677
[ 2550.330101][T28202] tap0: linktype set to 773
[ 2550.434419][T28206] syzkaller0: entered promiscuous mode
[ 2550.438275][T28206] syzkaller0: entered allmulticast mode
[ 2550.757483][T28216] netlink: 'syz.3.23589': attribute type 1 has an invalid length.
[ 2550.761895][T28216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2551.146218][T20267] Bluetooth: hci4: command 0x0405 tx timeout
[ 2552.508971][T28242] netlink: 'syz.4.23595': attribute type 1 has an invalid length.
[ 2552.511998][T28242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2554.290009][T28260] __nla_validate_parse: 7 callbacks suppressed
[ 2554.290031][T28260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.23601'.
[ 2554.365351][T28263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23603'.
[ 2554.534204][T28284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23610'.
[ 2554.968920][T28291] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23612'.
[ 2555.413104][T28294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2555.584185][T28301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23615'.
[ 2555.588051][T28301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23615'.
[ 2555.693874][T28307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23617'.
[ 2555.694443][T28308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23617'.
[ 2555.979580][T28321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23619'.
[ 2556.009921][T28317] xt_hashlimit: size too large, truncated to 1048576
[ 2558.768879][T28326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23623'.
[ 2558.841700][ T5059] udevd[5059]: worker [15340] /devices/virtual/block/nbd0 is taking a long time
[ 2558.853008][ T5059] udevd[5059]: worker [15147] /devices/virtual/block/nbd2 timeout; kill it
[ 2558.860934][ T5059] udevd[5059]: seq 42997 '/devices/virtual/block/nbd2' killed
[ 2559.203354][T28353] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2559.309776][T28359] __nla_validate_parse: 3 callbacks suppressed
[ 2559.309790][T28359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23635'.
[ 2559.320589][T28359] xt_hashlimit: size too large, truncated to 1048576
[ 2559.333716][T28363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23636'.
[ 2559.464967][T29778] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2559.474095][T29778] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2559.480789][T29778] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2559.484201][T29778] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2559.590994][T28368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23637'.
[ 2559.595596][T28368] xt_hashlimit: size too large, truncated to 1048576
[ 2559.804316][T28376] netlink: 120 bytes leftover after parsing attributes in process `syz.0.23639'.
[ 2560.373988][T28396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23643'.
[ 2560.377032][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23643'.
[ 2561.933359][T28413] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23648'.
[ 2561.937910][T28413] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23648'.
[ 2561.940950][T28413] netlink: 'syz.4.23648': attribute type 5 has an invalid length.
[ 2561.943603][T28413] netlink: 43 bytes leftover after parsing attributes in process `syz.4.23648'.
[ 2562.081047][T28419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23649'.
[ 2562.360250][T28424] xt_hashlimit: size too large, truncated to 1048576
[ 2562.617068][T28435] xt_hashlimit: size too large, truncated to 1048576
[ 2562.815760][T28450] netlink: 'syz.4.23658': attribute type 1 has an invalid length.
[ 2564.350958][T28516] __nla_validate_parse: 21 callbacks suppressed
[ 2564.350978][T28516] netlink: 72 bytes leftover after parsing attributes in process `syz.4.23674'.
[ 2565.011505][T28533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23678'.
[ 2565.016743][T28533] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2565.191369][T28539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23680'.
[ 2565.233267][T28542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23681'.
[ 2565.357151][T28547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23682'.
[ 2565.369799][T28547] xt_hashlimit: size too large, truncated to 1048576
[ 2565.512105][T28553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23683'.
[ 2566.009255][T28558] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.23685'.
[ 2566.066791][T28559] netlink: 616 bytes leftover after parsing attributes in process `syz.0.23685'.
[ 2566.069724][T28559] netlink: 616 bytes leftover after parsing attributes in process `syz.0.23685'.
[ 2566.072466][T28559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23685'.
[ 2566.266488][T20267] Bluetooth: hci4: command 0x0405 tx timeout
[ 2566.678615][T28589] tipc: Started in network mode
[ 2566.680268][T28589] tipc: Node identity ee284acae0c1, cluster identity 4711
[ 2566.682765][T28589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2566.685328][T28589] syzkaller0: entered promiscuous mode
[ 2566.687707][T28589] syzkaller0: entered allmulticast mode
[ 2566.714510][T28586] xt_hashlimit: size too large, truncated to 1048576
[ 2566.721001][T28589] tipc: Resetting bearer <eth:syzkaller0>
[ 2566.762823][T28588] tipc: Resetting bearer <eth:syzkaller0>
[ 2566.792474][T28588] tipc: Disabling bearer <eth:syzkaller0>
[ 2567.129158][T28617] netlink: 'syz.0.23701': attribute type 1 has an invalid length.
[ 2567.131886][T28617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2568.032743][T28632] netlink: 'syz.0.23707': attribute type 13 has an invalid length.
[ 2568.035702][T28632] netlink: 'syz.0.23707': attribute type 17 has an invalid length.
[ 2568.073053][T28632] bridge0: entered promiscuous mode
[ 2568.078403][T28632] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2568.126420][T28632] veth1_virt_wifi: entered promiscuous mode
[ 2568.140298][T28632] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[ 2568.168707][T23930] uyz0: Port: 1 Link ACTIVE
[ 2568.170534][T27159] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2568.180238][T27159] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2568.191383][T27159] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2568.195658][T27159] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2568.638215][T28646] ip6_vti0 speed is unknown, defaulting to 1000
[ 2568.735434][T28646] lo speed is unknown, defaulting to 1000
[ 2569.259860][T28681] netlink: 'syz.0.23720': attribute type 1 has an invalid length.
[ 2569.274240][T28681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2570.000086][T28726] __nla_validate_parse: 14 callbacks suppressed
[ 2570.000099][T28726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23733'.
[ 2570.053579][T28741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23735'.
[ 2570.266295][T20267] Bluetooth: hci4: command 0x0405 tx timeout
[ 2570.608047][T28761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23741'.
[ 2571.024709][T28771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23744'.
[ 2571.119443][T28784] netlink: 256 bytes leftover after parsing attributes in process `syz.0.23746'.
[ 2571.122613][T28784] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23746'.
[ 2571.338508][T28797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23750'.
[ 2571.395715][T28800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23751'.
[ 2571.406018][T28800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23751'.
[ 2571.426861][T28800] xt_hashlimit: size too large, truncated to 1048576
[ 2571.459062][T28803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23752'.
[ 2571.582968][T28810] : renamed from wg2
[ 2572.039030][   T33] audit: type=1800 audit(1779230324.812:14): pid=28819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.23757" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3867 res=0 errno=0
[ 2573.494904][T28845] netlink: 'syz.3.23766': attribute type 1 has an invalid length.
[ 2573.497829][T28845] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2573.746785][T28869] xt_hashlimit: size too large, truncated to 1048576
[ 2580.026319][T12247] page_pool_release_retry() stalled pool shutdown: id 1134, 3329 inflight 482 sec
[ 2583.836698][T28875] __nla_validate_parse: 8 callbacks suppressed
[ 2583.836722][T28875] netlink: 32 bytes leftover after parsing attributes in process `syz.0.23773'.
[ 2583.849368][T28883] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23775'.
[ 2583.852661][T28882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23775'.
[ 2584.169489][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23780'.
[ 2584.175495][T28902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23781'.
[ 2584.188893][T28902] xt_hashlimit: size too large, truncated to 1048576
[ 2584.352251][T28908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23782'.
[ 2584.503976][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23783'.
[ 2585.004932][T28931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23788'.
[ 2585.119203][T28944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23793'.
[ 2585.451816][T28964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.23797'.
[ 2586.071169][T29013] openvswitch: netlink: Key 25 has unexpected len 12 expected 16
[ 2586.074131][T29014] openvswitch: netlink: Key 25 has unexpected len 12 expected 16
[ 2586.147253][T29011] xt_hashlimit: size too large, truncated to 1048576
[ 2586.282386][T29021] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 2586.468146][T29026] xt_hashlimit: size too large, truncated to 1048576
[ 2586.809443][T29030] xt_hashlimit: size too large, truncated to 1048576
[ 2587.156261][ T9153] Bluetooth: hci4: command 0x0405 tx timeout
[ 2587.773109][T29093] xt_hashlimit: size too large, truncated to 1048576
[ 2587.795026][T29104] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004
[ 2587.838711][T29109] sctp: [Deprecated]: syz.0.23838 (pid 29109) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2587.838711][T29109] Use struct sctp_sack_info instead
[ 2587.853942][T29109] sctp: [Deprecated]: syz.0.23838 (pid 29109) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2587.853942][T29109] Use struct sctp_sack_info instead
[ 2588.077153][T29120] xt_hashlimit: size too large, truncated to 1048576
[ 2588.446905][T29147] bridge0: entered allmulticast mode
[ 2588.449264][T29147] bridge0: left allmulticast mode
[ 2588.510714][   T34] INFO: task udevd:15340 blocked for more than 143 seconds.
[ 2588.522468][   T34]       Not tainted syzkaller #0
[ 2588.525587][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2588.539931][   T34] task:udevd           state:D stack:23400 pid:15340 tgid:15340 ppid:5059   task_flags:0x400140 flags:0x00080800
[ 2588.552345][   T34] Call Trace:
[ 2588.553746][   T34]  <TASK>
[ 2588.561957][   T34]  __schedule+0x1821/0x5740
[ 2588.566608][   T34]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 2588.568736][   T34]  ? __blk_flush_plug+0x416/0x4d0
[ 2588.570528][   T34]  ? __pfx___schedule+0x10/0x10
[ 2588.572459][   T34]  ? schedule+0x90/0x360
[ 2588.573855][   T34]  schedule+0x164/0x360
[ 2588.575300][   T34]  schedule_timeout+0x158/0x2c0
[ 2588.577141][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[ 2588.579144][   T34]  ? __pfx_process_timeout+0x10/0x10
[ 2588.581184][   T34]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2588.583407][   T34]  ? prepare_to_wait_event+0x436/0x480
[ 2588.585238][   T34]  nbd_queue_rq+0x857/0x1100
[ 2588.587560][   T34]  ? __pfx_nbd_queue_rq+0x10/0x10
[ 2588.589329][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 2588.591290][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2588.593337][   T34]  blk_mq_dispatch_rq_list+0xa70/0x1910
[ 2588.595182][   T34]  ? sbitmap_get+0x1b3/0x390
[ 2588.597125][   T34]  ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10
[ 2588.599153][   T34]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[ 2588.601123][   T34]  __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 2588.603506][   T34]  ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10
[ 2588.605770][   T34]  ? blk_mq_hw_queue_need_run+0x13c/0x680
[ 2588.607952][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[ 2588.610110][   T34]  blk_mq_sched_dispatch_requests+0xd7/0x190
[ 2588.612120][   T34]  ? blk_mq_run_hw_queue+0x31f/0x4f0
[ 2588.614163][   T34]  blk_mq_run_hw_queue+0x348/0x4f0
[ 2588.616480][   T34]  blk_mq_dispatch_list+0xd16/0xe10
[ 2588.618364][   T34]  ? bdev_count_inflight+0x1cf/0x210
[ 2588.620140][   T34]  ? blk_mq_dispatch_list+0x260/0xe10
[ 2588.622134][   T34]  ? __pfx_blk_mq_dispatch_list+0x10/0x10
[ 2588.624027][   T34]  ? rcu_is_watching+0x15/0xb0
[ 2588.626309][   T34]  blk_mq_flush_plug_list+0x48d/0x570
[ 2588.628568][   T34]  ? blk_add_rq_to_plug+0x300/0x450
[ 2588.630831][   T34]  ? blk_mq_submit_bio+0x1acf/0x28e0
[ 2588.633126][   T34]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 2588.635634][   T34]  __blk_flush_plug+0x3ed/0x4d0
[ 2588.638391][   T34]  ? __pfx___blk_flush_plug+0x10/0x10
[ 2588.640646][   T34]  __submit_bio+0x28d/0x580
[ 2588.642535][   T34]  ? __pfx___submit_bio+0x10/0x10
[ 2588.644557][   T34]  ? bio_associate_blkg+0x6d/0x230
[ 2588.647592][   T34]  submit_bio_noacct_nocheck+0x2f4/0xa40
[ 2588.649930][   T34]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[ 2588.652437][   T34]  block_read_full_folio+0x7b7/0x830
[ 2588.654550][   T34]  ? __pfx_blkdev_get_block+0x10/0x10
[ 2588.657702][   T34]  filemap_read_folio+0x137/0x3b0
[ 2588.659644][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[ 2588.661820][   T34]  ? __pfx_filemap_read_folio+0x10/0x10
[ 2588.664060][   T34]  ? filemap_add_folio+0x356/0x530
[ 2588.665791][   T34]  do_read_cache_folio+0x358/0x590
[ 2588.668216][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[ 2588.670262][   T34]  read_part_sector+0xb6/0x2b0
[ 2588.672032][   T34]  adfspart_check_ICS+0xb1/0x960
[ 2588.673771][   T34]  ? seq_buf_printf+0x212/0x2d0
[ 2588.675452][   T34]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 2588.677835][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[ 2588.679862][   T34]  bdev_disk_changed+0x817/0x1770
[ 2588.681657][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[ 2588.683566][   T34]  blkdev_get_whole+0x380/0x510
[ 2588.685270][   T34]  bdev_open+0x31e/0xd30
[ 2588.687060][   T34]  blkdev_open+0x470/0x610
[ 2588.688667][   T34]  ? __pfx_blkdev_open+0x10/0x10
[ 2588.690741][   T34]  do_dentry_open+0x785/0x14e0
[ 2588.692789][   T34]  vfs_open+0x3b/0x340
[ 2588.694603][   T34]  ? path_openat+0x2df0/0x3860
[ 2588.697154][   T34]  path_openat+0x2e08/0x3860
[ 2588.699167][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[ 2588.701270][   T34]  ? stack_depot_save_flags+0x33/0x810
[ 2588.703167][   T34]  ? __pfx_path_openat+0x10/0x10
[ 2588.704942][   T34]  ? __x64_sys_openat+0x138/0x170
[ 2588.707226][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[ 2588.709278][   T34]  do_file_open+0x23e/0x4a0
[ 2588.711152][   T34]  ? __pfx_do_file_open+0x10/0x10
[ 2588.712859][   T34]  ? _raw_spin_unlock+0x28/0x50
[ 2588.714472][   T34]  ? alloc_fd+0x64b/0x6c0
[ 2588.716275][   T34]  do_sys_openat2+0x113/0x200
[ 2588.717968][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 2588.720056][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2588.721876][   T34]  ? rcu_is_watching+0x15/0xb0
[ 2588.723534][   T34]  __x64_sys_openat+0x138/0x170
[ 2588.725331][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2588.728299][   T34]  do_syscall_64+0x15f/0xf80
[ 2588.729851][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2588.732277][   T34] RIP: 0033:0x7fbafc3169a4
[ 2588.734126][   T34] RSP: 002b:00007fff4f114940 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2588.737632][   T34] RAX: ffffffffffffffda RBX: 000055d516d18780 RCX: 00007fbafc3169a4
[ 2588.740770][   T34] RDX: 00000000000a0800 RSI: 000055d516d0ecc0 RDI: 00000000ffffff9c
[ 2588.743758][   T34] RBP: 000055d516d0ecc0 R08: 0000000000000001 R09: 3fffffffffffffff
[ 2588.747193][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[ 2588.750296][   T34] R13: 000055d516d09aa0 R14: 0000000000000001 R15: 000055d516cf8910
[ 2588.753475][   T34]  </TASK>
[ 2588.755091][   T34] 
[ 2588.755091][   T34] Showing all locks held in the system:
[ 2588.759026][   T34] 1 lock held by khungtaskd/34:
[ 2588.761026][   T34]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2588.764906][   T34] 2 locks held by getty/5439:
[ 2588.767818][   T34]  #0: ffff8881122f00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2588.771629][   T34]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[ 2588.775612][   T34] 1 lock held by udevd/15147:
[ 2588.777795][   T34]  #0: ffff888169f34350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 2588.781395][   T34] 3 locks held by udevd/15340:
[ 2588.783379][   T34]  #0: ffff888169f30350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 2588.787316][   T34]  #1: ffff888166715b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0
[ 2588.791327][   T34]  #2: ffff88810b0c8178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100
[ 2588.794874][   T34] 1 lock held by syz.4.23848/29145:
[ 2588.798427][   T34]  #0: ffffffff8e962f78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 2588.801983][   T34] 1 lock held by syz.0.23849/29147:
[ 2588.803882][   T34] 
[ 2588.804873][   T34] =============================================
[ 2588.804873][   T34] 
[ 2588.809140][   T34] NMI backtrace for cpu 0
[ 2588.809155][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2588.809168][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2588.809176][   T34] Call Trace:
[ 2588.809182][   T34]  <TASK>
[ 2588.809188][   T34]  dump_stack_lvl+0xe8/0x150
[ 2588.809210][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[ 2588.809227][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2588.809243][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2588.809259][   T34]  sys_info+0x135/0x170
[ 2588.809271][   T34]  watchdog+0xfd3/0x1030
[ 2588.809296][   T34]  ? watchdog+0x1c9/0x1030
[ 2588.809317][   T34]  kthread+0x389/0x470
[ 2588.809335][   T34]  ? __pfx_watchdog+0x10/0x10
[ 2588.809348][   T34]  ? __pfx_kthread+0x10/0x10
[ 2588.809361][   T34]  ret_from_fork+0x514/0xb70
[ 2588.809375][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 2588.809384][   T34]  ? __switch_to+0xc79/0x1410
[ 2588.809401][   T34]  ? __pfx_kthread+0x10/0x10
[ 2588.809414][   T34]  ret_from_fork_asm+0x1a/0x30
[ 2588.809438][   T34]  </TASK>
[ 2588.809442][   T34] Sending NMI from CPU 0 to CPUs 1:
[ 2588.854285][    C1] NMI backtrace for cpu 1
[ 2588.854300][    C1] CPU: 1 UID: 0 PID: 29147 Comm: syz.0.23849 Not tainted syzkaller #0 PREEMPT(full) 
[ 2588.854308][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2588.854313][    C1] RIP: 0010:udpv6_recvmsg+0x20/0x1390
[ 2588.854332][    C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 89 4c 24 30 <48> 89 54 24 10 48 89 74 24 20 49 89 fc 65 48 8b 05 0b 88 dd 08 48
[ 2588.854339][    C1] RSP: 0018:ffffc900043ff720 EFLAGS: 00000282
[ 2588.854347][    C1] RAX: ffffffff8a50cbb7 RBX: dffffc0000000000 RCX: 0000000000000300
[ 2588.854352][    C1] RDX: 0000000000000000 RSI: ffffc900043ffce0 RDI: ffff88816f971b00
[ 2588.854357][    C1] RBP: ffffc900043ff878 R08: ffffc900043ff9bf R09: 0000000000000000
[ 2588.854362][    C1] R10: ffffc900043ff940 R11: fffff5200087ff38 R12: ffffffff8a50cad0
[ 2588.854366][    C1] R13: ffffffff8ceca538 R14: ffff88811298c240 R15: 0000000000000300
[ 2588.854371][    C1] FS:  00007f46704ca6c0(0000) GS:ffff8882a927a000(0000) knlGS:0000000000000000
[ 2588.854376][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2588.854380][    C1] CR2: 00002000007c1030 CR3: 000000023504a000 CR4: 00000000000006f0
[ 2588.854408][    C1] Call Trace:
[ 2588.854413][    C1]  <TASK>
[ 2588.854417][    C1]  ? do_user_addr_fault+0xc6f/0x1340
[ 2588.854432][    C1]  ? irqentry_exit+0x218/0x760
[ 2588.854443][    C1]  ? irqentry_exit+0x218/0x760
[ 2588.854453][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 2588.854462][    C1]  ? inet6_recvmsg+0xe7/0x490
[ 2588.854473][    C1]  ? __pfx_inet6_recvmsg+0x10/0x10
[ 2588.854482][    C1]  sock_recvmsg_nosec+0x95/0x140
[ 2588.854493][    C1]  ____sys_recvmsg+0x3e3/0x4a0
[ 2588.854501][    C1]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 2588.854510][    C1]  ? import_iovec+0x73/0xa0
[ 2588.854522][    C1]  ___sys_recvmsg+0x215/0x590
[ 2588.854529][    C1]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2588.854542][    C1]  do_recvmmsg+0x334/0x800
[ 2588.854549][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2588.854555][    C1]  ? file_init_path+0x3b/0x590
[ 2588.854574][    C1]  ? __pfx_do_futex+0x10/0x10
[ 2588.854587][    C1]  __x64_sys_recvmmsg+0x198/0x250
[ 2588.854594][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2588.854601][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2588.854609][    C1]  do_syscall_64+0x15f/0xf80
[ 2588.854618][    C1]  ? trace_irq_disable+0x3b/0x140
[ 2588.854630][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2588.854637][    C1] RIP: 0033:0x7f466f59ce59
[ 2588.854644][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2588.854650][    C1] RSP: 002b:00007f46704ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2588.854657][    C1] RAX: ffffffffffffffda RBX: 00007f466f815fa0 RCX: 00007f466f59ce59
[ 2588.854662][    C1] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007
[ 2588.854666][    C1] RBP: 00007f466f632d6f R08: 0000000000000000 R09: 0000000000000000
[ 2588.854670][    C1] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[ 2588.854674][    C1] R13: 00007f466f816038 R14: 00007f466f815fa0 R15: 00007ffd5ffcfdb8
[ 2588.854681][    C1]  </TASK>
[ 2588.979827][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[ 2588.982549][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2588.985770][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2588.989407][   T34] Call Trace:
[ 2588.990713][   T34]  <TASK>
[ 2588.991941][   T34]  vpanic+0x56c/0xa60
[ 2588.993546][   T34]  ? __pfx___schedule+0x10/0x10
[ 2588.995371][   T34]  ? __pfx_vpanic+0x10/0x10
[ 2588.997110][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[ 2588.999240][   T34]  panic+0xc5/0xd0
[ 2589.000486][   T34]  ? __pfx_panic+0x10/0x10
[ 2589.001909][   T34]  ? preempt_schedule_thunk+0x16/0x30
[ 2589.003691][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2589.005851][   T34]  watchdog+0x102c/0x1030
[ 2589.007270][   T34]  ? watchdog+0x1c9/0x1030
[ 2589.008729][   T34]  kthread+0x389/0x470
[ 2589.010040][   T34]  ? __pfx_watchdog+0x10/0x10
[ 2589.011903][   T34]  ? __pfx_kthread+0x10/0x10
[ 2589.013354][   T34]  ret_from_fork+0x514/0xb70
[ 2589.014947][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[ 2589.016825][   T34]  ? __switch_to+0xc79/0x1410
[ 2589.018597][   T34]  ? __pfx_kthread+0x10/0x10
[ 2589.020202][   T34]  ret_from_fork_asm+0x1a/0x30
[ 2589.021947][   T34]  </TASK>
[ 2589.023648][   T34] Kernel Offset: disabled
[ 2589.025064][   T34] Rebooting in 86400 seconds..
