last executing test programs:

51.163620626s ago: executing program 0 (id=355):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000680)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(ccm-aes-ce)\x00'}, 0x58) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8000000180081064e81f782db44b904021d080006007c09e8f655810a001500090014260b3cfc1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4", 0x55}], 0x1}, 0x0) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x9, 0x0, 0x3, 0x0, 0x800, 0x3ff, 0x0, r3}, &(0x7f00000000c0)=0x20) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) (async)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x110, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0xfd, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xae}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x110}], 0x1}, 0x20000000) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c000000fcff5848060601f7fffffff2ffffff0900030073797a3200000000050001000700000005000100070000000900030073797a3000000000bbf8d449762cf02423bb5e4c500c874591f929975fd3ea8dbc3feba719e68747723d380c2e08695ed82c3430b0079dddd4752bb5bb3b4a689a352d3c68f0aa7ddcf7e1463671c7895c3c6e7d03228d328f5abd648a5eaa9e2d6e769559f342b46b96c1c14b29ec4f6166d52cb6cf7de4c3401c9a160200000000000000aae4fa77eaac0ec14b623a4e88c031b81521709edc774db979cdda8a3715080000000741f26a1ef8c8fbd0ac272c52e4ee44370c96a26f7649fe85620000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x2400c010) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000180)={<r7=>r6, &(0x7f0000000040)='\x00', 0x60000, &(0x7f0000000080)={@_ha_fsid={[0x373a0c6e, 0x38]}, {0x8000, 0x4, 0xff02, 0xbbdb}}, 0x540a, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8001})
ioctl$TUNSETLINK(r7, 0x400454cd, 0x302) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r8 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r8, 0x1, 0x43, &(0x7f0000000000), 0xff7b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) (async)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x50, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x50}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x44080) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10)

51.104972806s ago: executing program 0 (id=357):
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r3}, 0x20)
sendmsg$inet_sctp(r0, &(0x7f0000000b00)={&(0x7f0000000140)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000180)="f43b86a32b8836ad55c7aec6123625cf79afab573322574a2b4fea1cedf973046bda2997ce2ec45fa757a8", 0x2b}, {&(0x7f0000000400)="6d9e88e58bb2b60547ad94f121f4cb27c9f6ae4a23e2b8c959b5f62bf18785464cf85fa6bcb704524100c7368c1ed17b60dd918ff0b2aa95eaca83f6876dc70f96197ebe86694651b07790ebb4861321ccd2c0011d3a6be4b02dcd02c3d5bd44906ce3213b79b4c85d5b36951d972852a8318b8e2d5a700781e691e539a11f6bf2d78c785cbb8454a9e735d3bb1db2cab50513b45b574b97e13fa1009ded8de3e087b6574d2b411570425e9454b3323ad36db1b7ea08bcd41d7d5a0285e58d665f69637f2b80", 0xc6}, {&(0x7f0000000700)="8ef08e829cb3ff690205345641962770dc631b09ba6dbec135c803589aa10e393e86775f43e7d648b7e45f3c9256eee5ae17445b43e6b08daa415f206aea1e0141f2b726f53170533195fbb631e0ccf3b95d384462ef3d0b26a6347d073d7c11ef67334d77ceaeb7dc2234906526f9034cfd86a821626ab08cde7f1148d84c834a", 0x81}, {&(0x7f00000007c0)="386225fb11fc17dd2cb47da1de8447d09ef6e58aa3e8ffc1a943ffcaaadebc1dd780047c82e58264203c994edc5d1f608bfefae39e8f6cff98fbc65697b595f0557fb91b721b3fc7b2f0c9861dbf29845410ac93d9e71adbb30192326e603a29f61640832c3e51e90a0a53e714ac8fc8674b233847f561ff1c332543fa4cf4a6a5e879caa57a34998c8038df18704867af5b7c4ac90e5d326a7f2d1fb919fc087c0556fc7e39620fd46977b1e74b5b3d346effd2d8c1359951cc0ea882", 0xbd}, {&(0x7f0000000880)="95657e11c1fdcc23803acb874198408f827453b30ac319680626399853558693b2f58b68ff612cd7a98f732966b715f95faef37d308cce8cc3877e432f9be7a2951bd56f1c660717e0769dab2aa2de8be4fecfc484f788c99431fb2a35cfa53c9bc6c0dc38ed0ce179729db4c1d5cf44a31dcdfd", 0x74}, {&(0x7f0000000900)="3969737d991513e93e31075ed7752e801eaa2de590d98e3c02b86516d29931a2a90d03a041160974af9875dc7f54db04554798b2c0ff712410e63ba6ad674e7acb9ed367af1eaac927f0baf455c4d522bc6f24b40bd5df8695c511db50561ed6ef1de0292015eb2b651a7a11815e7e6ab57e01606cc1bab7e9965fe6deb2d6868e50e9d9ba0f7ca00e6f6e416c848fac3d5625e98b02844abf02fcc5e87540294dcf", 0xa2}, {&(0x7f00000009c0)="78cf1bdd4382de56b93e195afe2d9615fb6f5e400071b6c13102b9c679b7c9b1afdd1659e036f6aa6190c960e2b16c2c5b74f72b8946a880b07b867201fe78de9ee2c8d4bc5451015a7fadb9aa6025b5886e14072cd8d1e682", 0x59}], 0x7, &(0x7f0000000ac0)=[@sndinfo={0x20, 0x84, 0x2, {0xacd, 0x4, 0xffffffff, 0x2, r3}}], 0x20, 0x20000080}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'veth1_to_bond\x00'})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_getvlan={0x0, 0x72, 0x100, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_DUMP_FLAGS, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x0, 0x1, 0x1}]}, 0x28}}, 0x0)

51.017306948s ago: executing program 0 (id=360):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x18c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xf5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xf3, 0x7, 0x1, 0x0, "bbbc1a78e90a566d36bbe85440772c430b46987477af2675462ad736dc9ba35928b8cc391697b2f0f5995de68fabf049e286af3ba935a895f751596e104c3558946aaa4bee7b034f307d5837af50aa5074e9c5da53e9ef4b9402277773435ae3be7f985b702b325b44097120b9ad586824c476d4833c48c099d901c290b488c646a9e8bdf91d855302ea65f7db9eda50124669c7e940264e741b53d6c5a1ad38c9375f501198bd6b9927e227e9def1d8e8a53b6340d96e5c0da8937b897d870008fefda6fd6eccb287065289afb9962bdc621105b695518450dba617f8933da4ce2f966d5667fd8913055544f2bc4b"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

50.933830283s ago: executing program 0 (id=361):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000091ffffff000700ff020000000000000000000000000001"], 0xfdef)

50.853848649s ago: executing program 0 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0xbf2c}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, @in6={0xa, 0x4e22, 0x9, @local, 0x8}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x3, @loopback, 0xa453}, @in={0x2, 0x4e20, @loopback}], 0x90)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x800001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x384e}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x79}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000001280)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f0000001240)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800090000000f00040019"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

50.594378093s ago: executing program 0 (id=367):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r4, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0x19c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xef6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c7}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1f6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "49bcc291f19eee45", "5c6495997b26a2da703d7be911a2a22f", "84b303f6", "29bd07267eea4fc2"}, 0x28)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000bc0)=0x5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000052}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff3f14000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000f00000012000000000000000040008000c7f03e"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r8, r8, 0x37, 0x2028, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280))

35.31131348s ago: executing program 32 (id=367):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x401, @ipv4={'\x00', '\xff\xff', @local}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "fd1bd3edff00", "c754c484c6157749c7a85b040000008e", "0460f800", "9fd74ba2972e7547"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r4, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0x19c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xef6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c7}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff1f6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "49bcc291f19eee45", "5c6495997b26a2da703d7be911a2a22f", "84b303f6", "29bd07267eea4fc2"}, 0x28)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000bc0)=0x5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000052}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8055}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff3f14000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000f00000012000000000000000040008000c7f03e"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r8, r8, 0x37, 0x2028, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280))

1.332508436s ago: executing program 1 (id=1020):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000aa310bb8e38b3304bc2e41886039070000070500"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r11=>0x0})
r12 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r15, r11, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)

990.658363ms ago: executing program 1 (id=1026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000010000140000001100010000000000000000000700000a"], 0xbc}, 0x1, 0x0, 0x0, 0x420c4}, 0x0)

920.170116ms ago: executing program 1 (id=1028):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/21, 0x15, <r4=>0x0, &(0x7f0000000400)=""/55, 0x37}}, 0x10) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0xc9, &(0x7f00000005c0)=""/201, 0x40f00, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xe, 0x401}, 0x10, 0x1782a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, [@jmp={0x5, 0x0, 0x5, 0x1, 0xa, 0x0, 0x8}, @jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0x20}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xa, 0x1, 0x3, 0x20, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x8, 0x6, 0x6, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x3, 0x0, 0xe, 0xffffffffffffffe0}]}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x0, 0x80000000, 0xab7}, 0x10, r4, r5, 0x0, &(0x7f0000000880)=[r0, r0, r0, r0, r6, r0, r0, r0], 0x0, 0x10, 0x6}, 0x94) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

918.305114ms ago: executing program 1 (id=1029):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x10b280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x8, 0x0, [{0x560, 0x0, 0xbb0}, {0x9a5, 0x0, 0x1}, {0x346, 0x0, 0x62}, {0x34c, 0x0, 0x8001}, {0x22c, 0x0, 0xeb}, {0xb79, 0x0, 0x7ff}, {0xc2, 0x0, 0x7}, {0x316, 0x0, 0x7fffffff}]})

750.101471ms ago: executing program 1 (id=1034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x494, 0x30, 0xffff, 0x0, 0xfffffffe, {}, [{0x480, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7ff, 0x800, 0x2ac, 0x3, 0xb, 0x81, 0xfffffffd, 0x800, 0x80000000, 0x97d, 0x7, 0x4, 0x630e, 0x6, 0xd3f, 0x0, 0x5, 0x7, 0x1, 0x9, 0x18000000, 0x4, 0xe, 0x3, 0x1, 0xa, 0x2, 0x9, 0x3, 0x2, 0x7, 0x1, 0x7, 0x6, 0x9, 0x1, 0x7, 0x5, 0x9, 0x9, 0x7, 0x7, 0x4, 0x7, 0x1, 0x9, 0x0, 0x2, 0x3ff, 0x1, 0x9, 0x200, 0x7fff, 0x10, 0x7, 0x5b74, 0x4, 0x8, 0x5, 0x9, 0x7, 0x0, 0x9, 0x0, 0x8a5, 0x4, 0x8, 0x2, 0x8d0, 0x0, 0x2, 0x3, 0x9, 0x8, 0x5c977a1, 0x5, 0xfffff1a4, 0x8, 0x104, 0x7ff, 0x5fb, 0x9, 0x5, 0x7fffffff, 0x9, 0xb, 0x4, 0x3, 0x80000001, 0xc881, 0x7, 0x3, 0x9, 0xf98, 0x4, 0x8001, 0x6, 0x1, 0x1, 0x2, 0x3, 0x7, 0x8, 0x9, 0x3, 0x13d, 0x9, 0x4, 0x40000000, 0x109, 0x8, 0xe, 0x7, 0x8, 0xff, 0x7, 0x1, 0x9, 0x80000001, 0x5, 0xe7, 0x1, 0xffffffff, 0x9, 0x401, 0x7, 0x6, 0x401, 0xf, 0x0, 0x7, 0x10, 0x75c, 0x8, 0x7, 0x80, 0x3, 0xa20, 0x6, 0x5, 0x9, 0x0, 0x40, 0x6, 0x6, 0xffffffff, 0x8035, 0xfffffff9, 0x7, 0x9, 0x40, 0x0, 0x3, 0x2, 0x5, 0xffff, 0x5, 0xfffffcaa, 0x7, 0x5bbd4453, 0x2, 0x8001, 0x3, 0x7, 0x1, 0x17, 0x639f061d, 0x10, 0x9, 0xfffffc01, 0x7, 0xad0, 0x100, 0xfff, 0xfffe0000, 0x6, 0xb1e9, 0x6, 0xffffff34, 0x1, 0x6, 0x8, 0x4, 0x800, 0xd3800001, 0x7, 0xc7, 0xc5, 0xfffffff8, 0x6, 0xe8, 0xffff0831, 0x10001, 0x66, 0x7b72, 0x4e53, 0x3218a60a, 0x4, 0x4b58, 0x7, 0x5, 0x5, 0x8, 0x200, 0x7f, 0x9, 0xa, 0x4, 0x2, 0xffffffff, 0x3, 0x9a, 0x2, 0x8, 0xef, 0x2, 0x0, 0x8, 0x2, 0xfe000, 0x40, 0x2, 0x1, 0x5, 0x3, 0x9, 0x300000, 0x2, 0x400, 0x4, 0xea2, 0x8, 0x9, 0x2, 0x9, 0x6, 0x5, 0x0, 0x10001, 0x4, 0x4, 0x3, 0x4, 0x8001, 0x8, 0x9, 0x4, 0x4, 0x1, 0x4, 0xe4, 0x4, 0x5, 0x10001, 0x1]}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7069, 0x8, 0x2, 0x1}}]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @nested={0x8, 0x9, 0x0, 0x1, [@generic="3de4dfcb"]}]}, 0x20}}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x53}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c044)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=""/146, &(0x7f0000000200)=0x92)

498.463752ms ago: executing program 3 (id=1039):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb6}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

497.839457ms ago: executing program 1 (id=1040):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7d16e354b6f02b95}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000)
write(r2, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0)
read(r5, &(0x7f0000000140)=""/166, 0xa6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0)
mmap(&(0x7f0000f01000/0x4000)=nil, 0x4000, 0x2000002, 0x4000932, r4, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='veth0_to_batadv\x00', 0x10)

438.507813ms ago: executing program 3 (id=1041):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x10b280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x8, 0x0, [{0x560, 0x0, 0xbb0}, {0x9a5, 0x0, 0x1}, {0x346, 0x0, 0x62}, {0x34c, 0x0, 0x8001}, {0x22c, 0x0, 0xeb}, {0xb77, 0x0, 0x7ff}, {0xc2, 0x0, 0x7}, {0x316, 0x0, 0x7fffffff}]})

389.775691ms ago: executing program 2 (id=1044):
r0 = socket(0x2a, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x7d, 0x0, &(0x7f0000001240)=0xb) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000340)=0x5, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}}, 0x4000) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

287.6593ms ago: executing program 3 (id=1045):
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
shutdown(r1, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200088c5}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0xb, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x10000002]}})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x24, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x30, 0x4, 0x66, 0x80, 0x4, 0x32, 0xaf, @private=0xa010100, @local}, "50040124c5aee3f3"}}}, 0x46) (async)
write$tun(r2, &(0x7f0000000380)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x24, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x30, 0x4, 0x66, 0x80, 0x4, 0x32, 0xaf, @private=0xa010100, @local}, "50040124c5aee3f3"}}}, 0x46)

287.242639ms ago: executing program 2 (id=1046):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000400)={0x3, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x80000001})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3fd, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0xd, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf9, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0x3, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900012473797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

287.045954ms ago: executing program 2 (id=1047):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000640000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800064000000001040004800900010073797a30"], 0x10c}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)

227.887078ms ago: executing program 3 (id=1048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

224.179952ms ago: executing program 2 (id=1049):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000000), 0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0xf6}, @void, @eth={@random="1648087d069f", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x8, 0x28, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xff8b, 0x0, 0x2}}}}}}}, 0x3a)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)

150.187344ms ago: executing program 3 (id=1050):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbc025087c0000080001800400dd80080003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00')
ioctl$NS_GET_USERNS(r1, 0x8008b70d, 0x0)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x80000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000001280)=r3}, 0x20)
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000080)}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c", 0x29}, {&(0x7f00000015c0)}, {&(0x7f0000000e00)="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", 0x267}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x4}]}}}], 0x40}, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001240)={0x4}, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="480000001400090528bd7000fdffffff02180000", @ANYRES32=r9, @ANYBLOB="080001007f00000108000200e0000002080004007f00000108000400ffffffff0a000a180000000008000200ffffffffe2242d039b38350986d6a32af1d0595408b386f6aa7ce8071f70e9eb0aa3c498bd485364f2ee3a612dfb640089aff417af3edce432da84d491c8ffb9f9642c6f614c24ae0802b1aacc0bc150ed997f0859985a02afe258e9c514a6905ccd94a8739f1d"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000240)={{r5}, r6, 0x14, @unused=[0x1006, 0x1, 0x8000, 0x7], @subvolid=0x800})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000200)={{r2}, r6, 0xa, @unused=[0x5, 0x0, 0x2000000, 0x7f], @name="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"})
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x6, @none, 0x81, 0x1}, 0xe)

148.021436ms ago: executing program 3 (id=1051):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000083298c03086658b642cbaeacd3a04df14be4e9b5b100aeb3fc2f821fcbde03456f921043606ad97d40200af05b49a8f9a46456403e3759b70fb00adeae025863be48131ccb8908f277ae81a5b7bbe9108cc79b865672cf898f96b1", @ANYRES16=r1, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3000000000000000000000000800060000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40010)

26.019433ms ago: executing program 2 (id=1052):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x10b280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={0x0}, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000002002000000080000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000280)={0x8, 0x0, [{0x1dc, 0x0, 0xbb0}, {0x9a5, 0x0, 0x1}, {0x346, 0x0, 0x62}, {0x34c, 0x0, 0x7ffd}, {0x22c, 0x0, 0xeb}, {0xb77, 0x0, 0x7ff}, {0xc2, 0x0, 0x7}, {0x316, 0x0, 0x7fffffff}]})

0s ago: executing program 2 (id=1053):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x24, 0x401, 0x0, 0x80, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x9810) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0xc43a, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x3, 0x1, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x14850}, 0x3000c0c1) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1513' (ED25519) to the list of known hosts.
syzkaller login: [   57.341075][ T5586] cgroup: Unknown subsys name 'net'
[   57.402352][ T5586] cgroup: Unknown subsys name 'cpuset'
[   57.408360][ T5586] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.544506][ T5586] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.586270][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.589801][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.592948][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.596967][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.602910][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.628485][ T5001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.632935][ T5001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.638248][ T5001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.645275][ T5001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.648835][ T5001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.687876][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.693024][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.696048][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.699330][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.703451][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.118932][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.122332][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.125115][ T5602] bridge_slave_0: entered allmulticast mode
[   63.128742][ T5602] bridge_slave_0: entered promiscuous mode
[   63.155313][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.157871][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.160585][ T5602] bridge_slave_1: entered allmulticast mode
[   63.163517][ T5602] bridge_slave_1: entered promiscuous mode
[   63.200405][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.204893][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.238798][ T5602] team0: Port device team_slave_0 added
[   63.245040][ T5602] team0: Port device team_slave_1 added
[   63.281267][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.283185][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.290978][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.295666][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.297650][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.304943][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.407053][ T5602] hsr_slave_0: entered promiscuous mode
[   63.413488][ T5602] hsr_slave_1: entered promiscuous mode
[   63.438031][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.440229][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.442274][ T5606] bridge_slave_0: entered allmulticast mode
[   63.444872][ T5606] bridge_slave_0: entered promiscuous mode
[   63.461482][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.464245][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.466423][ T5606] bridge_slave_1: entered allmulticast mode
[   63.469562][ T5606] bridge_slave_1: entered promiscuous mode
[   63.537063][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.543951][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.546522][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.549291][ T5614] bridge_slave_0: entered allmulticast mode
[   63.552085][ T5614] bridge_slave_0: entered promiscuous mode
[   63.556657][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.572932][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.576137][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.579823][ T5614] bridge_slave_1: entered allmulticast mode
[   63.583539][ T5614] bridge_slave_1: entered promiscuous mode
[   63.615444][ T5606] team0: Port device team_slave_0 added
[   63.634824][ T5606] team0: Port device team_slave_1 added
[   63.642982][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.668829][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.701000][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.703580][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.711069][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.727726][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.730046][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.737224][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.747106][ T5614] team0: Port device team_slave_0 added
[   63.757560][ T5614] team0: Port device team_slave_1 added
[   63.787863][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.790729][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.800213][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.816595][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.819422][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.828919][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.859676][ T5606] hsr_slave_0: entered promiscuous mode
[   63.862133][ T5606] hsr_slave_1: entered promiscuous mode
[   63.864169][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   63.865876][ T5606] Cannot create hsr debugfs directory
[   63.912908][ T5614] hsr_slave_0: entered promiscuous mode
[   63.916367][ T5614] hsr_slave_1: entered promiscuous mode
[   63.919184][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   63.921755][ T5614] Cannot create hsr debugfs directory
[   63.975373][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.983441][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.001481][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.007528][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.026619][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.032013][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.034526][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.040122][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.215905][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.222505][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.225208][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.230574][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.235338][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.242933][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.246327][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.251574][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.336759][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.343860][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.350760][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.354341][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.360325][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.370090][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.375672][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.379243][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.384575][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.409059][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[   64.431113][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.433523][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.460142][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.462802][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.486247][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.517197][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   64.529489][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.531709][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.542581][ T5602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.555413][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.557496][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.634250][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.648635][ T5001] Bluetooth: hci0: command tx timeout
[   64.666258][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   64.684572][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.686694][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.703325][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.705339][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.729187][ T5001] Bluetooth: hci2: command tx timeout
[   64.731658][ T5001] Bluetooth: hci1: command tx timeout
[   64.964878][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.000396][ T5602] veth0_vlan: entered promiscuous mode
[   65.010780][ T5602] veth1_vlan: entered promiscuous mode
[   65.033849][ T5602] veth0_macvtap: entered promiscuous mode
[   65.042875][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.047424][ T5602] veth1_macvtap: entered promiscuous mode
[   65.064393][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.076557][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.089673][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.094551][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.102880][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.105743][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.115229][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.157740][ T5606] veth0_vlan: entered promiscuous mode
[   65.183589][ T5606] veth1_vlan: entered promiscuous mode
[   65.199370][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.205337][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.252278][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.258097][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.259579][ T5614] veth0_vlan: entered promiscuous mode
[   65.273118][ T5606] veth0_macvtap: entered promiscuous mode
[   65.292748][ T5606] veth1_macvtap: entered promiscuous mode
[   65.310966][ T5614] veth1_vlan: entered promiscuous mode
[   65.329227][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.333457][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.343464][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.359780][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.374251][ T5647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.382359][ T5647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.391679][ T5647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.411682][ T5614] veth0_macvtap: entered promiscuous mode
[   65.425263][ T5614] veth1_macvtap: entered promiscuous mode
[   65.489294][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.500880][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.515360][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.518237][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.521273][ T5647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.527678][ T5647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.537026][ T5647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.553756][ T5647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.557003][ T5714] netlink: 'syz.1.2': attribute type 13 has an invalid length.
[   65.559841][ T5713] netlink: 'syz.1.2': attribute type 13 has an invalid length.
[   65.568864][ T5714] netlink: 'syz.1.2': attribute type 17 has an invalid length.
[   65.575717][ T5713] netlink: 'syz.1.2': attribute type 17 has an invalid length.
[   65.581711][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.584972][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.886792][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.895094][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.902535][ T5718] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   65.975749][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.985979][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.003407][ T5722] Zero length message leads to an empty skb
[   66.519125][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   66.522106][ T5758] netlink: 'syz.0.10': attribute type 1 has an invalid length.
[   66.729180][   T54] Bluetooth: hci0: command tx timeout
[   66.808080][   T54] Bluetooth: hci1: command tx timeout
[   66.810973][ T5001] Bluetooth: hci2: command tx timeout
[   67.760954][ T5773] syzkaller1: entered promiscuous mode
[   67.762686][ T5773] syzkaller1: entered allmulticast mode
[   68.776378][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   68.808818][ T5001] Bluetooth: hci0: command tx timeout
[   68.888051][   T54] Bluetooth: hci1: command tx timeout
[   68.889737][ T5001] Bluetooth: hci2: command tx timeout
[   68.942364][ T5789] netlink: 'syz.0.17': attribute type 4 has an invalid length.
[   68.945202][ T5789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   69.271491][ T5741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.579142][ T5815] netlink: 'syz.2.23': attribute type 4 has an invalid length.
[   69.678411][ T5820] syzkaller1: entered promiscuous mode
[   69.681807][ T5820] syzkaller1: entered allmulticast mode
[   69.814575][ T5827] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.24'.
[   69.911346][ T5829] syzkaller1: entered promiscuous mode
[   69.914274][ T5829] syzkaller1: entered allmulticast mode
[   69.988034][ T5831] netlink: 48 bytes leftover after parsing attributes in process `syz.0.28'.
[   70.129015][ T5838] syzkaller0: entered promiscuous mode
[   70.130615][ T5838] syzkaller0: entered allmulticast mode
[   70.133979][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   70.136554][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   70.261761][ T5843] xt_hl: Unknown TTL match mode: 237
[   70.283271][ T5843] policy can only be matched on NF_INET_PRE_ROUTING
[   70.283288][ T5843] unable to load match
[   70.493806][ T5855] netlink: 'syz.0.36': attribute type 8 has an invalid length.
[   70.791805][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[   70.796137][ T5869] sctp: [Deprecated]: syz.2.42 (pid 5869) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.796137][ T5869] Use struct sctp_sack_info instead
[   70.888059][   T54] Bluetooth: hci0: command tx timeout
[   70.915485][ T5877] netlink: zone id is out of range
[   70.970594][   T54] Bluetooth: hci2: command tx timeout
[   70.972289][   T54] Bluetooth: hci1: command tx timeout
[   71.173158][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'.
[   71.416208][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   71.470589][ T5930] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[   71.504314][ T5930] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.553336][ T5937] __nla_validate_parse: 1 callbacks suppressed
[   71.553346][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.57'.
[   71.778645][ T5961] bond1: option mode: invalid value (254)
[   71.782618][ T5961] bond1 (unregistering): Released all slaves
[   72.164417][ T5988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.66'.
[   72.331482][ T5992] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   72.444496][ T5995] bond1: (slave bond_slave_1): Device is not our slave
[   72.446520][ T5995] bond1: option active_slave: invalid value (bond_slave_1)
[   72.450585][ T5995] bond1 (unregistering): Released all slaves
[   73.048122][ T5884] Bluetooth: hci2: command 0x0405 tx timeout
[   74.723441][ T5954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   74.840659][ T6009] netlink: 'syz.0.70': attribute type 1 has an invalid length.
[   74.843441][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'.
[   74.856688][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.860007][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.929521][ T6020] netlink: 196 bytes leftover after parsing attributes in process `syz.0.72'.
[   75.084440][ T6040] IPVS: set_ctl: invalid protocol: 22 172.30.0.2:20002
[   75.133325][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.78'.
[   75.265891][ T6058] syzkaller0: entered promiscuous mode
[   75.267571][ T6058] syzkaller0: entered allmulticast mode
[   75.300879][ T6058] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   75.351496][ T6069] xt_hashlimit: size too large, truncated to 1048576
[   75.363562][ T6075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.480967][ T6080] syzkaller1: entered promiscuous mode
[   75.483434][ T6080] syzkaller1: entered allmulticast mode
[   75.488566][ T6080] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.87'.
[   75.491975][ T6080] ksmbd: Unknown IPC event: 1, ignore.
[   75.705221][ T6090] IPVS: length: 35 != 24
[   75.734628][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   75.812024][ T6098] syz_tun: entered allmulticast mode
[   75.823558][ T6098] warning: `syz.2.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.890223][ T6097] syz_tun: left allmulticast mode
[   75.943116][ T6102] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   75.947476][ T6102] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   75.960232][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816e5e4c00: rx timeout, send abort
[   76.106262][ T6110] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   76.304250][ T6121] batadv_slave_1: entered promiscuous mode
[   76.364641][ T6125] xt_cluster: node mask cannot exceed total number of nodes
[   76.382028][ T6120] batadv_slave_1: left promiscuous mode
[   76.389134][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   76.429531][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[   76.443633][ T6128] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   76.460460][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816e5e5000: rx timeout, send abort
[   76.466199][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816e5e4c00: abort rx timeout. Force session deactivation
[   76.499492][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88816e5e5000: connection exists (fe ff). last cmd: 20
[   76.502248][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   76.599584][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.602778][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.678095][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.680623][ T6151] netlink: 'syz.1.110': attribute type 5 has an invalid length.
[   76.692562][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.735771][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.110'.
[   76.749522][    C1] vcan0: j1939_tp_rxtimer: 0xffff888174802400: rx timeout, send abort
[   76.828495][ T6137] smc: net device team0 applied user defined pnetid SYZ2
[   76.833743][ T6143] smc: net device team0 erased user defined pnetid SYZ2
[   76.849427][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.854350][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.862771][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.872596][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.910375][ T6162] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   76.920329][ T6162] ipvlan2: entered allmulticast mode
[   76.922583][ T6162] ip6erspan0: entered allmulticast mode
[   77.051362][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[   77.053665][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[   77.109999][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'.
[   77.252494][    C1] vcan0: j1939_tp_rxtimer: 0xffff888174802400: abort rx timeout. Force session deactivation
[   77.683292][ T6207] syzkaller0: entered promiscuous mode
[   77.685465][ T6207] syzkaller0: entered allmulticast mode
[   77.699663][ T6205] syzkaller1: entered promiscuous mode
[   77.701851][ T6205] syzkaller1: entered allmulticast mode
[   77.752655][ T6214] nftables ruleset with unbound chain
[   77.755723][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.850478][ T6216] netlink: 'syz.1.124': attribute type 1 has an invalid length.
[   77.858485][ T6216] netlink: 92 bytes leftover after parsing attributes in process `syz.1.124'.
[   77.958918][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.128'.
[   78.046884][ T6229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.131'.
[   78.102226][ T6231] netlink: 'syz.0.132': attribute type 2 has an invalid length.
[   78.104992][ T6231] netlink: 'syz.0.132': attribute type 8 has an invalid length.
[   78.107749][ T6231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'.
[   78.221830][  T932] hid-generic 0005:0B57:0A11.0001: item fetching failed at offset 0/1
[   78.227461][  T932] hid-generic 0005:0B57:0A11.0001: probe with driver hid-generic failed with error -22
[   78.250592][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.134'.
[   78.295650][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[   78.314516][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[   78.344222][ T6248] syzkaller1: entered promiscuous mode
[   78.353066][ T6248] syzkaller1: entered allmulticast mode
[   78.360228][ T6247] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   78.363212][ T6247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.454964][ T6255] 8021q: VLANs not supported on ip_vti0
[   79.070738][ T6310] netlink: 'syz.1.158': attribute type 44 has an invalid length.
[   79.176981][ T6320] netlink: 'syz.1.161': attribute type 14 has an invalid length.
[   79.292287][ T6331] Bluetooth: MGMT ver 1.23
[   79.357594][ T6342] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   79.448763][ T6350] bond1: entered promiscuous mode
[   79.450930][ T6350] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.478339][ T6350] bond1: left promiscuous mode
[   79.647520][ T6364] pim6reg: entered allmulticast mode
[   80.594742][ T6406] syzkaller1: entered promiscuous mode
[   80.596677][ T6406] syzkaller1: entered allmulticast mode
[   80.842316][ T6413] netlink: 'syz.2.184': attribute type 39 has an invalid length.
[   81.362195][ T6448] netem: change failed
[   81.881959][ T6470] bond1: option miimon: invalid value (18446744073709551607)
[   81.884322][ T6470] bond1: option miimon: allowed values 0 - 2147483647
[   81.889488][ T6470] bond1 (unregistering): Released all slaves
[   83.029484][ T6492] netlink: 'syz.2.206': attribute type 58 has an invalid length.
[   83.032746][ T6492] __nla_validate_parse: 12 callbacks suppressed
[   83.032755][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'.
[   83.046168][ T6494] netlink: 'syz.1.207': attribute type 142 has an invalid length.
[   83.054370][ T6494] netlink: 76 bytes leftover after parsing attributes in process `syz.1.207'.
[   83.063816][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   83.078424][ T6482] gtp0: entered promiscuous mode
[   83.080767][ T6482] gtp0: entered allmulticast mode
[   83.243989][ T6504] netlink: 27 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.248979][ T6501] macvtap1: entered promiscuous mode
[   83.253861][ T6505] netlink: 27 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.258124][ T6501] team0: entered promiscuous mode
[   83.260265][ T6501] team_slave_0: entered promiscuous mode
[   83.263121][ T6507] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   83.263119][ T6501] team_slave_1: entered promiscuous mode
[   83.265374][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   83.265440][ T6507] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   83.269194][ T6501] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   83.279600][ T6501] team0: Device macvtap1 is already an upper device of the team interface
[   83.285292][ T6501] team0: left promiscuous mode
[   83.287257][ T6501] team_slave_0: left promiscuous mode
[   83.292002][ T6501] team_slave_1: left promiscuous mode
[   83.316805][ T6507] syzkaller1: entered promiscuous mode
[   83.319139][ T6507] syzkaller1: entered allmulticast mode
[   83.366484][ T6509] tipc: Started in network mode
[   83.368902][ T6509] tipc: Node identity 000000000000000001, cluster identity 1025
[   83.378358][ T6509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'.
[   83.382615][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'.
[   83.385204][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'.
[   83.389051][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'.
[   83.631974][ T6521] block nbd1: not configured, cannot reconfigure
[   83.692777][ T6524] syzkaller1: entered promiscuous mode
[   83.694517][ T6524] syzkaller1: entered allmulticast mode
[   83.796377][ T6526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.810813][ T6526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.815811][ T6526] bond0 (unregistering): Released all slaves
[   84.523688][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.582516][ T6558] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.861138][ T6569] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[   84.863388][ T6569] netlink: 'syz.2.231': attribute type 2 has an invalid length.
[   84.900070][ T6569] macsec1: entered promiscuous mode
[   85.187878][ T6578] team1: entered promiscuous mode
[   85.191122][ T6578] team1: entered allmulticast mode
[   85.193501][ T6578] 8021q: adding VLAN 0 to HW filter on device team1
[   85.357668][ T6583] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   85.364946][ T6583] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.466875][ T6613] xt_l2tp: unknown flags: 51
[   86.543638][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.560592][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.724736][ T6140] IPVS: starting estimator thread 0...
[   86.799887][ T6651] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   86.818306][ T6639] IPVS: using max 70 ests per chain, 168000 per kthread
[   87.085184][ T6681] tipc: New replicast peer: 255.255.255.255
[   87.090464][ T6681] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.235730][ T6701] syzkaller0: entered promiscuous mode
[   87.237425][ T6701] syzkaller0: entered allmulticast mode
[   87.311321][   T10] cfg80211: failed to load regulatory.db
[   87.678670][ T6735] netlink: 'syz.0.283': attribute type 142 has an invalid length.
[   87.841094][ T6752] netlink: 'syz.0.285': attribute type 39 has an invalid length.
[   88.096274][ T6758] __nla_validate_parse: 156 callbacks suppressed
[   88.096286][ T6758] netlink: 68 bytes leftover after parsing attributes in process `syz.1.290'.
[   88.102034][ T6758] netlink: 'syz.1.290': attribute type 6 has an invalid length.
[   88.126043][    T9] tipc: Node number set to 16777216
[   88.261884][ T6769] netlink: 'syz.1.294': attribute type 2 has an invalid length.
[   88.307436][ T6774] lo: entered allmulticast mode
[   88.317236][ T6774] dvmrp8: entered allmulticast mode
[   88.343520][ T6774] lo: left allmulticast mode
[   88.421778][ T6787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.299'.
[   88.424780][ T6786] netlink: 'syz.1.300': attribute type 1 has an invalid length.
[   88.427348][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.300'.
[   88.511403][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'.
[   88.539022][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'.
[   88.589874][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'.
[   88.747192][ T6820] tipc: Enabling of bearer <dth:s> rejected, media not registered
[   88.863065][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'.
[   88.949860][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'.
[   89.097829][ T6843] xt_bpf: check failed: parse error
[   89.194957][ T6847] netlink: 312 bytes leftover after parsing attributes in process `syz.0.316'.
[   89.310059][ T6852] netlink: 32 bytes leftover after parsing attributes in process `syz.0.316'.
[   89.672664][    T9] IPVS: starting estimator thread 0...
[   89.680071][ T6877] tipc: Started in network mode
[   89.691281][ T6877] tipc: Node identity ac1414aa, cluster identity 4711
[   89.701498][ T6877] tipc: Enabled bearer <udp:s>, priority 10
[   89.727786][ T6880] syzkaller0: entered promiscuous mode
[   89.729594][ T6880] syzkaller0: entered allmulticast mode
[   89.732595][ T6880] 0: reclassify loop, rule prio 0, protocol 800
[   89.758957][ T6878] IPVS: using max 70 ests per chain, 168000 per kthread
[   89.853301][ T6887] sock: sock_timestamping_bind_phc: sock not bind to device
[   89.876991][ T6887] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[   90.115481][   T56] block nbd0: Receive control failed (result -1)
[   90.595166][ T6956] netlink: 'syz.0.347': attribute type 3 has an invalid length.
[   90.624509][ T6957] netlink: 'syz.2.345': attribute type 21 has an invalid length.
[   90.628989][ T6957] netlink: 'syz.2.345': attribute type 1 has an invalid length.
[   90.695822][ T6969] syz_tun: entered allmulticast mode
[   90.698889][ T6144] tipc: Node number set to 2886997162
[   90.754225][ T1111] wlan1: Created IBSS using preconfigured BSSID 00:00:ff:ff:00:00
[   90.756502][ T1111] wlan1: Creating new IBSS network, BSSID 00:00:ff:ff:00:00
[   90.757475][ T6967] syz_tun: left allmulticast mode
[   90.881200][ T6980] netlink: 'syz.1.354': attribute type 12 has an invalid length.
[   91.368111][ T5884] Bluetooth: hci2: command 0x0405 tx timeout
[   91.615550][ T7033] tipc: Disabling bearer <udp:syz2>
[   93.182074][ T7086] netlink: 'syz.1.384': attribute type 1 has an invalid length.
[   93.204211][ T7086] bond0: entered promiscuous mode
[   93.206386][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.218840][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.221581][ T7086] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[   93.225322][ T7086] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   93.232051][ T7086] bond0: (slave vcan1): making interface the new active one
[   93.234169][ T7086] vcan1: entered promiscuous mode
[   93.236767][ T7086] bond0: (slave vcan1): Enslaving as an active interface with an up link
[   93.261940][ T7086] __nla_validate_parse: 9 callbacks suppressed
[   93.261950][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[   93.403252][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'.
[   93.404671][ T7090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.385'.
[   93.549830][ T7099] netlink: 188 bytes leftover after parsing attributes in process `syz.2.388'.
[   93.583519][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[   93.586181][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'.
[   93.708726][ T7106] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   93.789769][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'.
[   93.796480][ T7110] ip6tnl1: entered allmulticast mode
[   93.824154][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[   94.026152][ T7120] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[   94.046241][ T7120] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.065136][ T7120] bond2: (slave geneve2): making interface the new active one
[   94.069106][ T7120] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   94.071817][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.076430][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.082189][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.087398][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.100501][ T7120] syz.2.397 (7120) used greatest stack depth: 18912 bytes left
[   94.270294][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'.
[   94.911956][ T7153] syzkaller0: entered promiscuous mode
[   94.913646][ T7153] syzkaller0: entered allmulticast mode
[   94.919352][ T7153] netlink: 72 bytes leftover after parsing attributes in process `syz.1.406'.
[   95.131306][   T33] audit: type=1800 audit(1778510635.700:2): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.409" name="blkio.bfq.time_recursive" dev="tmpfs" ino=714 res=0 errno=0
[   95.305081][ T7174] syzkaller1: entered promiscuous mode
[   95.311365][ T7174] syzkaller1: entered allmulticast mode
[   95.399409][ T7180] openvswitch: netlink: VXLAN extension 307 out of range max 1
[   95.405693][ T7180] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   95.410643][ T7180] batman_adv: batadv0: Adding interface: ip6gretap1
[   95.412617][ T7180] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.421186][ T7180] batman_adv: batadv0: Interface activated: ip6gretap1
[   95.428315][ T7180] netlink: 'syz.1.415': attribute type 1 has an invalid length.
[   95.863276][ T7188] block nbd1: Receive control failed (result -32)
[   95.866845][   T56] block nbd1: Receive control failed (result -32)
[   95.947572][ T7192] bond0: Master is either lo or non-ether device
[   96.007750][ T7194] netlink: 'syz.1.420': attribute type 1 has an invalid length.
[   96.047412][ T7194] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.050775][ T7194] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   96.343262][ T7205] netlink: 'syz.2.424': attribute type 2 has an invalid length.
[   96.560719][ T7222] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.580460][ T7222] bond3: entered promiscuous mode
[   96.582027][ T7222] bond3: entered allmulticast mode
[   96.584421][ T7222] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.588317][ T7222] team0: Port device bond3 added
[   96.631911][ T7228] netlink: 'syz.1.431': attribute type 4 has an invalid length.
[   97.181843][ T7253] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   97.225970][ T7255] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[   97.242903][ T7256] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[   97.563728][ T7264] netlink: 'syz.1.443': attribute type 8 has an invalid length.
[   97.730067][ T7272] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002
[   97.749374][ T7274] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   97.752765][ T7274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.777848][ T7277] netlink: 'syz.1.448': attribute type 13 has an invalid length.
[   97.849968][ T7282] syzkaller1: entered promiscuous mode
[   97.855579][ T7282] syzkaller1: entered allmulticast mode
[   98.350796][ T7301] __nla_validate_parse: 4 callbacks suppressed
[   98.350808][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'.
[   98.355847][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'.
[   98.652779][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[   98.665761][   T33] audit: type=1804 audit(1778510639.230:3): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.460" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=969 res=1 errno=0
[   98.675764][   T33] audit: type=1800 audit(1778510639.230:4): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.460" name="cgroup.controllers" dev="tmpfs" ino=969 res=0 errno=0
[   98.697496][   T33] audit: type=1804 audit(1778510639.240:5): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.460" name="/newroot/186/cgroup.controllers" dev="tmpfs" ino=969 res=1 errno=0
[   99.007497][ T7316] netlink: 'syz.1.463': attribute type 83 has an invalid length.
[   99.035361][ T7318] netlink: 'syz.1.464': attribute type 1 has an invalid length.
[   99.041352][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[   99.043866][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[   99.047259][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[   99.051818][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'.
[   99.107199][ T7322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.466'.
[   99.157117][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   99.162972][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   99.516088][ T7353] ieee802154 phy0 wpan0: encryption failed: -22
[   99.523210][ T7353] netlink: 'syz.1.477': attribute type 1 has an invalid length.
[   99.571422][ T7353] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   99.588387][ T7353] veth3: entered promiscuous mode
[   99.592405][ T7353] bond5: (slave veth3): Enslaving as a backup interface with a down link
[   99.597890][ T7353] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.601778][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   99.728574][   T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  100.076103][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.076502][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.220202][ T7398] netlink: 'syz.1.494': attribute type 12 has an invalid length.
[  100.228374][ T7398] netlink: 'syz.1.494': attribute type 29 has an invalid length.
[  100.340597][ T7408] bridge0: port 3(vlan3) entered blocking state
[  100.346648][ T7408] bridge0: port 3(vlan3) entered disabled state
[  100.349498][ T7408] vlan3: entered allmulticast mode
[  100.351392][ T7408] bridge0: entered allmulticast mode
[  100.357516][ T7408] vlan3: left allmulticast mode
[  100.378299][ T7408] bridge0: left allmulticast mode
[  100.401117][ T7412] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  100.516232][ T7416] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  100.555498][ T7416] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.577547][ T7416] bond6: (slave geneve2): making interface the new active one
[  100.581470][ T7416] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  100.591927][ T7416] netlink: 'syz.1.499': attribute type 3 has an invalid length.
[  100.594162][ T7416] netlink: 'syz.1.499': attribute type 3 has an invalid length.
[  100.755762][ T7428] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  100.766030][ T7428] bond7: (slave lo): Enslaving as an active interface with an up link
[  100.769624][ T7428] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  101.542329][ T7473] xt_l2tp: missing protocol rule (udp|l2tpip)
[  101.879466][ T7492] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  102.391207][ T7499] ipip0: entered promiscuous mode
[  102.545186][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.643861][ T7509] bond3 (unregistering): Released all slaves
[  103.141190][ T7527] veth1_to_team: entered promiscuous mode
[  103.145616][ T7527] dummy0: entered promiscuous mode
[  103.160042][ T7527] hsr1: entered promiscuous mode
[  103.178443][ T7527] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  104.072032][ T7538] __nla_validate_parse: 17 callbacks suppressed
[  104.072044][ T7538] netlink: 140 bytes leftover after parsing attributes in process `syz.1.531'.
[  104.082904][ T7538] netlink: 56 bytes leftover after parsing attributes in process `syz.1.531'.
[  104.426171][ T7562] netlink: 'syz.2.539': attribute type 2 has an invalid length.
[  104.586547][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'.
[  104.595145][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.543'.
[  104.641727][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'.
[  105.626022][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[  105.638084][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.551'.
[  105.701195][ T7602] bridge0: port 3(vlan2) entered blocking state
[  105.703341][ T7602] bridge0: port 3(vlan2) entered disabled state
[  105.705431][ T7602] vlan2: entered allmulticast mode
[  105.707262][ T7602] bridge0: entered allmulticast mode
[  105.710684][ T7602] vlan2: left allmulticast mode
[  105.712314][ T7602] bridge0: left allmulticast mode
[  105.820443][ T7604] netlink: 'syz.1.553': attribute type 11 has an invalid length.
[  105.986219][ T7610] netlink: 27 bytes leftover after parsing attributes in process `syz.1.556'.
[  106.079786][ T7616] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.114426][ T7621] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  106.232533][ T7623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'.
[  106.287725][ T5647] nci: nci_ntf_packet: unknown ntf opcode 0x132
[  106.344636][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'.
[  106.869863][ T5001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.873720][ T5001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.876410][ T5001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.880448][ T5001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.883599][ T5001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.212590][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.214862][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.217073][ T7635] bridge_slave_0: entered allmulticast mode
[  107.220056][ T7635] bridge_slave_0: entered promiscuous mode
[  107.223528][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.225742][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.227959][ T7635] bridge_slave_1: entered allmulticast mode
[  107.230886][ T7635] bridge_slave_1: entered promiscuous mode
[  107.253613][ T7635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.258628][ T7635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.277482][ T7635] team0: Port device team_slave_0 added
[  107.280969][ T7635] team0: Port device team_slave_1 added
[  107.300519][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.302574][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.311007][ T7635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.315107][ T7635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.317257][ T7635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.325168][ T7635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.355125][ T7635] hsr_slave_0: entered promiscuous mode
[  107.357590][ T7635] hsr_slave_1: entered promiscuous mode
[  107.359925][ T7635] debugfs: 'hsr0' already exists in 'hsr'
[  107.361574][ T7635] Cannot create hsr debugfs directory
[  108.978075][ T5001] Bluetooth: hci3: command tx timeout
[  109.225301][ T7623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.233213][ T7635] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.263763][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  109.271221][ T7635] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.280934][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  109.286594][ T7635] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.296203][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  109.306368][ T7635] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.313364][ T7635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  109.398091][ T7665] vxcan2: entered allmulticast mode
[  109.448739][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  109.458823][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  109.465129][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  109.467752][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  109.471643][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  109.540444][ T7635] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.553761][ T7635] 8021q: adding VLAN 0 to HW filter on device team0
[  109.560255][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.562765][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.570366][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.572692][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.894994][ T7635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.944663][ T7635] veth0_vlan: entered promiscuous mode
[  109.954237][ T7635] veth1_vlan: entered promiscuous mode
[  109.972686][ T7635] veth0_macvtap: entered promiscuous mode
[  109.977541][ T7635] veth1_macvtap: entered promiscuous mode
[  109.989628][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.997121][ T7635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.007532][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.014136][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.024670][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.033867][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.080353][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.084078][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.121399][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.124799][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.240419][ T7688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.561'.
[  110.454028][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'.
[  110.456617][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'.
[  110.533786][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[  110.553537][ T7711] netlink: 'syz.2.576': attribute type 9 has an invalid length.
[  110.620558][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'.
[  110.717815][ T7727] netlink: 'syz.1.581': attribute type 1 has an invalid length.
[  111.050219][ T5001] Bluetooth: hci3: command tx timeout
[  111.500169][ T7754] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  112.101618][ T7769] netlink: 'syz.2.592': attribute type 21 has an invalid length.
[  112.110899][ T7769] netlink: 'syz.2.592': attribute type 22 has an invalid length.
[  112.118930][ T7769] netlink: 'syz.2.592': attribute type 23 has an invalid length.
[  112.195172][ T7772] bond8: option mode: invalid value (254)
[  112.200615][ T7772] bond8 (unregistering): Released all slaves
[  112.386967][ T7789] xt_hashlimit: max too large, truncated to 1048576
[  112.391080][ T7789] xt_ecn: cannot match TCP bits for non-tcp packets
[  112.423741][ T7786] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.432637][ T7786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  112.448654][ T7776] netlink: 'syz.2.595': attribute type 1 has an invalid length.
[  112.560621][ T7798] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[  112.598097][ T7798] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.611910][ T7798] vlan0: entered promiscuous mode
[  112.623723][ T7798] bond3: entered promiscuous mode
[  112.629195][ T7798] vlan0: entered allmulticast mode
[  112.640823][ T7798] bond3: entered allmulticast mode
[  112.684455][ T7798] bond3: (slave bridge3): making interface the new active one
[  112.688084][ T7798] bridge3: entered promiscuous mode
[  112.689886][ T7798] bridge3: entered allmulticast mode
[  112.693978][ T7798] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  112.705387][ T7798] netlink: 'syz.2.602': attribute type 3 has an invalid length.
[  113.108105][ T7836] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  113.128334][ T5001] Bluetooth: hci3: command tx timeout
[  114.154830][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.191868][ T7874] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  114.323335][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.416955][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.462316][ T7885] __nla_validate_parse: 10 callbacks suppressed
[  114.462332][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.631'.
[  114.681707][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.987661][   T13] bridge_slave_1: left allmulticast mode
[  114.991009][   T13] bridge_slave_1: left promiscuous mode
[  114.999599][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.010691][   T13] bridge_slave_0: left allmulticast mode
[  115.012956][   T13] bridge_slave_0: left promiscuous mode
[  115.016290][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.208304][ T5001] Bluetooth: hci3: command tx timeout
[  115.314278][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.320972][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.324654][   T13] bond0 (unregistering): Released all slaves
[  115.330862][   T13] bond1 (unregistering): Released all slaves
[  115.341101][   T13] bond2 (unregistering): Released all slaves
[  115.350164][   T13] bond3 (unregistering): Released all slaves
[  115.378183][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.413147][ T7945] bridge_slave_0 (unregistering): left allmulticast mode
[  115.423260][ T7945] bridge_slave_0 (unregistering): left promiscuous mode
[  115.435511][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.521863][   T13] tipc: Left network mode
[  115.883845][ T7982] validate_nla: 1 callbacks suppressed
[  115.883856][ T7982] netlink: 'syz.3.652': attribute type 12 has an invalid length.
[  116.008647][ T7995] netlink: 72 bytes leftover after parsing attributes in process `syz.3.654'.
[  116.171404][ T8007] tipc: Started in network mode
[  116.173452][ T8007] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  116.175873][ T8007] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  116.238650][ T8015] sctp: [Deprecated]: syz.3.659 (pid 8015) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.238650][ T8015] Use struct sctp_sack_info instead
[  116.259707][   T13] hsr_slave_0: left promiscuous mode
[  116.278119][   T13] hsr_slave_1: left promiscuous mode
[  116.281886][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.284125][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.286901][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.291583][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.316110][   T13] veth1_macvtap: left promiscuous mode
[  116.318379][   T13] veth0_macvtap: left promiscuous mode
[  116.320113][   T13] veth1_vlan: left promiscuous mode
[  116.324519][   T13] veth0_vlan: left promiscuous mode
[  116.406905][ T8033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.658'.
[  116.431924][   T13] pim6reg (unregistering): left allmulticast mode
[  116.630072][   T13] team0 (unregistering): Port device team_slave_1 removed
[  116.637726][   T13] team0 (unregistering): Port device team_slave_0 removed
[  116.724388][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.729498][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.731982][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.734466][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.737003][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.746403][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.753925][ T8021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.660'.
[  116.794843][ T5647] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.807054][ T5647] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.851039][ T5647] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.862093][ T5647] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.911390][ T8046] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  117.127878][   T13] IPVS: stop unused estimator thread 0...
[  117.292939][ T5346] 8021q: adding VLAN 0 to HW filter on device eth1
[  117.301942][ T6147] tipc: Node number set to 10463914
[  117.529115][ T8089] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  117.662771][ T5346] 8021q: adding VLAN 0 to HW filter on device eth2
[  118.061065][ T8122] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  118.087380][ T8122] ipt_ECN: cannot use operation on non-tcp rule
[  118.247860][ T5346] 8021q: adding VLAN 0 to HW filter on device eth3
[  118.562316][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.569387][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.585019][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.594235][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.749942][ T5346] 8021q: adding VLAN 0 to HW filter on device eth4
[  119.320746][ T8173] netlink: 'syz.1.690': attribute type 9 has an invalid length.
[  119.324503][ T8173] netlink: 'syz.1.690': attribute type 7 has an invalid length.
[  119.327526][ T8173] netlink: 'syz.1.690': attribute type 8 has an invalid length.
[  119.333096][ T8173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  119.505385][ T8194] __nla_validate_parse: 160 callbacks suppressed
[  119.505395][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[  119.594887][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'.
[  120.493568][ T8221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  121.333092][ T8238] netlink: 'syz.3.706': attribute type 13 has an invalid length.
[  121.642566][ T8259] syzkaller0: entered promiscuous mode
[  121.644604][ T8259] syzkaller0: entered allmulticast mode
[  121.876346][ T8270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.716'.
[  121.886783][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'.
[  121.930936][ T8272] netlink: 208 bytes leftover after parsing attributes in process `syz.2.717'.
[  121.934359][ T8272] netlink: 208 bytes leftover after parsing attributes in process `syz.2.717'.
[  121.942942][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'.
[  121.954289][   T33] audit: type=1804 audit(1778510662.520:6): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.717" name="/newroot/245/cgroup.controllers" dev="tmpfs" ino=1270 res=1 errno=0
[  121.961982][   T33] audit: type=1800 audit(1778510662.530:7): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.717" name="cgroup.controllers" dev="tmpfs" ino=1270 res=0 errno=0
[  122.013360][ T8278] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  122.034805][ T8278] bond4: entered promiscuous mode
[  122.036761][ T8278] 8021q: adding VLAN 0 to HW filter on device bond4
[  122.043223][ T8278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.720'.
[  122.072857][ T8278] bond4: (slave bridge4): making interface the new active one
[  122.075276][ T8278] bridge4: entered promiscuous mode
[  122.078661][ T8278] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  122.133925][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'.
[  122.137735][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'.
[  122.297032][ T8294] syzkaller0: entered promiscuous mode
[  122.302243][ T8294] syzkaller0: entered allmulticast mode
[  122.523315][ T8317] sctp: [Deprecated]: syz.2.730 (pid 8317) Use of int in max_burst socket option.
[  122.523315][ T8317] Use struct sctp_assoc_value instead
[  123.067313][ T8346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.330768][ T8365] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  123.662006][ T8387] syzkaller1: entered promiscuous mode
[  123.664222][ T8387] syzkaller1: entered allmulticast mode
[  123.821254][ T8404] netlink: 'syz.1.757': attribute type 1 has an invalid length.
[  124.279372][ T8426] tipc: Resetting bearer <eth:macvlan1>
[  124.280849][ T8427] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  124.285708][ T8427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.299692][ T8426] tipc: Disabling bearer <eth:macvlan1>
[  124.423120][ T8426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.490959][ T8426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.533802][ T8426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.566138][ T8426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.623401][ T5647] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.636931][ T5471] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.651955][ T5471] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.664536][ T5471] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.750471][ T8441] __nla_validate_parse: 7 callbacks suppressed
[  124.750486][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'.
[  124.827728][ T8445] xt_hashlimit: overflow, rate too high: 0
[  124.832871][ T8450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'.
[  124.842810][ T8450] tipc: Failed to remove unknown binding: 66,1,1/0:185471252/185471254
[  124.854543][ T8450] tipc: Failed to remove unknown binding: 66,1,1/0:185471252/185471254
[  124.859368][ T8450] tipc: Failed to remove unknown binding: 66,1,1/0:185471252/185471254
[  125.026299][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.775'.
[  125.092479][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.777'.
[  125.272175][ T8484] netlink: 52 bytes leftover after parsing attributes in process `syz.1.782'.
[  125.275230][ T8484] netlink: 'syz.1.782': attribute type 1 has an invalid length.
[  125.277565][ T8484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.782'.
[  125.468639][ T8491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'.
[  125.479799][ T8491] ipvlan3: entered allmulticast mode
[  125.481788][ T8491] gretap0: entered allmulticast mode
[  125.820512][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'.
[  125.823176][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.789'.
[  125.947639][ T8513] netlink: 76 bytes leftover after parsing attributes in process `syz.2.791'.
[  126.133477][ T8524] 8021q: VLANs not supported on vxcan1
[  126.344871][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.349747][ T8539] 8021q: adding VLAN 0 to HW filter on device team0
[  126.361159][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.386954][ T8539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.394373][ T8539] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  126.397206][ T8539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  126.401044][ T8539] 8021q: adding VLAN 0 to HW filter on device hsr0
[  126.406382][ T8539] veth1_macvtap: left promiscuous mode
[  126.410008][ T8539] veth0_macvtap: left promiscuous mode
[  126.412235][ T8539] veth0_macvtap: entered promiscuous mode
[  126.414625][ T8539] veth1_macvtap: entered promiscuous mode
[  126.421209][ T8539] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  126.424594][ T8539] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  126.427272][ T8539] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  126.434794][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv1
[  126.437405][ T8539] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.443758][ T8539] ip6tnl1: left allmulticast mode
[  126.448681][ T8539] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.456001][ T8539] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  126.459694][ T8539] hsr1: left promiscuous mode
[  126.465710][ T8539] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.471864][ T8539] vlan0: left promiscuous mode
[  126.473484][ T8539] bond3: left promiscuous mode
[  126.475128][ T8539] bridge3: left promiscuous mode
[  126.477060][ T8539] vlan0: left allmulticast mode
[  126.479652][ T8539] bond3: left allmulticast mode
[  126.481436][ T8539] bridge3: left allmulticast mode
[  126.487185][ T8539] bond4: left promiscuous mode
[  126.492969][ T8539] bridge4: left promiscuous mode
[  126.516831][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.519174][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.524445][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.527108][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.576937][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.586287][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.596035][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.612476][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.663516][ T8555] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  126.723953][ T8555] bond5: entered promiscuous mode
[  126.726175][ T8555] 8021q: adding VLAN 0 to HW filter on device bond5
[  126.758683][ T8559] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002
[  127.031126][ T8569] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  127.036625][ T8569] bond8 (unregistering): Released all slaves
[  127.063579][ T8572] ip6gre2: entered promiscuous mode
[  127.065254][ T8572] ip6gre2: entered allmulticast mode
[  127.075455][ T8572] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  127.081726][ T8572] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.485241][ T8585] dvmrp0: entered allmulticast mode
[  128.074821][ T8616] openvswitch: netlink: Flow actions attr not present in new flow.
[  128.520595][ T8630] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  128.571877][ T8630] bond8 (unregistering): Released all slaves
[  130.364592][ T8689] __nla_validate_parse: 7 callbacks suppressed
[  130.364668][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'.
[  130.505315][ T8699] xt_TCPMSS: Only works on TCP SYN packets
[  130.698371][ T8711] syzkaller0: entered promiscuous mode
[  130.700004][ T8711] syzkaller0: entered allmulticast mode
[  130.754634][ T8709] No such timeout policy "syz1"
[  130.807550][ T8714] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.846'.
[  130.866184][ T8719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.846'.
[  130.918043][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.846'.
[  131.567435][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.847'.
[  131.705602][ T8731] gtp0: entered promiscuous mode
[  131.707180][ T8731] gtp0: entered allmulticast mode
[  131.805334][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'.
[  131.825593][ T8743] netlink: 'syz.3.856': attribute type 21 has an invalid length.
[  131.830913][ T8743] netlink: 128 bytes leftover after parsing attributes in process `syz.3.856'.
[  131.835753][ T8743] netlink: 3 bytes leftover after parsing attributes in process `syz.3.856'.
[  131.948703][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'.
[  132.050966][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'.
[  132.177732][ T8769] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[  132.259299][ T8774] netlink: 'syz.3.863': attribute type 1 has an invalid length.
[  132.403371][ T8784] ieee802154 phy0 wpan0: encryption failed: -22
[  132.405805][ T8784] ieee802154 phy0 wpan0: encryption failed: -22
[  132.438065][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.442309][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.444505][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.446725][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.449347][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.451384][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.453390][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.455395][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.459008][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.461063][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.463044][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.465086][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.467182][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.469915][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.471964][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.473985][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.476005][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.478033][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.480133][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.482172][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.484181][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.486117][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.488280][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.490315][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.492293][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.494302][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.496300][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.498340][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.500294][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.503283][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.505255][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.507265][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.509327][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.511782][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.513993][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.516058][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.518116][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.520185][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.522752][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.524617][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.526598][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.528942][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.531462][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.533640][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.535763][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.537718][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.539908][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.541821][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.544030][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.545974][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.548148][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.551168][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.553164][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.555118][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.557486][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.559736][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.562069][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.564014][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.566112][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.568298][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.570794][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.573102][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.575458][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.586998][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.590589][ T8786] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001
[  132.617025][ T8789] netlink: 'syz.1.868': attribute type 10 has an invalid length.
[  132.860463][ T8809] netlink: 'syz.2.875': attribute type 15 has an invalid length.
[  132.926093][ T8813] tap0: tun_chr_ioctl cmd 1074025677
[  132.927879][ T8813] tap0: linktype set to 773
[  133.563621][ T8864] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  133.588421][ T8864] bond8: (slave bridge2): making interface the new active one
[  133.591387][ T8864] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  133.602085][ T8864] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  133.608986][ T8864] macvlan3: entered promiscuous mode
[  133.610707][ T8864] macvlan3: entered allmulticast mode
[  133.613261][ T8864] bond8: entered promiscuous mode
[  133.615216][ T8864] bridge2: entered promiscuous mode
[  133.617655][ T8864] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  133.621667][ T8864] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  133.627093][ T8864] bond8: left promiscuous mode
[  133.630061][ T8864] bridge2: left promiscuous mode
[  133.664839][ T8864] syzkaller0: entered promiscuous mode
[  133.666861][ T8864] syzkaller0: entered allmulticast mode
[  133.921651][ T8881] netlink: 'syz.1.891': attribute type 8 has an invalid length.
[  134.067395][ T8885] syzkaller0: entered promiscuous mode
[  134.072808][ T8885] syzkaller0: entered allmulticast mode
[  134.332094][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.572643][ T8929] netlink: 'syz.3.903': attribute type 1 has an invalid length.
[  134.674584][ T8943] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  135.239369][ T8973] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  135.262678][ T8980] syzkaller0: entered promiscuous mode
[  135.266472][ T8980] syzkaller0: entered allmulticast mode
[  135.330225][ T8975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.359758][ T8974] tipc: Resetting bearer <eth:syzkaller0>
[  135.374228][ T8974] tipc: Disabling bearer <eth:syzkaller0>
[  135.380768][ T8985] __nla_validate_parse: 24 callbacks suppressed
[  135.380778][ T8985] netlink: 32 bytes leftover after parsing attributes in process `syz.3.917'.
[  135.456830][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.919'.
[  135.480005][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'.
[  135.535914][ T8989] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  135.545955][ T8989] bond6: (slave lo): Enslaving as an active interface with an up link
[  135.553025][ T8989] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  135.773410][ T7990] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  136.233602][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'.
[  136.352583][ T9041] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  136.366445][ T9041] openvswitch: netlink: Unknown key attributes 2
[  136.366579][ T9042] openvswitch: netlink: Unknown key attributes 2
[  136.664423][ T9049] sctp: [Deprecated]: syz.3.936 (pid 9049) Use of int in max_burst socket option.
[  136.664423][ T9049] Use struct sctp_assoc_value instead
[  136.726184][ T9060] netlink: 'syz.1.939': attribute type 39 has an invalid length.
[  136.777884][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.940'.
[  136.784733][ T9060] hsr_slave_0 (unregistering): left promiscuous mode
[  136.936277][ T6139] IPVS: starting estimator thread 0...
[  136.953194][ T9071] tipc: Enabled bearer <udp:s>, priority 10
[  136.986743][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'.
[  137.030773][ T9073] IPVS: using max 70 ests per chain, 168000 per kthread
[  137.084078][ T9085] netlink: 'syz.3.946': attribute type 3 has an invalid length.
[  137.510872][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'.
[  137.659801][   T10] bridge0: entered promiscuous mode
[  137.724032][ T9148] netlink: 44 bytes leftover after parsing attributes in process `syz.1.960'.
[  137.846414][ T9154] netlink: 64 bytes leftover after parsing attributes in process `syz.2.961'.
[  137.852881][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  137.861770][ T9154] syzkaller1: entered promiscuous mode
[  137.866342][ T9154] syzkaller1: entered allmulticast mode
[  138.395372][ T9195] netlink: 'syz.3.974': attribute type 1 has an invalid length.
[  138.489380][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  138.524592][ T9206] bond7: option arp_interval: invalid value (18446744073709551615)
[  138.528382][ T9206] bond7: option arp_interval: allowed values 0 - 2147483647
[  138.532939][ T9206] bond7 (unregistering): Released all slaves
[  138.543554][ T9209] tipc: Enabled bearer <eth:vcan0>, priority 10
[  138.567152][ T9212] bond7: option arp_interval: invalid value (18446744073709551615)
[  138.572225][ T9212] bond7: option arp_interval: allowed values 0 - 2147483647
[  138.580946][ T9212] bond7 (unregistering): Released all slaves
[  138.726420][ T9226] netlink: 'syz.2.985': attribute type 1 has an invalid length.
[  139.359946][ T9237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  139.580904][ T9243] bridge4: entered promiscuous mode
[  139.582532][ T9243] bridge4: entered allmulticast mode
[  139.586419][ T9243] team0: Port device bridge4 added
[  139.646771][ T9243] bridge5: entered promiscuous mode
[  139.648376][ T9243] bridge5: entered allmulticast mode
[  139.651575][ T9243] team0: Port device bridge5 added
[  139.655909][ T9243] bridge0: port 3(team0) entered blocking state
[  139.662747][ T9243] bridge0: port 3(team0) entered disabled state
[  139.664875][ T9243] team0: entered allmulticast mode
[  139.669862][ T9243] team_slave_0: entered allmulticast mode
[  139.674846][ T9243] team_slave_1: entered allmulticast mode
[  139.687146][ T9243] team0: entered promiscuous mode
[  139.690592][ T9243] team_slave_0: entered promiscuous mode
[  139.692300][ T9243] team_slave_1: entered promiscuous mode
[  139.694596][ T9243] bridge0: port 3(team0) entered blocking state
[  139.697043][ T9243] bridge0: port 3(team0) entered forwarding state
[  139.817351][ T9265] syzkaller0: entered promiscuous mode
[  139.820368][ T9265] syzkaller0: entered allmulticast mode
[  140.020943][ T9283] veth4: entered allmulticast mode
[  140.124336][ T9290] netlink: 'syz.1.1005': attribute type 3 has an invalid length.
[  140.455866][ T9304] __nla_validate_parse: 42 callbacks suppressed
[  140.455883][ T9304] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1011'.
[  140.677826][ T9322] IPVS: length: 35 != 24
[  140.771859][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'.
[  140.774894][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1019'.
[  140.898364][ T7990] bond5: (slave ip6gretap2): link status up again after 0 ms
[  140.918098][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.038038][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.148114][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.172239][ T9352] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1027'.
[  141.268113][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.371152][ T9367] netlink: 'syz.1.1034': attribute type 3 has an invalid length.
[  141.419160][ T5471] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.446261][ T9367] syzkaller0: entered promiscuous mode
[  141.451604][ T9367] syzkaller0: entered allmulticast mode
[  141.538367][ T5471] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.648596][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.743200][ T9401] IPv6: sit2: Disabled Multicast RS
[  141.753427][ T9401] syzkaller1: entered promiscuous mode
[  141.756217][ T9401] syzkaller1: entered allmulticast mode
[  141.800148][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  141.856198][ T9409] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1048'.
[  141.923483][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  141.934374][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  142.062381][ T9416] nbd3: detected capacity change from 0 to 63
[  142.065515][ T9419] block nbd3: NBD_DISCONNECT
[  142.074949][ T9419] block nbd3: Disconnected due to user request.
[  142.101078][ T9419] block nbd3: shutting down sockets
[  142.105525][ T6436] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.109287][ T6436] Buffer I/O error on dev nbd3, logical block 0, async page read
[  142.115046][ T6436] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.118681][ T6436] Buffer I/O error on dev nbd3, logical block 1, async page read
[  142.121751][ T6436] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.125182][ T6436] Buffer I/O error on dev nbd3, logical block 2, async page read
[  142.134155][   T52] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.140422][   T52] Buffer I/O error on dev nbd3, logical block 3, async page read
[  142.143867][ T6436] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.149811][ T6436] Buffer I/O error on dev nbd3, logical block 0, async page read
[  142.154357][ T6436] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.160076][ T6436] Buffer I/O error on dev nbd3, logical block 1, async page read
[  142.161684][ T9422] 
[  142.163593][ T9422] ======================================================
[  142.166021][ T9422] WARNING: possible circular locking dependency detected
[  142.168466][ T9422] syzkaller #0 Not tainted
[  142.170167][ T9422] ------------------------------------------------------
[  142.172526][ T9422] syz.2.1053/9422 is trying to acquire lock:
[  142.174583][ T9422] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x760
[  142.177660][ T9422] 
[  142.177660][ T9422] but task is already holding lock:
[  142.180197][ T9422] ffff888112906e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15d/0x2430
[  142.183420][ T9422] 
[  142.183420][ T9422] which lock already depends on the new lock.
[  142.183420][ T9422] 
[  142.186949][ T9422] 
[  142.186949][ T9422] the existing dependency chain (in reverse order) is:
[  142.190011][ T9422] 
[  142.190011][ T9422] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  142.193041][ T9422]        lock_sock_nested+0x41/0x100
[  142.194943][ T9422]        inet_shutdown+0x6a/0x390
[  142.196780][ T9422]        nbd_mark_nsock_dead+0x2e9/0x560
[  142.198818][ T9422]        recv_work+0x1c2e/0x1d40
[  142.200635][ T9422]        process_scheduled_works+0xb5d/0x1860
[  142.202822][ T9422]        worker_thread+0xa53/0xfc0
[  142.204668][ T9422]        kthread+0x388/0x470
[  142.206353][ T9422]        ret_from_fork+0x514/0xb70
[  142.207735][ T9422]        ret_from_fork_asm+0x1a/0x30
[  142.209301][ T9422] 
[  142.209301][ T9422] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  142.211705][ T9422]        __mutex_lock+0x1a3/0x1550
[  142.213374][ T9422]        nbd_queue_rq+0x37b/0x1100
[  142.214953][ T9422]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  142.216923][ T9422]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  142.219397][ T9422]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  142.221698][ T9422]        blk_mq_run_hw_queue+0x348/0x4f0
[  142.223669][ T9422]        blk_mq_dispatch_list+0xd16/0xe10
[  142.225578][ T9422]        blk_mq_flush_plug_list+0x48d/0x570
[  142.227684][ T9422]        __blk_flush_plug+0x3ed/0x4d0
[  142.229725][ T9422]        __submit_bio+0x28d/0x580
[  142.231535][ T9422]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  142.233753][ T9422]        block_read_full_folio+0x599/0x830
[  142.235784][ T9422]        filemap_read_folio+0x137/0x3b0
[  142.237686][ T9422]        do_read_cache_folio+0x358/0x590
[  142.239633][ T9422]        read_part_sector+0xb6/0x2b0
[  142.241430][ T9422]        adfspart_check_ICS+0xb1/0x960
[  142.243326][ T9422]        bdev_disk_changed+0x817/0x1770
[  142.245197][ T9422]        blkdev_get_whole+0x380/0x510
[  142.247041][ T9422]        bdev_open+0x31e/0xd30
[  142.248696][ T9422]        blkdev_open+0x470/0x610
[  142.250473][ T9422]        do_dentry_open+0x785/0x14e0
[  142.252276][ T9422]        vfs_open+0x3b/0x340
[  142.253897][ T9422]        path_openat+0x2e08/0x3860
[  142.255686][ T9422]        do_file_open+0x23e/0x4a0
[  142.257349][ T9422]        do_sys_openat2+0x113/0x200
[  142.259163][ T9422]        __x64_sys_openat+0x138/0x170
[  142.260957][ T9422]        do_syscall_64+0x15f/0xf80
[  142.262742][ T9422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.265037][ T9422] 
[  142.265037][ T9422] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  142.267501][ T9422]        __mutex_lock+0x1a3/0x1550
[  142.269305][ T9422]        nbd_queue_rq+0xc6/0x1100
[  142.271118][ T9422]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  142.273292][ T9422]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  142.275746][ T9422]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  142.278034][ T9422]        blk_mq_run_hw_queue+0x348/0x4f0
[  142.279900][ T9422]        blk_mq_dispatch_list+0xd16/0xe10
[  142.281894][ T9422]        blk_mq_flush_plug_list+0x48d/0x570
[  142.284006][ T9422]        __blk_flush_plug+0x3ed/0x4d0
[  142.285851][ T9422]        __submit_bio+0x28d/0x580
[  142.287582][ T9422]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  142.289704][ T9422]        block_read_full_folio+0x599/0x830
[  142.291721][ T9422]        filemap_read_folio+0x137/0x3b0
[  142.293682][ T9422]        do_read_cache_folio+0x358/0x590
[  142.295786][ T9422]        read_part_sector+0xb6/0x2b0
[  142.297627][ T9422]        adfspart_check_ICS+0xb1/0x960
[  142.299533][ T9422]        bdev_disk_changed+0x817/0x1770
[  142.301366][ T9422]        blkdev_get_whole+0x380/0x510
[  142.303306][ T9422]        bdev_open+0x31e/0xd30
[  142.305003][ T9422]        blkdev_open+0x470/0x610
[  142.306664][ T9422]        do_dentry_open+0x785/0x14e0
[  142.308540][ T9422]        vfs_open+0x3b/0x340
[  142.310422][ T9422]        path_openat+0x2e08/0x3860
[  142.312213][ T9422]        do_file_open+0x23e/0x4a0
[  142.314011][ T9422]        do_sys_openat2+0x113/0x200
[  142.316018][ T9422]        __x64_sys_openat+0x138/0x170
[  142.317878][ T9422]        do_syscall_64+0x15f/0xf80
[  142.319733][ T9422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.321958][ T9422] 
[  142.321958][ T9422] -> #3 (set->srcu){.+.+}-{0:0}:
[  142.324442][ T9422]        __synchronize_srcu+0xca/0x300
[  142.326610][ T9422]        elevator_switch+0x1e8/0x7a0
[  142.328571][ T9422]        elevator_change+0x2cc/0x450
[  142.330597][ T9422]        elevator_set_default+0x36c/0x430
[  142.332686][ T9422]        blk_register_queue+0x3e9/0x4e0
[  142.334568][ T9422]        __add_disk+0x677/0xd50
[  142.336215][ T9422]        add_disk_fwnode+0xfb/0x480
[  142.338023][ T9422]        nbd_dev_add+0x72c/0xb50
[  142.339619][ T9422]        nbd_init+0x168/0x1f0
[  142.341133][ T9422]        do_one_initcall+0x250/0x870
[  142.342860][ T9422]        do_initcall_level+0x104/0x190
[  142.344590][ T9422]        do_initcalls+0x59/0xa0
[  142.346027][ T9422]        kernel_init_freeable+0x2a6/0x3e0
[  142.347601][ T9422]        kernel_init+0x1d/0x1d0
[  142.348957][ T9422]        ret_from_fork+0x514/0xb70
[  142.350387][ T9422]        ret_from_fork_asm+0x1a/0x30
[  142.351860][ T9422] 
[  142.351860][ T9422] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  142.354041][ T9422]        __mutex_lock+0x1a3/0x1550
[  142.355766][ T9422]        elevator_change+0x1b3/0x450
[  142.357253][ T9422]        elevator_set_none+0xb5/0x140
[  142.358745][ T9422]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  142.360529][ T9422]        nbd_start_device+0x17f/0xb10
[  142.362116][ T9422]        nbd_genl_connect+0x165b/0x1cf0
[  142.364004][ T9422]        genl_family_rcv_msg_doit+0x22a/0x330
[  142.366052][ T9422]        genl_rcv_msg+0x61c/0x7a0
[  142.367512][ T9422]        netlink_rcv_skb+0x232/0x4b0
[  142.368932][ T9422]        genl_rcv+0x28/0x40
[  142.370214][ T9422]        netlink_unicast+0x75c/0x8e0
[  142.371999][ T9422]        netlink_sendmsg+0x813/0xb40
[  142.373446][ T9422]        ____sys_sendmsg+0x972/0x9f0
[  142.375137][ T9422]        ___sys_sendmsg+0x2a5/0x360
[  142.376838][ T9422]        __x64_sys_sendmsg+0x1bd/0x2a0
[  142.378542][ T9422]        do_syscall_64+0x15f/0xf80
[  142.379936][ T9422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.381672][ T9422] 
[  142.381672][ T9422] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  142.384268][ T9422]        blk_alloc_queue+0x546/0x680
[  142.385681][ T9422]        __blk_mq_alloc_disk+0x197/0x390
[  142.387191][ T9422]        nbd_dev_add+0x499/0xb50
[  142.388501][ T9422]        nbd_init+0x168/0x1f0
[  142.389814][ T9422]        do_one_initcall+0x250/0x870
[  142.391241][ T9422]        do_initcall_level+0x104/0x190
[  142.392738][ T9422]        do_initcalls+0x59/0xa0
[  142.394046][ T9422]        kernel_init_freeable+0x2a6/0x3e0
[  142.395533][ T9422]        kernel_init+0x1d/0x1d0
[  142.396866][ T9422]        ret_from_fork+0x514/0xb70
[  142.398279][ T9422]        ret_from_fork_asm+0x1a/0x30
[  142.399894][ T9422] 
[  142.399894][ T9422] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  142.402178][ T9422]        __lock_acquire+0x15a5/0x2cf0
[  142.403731][ T9422]        lock_acquire+0x106/0x350
[  142.405234][ T9422]        fs_reclaim_acquire+0x71/0x100
[  142.406721][ T9422]        __kmalloc_noprof+0x9d/0x760
[  142.408283][ T9422]        tls_get_rec+0xbf/0x670
[  142.409626][ T9422]        tls_sw_sendmsg+0x4d7/0x2430
[  142.411220][ T9422]        __sys_sendto+0x4a3/0x710
[  142.412838][ T9422]        __x64_sys_sendto+0xde/0x100
[  142.414350][ T9422]        do_syscall_64+0x15f/0xf80
[  142.415899][ T9422]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.417730][ T9422] 
[  142.417730][ T9422] other info that might help us debug this:
[  142.417730][ T9422] 
[  142.420815][ T9422] Chain exists of:
[  142.420815][ T9422]   fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET6
[  142.420815][ T9422] 
[  142.424225][ T9422]  Possible unsafe locking scenario:
[  142.424225][ T9422] 
[  142.426733][ T9422]        CPU0                    CPU1
[  142.428579][ T9422]        ----                    ----
[  142.430326][ T9422]   lock(sk_lock-AF_INET6);
[  142.431616][ T9422]                                lock(&nsock->tx_lock);
[  142.433561][ T9422]                                lock(sk_lock-AF_INET6);
[  142.435829][ T9422]   lock(fs_reclaim);
[  142.437110][ T9422] 
[  142.437110][ T9422]  *** DEADLOCK ***
[  142.437110][ T9422] 
[  142.439637][ T9422] 2 locks held by syz.2.1053/9422:
[  142.441190][ T9422]  #0: ffff8881129738e8 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x130/0x2430
[  142.444076][ T9422]  #1: ffff888112906e60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x15d/0x2430
[  142.446862][ T9422] 
[  142.446862][ T9422] stack backtrace:
[  142.448785][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.2.1053 Not tainted syzkaller #0 PREEMPT(full) 
[  142.448796][ T9422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.448802][ T9422] Call Trace:
[  142.448807][ T9422]  <TASK>
[  142.448814][ T9422]  dump_stack_lvl+0xe8/0x150
[  142.448827][ T9422]  print_circular_bug+0x2e1/0x300
[  142.448839][ T9422]  check_noncircular+0x12e/0x150
[  142.448849][ T9422]  __lock_acquire+0x15a5/0x2cf0
[  142.448859][ T9422]  ? __lock_acquire+0x6b5/0x2cf0
[  142.448868][ T9422]  ? __kmalloc_noprof+0x9d/0x760
[  142.448878][ T9422]  lock_acquire+0x106/0x350
[  142.448885][ T9422]  ? __kmalloc_noprof+0x9d/0x760
[  142.448897][ T9422]  fs_reclaim_acquire+0x71/0x100
[  142.448907][ T9422]  ? __kmalloc_noprof+0x9d/0x760
[  142.448916][ T9422]  __kmalloc_noprof+0x9d/0x760
[  142.448925][ T9422]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  142.448938][ T9422]  ? tls_get_rec+0xbf/0x670
[  142.448946][ T9422]  tls_get_rec+0xbf/0x670
[  142.448954][ T9422]  ? __local_bh_enable_ip+0xd0/0x130
[  142.448984][ T9422]  tls_sw_sendmsg+0x4d7/0x2430
[  142.449002][ T9422]  ? __lock_acquire+0x6b5/0x2cf0
[  142.449015][ T9422]  ? __might_fault+0xaf/0x130
[  142.449025][ T9422]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  142.449035][ T9422]  ? __pfx_aa_sk_perm+0x10/0x10
[  142.449047][ T9422]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  142.449058][ T9422]  ? sock_rps_record_flow+0x19/0x350
[  142.449066][ T9422]  ? inet_send_prepare+0x67/0x270
[  142.449073][ T9422]  ? __pfx_inet6_sendmsg+0x10/0x10
[  142.449082][ T9422]  ? inet6_sendmsg+0x101/0x120
[  142.449090][ T9422]  ? __pfx_inet6_sendmsg+0x10/0x10
[  142.449098][ T9422]  __sys_sendto+0x4a3/0x710
[  142.449109][ T9422]  ? __pfx___sys_sendto+0x10/0x10
[  142.449123][ T9422]  ? exc_page_fault+0x6a/0xc0
[  142.449134][ T9422]  ? do_user_addr_fault+0xc6f/0x1340
[  142.449143][ T9422]  __x64_sys_sendto+0xde/0x100
[  142.449153][ T9422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.449160][ T9422]  do_syscall_64+0x15f/0xf80
[  142.449167][ T9422]  ? trace_irq_disable+0x3b/0x140
[  142.449178][ T9422]  ? clear_bhb_loop+0x40/0x90
[  142.449186][ T9422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.449194][ T9422] RIP: 0033:0x7fa3f975d60e
[  142.449205][ T9422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  142.449212][ T9422] RSP: 002b:00007fa3f79f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  142.449221][ T9422] RAX: ffffffffffffffda RBX: 00007fa3f79f66c0 RCX: 00007fa3f975d60e
[  142.449226][ T9422] RDX: 0000000000000020 RSI: 00007fa3f79f5000 RDI: 0000000000000003
[  142.449232][ T9422] RBP: 0000000000000000 R08: 00007fa3f79f4f04 R09: 000000000000000c
[  142.449240][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  142.449247][ T9422] R13: 00007fa3f79f4f58 R14: 00007fa3f79f5000 R15: 0000000000000000
[  142.449260][ T9422]  </TASK>
[  142.532330][ T6436] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.534928][ T6436] Buffer I/O error on dev nbd3, logical block 2, async page read
[  142.537237][ T6436] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.539865][ T6436] Buffer I/O error on dev nbd3, logical block 3, async page read
[  142.542072][ T6436] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.544687][ T6436] Buffer I/O error on dev nbd3, logical block 0, async page read
[  142.547062][ T6436] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  142.549838][ T6436] Buffer I/O error on dev nbd3, logical block 1, async page read
[  142.553264][ T6436] ldm_validate_partition_table(): Disk read failed.
[  142.555755][ T6436] Dev nbd3: unable to read RDB block 0
[  142.558462][ T6436]  nbd3: unable to read partition table
[  142.563985][ T6436] ldm_validate_partition_table(): Disk read failed.
[  142.566719][ T6436] Dev nbd3: unable to read RDB block 0
[  142.569181][ T6436]  nbd3: unable to read partition table
[  144.468146][ T5647] net_ratelimit: 20 callbacks suppressed
[  144.468195][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  144.578122][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  144.688044][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  144.798155][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  144.908280][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  145.028092][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  145.138121][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  145.248110][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  145.358050][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  145.468087][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  149.578127][ T7990] net_ratelimit: 36 callbacks suppressed
[  149.578144][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  149.688489][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  149.798102][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  149.908359][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.018170][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.128240][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.238407][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.348207][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.458288][ T5647] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  150.568192][ T7990] bond5: (slave ip6gretap2): failed to get link speed/duplex
