last executing test programs:

10m42.090524914s ago: executing program 0 (id=596):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="60010000100005000000000000000000ff0100000000000000000000000000017f0000010000000000000000000000001f90ffff1f90ffff0200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x160}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0xce20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={r3, 0xffff0001}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/220, 0xdc}, 0x5}], 0x1, 0x60010000, 0x0) (async)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCDELRT(r6, 0x890c, 0x0)

10m41.309500568s ago: executing program 2 (id=613):
syz_emit_ethernet(0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0011000151e4d24c49e982063c09000000000000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000032000d042d000000fcffff1f00000000", @ANYRES32=r2, @ANYBLOB="46000400000000001400128009000100626f6e640000000004000280080004006d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000001500000500cee22a00000000094ba55e03f99f9367"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000000000000000b7c7515092a50eadca57389d8106780460cf216b00000000", @ANYRES32=r6, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000374ad30b5c96082a53586d178f2aee4cd721320fdbdb9bd34ed571746c08de35ddcf012644e2a6c91893a0f764940ce6", @ANYRES32=r6, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'wlc\x00', 0x1, 0x400000, 0x4}, 0x2c)

10m41.208737901s ago: executing program 0 (id=616):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001080)='2', 0x1}], 0x1}}], 0x1, 0x8000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
shutdown(r0, 0x1)

10m41.029812087s ago: executing program 2 (id=618):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="0000008500000020000000180100002020703f000000000020ccf15a688d6f4cab32fb3f33bc20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x41, 0x0, &(0x7f00000006c0)="e0b9546f5bec20f391e402ccebf9732347dfa0287273cf931fa720dfc83532ead4f77e82f88300000000dd16c6f3395c92c99dd3d28b3c31000000000000000000", 0x0, 0x9, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000e1ff0000000000220000000a0001407770616e31000000"], 0x20}}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x600)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x40, r6, 0x1, 0x70bd65, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0xfd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24881}, 0x800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r8, 0x0, 0x4008005)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r11, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000007000fd6edf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="060009000000000008000300", @ANYRES32=r12, @ANYBLOB="06000900630a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000)
r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r13, r14, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000044)

10m40.840229888s ago: executing program 2 (id=621):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffff8, @private1, 0x17, 0xffffffff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}], 0x1, 0x40408c1)
r1 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000601ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1)

10m40.281047739s ago: executing program 0 (id=626):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x7, 0x1, 0xb709}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@empty, @loopback, r2}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)

10m40.129692271s ago: executing program 0 (id=628):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c3ce50b4837105f357b733b30b607290b76275e5571927ac6dfcaae9a89095c1c1a1", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000001400038004000400080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000400000006000000", @ANYRES32, @ANYRES32=0x0], 0x50)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
shutdown(0xffffffffffffffff, 0x1)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0xfffffffffffffff7, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00'})
sendmsg$nl_route(r5, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

10m39.955383759s ago: executing program 1 (id=631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x35, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @local, @void, {@arp={0x806, @generic={0x30d, 0x200, 0x6, 0x6, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "32c228ef0afb", @remote, "1f00"/13}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf250200000014000100200100000000000000000000000000023d5be484494e6e976e601cb76d2c13801955113849beb205be7c4257ac3bbd43129a1daf3d329a71774061e45e50d78e8ca77598c8ac9b867bbf2b86ae97e8efcbe130b96c9e741e3bd35e79d877f9bc369bbb4bec02dd45614530a5f3b594af8ddaf36dbf8575f35895750337cf8b9ca63ddf267beb42a23aefec41ef59310e77096ff568f2d47ca03ebb08bd512acdc5f97ec6dc452887e7a3371309e0c18a9535165e"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)

10m39.9550765s ago: executing program 2 (id=632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a010400000000000000000700000008000840000000010900010073797a30000000001c000980100002800c0001800800014000000002080201405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f3030000800034000000007200004800600010000020000050002"], 0xcd0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20054000}, 0x440d0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r2 = socket(0x15, 0x5, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x1ff003, 0x4, 0x10001, 0x1, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0xfffffffd}, 0x50)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0x4008af03, &(0x7f0000000000)={0x3, 0x2431c9da, 0xe1, &(0x7f0000000580)=""/225})

10m39.838591298s ago: executing program 1 (id=633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f0000000240)=0xfda8)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000000)="4c00000011000f140011000200000b0002000000200000", 0x17)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000020800010001"], 0x1c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r10 = socket$kcm(0x29, 0x2, 0x0)
r11 = socket$kcm(0x29, 0x2, 0x0)
r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x40, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x40, 0x1404, 0x20, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2)
ioctl$PTP_EXTTS_REQUEST2(r12, 0x40103d0b, &(0x7f0000001200)={0x1, 0x8})
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000280)={r10, r9})
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)=r5)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3ce6ffff0f867728c1b11fc7000d042dbd2f26fc000bd5", @ANYRES32=r13, @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r13, @ANYBLOB="08001b"], 0x30}}, 0x0)

10m39.717590272s ago: executing program 1 (id=634):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x26020480)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x1, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6360, 0x7, 0x0, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14)

10m39.540656846s ago: executing program 1 (id=635):
r0 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtaction={0x1c0, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x1ac, 0x1, [@m_sample={0x1a8, 0x17, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5efb, 0x5, 0x5, 0x0, 0x10}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x6, 0x8000, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7, 0x6, 0x7, 0xb}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x3, 0x2, 0x4, 0xd}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7f7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xce5e, 0x794, 0x0, 0x7fff, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80000000, 0xfffff800, 0x7, 0x7fffffff, 0x2}}]}, {0xd9, 0x6, "426fc863f72afdf52046ed6a457e7ee73f7a2888417dbd8308a49f15494e925ccfb4290b7e8a839e172f62a36f651dc0f9c8e811cab20718e309c017687d0ec5ed2e9164706482102924a7b4cc0ddadab5d7944a7da5d28ae633a1a9d980067422335fdcc336af79c7a1fbe62453ebb17459457ba1e444bbdac22f6b7642ed2e001c01d57ec3672b324bec1cddd4e1ecf1fb205f817e0955b23c17663f338ccbd009a8d864c4e6ffb443915ba4d1af273199deff2880844550df78739b49f87a75bf73e1a5bc50fc8b759c98ec9a61af8ecf7db9c4"}, {0xc, 0x7, {0xff968ac60b8d3ba5, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1c0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000001f40)={0x0, 0x9, 0x0, 0x9, 0xc}, &(0x7f0000001f80)=0x18)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r7}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r7, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket(0x1, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r9)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r11=>0x0, &(0x7f0000000280)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', <r12=>0x0, 0x29, 0x8, 0x8, 0x8, 0x28, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0xdfd, 0x7}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=<r13=>0x0, &(0x7f00000005c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r14=>0x0, 0x2f, 0x8, 0x0, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1, 0x0, 0x80000000, 0x3}})
sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd4, r10, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000}, 0x4000)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

10m39.21144163s ago: executing program 0 (id=636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00', 0xc00}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x158, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff6}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0xf4, 0x16, 0x0, 0x1, [{0x4}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x8000000000000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff, @random="6bbe76cb60f2"}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x21, 0x873, 0x5, 0x8100}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xe, 0xfffffffd}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x6}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xe, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x40, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x9c8}}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)

10m39.206183046s ago: executing program 0 (id=637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000f0ff00000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020)

10m39.111028747s ago: executing program 2 (id=638):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x10, 0x0, "9e3619ea5dad28c61339fe3860c334983aad0f8bb294f2c98d28abd36e5e3738791efca84096bdc6de7b9bc76e0eb553aa02885b72adea9d8697155f9b5000"}, 0xd8)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

10m38.901250461s ago: executing program 1 (id=639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d", 0x14}], 0x1}, 0x804)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x104, 0x30, 0xffff, 0x0, 0x0, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_METALST={0x4}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x3, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0)

10m38.416864677s ago: executing program 2 (id=640):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0xfbffff3f, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)

10m36.99832328s ago: executing program 1 (id=641):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x80) (async, rerun: 32)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

10m18.222964429s ago: executing program 32 (id=637):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000f0ff00000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020)

10m14.164052644s ago: executing program 33 (id=640):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0xfbffff3f, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)

10m12.547086816s ago: executing program 34 (id=641):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) (async, rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x80) (async, rerun: 32)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}], 0x1, 0x10000, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m51.674770245s ago: executing program 5 (id=1280):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x400003, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000100)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6e3]}, 0x8})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x2, 0xf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r12, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000)

1m51.673830917s ago: executing program 5 (id=1281):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x54, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xf}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="181000000300000000007b2aa4f80a675d5d000000000000f8bef4b8cd0c1434cac65b85f3df5154589cc0d7d1be07fd1384d1fa05e984cc1a8cfb2939279d81bd6baca87f153c304562cb6501ab163a58b1425f91f2b2537fe53ff5adb9ab4e0a602dfff722dc1b927a4c06ca36d7ddac9f14b973ee0ead479b6a4211556cc078613875d706000000000000b3ccf10944"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m51.434609234s ago: executing program 5 (id=1282):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x11c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@generic="cafa280572c8a45198a671558f9271a667bc67767bd576427bf91a293bc09fbc38065738d7a448713ab6d0f505006639f9e0f6f2e1994c9f896f0f9d58fcc5e842380657648aeaf604ed8a87e4c2b1c400365e1ff41524b645dd678a7eccfdb9b4a37e3db1c417dc8bb0ebdc46a669a11dc838733fb86273e99ed736fd082c75030687f29c19f01d166ee56def4f42327bea0bdde21aa2dcc59abe5d780948f6da5d93541f090522d149a7c46f14c8b233bbd4f51dfe56adcf44a9ae3a9c24fd050e468018125ae3438b8b0a7d32a2e06b9ccbc19dbdb1bbe1b5b2028b263d68550f4179e33e1afb5d3bda950b2154d9", @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x6, 0x1, 0x80000001, 0x400, 0xffffffffffffffff, 0xe214, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0xc, 0x0, 0xfffffffffffffffd, 0x2758, 0x2000000001a0, 0x9], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000100000000000000000000000000000000000000000000000000000000bbc7b6c6ebb5c39cff000000000000000000000000000000000000000000000000000000000000120000000000feffffff00ec0000000000000004000000000000000000000000000000e5684a5297d72df052e9d445e065c9f80000000000000000000000004894d016d8fac2"]}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4)
sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="160000005600010602000000fcdbdf2507"], 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f0000000300)=[{0xe, 0x1, 0xf2, 0xfffffff9}, {0x8f3, 0x8, 0x10, 0x6}, {0x7, 0x0, 0x9, 0x7}]}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2b, 0xa}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x5ea6da3d5599afe6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r7, &(0x7f0000000900), &(0x7f0000000a00)=""/182}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0xc, 0xbd93, 0x20, r1, 0xb, '\x00', 0x0, r4, 0x5, 0x0, 0x2}, 0x50)

1m48.971300275s ago: executing program 5 (id=1283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
epoll_create1(0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x5}, {0xf, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0xd, 0x8, 0x4, 0x4, 0xfffd, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0x2, 0x9, 0x2, 0x8}, {0x10001, 0xfffffeff, 0x108, 0xcb}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004805}, 0x20000000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e40)=@newsa={0x19c, 0x10, 0x1, 0x7ffffff, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x80, 0x0, 0x8}, {@in6=@rand_addr=' \x01\x00', 0xfffffffc, 0x33}, @in=@remote, {0x0, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0xffffffffffffffff, 0x0, 0xfffe}, {0x401, 0x9, 0x70b}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0x7, 0x4e22, 0xf53b, 0xa, 0x20, 0x0, 0xf}, {0x0, 0x1d16, 0xb, 0x6, 0x1, 0x3, 0x2, 0x6}, {0xf9, 0x5, 0xfff, 0xca6}, 0x1c, 0x6e6bb5, 0x1, 0x0, 0x3, 0x3}}]}, 0x19c}}, 0x400005c)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r12 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r13 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r14, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r11, r14, 0x25, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYRES32=r10, @ANYBLOB="46ff0f08000000001c000000000c00028005000100"/31], 0x3c}, 0x1, 0x0, 0x0, 0x40006c0}, 0x20048040)

1m48.903904311s ago: executing program 5 (id=1286):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8040480)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6}]}, 0x24}}, 0x80)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="9d186ce029e876a009c4da52adfc2c0c2147b940f9af056b2e205185836cb4944b4d2a5313667c3d22e5dae7e7f8fc01aa6ae22ddbc2cffbc615c0e64563604fc1fd95182082b6f3e4c09a32b01b7c2389d134005da91e10d53b2c9aecba6728f7b505547b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="9d186ce029e876a009c4da52adfc2c0c2147b940f9af056b2e205185836cb4944b4d2a5313667c3d22e5dae7e7f8fc01aa6ae22ddbc2cffbc615c0e64563604fc1fd95182082b6f3e4c09a32b01b7c2389d134005da91e10d53b2c9aecba6728f7b505547b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40040}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x5c}}, 0x0)

1m48.680780184s ago: executing program 5 (id=1288):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) (async)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) (rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x4f0c, 0x6, [0x1, 0x6, 0x9, 0x5, 0x4f7, 0x9, 0x7fff, 0x8, 0x6, 0x5b]}}) (async)
r9 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (rerun: 64)
sendto$inet6(r2, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000100003040000000000000000000000003f0897ee65b3dcb6736fcb97b41684299b097bea9e31768cd7e1", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb01001800000000000000181200001800000005000000000000000000000202000000030000000000000c000000000000002e00"], 0x0, 0x35}, 0x20) (async, rerun: 64)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) (rerun: 64)
accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)

1m29.689989968s ago: executing program 35 (id=1288):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x4, @void}, 0x10) (async)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001840)="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", 0x68c}], 0x1}}], 0x1, 0x41) (rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x4f0c, 0x6, [0x1, 0x6, 0x9, 0x5, 0x4f7, 0x9, 0x7fff, 0x8, 0x6, 0x5b]}}) (async)
r9 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) (rerun: 64)
sendto$inet6(r2, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000100003040000000000000000000000003f0897ee65b3dcb6736fcb97b41684299b097bea9e31768cd7e1", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e300000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9feb01001800000000000000181200001800000005000000000000000000000202000000030000000000000c000000000000002e00"], 0x0, 0x35}, 0x20) (async, rerun: 64)
sendmsg$netlink(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08a33}, 0x48800) (rerun: 64)
accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)

1.262338141s ago: executing program 4 (id=2530):
r0 = socket(0x18, 0x80000, 0x1)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000300fffc08000a400000000014000580080002400000000208000140000088640900020073797a3100000000140005800800024000000001080002404a8fe085140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000006800128009000100766c616e00000000580002804c0003800c00010000080000060000000c00010000040000090000000c000100d5f9ffff020000000c00010004000000800000000c00010007000000030000000700010000000000b7860000060001000004000008000500", @ANYRES32=0x0, @ANYBLOB="913cf6e93af438e47e0f6a0876de1691596a6eaa1cfabc7e6c1cf23bb25634af9e8e645271a439c184b5c4d4ac430057194b2ec844ed595805ce51e036f08d053561c9e5df2684e4e2bcbf9d1f8d4845f52643cb64"], 0x90}}, 0x2)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x46bd}, 0x94)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000180), 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x12c, 0x24, 0x0, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0x0, 0xd}}, [@q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x402}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffb}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}]}}]}, 0x12c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000008000700e0000002080002003f00000008000800ac75043e4aa16e15447ce39117c13e5f1e000106000b004a6700009c18dd4da3120c5aee"], 0x34}}, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)

1.152908542s ago: executing program 4 (id=2533):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x14, r1, 0x301, 0x70bd25, 0x4, {0x4e}}, 0x14}}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x6}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000bd899b00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x163181, 0x0)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000000)={'\x00', 0xfffffffd, 0x1, 0x4})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x650, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x624, 0x2, [@TCA_BPF_ACT={0x620, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x80, 0x8, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0xb6, 0x6, 0xfffffffa}, {0x7ff, 0x7, 0x2, 0x3}, {0x2, 0x6, 0x0, 0xedc}, {0x10, 0xb, 0x6, 0x9}, {0x0, 0x1, 0x40, 0x4}]}]}, {0x2c, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x440, 0x9, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe73, 0x9, 0x7, 0x3, 0x1ff, 0x7, 0x8, 0x80, 0x3, 0x1, 0x10000000, 0x401, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x613, 0x5, 0x5, 0xfffffff9, 0xff, 0xc, 0x7fff, 0x5, 0x5c7000, 0x9, 0x7fffffff, 0x5, 0x6, 0x0, 0x80, 0x1f, 0x7ff, 0xfffffc84, 0x10, 0xfffffff7, 0x3, 0x8, 0x6, 0x5, 0xb, 0x8, 0xfffffffd, 0x4c, 0xe, 0xf, 0x9, 0x9, 0x3, 0xfffffff9, 0xfffffffa, 0x1, 0x2, 0x9, 0x8, 0xc6e7, 0xa000, 0x2, 0x8000, 0x17, 0x6, 0x2e52, 0x9, 0x7, 0x6, 0x414, 0x10001, 0x0, 0x5, 0xffffffff, 0xc, 0x1000, 0x4, 0x800, 0x10, 0x39, 0x5, 0x2, 0x5c3, 0x800, 0x2, 0x5, 0x6e6, 0x3, 0x7, 0x6, 0xc, 0x3, 0x14e, 0x8, 0x5, 0xad8, 0x289f, 0x3, 0x97e, 0x3, 0x80, 0x6, 0xb, 0x8, 0xe6, 0x720, 0x2, 0xa98f, 0x1, 0xffffffff, 0x0, 0x3, 0x74, 0xdd7c, 0x2, 0x0, 0xffffff7c, 0x6, 0x7f, 0x1, 0x6, 0x4, 0x7, 0x3, 0x7, 0xb, 0xfff, 0xfffffffd, 0x3, 0xc60, 0x7, 0x4, 0xf8ca, 0xb, 0x6, 0x3ff, 0x7fffffff, 0x8001, 0xd, 0x0, 0x4, 0x4, 0x0, 0x421, 0x8, 0x9, 0x2, 0x1, 0x0, 0x9, 0xffff, 0x7ff, 0x8, 0x9, 0x2, 0xb, 0xa00, 0x2, 0xfec, 0x5, 0x5, 0x5, 0x9, 0x2, 0x400, 0x3, 0x3, 0x3, 0x8, 0xe59, 0x1000, 0x101, 0x5, 0x8001, 0x9, 0x4, 0x0, 0x6155, 0xe040, 0x80000001, 0x40, 0x7f, 0x9, 0x5e59, 0x81, 0x0, 0x9, 0x0, 0x3, 0x1, 0xb571, 0xe, 0x7, 0xa, 0x80000000, 0x2797, 0x4, 0x2, 0x2, 0x2, 0x3, 0x81, 0xffffffff, 0x6f, 0xfffffffd, 0x5, 0xb, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x8001, 0x7, 0x7, 0x1, 0x32d, 0x9, 0x6, 0x2, 0x6, 0x2, 0x4, 0x1, 0x4, 0x0, 0x1000, 0x80000001, 0xffffffff, 0x4, 0x7, 0x8, 0x8, 0x697, 0xe339, 0x9, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x35, 0x7, 0x5, 0xfffffffb, 0xfffffff9, 0x965, 0x7145, 0x90b6, 0x6, 0x6, 0x2, 0x8, 0x1, 0x1, 0xd5, 0x7ff, 0x200]}]]}, {0xf, 0x6, "94cedea66d85e9b70c476e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x2c, 0x13, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="140002"], 0x48}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r9, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ac0)="a2ee"}, 0x50)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000)
sendmmsg(r5, &(0x7f0000000000), 0x400000000000047, 0x0)
ppoll(&(0x7f00000006c0)=[{0xffffffffffffffff, 0x9018}, {0xffffffffffffffff, 0x5200}, {0xffffffffffffffff, 0xd20c}, {0xffffffffffffffff, 0x3344}, {r4, 0x404}], 0x5, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f00000007c0)={[0x6]}, 0x8)

992.887002ms ago: executing program 4 (id=2535):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000]}}}, @common=@set={{0x40}, {{0x0, [0x218, 0xfdffffff]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

992.347845ms ago: executing program 4 (id=2536):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x19}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b28cc69201"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "ba5c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6132b57ae9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x1f5802}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8c0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f0000000280))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x14)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000500)={<r5=>r3, &(0x7f0000000180)='\xff\xff', 0x40080, &(0x7f00000001c0)={@align=0xb0b1, {0x6, 0x5, 0x0, 0x9}}, 0x9, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000004c0)=0x4})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r6=>0x0, 0x2f, 0x6, 0x3, 0x5, 0x8, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x1, 0x1, 0x20, 0x1}})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x3, 0x9, 0x7, 0x4}, 0x10, 0x1c9d3, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x4, 0x4}, {0x5, 0x5, 0x0, 0x6}, {0x5, 0x1, 0x0, 0x2}, {0x5, 0x3, 0x8, 0xb}], 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7898, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x51f}, @map_val={0x18, 0xc13df74feac7b8a1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000640)='syzkaller\x00', 0x38000000, 0x0, 0x0, 0x41000, 0x12, '\x00', r6, @fallback=0x28, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0xa, 0x5f, 0xef55}, 0x10, 0x0, r8, 0x3, &(0x7f0000000b80)=[0x1], &(0x7f0000000bc0)=[{0x1, 0x5, 0x0, 0x71f0d4ac54a8b249}, {0x4, 0x5, 0x5, 0x9}, {0x3, 0x400, 0x5, 0x1}], 0x10, 0x3}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xa}}}, 0x100, 0x0, 0x0, 0x9, 0x54}, 0x9c)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

542.806313ms ago: executing program 6 (id=2542):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400006400eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x439, 0x1, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x801) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x9, @loopback, 0x8}, 0x1c)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)

541.785212ms ago: executing program 6 (id=2543):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x458, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000, 0x0, 0xfd]}}}, @common=@set={{0x40}, {{0x0, [0x218]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

541.480952ms ago: executing program 6 (id=2544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r3, 0x65aebf9dafbebb59, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000480)={<r5=>r4, &(0x7f0000000000)='\x00', 0x20001, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x5]}, {0x4, 0x4, 0x1000}}, 0x1, &(0x7f0000000140), &(0x7f0000000440)=0x8000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x4, [@ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @fwd={0xc}, @enum64={0x3, 0x3, 0x0, 0x13, 0x1, 0x2, [{0x10, 0x6b80000, 0x200}, {0x7, 0x8}, {0x3, 0x0, 0x10000}]}, @var={0x806, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000180)=""/198, 0x84, 0xc6, 0x0, 0x593867ae, 0x10000, @value=r5}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x50)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r6, 0x0)

453.063228ms ago: executing program 6 (id=2545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000100001002abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x800c004}, 0x48080)

452.934994ms ago: executing program 6 (id=2546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0)

451.709957ms ago: executing program 6 (id=2547):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000077fbb6acdba461a909a2a8754382812ee60cf9792c104edc793ad046f1a6084ca5a16c3330b6157afdb2e2da63f5b148ac608bc8abfacd94ab57c701119a33d296ba3c060000000000000011e58126f8c3251c6c1469539e13bd54fccf45d69a00a43e5e9f19dcd1b36820f2c8d22c39b3f436748cc14c5b2c372246ce4c6e4b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="44000000100001045915aa0553d018fb00000000", @ANYRES32=r5, @ANYBLOB="0305000000000000240012800c0001006d6163766c616e001400028006000200000000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x200000a4}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@tos={{0x28}, {0x3, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x44840)

282.664248ms ago: executing program 3 (id=2548):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8fcc048f1a0daad170478560f60eb8dc258ded60aee45b04b15d", 0x30)
accept$alg(r0, 0x0, 0x0) (async)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701"], 0x18, 0x44094}], 0x1, 0x30040001)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000700000000000021c732cc00000000009500000000000036"], &(0x7f0000000140)='syzkaller\x00'}, 0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003000800170004"]}, 0x58}}, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$XFS_IOC_GETPARENTS(r6, 0xc028583e, &(0x7f0000000700)={{[0x3, 0x2, 0x5, 0x8]}, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000580)=[{{@align=0x7fffffffffffffff, {0x6, 0x2, 0x20000000, 0xffffffff9a981acf}}, 0x1, 0x0, '\'.-&+!$(-&*.&^(%\x00'}, {{@_ha_fsid={[0x5, 0x6]}, {0xad, 0x331, 0x5, 0x7}}, 0x462, 0x0, '\xb2\x00'}, {{@align=0x40, {0x401, 0x2c9, 0x1, 0xbe3}}, 0x476, 0x0, '\xb7#&/-\x00'}, {{@align=0x5, {0x6, 0x1, 0xffff, 0xfffffffffffffc2c}}, 0x1, 0x0, 'syzkaller\x00'}, {{@align=0x9, {0x8, 0x5c, 0x3, 0x44}}, 0x6, 0x0, '-$*(,#}\x00'}, {{@align=0x6, {0x5, 0x7, 0x5, 0x7ff}}, 0x2b0, 0x0, 'skcipher\x00'}, {{@_ha_fsid={[0x7]}, {0x0, 0x4, 0x4, 0x4}}, 0x7ff, 0x0, 'syzkaller\x00'}, {{@align=0x3, {0x3ff, 0x7ff, 0x2, 0x7}}, 0x0, 0x0, '\\-+-[*\',!}(+\x00'}, {{@_ha_fsid={[0x5, 0xdae]}, {0x6, 0x0, 0x7fffffff, 0x4008001}}, 0x2, 0x0, '{)\'-({\x00'}]}) (async)
ioctl$XFS_IOC_GETPARENTS(r6, 0xc028583e, &(0x7f0000000700)={{[0x3, 0x2, 0x5, 0x8]}, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000580)=[{{@align=0x7fffffffffffffff, {0x6, 0x2, 0x20000000, 0xffffffff9a981acf}}, 0x1, 0x0, '\'.-&+!$(-&*.&^(%\x00'}, {{@_ha_fsid={[0x5, 0x6]}, {0xad, 0x331, 0x5, 0x7}}, 0x462, 0x0, '\xb2\x00'}, {{@align=0x40, {0x401, 0x2c9, 0x1, 0xbe3}}, 0x476, 0x0, '\xb7#&/-\x00'}, {{@align=0x5, {0x6, 0x1, 0xffff, 0xfffffffffffffc2c}}, 0x1, 0x0, 'syzkaller\x00'}, {{@align=0x9, {0x8, 0x5c, 0x3, 0x44}}, 0x6, 0x0, '-$*(,#}\x00'}, {{@align=0x6, {0x5, 0x7, 0x5, 0x7ff}}, 0x2b0, 0x0, 'skcipher\x00'}, {{@_ha_fsid={[0x7]}, {0x0, 0x4, 0x4, 0x4}}, 0x7ff, 0x0, 'syzkaller\x00'}, {{@align=0x3, {0x3ff, 0x7ff, 0x2, 0x7}}, 0x0, 0x0, '\\-+-[*\',!}(+\x00'}, {{@_ha_fsid={[0x5, 0xdae]}, {0x6, 0x0, 0x7fffffff, 0x4008001}}, 0x2, 0x0, '{)\'-({\x00'}]})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fffc2bbd70ad4fded1d73ebbc574a9759fb59d8fcf00bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="182a0500211a05001c0012800e00010069703665727370616e0000000800028004001200080028006e7a00000800290004d50000"], 0x4c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)

213.641745ms ago: executing program 3 (id=2549):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e27}, 0x6e)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}], 0x18}, 0x804)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r5, 0xc008af7b, &(0x7f0000000140)={0x3, 0xfffffff2})

151.755162ms ago: executing program 3 (id=2550):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', <r1=>0x0, 0x8000, 0x7, 0x1, 0xffffffff, {{0x13, 0x4, 0x1, 0x9, 0x4c, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0xd, [0x401, 0x6]}, @rr={0x7, 0x17, 0x67, [@rand_addr=0x64010100, @multicast1, @local, @loopback, @multicast2]}, @rr={0x7, 0x13, 0xf1, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x1000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r3=>0x0, 0x700, 0x1, 0x7ff, 0x8, {{0xf, 0x4, 0x3, 0x1, 0x3c, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x27, 0xf0, [@multicast2, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @rand_addr=0x64010102, @empty, @remote]}]}}}}})
r4 = getuid()
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e20, 0x7f, 0x4e20, 0x8, 0x2, 0x80, 0x20, 0x5e, r3, r4}, {0x1, 0x3ff, 0x4, 0x9, 0x7, 0x0, 0xd, 0x3}, {0xfffffffffffffffb, 0x8, 0x8000, 0x100000001}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d3, 0x78}, 0x2, @in6=@private0, 0x3507, 0x0, 0x0, 0x3, 0x8001, 0x5, 0x54}}, 0xe8)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e22, 0x8, 0x4e21, 0x4, 0xa, 0xa0, 0x20, 0x84, r1, r4}, {0x3, 0xb4b, 0x6, 0xea7a, 0x0, 0xffffffff, 0x7}, {0x2d, 0x7, 0x9e25, 0x8}, 0x2, 0x6e6bb3, 0x2, 0x0, 0x3, 0x3}, {{@in=@remote, 0x4d2, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x3, 0x2, 0x0, 0x10000, 0x4, 0x200}}, 0xe8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000012000400cdff000008001b0204000000"], 0x30}}, 0x0)

151.161712ms ago: executing program 3 (id=2551):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000042c0)={&(0x7f0000004200)={0x10, 0x0, 0x204, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x3c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x3c}}, 0x8000)

72.068124ms ago: executing program 3 (id=2552):
r0 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044094)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x40003}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000001ac0)=""/201, 0xc9}, {&(0x7f0000003840)=""/172, 0xa7}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$inet6(0xa, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9})
write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket$unix(0x1, 0x1, 0x0)

71.733834ms ago: executing program 4 (id=2553):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0)

257.076µs ago: executing program 3 (id=2554):
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8b4}, 0x2000c8c0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r4) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) (async)
socket$kcm(0x11, 0x3, 0x0) (async)
socket$unix(0x1, 0x5, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$kcm(0x1e, 0x4, 0x0)

0s ago: executing program 4 (id=2555):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000140)=0x3ff, 0x4) (async)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) (async)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28)
r1 = socket(0x23, 0x4, 0x8001)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc008440}, 0x4c0d4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x6) (async)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2})
ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r7, 0xac9d4000)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b00000000002c001a800800028004000180080002800400018018000a8014000700ff020000000000000000000000000001b5bf98c4b7407e47e528e57051a4f427b85b38c0a285389fecdb169f3772efaaad8187cc0a52cca19693c8b745dca21884da2b0846ebb9a7b46f1376f3c25e65d454cf2b79c203a6f2b339a4703f50920411959477dcc18e69ca14fb57eb5877205156b067f0"], 0x54}}, 0x8024)

kernel console output (not intermixed with test programs):

b9e55000: rx timeout, send abort
[  653.787867][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e55000: abort rx timeout. Force session deactivation
[  653.963084][T10203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.058132][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e55c00: rx timeout, send abort
[  654.558221][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bcc89800: rx timeout, send abort
[  654.558308][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e55c00: abort rx timeout. Force session deactivation
[  654.582511][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bcc89800: connection exists (fe ff). last cmd: 20
[  654.832639][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e54800: rx timeout, send abort
[  655.013434][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.332786][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e54800: abort rx timeout. Force session deactivation
[  655.602257][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8695c00: rx timeout, send abort
[  655.805656][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.042122][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.102389][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8695c00: abort rx timeout. Force session deactivation
[  656.102475][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881ba3e8800: rx timeout, send abort
[  656.114627][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881ba3e8800: connection exists (fe ff). last cmd: 20
[  656.364683][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8695800: rx timeout, send abort
[  656.864818][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8695800: abort rx timeout. Force session deactivation
[  657.082213][ T5001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.127164][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8694800: rx timeout, send abort
[  657.627263][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bca8c000: rx timeout, send abort
[  657.627335][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8694800: abort rx timeout. Force session deactivation
[  657.647593][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bca8c000: connection exists (fe ff). last cmd: 20
[  657.897650][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816c7cac00: rx timeout, send abort
[  658.123431][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.397797][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816c7cac00: abort rx timeout. Force session deactivation
[  658.672298][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a400: rx timeout, send abort
[  658.843701][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.916771][T11764] syzkaller0: entered promiscuous mode
[  658.916823][T11764] syzkaller0: entered allmulticast mode
[  658.947817][ T4989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  658.955386][ T4989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  658.960591][ T4989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  658.972609][ T4989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  658.977676][ T4989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  659.088045][T11788] netlink: 'syz.3.1390': attribute type 1 has an invalid length.
[  659.163698][T11788] bond12: entered promiscuous mode
[  659.166489][ T5001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.172895][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a400: abort rx timeout. Force session deactivation
[  659.173044][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bcc8c800: rx timeout, send abort
[  659.175971][T11788] 8021q: adding VLAN 0 to HW filter on device bond12
[  659.183229][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bcc8c800: connection exists (fe ff). last cmd: 20
[  659.210583][T11788] 8021q: adding VLAN 0 to HW filter on device bond12
[  659.210983][T11788] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  659.210998][T11788] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  659.224389][T11788] bond12: (slave ip6gre3): making interface the new active one
[  659.224451][T11788] ip6gre3: entered promiscuous mode
[  659.227319][T11788] bond12: (slave ip6gre3): Enslaving as an active interface with an up link
[  659.236296][T11788] netlink: 'syz.3.1390': attribute type 1 has an invalid length.
[  659.337366][T11812] syzkaller0: left promiscuous mode
[  659.337419][T11812] syzkaller0: left allmulticast mode
[  659.360139][T11817] netlink: 'syz.4.1397': attribute type 3 has an invalid length.
[  659.360190][T11817] __nla_validate_parse: 5 callbacks suppressed
[  659.360480][T11817] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1397'.
[  659.389619][T11776] lo speed is unknown, defaulting to 1000
[  659.433464][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a800: rx timeout, send abort
[  659.493984][T11829] netlink: 'syz.4.1400': attribute type 1 has an invalid length.
[  659.494046][T11829] netlink: 'syz.4.1400': attribute type 2 has an invalid length.
[  659.620182][T11838] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1402'.
[  659.644235][T11776] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.644351][T11776] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.644815][T11776] bridge_slave_0: entered allmulticast mode
[  659.645657][T11776] bridge_slave_0: entered promiscuous mode
[  659.647236][T11776] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.647310][T11776] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.647364][T11776] bridge_slave_1: entered allmulticast mode
[  659.648125][T11776] bridge_slave_1: entered promiscuous mode
[  659.666132][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.672536][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.692613][T11776] team0: Port device team_slave_0 added
[  659.696101][T11776] team0: Port device team_slave_1 added
[  659.711524][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.713948][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.722147][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.724048][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.724056][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.724067][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.750536][T11776] hsr_slave_0: entered promiscuous mode
[  659.751061][T11776] hsr_slave_1: entered promiscuous mode
[  659.871639][T11776] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  659.876986][T11776] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  659.888294][T11776] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  659.893575][T11776] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  659.894131][T11776] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  659.904233][T11776] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  659.907102][T11776] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  659.911135][T11776] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  659.929015][T11776] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.929197][T11776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.929359][T11776] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.929403][T11776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.933606][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a800: abort rx timeout. Force session deactivation
[  659.964980][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.967661][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.984977][T11776] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.997836][T11776] 8021q: adding VLAN 0 to HW filter on device team0
[  660.006799][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.007013][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.011690][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.011873][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.122966][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.205164][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8698c00: rx timeout, send abort
[  660.212150][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.214874][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  660.335140][T11776] veth0_vlan: entered promiscuous mode
[  660.338838][T11776] veth1_vlan: entered promiscuous mode
[  660.356272][T11776] veth0_macvtap: entered promiscuous mode
[  660.358699][T11776] veth1_macvtap: entered promiscuous mode
[  660.368884][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.383596][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.426028][T11899] bond13: (slave bond_slave_1): Device is not bonding slave
[  660.426084][T11899] bond13: option active_slave: invalid value (bond_slave_1)
[  660.429485][T11899] bond13 (unregistering): Released all slaves
[  660.502034][ T5653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.505670][ T5653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.509331][ T5653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.552715][ T5653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.575625][T11903] netlink: 'syz.3.1404': attribute type 3 has an invalid length.
[  660.578337][T11903] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1404'.
[  660.600246][ T6926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.600299][ T6926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.646804][ T6926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.646897][ T6926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.673908][T11908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'.
[  660.676487][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1406'.
[  660.689960][T11910] netlink: 'syz.3.1407': attribute type 1 has an invalid length.
[  660.703936][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b85eec00: rx timeout, send abort
[  660.705270][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8698c00: abort rx timeout. Force session deactivation
[  660.717429][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881b85eec00: connection exists (fe ff). last cmd: 20
[  660.747344][T11910] bond13: entered promiscuous mode
[  660.751310][T11910] 8021q: adding VLAN 0 to HW filter on device bond13
[  660.757946][T11914] 8021q: adding VLAN 0 to HW filter on device bond13
[  660.758233][T11914] bond13: (slave gre2): The slave device specified does not support setting the MAC address
[  660.758243][T11914] bond13: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  660.764768][T11914] bond13: (slave gre2): making interface the new active one
[  660.764785][T11914] gre2: entered promiscuous mode
[  660.765564][T11914] bond13: (slave gre2): Enslaving as an active interface with an up link
[  660.766035][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  660.783555][T11915] syzkaller1: entered promiscuous mode
[  660.783573][T11915] syzkaller1: entered allmulticast mode
[  660.790513][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'.
[  660.804774][T11910] bond13 (unregistering): (slave gre2): Releasing backup interface
[  660.808249][T11910] gre2: left promiscuous mode
[  660.812948][T11910] bond13 (unregistering): Released all slaves
[  660.892939][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.894200][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.895101][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.896988][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.897062][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.967515][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8699000: rx timeout, send abort
[  661.002101][ T4989] Bluetooth: hci0: command tx timeout
[  661.083757][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'.
[  661.087354][T11921] netlink: 'syz.4.1410': attribute type 4 has an invalid length.
[  661.087370][T11921] netlink: 'syz.4.1410': attribute type 1 has an invalid length.
[  661.181613][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1412'.
[  661.221669][T11928] netlink: 'syz.4.1413': attribute type 3 has an invalid length.
[  661.221730][T11928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1413'.
[  661.325985][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1414'.
[  661.453222][T11939] can: request_module (can-proto-0) failed.
[  661.467666][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8699000: abort rx timeout. Force session deactivation
[  661.506198][T11943] syzkaller0: entered promiscuous mode
[  661.506268][T11943] syzkaller0: entered allmulticast mode
[  661.664236][T11961] xt_NETMAP: bad MAP_IPS.
[  661.740990][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a000: rx timeout, send abort
[  661.753533][T11966] bridge1: entered allmulticast mode
[  661.957140][T11978] xt_NETMAP: bad MAP_IPS.
[  662.115894][ T5707] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  662.124765][ T5653] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  662.155141][ T8232] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  662.155221][ T8232] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  662.155276][ T8232] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  662.241129][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869a000: abort rx timeout. Force session deactivation
[  662.241248][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a895e800: rx timeout, send abort
[  662.266354][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881a895e800: connection exists (fe ff). last cmd: 20
[  662.450165][T12011] syzkaller0: entered promiscuous mode
[  662.450228][T12011] syzkaller0: entered allmulticast mode
[  662.514666][T12015] bond13: (slave bond_slave_1): Device is not bonding slave
[  662.516396][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869ac00: rx timeout, send abort
[  662.519794][T12015] bond13: option active_slave: invalid value (bond_slave_1)
[  662.524148][T12015] bond13 (unregistering): Released all slaves
[  662.790653][T12037] 8021q: adding VLAN 0 to HW filter on device bond19
[  662.799743][T12037] bond19 (unregistering): Released all slaves
[  662.927632][ T5707] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  663.006491][T12049] bond1: (slave bond_slave_1): Device is not our slave
[  663.009481][T12049] bond1: option active_slave: invalid value (bond_slave_1)
[  663.013969][T12049] bond1 (unregistering): Released all slaves
[  663.016495][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869ac00: abort rx timeout. Force session deactivation
[  663.082110][ T4989] Bluetooth: hci0: command tx timeout
[  663.128410][T12054] xt_TPROXY: Can be used only with -p tcp or -p udp
[  663.137728][T12054] net_ratelimit: 254 callbacks suppressed
[  663.140324][T12054] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  663.278731][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869b800: rx timeout, send abort
[  663.333094][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  663.372340][T12061] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  663.372418][T12061] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  663.778884][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9359400: rx timeout, send abort
[  663.778961][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869b800: abort rx timeout. Force session deactivation
[  663.799278][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881b9359400: connection exists (fe ff). last cmd: 20
[  664.046398][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.049370][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869b400: rx timeout, send abort
[  664.362980][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.549483][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b869b400: abort rx timeout. Force session deactivation
[  664.818869][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816673a400: rx timeout, send abort
[  665.162176][ T4989] Bluetooth: hci0: command tx timeout
[  665.318972][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bbcb6000: rx timeout, send abort
[  665.319041][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816673a400: abort rx timeout. Force session deactivation
[  665.338238][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bbcb6000: connection exists (fe ff). last cmd: 20
[  665.402138][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.588302][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816673b400: rx timeout, send abort
[  665.676250][T12029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  665.684367][T12060] netlink: 'syz.6.1454': attribute type 11 has an invalid length.
[  665.684425][T12060] __nla_validate_parse: 13 callbacks suppressed
[  665.684489][T12060] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1454'.
[  665.785532][T12063] IPv6: addrconf: prefix option has invalid lifetime
[  665.875207][ T5653] nci: nci_rx_work: unknown MT 0x6
[  665.883850][T12073] validate_nla: 3 callbacks suppressed
[  665.886684][T12073] netlink: 'syz.6.1455': attribute type 4 has an invalid length.
[  665.890890][T12073] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1455'.
[  665.903159][T12073] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  665.948887][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1460'.
[  665.972850][T12081] bond13 (unregistering): Released all slaves
[  665.988407][T12070] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  666.001524][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'.
[  666.088431][    C1] vcan0: j1939_tp_rxtimer: 0xffff88816673b400: abort rx timeout. Force session deactivation
[  666.121360][T12087] 8021q: VLANs not supported on ip6_vti0
[  666.358688][    C1] vcan0: j1939_tp_rxtimer: 0xffff888166738800: rx timeout, send abort
[  666.452312][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  666.858759][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b9e55000: rx timeout, send abort
[  666.858923][    C1] vcan0: j1939_tp_rxtimer: 0xffff888166738800: abort rx timeout. Force session deactivation
[  666.871149][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881b9e55000: connection exists (fe ff). last cmd: 20
[  667.083012][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.121191][    C1] vcan0: j1939_tp_rxtimer: 0xffff888166738000: rx timeout, send abort
[  667.241891][ T4989] Bluetooth: hci0: command tx timeout
[  667.621362][    C1] vcan0: j1939_tp_rxtimer: 0xffff888166738000: abort rx timeout. Force session deactivation
[  667.889713][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bbf16000: rx timeout, send abort
[  668.389826][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bc786800: rx timeout, send abort
[  668.389904][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bbf16000: abort rx timeout. Force session deactivation
[  668.401181][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bc786800: connection exists (fe ff). last cmd: 20
[  668.522789][T10205] net_ratelimit: 1 callbacks suppressed
[  668.522878][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.651206][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4a800: rx timeout, send abort
[  668.776152][T12063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  668.841600][T12095] xt_NETMAP: bad MAP_IPS.
[  668.908021][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.908171][T10205] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  668.966417][T12114] bond1: (slave bond_slave_1): Device is not our slave
[  668.968977][T12114] bond1: option active_slave: invalid value (bond_slave_1)
[  668.974571][T12114] bond1 (unregistering): Released all slaves
[  669.151325][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4a800: abort rx timeout. Force session deactivation
[  669.425571][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4a000: rx timeout, send abort
[  669.457633][T12129] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  669.462039][T12129] bond10: (slave lo): Enslaving as an active interface with an up link
[  669.462256][T12129] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  669.563021][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.707015][T12149] bond19 (unregistering): Released all slaves
[  669.736883][T10205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.872382][T12166] Cannot find set identified by id 0 to match
[  669.910501][T12160] 8021q: adding VLAN 0 to HW filter on device bond20
[  669.915820][T12160] bond19: (slave bond20): Enslaving as an active interface with an up link
[  669.925714][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4a000: abort rx timeout. Force session deactivation
[  669.927117][    C1] vcan0: j1939_tp_rxtimer: 0xffff888199458c00: rx timeout, send abort
[  669.937384][T12172] x_tables: duplicate underflow at hook 1
[  669.940972][T12172] netlink: 4784 bytes leftover after parsing attributes in process `syz.6.1481'.
[  669.941008][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888199458c00: connection exists (fe ff). last cmd: 20
[  669.948761][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1481'.
[  669.958514][T12160] bond19: (slave gretap1): Enslaving as an active interface with an up link
[  669.964812][ T5655] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  669.971194][T12177] x_tables: duplicate underflow at hook 1
[  669.973576][T12176] netlink: 4784 bytes leftover after parsing attributes in process `syz.6.1481'.
[  669.973591][T12176] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1481'.
[  669.979413][T12160] bond19: entered allmulticast mode
[  669.979429][T12160] bond20: entered allmulticast mode
[  669.979499][T12160] gretap1: entered allmulticast mode
[  670.049895][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'.
[  670.123274][ T5707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.181415][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1487'.
[  670.191016][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48400: rx timeout, send abort
[  670.250351][T12199] netlink: 'syz.4.1487': attribute type 3 has an invalid length.
[  670.602041][ T5655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.691151][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48400: abort rx timeout. Force session deactivation
[  670.731697][T12252] __nla_validate_parse: 3 callbacks suppressed
[  670.732771][T12252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'.
[  670.768559][T12259] netlink: 'syz.3.1502': attribute type 7 has an invalid length.
[  670.870760][T12265] netlink: 'syz.6.1504': attribute type 1 has an invalid length.
[  670.896662][T12265] lo: entered promiscuous mode
[  670.903756][T12265] tunl0: entered promiscuous mode
[  670.911291][T12265] gre0: entered promiscuous mode
[  670.921058][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'.
[  670.930670][T12265] gretap0: entered promiscuous mode
[  670.938148][T12265] erspan0: entered promiscuous mode
[  670.940563][T12265] ip_vti0: entered promiscuous mode
[  670.942224][T12265] ip6_vti0: entered promiscuous mode
[  670.944157][T12265] sit0: entered promiscuous mode
[  670.947781][T12265] ip6tnl0: entered promiscuous mode
[  670.949506][T12265] ip6gre0: entered promiscuous mode
[  670.952388][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b400: rx timeout, send abort
[  670.956893][T12265] syz_tun: entered promiscuous mode
[  670.961419][T12265] ip6gretap0: entered promiscuous mode
[  670.965576][T12265] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.965894][T12265] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.966449][T12265] bridge0: entered promiscuous mode
[  671.017710][T12274] Cannot find set identified by id 0 to match
[  671.028454][T12270] bond10: (slave lo): Releasing backup interface
[  671.033335][T12270] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  671.035529][T12276] netlink: 'syz.3.1507': attribute type 49 has an invalid length.
[  671.045353][T12270] bond2: (slave syz_tun): Removing an active aggregator
[  671.046462][T12270] bond2: (slave syz_tun): Releasing backup interface
[  671.053332][T12270] bond3: (slave ip6gretap0): Releasing active interface
[  671.058588][T12270] bond8: (slave veth0_to_bond): Releasing active interface
[  671.063951][T12270] bond0: (slave bond_slave_0): Releasing backup interface
[  671.069510][T12270] team0: Port device team_slave_0 removed
[  671.074148][T12270] team0: Port device team_slave_1 removed
[  671.074345][T12270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  671.212515][T12280] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.216341][T12280] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.272705][T12280] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.276860][T12280] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.304332][T12284] bond13: (slave bond_slave_1): Device is not bonding slave
[  671.304384][T12284] bond13: option active_slave: invalid value (bond_slave_1)
[  671.308481][T12284] bond13 (unregistering): Released all slaves
[  671.332491][T12280] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.336185][T12280] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.379495][T12287] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  671.388793][T12287] bond13: (slave lo): Enslaving as an active interface with an up link
[  671.391095][T12287] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  671.417651][T12280] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  671.417734][T12280] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.428819][T12291] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  671.452450][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b400: abort rx timeout. Force session deactivation
[  671.452547][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bea0ac00: rx timeout, send abort
[  671.462867][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bea0ac00: connection exists (fe ff). last cmd: 20
[  671.469854][T12295] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1512'.
[  671.552064][ T8232] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  671.552142][ T8232] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.612172][ T8232] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  671.612325][ T8232] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  671.612351][ T8232] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  671.612366][ T8232] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.612386][ T8232] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  671.612401][ T8232] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.655618][T12306] netlink: 'syz.6.1516': attribute type 10 has an invalid length.
[  671.655691][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1516'.
[  671.657181][T12306] dummy0: entered promiscuous mode
[  671.657432][T12306] bridge0: port 3(dummy0) entered blocking state
[  671.657551][T12306] bridge0: port 3(dummy0) entered disabled state
[  671.657679][T12306] dummy0: entered allmulticast mode
[  671.711634][T12310] netlink: 'syz.3.1518': attribute type 1 has an invalid length.
[  671.712956][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4bc00: rx timeout, send abort
[  671.811239][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'.
[  671.837199][T12313] bond1 (unregistering): Released all slaves
[  671.855992][T12321] 8021q: adding VLAN 0 to HW filter on device bond0
[  671.863572][T12323] netlink: 'syz.3.1522': attribute type 3 has an invalid length.
[  671.867004][T12323] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1522'.
[  671.946838][T12328] tipc: Started in network mode
[  671.947344][T12328] tipc: Node identity 56438b0d8974, cluster identity 4711
[  671.947529][T12328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.960981][T12328] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) !
[  671.965558][T12331] Cannot find set identified by id 0 to match
[  671.991658][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'.
[  672.005796][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'.
[  672.011399][T12328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1524'.
[  672.088836][T12337] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  672.125986][T12342] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1527'.
[  672.148671][T12339] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  672.213126][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4bc00: abort rx timeout. Force session deactivation
[  672.247292][T12349] Bluetooth: MGMT ver 1.23
[  672.413486][T12351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.413542][T12351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  672.479444][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4ac00: rx timeout, send abort
[  672.502614][T12351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.506342][T12351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  672.560682][T12351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.561854][T12351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  672.641951][ T5653] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  672.645680][ T5653] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  672.645734][ T5653] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  672.645751][ T5653] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  672.659039][ T5653] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  672.662762][ T5653] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  672.662841][ T5653] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  672.662879][ T5653] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  672.979555][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd1dc400: rx timeout, send abort
[  672.979612][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4ac00: abort rx timeout. Force session deactivation
[  673.003937][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bd1dc400: connection exists (fe ff). last cmd: 20
[  673.016131][T10205] tipc: Node number set to 3744959245
[  673.018210][T12373] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  673.018222][T12373] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  673.121686][T12379] Bluetooth: MGMT ver 1.23
[  673.129657][T12381] netlink: 'syz.6.1542': attribute type 3 has an invalid length.
[  673.254159][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b000: rx timeout, send abort
[  673.331019][T12391] netlink: 'syz.4.1546': attribute type 1 has an invalid length.
[  673.346561][T12391] 8021q: adding VLAN 0 to HW filter on device bond21
[  673.354662][T12389] bond21: (slave syz_tun): Enslaving as a backup interface with an up link
[  673.754289][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b000: abort rx timeout. Force session deactivation
[  673.881243][T12404] netlink: 'syz.3.1551': attribute type 3 has an invalid length.
[  673.991944][T12410] bond14: (slave bond_slave_1): Device is not bonding slave
[  673.992089][T12410] bond14: option active_slave: invalid value (bond_slave_1)
[  674.000626][T12410] bond14 (unregistering): Released all slaves
[  674.020577][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b800: rx timeout, send abort
[  674.104265][T12413] netlink: 'syz.3.1555': attribute type 4 has an invalid length.
[  674.250280][T12419] netlink: 'syz.4.1557': attribute type 1 has an invalid length.
[  674.520642][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881be043400: rx timeout, send abort
[  674.520760][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb4b800: abort rx timeout. Force session deactivation
[  674.542143][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881be043400: connection exists (fe ff). last cmd: 20
[  674.792166][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48800: rx timeout, send abort
[  674.969550][T12428] syzkaller0: entered promiscuous mode
[  674.971903][T12428] syzkaller0: entered allmulticast mode
[  675.081438][T12430] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  675.081635][T12430] net_ratelimit: 4 callbacks suppressed
[  675.081644][T12430] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  675.171439][T12438] netlink: 'syz.3.1560': attribute type 3 has an invalid length.
[  675.212829][T12437] bond1: option min_links: invalid value (18446744073709551612)
[  675.212888][T12437] bond1: option min_links: allowed values 0 - 2147483647
[  675.220920][T12437] bond1 (unregistering): Released all slaves
[  675.271200][T12441] bond23 (unregistering): Released all slaves
[  675.293052][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48800: abort rx timeout. Force session deactivation
[  675.343750][T10205] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  675.406086][T12454] xt_NETMAP: bad MAP_IPS.
[  675.524993][T12458] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  675.562485][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb49000: rx timeout, send abort
[  675.652959][ T5001] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  676.062615][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb49000: abort rx timeout. Force session deactivation
[  676.067021][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bcd40000: rx timeout, send abort
[  676.082147][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bcd40000: connection exists (fe ff). last cmd: 20
[  676.332046][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48c00: rx timeout, send abort
[  676.348269][T12458] validate_nla: 2 callbacks suppressed
[  676.350963][T12458] netlink: 'syz.3.1568': attribute type 4 has an invalid length.
[  676.354572][T12458] netlink: 'syz.3.1568': attribute type 5 has an invalid length.
[  676.355539][T12458] __nla_validate_parse: 12 callbacks suppressed
[  676.355548][T12458] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1568'.
[  676.424698][T12475] netlink: 'syz.3.1570': attribute type 30 has an invalid length.
[  676.484681][T12477] bond23 (unregistering): Released all slaves
[  676.511281][T12484] C: renamed from veth1_to_team (while UP)
[  676.521205][T12484] netlink: 'syz.3.1572': attribute type 1 has an invalid length.
[  676.530128][T12484] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1572'.
[  676.536074][T12484] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  676.738002][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1569'.
[  676.738050][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1569'.
[  676.738091][T12499] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1569'.
[  676.820990][T12501] xt_CT: You must specify a L4 protocol and not use inversions on it
[  676.828781][T12501] netlink: 'syz.4.1576': attribute type 13 has an invalid length.
[  676.832179][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb48c00: abort rx timeout. Force session deactivation
[  676.836012][T12501] netlink: 'syz.4.1576': attribute type 58 has an invalid length.
[  676.839198][T12501] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1576'.
[  676.886942][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  676.890298][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  676.895513][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  676.899423][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'.
[  677.106465][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657800: rx timeout, send abort
[  677.155005][T12519] netlink: 'syz.4.1580': attribute type 10 has an invalid length.
[  677.304777][T12523] Cannot find set identified by id 0 to match
[  677.329710][T12525] ieee802154 phy1 wpan1: encryption failed: -22
[  677.355739][T12520] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  677.358999][T12520] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  677.366345][T12520] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  677.546150][T12531] netlink: 'syz.4.1583': attribute type 1 has an invalid length.
[  677.592739][T12531] 8021q: adding VLAN 0 to HW filter on device bond23
[  677.606581][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bc453400: rx timeout, send abort
[  677.606671][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657800: abort rx timeout. Force session deactivation
[  677.614703][T12531] bond23: (slave geneve3): making interface the new active one
[  677.616123][T12531] bond23: (slave geneve3): Enslaving as an active interface with an up link
[  677.623150][ T8122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.623185][ T8122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.623209][ T8122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.623230][ T8122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.627423][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bc453400: connection exists (fe ff). last cmd: 20
[  677.673756][T12538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.877358][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657c00: rx timeout, send abort
[  678.264820][T12559] syzkaller1: entered promiscuous mode
[  678.267175][T12559] syzkaller1: entered allmulticast mode
[  678.280119][T12559] tipc: Started in network mode
[  678.282736][T12559] tipc: Node identity 22c88252a2b7, cluster identity 4711
[  678.286195][T12559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  678.319914][T12559] syzkaller0: entered promiscuous mode
[  678.322742][T12559] syzkaller0: entered allmulticast mode
[  678.326199][T12559] tipc: Resetting bearer <eth:syzkaller0>
[  678.341222][T12558] tipc: Resetting bearer <eth:syzkaller0>
[  678.377474][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657c00: abort rx timeout. Force session deactivation
[  678.645835][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656000: rx timeout, send abort
[  678.683789][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  679.145966][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656000: abort rx timeout. Force session deactivation
[  679.146100][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bc763400: rx timeout, send abort
[  679.156253][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bc763400: connection exists (fe ff). last cmd: 20
[  679.406263][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656400: rx timeout, send abort
[  679.873341][T12558] tipc: Disabling bearer <eth:syzkaller0>
[  679.889333][T12567] batman_adv: batadv0: Adding interface: wlan1
[  679.892238][T12567] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  679.892258][T12567] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[  679.892661][ T5707] tipc: Node number set to 2155840082
[  679.907256][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656400: abort rx timeout. Force session deactivation
[  679.996948][T12574] bond15: (slave bond_slave_1): Device is not bonding slave
[  679.997113][T12574] bond15: option active_slave: invalid value (bond_slave_1)
[  680.004810][T12574] bond15 (unregistering): Released all slaves
[  680.020210][T12577] netlink: 'syz.4.1595': attribute type 30 has an invalid length.
[  680.068013][T12577] vxlan1: entered promiscuous mode
[  680.070715][T12577] vxlan1: entered allmulticast mode
[  680.084576][T12580] netlink: 'syz.4.1595': attribute type 30 has an invalid length.
[  680.127432][T12580] vxlan1: entered promiscuous mode
[  680.127497][T12580] vxlan1: entered allmulticast mode
[  680.170553][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657000: rx timeout, send abort
[  680.510999][T12617] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  680.618879][T12625] syzkaller1: entered promiscuous mode
[  680.618943][T12625] syzkaller1: entered allmulticast mode
[  680.670687][    C1] vcan0: j1939_tp_rxtimer: 0xffff888168a02800: rx timeout, send abort
[  680.670750][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb657000: abort rx timeout. Force session deactivation
[  680.678999][T12627] 8021q: adding VLAN 0 to HW filter on device bond15
[  680.684017][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888168a02800: connection exists (fe ff). last cmd: 20
[  680.714854][T12627] macvlan0: entered promiscuous mode
[  680.714916][T12627] macvlan0: entered allmulticast mode
[  680.715512][T12627] bond15: entered allmulticast mode
[  680.715574][T12627] bond15: entered promiscuous mode
[  680.717573][T12627] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  680.719376][T12627] team0: Port device macvlan0 added
[  680.756495][T12627] bond15: (slave ip6gretap1): making interface the new active one
[  680.756545][T12627] ip6gretap1: entered promiscuous mode
[  680.756659][T12627] ip6gretap1: entered allmulticast mode
[  680.768243][T12627] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link
[  680.934026][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655000: rx timeout, send abort
[  681.106293][T12659] syzkaller0: entered promiscuous mode
[  681.109234][T12659] syzkaller0: entered allmulticast mode
[  681.421152][T12672] __nla_validate_parse: 22 callbacks suppressed
[  681.421240][T12672] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1625'.
[  681.430346][T12679] bond16: (slave bond_slave_1): Device is not bonding slave
[  681.434158][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655000: abort rx timeout. Force session deactivation
[  681.438480][T12679] bond16: option active_slave: invalid value (bond_slave_1)
[  681.445329][T12679] bond16 (unregistering): Released all slaves
[  681.486275][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1623'.
[  681.525294][T12675] 8021q: adding VLAN 0 to HW filter on device bond1
[  681.529018][T12672] validate_nla: 2 callbacks suppressed
[  681.531683][T12672] netlink: 'syz.4.1625': attribute type 3 has an invalid length.
[  681.577619][T12689] xt_NETMAP: bad MAP_IPS.
[  681.641572][T12694] netlink: 'syz.6.1628': attribute type 1 has an invalid length.
[  681.648200][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'.
[  681.690021][T12701] syzkaller0: left promiscuous mode
[  681.690081][T12701] syzkaller0: left allmulticast mode
[  681.699430][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb654000: rx timeout, send abort
[  681.758643][T12704] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1632'.
[  681.785765][T12699] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check.
[  681.796938][T12706] bond2: (slave gretap2): making interface the new active one
[  681.799615][T12706] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  681.812436][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'.
[  681.815581][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'.
[  681.818707][T12709] netlink: 'syz.3.1633': attribute type 6 has an invalid length.
[  681.821546][T12709] netlink: 'syz.3.1633': attribute type 5 has an invalid length.
[  681.842968][ T8232] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  681.843052][ T8232] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  681.843121][ T8232] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  681.843166][ T8232] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  681.956328][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'.
[  681.960196][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'.
[  681.963985][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'.
[  682.049259][T12730] syzkaller0: entered promiscuous mode
[  682.049308][T12730] syzkaller0: entered allmulticast mode
[  682.054332][T12727] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1639'.
[  682.115279][T12735] netlink: 'syz.3.1643': attribute type 11 has an invalid length.
[  682.199540][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb654000: abort rx timeout. Force session deactivation
[  682.203888][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb4bac00: rx timeout, send abort
[  682.210793][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bb4bac00: connection exists (fe ff). last cmd: 20
[  682.243912][T12751] bond17: (slave bond_slave_1): Device is not bonding slave
[  682.248947][T12751] bond17: option active_slave: invalid value (bond_slave_1)
[  682.256210][T12751] bond17 (unregistering): Released all slaves
[  682.460848][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655400: rx timeout, send abort
[  682.692454][ T5603] Bluetooth: hci3: command 0x0406 tx timeout
[  682.960979][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655400: abort rx timeout. Force session deactivation
[  683.118495][T12803] smc: net device lo applied user defined pnetid SYZ2
[  683.123018][T12803] smc: net device lo erased user defined pnetid SYZ2
[  683.232275][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656c00: rx timeout, send abort
[  683.334862][T12816] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  683.375532][T12822] xt_hashlimit: size too large, truncated to 1048576
[  683.494748][T12826] bridge_slave_0 (unregistering): left allmulticast mode
[  683.498106][T12826] bridge_slave_0 (unregistering): left promiscuous mode
[  683.501156][T12826] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.638652][T12840] bond3: (slave bond_slave_1): Device is not our slave
[  683.642380][T12840] bond3: option active_slave: invalid value (bond_slave_1)
[  683.649090][T12840] bond3 (unregistering): Released all slaves
[  683.723516][T12846] netlink: 'syz.3.1668': attribute type 10 has an invalid length.
[  683.732390][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb656c00: abort rx timeout. Force session deactivation
[  683.732537][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b7c5d800: rx timeout, send abort
[  683.759210][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881b7c5d800: connection exists (fe ff). last cmd: 20
[  683.840118][   T33] audit: type=1804 audit(1788972082.831:4): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1671" name="/newroot/374/cgroup.controllers" dev="tmpfs" ino=1938 res=1 errno=0
[  683.849013][   T33] audit: type=1800 audit(1788972082.841:5): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1671" name="cgroup.controllers" dev="tmpfs" ino=1938 res=0 errno=0
[  684.007760][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655800: rx timeout, send abort
[  684.185954][T12864] tunl0: Caught tx_queue_len zero misconfig
[  684.407136][T12913] xt_NETMAP: bad MAP_IPS.
[  684.507877][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb655800: abort rx timeout. Force session deactivation
[  684.536626][T12927] netlink: 'syz.6.1694': attribute type 3 has an invalid length.
[  684.587021][T12929] netlink: 'syz.6.1695': attribute type 10 has an invalid length.
[  684.590395][T12929] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  684.597905][T12929] openvswitch: netlink: Key type 226 is out of range max 32
[  684.625590][T12925] ipt_ah: unknown flags FF
[  684.776234][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8689800: rx timeout, send abort
[  684.856608][T12951] netlink: 'syz.6.1704': attribute type 3 has an invalid length.
[  684.943236][T12961] dvmrp8: entered allmulticast mode
[  685.089821][T12968] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn
[  685.099082][T12970] netlink: 'syz.3.1712': attribute type 3 has an invalid length.
[  685.130497][T12972] netlink: 'syz.3.1713': attribute type 1 has an invalid length.
[  685.151006][T12972] bond17: entered promiscuous mode
[  685.151314][T12972] 8021q: adding VLAN 0 to HW filter on device bond17
[  685.179365][T12972] vlan0: entered allmulticast mode
[  685.179418][T12972] bond17: entered allmulticast mode
[  685.203723][T12972] bond17: (slave bridge6): making interface the new active one
[  685.203769][T12972] bridge6: entered promiscuous mode
[  685.203866][T12972] bridge6: entered allmulticast mode
[  685.209643][T12972] bond17: (slave bridge6): Enslaving as an active interface with an up link
[  685.276333][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8689800: abort rx timeout. Force session deactivation
[  685.277314][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881a9e3e800: rx timeout, send abort
[  685.295609][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881a9e3e800: connection exists (fe ff). last cmd: 20
[  685.331722][T12982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  685.534708][T13008] bond3: entered promiscuous mode
[  685.536519][T13008] bond3: entered allmulticast mode
[  685.545609][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8688800: rx timeout, send abort
[  685.589775][T13016] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  685.615352][   T33] audit: type=1804 audit(1788972084.611:6): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1730" name="/newroot/100/cgroup.controllers" dev="tmpfs" ino=523 res=1 errno=0
[  685.616830][   T33] audit: type=1800 audit(1788972084.611:7): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1730" name="cgroup.controllers" dev="tmpfs" ino=523 res=0 errno=0
[  685.724492][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  685.737821][T13032] bridge0: left allmulticast mode
[  685.753254][T13032] bridge0: port 1(vlan1) entered blocking state
[  685.754610][T13032] bridge0: port 1(vlan1) entered disabled state
[  685.754737][T13032] vlan1: entered allmulticast mode
[  685.754763][T13032] geneve0: entered allmulticast mode
[  685.757336][T13032] vlan1: entered promiscuous mode
[  685.757345][T13032] geneve0: entered promiscuous mode
[  685.789185][T13036] C: renamed from veth1_to_team (while UP)
[  686.045744][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b8688800: abort rx timeout. Force session deactivation
[  686.312132][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7c8400: rx timeout, send abort
[  686.683894][T13048] __nla_validate_parse: 101 callbacks suppressed
[  686.683980][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  686.812202][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bf3bf400: rx timeout, send abort
[  686.812302][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7c8400: abort rx timeout. Force session deactivation
[  686.833503][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bf3bf400: connection exists (fe ff). last cmd: 20
[  687.083541][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7ca400: rx timeout, send abort
[  687.583657][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7ca400: abort rx timeout. Force session deactivation
[  687.843940][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7cb400: rx timeout, send abort
[  688.344046][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7cb400: abort rx timeout. Force session deactivation
[  688.344149][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bb2c9800: rx timeout, send abort
[  688.355283][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881bb2c9800: connection exists (fe ff). last cmd: 20
[  688.605293][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7ca800: rx timeout, send abort
[  689.105391][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7ca800: abort rx timeout. Force session deactivation
[  689.364907][T13062] validate_nla: 4 callbacks suppressed
[  689.365000][T13062] netlink: 'syz.3.1744': attribute type 30 has an invalid length.
[  689.369683][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7cb000: rx timeout, send abort
[  689.413468][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1747'.
[  689.449866][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1747'.
[  689.502250][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'.
[  689.507315][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'.
[  689.510204][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'.
[  689.519189][T13073] netlink: 'syz.4.1748': attribute type 1 has an invalid length.
[  689.557851][T13073] 8021q: adding VLAN 0 to HW filter on device bond24
[  689.567484][T13073] 8021q: adding VLAN 0 to HW filter on device team0
[  689.573890][T13073] bond24: (slave team0): Enslaving as a backup interface with a down link
[  689.679950][T13095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1755'.
[  689.774382][T13104] netlink: 'syz.4.1759': attribute type 6 has an invalid length.
[  689.774439][T13104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'.
[  689.781583][T13106] netlink: 'syz.4.1759': attribute type 6 has an invalid length.
[  689.781629][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'.
[  689.848793][T13110] netlink: 400 bytes leftover after parsing attributes in process `syz.3.1760'.
[  689.869754][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bd7cb000: abort rx timeout. Force session deactivation
[  689.870880][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb7e000: rx timeout, send abort
[  689.927671][T13118] netlink: 'syz.3.1764': attribute type 14 has an invalid length.
[  689.930179][T13118] netlink: 'syz.3.1764': attribute type 13 has an invalid length.
[  690.230264][T13148] netlink: 'syz.3.1774': attribute type 1 has an invalid length.
[  690.234009][T13148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  690.250139][T13150] syzkaller0: entered promiscuous mode
[  690.250185][T13150] syzkaller0: entered allmulticast mode
[  690.326318][T13155] netlink: 'syz.6.1777': attribute type 1 has an invalid length.
[  690.370952][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bfb7e000: abort rx timeout. Force session deactivation
[  690.376653][T13152] nbd: must specify a size in bytes for the device
[  690.395092][T13160] syzkaller0: entered promiscuous mode
[  690.395126][T13160] syzkaller0: entered allmulticast mode
[  690.407991][T13155] veth5: entered allmulticast mode
[  690.537554][T13168] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  690.605670][T13174] bond5: (slave bond_slave_1): Device is not our slave
[  690.607932][T13174] bond5: option active_slave: invalid value (bond_slave_1)
[  690.611127][T13174] bond5 (unregistering): Released all slaves
[  690.622895][ T5653] bond21: (slave syz_tun): link status definitely down, disabling slave
[  690.703790][T13184] netlink: 'syz.3.1787': attribute type 1 has an invalid length.
[  690.718706][T13184] 8021q: adding VLAN 0 to HW filter on device bond19
[  690.792443][T13192] bridge0: left promiscuous mode
[  690.793370][T13192] vlan1: left promiscuous mode
[  690.793413][T13192] geneve0: left promiscuous mode
[  690.904736][T13207] xt_NETMAP: bad MAP_IPS.
[  691.035503][T13222] syzkaller0: entered promiscuous mode
[  691.035550][T13222] syzkaller0: entered allmulticast mode
[  691.314106][T13248] bond25 (unregistering): Released all slaves
[  691.328305][T13256] syzkaller0: entered promiscuous mode
[  691.328353][T13256] syzkaller0: entered allmulticast mode
[  691.380923][T13259] netlink: 'syz.3.1809': attribute type 34 has an invalid length.
[  691.380977][T13259] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-alb(6)
[  692.263434][T13266] __nla_validate_parse: 26 callbacks suppressed
[  692.266698][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'.
[  692.300879][T13266] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1810'.
[  692.517236][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1816'.
[  692.529598][T13287] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1817'.
[  693.018354][T13309] ip_tables: iptables: counters copy to user failed while replacing table
[  693.036719][T13313] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1824'.
[  693.097207][T13315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  693.100702][T13315] vcan0: entered promiscuous mode
[  693.108107][T13315] bond0: entered promiscuous mode
[  693.108150][T13315] bond_slave_0: entered promiscuous mode
[  693.108250][T13315] bond_slave_1: entered promiscuous mode
[  693.109783][T13315] team0: entered promiscuous mode
[  693.109792][T13315] team_slave_0: entered promiscuous mode
[  693.109879][T13315] team_slave_1: entered promiscuous mode
[  693.136858][T13315] nlmon0: entered promiscuous mode
[  693.145267][T13315] batadv0: entered promiscuous mode
[  693.164583][T13315] vxcan0: entered promiscuous mode
[  693.172770][T13315] vxcan1: entered promiscuous mode
[  693.177719][T13315] veth0: entered promiscuous mode
[  693.185886][T13315] veth1: entered promiscuous mode
[  693.209432][T13315] wg0: entered promiscuous mode
[  693.218978][T13315] wg1: entered promiscuous mode
[  693.229125][T13315] wg2: entered promiscuous mode
[  693.233692][T13315] veth1_to_bridge: entered promiscuous mode
[  693.260835][T13315] veth0_to_bond: entered promiscuous mode
[  693.269912][T13315] veth1_to_bond: entered promiscuous mode
[  693.301156][T13315] veth0_to_team: entered promiscuous mode
[  693.350903][T13315] C: entered promiscuous mode
[  693.382620][T13315] veth0_to_batadv: entered promiscuous mode
[  693.388933][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.395394][T13315] batadv_slave_0: entered promiscuous mode
[  693.407083][T13315] veth1_to_batadv: entered promiscuous mode
[  693.419917][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.419971][T13315] batadv_slave_1: entered promiscuous mode
[  693.432386][T13315] xfrm0: entered promiscuous mode
[  693.443551][T13315] veth0_to_hsr: entered promiscuous mode
[  693.459616][T13315] veth1_to_hsr: entered promiscuous mode
[  693.475734][T13315] hsr0: entered promiscuous mode
[  693.483120][T13315] veth1_virt_wifi: entered promiscuous mode
[  693.494327][T13330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  693.495534][T13315] veth0_virt_wifi: entered promiscuous mode
[  693.513387][T13315] virt_wifi0: entered promiscuous mode
[  693.535137][T13315] macvtap0: entered promiscuous mode
[  693.543151][T13315] macsec0: entered promiscuous mode
[  693.554055][T13315] geneve0: entered promiscuous mode
[  693.565106][T13315] geneve1: entered promiscuous mode
[  693.577565][T13315] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  693.581034][T13315] ipip0: entered promiscuous mode
[  693.581142][T13315] vxlan0: entered promiscuous mode
[  693.581236][T13315] bridge1: entered promiscuous mode
[  693.581433][T13315] : entered promiscuous mode
[  693.593948][T13315] netdevsim netdevsim6 eth0: entered promiscuous mode
[  693.597419][T13315] netdevsim netdevsim6 eth1: entered promiscuous mode
[  693.599918][T13315] netdevsim netdevsim6 eth2: entered promiscuous mode
[  693.602785][T13315] netdevsim netdevsim6 eth3: entered promiscuous mode
[  693.602894][T13315] gre1: entered promiscuous mode
[  693.607077][T13315] geneve2: entered promiscuous mode
[  693.610402][T13315] gretap1: entered promiscuous mode
[  693.611962][T13315] syztnl0: entered promiscuous mode
[  693.614135][T13315] bond1: entered promiscuous mode
[  693.615121][T13315] veth2: entered promiscuous mode
[  693.615231][T13315] veth3: entered promiscuous mode
[  693.615402][T13315] bond2: entered promiscuous mode
[  693.615412][T13315] gretap2: entered promiscuous mode
[  693.616730][T13315] gre2: entered promiscuous mode
[  693.616937][T13315] dvmrp8: entered promiscuous mode
[  693.617673][T13315] mac80211_hwsim hwsim24 wlan2: entered promiscuous mode
[  693.617940][T13315] syztnl1: entered promiscuous mode
[  693.618071][T13315] ip6erspan0: entered promiscuous mode
[  693.618147][T13315] bond4: entered promiscuous mode
[  693.618226][T13315] veth4: entered promiscuous mode
[  693.618331][T13315] veth5: entered promiscuous mode
[  693.624748][ T5653] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.624769][ T5653] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.624795][ T5653] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.624810][ T5653] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.624831][ T5653] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.624846][ T5653] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.624873][ T5653] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  693.624887][ T5653] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  693.660620][T13329] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  693.660681][T13329] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  693.789584][T13339] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  694.035417][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'.
[  694.798954][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1833'.
[  694.798991][T13356] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1833'.
[  695.023659][T13364] bridge_slave_0: left promiscuous mode
[  695.159233][T13364] mac80211_hwsim hwsim13 wlan0: left promiscuous mode
[  695.159285][T13364] mac80211_hwsim hwsim13 wlan0: left allmulticast mode
[  695.210270][T13364] veth3: left allmulticast mode
[  695.221443][T13364] veth5: left allmulticast mode
[  695.235512][T13364] veth7: left allmulticast mode
[  695.246855][T13364] bond7: left promiscuous mode
[  695.251575][T13364] bond11: left promiscuous mode
[  695.254059][T13364] bridge3: left promiscuous mode
[  695.254319][T13364] bridge4: left promiscuous mode
[  695.260952][T13364] tipc: Resetting bearer <eth:syzkaller0>
[  695.263147][T13364] syzkaller0: left promiscuous mode
[  695.263157][T13364] syzkaller0: left allmulticast mode
[  695.268077][T13364] bond12: left promiscuous mode
[  695.268124][T13364] ip6gre3: left promiscuous mode
[  695.292884][T13364] bond15: left allmulticast mode
[  695.292931][T13364] ip6gretap1: left allmulticast mode
[  695.292963][T13364] bond15: left promiscuous mode
[  695.292969][T13364] ip6gretap1: left promiscuous mode
[  695.294719][T13364] macvlan0: left promiscuous mode
[  695.294729][T13364] macvlan0: left allmulticast mode
[  695.319804][T13364] bond17: left promiscuous mode
[  695.319855][T13364] bridge6: left promiscuous mode
[  695.329389][T13364] vlan0: left allmulticast mode
[  695.329472][T13364] bond17: left allmulticast mode
[  695.329616][T13364] bridge6: left allmulticast mode
[  695.361878][ T8122] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  695.361929][ T8122] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  695.362101][ T8122] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  695.362250][ T8122] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  695.362323][ T8122] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  695.362396][ T8122] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  695.362510][ T8122] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  695.362599][ T8122] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  695.362672][ T8122] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  695.362749][ T8122] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  695.362906][ T8122] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  695.362980][ T8122] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  695.435239][T13373] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1839'.
[  695.484633][T13377] validate_nla: 2 callbacks suppressed
[  695.484686][T13377] netlink: 'syz.4.1841': attribute type 21 has an invalid length.
[  695.484711][T13377] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1841'.
[  695.484752][T13377] netlink: 'syz.4.1841': attribute type 5 has an invalid length.
[  695.650337][T13392] bond5: (slave bond_slave_1): Device is not our slave
[  695.650374][T13392] bond5: option active_slave: invalid value (bond_slave_1)
[  695.651576][T13388] netlink: 'syz.3.1846': attribute type 21 has an invalid length.
[  695.651589][T13388] IPv6: NLM_F_CREATE should be specified when creating new route
[  695.662485][T13392] bond5 (unregistering): Released all slaves
[  695.729033][T13402] xt_NETMAP: bad MAP_IPS.
[  695.770893][T13410] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[  695.770899][T13411] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[  695.771240][T13411] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[  695.779534][T13410] netlink: 'syz.3.1852': attribute type 21 has an invalid length.
[  695.944852][T13424] bond20: (slave bond_slave_1): Device is not bonding slave
[  695.944899][T13424] bond20: option active_slave: invalid value (bond_slave_1)
[  695.948822][T13424] bond20 (unregistering): Released all slaves
[  696.055039][ T5603] Bluetooth: hci2: Malformed HCI Event
[  696.094444][T13447] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  696.097428][T13447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  696.106504][T13448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  696.202649][T13451] 0: renamed from hsr0
[  696.207058][T13451] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.207309][T13451] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  696.208929][T13451] 0: entered allmulticast mode
[  696.208939][T13451] hsr_slave_0: entered allmulticast mode
[  696.208947][T13451] hsr_slave_1: entered allmulticast mode
[  696.209784][T13451] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  699.051920][T13440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  699.194696][T13471] bond25 (unregistering): Released all slaves
[  699.205170][T13467] netlink: 'syz.6.1869': attribute type 13 has an invalid length.
[  699.205279][T13466] netlink: 'syz.6.1869': attribute type 13 has an invalid length.
[  699.205291][T13466] netlink: 'syz.6.1869': attribute type 58 has an invalid length.
[  699.205296][T13466] __nla_validate_parse: 18 callbacks suppressed
[  699.205300][T13466] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1869'.
[  699.218567][T13467] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1869'.
[  699.222123][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.222175][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.228315][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.228336][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.228510][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.228524][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1871'.
[  699.291642][T13475] bond20: entered allmulticast mode
[  699.304047][T13475] wireguard0: entered promiscuous mode
[  699.307476][T13475] wireguard0: entered allmulticast mode
[  699.309663][T13475] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address
[  699.309945][T13475] bond20: (slave wireguard0): Error -95 calling set_mac_address
[  699.329430][T13474] wireguard0: entered promiscuous mode
[  699.332072][T13474] wireguard0: entered allmulticast mode
[  699.333072][T13474] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address
[  699.333318][T13474] bond20: (slave wireguard0): Error -95 calling set_mac_address
[  699.498913][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1874'.
[  699.548014][T13501] xt_HMARK: spi-set and port-set can't be combined
[  699.555449][T13501] ipvlan0: entered promiscuous mode
[  699.558224][T13501] bridge0: port 2(ipvlan0) entered blocking state
[  699.560547][T13501] bridge0: port 2(ipvlan0) entered disabled state
[  699.564718][T13501] ipvlan0: entered allmulticast mode
[  699.566548][T13501] bridge0: entered allmulticast mode
[  699.569668][T13501] ipvlan0: left allmulticast mode
[  699.571734][T13501] bridge0: left allmulticast mode
[  699.603361][T13508] xt_HMARK: spi-set and port-set can't be combined
[  699.617884][T13506] ipvlan0: entered promiscuous mode
[  699.618236][T13506] bridge0: port 2(ipvlan0) entered blocking state
[  699.618308][T13506] bridge0: port 2(ipvlan0) entered disabled state
[  699.618389][T13506] ipvlan0: entered allmulticast mode
[  699.618396][T13506] bridge0: entered allmulticast mode
[  699.622313][T13506] ipvlan0: left allmulticast mode
[  699.622321][T13506] bridge0: left allmulticast mode
[  699.713488][T13512] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1879'.
[  700.505977][T13575] validate_nla: 4 callbacks suppressed
[  700.506523][T13575] netlink: 'syz.3.1895': attribute type 10 has an invalid length.
[  700.530849][T13578] netlink: zone id is out of range
[  700.530907][T13578] netlink: zone id is out of range
[  700.530947][T13578] netlink: zone id is out of range
[  700.530954][T13578] netlink: zone id is out of range
[  700.530959][T13578] netlink: zone id is out of range
[  700.530963][T13578] netlink: zone id is out of range
[  700.531155][T13578] netlink: zone id is out of range
[  700.531161][T13578] netlink: zone id is out of range
[  700.531166][T13578] netlink: zone id is out of range
[  700.531171][T13578] netlink: zone id is out of range
[  700.738385][T13588] 8021q: adding VLAN 0 to HW filter on device team0
[  700.740815][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.766939][T13588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  700.767009][T13588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  700.774812][   T10] bridge0: port 1(vlan1) entered blocking state
[  700.774890][   T10] bridge0: port 1(vlan1) entered listening state
[  700.776139][   T10] geneve0: entered promiscuous mode
[  700.802023][ T8122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  700.811928][ T8122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  700.811987][ T8122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  700.812020][ T8122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.880765][T13591] netlink: 'syz.3.1900': attribute type 1 has an invalid length.
[  701.025659][T13596] lo speed is unknown, defaulting to 1000
[  701.278856][T13604] IPVS: Scheduler module ip_vs_sip not found
[  701.304341][T13603] netlink: 'syz.3.1904': attribute type 1 has an invalid length.
[  701.324119][ T5603] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  701.357713][T13603] 8021q: adding VLAN 0 to HW filter on device bond21
[  701.505558][T13626] : left promiscuous mode
[  701.521931][ T8232] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  701.522011][ T8232] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  701.522033][ T8232] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  701.522053][ T8232] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  701.954818][T13658] netlink: 'syz.6.1922': attribute type 5 has an invalid length.
[  702.194692][T13680] xt_NETMAP: bad MAP_IPS.
[  702.352974][T13690] bond22: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  702.382470][T13690] bond22 (unregistering): Released all slaves
[  702.641066][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.651003][T13710] sctp: [Deprecated]: syz.3.1937 (pid 13710) Use of int in max_burst socket option.
[  702.651003][T13710] Use struct sctp_assoc_value instead
[  702.793089][ T8232] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  702.793145][ T8232] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  702.793194][ T8232] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  702.793226][ T8232] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  702.848368][T13727] team0: entered allmulticast mode
[  702.850578][T13727] team_slave_0: entered allmulticast mode
[  702.850626][T13727] team_slave_1: entered allmulticast mode
[  702.851293][T13727] 8021q: adding VLAN 0 to HW filter on device team0
[  702.851692][T13727] team0: Cannot enslave team device to itself
[  703.090231][T13745] lo speed is unknown, defaulting to 1000
[  703.518413][T13755] bond22: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  703.526219][T13755] bond22 (unregistering): Released all slaves
[  703.846248][T13773] netlink: 'syz.4.1959': attribute type 4 has an invalid length.
[  703.846428][T13776] netlink: 'syz.4.1959': attribute type 4 has an invalid length.
[  704.126743][T13801] macvlan0: entered promiscuous mode
[  704.128716][T13801] netlink: 'syz.3.1970': attribute type 1 has an invalid length.
[  704.131382][T13801] netlink: 'syz.3.1970': attribute type 2 has an invalid length.
[  704.261051][T13814] __nla_validate_parse: 33 callbacks suppressed
[  704.264380][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'.
[  704.275905][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1974'.
[  704.275952][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'.
[  704.394045][T13824] netlink: 'syz.6.1978': attribute type 9 has an invalid length.
[  704.487407][T13830] 8021q: adding VLAN 0 to HW filter on device bond22
[  704.487729][T13830] bridge0: port 2(bond22) entered blocking state
[  704.487803][T13830] bridge0: port 2(bond22) entered disabled state
[  704.487868][T13830] bond22: entered allmulticast mode
[  704.488897][T13830] bond22: entered promiscuous mode
[  704.488985][T13830] vlan1: entered promiscuous mode
[  704.489393][T13830] bridge0: port 2(bond22) entered blocking state
[  704.489438][T13830] bridge0: port 2(bond22) entered listening state
[  704.519447][T13840] veth1: entered promiscuous mode
[  704.521667][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1981'.
[  704.528816][ T6928] bridge0: port 2(bond22) entered disabled state
[  704.577066][T13846] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1984'.
[  704.613238][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'.
[  704.618773][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'.
[  704.724324][T13865] 8021q: VLANs not supported on gre0
[  704.780481][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'.
[  704.783489][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1992'.
[  704.783501][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1992'.
[  704.964834][T13906] bond23: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  704.971242][T13906] bond23 (unregistering): Released all slaves
[  705.174212][T13938] netlink: 'syz.3.2003': attribute type 39 has an invalid length.
[  705.411260][T13948] tap0: tun_chr_ioctl cmd 1074025677
[  705.411366][T13948] tap0: linktype set to 768
[  705.474600][T13952] syzkaller1: entered promiscuous mode
[  705.474661][T13952] syzkaller1: entered allmulticast mode
[  705.687555][T13962] netlink: 'syz.6.2010': attribute type 11 has an invalid length.
[  705.830526][T13967] netlink: 'syz.6.2012': attribute type 10 has an invalid length.
[  705.988421][T13972] syzkaller0: entered promiscuous mode
[  705.988470][T13972] syzkaller0: entered allmulticast mode
[  706.156226][T13995] netlink: 'syz.6.2019': attribute type 2 has an invalid length.
[  706.271978][T14000] macvlan0: entered allmulticast mode
[  706.272045][T14000] gretap0: entered allmulticast mode
[  706.291930][T13999] macvlan1: entered allmulticast mode
[  706.484635][T14010] bond5: entered promiscuous mode
[  706.487351][T14010] 8021q: adding VLAN 0 to HW filter on device bond5
[  706.518891][T14010] 8021q: adding VLAN 0 to HW filter on device bond5
[  706.525476][T14010] bond5: (slave sit1): The slave device specified does not support setting the MAC address
[  706.526066][T14010] bond5: (slave sit1): Error -95 calling set_mac_address
[  706.563888][T14015] netlink: 'syz.4.2023': attribute type 1 has an invalid length.
[  706.590866][T14015] bond25: entered promiscuous mode
[  706.597983][T14015] 8021q: adding VLAN 0 to HW filter on device bond25
[  706.658895][T14015] ipvlan0: entered allmulticast mode
[  706.658959][T14015] bond25: entered allmulticast mode
[  706.687882][T14015] ipvlan1: entered allmulticast mode
[  706.702889][T14015] bond25: (slave bridge6): making interface the new active one
[  706.705950][T14015] bridge6: entered promiscuous mode
[  706.708419][T14015] bridge6: entered allmulticast mode
[  706.715909][T14015] bond25: (slave bridge6): Enslaving as an active interface with an up link
[  706.766365][T14024] xt_CT: No such helper "netbios-ns"
[  707.245759][T14054] bond6: (slave bond_slave_1): Device is not our slave
[  707.245822][T14054] bond6: option active_slave: invalid value (bond_slave_1)
[  707.249579][T14054] bond6 (unregistering): Released all slaves
[  707.354604][T14058] bridge0: port 1(vlan1) entered disabled state
[  707.431562][T14058] tipc: Resetting bearer <eth:syzkaller0>
[  707.440139][T14058] syzkaller0: left allmulticast mode
[  707.465380][T14074] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  707.482020][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  707.482092][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.482152][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  707.482168][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.482238][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  707.482254][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.482304][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  707.482319][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  707.520349][T14076] xt_ipcomp: unknown flags 1D
[  707.562721][T14083] netlink: 'syz.3.2036': attribute type 10 has an invalid length.
[  707.675444][T14087] bond23: (slave bond_slave_1): Device is not bonding slave
[  707.678677][T14087] bond23: option active_slave: invalid value (bond_slave_1)
[  707.683362][T14087] bond23 (unregistering): Released all slaves
[  707.857535][T14099] net_ratelimit: 500 callbacks suppressed
[  707.858419][T14099] ip_tables: iptables: counters copy to user failed while replacing table
[  708.018050][T14109] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  708.200131][T14120] netlink: 'syz.6.2050': attribute type 1 has an invalid length.
[  708.215370][T14120] 8021q: adding VLAN 0 to HW filter on device bond6
[  708.231593][T14120] bond6: (slave veth7): Enslaving as an active interface with a down link
[  708.238044][T14120] lo: left promiscuous mode
[  708.239165][T14120] tunl0: left promiscuous mode
[  708.239818][T14120] gre0: left promiscuous mode
[  708.243759][T14120] erspan0: left promiscuous mode
[  708.244877][T14120] ip_vti0: left promiscuous mode
[  708.245503][T14120] ip6_vti0: left promiscuous mode
[  708.246304][T14120] sit0: left promiscuous mode
[  708.250315][T14120] ip6tnl0: left promiscuous mode
[  708.250960][T14120] ip6gre0: left promiscuous mode
[  708.252379][T14120] ip6gretap0: left promiscuous mode
[  708.253419][T14120] bridge0: left promiscuous mode
[  708.254779][T14120] vcan0: left promiscuous mode
[  708.255321][T14120] bond0: left promiscuous mode
[  708.255378][T14120] bond_slave_1: left promiscuous mode
[  708.255525][T14120] syz_tun: left promiscuous mode
[  708.256120][T14120] team0: left promiscuous mode
[  708.256358][T14120] team0: left allmulticast mode
[  708.256367][T14120] team_slave_0: left allmulticast mode
[  708.256375][T14120] team_slave_1: left allmulticast mode
[  708.257950][T14120] nlmon0: left promiscuous mode
[  708.258558][T14120] batadv0: left promiscuous mode
[  708.259344][T14120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.259684][T14120] vxcan0: left promiscuous mode
[  708.260322][T14120] vxcan1: left promiscuous mode
[  708.260737][T14120] veth0: left promiscuous mode
[  708.261342][T14120] veth1: left promiscuous mode
[  708.269562][T14120] wg0: left promiscuous mode
[  708.284480][T14120] wg1: left promiscuous mode
[  708.288385][T14120] wg2: left promiscuous mode
[  708.289235][T14120] veth1_to_bridge: left promiscuous mode
[  708.294544][T14120] veth0_to_bond: left promiscuous mode
[  708.296326][T14120] bond_slave_0: left promiscuous mode
[  708.296673][T14120] veth1_to_bond: left promiscuous mode
[  708.299156][T14120] veth0_to_team: left promiscuous mode
[  708.299673][T14120] team_slave_0: left promiscuous mode
[  708.302148][T14120] C: left promiscuous mode
[  708.302941][T14120] team_slave_1: left promiscuous mode
[  708.303676][T14120] veth0_to_batadv: left promiscuous mode
[  708.304400][T14120] batadv_slave_0: left promiscuous mode
[  708.304932][T14120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  708.305076][T14120] veth1_to_batadv: left promiscuous mode
[  708.305935][T14120] batadv_slave_1: left promiscuous mode
[  708.306287][T14120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.306442][T14120] xfrm0: left promiscuous mode
[  708.307504][T14120] veth0_to_hsr: left promiscuous mode
[  708.308573][T14120] veth1_to_hsr: left promiscuous mode
[  708.310156][T14120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  708.310169][T14120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  708.310201][T14120] hsr0: left promiscuous mode
[  708.310992][T14120] veth1_virt_wifi: left promiscuous mode
[  708.313934][T14120] veth0_virt_wifi: left promiscuous mode
[  708.316962][T14120] virt_wifi0: left promiscuous mode
[  708.316972][T14120] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  708.347610][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.347652][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.367550][T14120] 8021q: adding VLAN 0 to HW filter on device batadv1
[  708.370287][T14120] bond6: (slave batadv1): making interface the new active one
[  708.371404][T14120] batadv1: entered promiscuous mode
[  708.375168][T14120] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  708.423459][T14124] ipt_REJECT: ECHOREPLY no longer supported.
[  708.510193][T14126] netlink: 'syz.6.2052': attribute type 1 has an invalid length.
[  708.555029][T14141] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  708.591171][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  708.657175][T14143] syzkaller1: entered promiscuous mode
[  708.657234][T14143] syzkaller1: entered allmulticast mode
[  708.797662][T14156] netlink: 'syz.4.2058': attribute type 3 has an invalid length.
[  709.263526][T14126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  709.374974][T14159] syzkaller0: entered promiscuous mode
[  709.375024][T14159] syzkaller0: entered allmulticast mode
[  709.400909][T14160] bond7: (slave bond_slave_1): Device is not our slave
[  709.403409][T14160] bond7: option active_slave: invalid value (bond_slave_1)
[  709.406809][T14160] bond7 (unregistering): Released all slaves
[  709.479515][T14163] vlan0: entered promiscuous mode
[  709.481275][T14163] macvlan0: entered promiscuous mode
[  709.485914][T14163] gretap0: entered promiscuous mode
[  709.574978][T14171] xt_NETMAP: bad MAP_IPS.
[  709.598266][T14173] netlink: 'syz.3.2065': attribute type 1 has an invalid length.
[  709.627951][T14173] 8021q: adding VLAN 0 to HW filter on device bond23
[  709.631521][T14173] __nla_validate_parse: 39 callbacks suppressed
[  709.631640][T14173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2065'.
[  709.632041][T14173] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2065'.
[  709.680809][T14167] pim6reg: entered allmulticast mode
[  709.690088][T14167] pim6reg0: tun_chr_ioctl cmd 35111
[  709.734590][T14177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2066'.
[  710.065711][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'.
[  710.070000][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'.
[  710.074434][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'.
[  710.132503][T14195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2072'.
[  710.132569][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'.
[  710.136025][T14195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2072'.
[  710.136130][T14195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2072'.
[  710.194039][T14198] set match dimension is over the limit!
[  710.258295][T14204] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check.
[  710.604384][T14223] bond7: (slave bond_slave_1): Device is not our slave
[  710.606968][T14223] bond7: option active_slave: invalid value (bond_slave_1)
[  710.611271][T14223] bond7 (unregistering): Released all slaves
[  710.706050][T14227] netlink: 'syz.6.2080': attribute type 9 has an invalid length.
[  710.945900][T14239] bond7: option lp_interval: invalid value (0)
[  710.948070][T14239] bond7: option lp_interval: allowed values 1 - 2147483647
[  710.955309][T14239] bond7 (unregistering): Released all slaves
[  711.004309][T14242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  711.018031][T14242] batman_adv: batadv0: Adding interface: gretap2
[  711.025093][T14242] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.025266][T14242] batman_adv: batadv0: Interface activated: gretap2
[  711.185157][T14247] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  711.318803][T14264] netlink: 'syz.4.2093': attribute type 1 has an invalid length.
[  711.360113][T14264] bond26: option mode: invalid value (7)
[  711.363928][T14267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.370656][T14264] bond26 (unregistering): Released all slaves
[  711.400086][T14270] mac80211_hwsim hwsim21 wlan0: left allmulticast mode
[  711.403426][T14270] bridge1: left allmulticast mode
[  711.406140][T14270] bond3: left allmulticast mode
[  711.409070][T14270] macvlan0: left allmulticast mode
[  711.412603][T14270] macvlan1: left allmulticast mode
[  711.414901][T14270] gretap0: left allmulticast mode
[  711.539391][T14278] netlink: zone id is out of range
[  711.539438][T14278] netlink: zone id is out of range
[  711.539488][T14278] netlink: zone id is out of range
[  711.539516][T14278] netlink: zone id is out of range
[  711.539543][T14278] netlink: zone id is out of range
[  711.539571][T14278] netlink: zone id is out of range
[  711.699760][T14287] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  711.927044][T14291] xt_NETMAP: bad MAP_IPS.
[  712.005163][T14295] netlink: 'syz.3.2101': attribute type 3 has an invalid length.
[  712.131996][T14303] netlink: 'syz.3.2105': attribute type 4 has an invalid length.
[  712.135112][T14303] netlink: 'syz.3.2105': attribute type 4 has an invalid length.
[  712.265728][T14307] ip6t_rt: too many addresses specified
[  712.271513][T14307] netlink: 'syz.6.2106': attribute type 1 has an invalid length.
[  712.276514][T14309] syzkaller0: entered allmulticast mode
[  712.348591][T14315] batadv0: entered allmulticast mode
[  712.350760][T14315] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.218912][T14368] bond0: (slave syz_tun): Releasing backup interface
[  713.250408][T14368] dummy0: left allmulticast mode
[  713.255670][T14368] dummy0: left promiscuous mode
[  713.258222][T14368] bridge0: port 3(dummy0) entered disabled state
[  713.268697][T14368] bridge_slave_1: left allmulticast mode
[  713.277457][T14368] bridge_slave_1: left promiscuous mode
[  713.281478][T14368] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.310581][T14368] bond0: (slave bond_slave_0): Releasing backup interface
[  713.337095][T14368] bond0: (slave bond_slave_1): Releasing backup interface
[  713.358817][T14368] team0: Port device team_slave_0 removed
[  713.373698][T14368] team0: Port device team_slave_1 removed
[  713.376871][T14368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.381555][T14368] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.388966][T14368] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.393994][T14368] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.400069][T14368] net_ratelimit: 501 callbacks suppressed
[  713.408279][T14368] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  713.415767][T14370] team0: Mode changed to "activebackup"
[  713.426701][T14373] lo: Caught tx_queue_len zero misconfig
[  713.475055][T14377] 8021q: adding VLAN 0 to HW filter on device bond26
[  713.511357][T14382] netlink: 'syz.4.2128': attribute type 1 has an invalid length.
[  713.536065][T14382] veth12: entered allmulticast mode
[  713.541409][T14382] bond27: (slave veth12): Enslaving as an active interface with a down link
[  713.552342][T14382] bond27: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  713.559507][T14382] macvlan2: entered promiscuous mode
[  713.559568][T14382] macvlan2: entered allmulticast mode
[  713.560320][T14382] bond27: entered promiscuous mode
[  713.560761][T14382] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  713.569753][T14382] bond27: left promiscuous mode
[  713.668175][T14388] netlink: 'syz.4.2129': attribute type 34 has an invalid length.
[  713.671617][T14388] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  713.811228][T14396] bridge0: port 2(bond0) entered blocking state
[  713.814581][T14396] bridge0: port 2(bond0) entered disabled state
[  713.817564][T14396] bond0: entered allmulticast mode
[  713.822036][T14396] bond0: entered promiscuous mode
[  713.825859][T14396] vlan2: entered promiscuous mode
[  713.828105][T14396] geneve0: entered promiscuous mode
[  713.839642][T14396] netlink: 'syz.4.2131': attribute type 2 has an invalid length.
[  713.893478][T14396] hsr_slave_1 (unregistering): left promiscuous mode
[  714.046272][T14400] vlan2: entered promiscuous mode
[  714.048538][T14400] gretap0: entered promiscuous mode
[  714.086901][T14398] netlink: 'syz.4.2132': attribute type 32 has an invalid length.
[  714.113329][T14398] bond28: option coupled_control: invalid value (10)
[  714.118703][T14398] bond28 (unregistering): Released all slaves
[  714.571410][T14425] netlink: 'syz.4.2138': attribute type 10 has an invalid length.
[  714.575147][T14425] bond24: (slave team0): Releasing backup interface
[  714.580395][T14425] 8021q: adding VLAN 0 to HW filter on device team0
[  714.583822][T14425] team0: entered promiscuous mode
[  714.585646][T14425] team0: entered allmulticast mode
[  715.337223][T14430] __nla_validate_parse: 245 callbacks suppressed
[  715.337325][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'.
[  717.117011][T14405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  717.205850][ T5603] Bluetooth: hci2: SCO packet too small
[  717.258133][T14439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'.
[  717.304695][T14439] tipc: Resetting bearer <eth:syzkaller0>
[  717.321323][T14439] batman_adv: batadv0: Interface deactivated: gretap2
[  717.370782][T14449] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2143'.
[  717.370849][T14449] NCSI netlink: No device for ifindex 0
[  717.371351][T14449] netlink: 'syz.4.2143': attribute type 3 has an invalid length.
[  717.498479][T14451] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  717.623047][T14456] SET target dimension over the limit!
[  717.625918][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2145'.
[  717.629693][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2145'.
[  717.651475][T14458] set match dimension is over the limit!
[  717.711487][T14460] netlink: 'syz.4.2147': attribute type 1 has an invalid length.
[  717.714670][T14460] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2147'.
[  717.730699][T14460] syzkaller0: entered promiscuous mode
[  717.730742][T14460] syzkaller0: entered allmulticast mode
[  717.737907][T14460] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2147'.
[  717.776873][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2148'.
[  717.785569][T14462] batman_adv: batadv0: Adding interface: veth0
[  717.785751][T14462] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  717.785883][T14462] batman_adv: batadv0: Interface activated: veth0
[  717.802486][T14464] batman_adv: batadv0: Interface deactivated: veth0
[  717.805639][T14464] batman_adv: batadv0: Removing interface: veth0
[  717.858551][T14467] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  718.070039][T14481] bond28 (unregistering): Released all slaves
[  718.188366][T14490] set match dimension is over the limit!
[  718.285052][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'.
[  718.287470][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'.
[  718.723067][T14540] batadv_slave_1: entered promiscuous mode
[  718.752690][T14547] xfrm2: entered allmulticast mode
[  718.753253][T14539] batadv_slave_1: left promiscuous mode
[  718.844697][T14555] bond13: (slave lo): Releasing backup interface
[  718.847448][T14555] bond13: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  718.855064][T14555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  719.090689][T14572] bridge3: entered promiscuous mode
[  719.270116][T14580] syzkaller1: entered promiscuous mode
[  719.270206][T14580] syzkaller1: entered allmulticast mode
[  719.334978][T14581] vlan0: entered promiscuous mode
[  719.335041][T14581] ip6gretap0: entered promiscuous mode
[  719.452876][ T5653] batadv1: left promiscuous mode
[  721.578618][T14525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.807676][T14589] ip6gre1: entered promiscuous mode
[  721.807728][T14589] ip6gre1: entered allmulticast mode
[  722.066282][T14613] __nla_validate_parse: 5 callbacks suppressed
[  722.066758][T14613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2177'.
[  722.188307][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2180'.
[  722.193705][T14622] xt_TPROXY: Can be used only with -p tcp or -p udp
[  722.234891][T14622] gretap0: left promiscuous mode
[  722.281924][ T8123] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  722.281991][ T8123] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  722.282048][ T8123] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  722.282110][ T8123] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  722.282153][ T8123] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  722.282190][ T8123] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  722.282232][ T8123] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  722.282269][ T8123] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  722.418307][T14632] syzkaller0: entered promiscuous mode
[  722.418372][T14632] syzkaller0: entered allmulticast mode
[  722.569382][T14636] netlink: 'syz.6.2185': attribute type 13 has an invalid length.
[  722.731236][T14642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  723.083856][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'.
[  723.227254][T14667] bond24: (slave bond_slave_1): Device is not bonding slave
[  723.227316][T14667] bond24: option active_slave: invalid value (bond_slave_1)
[  723.233844][T14667] bond24 (unregistering): Released all slaves
[  723.275577][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'.
[  723.279420][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'.
[  723.534628][T14695] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2200'.
[  723.923030][T14715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  724.232097][   T13] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  724.232176][   T13] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  724.232232][   T13] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  724.232255][   T13] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  724.335776][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2205'.
[  724.421021][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'.
[  724.430814][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'.
[  724.430874][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'.
[  724.514444][T14745] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  724.640609][T14745] 8021q: adding VLAN 0 to HW filter on device bond29
[  724.643820][T14745] bond28: (slave bond29): Enslaving as an active interface with an up link
[  724.865375][T14767] bridge_slave_1: entered promiscuous mode
[  725.698551][T14784] netlink: 'syz.4.2221': attribute type 4 has an invalid length.
[  726.013433][T14810] syzkaller1: entered promiscuous mode
[  726.015298][T14810] syzkaller1: entered allmulticast mode
[  726.029286][T14818] bond0 (unregistering): Released all slaves
[  726.103821][T14830] vlan2: entered allmulticast mode
[  726.103868][T14830] bridge9: entered allmulticast mode
[  726.253967][T14853] set match dimension is over the limit!
[  726.401683][T14874] netlink: 'syz.3.2246': attribute type 1 has an invalid length.
[  726.452153][T14874] bond24: entered promiscuous mode
[  726.452382][T14874] 8021q: adding VLAN 0 to HW filter on device bond24
[  726.493104][T14881] sctp: [Deprecated]: syz.6.2249 (pid 14881) Use of struct sctp_assoc_value in delayed_ack socket option.
[  726.493104][T14881] Use struct sctp_sack_info instead
[  726.565597][T14874] bond24: (slave bridge10): making interface the new active one
[  726.565643][T14874] bridge10: entered promiscuous mode
[  726.570413][T14874] bond24: (slave bridge10): Enslaving as an active interface with an up link
[  726.683528][T14886] mac80211_hwsim hwsim21 wlan0: left promiscuous mode
[  726.774795][T14908] netlink: 'syz.3.2256': attribute type 4 has an invalid length.
[  726.796270][T14908] netlink: 'syz.3.2256': attribute type 4 has an invalid length.
[  726.860985][T14918] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  726.864601][T14721] hid-generic 0005:4C4A:0003.0002: item fetching failed at offset 0/1
[  726.864845][T14721] hid-generic 0005:4C4A:0003.0002: probe with driver hid-generic failed with error -22
[  726.974371][T14927] team_slave_1: Caught tx_queue_len zero misconfig
[  727.186110][T14943] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  727.271203][T14944] xt_ecn: cannot match TCP bits for non-tcp packets
[  727.742486][T14954] bridge0: entered promiscuous mode
[  727.742592][T14954] bridge0: entered allmulticast mode
[  727.785375][T14960] __nla_validate_parse: 68 callbacks suppressed
[  727.787684][T14960] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2269'.
[  727.797394][T14960] syzkaller0: entered promiscuous mode
[  727.799300][T14960] syzkaller0: entered allmulticast mode
[  727.830368][T14963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  727.846077][T14963] team0: No ports can be present during mode change
[  727.882928][T14965] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2271'.
[  727.971550][T14975] netlink: 'syz.6.2274': attribute type 1 has an invalid length.
[  727.978351][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'.
[  728.014837][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2274'.
[  728.070242][T14984] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2277'.
[  728.073449][T14985] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  728.160218][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2279'.
[  728.163600][ T5653] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  728.163715][ T5653] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  728.163737][ T5653] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  728.163749][ T5653] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  728.174000][T14997] bridge0: left allmulticast mode
[  728.176538][T14993] SET target dimension over the limit!
[  728.179749][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'.
[  728.237634][T15001] lo speed is unknown, defaulting to 1000
[  728.284184][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'.
[  728.389177][T15008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2284'.
[  728.425787][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2285'.
[  728.565609][T15026] netlink: 'syz.6.2287': attribute type 1 has an invalid length.
[  729.776505][T15062] ipvlan2: entered promiscuous mode
[  729.778448][T15062] team0: Device ipvlan2 failed to register rx_handler
[  729.865520][T15065] xt_limit: Overflow, try lower: 268435456/134217728
[  729.873906][T15067] syzkaller0: entered promiscuous mode
[  729.879338][T15067] syzkaller0: entered allmulticast mode
[  729.913310][T15065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  730.074097][T15064] tipc: Resetting bearer <eth:syzkaller0>
[  730.130977][T15064] tipc: Disabling bearer <eth:syzkaller0>
[  730.604057][ T5603] Bluetooth: hci2: command tx timeout
[  731.213235][T15106] gretap0: left promiscuous mode
[  731.262525][T15106] 8021q: adding VLAN 0 to HW filter on device team0
[  731.273708][T10206] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  731.374199][T15106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  731.374251][T15106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  731.375920][T15106] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  731.384120][T15110] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  731.402663][T14714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  731.424476][T15111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  731.434868][T15111] tipc: Resetting bearer <eth:syzkaller0>
[  731.443935][T15109] tipc: Disabling bearer <eth:syzkaller0>
[  731.642068][T14714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  731.746068][T15126] infiniband syz0: set down
[  731.746129][T15126] infiniband syz0: added bond0
[  731.760126][T15126] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  731.760200][T15126] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  731.760830][T15126] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  731.791651][T15126] RDS/IB: syz0: added
[  731.792576][T15126] smc: adding ib device syz0 with port count 1
[  731.792626][T15126] smc:    ib device syz0 port 1 has no pnetid
[  731.833797][T15148] netlink: 'syz.3.2318': attribute type 1 has an invalid length.
[  731.865071][T15148] bond25: entered promiscuous mode
[  731.867488][T15148] bond25: entered allmulticast mode
[  731.870349][T15148] 8021q: adding VLAN 0 to HW filter on device bond25
[  731.876334][ T8123] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.293783][T15158] xt_CONNSECMARK: invalid mode: 254
[  732.398580][T15163] bond9 (unregistering): Released all slaves
[  732.475380][T15181] bond9 (unregistering): Released all slaves
[  732.596890][T15195] set match dimension is over the limit!
[  732.705351][T15196] 8021q: adding VLAN 0 to HW filter on device bond10
[  732.709327][T15196] bond9: (slave bond10): Enslaving as an active interface with an up link
[  732.796216][T15226] __nla_validate_parse: 15 callbacks suppressed
[  732.800788][T15226] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2329'.
[  732.870919][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'.
[  732.871135][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'.
[  732.923003][ T5653] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.923153][ T5653] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.935693][T15249] x_tables: duplicate underflow at hook 4
[  732.946928][T15248] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2333'.
[  733.112684][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2339'.
[  733.393319][T15300] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2346'.
[  733.393368][T15300] nbd: illegal input index 65508
[  733.400103][T15300] netlink: 'syz.6.2346': attribute type 1 has an invalid length.
[  733.412856][T14714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  733.430933][T15300] 8021q: adding VLAN 0 to HW filter on device bond12
[  733.446998][T15300] bond0: (slave veth0_to_bond): Releasing active interface
[  733.462169][T15300] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  733.592380][T15306] netlink: 'syz.6.2348': attribute type 1 has an invalid length.
[  733.647278][T15306] veth9: entered allmulticast mode
[  733.657720][T15306] bond13: (slave veth9): Enslaving as an active interface with a down link
[  733.666119][T15306] bond12: (slave veth0_to_bond): Releasing backup interface
[  733.675862][T15306] bond13: (slave veth0_to_bond): making interface the new active one
[  733.680934][T15306] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  733.859793][T15317] netlink: 'syz.3.2350': attribute type 1 has an invalid length.
[  734.400606][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2354'.
[  734.428152][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2354'.
[  734.726478][T15368] netlink: 'syz.6.2356': attribute type 1 has an invalid length.
[  734.729403][T15367] netlink: 'syz.6.2356': attribute type 1 has an invalid length.
[  734.791203][T15368] veth11: entered promiscuous mode
[  734.954578][T15373] lo speed is unknown, defaulting to 1000
[  735.103574][T15379] Cannot find set identified by id 61443 to match
[  735.159635][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2358'.
[  735.235704][T15348] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  735.266599][T15386] netlink: 'syz.4.2361': attribute type 58 has an invalid length.
[  735.266646][T15386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2361'.
[  735.380472][T15391] pim6reg: entered allmulticast mode
[  735.387108][T15391] netlink: zone id is out of range
[  735.387154][T15391] netlink: zone id is out of range
[  735.388432][T15391] netlink: zone id is out of range
[  735.388437][T15391] netlink: zone id is out of range
[  735.388440][T15391] netlink: zone id is out of range
[  735.388443][T15391] netlink: zone id is out of range
[  735.388448][T15391] netlink: zone id is out of range
[  735.388451][T15391] netlink: zone id is out of range
[  735.388454][T15391] netlink: zone id is out of range
[  735.388456][T15391] netlink: zone id is out of range
[  735.415608][T15391] pim6reg: left allmulticast mode
[  735.686941][T15414] bond27: (slave bond_slave_1): Device is not bonding slave
[  735.690052][T15414] bond27: option active_slave: invalid value (bond_slave_1)
[  735.694018][T15414] bond27 (unregistering): Released all slaves
[  736.184854][T15449] xt_NETMAP: bad MAP_IPS.
[  736.379647][T15463] netlink: 'syz.6.2384': attribute type 2 has an invalid length.
[  736.384267][T15463] netlink: 'syz.6.2384': attribute type 5 has an invalid length.
[  736.448431][T14714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  736.547220][ T5603] Bluetooth: hci2: link tx timeout
[  736.547360][ T5603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  736.858314][T15495] C: renamed from veth1_to_team
[  736.863421][T15495] netlink: 'syz.4.2391': attribute type 4 has an invalid length.
[  736.981005][T15509] xt_NETMAP: bad MAP_IPS.
[  737.092108][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  737.325142][T14714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  737.885200][T15528] ref_ctr_offset mismatch. inode: 0xd2 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  737.954508][T15532] geneve4: entered promiscuous mode
[  738.002986][ T5653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 39727 - 0
[  738.006510][ T5653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 39727 - 0
[  738.006585][ T5653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 39727 - 0
[  738.006628][ T5653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 39727 - 0
[  738.047766][T15539] xt_CT: No such helper "netbios-ns"
[  738.057557][T15531] ipvlan2: entered allmulticast mode
[  738.059785][T15531] macvlan1: entered allmulticast mode
[  738.064679][T15539] __nla_validate_parse: 18 callbacks suppressed
[  738.067465][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2402'.
[  738.105203][T15547] tipc: Resetting bearer <eth:syzkaller0>
[  738.132981][T15547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.604334][ T4989] Bluetooth: hci2: command 0x0406 tx timeout
[  738.761679][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2404'.
[  738.938686][T15609] netlink: 'syz.3.2410': attribute type 1 has an invalid length.
[  738.938750][T15609] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2410'.
[  738.982456][T15614] sit0: entered promiscuous mode
[  738.984415][T15614] netlink: 'syz.3.2413': attribute type 1 has an invalid length.
[  738.986984][T15614] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2413'.
[  738.993939][T15614] netlink: 'syz.3.2413': attribute type 1 has an invalid length.
[  738.996575][T15614] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2413'.
[  739.010120][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'.
[  739.013328][T15620] netlink: 'syz.4.2411': attribute type 11 has an invalid length.
[  739.016119][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'.
[  739.019776][T15620] netlink: 'syz.4.2411': attribute type 11 has an invalid length.
[  739.032219][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2412'.
[  739.049763][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'.
[  739.049836][T15620] netlink: 'syz.4.2411': attribute type 11 has an invalid length.
[  739.049996][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'.
[  739.050009][T15620] netlink: 'syz.4.2411': attribute type 11 has an invalid length.
[  739.098412][T15621] bond14 (unregistering): Released all slaves
[  739.434508][T15657] xt_NETMAP: bad MAP_IPS.
[  739.434679][T15648] veth16: entered allmulticast mode
[  739.635848][ T9829] block nbd4: Receive control failed (result -32)
[  740.239667][T15721] xt_NETMAP: bad MAP_IPS.
[  740.306622][T15725] netlink: 'syz.3.2440': attribute type 1 has an invalid length.
[  740.721968][T15749] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  740.752843][ T5653] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  740.752935][ T5653] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  740.752990][ T5653] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  740.753034][ T5653] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  741.771456][T15782] xt_NETMAP: bad MAP_IPS.
[  741.981470][T15788] netlink: 'syz.6.2462': attribute type 30 has an invalid length.
[  741.984825][T15788] netlink: 'syz.6.2462': attribute type 30 has an invalid length.
[  742.085810][   T33] audit: type=1800 audit(1788972141.081:8): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2463" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3047 res=0 errno=0
[  742.289171][T15806] xt_NETMAP: bad MAP_IPS.
[  742.548625][T15830] xt_NETMAP: bad MAP_IPS.
[  742.577391][T15828] hsr_slave_1 (unregistering): left promiscuous mode
[  742.825591][T15858] xt_NETMAP: bad MAP_IPS.
[  742.904493][T15862] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  743.343164][T15885] __nla_validate_parse: 19 callbacks suppressed
[  743.343247][T15885] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2490'.
[  743.349450][T15882] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2490'.
[  743.380280][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'.
[  743.397017][T15888] net_ratelimit: 152 callbacks suppressed
[  743.397100][T15888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.473241][T15878] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  743.532374][T15879] 8021q: adding VLAN 0 to HW filter on device bond14
[  743.539875][T15885] bond14: entered promiscuous mode
[  743.539931][T15885] bond14: entered allmulticast mode
[  743.859637][T15902] veth14: entered promiscuous mode
[  743.859699][T15902] veth14: entered allmulticast mode
[  743.869420][T15902] team0: Device veth14 is up. Set it down before adding it as a team port
[  743.995771][T15908] set match dimension is over the limit!
[  744.124074][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'.
[  744.124135][T15913] validate_nla: 5 callbacks suppressed
[  744.126204][T15913] netlink: 'syz.4.2502': attribute type 1 has an invalid length.
[  744.244070][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'.
[  744.247221][T15919] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2505'.
[  744.252152][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  744.252305][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  744.272695][  T806] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  744.312272][  T806] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  744.908921][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'.
[  745.162306][  T806] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  745.252108][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  745.838247][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'.
[  745.838524][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'.
[  745.920685][T15946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'.
[  745.978699][T15937] ipvlan0: entered promiscuous mode
[  745.982301][T15937] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  745.982566][T15937] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  745.986224][T15937] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  746.014440][T15958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.035313][T15938] ipvlan0: entered promiscuous mode
[  746.035474][T15938] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  746.035487][T15938] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  746.036272][T15938] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  746.144604][T15962] xt_NETMAP: bad MAP_IPS.
[  746.452452][  T806] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  746.561979][  T806] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  747.163321][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  747.277899][T16019] netlink: 'syz.3.2531': attribute type 1 has an invalid length.
[  747.300382][T16019] bond27: entered promiscuous mode
[  747.300495][T16019] bond27: entered allmulticast mode
[  747.300762][T16019] 8021q: adding VLAN 0 to HW filter on device bond27
[  747.316658][T16019] erspan3: entered allmulticast mode
[  747.328920][T16019] bond27: (slave erspan3): making interface the new active one
[  747.328965][T16019] erspan3: entered promiscuous mode
[  747.332520][T16019] bond27: (slave erspan3): Enslaving as an active interface with an up link
[  747.417971][T16028] syzkaller1: entered allmulticast mode
[  747.495060][T16032] xt_NETMAP: bad MAP_IPS.
[  747.832933][T16050] bond15: (slave bond_slave_1): Device is not bonding slave
[  747.835542][T16050] bond15: option active_slave: invalid value (bond_slave_1)
[  747.840046][T16050] bond15 (unregistering): Released all slaves
[  747.951245][T16057] set match dimension is over the limit!
[  748.281910][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  748.294306][T16067] macvlan0: entered promiscuous mode
[  748.296795][T16067] gretap0: entered promiscuous mode
[  748.418026][T16082] __nla_validate_parse: 11 callbacks suppressed
[  748.420750][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'.
[  748.434360][T16082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'.
[  748.441209][T16082] SET target dimension over the limit!
[  748.453930][ T5653] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  748.453999][ T5653] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  748.454040][ T5653] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  748.454102][ T5653] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  748.537090][T16087] nbd3: detected capacity change from 0 to 63
[  748.539814][T16088] block nbd3: NBD_DISCONNECT
[  748.546196][T16088] block nbd3: Disconnected due to user request.
[  748.550240][T16088] block nbd3: shutting down sockets
[  748.562731][    C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.562942][    C1] Buffer I/O error on dev nbd3, logical block 0, async page read
[  748.564824][    C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.564858][    C1] Buffer I/O error on dev nbd3, logical block 1, async page read
[  748.564881][    C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.564902][    C1] Buffer I/O error on dev nbd3, logical block 2, async page read
[  748.564919][    C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.564940][    C1] Buffer I/O error on dev nbd3, logical block 3, async page read
[  748.565228][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  748.565242][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  748.565324][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  748.565334][   T99] Buffer I/O error on dev nbd3, logical block 2, async page read
[  748.565342][   T99] Buffer I/O error on dev nbd3, logical block 3, async page read
[  748.568318][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  748.568333][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  748.568339][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  748.569102][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.569219][   T99] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  748.569290][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  748.569354][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  748.569867][T13068] ldm_validate_partition_table(): Disk read failed.
[  748.575124][T13068] Dev nbd3: unable to read RDB block 0
[  748.575499][T13068]  nbd3: unable to read partition table
[  748.626726][T13068] ldm_validate_partition_table(): Disk read failed.
[  748.627396][T13068] Dev nbd3: unable to read RDB block 0
[  748.628296][T13068]  nbd3: unable to read partition table
[  748.646639][T13068] 
[  748.647702][T13068] ======================================================
[  748.650466][T13068] WARNING: possible circular locking dependency detected
[  748.653235][T13068] syzkaller #0 Not tainted
[  748.655046][T13068] ------------------------------------------------------
[  748.657744][T13068] udevd/13068 is trying to acquire lock:
[  748.659977][T13068] ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610
[  748.663818][T13068] 
[  748.663818][T13068] but task is already holding lock:
[  748.666779][T13068] ffffffff905fa500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  748.670993][T13068] 
[  748.670993][T13068] which lock already depends on the new lock.
[  748.670993][T13068] 
[  748.675042][T13068] 
[  748.675042][T13068] the existing dependency chain (in reverse order) is:
[  748.678568][T13068] 
[  748.678568][T13068] -> #8 (uevent_sock_mutex){+.+.}-{4:4}:
[  748.681687][T13068]        __mutex_lock+0x19d/0x1550
[  748.683786][T13068]        kobject_uevent_net_broadcast+0x27e/0x560
[  748.686313][T13068]        kobject_uevent_env+0x566/0x9e0
[  748.688496][T13068]        device_add+0x544/0xb80
[  748.690471][T13068]        device_create+0x269/0x300
[  748.692530][T13068]        msr_device_create+0x33/0x50
[  748.694677][T13068]        cpuhp_invoke_callback+0x434/0x810
[  748.696974][T13068]        cpuhp_thread_fun+0x362/0x780
[  748.699100][T13068]        smpboot_thread_fn+0x565/0xa70
[  748.701265][T13068]        kthread+0x38b/0x480
[  748.703144][T13068]        ret_from_fork+0x514/0xb70
[  748.705191][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.707338][T13068] 
[  748.707338][T13068] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  748.710362][T13068]        cpuhp_thread_fun+0x127/0x780
[  748.712500][T13068]        smpboot_thread_fn+0x565/0xa70
[  748.714667][T13068]        kthread+0x38b/0x480
[  748.715623][T16090] pim6reg0: tun_chr_ioctl cmd 1074025675
[  748.715661][T16090] pim6reg0: persist disabled
[  748.720493][T13068]        ret_from_fork+0x514/0xb70
[  748.722493][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.724613][T13068] 
[  748.724613][T13068] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  748.727624][T13068]        cpus_read_lock+0x42/0x160
[  748.729711][T13068]        static_key_slow_inc+0x12/0x30
[  748.733604][T13068]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  748.735987][T13068]        nbd_genl_foreach_sock+0x265/0x450
[  748.738182][T13068]        nbd_genl_reconfigure+0xbbb/0x1040
[  748.740463][T13068]        genl_family_rcv_msg_doit+0x233/0x340
[  748.742862][T13068]        genl_rcv_msg+0x614/0x7a0
[  748.744657][T13068]        netlink_rcv_skb+0x226/0x4a0
[  748.746719][T13068]        genl_rcv+0x28/0x40
[  748.748413][T13068]        netlink_unicast+0x7bd/0x940
[  748.750262][T13068]        netlink_sendmsg+0x813/0xb40
[  748.752029][T13068]        sock_sendmsg_nosec+0x13a/0x180
[  748.753826][T13068]        ____sys_sendmsg+0x54e/0x850
[  748.755509][T13068]        ___sys_sendmsg+0x2a5/0x360
[  748.757250][T13068]        __x64_sys_sendmsg+0x1b1/0x290
[  748.758982][T13068]        do_syscall_64+0x166/0x520
[  748.760889][T13068]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.763150][T13068] 
[  748.763150][T13068] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  748.765867][T13068]        __mutex_lock+0x19d/0x1550
[  748.767507][T13068]        nbd_queue_rq+0x373/0xff0
[  748.769263][T13068]        blk_mq_dispatch_rq_list+0x499/0x1990
[  748.771143][T13068]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  748.773366][T13068]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  748.775482][T13068]        blk_mq_run_work_fn+0x16c/0x300
[  748.777383][T13068]        process_scheduled_works+0xc3d/0x1630
[  748.779276][T13068]        worker_thread+0xa47/0xfb0
[  748.780974][T13068]        kthread+0x38b/0x480
[  748.782451][T13068]        ret_from_fork+0x514/0xb70
[  748.784208][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.785720][T13068] 
[  748.785720][T13068] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  748.788008][T13068]        __mutex_lock+0x19d/0x1550
[  748.789688][T13068]        nbd_queue_rq+0xc1/0xff0
[  748.791518][T13068]        blk_mq_dispatch_rq_list+0x499/0x1990
[  748.793495][T13068]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  748.795803][T13068]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  748.798252][T13068]        blk_mq_run_work_fn+0x16c/0x300
[  748.800251][T13068]        process_scheduled_works+0xc3d/0x1630
[  748.802396][T13068]        worker_thread+0xa47/0xfb0
[  748.804314][T13068]        kthread+0x38b/0x480
[  748.806127][T13068]        ret_from_fork+0x514/0xb70
[  748.808060][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.809897][T13068] 
[  748.809897][T13068] -> #3 (set->srcu){.+.+}-{0:0}:
[  748.812358][T13068]        __synchronize_srcu+0xc9/0x2f0
[  748.814309][T13068]        elevator_switch+0x1e8/0x7b0
[  748.816085][T13068]        elevator_change+0x2fa/0x480
[  748.818042][T13068]        elevator_set_default+0x375/0x440
[  748.819950][T13068]        blk_register_queue+0x3f3/0x4e0
[  748.821751][T13068]        __add_disk+0x6cb/0xe30
[  748.823647][T13068]        add_disk_fwnode+0x100/0x3a0
[  748.825522][T13068]        nbd_dev_add+0x733/0xb60
[  748.827279][T13068]        nbd_init+0x168/0x1f0
[  748.828725][T13068]        do_one_initcall+0x250/0x870
[  748.830254][T13068]        do_initcall_level+0x10a/0x1a0
[  748.831832][T13068]        do_initcalls+0x59/0xa0
[  748.833483][T13068]        kernel_init_freeable+0x29d/0x3e0
[  748.835555][T13068]        kernel_init+0x22/0x1d0
[  748.837311][T13068]        ret_from_fork+0x514/0xb70
[  748.839142][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.841176][T13068] 
[  748.841176][T13068] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  748.844000][T13068]        __mutex_lock+0x19d/0x1550
[  748.845959][T13068]        elevator_change+0x1af/0x480
[  748.847590][T13068]        elevator_set_none+0xb5/0x140
[  748.849305][T13068]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  748.851746][T13068]        nbd_start_device+0x189/0xb30
[  748.853832][T13068]        nbd_genl_connect+0x167d/0x1cd0
[  748.855915][T13068]        genl_family_rcv_msg_doit+0x233/0x340
[  748.858105][T13068]        genl_rcv_msg+0x614/0x7a0
[  748.859812][T13068]        netlink_rcv_skb+0x226/0x4a0
[  748.861602][T13068]        genl_rcv+0x28/0x40
[  748.862950][T13068]        netlink_unicast+0x7bd/0x940
[  748.864467][T13068]        netlink_sendmsg+0x813/0xb40
[  748.866095][T13068]        sock_sendmsg_nosec+0x13a/0x180
[  748.867697][T13068]        ____sys_sendmsg+0x54e/0x850
[  748.869483][T13068]        ___sys_sendmsg+0x2a5/0x360
[  748.871211][T13068]        __x64_sys_sendmsg+0x1b1/0x290
[  748.872882][T13068]        do_syscall_64+0x166/0x520
[  748.874635][T13068]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.876720][T13068] 
[  748.876720][T13068] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  748.879672][T13068]        blk_alloc_queue+0x544/0x690
[  748.881680][T13068]        __blk_mq_alloc_disk+0x194/0x390
[  748.883668][T13068]        nbd_dev_add+0x494/0xb60
[  748.885382][T13068]        nbd_init+0x168/0x1f0
[  748.887091][T13068]        do_one_initcall+0x250/0x870
[  748.889095][T13068]        do_initcall_level+0x10a/0x1a0
[  748.890805][T13068]        do_initcalls+0x59/0xa0
[  748.892359][T13068]        kernel_init_freeable+0x29d/0x3e0
[  748.894271][T13068]        kernel_init+0x22/0x1d0
[  748.895901][T13068]        ret_from_fork+0x514/0xb70
[  748.897781][T13068]        ret_from_fork_asm+0x1a/0x30
[  748.899787][T13068] 
[  748.899787][T13068] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  748.902582][T13068]        __lock_acquire+0x15ff/0x2e50
[  748.904659][T13068]        lock_acquire+0x115/0x350
[  748.906603][T13068]        fs_reclaim_acquire+0x71/0x100
[  748.908680][T13068]        kmem_cache_alloc_node_noprof+0x5f/0x610
[  748.911091][T13068]        __alloc_skb+0x27a/0x7a0
[  748.913010][T13068]        alloc_uevent_skb+0x7d/0x230
[  748.915044][T13068]        kobject_uevent_net_broadcast+0x2fa/0x560
[  748.917493][T13068]        kobject_uevent_env+0x566/0x9e0
[  748.919610][T13068]        nbd_config_put+0x2c8/0x7e0
[  748.921603][T13068]        nbd_release+0xfe/0x140
[  748.923460][T13068]        bdev_release+0x571/0x690
[  748.925418][T13068]        blkdev_release+0x15/0x20
[  748.927287][T13068]        __fput+0x418/0xa50
[  748.928863][T13068]        fput_close_sync+0x11f/0x240
[  748.930861][T13068]        __x64_sys_close+0x7e/0x110
[  748.932553][T13068]        do_syscall_64+0x166/0x520
[  748.934498][T13068]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.936924][T13068] 
[  748.936924][T13068] other info that might help us debug this:
[  748.936924][T13068] 
[  748.940600][T13068] Chain exists of:
[  748.940600][T13068]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  748.940600][T13068] 
[  748.945120][T13068]  Possible unsafe locking scenario:
[  748.945120][T13068] 
[  748.947950][T13068]        CPU0                    CPU1
[  748.949942][T13068]        ----                    ----
[  748.951980][T13068]   lock(uevent_sock_mutex);
[  748.953468][T13068]                                lock(cpuhp_state-up);
[  748.955722][T13068]                                lock(uevent_sock_mutex);
[  748.958293][T13068]   lock(fs_reclaim);
[  748.959618][T13068] 
[  748.959618][T13068]  *** DEADLOCK ***
[  748.959618][T13068] 
[  748.962579][T13068] locks held by udevd/13068: 3, last CPU#0:
[  748.964452][T13068]  #0: ffff888103acd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690
[  748.967726][T13068]  #1: ffff8880295b5260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0
[  748.971376][T13068]  #2: ffffffff905fa500 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  748.975338][T13068] 
[  748.975338][T13068] stack backtrace:
[  748.977467][T13068] CPU: 0 UID: 0 PID: 13068 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
[  748.980650][T13068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  748.984213][T13068] Call Trace:
[  748.985387][T13068]  <TASK>
[  748.986428][T13068]  dump_stack_lvl+0xe8/0x150
[  748.988067][T13068]  print_circular_bug+0x2e2/0x300
[  748.989945][T13068]  check_noncircular+0x12f/0x150
[  748.991812][T13068]  __lock_acquire+0x15ff/0x2e50
[  748.993655][T13068]  ? blkdev_release+0x15/0x20
[  748.995282][T13068]  ? __fput+0x418/0xa50
[  748.996787][T13068]  ? fput_close_sync+0x11f/0x240
[  748.998554][T13068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.000614][T13068]  lock_acquire+0x115/0x350
[  749.002254][T13068]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  749.004267][T13068]  ? __alloc_skb+0x27a/0x7a0
[  749.005884][T13068]  fs_reclaim_acquire+0x71/0x100
[  749.007480][T13068]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  749.009357][T13068]  kmem_cache_alloc_node_noprof+0x5f/0x610
[  749.011398][T13068]  ? __alloc_skb+0x18d/0x7a0
[  749.012888][T13068]  ? __alloc_skb+0x27a/0x7a0
[  749.014469][T13068]  ? __alloc_skb+0x18d/0x7a0
[  749.016165][T13068]  __alloc_skb+0x27a/0x7a0
[  749.017832][T13068]  alloc_uevent_skb+0x7d/0x230
[  749.019492][T13068]  kobject_uevent_net_broadcast+0x2fa/0x560
[  749.021788][T13068]  kobject_uevent_env+0x566/0x9e0
[  749.023693][T13068]  nbd_config_put+0x2c8/0x7e0
[  749.025398][T13068]  ? __pfx_nbd_config_put+0x10/0x10
[  749.027311][T13068]  ? do_raw_spin_unlock+0x4d/0x200
[  749.029046][T13068]  nbd_release+0xfe/0x140
[  749.030482][T13068]  ? __pfx_nbd_release+0x10/0x10
[  749.032077][T13068]  bdev_release+0x571/0x690
[  749.033471][T13068]  ? __pfx_blkdev_release+0x10/0x10
[  749.035075][T13068]  blkdev_release+0x15/0x20
[  749.036448][T13068]  __fput+0x418/0xa50
[  749.037652][T13068]  fput_close_sync+0x11f/0x240
[  749.039269][T13068]  ? __pfx_fput_close_sync+0x10/0x10
[  749.041279][T13068]  __x64_sys_close+0x7e/0x110
[  749.043082][T13068]  do_syscall_64+0x166/0x520
[  749.044880][T13068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.047080][T13068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.049300][T13068] RIP: 0033:0x7fef1f5170a8
[  749.051031][T13068] Code: 48 8b 05 83 9d 0d 00 64 c7 00 16 00 00 00 83 c8 ff 48 83 c4 20 5b c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 5b 48 8b 15 51 9d 0d 00 f7 d8 64 89 02 48 83
[  749.058063][T13068] RSP: 002b:00007ffd1086ad08 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  749.060921][T13068] RAX: ffffffffffffffda RBX: 00007fef1f9d2ae0 RCX: 00007fef1f5170a8
[  749.063775][T13068] RDX: 0000000003938700 RSI: 000000000aba9500 RDI: 0000000000000008
[  749.066535][T13068] RBP: 000055ffa3cee780 R08: 0000000000000001 R09: 475021149b95649b
[  749.069099][T13068] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000005
[  749.071859][T13068] R13: 000055ffa3cf0610 R14: 0000000000000008 R15: 000055ffa3cce910
[  749.074390][T13068]  </TASK>
[  756.121921][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
