last executing test programs:

1.244555092s ago: executing program 0 (id=171):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000080)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r0, @ANYBLOB="00a536ad356a6ab46d0080000000000000"], 0x50)
socket$unix(0x1, 0x2, 0x0)
epoll_create1(0x0)
epoll_create(0x78)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000000c0)="05031600d3fc14000000471c0910dd0100047b0860006e93ba138ad9fa28d07ad8fe133556000000", 0x28, 0x845, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0x7}, 0x14)
mmap(&(0x7f00008e8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x552c7000)
socket(0x14, 0x2, 0x4)
vmsplice(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0xa)

1.142771209s ago: executing program 2 (id=174):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0x0, 0x5, 0x7}, 0x9c)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044014)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x22, 0x0, 0x0, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xec}}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = socket(0x10, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r3, 0x25, 0x3, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x51, 0x7, 0x1, 0x0, "729a123fc8fd973250829fe449ba17a28dd84daef4543a5d72567711ac92860da51f4033800650787c0c0a7cd7f9d11f740e0e751ba23fbc087c9453c548ef5868e68ef3ad9bdcb6deb326df67"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x5c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}]}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40081}, 0x8090)

1.002075237s ago: executing program 0 (id=175):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0}) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESDEC=r2, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff1046"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r5)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3, 0x0, r0}, 0x10) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000700)="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", 0x105}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) (async)
getsockopt$sock_buf(r8, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESOCT=r8, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r10, @ANYBLOB="040046000500340076000000080026006c0900002c00518028000080050009"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async)
pipe(&(0x7f0000000080)={<r11=>0xffffffffffffffff}) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002e00000127bd7000000000000600000008004b0063c89a40fece6081ec856aedcc486a1039c479d7b8458e1e1800c2b3fea0c1fc6b5c77aa0d7b9eae9a35403838a90f57281ea2c87fac701e46494f80350532216567096f27f3d6ceeaec75e6a3764bfa488e59e8d7648747ccf91e6343126dcacb938a5208fd50861217a7d6f9b7386184b81783fcd6a81181289baec043719359bf4733b71caf7b6c88f68cd0e7af374eb0e4aeff23382504043dc03c4ab37abcfd0f820925da11d114140ac0d2b0", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4a805}, 0x0) (async)
ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f00000002c0)) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

905.681319ms ago: executing program 0 (id=177):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x0, 0x4}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_DST={0x8}]}, 0x24}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="600000000307010100000000000000000500000108000540000000030c00024000000000000000000c00034000000000e50000940c00034000000000000000000c000340000000000000000108000540000000020c00034000000000000000ff"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8048810)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000540)=@req={0x1, 0x6, 0x98b2, 0x9}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dbdc00, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x800)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000580)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000005c0)='syzkaller\x00', 0x8, 0xc, &(0x7f0000000600)=""/12, 0x41100, 0x42, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x7, 0xebb7, 0xd47}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r3, r3, r2, r3, r2, r2], &(0x7f0000000700)=[{0x3, 0x2, 0xe, 0x2}, {0x0, 0x3, 0xa, 0x3}, {0x0, 0x4, 0xa, 0xb}], 0x10, 0x8}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
connect$llc(r3, &(0x7f0000000a40)={0x1a, 0x30f, 0xb, 0x5, 0xff, 0xa}, 0x10)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x82)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@newchain={0x3c, 0x64, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0xd}, {0xfff2, 0xb}, {0xc, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @TCA_RATE={0x6, 0x5, {0xc, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8850}, 0x4000040)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @uid}, @typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x140d, 0x0, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x805}, 0x10)

843.135283ms ago: executing program 0 (id=180):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'veth0\x00', 0x2})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x3}}, {0x7, 0xfff8, {0x2, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x9, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xe}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xfffffffe}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x0, 0x5}}, {0x2, 0x200, {0x0, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x1, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x1, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x1000, 0x4, {0x0, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80)
write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000142000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r6}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind(r10, &(0x7f0000000480)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x80)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000400800000008000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000e03f020000ce6012e198d4a275f30c7a76ced776bc0a3cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"], 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd25, 0x25dfdffb, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}}, 0x24}}, 0x20004811)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f, 0x24, 0x0, &(0x7f0000000000)="d686a98a12501d53eef9016937ed101106f3023c6cc58b3cd97d7288310e3c8072dabb3a", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

732.583609ms ago: executing program 0 (id=182):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socketpair(0xf, 0xa, 0x7f, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc4}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080) (async)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="008a15754422c259ec354f104d000000ff53d7b5dc25f72fdb0b107aaee44326435b2fc7b2681b8151b3bed584", @ANYRES16=r5, @ANYBLOB="000425bd7000fddbdf2506000000"], 0x18c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014) (async)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="280100001700010000000000000000007f000001000000000000000000000000000000000000000000000000000000000000ffff0a010101ac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000100000300000000f9ffffff00000000000000000800"], 0x128}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4081) (async)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={<r7=>r1, &(0x7f0000000240)='\xff\xff', 0x12400, &(0x7f0000000280)={@_ha_fsid={[0x9, 0x7]}, {0x5, 0x43, 0x401, 0x1}}, 0x3, &(0x7f0000000300), &(0x7f0000000400)=0x9})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000000000000020000003441b4339a17466c", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28, @ANYRES32=r6, @ANYBLOB="000000000600"/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28])
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r11=>0x0}) (async)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f00000000c0), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r13=>0x0})
sendmsg$can_bcm(r12, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r13}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) (async)
sendmsg$can_bcm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x890, 0x5, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x30, 0x2, 0x0, 0x0, "ed123b3e9d19472738566ae7b93330fbba371b4d9ee6d5e062e7c412578f7825acea5cfd3b8a153e3ca2be105f7cd4190be1d3813630d3964cad9b502c74cf6f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x176bafcf4d0ff629, 0x4}}}]}, 0x3c}}, 0x4000010)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, r11, 0x2d, 0x0, @val=@perf_event={0x6}}, 0x18)

664.160256ms ago: executing program 0 (id=185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x39, 0x1, 0x7fffa, 0x25dfdaff, {0x1}, [@generic="a03df0bf1c5a81f8ec"]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

316.206223ms ago: executing program 1 (id=187):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x408a0}, 0x24004850)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000600)="57665614b41cc9aca27bb876555d6bc5b7df16e57cd086b2cc949f9a201ba8e7c4632f47ebba4fcfeecfe5a0133b2aaad72d507a51382d25c6caad2f1f904cc95a00ba8b0ab53bb2979eb994848538b9a6422c84034046aa214608858f8e3a", 0x5f)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, <r12=>0x0}, 0x8)
r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r12, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r13, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x278, 0xc8, 0x8, 0x0, 0x5803, 0x348, 0x2e8, 0x2e8, 0x348, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x230, 0x278, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x82, 0x3}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [0xff000000, 0x100fffe00, 0xff, 0xffffff00], @ipv6=@mcast2, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0x0, 0xffffff00, 0x0, 0xffffff00], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff, 0xff, 0xffffff00], 0x6cd, 0x7ff, 0x5e, 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x400}, 0x41, 0x0, 0x4e21, 0x4e22, 0x4e21, 0x4e21}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x43a14c66, 0xe, 'syz0\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

256.063592ms ago: executing program 1 (id=188):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'geneve0\x00', {0x9b27}, 0x7fff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf7a4d}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x58}}, 0x4000)

255.691952ms ago: executing program 2 (id=189):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r5, 0x1ff, 0x4, 0x5, 0x8, 0x8}, &(0x7f0000000140)=0x14)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000003440)={<r6=>0x0}, &(0x7f0000003480)=0x8)
sendmsg$inet_sctp(r0, &(0x7f0000003580)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0xfb5, @loopback}, 0x1c, &(0x7f00000033c0)=[{&(0x7f00000002c0)="2704fe91e4ff873ac6c09b288efe4df8a3cc6d3bfc133b17d78439c8d22c13ff00e5232ac6956a4cafffe5eb509742206b9b167e65a4184713fc298a2d286ffc49695f33b2810c59ae59d779824c77", 0x4f}, {&(0x7f0000000340)="220d5042fb9c0343e730a0acadffc85280463dd8205e43b71e2fa8908d788ca85122ec2bc62a5a9f9268b0f09b334d9907ea5c553a", 0x35}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="d7485f832ce1f466d2df9815bf01b4d408289c150d526bf829aaf3d016ae5ffc94367b3c1e2c68a78651647d2fa72778e5d6930daa55da142072aadd1a241f16430c906809de9d0631b364075fac6d6d5c93291ac99cdbd1eea02ab18ba92d7bdf1779887f00d18b68940ae8448d02fa119559a5e82657656d571a3c1dd24e42d241c66d36486b6f535150c0dcc780da7db592c8577e80e565fb94b396c6ebed778a8522828658a4e9e6d26a2720a9bc03fa7c9a74b389414ec10d9f9a8d377308a4da289a320cd68c6606fb0674f205113998c58698d3961c263259a229b8a868254d35267d0825000b48e66ccd75dae1", 0xf1}, {&(0x7f0000001580)="9bde", 0x2}, {&(0x7f00000023c0)="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", 0x1000}], 0x7, &(0x7f00000034c0)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x1, 0x9, 0x21f, r5}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xcd6d}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x0, 0x5, 0x2, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0x7, 0xfff7, 0x9, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0xa8, 0x44000}, 0x9fcc592d4d754225)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r4, 0x80000000, 0x20}, 0xc)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

194.13476ms ago: executing program 1 (id=190):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x190, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x164, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0xfd, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_ACT={0x128, 0x7, [@m_csum={0x124, 0xd, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x3, 0xc, 0x8}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0xa, 0x7, 0x4, 0x7}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x3, 0x4, 0x7d5164be}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x3, 0x6, 0x4}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x20000000, 0x8, 0x80}, 0x2a}}]}, {0x69, 0x6, "5227fe5d7df8f9218a8525d9f4e7506b9dd930c9285c8cdb5b18f87e605196d1fb08fa94bf61810163c537192c7f062e636edb4f3577281f4873176670a7bfde579310488fe1c233e33c8a2f5ebfbee76e808bddcb77113197f30bac57a2c01162ac63b5f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@alu={0x7, 0x0, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54e", 0xc9}, {&(0x7f0000001240)="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", 0x18c}, {&(0x7f00000005c0)="0875a5af2b1a78403017900cd651c16e174fb0b901a36164c75b9be64b7d9c8cda031eb74ee700206173af", 0x2b}], 0x3}, 0x9cdc2384056b48b8)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e)

96.344664ms ago: executing program 1 (id=191):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r1}, 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_newrule={0x68, 0x20, 0x20, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x5, 0x9, 0x0, 0x0, 0x6, 0x10008}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xfffffff7}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0xc}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}, @FRA_SRC={0x8, 0x2, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x68}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe000000007110bf00000000001d300200000000004704"], 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r7, 0x40, 0x40, 0x7c, 0xfffffffc, {{0x6, 0x4, 0x1, 0x31, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x89, 0x4, "a88c"}]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x8, 0x0, 0x0, 0x3}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1}, 0x28)
sendto$packet(r6, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r9, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xb, 0x1, 0x8000, 0x2, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4b0, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x12, 0x10000002]}})
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0x98})
mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x300000e, 0x11, r8, 0x9cc21000)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000040)={0x10002004})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"})
r11 = socket(0x1, 0x803, 0x0)
sendmsg$kcm(r11, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[{0x408, 0x1, 0x1, "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"}], 0x408}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000200025a729bd7000fddbdf25020000cdff00000102000100080006000000000014000100fc0000000000000000000000000000000500150002"], 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000340)=0x3, 0x4)

95.995668ms ago: executing program 2 (id=192):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc5}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value=0x10000000}, 0x94)

26.053859ms ago: executing program 2 (id=193):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x44, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x200000, 0x2, 0x2, 0x0, 0x98, 0x100}, 0x20)

25.060515ms ago: executing program 1 (id=194):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={0x0, 0x10}, 0x1b}, 0x20040050)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r1, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x2, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x4040080)

24.114671ms ago: executing program 2 (id=195):
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) (async)
accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) (async)
r4 = accept$alg(r3, 0x0, 0x0)
accept4(r4, &(0x7f0000002100)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f00000003c0)={0x1, 'ip6tnl0\x00', {}, 0x8})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000007000000000000e86f7765bfbbb381380830e1a2fbb454e05a37dd8ff1d1a1db451f84e8f0319941b5d31f6b4931d621c1b87087e288c08e965471f6a0050ee19255e4582c061dbc7607a106c5d96798a21f16ccc558ce07a2fcefeae96afa3c1c9990165e3aec96dd384f096aed5fbc74acfd76698d6450f63ca2700f3bcb59b0cb2eb590679374991cd0e5e3d02cfa5dfb"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) (async)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xd50, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1)

360.623µs ago: executing program 1 (id=196):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000040), 0x8)
ioctl$int_in(r4, 0x5421, &(0x7f0000002640)=0x9)
listen(r4, 0x1)
accept4(r4, 0x0, 0x0, 0x80800)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840)
write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="40050113"], 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x7d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f400", 0x2}], 0x1}, 0x39ba)

0s ago: executing program 2 (id=197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x4043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x20000884)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:62781' (ED25519) to the list of known hosts.
syzkaller login: [   56.487775][ T5599] cgroup: Unknown subsys name 'net'
[   56.576858][ T5599] cgroup: Unknown subsys name 'cpuset'
[   56.583364][ T5599] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.289020][ T5599] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.342667][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.348834][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.351654][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.355443][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.358884][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.362449][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.362981][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.366178][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.371364][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.371493][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.374365][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.381201][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.385637][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.392255][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.398561][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.126408][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.130199][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.134426][ T5622] bridge_slave_0: entered allmulticast mode
[   64.139351][ T5622] bridge_slave_0: entered promiscuous mode
[   64.180228][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.183627][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.186894][ T5622] bridge_slave_1: entered allmulticast mode
[   64.191866][ T5622] bridge_slave_1: entered promiscuous mode
[   64.216651][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.219757][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.223611][ T5617] bridge_slave_0: entered allmulticast mode
[   64.227909][ T5617] bridge_slave_0: entered promiscuous mode
[   64.257352][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.260529][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.264261][ T5617] bridge_slave_1: entered allmulticast mode
[   64.268730][ T5617] bridge_slave_1: entered promiscuous mode
[   64.276417][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.280039][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.283590][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.286438][ T5621] bridge_slave_0: entered allmulticast mode
[   64.289518][ T5621] bridge_slave_0: entered promiscuous mode
[   64.294599][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.297334][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.299987][ T5621] bridge_slave_1: entered allmulticast mode
[   64.303325][ T5621] bridge_slave_1: entered promiscuous mode
[   64.319887][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.356138][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.374982][ T5622] team0: Port device team_slave_0 added
[   64.388411][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.394247][ T5622] team0: Port device team_slave_1 added
[   64.399243][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.438796][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.452446][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.455614][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.465852][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.482206][ T5617] team0: Port device team_slave_0 added
[   64.485470][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.488648][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.498999][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.527298][ T5617] team0: Port device team_slave_1 added
[   64.543229][ T5621] team0: Port device team_slave_0 added
[   64.565362][ T5621] team0: Port device team_slave_1 added
[   64.568229][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.570669][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.580471][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.586418][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.588899][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.599761][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.634457][ T5622] hsr_slave_0: entered promiscuous mode
[   64.637891][ T5622] hsr_slave_1: entered promiscuous mode
[   64.653027][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.656012][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.665537][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.671042][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.673823][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.684116][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.759353][ T5617] hsr_slave_0: entered promiscuous mode
[   64.763251][ T5617] hsr_slave_1: entered promiscuous mode
[   64.767321][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   64.769708][ T5617] Cannot create hsr debugfs directory
[   64.836465][ T5621] hsr_slave_0: entered promiscuous mode
[   64.839497][ T5621] hsr_slave_1: entered promiscuous mode
[   64.842911][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   64.844922][ T5621] Cannot create hsr debugfs directory
[   65.132916][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.142661][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.150314][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.156301][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.167156][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.173875][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.181167][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.186863][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.221591][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.229815][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.250150][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.256198][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.262976][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.269536][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.280710][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.287013][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.333233][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.338565][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.341444][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.349827][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.356957][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.364593][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.373202][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.378823][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.445729][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.462208][   T54] Bluetooth: hci2: command tx timeout
[   65.462214][ T5618] Bluetooth: hci0: command tx timeout
[   65.462410][ T5618] Bluetooth: hci1: command tx timeout
[   65.491001][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   65.525785][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.528846][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.536034][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.539504][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.550326][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.587123][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   65.617564][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.620749][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.634739][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.648012][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.651133][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.698464][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   65.725986][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.729535][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.752356][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.755687][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.117760][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.177764][ T5622] veth0_vlan: entered promiscuous mode
[   66.200872][ T5622] veth1_vlan: entered promiscuous mode
[   66.214852][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.240186][ T5622] veth0_macvtap: entered promiscuous mode
[   66.250222][ T5622] veth1_macvtap: entered promiscuous mode
[   66.289392][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.303304][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.306564][ T5617] veth0_vlan: entered promiscuous mode
[   66.320106][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.326214][ T5617] veth1_vlan: entered promiscuous mode
[   66.347821][ T5510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.354017][ T5510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.365779][ T5510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.385129][ T5510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.440399][ T5617] veth0_macvtap: entered promiscuous mode
[   66.465749][ T5617] veth1_macvtap: entered promiscuous mode
[   66.495708][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.499042][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.504440][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.505276][ T5621] veth0_vlan: entered promiscuous mode
[   66.530499][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.544109][ T5621] veth1_vlan: entered promiscuous mode
[   66.556220][ T5510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.563647][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.564999][ T5510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.567463][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.570483][ T5510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.586269][ T5510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.649389][ T5621] veth0_macvtap: entered promiscuous mode
[   66.680784][ T5621] veth1_macvtap: entered promiscuous mode
[   66.705106][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.727425][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.732125][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.785183][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.806797][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.809465][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.812853][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.835891][ T5675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.848071][ T5675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.855923][ T5675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.872679][ T5675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.919589][ T5732] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   67.047827][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.048911][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.058198][   T10] IPVS: starting estimator thread 0...
[   67.060853][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.123468][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.136700][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.140814][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.152756][ T5737] IPVS: using max 80 ests per chain, 192000 per kthread
[   67.240692][ T5744] netlink: 'syz.1.5': attribute type 8 has an invalid length.
[   67.294160][ T5747] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   67.300386][ T5746] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   67.310543][ T5747] netlink: 'syz.2.6': attribute type 4 has an invalid length.
[   67.330893][ T5746] netlink: 'syz.2.6': attribute type 4 has an invalid length.
[   67.335542][ T5747] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6'.
[   67.339220][ T5746] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6'.
[   67.477953][ T5757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9'.
[   67.483396][ T5757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'.
[   67.542747][ T5618] Bluetooth: hci1: command tx timeout
[   67.552416][ T5618] Bluetooth: hci2: command tx timeout
[   67.555720][ T5618] Bluetooth: hci0: command tx timeout
[   67.556469][ T5761] Bluetooth: MGMT ver 1.23
[   68.233279][ T5773] pim6reg99999991: entered allmulticast mode
[   69.104071][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.110532][ T5795] netlink: 172 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.116784][ T5795] netlink: 172 bytes leftover after parsing attributes in process `syz.1.17'.
[   69.190421][ T5797] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   69.196860][ T5797] netlink: 92 bytes leftover after parsing attributes in process `syz.1.18'.
[   69.203298][ T5797] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   69.293953][ T5797] syzkaller0: entered promiscuous mode
[   69.296003][ T5797] syzkaller0: entered allmulticast mode
[   69.621814][ T5000] Bluetooth: hci1: command tx timeout
[   69.626662][ T5000] Bluetooth: hci0: command tx timeout
[   69.626737][ T5618] Bluetooth: hci2: command tx timeout
[   70.410424][ T5813] Zero length message leads to an empty skb
[   70.446336][ T5816] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.549184][ T5818] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   70.570378][ T5825] Unsupported ieee802154 address type: 0
[   70.773771][ T5831] netlink: 'syz.0.30': attribute type 21 has an invalid length.
[   70.878919][ T5675] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.889219][ T5675] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.893994][ T5837] netlink: 'syz.1.32': attribute type 29 has an invalid length.
[   70.905145][ T5675] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.910397][ T5839] xt_hashlimit: max too large, truncated to 1048576
[   70.914924][ T5839] xt_hashlimit: Unknown mode mask 300, kernel too old?
[   70.915707][ T5675] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.935184][ T5837] hsr0: entered promiscuous mode
[   71.129735][ T5851] xt_hashlimit: size too large, truncated to 1048576
[   71.129799][ T5852] xt_hashlimit: size too large, truncated to 1048576
[   71.397580][ T5822] syz.2.26 (5822) used greatest stack depth: 20288 bytes left
[   71.702577][ T5000] Bluetooth: hci0: command tx timeout
[   71.702694][ T5618] Bluetooth: hci1: command tx timeout
[   71.714405][ T5618] Bluetooth: hci2: command tx timeout
[   71.915186][ T5894] xt_hashlimit: size too large, truncated to 1048576
[   72.485987][ T5920] validate_nla: 19 callbacks suppressed
[   72.486022][ T5920] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   72.496657][ T5920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.574973][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.578930][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.653349][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.658780][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.724687][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.728361][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.731229][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.735888][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.742212][ T5927] __nla_validate_parse: 29 callbacks suppressed
[   72.742222][ T5927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'.
[   72.966587][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'.
[   73.032570][ T5944] netlink: 'syz.2.64': attribute type 4 has an invalid length.
[   73.042092][ T5944] netlink: 17 bytes leftover after parsing attributes in process `syz.2.64'.
[   73.418609][ T5955] netlink: 'syz.0.67': attribute type 3 has an invalid length.
[   73.465440][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'.
[   73.471417][ T5960] Cannot find add_set index 0 as target
[   74.216474][ T5988] netlink: 'syz.0.71': attribute type 2 has an invalid length.
[   74.220422][ T5988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.71'.
[   74.230629][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   74.371789][   T33] audit: type=1804 audit(1778604418.014:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.73" name="/newroot/31/cgroup.controllers" dev="tmpfs" ino=175 res=1 errno=0
[   74.385353][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   74.397086][   T33] audit: type=1800 audit(1778604418.014:3): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.73" name="cgroup.controllers" dev="tmpfs" ino=175 res=0 errno=0
[   74.484958][ T6002] geneve2: entered promiscuous mode
[   74.635759][ T6013] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   74.705767][ T6021] netlink: 140 bytes leftover after parsing attributes in process `syz.1.79'.
[   74.709524][ T6020] veth1_macvtap: left promiscuous mode
[   74.714743][ T6020] macsec0: entered allmulticast mode
[   74.723588][ T6020] veth1_macvtap: entered promiscuous mode
[   74.726147][ T6020] veth1_macvtap: entered allmulticast mode
[   74.728929][ T6020] macsec0: left allmulticast mode
[   74.730748][ T6020] veth1_macvtap: left allmulticast mode
[   74.811883][ T6026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.80'.
[   75.026316][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.028889][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'.
[   75.035741][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.038482][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.041156][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.046181][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.050728][ T6042] netlink: 'syz.0.84': attribute type 29 has an invalid length.
[   75.130088][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.145398][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.153350][ T6046] bond0 (unregistering): Released all slaves
[   75.459668][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.464246][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.597001][ T6086] can: request_module (can-proto-3) failed.
[   76.549638][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.987561][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.993050][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   77.398942][ T6167] veth0_vlan: entered allmulticast mode
[   77.824094][ T6192] __nla_validate_parse: 29 callbacks suppressed
[   77.824105][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'.
[   77.851402][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'.
[   78.046873][ T6204] sctp: [Deprecated]: syz.2.129 (pid 6204) Use of int in max_burst socket option.
[   78.046873][ T6204] Use struct sctp_assoc_value instead
[   78.148725][ T5676] IPVS: starting estimator thread 0...
[   78.216108][ T6212] veth1_to_batadv: entered promiscuous mode
[   78.240167][ T6212] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16
[   78.254379][ T6212] PKCS7: Unknown OID: [4] (bad)
[   78.258035][ T6212] PKCS7: Only support pkcs7_signedData type
[   78.264670][ T6209] IPVS: using max 80 ests per chain, 192000 per kthread
[   78.273948][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[   78.329778][   T56] block nbd0: Receive control failed (result -1)
[   78.376928][ T6223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.137'.
[   78.465393][ T6230] validate_nla: 16 callbacks suppressed
[   78.465408][ T6230] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   78.482352][ T6230] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.139'.
[   78.602428][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.0.142'.
[   78.730202][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'.
[   79.155242][ T6249] netlink: 'syz.1.145': attribute type 4 has an invalid length.
[   79.210023][ T6251] netlink: 'syz.1.146': attribute type 1 has an invalid length.
[   79.215493][ T6251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.387652][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.147'.
[   79.598546][ T6256] netlink: 'syz.0.148': attribute type 12 has an invalid length.
[   79.602438][ T6256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.148'.
[   79.620244][ T6256] netlink: 'syz.0.148': attribute type 39 has an invalid length.
[   80.078590][ T6266] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   80.081526][ T6266] netlink: 228 bytes leftover after parsing attributes in process `syz.1.152'.
[   80.208744][ T6280] netlink: Unknown conntrack attr (0)
[   80.594748][ T6297] batadv0: entered promiscuous mode
[   80.599286][ T6297] macsec1: entered promiscuous mode
[   80.601247][ T6297] macsec1: entered allmulticast mode
[   80.603129][ T6297] batadv0: entered allmulticast mode
[   80.605768][ T6297] 8021q: adding VLAN 0 to HW filter on device macsec1
[   80.609095][ T6297] batadv0: left allmulticast mode
[   80.611307][ T6297] batadv0: left promiscuous mode
[   81.270715][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.392580][ T6344] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[   81.565335][ T6356] ip6gretap0: entered promiscuous mode
[   81.574068][ T6356] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.671225][ T6367] tc_dump_action: action bad kind
[   81.755557][ T6381] netlink: 'syz.1.184': attribute type 10 has an invalid length.
[   81.756094][ T6382] netlink: 'syz.1.184': attribute type 10 has an invalid length.
[   81.824303][ T6382] netlink: 'syz.1.184': attribute type 10 has an invalid length.
[   81.963478][ T6381] nbd1: detected capacity change from 0 to 63
[   81.971608][ T5629] block nbd1: Send control failed (result -32)
[   81.971934][ T6385] block nbd1: Receive control failed (result -32)
[   81.973330][   T55] block nbd1: Receive control failed (result -32)
[   81.975622][ T5629] block nbd1: Request send failed, requeueing
[   81.980958][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.991555][   T74] block nbd1: Dead connection, failed to find a fallback
[   81.994916][   T74] block nbd1: shutting down sockets
[   81.997733][   T74] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.001820][   T74] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.005246][ T5629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.015363][ T5629] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.018661][ T5629] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.023660][ T5629] Buffer I/O error on dev nbd1, logical block 2, async page read
[   82.029071][ T5629] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.033107][ T5629] Buffer I/O error on dev nbd1, logical block 3, async page read
[   82.037782][ T5629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.042103][ T5629] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.045232][ T5629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.045724][ T6388] x_tables: unsorted underflow at hook 3
[   82.048145][ T5629] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.054068][ T5629] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.057272][ T5629] Buffer I/O error on dev nbd1, logical block 2, async page read
[   82.061118][ T5629] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.064758][ T5629] Buffer I/O error on dev nbd1, logical block 3, async page read
[   82.068043][ T5629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.071330][ T5629] Buffer I/O error on dev nbd1, logical block 0, async page read
[   82.075134][ T5629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   82.079029][ T5629] Buffer I/O error on dev nbd1, logical block 1, async page read
[   82.087212][ T5629] ldm_validate_partition_table(): Disk read failed.
[   82.093593][ T5629] Dev nbd1: unable to read RDB block 0
[   82.096413][ T5629]  nbd1: unable to read partition table
[   82.107692][ T5629] ldm_validate_partition_table(): Disk read failed.
[   82.114654][ T5629] Dev nbd1: unable to read RDB block 0
[   82.118350][ T5629]  nbd1: unable to read partition table
[   82.231650][ T6395] bridge_slave_0: left allmulticast mode
[   82.235472][ T6395] bridge_slave_0: left promiscuous mode
[   82.237994][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.245599][ T6395] bridge_slave_1: left allmulticast mode
[   82.247507][ T6395] bridge_slave_1: left promiscuous mode
[   82.250738][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.258421][ T6395] bond0: (slave bond_slave_0): Releasing backup interface
[   82.264331][ T6395] bond0: (slave bond_slave_1): Releasing backup interface
[   82.268434][ T6395] team0: Port device team_slave_0 removed
[   82.271838][ T6395] team0: Port device team_slave_1 removed
[   82.274218][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.277066][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.279967][ T6395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.328304][ T6401] pim6reg1: entered allmulticast mode
[   82.524419][ T6417] bond1: option arp_all_targets: invalid value (129)
[   82.530644][ T6417] bond1 (unregistering): Released all slaves
[   82.551145][ T6422] 
[   82.552132][ T6422] ======================================================
[   82.554696][ T6422] WARNING: possible circular locking dependency detected
[   82.557415][ T6422] syzkaller #0 Not tainted
[   82.559251][ T6422] ------------------------------------------------------
[   82.561666][ T6422] syz.0.198/6422 is trying to acquire lock:
[   82.563639][ T6422] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.566829][ T6422] 
[   82.566829][ T6422] but task is already holding lock:
[   82.569456][ T6422] ffff8881012d7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[   82.572990][ T6422] 
[   82.572990][ T6422] which lock already depends on the new lock.
[   82.572990][ T6422] 
[   82.576405][ T6422] 
[   82.576405][ T6422] the existing dependency chain (in reverse order) is:
[   82.579603][ T6422] 
[   82.579603][ T6422] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[   82.582502][ T6422]        down_write+0x96/0x200
[   82.584150][ T6422]        kernfs_add_one+0x41/0x5c0
[   82.585926][ T6422]        kernfs_create_dir_ns+0xde/0x130
[   82.587950][ T6422]        internal_create_group+0x425/0x1180
[   82.589884][ T6422]        cpuhp_invoke_callback+0x445/0x860
[   82.591885][ T6422]        cpuhp_issue_call+0x430/0x7a0
[   82.594411][ T6422]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[   82.597437][ T6422]        __cpuhp_setup_state+0x3f/0x60
[   82.599533][ T6422]        do_one_initcall+0x250/0x870
[   82.601365][ T6422]        do_initcall_level+0x104/0x190
[   82.603437][ T6422]        do_initcalls+0x59/0xa0
[   82.604983][ T6422]        kernel_init_freeable+0x2a6/0x3e0
[   82.606828][ T6422]        kernel_init+0x1d/0x1d0
[   82.608696][ T6422]        ret_from_fork+0x514/0xb70
[   82.610563][ T6422]        ret_from_fork_asm+0x1a/0x30
[   82.612557][ T6422] 
[   82.612557][ T6422] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[   82.615259][ T6422] 
[   82.615259][ T6422] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[   82.617834][ T6422]        cpus_read_lock+0x42/0x160
[   82.619706][ T6422]        static_key_slow_inc+0x12/0x30
[   82.621733][ T6422]        tcp_md5_do_add+0x1d4/0x390
[   82.623606][ T6422]        tcp_v6_parse_md5_keys+0x562/0x680
[   82.625671][ T6422]        do_tcp_setsockopt+0x12ec/0x2060
[   82.627801][ T6422]        do_sock_setsockopt+0x17c/0x1b0
[   82.629954][ T6422]        __x64_sys_setsockopt+0x13d/0x1b0
[   82.632016][ T6422]        do_syscall_64+0x15f/0xf80
[   82.634626][ T6422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.637066][ T6422] 
[   82.637066][ T6422] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[   82.639486][ T6422]        lock_sock_nested+0x41/0x100
[   82.641735][ T6422]        inet_shutdown+0x6a/0x390
[   82.643832][ T6422]        nbd_mark_nsock_dead+0x2e9/0x560
[   82.646415][ T6422]        recv_work+0x1c2e/0x1d40
[   82.648637][ T6422]        process_scheduled_works+0xb5d/0x1860
[   82.651454][ T6422]        worker_thread+0xa53/0xfc0
[   82.653649][ T6422]        kthread+0x388/0x470
[   82.655700][ T6422]        ret_from_fork+0x514/0xb70
[   82.658078][ T6422]        ret_from_fork_asm+0x1a/0x30
[   82.660486][ T6422] 
[   82.660486][ T6422] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[   82.663261][ T6422]        __mutex_lock+0x1a3/0x1550
[   82.664978][ T6422]        nbd_queue_rq+0x37b/0x1100
[   82.667040][ T6422]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   82.669267][ T6422]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   82.671763][ T6422]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   82.673886][ T6422]        blk_mq_run_hw_queue+0x348/0x4f0
[   82.675674][ T6422]        blk_mq_dispatch_list+0xd16/0xe10
[   82.677492][ T6422]        blk_mq_flush_plug_list+0x48d/0x570
[   82.679489][ T6422]        __blk_flush_plug+0x3ed/0x4d0
[   82.681386][ T6422]        __submit_bio+0x28d/0x580
[   82.683230][ T6422]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   82.685456][ T6422]        block_read_full_folio+0x599/0x830
[   82.687366][ T6422]        filemap_read_folio+0x137/0x3b0
[   82.689116][ T6422]        do_read_cache_folio+0x358/0x590
[   82.690984][ T6422]        read_part_sector+0xb6/0x2b0
[   82.692800][ T6422]        adfspart_check_ICS+0xb1/0x960
[   82.694903][ T6422]        bdev_disk_changed+0x817/0x1770
[   82.696909][ T6422]        blkdev_get_whole+0x380/0x510
[   82.698630][ T6422]        bdev_open+0x31e/0xd30
[   82.700142][ T6422]        blkdev_open+0x470/0x610
[   82.701733][ T6422]        do_dentry_open+0x785/0x14e0
[   82.703480][ T6422]        vfs_open+0x3b/0x340
[   82.705068][ T6422]        path_openat+0x2e08/0x3860
[   82.707239][ T6422]        do_file_open+0x23e/0x4a0
[   82.709149][ T6422]        do_sys_openat2+0x113/0x200
[   82.711132][ T6422]        __x64_sys_openat+0x138/0x170
[   82.712894][ T6422]        do_syscall_64+0x15f/0xf80
[   82.714523][ T6422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.716812][ T6422] 
[   82.716812][ T6422] -> #4 (&cmd->lock){+.+.}-{4:4}:
[   82.719326][ T6422]        __mutex_lock+0x1a3/0x1550
[   82.721614][ T6422]        nbd_queue_rq+0xc6/0x1100
[   82.723719][ T6422]        blk_mq_dispatch_rq_list+0xa70/0x1910
[   82.725936][ T6422]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[   82.728586][ T6422]        blk_mq_sched_dispatch_requests+0xd7/0x190
[   82.730738][ T6422]        blk_mq_run_hw_queue+0x348/0x4f0
[   82.732872][ T6422]        blk_mq_dispatch_list+0xd16/0xe10
[   82.735047][ T6422]        blk_mq_flush_plug_list+0x48d/0x570
[   82.737097][ T6422]        __blk_flush_plug+0x3ed/0x4d0
[   82.738798][ T6422]        __submit_bio+0x28d/0x580
[   82.740453][ T6422]        submit_bio_noacct_nocheck+0x2f4/0xa40
[   82.742513][ T6422]        block_read_full_folio+0x599/0x830
[   82.744705][ T6422]        filemap_read_folio+0x137/0x3b0
[   82.746950][ T6422]        do_read_cache_folio+0x358/0x590
[   82.748876][ T6422]        read_part_sector+0xb6/0x2b0
[   82.750706][ T6422]        adfspart_check_ICS+0xb1/0x960
[   82.752532][ T6422]        bdev_disk_changed+0x817/0x1770
[   82.754343][ T6422]        blkdev_get_whole+0x380/0x510
[   82.756089][ T6422]        bdev_open+0x31e/0xd30
[   82.757642][ T6422]        blkdev_open+0x470/0x610
[   82.759243][ T6422]        do_dentry_open+0x785/0x14e0
[   82.761035][ T6422]        vfs_open+0x3b/0x340
[   82.762973][ T6422]        path_openat+0x2e08/0x3860
[   82.765145][ T6422]        do_file_open+0x23e/0x4a0
[   82.766950][ T6422]        do_sys_openat2+0x113/0x200
[   82.768648][ T6422]        __x64_sys_openat+0x138/0x170
[   82.770474][ T6422]        do_syscall_64+0x15f/0xf80
[   82.772145][ T6422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.774362][ T6422] 
[   82.774362][ T6422] -> #3 (set->srcu){.+.+}-{0:0}:
[   82.776651][ T6422]        __synchronize_srcu+0xca/0x300
[   82.778561][ T6422]        elevator_switch+0x1e8/0x7a0
[   82.780474][ T6422]        elevator_change+0x2cc/0x450
[   82.782470][ T6422]        elevator_set_default+0x36c/0x430
[   82.784308][ T6422]        blk_register_queue+0x3e9/0x4e0
[   82.786086][ T6422]        __add_disk+0x677/0xd50
[   82.787673][ T6422]        add_disk_fwnode+0xfb/0x480
[   82.789411][ T6422]        nbd_dev_add+0x72c/0xb50
[   82.791249][ T6422]        nbd_init+0x168/0x1f0
[   82.793151][ T6422]        do_one_initcall+0x250/0x870
[   82.795047][ T6422]        do_initcall_level+0x104/0x190
[   82.796825][ T6422]        do_initcalls+0x59/0xa0
[   82.798395][ T6422]        kernel_init_freeable+0x2a6/0x3e0
[   82.800261][ T6422]        kernel_init+0x1d/0x1d0
[   82.801829][ T6422]        ret_from_fork+0x514/0xb70
[   82.803630][ T6422]        ret_from_fork_asm+0x1a/0x30
[   82.805471][ T6422] 
[   82.805471][ T6422] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[   82.808271][ T6422]        __mutex_lock+0x1a3/0x1550
[   82.810043][ T6422]        elevator_change+0x1b3/0x450
[   82.811756][ T6422]        elevator_set_none+0xb5/0x140
[   82.813609][ T6422]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[   82.815671][ T6422]        nbd_start_device+0x17f/0xb10
[   82.817476][ T6422]        nbd_genl_connect+0x165b/0x1cf0
[   82.819449][ T6422]        genl_family_rcv_msg_doit+0x22a/0x330
[   82.821813][ T6422]        genl_rcv_msg+0x61c/0x7a0
[   82.823580][ T6422]        netlink_rcv_skb+0x232/0x4b0
[   82.825372][ T6422]        genl_rcv+0x28/0x40
[   82.826860][ T6422]        netlink_unicast+0x75c/0x8e0
[   82.828578][ T6422]        netlink_sendmsg+0x813/0xb40
[   82.830370][ T6422]        ____sys_sendmsg+0x972/0x9f0
[   82.832205][ T6422]        ___sys_sendmsg+0x2a5/0x360
[   82.834308][ T6422]        __x64_sys_sendmsg+0x1bd/0x2a0
[   82.836248][ T6422]        do_syscall_64+0x15f/0xf80
[   82.838011][ T6422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.840302][ T6422] 
[   82.840302][ T6422] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[   82.843276][ T6422]        blk_alloc_queue+0x546/0x680
[   82.845244][ T6422]        __blk_mq_alloc_disk+0x197/0x390
[   82.847621][ T6422]        nbd_dev_add+0x499/0xb50
[   82.849590][ T6422]        nbd_init+0x168/0x1f0
[   82.851559][ T6422]        do_one_initcall+0x250/0x870
[   82.853376][ T6422]        do_initcall_level+0x104/0x190
[   82.855141][ T6422]        do_initcalls+0x59/0xa0
[   82.856757][ T6422]        kernel_init_freeable+0x2a6/0x3e0
[   82.858641][ T6422]        kernel_init+0x1d/0x1d0
[   82.860382][ T6422]        ret_from_fork+0x514/0xb70
[   82.862327][ T6422]        ret_from_fork_asm+0x1a/0x30
[   82.864394][ T6422] 
[   82.864394][ T6422] -> #0 (fs_reclaim){+.+.}-{0:0}:
[   82.866928][ T6422]        __lock_acquire+0x15a5/0x2cf0
[   82.868794][ T6422]        lock_acquire+0x106/0x350
[   82.870829][ T6422]        fs_reclaim_acquire+0x71/0x100
[   82.873103][ T6422]        kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.875734][ T6422]        alloc_inode+0xb8/0x1b0
[   82.877784][ T6422]        iget_locked+0x131/0x6a0
[   82.879887][ T6422]        kernfs_get_inode+0x4f/0x780
[   82.882065][ T6422]        kernfs_iop_lookup+0x1fe/0x320
[   82.884286][ T6422]        lookup_one_qstr_excl+0x12d/0x360
[   82.886502][ T6422]        filename_create+0x20e/0x370
[   82.888681][ T6422]        filename_mkdirat+0xd2/0x510
[   82.890878][ T6422]        __se_sys_mkdirat+0x35/0x150
[   82.892739][ T6422]        do_syscall_64+0x15f/0xf80
[   82.894542][ T6422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.896704][ T6422] 
[   82.896704][ T6422] other info that might help us debug this:
[   82.896704][ T6422] 
[   82.900027][ T6422] Chain exists of:
[   82.900027][ T6422]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[   82.900027][ T6422] 
[   82.904800][ T6422]  Possible unsafe locking scenario:
[   82.904800][ T6422] 
[   82.907730][ T6422]        CPU0                    CPU1
[   82.909880][ T6422]        ----                    ----
[   82.912041][ T6422]   rlock(&root->kernfs_rwsem);
[   82.914009][ T6422]                                lock(cpuhp_state_mutex);
[   82.916743][ T6422]                                lock(&root->kernfs_rwsem);
[   82.919936][ T6422]   lock(fs_reclaim);
[   82.921949][ T6422] 
[   82.921949][ T6422]  *** DEADLOCK ***
[   82.921949][ T6422] 
[   82.925611][ T6422] 3 locks held by syz.0.198/6422:
[   82.927664][ T6422]  #0: ffff88811808e410 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[   82.931286][ T6422]  #1: ffff8881bfe28f98 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[   82.935790][ T6422]  #2: ffff8881012d7980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[   82.939975][ T6422] 
[   82.939975][ T6422] stack backtrace:
[   82.941923][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(full) 
[   82.941936][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.941942][ T6422] Call Trace:
[   82.941948][ T6422]  <TASK>
[   82.941952][ T6422]  dump_stack_lvl+0xe8/0x150
[   82.941966][ T6422]  print_circular_bug+0x2e1/0x300
[   82.941979][ T6422]  check_noncircular+0x12e/0x150
[   82.941990][ T6422]  __lock_acquire+0x15a5/0x2cf0
[   82.942000][ T6422]  ? percpu_ref_get_many+0x19/0x140
[   82.942015][ T6422]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.942025][ T6422]  lock_acquire+0x106/0x350
[   82.942032][ T6422]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.942043][ T6422]  ? find_inode_fast+0xd2/0x550
[   82.942054][ T6422]  ? alloc_inode+0xb8/0x1b0
[   82.942062][ T6422]  fs_reclaim_acquire+0x71/0x100
[   82.942080][ T6422]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.942088][ T6422]  kmem_cache_alloc_lru_noprof+0x45/0x640
[   82.942098][ T6422]  alloc_inode+0xb8/0x1b0
[   82.942109][ T6422]  iget_locked+0x131/0x6a0
[   82.942124][ T6422]  kernfs_get_inode+0x4f/0x780
[   82.942138][ T6422]  kernfs_iop_lookup+0x1fe/0x320
[   82.942155][ T6422]  lookup_one_qstr_excl+0x12d/0x360
[   82.942199][ T6422]  filename_create+0x20e/0x370
[   82.942218][ T6422]  ? __pfx_filename_create+0x10/0x10
[   82.942235][ T6422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.942249][ T6422]  filename_mkdirat+0xd2/0x510
[   82.942266][ T6422]  ? __pfx_filename_mkdirat+0x10/0x10
[   82.942285][ T6422]  ? do_getname+0x151/0x250
[   82.942297][ T6422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.942308][ T6422]  __se_sys_mkdirat+0x35/0x150
[   82.942326][ T6422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.942336][ T6422]  do_syscall_64+0x15f/0xf80
[   82.942346][ T6422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.942354][ T6422] RIP: 0033:0x7fd808f9cdd9
[   82.942364][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   82.942371][ T6422] RSP: 002b:00007fd809ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   82.942381][ T6422] RAX: ffffffffffffffda RBX: 00007fd809215fa0 RCX: 00007fd808f9cdd9
[   82.942387][ T6422] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[   82.942392][ T6422] RBP: 00007fd809032d69 R08: 0000000000000000 R09: 0000000000000000
[   82.942397][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.942402][ T6422] R13: 00007fd809216038 R14: 00007fd809215fa0 R15: 00007ffedadca4e8
[   82.942410][ T6422]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   83.613819][   T12] bond0 (unregistering): Released all slaves
[   83.698368][ T5355] 8021q: adding VLAN 0 to HW filter on device eth1
[   83.784473][ T5355] 8021q: adding VLAN 0 to HW filter on device eth2
[   83.856266][   T12] hsr_slave_0: left promiscuous mode
[   83.858468][   T12] hsr_slave_1: left promiscuous mode
[   83.970655][ T5355] 8021q: adding VLAN 0 to HW filter on device eth3
[   84.117923][ T5355] 8021q: adding VLAN 0 to HW filter on device eth4
[   84.226838][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.230634][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.287362][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.291570][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.347367][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.351479][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.406040][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.409809][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.483796][   T12] bridge_slave_1: left allmulticast mode
[   84.486057][   T12] bridge_slave_1: left promiscuous mode
[   84.488289][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.491597][   T12] bridge_slave_0: left allmulticast mode
[   84.493809][   T12] bridge_slave_0: left promiscuous mode
[   84.495846][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.610137][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.615722][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.620236][   T12] bond0 (unregistering): Released all slaves
[   84.743642][ T5355] 8021q: adding VLAN 0 to HW filter on device eth5
[   84.860419][   T12] hsr_slave_0: left promiscuous mode
[   84.865548][   T12] hsr_slave_1: left promiscuous mode
[   84.867671][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.870059][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.873280][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.875709][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.879727][   T12] veth1_to_batadv: left promiscuous mode
[   84.883642][   T12] veth1_macvtap: left promiscuous mode
[   84.886131][   T12] veth0_macvtap: left promiscuous mode
[   84.888472][   T12] veth1_vlan: left promiscuous mode
[   84.890313][   T12] veth0_vlan: left promiscuous mode
[   84.956272][   T12] team0 (unregistering): Port device team_slave_1 removed
[   84.962308][   T12] team0 (unregistering): Port device team_slave_0 removed
[   84.998176][ T5355] 8021q: adding VLAN 0 to HW filter on device eth6
[   85.106342][ T5355] 8021q: adding VLAN 0 to HW filter on device eth7
[   85.167416][   T12] IPVS: stop unused estimator thread 0...
[   85.213977][ T5355] 8021q: adding VLAN 0 to HW filter on device eth8
[   87.222853][  T799] cfg80211: failed to load regulatory.db
