last executing test programs:

2.026027037s ago: executing program 4 (id=1031):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
accept4(r0, 0x0, 0x0, 0x80800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/554], 0xe4}}, 0x0)

1.904285263s ago: executing program 3 (id=1034):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0) (async)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000100)=0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100))
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

1.901594501s ago: executing program 4 (id=1035):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20000040}, 0x80)
ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a3200000000140004800800024000000000080001"], 0x110}}, 0x40040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0xf8}, 0x1, 0x0, 0x0, 0xc854}, 0x4004801)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20010)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f00000002c0)="3439453b45a72a177cffd30299e8e5c625936a226ef4318a3baaa8d199ce69adb7bda456c175d6d495b09da5786a3934114cdea484eaeb6045bbc5909ae94d732cc109824dd5059de5a8004b74c3b903b29dcecb87ceab62bd71c2cf15b8878a782822852911e2765a27c029a91af16a23eea8f81f0b31d50dc22539f2ed47f9fd713e3d3e8cc1398838da478d79da00691ee877e0c51866d93782a8153d9b5fee1092cb423fdbeb3c7f5c3da5a7d0ef969c60ac76c2b6bf599db01211ad01fd80af3fc905f45e65671ec79733cde926f3a97a6cb4171ba34afc69d02df83ac4")
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)={0x40, r8, 0x1, 0x70bd2d, 0xa000000, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x2000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0xc2, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810013000800450000b000650000008890787f000001fffffffffffe4e24009c90780100000000000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41f6c4c93b6ebe414aa958d4bbef5e4007898221aa606d083cd597454ca93938f1e2de8000000003fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e394446892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233d01422d01cd53c3abe94331d0b7918724b8b60c6ffa3eebf6e57a176b55c72893bb7ed04c6de71d"], 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0xab8f31661ecce3e3, &(0x7f0000000400)=0x1000, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@deltaction={0x120, 0x31, 0x100, 0x70bd2d, 0x25ffdbfc, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe7f0}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7662}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

1.642510383s ago: executing program 3 (id=1037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x50004}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0)

1.536440029s ago: executing program 4 (id=1039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$unix(0x1, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x2260}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="090000000400000004000083545bf20000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000005496b0c4660053d6dab2dfae7ae760d00000004000000dd0a000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000040)={<r6=>0x0}, &(0x7f00000000c0)=0x8)
r7 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x40000)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000280)={r6, 0xc}, 0x8)
connect$netlink(r8, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r8, &(0x7f0000000000)='\"', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0)

1.42081086s ago: executing program 3 (id=1040):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

1.409276846s ago: executing program 1 (id=1041):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)

1.212660563s ago: executing program 3 (id=1043):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xdc7d) (async)
bind$bt_sco(r0, &(0x7f0000000740)={0x1f, @none}, 0x8) (async)
listen(r0, 0x2)
accept4(r0, 0x0, 0x0, 0x80800) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)=""/57, 0x39}], 0x1, &(0x7f0000000380)=""/98, 0x62}, 0x40002300) (async)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4)

1.208722399s ago: executing program 1 (id=1044):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES64=r0], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r1}, 0x20)
r3 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r3, 0x1}, 0x20)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.03791896s ago: executing program 3 (id=1047):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180039e75fa2010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0)
listen(r5, 0x50)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x9239, 0x6}, 0x90)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={0x3, @bcast, r9})
sendmsg$inet(r5, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c)

1.030625943s ago: executing program 1 (id=1048):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=<r3=>r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10)
sendmmsg$inet6(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000001c0)="a78302c2f3", 0x5}], 0x1}}], 0x1, 0x90)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r3, @ANYRES16=r0, @ANYRES16=r3], 0x34}}, 0x20040001)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES8=r4, @ANYRES64=r4, @ANYRES16=r4], 0x50}}, 0x4000850)

872.53629ms ago: executing program 2 (id=1050):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x1000}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000d00)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xb7}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0x3d}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xfffffffffffffe10}], 0x2, &(0x7f0000002800)=""/181, 0xb5}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}], 0x9}, 0x7}], 0x6, 0x20, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0)
write$bt_hci(r0, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6)

870.947743ms ago: executing program 1 (id=1051):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e23de04000000003a00000085e7d591322bbb0331f00e8efd52600f48685d75cbb8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

870.075659ms ago: executing program 0 (id=1052):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000012c0)='syzkaller\x00', 0xfff, 0x68, &(0x7f0000001300)=""/104, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000013c0)={0x2, 0x2, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001400)=[{0x2, 0x3, 0x6}], 0x10, 0x3}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wg2\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r2, r3, 0x25, 0x10, @void}, 0x10)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d)

811.25925ms ago: executing program 2 (id=1053):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0x2, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1000c844)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffa}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x170, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0xfffffffffffffdcf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r9 = socket(0x15, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r11, &(0x7f00000001c0)="b4", 0x1)
splice(r0, 0x0, r11, 0x0, 0x25a5, 0x0)

757.31481ms ago: executing program 1 (id=1054):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1f1441, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
close(r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14)
sendmmsg$inet6(r0, &(0x7f0000006f00)=[{{&(0x7f0000002800)={0xa, 0x4e20, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2008}, 0x1c, 0x0, 0x0, &(0x7f00000010c0)=ANY=[], 0x30}}], 0x1, 0x80088d0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', <r6=>0x0, 0x29, 0x7, 0x8e, 0x0, 0x75, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8000, 0x401, 0x1}})
bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1a, r6, 0x1, 0x5a, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)

660.22753ms ago: executing program 0 (id=1055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000100000000000000e2ff04001c0a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000050d1bff530e9840301140000001100010000000000000020000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

659.011148ms ago: executing program 0 (id=1056):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0)
close(r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x152, 0x152, 0x4, [@datasec={0xc, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x8000, 0xffffff42}, {0x5, 0x0, 0x3}, {0x3, 0x2, 0x200}], "218b"}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @union={0x4, 0x6, 0x0, 0x5, 0x0, 0xfffffffe, [{0x8, 0x0, 0x7804}, {0x3, 0x3, 0x1}, {0x5, 0x4, 0x3}, {0x0, 0x1, 0xffff0001}, {0x1, 0x1, 0x31af}, {0xa, 0x3, 0x10}]}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @struct={0x2, 0x3, 0x0, 0x4, 0x1, 0x5, [{0xd, 0x4, 0x1}, {0xb, 0x2, 0x9}, {0xe, 0x3, 0x7fffffff}]}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @const={0xd}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x0, 0x3}]}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x9, [{0x4, 0x2, 0x1}, {0x10, 0x1, 0xb5b}, {0x0, 0x3, 0x5}, {0xd, 0x5, 0x9}, {0x2, 0x1, 0xf}, {0xc, 0x0, 0x33}]}]}, {0x0, [0x2e, 0x6c6460227ccf981a]}}, &(0x7f0000001280)=""/228, 0x170, 0xe4, 0x0, 0xc2}, 0x28) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x152, 0x152, 0x4, [@datasec={0xc, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x8000, 0xffffff42}, {0x5, 0x0, 0x3}, {0x3, 0x2, 0x200}], "218b"}, @const={0x7, 0x0, 0x0, 0xa, 0x2}, @union={0x4, 0x6, 0x0, 0x5, 0x0, 0xfffffffe, [{0x8, 0x0, 0x7804}, {0x3, 0x3, 0x1}, {0x5, 0x4, 0x3}, {0x0, 0x1, 0xffff0001}, {0x1, 0x1, 0x31af}, {0xa, 0x3, 0x10}]}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @struct={0x2, 0x3, 0x0, 0x4, 0x1, 0x5, [{0xd, 0x4, 0x1}, {0xb, 0x2, 0x9}, {0xe, 0x3, 0x7fffffff}]}, @float={0x5, 0x0, 0x0, 0x10, 0x4}, @const={0xd}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x7, [{0x0, 0x0, 0x3}]}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x9, [{0x4, 0x2, 0x1}, {0x10, 0x1, 0xb5b}, {0x0, 0x3, 0x5}, {0xd, 0x5, 0x9}, {0x2, 0x1, 0xf}, {0xc, 0x0, 0x33}]}]}, {0x0, [0x2e, 0x6c6460227ccf981a]}}, &(0x7f0000001280)=""/228, 0x170, 0xe4, 0x0, 0xc2}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001440)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0], <r4=>0x0, 0x57, &(0x7f0000001500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x23, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%-5lx  \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000100)=""/4096, 0x40f00, 0x39, '\x00', r1, @fallback=0x14, r2, 0x8, &(0x7f00000013c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xf, 0x80, 0x400}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000001800)=[r5], &(0x7f0000001840)=[{0x2, 0x4, 0x8, 0x9}, {0x5, 0x4, 0x5, 0xb}], 0x10, 0x7f}, 0x94)
ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000001940)) (async)
ioctl$XFS_IOC_FSGEOMETRY(r5, 0x8100587e, &(0x7f0000001940))
sendto$packet(0xffffffffffffffff, &(0x7f0000001a40)="56bc28b145bd9c6f258c2e0616f5ae6a3780928994e0c68379e4d814a24b76a38b69c469a5e2f4cbe0235db27b972e681cf02c39c2c0e5ba9fb1af4f8fa8f8a8809fdb624aa3c50a75e39bf631502d545bbdc1857d53", 0x56, 0x4004010, &(0x7f0000001ac0)={0x11, 0x4, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14)
pipe(&(0x7f0000001b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001b80), r0)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, r9, 0x408, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$FOU_CMD_GET(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, r9, 0x408, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x18, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x18, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001e00)=@generic={&(0x7f0000001dc0)='./file0\x00'}, 0x18)
ioctl$OCFS2_IOC_GROUP_ADD(r10, 0x40186f02, &(0x7f0000001e40)={0x69, 0x9e, 0x112a2adf, 0xfff9})
ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000001fc0)=<r11=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000002000)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000002100)=0xe8)
r13 = getgid()
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0, <r14=>0x0}, &(0x7f0000002180)=0xc)
openat$cgroup_type(r8, &(0x7f00000021c0), 0x2, 0x0) (async)
r15 = openat$cgroup_type(r8, &(0x7f00000021c0), 0x2, 0x0)
openat$cgroup_pressure(r8, &(0x7f0000002200)='io.pressure\x00', 0x2, 0x0) (async)
r16 = openat$cgroup_pressure(r8, &(0x7f0000002200)='io.pressure\x00', 0x2, 0x0)
r17 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002280)=@o_path={&(0x7f0000002240)='./file0\x00', 0x0, 0x4018, r10}, 0x18)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000022c0)=<r18=>0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002300)={0x0, <r19=>0x0}, &(0x7f0000002340)=0xc)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002380), &(0x7f00000023c0)=0xc) (async)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0, <r20=>0x0}, &(0x7f00000023c0)=0xc)
gettid() (async)
r21 = gettid()
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002400)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000002500)=0xe8)
getgid() (async)
r23 = getgid()
r24 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$unix(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="ce482d39d4473146908375620cca25ed7753826531d04cc8a1d4148f7db700a9deddddd484e949940a202c964d60feb4f929db5562ff824671792882d9fdb12b34c79ef36e5800f709f621c6c5c811ea65285f48717ed4f2b9b6e981f92f83a8bb40fd3afc7a470836aec33c074ded75554b3e37febef7437d0a55c5ee07ac71698494624c5680a67301622bdaa54b779411728528d3595591b933935f6cfcc58742b70fa2806526a1194e1c9cfa5cf7c1d15833d61a5102d538aa4e7b3822b9cd387475546a6872aa803e462fd9210b58d3ac5b657393fc06989d6a1ac6c819b335d24ee1", 0xe5}], 0x1, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r14}}}, @rights={{0x38, 0x1, 0x1, [r5, r10, r15, r0, r5, r2, r16, r0, r2, r5]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x34, 0x1, 0x1, [r5, r24, r7, r0, r6, r6, r6, r6, r10]}}], 0x108}, 0x80) (async)
sendmsg$unix(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)="ce482d39d4473146908375620cca25ed7753826531d04cc8a1d4148f7db700a9deddddd484e949940a202c964d60feb4f929db5562ff824671792882d9fdb12b34c79ef36e5800f709f621c6c5c811ea65285f48717ed4f2b9b6e981f92f83a8bb40fd3afc7a470836aec33c074ded75554b3e37febef7437d0a55c5ee07ac71698494624c5680a67301622bdaa54b779411728528d3595591b933935f6cfcc58742b70fa2806526a1194e1c9cfa5cf7c1d15833d61a5102d538aa4e7b3822b9cd387475546a6872aa803e462fd9210b58d3ac5b657393fc06989d6a1ac6c819b335d24ee1", 0xe5}], 0x1, &(0x7f0000002540)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r14}}}, @rights={{0x38, 0x1, 0x1, [r5, r10, r15, r0, r5, r2, r16, r0, r2, r5]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x34, 0x1, 0x1, [r5, r24, r7, r0, r6, r6, r6, r6, r10]}}], 0x108}, 0x80)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f00000026c0)="482c17096093b8222a2cd7a9a58aac8adbd30580fc5eb2db477b42df758168292f5089446d89f872ab1bbb53742be0af4c981da8ee27e24c30d5202cdc6398b65073f453d1363ff3e32b23314442b6c7557f31f142ee535620f3803b9460dbf6b1fc5000e355ca8af643d5e1e25c8792d42cec83ff87fbd13d742a5557e6a14f255ff46d65e11cf6403d0036b4f546e7b32b135d412621497786474954210be6f2ae64b311", 0xa5}, {&(0x7f0000002780)="b73c8a65cf39caad3b06376a23e54c6a", 0x10}, {&(0x7f00000027c0)="7abb05614ea7aa6d5aa936ce4e7988e1ec46c64f73d982a70137f5702a76123bcb3fc6255bd13208ac7417126deb7db76b1e8de2deb47a9ba83c908587cc59fd4cd9a117101e03e010ee4c5287f0612318825ed96b4e7faeb01bb4cc227f0b03003a2e6ee61dcf431be9883b3609ae68fb8738f52ed75cf7f7fd4b53ec7444539d625283cd01e5ae390b88cab2f8c3d97fbe45a477e1e37e3ccdbd62add44953a388092f832064120b0ebbea79195af6ff4192b486337ed5c8", 0xb9}, {&(0x7f0000002880)="12ecf425478dfe49b3b4b693d1ae3c15508c43af739ef2991ae7816f585326ee2dc86fac0a422dcf8cf6eba0c93b22f2ab60407026e604a32e16e839e5d2404fa7519b184e4ff8f431d1a5528a94a641b1918acac247790849fe41c67c10fabd4375371bc9bb0a7a407f39778f7f5931defdbfb293e98b65dca86e8da85df6c31b1a88f6232c538822bf05aa21e5e479a5c7bf412a963ce215dfdc5e8228799ccd9856b6075d9517f2e1f66a2a730a5d688a5e334ca2f4392c1e61efe8f9f2078613380c5da94fc22ebc9773038e16728f5d4bd044355bb2", 0xd8}, {&(0x7f0000002980)="267f956c5c6afdeb5f148c13eaeca4f8eddfcf86e08cd9abf3f92e34930a5725e50f6ac09732f45b3a6b80a9bce4d7bcc342527f42832ea8479a736ead964bd25e82f891894525ad708bd736a9e98ddbd5418e931ad159eca0f14cf9f5250b27dce2b88f79139fe07b0586c1fa552a66e81c3a9cca45ea277cfbaad68bc85ebd2952128f777f25bbdf22a8e9c92da8f3af2c5d2cf0fe80756ed0bf01f12e6b9397b8b6a0a2a965440906b4f472588a0c229e6735077b58a5edc55df601c428f76fce07324e43a98039fc30f88b89bf4d3708b9f7c71556", 0xd7}, {&(0x7f0000002a80)="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", 0xfd}, {&(0x7f0000002b80)="7539418acb86c94702773a3c4c7243fe0749ed8929ec1976fa51c133932e5913fe78a5f879ebcf6c5bc3287a7bfaeed07d74aeee7b537a26940db865fd2a852ee6c8614cad354b108d68b58ca3822860788a59612ed57d1c13f10433becb2a4e2261c83912ca833ac1a02b0ad9ecbb001166a4942ab4d242d70035c90199c67a05", 0x81}, {&(0x7f0000002c40)="86a279a1d6672d416c6914b942bb675282baebe72ade7d19990da6be5c8e86d43b6f2d9d", 0x24}, {&(0x7f0000002c80)="fceea8016167542020eb974282ef2f96de6081a9e278a78ad512de758769196c04b0335f06b4be2b908c855ada966c1db4a50d1eccaaf3b4990ff6ee156155bdeae365dbf2b105ae4def28e02c91a9fcc67f936c9e14491a859093ce9393ebc8089cad97eb6a3e67ea7d7ab22674f375bab2ba4202fff877581cc0a5cf179dfa26779c340d0870d030049b8a36a1623e802069c04bc67f38d7e5eb218158e35062e53726b52672522199e43e0507557d0b06e77ff60e827bceea26779cff48c680f9e83e3d17726c2761212e834621932fd57d16a6", 0xd5}], 0x9, &(0x7f0000002e40)=[@assoc={0x18, 0x117, 0x4, 0x40}, @iv={0x38, 0x117, 0x2, 0x24, "9943adc7726fa3ee6eb64589cab4f961704b871fc2f3d3a42cc37f83d33e15f7453ccd5a"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x80, 0x40090}, 0x5d04d828d2e560aa)

578.121837ms ago: executing program 4 (id=1057):
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x200000000000000}, 0x38)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x3db7}, 0x48)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r4, 0x1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r4, 0x1}, 0x20)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/54, 0x36}, {&(0x7f00000009c0)=""/47, 0x2f}], 0x3, &(0x7f0000000a40)=""/252, 0xfc}, 0x40002001)
accept4(r1, 0x0, 0x0, 0x0) (async)
r5 = accept4(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000c00)=0xe8)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)) (async)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=<r8=>0x0)
sendmsg$nl_netfilter(r5, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="85008e8066b5e5fd92a7a40636325334e1075f31acc1eae4de17b44ebbb0f84ce341a0e1266872bb87726b187fb37113ba8901c067c90b882cdfd840face863719eaeefee997946ccd291944d39608000000000000008b501e1391c0a850ac64c2c7eba3760600000000000000cd3100000000000000800a162c3e4c34f19fc48a5723bc85000000"], 0x434}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1401, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004840}, 0x8000) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1401, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004840}, 0x8000)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) (async)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x20000400)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000bc0)={0x3, &(0x7f0000000b80)=[{0xfff8, 0x8, 0x9, 0xffffffe4}, {0x0, 0x3, 0xf, 0xab8}, {0x61, 0x29, 0x8, 0x2}]}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)

554.688245ms ago: executing program 0 (id=1058):
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8004014)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4)

504.74449ms ago: executing program 2 (id=1059):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x3c})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000100)=""/60, 0x27, 0x3c, 0x1, 0x8001, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94)

447.735748ms ago: executing program 1 (id=1060):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x008S', @ANYRES16=0x0, @ANYBLOB="00040000000002000000010000001c000180060001000a00000005000200bf00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x4004811)
r3 = socket$inet6(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000680)={{<r4=>r2, &(0x7f0000000340)='\x00', 0x4000, &(0x7f0000000540)={@align, {0x1, 0x2, 0x7fffffff, 0xa3a1}}, 0x200, &(0x7f0000000580), &(0x7f00000005c0)=0x4}, {[0xfffffec0, 0x8, 0xe, 0x81]}, 0x1, 0x12, &(0x7f0000000640)=""/18})
openat$cgroup_ro(r4, &(0x7f0000000700)='blkio.bfq.io_merged\x00', 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f00000000c0)={0x2, {{0xa, 0x4e22, 0x6, @private2, 0x400}}}, 0x88)
r6 = socket(0x2d, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x3)
ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000080)=0xfffefffe)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
sendmmsg$inet6(r8, &(0x7f0000003d40), 0x0, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
pread64(r9, &(0x7f0000000b40)=""/4096, 0x1000, 0x3)
getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000440)=""/168, &(0x7f0000000500)=0xa8)

434.865904ms ago: executing program 2 (id=1061):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0xe0, 0x2c, 0x605, 0x8070bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb0, 0x2, [@TCA_CGROUP_ACT={0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x67, 0x6, "b40d362008000000000000008052ecd1b6e73a6f395b469748a609e52411b44c35d350c8c59d2d4c905451f38990339e5ce7f485260137db9305c8e06c2824a185d891cdd4cfab9419bdbc7e7255e3bfecb0be16ec932f81ab6edd5da5e35d12e636bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe0}}, 0x20004084)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

196.249289ms ago: executing program 2 (id=1062):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000) (async)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x2000)
syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0)

195.507194ms ago: executing program 0 (id=1063):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES8, @ANYBLOB="000000008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000000020000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

194.534755ms ago: executing program 4 (id=1064):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00')
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
bind(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x1, 0x4)

104.592711ms ago: executing program 3 (id=1065):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f0000000000)="e45cc719ba9310801d39f6518a76f0c3630543a032ee28e5f0a4a9b5b7f9c1a4443a246bf99bfafa6b41e9825cd5a51895201398c1e5da8487e573124e04cb94416584504928e2c3ddd9656d46", 0x4d) (async)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002bc0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400801d}, 0x800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x10000}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r6=>r1})
recvmmsg$unix(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000001680)=""/193, 0xc1}], 0x4}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000017c0)=""/84, 0x54}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/196, 0xc4}, {&(0x7f0000002940)=""/84, 0x54}], 0x4, &(0x7f0000002a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x3, 0x40012022, &(0x7f0000002b80)={0x0, 0x3938700}) (async)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCOUTQ(r7, 0x5411, 0x0) (async)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x5}}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x2e, 0x30, 0x61]}}, &(0x7f0000000180)=""/115, 0x4e, 0x73, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', r3, r8, 0x1, 0x4, 0x5}, 0x50)

59.771664ms ago: executing program 2 (id=1066):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000200))
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xb15}, 0x14}}, 0x80)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)

1.430345ms ago: executing program 4 (id=1067):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf000000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01142cbd7000fddb9f25010dd3a679de000000000000141540e3b4002102"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7080ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = socket(0x15, 0x5, 0x0) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) (async, rerun: 64)
r7 = socket$inet(0x2, 0x3, 0x8) (rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000280), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r8, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)

0s ago: executing program 0 (id=1068):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0x1, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x100001, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts.
[   78.891126][ T5812] cgroup: Unknown subsys name 'net'
[   79.005751][ T5812] cgroup: Unknown subsys name 'cpuset'
[   79.014650][ T5812] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.637623][ T5812] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   84.141572][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.150246][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.158875][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.167155][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.179566][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.192250][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.199933][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.209273][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.217308][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.219476][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.234162][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.241435][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.242507][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.251343][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.257841][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.265480][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.271627][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.284516][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.292949][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.297119][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.300408][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.308744][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.324296][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.325413][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.340058][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.020322][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   85.065621][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   85.145822][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   85.188800][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   85.259117][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   85.413318][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.421219][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.428866][ T5831] bridge_slave_0: entered allmulticast mode
[   85.436102][ T5831] bridge_slave_0: entered promiscuous mode
[   85.471117][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.478398][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.485763][ T5831] bridge_slave_1: entered allmulticast mode
[   85.492965][ T5831] bridge_slave_1: entered promiscuous mode
[   85.526202][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.533762][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.541100][ T5838] bridge_slave_0: entered allmulticast mode
[   85.549179][ T5838] bridge_slave_0: entered promiscuous mode
[   85.596366][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.604268][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.611474][ T5838] bridge_slave_1: entered allmulticast mode
[   85.618881][ T5838] bridge_slave_1: entered promiscuous mode
[   85.645764][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.652987][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.660116][ T5824] bridge_slave_0: entered allmulticast mode
[   85.667486][ T5824] bridge_slave_0: entered promiscuous mode
[   85.676012][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.683502][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.690815][ T5829] bridge_slave_0: entered allmulticast mode
[   85.698020][ T5829] bridge_slave_0: entered promiscuous mode
[   85.718590][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.738343][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.746510][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.754471][ T5824] bridge_slave_1: entered allmulticast mode
[   85.761473][ T5824] bridge_slave_1: entered promiscuous mode
[   85.768834][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.776048][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.783514][ T5829] bridge_slave_1: entered allmulticast mode
[   85.790694][ T5829] bridge_slave_1: entered promiscuous mode
[   85.809803][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.819319][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.826763][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.834246][ T5823] bridge_slave_0: entered allmulticast mode
[   85.841267][ T5823] bridge_slave_0: entered promiscuous mode
[   85.880911][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.901647][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.909332][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.916922][ T5823] bridge_slave_1: entered allmulticast mode
[   85.924211][ T5823] bridge_slave_1: entered promiscuous mode
[   85.945201][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.956865][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.978427][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.034313][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.046242][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.067744][ T5831] team0: Port device team_slave_0 added
[   86.076598][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.109482][ T5838] team0: Port device team_slave_0 added
[   86.118029][ T5831] team0: Port device team_slave_1 added
[   86.126342][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.137723][ T5824] team0: Port device team_slave_0 added
[   86.157558][ T5838] team0: Port device team_slave_1 added
[   86.185141][ T5824] team0: Port device team_slave_1 added
[   86.204492][ T5829] team0: Port device team_slave_0 added
[   86.245095][ T5823] team0: Port device team_slave_0 added
[   86.252819][ T5829] team0: Port device team_slave_1 added
[   86.269765][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.276888][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.303960][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.304219][ T5832] Bluetooth: hci1: command tx timeout
[   86.317926][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.327498][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.353829][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.376303][ T5823] team0: Port device team_slave_1 added
[   86.382008][ T5832] Bluetooth: hci4: command tx timeout
[   86.392463][ T5832] Bluetooth: hci3: command tx timeout
[   86.392508][ T5840] Bluetooth: hci0: command tx timeout
[   86.407238][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.414603][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.441657][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.462377][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.469349][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.471825][ T5840] Bluetooth: hci2: command tx timeout
[   86.496386][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.533497][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.540491][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.566931][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.589217][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.596576][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.623019][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.645262][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.652498][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.678553][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.720115][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.727214][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.753257][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.765211][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.772331][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.798841][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.836392][ T5838] hsr_slave_0: entered promiscuous mode
[   86.842956][ T5838] hsr_slave_1: entered promiscuous mode
[   86.850018][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.857071][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.884044][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.922325][ T5831] hsr_slave_0: entered promiscuous mode
[   86.929287][ T5831] hsr_slave_1: entered promiscuous mode
[   86.935870][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   86.941938][ T5831] Cannot create hsr debugfs directory
[   87.138002][ T5824] hsr_slave_0: entered promiscuous mode
[   87.145289][ T5824] hsr_slave_1: entered promiscuous mode
[   87.151962][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   87.157716][ T5824] Cannot create hsr debugfs directory
[   87.210229][ T5823] hsr_slave_0: entered promiscuous mode
[   87.217162][ T5823] hsr_slave_1: entered promiscuous mode
[   87.223596][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   87.229710][ T5823] Cannot create hsr debugfs directory
[   87.241499][ T5829] hsr_slave_0: entered promiscuous mode
[   87.248498][ T5829] hsr_slave_1: entered promiscuous mode
[   87.254937][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   87.260683][ T5829] Cannot create hsr debugfs directory
[   87.814161][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.840982][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.852279][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.873334][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.921196][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.943755][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.955405][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.976216][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.066281][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.085643][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.133534][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.162885][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.210579][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.241075][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.264487][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.277433][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.290147][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   88.314829][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.364789][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.372429][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.382183][ T5840] Bluetooth: hci1: command tx timeout
[   88.388975][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.396446][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.414573][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.462793][ T5832] Bluetooth: hci3: command tx timeout
[   88.468248][ T5832] Bluetooth: hci4: command tx timeout
[   88.474343][ T5840] Bluetooth: hci0: command tx timeout
[   88.480061][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.498296][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.509562][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   88.532773][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.541897][ T5832] Bluetooth: hci2: command tx timeout
[   88.556951][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.564110][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.586507][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.625391][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.632614][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.768586][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.837008][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.867982][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.913423][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   88.949115][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.956314][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.973887][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.981085][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.019125][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   89.099994][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.107204][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.152135][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.159346][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.176573][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.202456][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   89.239763][  T106] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.247079][  T106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.260346][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.291609][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.318134][  T106] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.325373][  T106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.569276][ T5838] veth0_vlan: entered promiscuous mode
[   89.696011][ T5838] veth1_vlan: entered promiscuous mode
[   89.768320][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.855830][ T5838] veth0_macvtap: entered promiscuous mode
[   89.883642][ T5838] veth1_macvtap: entered promiscuous mode
[   89.975361][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.989453][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.016197][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.033423][ T5831] veth0_vlan: entered promiscuous mode
[   90.050732][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.081417][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.091225][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.110140][ T5831] veth1_vlan: entered promiscuous mode
[   90.118132][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.165849][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.184563][ T5824] veth0_vlan: entered promiscuous mode
[   90.239215][ T5824] veth1_vlan: entered promiscuous mode
[   90.299012][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.314761][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.328209][ T5831] veth0_macvtap: entered promiscuous mode
[   90.341457][ T5831] veth1_macvtap: entered promiscuous mode
[   90.353456][ T5829] veth0_vlan: entered promiscuous mode
[   90.380706][ T5823] veth0_vlan: entered promiscuous mode
[   90.404006][ T5823] veth1_vlan: entered promiscuous mode
[   90.416001][  T334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.424663][ T5829] veth1_vlan: entered promiscuous mode
[   90.425391][  T334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.440664][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.463061][ T5832] Bluetooth: hci1: command tx timeout
[   90.477209][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.522222][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   90.535885][   T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.545947][ T5832] Bluetooth: hci3: command tx timeout
[   90.552106][ T5832] Bluetooth: hci4: command tx timeout
[   90.557554][ T5832] Bluetooth: hci0: command tx timeout
[   90.566639][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.579318][ T5824] veth0_macvtap: entered promiscuous mode
[   90.597631][   T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.610095][   T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.624014][ T5832] Bluetooth: hci2: command tx timeout
[   90.641414][ T5824] veth1_macvtap: entered promiscuous mode
[   90.676343][ T5823] veth0_macvtap: entered promiscuous mode
[   90.709954][ T5823] veth1_macvtap: entered promiscuous mode
[   90.738734][ T5829] veth0_macvtap: entered promiscuous mode
[   90.766928][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.785452][ T5829] veth1_macvtap: entered promiscuous mode
[   90.842837][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.865746][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.907522][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.955619][  T334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.968214][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.978962][  T334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.980391][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.003931][  T334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.012243][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.027546][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.044825][  T334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.054565][  T334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.081286][  T334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.090758][  T334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.114518][  T334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.136605][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.155175][  T334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.162239][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.184420][  T334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.198603][  T334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.238486][  T334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.294605][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.314554][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.387976][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.407393][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.454588][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.466195][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.506758][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.516735][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.555884][  T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.595251][  T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.621020][ T5950] netlink: 'syz.4.5': attribute type 1 has an invalid length.
[   91.793941][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.826732][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.828393][ T5958] sctp: [Deprecated]: syz.2.3 (pid 5958) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.828393][ T5958] Use struct sctp_sack_info instead
[   91.898464][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   91.979122][ T5958] xfrm1: entered promiscuous mode
[   92.006722][   T42] cfg80211: failed to load regulatory.db
[   92.009446][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   92.026014][ T5958] xfrm1: entered allmulticast mode
[   92.418329][ T5972] netlink: 'syz.0.10': attribute type 13 has an invalid length.
[   92.543497][ T5832] Bluetooth: hci1: command tx timeout
[   92.623718][ T5832] Bluetooth: hci0: command tx timeout
[   92.626279][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'.
[   92.629525][ T5840] Bluetooth: hci4: command tx timeout
[   92.637991][ T5833] Bluetooth: hci3: command tx timeout
[   92.703200][ T5840] Bluetooth: hci2: command tx timeout
[   92.763018][ T5984] syzkaller1: entered promiscuous mode
[   92.780077][ T5984] syzkaller1: entered allmulticast mode
[   93.070291][ T6008] syz_tun: entered allmulticast mode
[   93.169957][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   93.223562][ T6007] syz_tun: left allmulticast mode
[   93.228230][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   93.349126][ T6011] hsr0: entered promiscuous mode
[   93.372858][ T6011] macvlan2: entered allmulticast mode
[   93.398674][ T6011] hsr0: entered allmulticast mode
[   93.409004][ T6011] hsr_slave_0: entered allmulticast mode
[   93.415845][ T6011] hsr_slave_1: entered allmulticast mode
[   93.494923][ T6014] macvlan3: entered allmulticast mode
[   93.530686][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.562267][ T6032] Cannot find add_set index 0 as target
[   93.960104][ T6045] netlink: 'syz.4.26': attribute type 29 has an invalid length.
[   94.238950][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'.
[   94.623754][ T6078] openvswitch: netlink: Key type 267 is out of range max 32
[   94.684141][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   94.727030][ T6081] Zero length message leads to an empty skb
[   94.966294][ T6090] vlan1: entered allmulticast mode
[   94.971554][ T6090] veth0_vlan: entered allmulticast mode
[   95.377150][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.421509][ T6117] netlink: 164 bytes leftover after parsing attributes in process `syz.4.45'.
[   95.560016][ T6121] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   95.865067][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'.
[   95.897268][ T6134] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.50'.
[   95.926044][ T6135] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   96.059586][ T6131] syzkaller0: entered promiscuous mode
[   96.083112][ T6131] syzkaller0: entered allmulticast mode
[   96.103005][ T6142] netlink: 'syz.2.52': attribute type 23 has an invalid length.
[   96.138227][ T6138] openvswitch: netlink: Port -1 exceeds max allowable 65535
[   97.185468][ T6190] bond1: Unable to set down delay as MII monitoring is disabled
[   97.253696][ T6190] bond1 (unregistering): Released all slaves
[   97.680338][ T6226] __nla_validate_parse: 5 callbacks suppressed
[   97.680360][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'.
[   97.699135][ T6226] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.70'.
[   97.834133][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'.
[   97.868834][ T6234] ieee802154 phy0 wpan0: encryption failed: -22
[   97.894103][ T6231] netlink: 13 bytes leftover after parsing attributes in process `syz.3.71'.
[   97.912512][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   98.078788][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'.
[   98.514857][ T6269] netlink: 'syz.4.81': attribute type 1 has an invalid length.
[   98.687413][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'.
[   98.699286][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'.
[   98.715703][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.85'.
[   98.820609][ T6284] ipvlan0: entered allmulticast mode
[   98.828752][ T6284] batadv_slave_1: entered allmulticast mode
[   98.840689][ T6277] netlink: 68 bytes leftover after parsing attributes in process `syz.4.85'.
[   98.857752][ T6284] batman_adv: batadv0: Adding interface: ipvlan0
[   98.867609][ T6284] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   98.893799][ T6288] syz.0.88 uses obsolete (PF_INET,SOCK_PACKET)
[   98.904495][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.916491][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.926992][ T6284] batman_adv: batadv0: Interface activated: ipvlan0
[   99.269677][ T6297] syzkaller0: entered promiscuous mode
[   99.278484][ T6297] syzkaller0: entered allmulticast mode
[   99.447465][ T6310] netlink: 'syz.2.95': attribute type 3 has an invalid length.
[   99.512265][ T6312] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   99.641330][ T6316] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   99.648549][ T5882] IPVS: starting estimator thread 0...
[   99.665453][ T6317] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   99.781939][ T6320] IPVS: using max 28 ests per chain, 67200 per kthread
[  101.170850][ T6349] SET target dimension over the limit!
[  101.201295][ T6353] netlink: zone id is out of range
[  101.218721][ T6353] netlink: zone id is out of range
[  101.241832][ T6353] netlink: zone id is out of range
[  101.263379][ T6353] netlink: zone id is out of range
[  101.281851][ T6353] netlink: zone id is out of range
[  101.290732][ T6353] netlink: zone id is out of range
[  101.302930][ T6353] netlink: zone id is out of range
[  101.319662][ T6353] netlink: zone id is out of range
[  102.022615][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.036137][ T6380] bond1: entered promiscuous mode
[  102.044033][ T6380] bond1: entered allmulticast mode
[  102.061041][ T6380] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.070658][ T6380] team0: Port device bond1 added
[  102.106118][ T6380] vxcan3: entered promiscuous mode
[  102.148594][ T6380] bond1: (slave vxcan3): refused to change device type
[  102.459034][ T6391] nbd0: detected capacity change from 0 to 63
[  102.543408][ T5832] block nbd0: Receive control failed (result -104)
[  102.553697][ T5840] block nbd0: Receive control failed (result -32)
[  103.275664][ T6458] netlink: 'syz.0.136': attribute type 10 has an invalid length.
[  103.558027][ T6469] __nla_validate_parse: 9 callbacks suppressed
[  103.558049][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[  103.739479][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'.
[  103.750384][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'.
[  103.764726][ T6477] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  104.352120][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'.
[  104.399250][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'.
[  104.401166][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[  104.451148][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'.
[  104.520208][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[  104.545675][ T6515] IPv6: sit1: Disabled Multicast RS
[  104.557135][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'.
[  104.567968][ T1154] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.606619][ T1154] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.618603][ T1154] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.630202][ T1154] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.700387][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'.
[  105.137466][ T6548] netlink: 'syz.2.165': attribute type 1 has an invalid length.
[  105.573568][ T6565] syzkaller1: entered allmulticast mode
[  105.766049][ T6577] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  105.886879][ T6586] netlink: 'syz.3.179': attribute type 1 has an invalid length.
[  105.921578][ T6586] netlink: 'syz.3.179': attribute type 2 has an invalid length.
[  105.942606][ T6592] netlink: 'syz.3.179': attribute type 1 has an invalid length.
[  105.952645][ T6592] netlink: 'syz.3.179': attribute type 2 has an invalid length.
[  105.960370][ T6586] netlink: 'syz.3.179': attribute type 1 has an invalid length.
[  105.979854][ T6592] netlink: 'syz.3.179': attribute type 1 has an invalid length.
[  106.166757][ T6595] team0 (unregistering): Port device team_slave_0 removed
[  106.224603][ T6602] net_ratelimit: 53 callbacks suppressed
[  106.224624][ T6602] openvswitch: netlink: Flow key attr not present in new flow.
[  106.296411][ T6595] team0 (unregistering): Port device team_slave_1 removed
[  106.334904][ T6607] raw_sendmsg: syz.0.182 forgot to set AF_INET. Fix it!
[  106.477828][ T6612] bond1: entered promiscuous mode
[  106.601554][ T6617] macvlan2: entered promiscuous mode
[  106.638650][ T6617] macvlan2: entered allmulticast mode
[  106.672205][ T6617] bond1: (slave macvlan2): Opening slave failed
[  107.674377][ T6685] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.744307][ T6687] netem: change failed
[  107.756056][ T6687] netlink: 'syz.4.209': attribute type 1 has an invalid length.
[  108.191470][ T6703] IPVS: length: 4096 != 8
[  108.412648][ T6710] openvswitch: netlink: Message has -2 unknown bytes.
[  108.422791][ T6710] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[  108.430510][ T6710] netlink: 'syz.1.218': attribute type 3 has an invalid length.
[  108.439683][ T6710] NCSI netlink: No device for ifindex 813332851
[  108.457622][ T6709] ip6erspan0: entered allmulticast mode
[  108.476294][ T6709] IPVS: Error connecting to the multicast addr
[  108.540852][ T6717] ��: renamed from team_slave_1 (while UP)
[  108.671810][   T29] audit: type=1804 audit(1775109172.182:2): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.221" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=210 res=1 errno=0
[  108.765240][   T29] audit: type=1800 audit(1775109172.182:3): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.221" name="cgroup.controllers" dev="tmpfs" ino=210 res=0 errno=0
[  109.030194][ T6746] veth0: entered promiscuous mode
[  109.089839][ T6746] __nla_validate_parse: 25 callbacks suppressed
[  109.089861][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[  109.650682][ T6774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.238'.
[  109.765687][ T6785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.239'.
[  110.353918][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'.
[  110.520578][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[  110.840922][ T6839] netlink: 256 bytes leftover after parsing attributes in process `syz.0.259'.
[  111.227318][ T6856] vlan0: entered allmulticast mode
[  111.235735][ T6856] bridge0: entered allmulticast mode
[  111.241652][ T6856] bridge0: port 3(vlan0) entered blocking state
[  111.250249][ T6856] bridge0: port 3(vlan0) entered disabled state
[  111.305240][ T6861] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  111.335980][ T6865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'.
[  111.513484][ T6871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.520984][ T6871] IPv6: NLM_F_CREATE should be set when creating new route
[  111.563486][ T6871] lo: entered allmulticast mode
[  111.571420][ T6871] tunl0: entered allmulticast mode
[  111.603323][ T6871] gre0: entered allmulticast mode
[  111.626788][ T6871] gretap0: entered allmulticast mode
[  111.653497][ T6871] erspan0: entered allmulticast mode
[  111.675352][ T6880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'.
[  111.682414][ T6871] ip_vti0: entered allmulticast mode
[  111.692773][ T6871] ip6_vti0: entered allmulticast mode
[  111.702310][ T6871] sit0: entered allmulticast mode
[  111.714445][ T6871] ip6tnl0: entered allmulticast mode
[  111.727145][ T6871] ip6gre0: entered allmulticast mode
[  111.739428][ T6871] syz_tun: entered allmulticast mode
[  111.754101][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'.
[  111.768482][ T6871] ip6gretap0: entered allmulticast mode
[  111.809420][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.818145][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.844066][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'.
[  111.874217][ T6871] vcan0: entered allmulticast mode
[  111.901404][ T6871] bond0: entered allmulticast mode
[  111.913297][ T6871] bond_slave_0: entered allmulticast mode
[  111.926955][ T6871] bond_slave_1: entered allmulticast mode
[  111.948012][ T6871] team0: entered allmulticast mode
[  111.953642][ T6871] team_slave_0: entered allmulticast mode
[  111.959467][ T6871] ��: entered allmulticast mode
[  111.969439][ T6871] dummy0: entered allmulticast mode
[  111.981529][ T6871] nlmon0: entered allmulticast mode
[  111.990173][ T6871] caif0: entered allmulticast mode
[  111.997980][ T6871] batadv0: entered allmulticast mode
[  112.007473][ T6871] vxcan0: entered allmulticast mode
[  112.015899][ T6871] vxcan1: entered allmulticast mode
[  112.025331][ T6871] wg0: entered allmulticast mode
[  112.033260][ T6871] wg1: entered allmulticast mode
[  112.040453][ T6871] wg2: entered allmulticast mode
[  112.047747][ T6871] veth0_to_bridge: entered allmulticast mode
[  112.057882][ T6871] veth1_to_bridge: entered allmulticast mode
[  112.068382][ T6871] veth0_to_bond: entered allmulticast mode
[  112.080421][ T6871] veth1_to_bond: entered allmulticast mode
[  112.089384][ T6871] veth0_to_team: entered allmulticast mode
[  112.099139][ T6871] veth1_to_team: entered allmulticast mode
[  112.109037][ T6871] veth0_to_batadv: entered allmulticast mode
[  112.118008][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.125668][ T6871] batadv_slave_0: entered allmulticast mode
[  112.137397][ T6871] veth1_to_batadv: entered allmulticast mode
[  112.147555][ T6871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.157839][ T6871] xfrm0: entered allmulticast mode
[  112.165453][ T6871] veth0_to_hsr: entered allmulticast mode
[  112.173455][ T6871] hsr_slave_0: entered allmulticast mode
[  112.185074][ T6871] veth1_to_hsr: entered allmulticast mode
[  112.193232][ T6871] hsr_slave_1: entered allmulticast mode
[  112.204342][ T6871] hsr0: entered allmulticast mode
[  112.211628][ T6871] veth1_virt_wifi: entered allmulticast mode
[  112.221113][ T6871] veth0_virt_wifi: entered allmulticast mode
[  112.232729][ T6871] virt_wifi0: entered allmulticast mode
[  112.239025][ T6871] veth1_macvtap: entered allmulticast mode
[  112.247590][ T6871] veth0_macvtap: entered allmulticast mode
[  112.257402][ T6871] macvtap0: entered allmulticast mode
[  112.265754][ T6871] macsec0: entered allmulticast mode
[  112.275308][ T6871] geneve0: entered allmulticast mode
[  112.285045][ T6871] geneve1: entered allmulticast mode
[  112.296222][ T6871] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  112.310204][ T6871] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  112.322084][ T6871] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  112.334502][ T6871] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  112.347824][ T6871] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  112.363221][ T6871] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  112.372059][ T6871] xfrm1: left promiscuous mode
[  112.377020][ T6871] bond1: entered allmulticast mode
[  112.385905][ T6871] gtp0: entered allmulticast mode
[  112.393982][ T6871] batman_adv: batadv0: Interface deactivated: ipvlan0
[  112.404166][ T6871] batadv1: entered allmulticast mode
[  112.409842][ T6871] sit1: entered allmulticast mode
[  112.417096][ T6871] syzkaller0: entered allmulticast mode
[  112.447413][ T6883] syzkaller1: entered promiscuous mode
[  112.453088][ T6883] syzkaller1: entered allmulticast mode
[  112.459405][   T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.610405][   T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.631912][   T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.652468][   T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.997777][ T6918] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  113.299878][ T6943] validate_nla: 1 callbacks suppressed
[  113.299898][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.436325][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.584679][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.715775][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.799446][ T6963] Bluetooth: MGMT ver 1.23
[  113.809034][ T6963] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  113.833715][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.925230][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  113.976024][ T6969] openvswitch: netlink: Invalid VLAN frame
[  114.035146][ T6943] netlink: 'syz.4.290': attribute type 58 has an invalid length.
[  114.054810][ T1341] nci: nci_ntf_packet: unknown ntf opcode 0x112
[  114.154177][ T6983] 
s5���: renamed from vlan1 (while UP)
[  114.306358][ T6991] xt_hashlimit: size too large, truncated to 1048576
[  114.535665][ T6994] __nla_validate_parse: 13 callbacks suppressed
[  114.535690][ T6994] netlink: 104 bytes leftover after parsing attributes in process `syz.4.302'.
[  114.963878][ T7015] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  115.001240][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'.
[  115.027995][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'.
[  115.072109][ T7024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'.
[  115.095291][ T7024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.311'.
[  115.755915][ T7056] xt_l2tp: missing protocol rule (udp|l2tpip)
[  115.783865][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[  115.969732][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'.
[  116.137415][ T7075] h: entered promiscuous mode
[  116.215524][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'.
[  116.390913][ T7092] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.646678][ T7103] 8021q: VLANs not supported on ip_vti0
[  116.684197][ T7103] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.337'.
[  116.859798][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[  117.191150][ T7123] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  117.265610][ T7127] netlink: 'syz.1.343': attribute type 10 has an invalid length.
[  117.275913][ T7120] syzkaller0: entered promiscuous mode
[  117.294067][ T7120] syzkaller0: entered allmulticast mode
[  117.307285][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.335772][ T7127] bridge_slave_1: left allmulticast mode
[  117.341637][ T7127] bridge_slave_1: left promiscuous mode
[  117.348675][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.396170][ T7127] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  117.780228][ T7153] 8021q: adding VLAN 0 to HW filter on device team0
[  117.979989][ T7163] hsr_slave_0 (unregistering): left promiscuous mode
[  118.610746][ T7197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.653965][ T7197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.673575][ T7197] bond0 (unregistering): Released all slaves
[  118.855091][ T7206] netlink: 'syz.4.366': attribute type 21 has an invalid length.
[  118.880987][ T7206] IPv6: NLM_F_CREATE should be specified when creating new route
[  118.893567][ T7206] netlink: 'syz.4.366': attribute type 1 has an invalid length.
[  118.908576][ T7209] netlink: 'syz.4.366': attribute type 21 has an invalid length.
[  118.916663][ T7209] netlink: 'syz.4.366': attribute type 1 has an invalid length.
[  119.504408][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  120.691951][ T7249] __nla_validate_parse: 7 callbacks suppressed
[  120.691972][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[  120.746832][ T7253] Bluetooth: MGMT ver 1.23
[  120.766874][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[  120.937343][ T7263] erspan1: entered promiscuous mode
[  120.971141][ T7266] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  120.985506][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[  120.995459][ T7267] syzkaller1: entered promiscuous mode
[  121.000982][ T7267] syzkaller1: entered allmulticast mode
[  121.031228][ T7266] syzkaller0: entered promiscuous mode
[  121.041983][ T7266] syzkaller0: entered allmulticast mode
[  121.299773][ T7286] netlink: 'syz.1.391': attribute type 28 has an invalid length.
[  121.345888][ T7286] netlink: 'syz.1.391': attribute type 3 has an invalid length.
[  121.411043][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.391'.
[  121.486168][ T7296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'.
[  121.500983][ T5906] IPVS: starting estimator thread 0...
[  121.651857][ T7301] IPVS: using max 30 ests per chain, 72000 per kthread
[  121.661447][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[  121.747356][ T7307] netlink: 'syz.2.394': attribute type 30 has an invalid length.
[  121.988044][   T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.053478][  T334] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.176384][  T334] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.252496][ T7335] netlink: 236 bytes leftover after parsing attributes in process `syz.1.404'.
[  122.262933][ T7335] netlink: 236 bytes leftover after parsing attributes in process `syz.1.404'.
[  122.296565][  T334] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.455191][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[  122.715488][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'.
[  122.817167][ T7362] ipt_ECN: cannot use operation on non-tcp rule
[  122.828775][ T7362] netlink: 'syz.4.413': attribute type 1 has an invalid length.
[  122.837702][ T7362] netlink: 'syz.4.413': attribute type 2 has an invalid length.
[  122.896254][ T7354] bond2: entered promiscuous mode
[  123.216624][ T7388] syzkaller0: entered promiscuous mode
[  123.223713][ T7386] openvswitch: netlink: IP tunnel dst address not specified
[  123.243346][ T7388] syzkaller0: entered allmulticast mode
[  123.376613][ T7389] syzkaller0: entered promiscuous mode
[  123.410769][ T7389] syzkaller0: entered allmulticast mode
[  123.944120][ T7423] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20003
[  124.072663][ T7430] IPv6: sit1: Disabled Multicast RS
[  124.190169][ T7436] ��: renamed from team_slave_1 (while UP)
[  124.374099][ T7446] bridge_slave_1: default FDB implementation only supports local addresses
[  125.394623][ T7508] syzkaller0: entered promiscuous mode
[  125.425446][ T7508] syzkaller0: entered allmulticast mode
[  125.570308][ T7521] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[  125.680773][ T7523] netlink: 'syz.3.461': attribute type 1 has an invalid length.
[  125.710773][ T7529] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.729624][ T7528] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.934504][ T7525] bond3: (slave gretap1): making interface the new active one
[  125.944947][ T7525] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  125.998435][ T7523] bond1: entered promiscuous mode
[  126.004925][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.047874][ T7539] macvtap1: entered allmulticast mode
[  126.100753][ T7545] bond1: (slave bridge2): making interface the new active one
[  126.111753][ T7545] bridge2: entered promiscuous mode
[  126.124787][ T7545] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  126.154848][ T7552] __nla_validate_parse: 10 callbacks suppressed
[  126.154870][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[  126.247403][ T7556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  126.386215][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'.
[  126.535746][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'.
[  126.555491][ T7572] netlink: 'syz.1.472': attribute type 21 has an invalid length.
[  126.564925][ T7572] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.577833][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  126.583600][ T7572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.594092][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  126.601373][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  126.608694][ T7572] IPv6: NLM_F_CREATE should be set when creating new route
[  126.956787][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'.
[  126.970770][ T7593] netlink: 76 bytes leftover after parsing attributes in process `syz.3.480'.
[  126.985217][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'.
[  127.002452][ T7593] syzkaller0: entered promiscuous mode
[  127.008455][ T7593] syzkaller0: entered allmulticast mode
[  127.031075][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.038294][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.044812][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.051270][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.057766][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.064608][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.071054][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.077545][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.084033][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.090454][ T7593] tc action pedit 'at' offset 65537 out of bounds
[  127.097004][ T7593] 0: reclassify loop, rule prio 0, protocol 800
[  127.308897][ T7608] trusted_key: syz.1.483 sent an empty control message without MSG_MORE.
[  127.356793][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'.
[  127.540693][ T7615] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[  127.674608][ T7623] bridge_slave_0: left allmulticast mode
[  127.680490][ T7623] bridge_slave_0: left promiscuous mode
[  127.686959][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.706263][ T7623] bond0: (slave bridge_slave_1): Releasing backup interface
[  127.716688][ T7623] bond0: (slave bond_slave_0): Releasing backup interface
[  127.727424][ T7623] bond0: (slave bond_slave_1): Releasing backup interface
[  127.745612][ T7623] team0: Port device team_slave_0 removed
[  127.756096][ T7623] team0: Port device team_slave_1 removed
[  127.763851][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.771356][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.783250][ T7623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.790660][ T7623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.800758][ T7623] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  127.817876][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'.
[  128.081074][ T7639] netlink: 'syz.3.494': attribute type 1 has an invalid length.
[  128.099217][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'.
[  128.245613][ T7645] syzkaller0: entered promiscuous mode
[  128.251504][ T7645] syzkaller0: entered allmulticast mode
[  128.408559][ T5825] IPVS: starting estimator thread 0...
[  128.464298][ T7662] IPVS: sh: FWM 3 0x00000003 - no destination available
[  128.515520][ T7654] IPVS: using max 23 ests per chain, 55200 per kthread
[  128.796424][ T7682] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  129.398869][ T7715] netlink: 'syz.3.513': attribute type 39 has an invalid length.
[  129.580104][ T7725] netlink: 'syz.2.517': attribute type 26 has an invalid length.
[  129.601414][ T7727] netlink: 'syz.4.516': attribute type 10 has an invalid length.
[  129.638639][ T7729] netlink: 'syz.4.516': attribute type 10 has an invalid length.
[  129.840479][ T7741] netlink: 'syz.4.522': attribute type 11 has an invalid length.
[  129.953031][ T7746] vlan1: entered promiscuous mode
[  129.958633][ T7746] vlan1: entered allmulticast mode
[  130.182130][ T7756] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun!
[  130.400660][ T7769] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.568948][ T7782] atomic_op ffff888028c6d198 conn xmit_atomic 0000000000000000
[  130.628839][ T7782] netlink: 'syz.4.533': attribute type 1 has an invalid length.
[  130.653110][ T7782] nbd: error processing sock list
[  130.702808][ T7787] netlink: 'syz.0.534': attribute type 4 has an invalid length.
[  130.760821][ T7787] .`: renamed from bond0 (while UP)
[  130.917062][ T7804] syzkaller0: entered promiscuous mode
[  130.928142][ T7804] syzkaller0: entered allmulticast mode
[  131.300311][ T7818] IPv6: sit1: Disabled Multicast RS
[  131.336688][ T7818] sit1: entered allmulticast mode
[  131.390181][ T7822] syzkaller0: entered promiscuous mode
[  131.399744][ T7822] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  131.412076][ T7828] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  131.434985][ T7822] team0 (unregistering): Port device team_slave_0 removed
[  131.458011][ T7822] team0 (unregistering): Port device 
2
6�� removed
[  131.544248][ T7833] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[  131.564022][ T7833] __nla_validate_parse: 9 callbacks suppressed
[  131.564042][ T7833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.547'.
[  131.660655][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'.
[  131.751222][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'.
[  131.766465][ T7845] netlink: 'syz.1.548': attribute type 13 has an invalid length.
[  131.785729][ T7843] netlink: 'syz.4.550': attribute type 13 has an invalid length.
[  131.881031][ T7843] veth0_macvtap: left promiscuous mode
[  131.887000][ T7843] macvtap0: entered allmulticast mode
[  131.903296][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'.
[  131.917915][ T7843] macvtap0: refused to change device tx_queue_len
[  132.045323][ T7855] openvswitch: netlink: Key type 30 is not supported
[  132.426451][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'.
[  132.445682][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  132.509867][  T334] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.519609][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'.
[  132.543710][  T334] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.564745][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[  132.586806][  T334] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.607910][  T334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.947532][ T1910] block nbd0: Connection timed out, retrying (0/2 alive)
[  132.955787][ T1910] block nbd0: Connection timed out, retrying (0/2 alive)
[  132.964856][ T1910] block nbd0: Connection timed out, retrying (0/2 alive)
[  132.972413][ T1910] block nbd0: Connection timed out, retrying (0/2 alive)
[  132.980224][ T1910] block nbd0: Dead connection, failed to find a fallback
[  132.988134][ T1910] block nbd0: shutting down sockets
[  132.994604][ T1910] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.005427][ T1910] Buffer I/O error on dev nbd0, logical block 3, async page read
[  133.013910][ T1910] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.023722][ T1910] Buffer I/O error on dev nbd0, logical block 2, async page read
[  133.031603][ T1910] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.041248][ T1910] Buffer I/O error on dev nbd0, logical block 1, async page read
[  133.049145][ T1910] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.058813][ T1910] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.068695][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.081489][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.082640][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.090176][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.095911][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.117443][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read
[  133.125662][ T5883] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.135977][ T5883] Buffer I/O error on dev nbd0, logical block 2, async page read
[  133.144072][ T5883] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.154392][ T5883] Buffer I/O error on dev nbd0, logical block 3, async page read
[  133.162708][ T5883] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.173625][ T5883] Buffer I/O error on dev nbd0, logical block 0, async page read
[  133.181466][ T5883] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  133.193537][ T5883] Buffer I/O error on dev nbd0, logical block 1, async page read
[  133.202688][ T5883] ldm_validate_partition_table(): Disk read failed.
[  133.210952][ T5883] Dev nbd0: unable to read RDB block 0
[  133.219529][ T5883]  nbd0: unable to read partition table
[  133.234836][ T5883] ldm_validate_partition_table(): Disk read failed.
[  133.242894][ T5883] Dev nbd0: unable to read RDB block 0
[  133.249046][ T5883]  nbd0: unable to read partition table
[  133.498169][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  134.180229][ T7928] syzkaller0: entered promiscuous mode
[  134.203292][ T7928] syzkaller0: entered allmulticast mode
[  134.817564][ T7974] netlink: 48 bytes leftover after parsing attributes in process `syz.4.579'.
[  137.267276][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'.
[  137.338233][ T8043] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  137.347217][ T8043] netlink: 280 bytes leftover after parsing attributes in process `syz.2.593'.
[  137.492296][ T8054] netlink: 'syz.2.595': attribute type 10 has an invalid length.
[  137.501156][ T8055] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.594'.
[  137.516815][ T8054] bridge_slave_1: left allmulticast mode
[  137.530702][ T8054] bridge_slave_1: left promiscuous mode
[  137.575972][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.680345][ T8054] bridge_slave_1: entered allmulticast mode
[  137.687557][ T8054] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  137.757777][ T8060] nbd1: detected capacity change from 0 to 127
[  137.791275][ T5840] block nbd1: Receive control failed (result -32)
[  137.799920][ T7619] block nbd1: Dead connection, failed to find a fallback
[  137.822583][ T7619] block nbd1: shutting down sockets
[  137.850937][ T7619] ldm_validate_partition_table(): Disk read failed.
[  137.887530][ T7619] Dev nbd1: unable to read RDB block 0
[  137.936007][ T7619]  nbd1: unable to read partition table
[  137.947997][ T8079] netlink: 256 bytes leftover after parsing attributes in process `syz.0.600'.
[  137.975153][ T7619] ldm_validate_partition_table(): Disk read failed.
[  138.014672][ T7619] blk_print_req_error: 234 callbacks suppressed
[  138.014693][ T7619] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.071914][ T7619] buffer_io_error: 234 callbacks suppressed
[  138.071934][ T7619] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.092146][ T8087] netlink: 92 bytes leftover after parsing attributes in process `syz.1.603'.
[  138.121313][ T8095] netlink: 220 bytes leftover after parsing attributes in process `syz.1.603'.
[  138.141824][ T7619] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.164679][ T7619] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.189146][ T7619] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.222603][ T7619] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.251831][ T7619] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.276921][ T7619] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.329029][ T7619] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.363148][ T7619] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.386195][ T7619] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.429131][ T7619] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.437245][ T7619] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.446903][ T7619] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.455188][ T7619] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.465624][ T7619] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.473712][ T7619] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.491786][ T7619] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.510800][ T7619] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  138.531096][ T7619] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.556026][ T8108] bond0: option fail_over_mac: invalid value (16)
[  138.569090][ T8108] bond0 (unregistering): Released all slaves
[  138.588632][ T7619] Dev nbd1: unable to read RDB block 0
[  138.609413][ T7619]  nbd1: unable to read partition table
[  139.008426][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'.
[  139.136943][ T8153] netlink: 'syz.2.624': attribute type 11 has an invalid length.
[  139.165758][ T8153] netlink: 64 bytes leftover after parsing attributes in process `syz.2.624'.
[  139.187566][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[  139.244266][ T8160] netlink: 184 bytes leftover after parsing attributes in process `syz.3.626'.
[  139.422141][ T8164] Bluetooth: MGMT ver 1.23
[  139.433492][ T8164] netlink: 'syz.3.628': attribute type 1 has an invalid length.
[  140.743203][ T8185] IPVS: sh: FWM 3 0x00000003 - no destination available
[  140.756709][ T8186] IPVS: sh: FWM 3 0x00000003 - no destination available
[  142.087720][ T8269] netlink: 'syz.1.655': attribute type 3 has an invalid length.
[  142.098273][ T8260] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  142.123796][ T8260] bond6 (unregistering): Released all slaves
[  142.727529][ T8310] ip6tnl0: Caught tx_queue_len zero misconfig
[  142.810728][ T8315] __nla_validate_parse: 6 callbacks suppressed
[  142.810806][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'.
[  142.829447][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'.
[  143.033782][ T8323] netlink: 'syz.2.671': attribute type 2 has an invalid length.
[  143.090343][ T8323] �9: entered promiscuous mode
[  143.328986][ T8335] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  143.387948][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'.
[  143.409270][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'.
[  143.435180][ T5840] Bluetooth: hci4: link tx timeout
[  143.442626][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.542903][ T8335] bond2: entered promiscuous mode
[  143.560921][ T8335] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.579829][ T8344] netlink: 'syz.1.678': attribute type 4 has an invalid length.
[  143.612145][ T8345] netlink: 'syz.1.678': attribute type 4 has an invalid length.
[  143.704083][ T8349] bond2: (slave bridge2): making interface the new active one
[  143.714632][ T8349] bridge2: entered promiscuous mode
[  143.725078][ T8349] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  143.746463][ T8351] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  143.874440][ T8356] bridge_slave_1: Caught tx_queue_len zero misconfig
[  143.894837][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'.
[  143.938783][ T8375] veth0_macvtap: left promiscuous mode
[  143.979644][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'.
[  144.077256][ T8388] netlink: 'syz.1.685': attribute type 1 has an invalid length.
[  144.120463][ T8388] netlink: 476 bytes leftover after parsing attributes in process `syz.1.685'.
[  144.162739][ T8388] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.685'.
[  144.244951][ T8395] netlink: 'syz.1.685': attribute type 10 has an invalid length.
[  144.363610][ T8389] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  144.415495][ T8389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  144.793479][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.691'.
[  144.798271][ T8416] netlink: 'syz.1.690': attribute type 21 has an invalid length.
[  144.813002][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.691'.
[  144.821865][ T8416] netlink: 'syz.1.690': attribute type 22 has an invalid length.
[  144.831373][ T8416] netlink: 'syz.1.690': attribute type 23 has an invalid length.
[  144.844272][ T8416] netlink: 'syz.1.690': attribute type 25 has an invalid length.
[  144.867256][ T8414] syzkaller0: entered promiscuous mode
[  145.230366][ T8431] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  145.239261][ T8431] bond2: option packets_per_slave: allowed values 0 - 65535
[  145.257165][ T8431] bond2 (unregistering): Released all slaves
[  145.380540][ T8431] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  145.389363][ T8431] bond2: option packets_per_slave: allowed values 0 - 65535
[  145.421625][ T8431] bond2 (unregistering): Released all slaves
[  145.507651][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[  145.561526][ T8431] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  145.570073][ T8431] bond2: option packets_per_slave: allowed values 0 - 65535
[  145.594811][ T8431] bond2 (unregistering): Released all slaves
[  145.754345][ T8431] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  145.794934][ T8431] bond2: option packets_per_slave: allowed values 0 - 65535
[  145.824327][ T8431] bond2 (unregistering): Released all slaves
[  145.834376][ T8471] sctp: [Deprecated]: syz.2.705 (pid 8471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.834376][ T8471] Use struct sctp_sack_info instead
[  145.939589][ T8431] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  145.950645][ T8431] bond2: option packets_per_slave: allowed values 0 - 65535
[  145.977749][ T8431] bond2 (unregistering): Released all slaves
[  146.015512][ T8479] bridge0: port 1(veth0_to_bridge) entered blocking state
[  146.024349][ T8479] bridge0: port 1(veth0_to_bridge) entered disabled state
[  146.040241][ T8479] veth0_to_bridge: entered allmulticast mode
[  146.048900][ T8479] veth0_to_bridge: entered promiscuous mode
[  146.060367][ T8479] bridge0: port 1(veth0_to_bridge) entered blocking state
[  146.068165][ T8479] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  146.214160][ T8490] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  146.353338][ T8498] lo: Caught tx_queue_len zero misconfig
[  147.428106][ T8543] syzkaller1: entered promiscuous mode
[  147.453368][ T8543] syzkaller1: entered allmulticast mode
[  147.681788][ T8550] bridge2: entered promiscuous mode
[  147.687263][ T8550] bridge2: entered allmulticast mode
[  148.846528][ T8607] __nla_validate_parse: 8 callbacks suppressed
[  148.846548][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'.
[  148.928111][ T8607] vlan2: entered allmulticast mode
[  148.965106][ T8607] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  149.386057][ T8594] lec:lec_atm_close: lec0: Shut down!
[  150.027181][ T8629] validate_nla: 6 callbacks suppressed
[  150.027197][ T8629] netlink: 'syz.0.747': attribute type 13 has an invalid length.
[  150.043622][ T8629] veth0_macvtap: left promiscuous mode
[  150.049527][ T8629] macvtap0: entered allmulticast mode
[  150.059991][ T8629] macvtap0: refused to change device tx_queue_len
[  150.863890][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.581548][ T8587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.808953][ T8639] sctp: [Deprecated]: syz.2.750 (pid 8639) Use of int in max_burst socket option.
[  151.808953][ T8639] Use struct sctp_assoc_value instead
[  151.908542][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.4.753'.
[  151.922436][ T8645] syzkaller0: entered promiscuous mode
[  151.942749][ T8645] syzkaller0: entered allmulticast mode
[  151.955742][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'.
[  152.306649][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'.
[  152.311025][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'.
[  152.548004][ T8685] netlink: 294 bytes leftover after parsing attributes in process `syz.4.761'.
[  152.576916][ T8685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.602498][ T8690] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  152.623600][ T8690] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  152.639543][ T8690] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  152.648159][ T8694] pimreg3: entered allmulticast mode
[  153.039255][ T8707] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.767'.
[  153.072344][ T5882] lec:lec_start_xmit: lec0:No lecd attached
[  153.986787][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  154.196774][ T8756] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  154.461180][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.781'.
[  154.680498][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'.
[  154.706416][ T8787] tipc: Started in network mode
[  154.711443][ T8787] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  154.724012][ T8787] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  154.951274][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.966075][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.981006][ T8803] batman_adv: batadv0: Removing interface: ipvlan0
[  154.986661][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.793'.
[  155.006692][ T8802] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  155.359937][ T8823] netlink: 1 bytes leftover after parsing attributes in process `syz.4.799'.
[  155.429653][ T8828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'.
[  155.534470][ T8835] SET target dimension over the limit!
[  155.622779][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'.
[  155.655251][ T8845] netlink: 96 bytes leftover after parsing attributes in process `syz.3.807'.
[  155.722033][ T8847] netlink: 'syz.2.808': attribute type 29 has an invalid length.
[  155.730465][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  155.827556][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'.
[  155.923673][ T8852] netlink: 'syz.1.811': attribute type 64 has an invalid length.
[  156.065650][ T8866] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  156.398760][ T8887] tipc: Started in network mode
[  156.421780][ T8887] tipc: Node identity 4, cluster identity 4711
[  156.428013][ T8887] tipc: Node number set to 4
[  156.454438][ T8893] netlink: 'syz.3.824': attribute type 1 has an invalid length.
[  157.162707][ T8939] syzkaller0: entered promiscuous mode
[  157.192089][ T8939] syzkaller0: entered allmulticast mode
[  157.441389][ T8953] xfrm2: entered allmulticast mode
[  157.636649][ T8967] netlink: 'syz.1.847': attribute type 10 has an invalid length.
[  157.811039][ T8972] : entered promiscuous mode
[  157.830277][ T8971] netlink: 'syz.2.848': attribute type 2 has an invalid length.
[  158.081716][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  158.090302][    C1] lec:lec_tx_timeout: lec0
[  158.095141][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  158.124086][ T8995] vlan1: left allmulticast mode
[  158.130596][ T8995] veth0_vlan: left allmulticast mode
[  158.137890][ T8996] lo: Caught tx_queue_len zero misconfig
[  158.161538][ T8996] xfrm1: entered promiscuous mode
[  158.167506][ T8996] xfrm1: entered allmulticast mode
[  158.190466][ T8993] xfrm1: entered allmulticast mode
[  158.211393][ T9001] delete_channel: no stack
[  158.426643][ T9016] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20006
[  158.455812][ T9016] IPVS: sh: FWM 3 0x00000003 - no destination available
[  159.153832][ T9050] __nla_validate_parse: 8 callbacks suppressed
[  159.153856][ T9050] netlink: 104 bytes leftover after parsing attributes in process `syz.3.868'.
[  159.431749][ T9087] syz.3.874 (9087) used obsolete PPPIOCDETACH ioctl
[  159.874211][ T9114] syzkaller0: entered promiscuous mode
[  159.879756][ T9114] syzkaller0: entered allmulticast mode
[  159.953348][ T9116] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  159.982034][ T9116] netlink: 'syz.2.881': attribute type 7 has an invalid length.
[  159.989747][ T9116] netlink: 'syz.2.881': attribute type 8 has an invalid length.
[  160.022006][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.881'.
[  160.113215][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'.
[  160.140701][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'.
[  160.249759][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'.
[  160.351475][ T9134] netlink: 'syz.3.883': attribute type 10 has an invalid length.
[  160.393902][ T9134] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.860721][ T9161] erspan0: entered promiscuous mode
[  160.878820][ T9161] vlan2: entered promiscuous mode
[  160.893330][ T9166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.886'.
[  162.624552][ T9097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  162.920589][ T9217] 8021q: adding VLAN 0 to HW filter on device bond6
[  163.111936][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  163.120010][    C1] lec:lec_tx_timeout: lec0
[  163.124698][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  163.194330][ T9249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  163.204781][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'.
[  163.270867][ T9249] xt_ecn: cannot match TCP bits for non-tcp packets
[  163.271052][ T9245] netlink: 147416 bytes leftover after parsing attributes in process `syz.0.899'.
[  163.482842][ T9262] netlink: 112 bytes leftover after parsing attributes in process `syz.4.905'.
[  163.652113][ T9269] xt_hashlimit: size too large, truncated to 1048576
[  163.935251][ T9281] IPVS: length: 24 != 4520664
[  164.163137][ T9294] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.918'.
[  164.337146][ T9306] netlink: 164 bytes leftover after parsing attributes in process `syz.1.920'.
[  164.350833][ T9306] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  164.494905][ T9320] xt_l2tp: missing protocol rule (udp|l2tpip)
[  164.764772][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  164.899328][ T9348] veth0: Caught tx_queue_len zero misconfig
[  164.916020][ T9348] netlink: 'syz.1.935': attribute type 3 has an invalid length.
[  165.146858][ T9365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'.
[  165.220195][ T9366] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[  165.229782][ T9366] netlink: 216 bytes leftover after parsing attributes in process `syz.2.938'.
[  165.616766][ T9382] bond0: option resend_igmp: invalid value (32767)
[  165.623990][ T9382] bond0: option resend_igmp: allowed values 0 - 255
[  165.636385][ T9382] bond0 (unregistering): Released all slaves
[  165.716761][ T9385] bond0: option resend_igmp: invalid value (32767)
[  165.725183][ T9385] bond0: option resend_igmp: allowed values 0 - 255
[  165.734706][ T9385] bond0 (unregistering): Released all slaves
[  166.863196][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.873109][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.883207][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.502433][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.512484][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.523216][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.715502][ T9333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  167.821060][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  167.929563][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.942930][ T9463] netlink: 'syz.3.948': attribute type 10 has an invalid length.
[  167.958376][ T9452] bond0: (slave rose0): Enslaving as an active interface with an up link
[  167.968066][ T9457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  168.013709][ T9466] Driver unsupported XDP return value 0 on prog  (id 137) dev N/A, expect packet loss!
[  168.027949][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.035772][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.089359][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.096675][ T9463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.104451][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.111710][ T9463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.131734][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  168.139866][    C1] lec:lec_tx_timeout: lec0
[  168.145226][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  168.148687][ T9463] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  168.542274][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.587732][ T9498] netlink: 'syz.1.955': attribute type 1 has an invalid length.
[  168.903066][ T9516] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  168.983659][ T9521] netlink: 100 bytes leftover after parsing attributes in process `syz.1.959'.
[  169.092880][ T9525] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.103727][ T9525] bond3: (slave bond4): making interface the new active one
[  169.164677][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.958'.
[  169.164878][ T9525] bond3: (slave bond4): Enslaving as an active interface with an up link
[  169.245674][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'.
[  169.315262][ T9516] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  169.362502][ T9532] 8021q: adding VLAN 0 to HW filter on device bond3
[  169.526667][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'.
[  169.583830][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.992919][ T9574] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  170.073962][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.082899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.621954][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.110533][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'.
[  171.166306][ T9618] netlink: 'syz.3.983': attribute type 8 has an invalid length.
[  171.241051][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'.
[  171.426892][ T9632] syzkaller0: entered promiscuous mode
[  171.432806][ T9632] syzkaller0: entered allmulticast mode
[  171.447371][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'.
[  171.662878][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.058521][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.994'.
[  172.102164][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.994'.
[  172.249939][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'.
[  172.262132][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'.
[  172.379035][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'.
[  172.495319][ T9690] tipc: Trying to set illegal importance in message
[  172.623410][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.632568][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.701993][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.743116][ T9708] IPVS: sh: FWM 3 0x00000003 - no destination available
[  172.968404][ T9718] syzkaller0: entered promiscuous mode
[  172.975342][ T9718] syzkaller0: entered allmulticast mode
[  173.057588][ T9724] netlink: 'syz.1.1012': attribute type 2 has an invalid length.
[  173.062848][ T9719] syzkaller0: entered promiscuous mode
[  173.078464][ T9719] syzkaller0: entered allmulticast mode
[  173.087231][ T9724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.151696][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  173.159789][    C1] lec:lec_tx_timeout: lec0
[  173.164957][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  173.547609][ T9747] x_tables: duplicate underflow at hook 2
[  173.550859][ T9748] netlink: 'syz.1.1018': attribute type 10 has an invalid length.
[  173.568482][ T9748] bridge0: port 1(veth0_to_bridge) entered disabled state
[  173.594151][ T9748] bridge0: port 1(veth0_to_bridge) entered blocking state
[  173.601516][ T9748] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  173.634701][ T9748] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  174.098332][ T9779] netlink: 'syz.2.1030': attribute type 39 has an invalid length.
[  174.310862][ T9792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  174.347460][ T9792] __nla_validate_parse: 9 callbacks suppressed
[  174.347482][ T9792] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1035'.
[  174.368723][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[  174.403428][ T9797] xt_limit: Overflow, try lower: 604147548/4200216962
[  174.782464][ T5825] net_ratelimit: 2 callbacks suppressed
[  174.782483][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.828554][ T9821] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1040'.
[  174.843818][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1040'.
[  174.855916][ T9824] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  174.952587][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  175.017543][ T9836] syzkaller1: entered promiscuous mode
[  175.023862][ T9836] syzkaller1: entered allmulticast mode
[  175.304788][ T9852] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1051'.
[  175.315961][ T9853] PKCS7: Unknown OID: [4] (bad)
[  175.321012][ T9853] PKCS7: Only support pkcs7_signedData type
[  175.395656][ T9857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.405165][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.466033][ T5832] block nbd2: Receive control failed (result -32)
[  175.494093][ T9857] nbd2: detected capacity change from 0 to 127
[  175.518572][ T7619] block nbd2: Dead connection, failed to find a fallback
[  175.571451][ T7619] block nbd2: shutting down sockets
[  175.650575][ T7619] blk_print_req_error: 42 callbacks suppressed
[  175.650599][ T7619] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.700204][ T7619] buffer_io_error: 42 callbacks suppressed
[  175.700224][ T7619] Buffer I/O error on dev nbd2, logical block 0, async page read
[  175.727588][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'.
[  175.736848][ T7619] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.747442][ T7619] Buffer I/O error on dev nbd2, logical block 1, async page read
[  175.767212][ T7619] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.771495][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'.
[  175.784294][ T7619] Buffer I/O error on dev nbd2, logical block 2, async page read
[  175.791067][ T9873] netlink: 'syz.4.1057': attribute type 5 has an invalid length.
[  175.802167][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'.
[  175.811242][ T9874] netlink: 'syz.4.1057': attribute type 5 has an invalid length.
[  175.820431][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1057'.
[  175.839673][ T7619] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.839695][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.850780][ T7619] Buffer I/O error on dev nbd2, logical block 3, async page read
[  175.866277][ T7619] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.916375][ T7619] Buffer I/O error on dev nbd2, logical block 0, async page read
[  175.925706][ T7619] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.935808][ T7619] Buffer I/O error on dev nbd2, logical block 1, async page read
[  175.968141][ T7619] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  176.011803][ T7619] Buffer I/O error on dev nbd2, logical block 2, async page read
[  176.030062][ T7619] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  176.059899][ T7619] Buffer I/O error on dev nbd2, logical block 3, async page read
[  176.090321][ T7619] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  176.110179][ T7619] Buffer I/O error on dev nbd2, logical block 0, async page read
[  176.132918][ T7619] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  176.152988][ T7619] Buffer I/O error on dev nbd2, logical block 1, async page read
[  176.155393][ T9893] 
[  176.163291][ T9893] ======================================================
[  176.170336][ T9893] WARNING: possible circular locking dependency detected
[  176.171778][ T7619] ldm_validate_partition_table(): Disk read failed.
[  176.177543][ T9893] syzkaller #0 Not tainted
[  176.177556][ T9893] ------------------------------------------------------
[  176.177564][ T9893] syz.3.1065/9893 is trying to acquire lock:
[  176.177575][ T9893] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180
[  176.205217][ T7619] Dev nbd2: unable to read RDB block 0
[  176.212226][ T9893] 
[  176.212226][ T9893] but task is already holding lock:
[  176.212240][ T9893] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130
[  176.212299][ T9893] 
[  176.212299][ T9893] which lock already depends on the new lock.
[  176.212299][ T9893] 
[  176.212307][ T9893] 
[  176.212307][ T9893] the existing dependency chain (in reverse order) is:
[  176.212314][ T9893] 
[  176.212314][ T9893] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  176.212344][ T9893]        down_write+0x96/0x200
[  176.212369][ T9893]        kernfs_add_one+0x41/0x5c0
[  176.212394][ T9893]        kernfs_create_dir_ns+0xde/0x130
[  176.223635][ T7619]  nbd2: unable to read partition table
[  176.225221][ T9893]        internal_create_group+0x425/0x1180
[  176.290357][ T9893]        cpuhp_invoke_callback+0x445/0x860
[  176.296184][ T9893]        cpuhp_issue_call+0x430/0x7a0
[  176.301564][ T9893]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  176.308335][ T9893]        __cpuhp_setup_state+0x3f/0x60
[  176.314065][ T9893]        do_one_initcall+0x250/0x8d0
[  176.319458][ T9893]        do_initcall_level+0x104/0x190
[  176.324932][ T9893]        do_initcalls+0x59/0xa0
[  176.329798][ T9893]        kernel_init_freeable+0x2a6/0x3e0
[  176.335682][ T9893]        kernel_init+0x1d/0x1d0
[  176.340750][ T9893]        ret_from_fork+0x51e/0xb90
[  176.345896][ T9893]        ret_from_fork_asm+0x1a/0x30
[  176.351374][ T9893] 
[  176.351374][ T9893] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  176.359288][ T9893] 
[  176.359288][ T9893] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  176.367226][ T9893]        cpus_read_lock+0x42/0x160
[  176.372373][ T9893]        static_key_disable+0x12/0x20
[  176.377769][ T9893]        __inet_hash_connect+0x2430/0x2440
[  176.383604][ T9893]        tcp_v4_connect+0xd5f/0x19b0
[  176.389079][ T9893]        __inet_stream_connect+0x25a/0xdd0
[  176.394913][ T9893]        inet_stream_connect+0x66/0xa0
[  176.400483][ T9893]        __sys_connect+0x312/0x450
[  176.405799][ T9893]        __x64_sys_connect+0x7a/0x90
[  176.411236][ T9893]        do_syscall_64+0x14d/0xf80
[  176.416462][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.422923][ T9893] 
[  176.422923][ T9893] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}:
[  176.430708][ T9893]        lock_sock_nested+0x48/0x100
[  176.436009][ T9893]        inet_shutdown+0x6a/0x390
[  176.441042][ T9893]        nbd_mark_nsock_dead+0x2e9/0x560
[  176.446690][ T9893]        recv_work+0x1c7f/0x1d90
[  176.451742][ T9893]        process_scheduled_works+0xb6e/0x18c0
[  176.457813][ T9893]        worker_thread+0xa53/0xfc0
[  176.462930][ T9893]        kthread+0x388/0x470
[  176.467800][ T9893]        ret_from_fork+0x51e/0xb90
[  176.472951][ T9893]        ret_from_fork_asm+0x1a/0x30
[  176.478443][ T9893] 
[  176.478443][ T9893] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  176.486099][ T9893]        __mutex_lock+0x19f/0x1300
[  176.491228][ T9893]        nbd_queue_rq+0x37b/0x1100
[  176.496430][ T9893]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  176.502529][ T9893]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  176.509422][ T9893]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  176.516102][ T9893]        blk_mq_run_hw_queue+0x348/0x4f0
[  176.521833][ T9893]        blk_mq_dispatch_list+0xd16/0xe10
[  176.527681][ T9893]        blk_mq_flush_plug_list+0x48d/0x570
[  176.533579][ T9893]        __blk_flush_plug+0x3ed/0x4d0
[  176.539041][ T9893]        __submit_bio+0x28d/0x580
[  176.544074][ T9893]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  176.550328][ T9893]        block_read_full_folio+0x599/0x830
[  176.556230][ T9893]        filemap_read_folio+0x137/0x3b0
[  176.561876][ T9893]        do_read_cache_folio+0x358/0x590
[  176.567712][ T9893]        read_part_sector+0xb6/0x2b0
[  176.572997][ T9893]        adfspart_check_ICS+0xa5/0xa40
[  176.578463][ T9893]        bdev_disk_changed+0x7ba/0x1550
[  176.584009][ T9893]        blkdev_get_whole+0x380/0x510
[  176.589386][ T9893]        bdev_open+0x31e/0xd30
[  176.594246][ T9893]        blkdev_open+0x470/0x610
[  176.599187][ T9893]        do_dentry_open+0x785/0x14e0
[  176.604479][ T9893]        vfs_open+0x3b/0x340
[  176.609077][ T9893]        path_openat+0x2e08/0x3860
[  176.614188][ T9893]        do_file_open+0x23e/0x4a0
[  176.619405][ T9893]        do_sys_openat2+0x113/0x200
[  176.624629][ T9893]        __x64_sys_openat+0x138/0x170
[  176.630161][ T9893]        do_syscall_64+0x14d/0xf80
[  176.635278][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.641780][ T9893] 
[  176.641780][ T9893] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  176.649009][ T9893]        __mutex_lock+0x19f/0x1300
[  176.654135][ T9893]        nbd_queue_rq+0xc6/0x1100
[  176.659352][ T9893]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  176.665450][ T9893]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  176.672757][ T9893]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  176.679274][ T9893]        blk_mq_run_hw_queue+0x348/0x4f0
[  176.684915][ T9893]        blk_mq_dispatch_list+0xd16/0xe10
[  176.690675][ T9893]        blk_mq_flush_plug_list+0x48d/0x570
[  176.696587][ T9893]        __blk_flush_plug+0x3ed/0x4d0
[  176.702008][ T9893]        __submit_bio+0x28d/0x580
[  176.707067][ T9893]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  176.713318][ T9893]        block_read_full_folio+0x599/0x830
[  176.719145][ T9893]        filemap_read_folio+0x137/0x3b0
[  176.724777][ T9893]        do_read_cache_folio+0x358/0x590
[  176.730523][ T9893]        read_part_sector+0xb6/0x2b0
[  176.736263][ T9893]        adfspart_check_ICS+0xa5/0xa40
[  176.741732][ T9893]        bdev_disk_changed+0x7ba/0x1550
[  176.747283][ T9893]        blkdev_get_whole+0x380/0x510
[  176.752982][ T9893]        bdev_open+0x31e/0xd30
[  176.757757][ T9893]        blkdev_open+0x470/0x610
[  176.762702][ T9893]        do_dentry_open+0x785/0x14e0
[  176.768004][ T9893]        vfs_open+0x3b/0x340
[  176.772794][ T9893]        path_openat+0x2e08/0x3860
[  176.777938][ T9893]        do_file_open+0x23e/0x4a0
[  176.783073][ T9893]        do_sys_openat2+0x113/0x200
[  176.788289][ T9893]        __x64_sys_openat+0x138/0x170
[  176.793668][ T9893]        do_syscall_64+0x14d/0xf80
[  176.798874][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.805386][ T9893] 
[  176.805386][ T9893] -> #4 (set->srcu){.+.+}-{0:0}:
[  176.812529][ T9893]        __synchronize_srcu+0xca/0x300
[  176.818033][ T9893]        elevator_switch+0x1e8/0x7a0
[  176.823342][ T9893]        elevator_change+0x2cc/0x450
[  176.828637][ T9893]        elevator_set_default+0x36c/0x430
[  176.834371][ T9893]        blk_register_queue+0x366/0x430
[  176.839941][ T9893]        __add_disk+0x677/0xd50
[  176.844885][ T9893]        add_disk_fwnode+0xfb/0x480
[  176.850094][ T9893]        nbd_dev_add+0x72c/0xb50
[  176.855047][ T9893]        nbd_init+0x168/0x1f0
[  176.859730][ T9893]        do_one_initcall+0x250/0x8d0
[  176.865107][ T9893]        do_initcall_level+0x104/0x190
[  176.870576][ T9893]        do_initcalls+0x59/0xa0
[  176.875431][ T9893]        kernel_init_freeable+0x2a6/0x3e0
[  176.881155][ T9893]        kernel_init+0x1d/0x1d0
[  176.886189][ T9893]        ret_from_fork+0x51e/0xb90
[  176.891326][ T9893]        ret_from_fork_asm+0x1a/0x30
[  176.896703][ T9893] 
[  176.896703][ T9893] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  176.904529][ T9893]        __mutex_lock+0x19f/0x1300
[  176.909909][ T9893]        elevator_change+0x1b3/0x450
[  176.915208][ T9893]        elevator_set_none+0xb5/0x140
[  176.920706][ T9893]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  176.927039][ T9893]        nbd_start_device+0x17f/0xb10
[  176.932412][ T9893]        nbd_genl_connect+0x165b/0x1cf0
[  176.937962][ T9893]        genl_family_rcv_msg_doit+0x22a/0x330
[  176.944129][ T9893]        genl_rcv_msg+0x61c/0x7a0
[  176.949155][ T9893]        netlink_rcv_skb+0x232/0x4b0
[  176.954446][ T9893]        genl_rcv+0x28/0x40
[  176.958957][ T9893]        netlink_unicast+0x80f/0x9b0
[  176.964264][ T9893]        netlink_sendmsg+0x813/0xb40
[  176.969550][ T9893]        ____sys_sendmsg+0x972/0x9f0
[  176.974842][ T9893]        ___sys_sendmsg+0x2a5/0x360
[  176.980055][ T9893]        __x64_sys_sendmsg+0x1bd/0x2a0
[  176.985775][ T9893]        do_syscall_64+0x14d/0xf80
[  176.990898][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.997512][ T9893] 
[  176.997512][ T9893] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  177.006236][ T9893]        blk_alloc_queue+0x546/0x680
[  177.011848][ T9893]        __blk_mq_alloc_disk+0x197/0x390
[  177.017708][ T9893]        nbd_dev_add+0x499/0xb50
[  177.022838][ T9893]        nbd_init+0x168/0x1f0
[  177.027614][ T9893]        do_one_initcall+0x250/0x8d0
[  177.032910][ T9893]        do_initcall_level+0x104/0x190
[  177.038379][ T9893]        do_initcalls+0x59/0xa0
[  177.043328][ T9893]        kernel_init_freeable+0x2a6/0x3e0
[  177.049148][ T9893]        kernel_init+0x1d/0x1d0
[  177.054091][ T9893]        ret_from_fork+0x51e/0xb90
[  177.059309][ T9893]        ret_from_fork_asm+0x1a/0x30
[  177.064602][ T9893] 
[  177.064602][ T9893] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  177.071908][ T9893]        fs_reclaim_acquire+0x71/0x100
[  177.077463][ T9893]        kmem_cache_alloc_noprof+0x40/0x650
[  177.083357][ T9893]        __kernfs_iattrs+0xdf/0x340
[  177.088579][ T9893]        kernfs_iop_setattr+0xea/0x3f0
[  177.094228][ T9893]        notify_change+0xc1a/0xf40
[  177.099345][ T9893]        do_truncate+0x1c2/0x250
[  177.104400][ T9893]        path_openat+0x2f89/0x3860
[  177.109517][ T9893]        do_file_open+0x23e/0x4a0
[  177.114628][ T9893]        do_sys_openat2+0x113/0x200
[  177.119835][ T9893]        __x64_sys_openat+0x138/0x170
[  177.125406][ T9893]        do_syscall_64+0x14d/0xf80
[  177.130527][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.136944][ T9893] 
[  177.136944][ T9893] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  177.145554][ T9893]        __lock_acquire+0x15a5/0x2cf0
[  177.151022][ T9893]        lock_acquire+0xf0/0x2e0
[  177.156058][ T9893]        down_write+0x96/0x200
[  177.161098][ T9893]        kernfs_unlink_sibling+0x71/0x180
[  177.167027][ T9893]        __kernfs_remove+0x3e7/0x660
[  177.172338][ T9893]        kernfs_remove_by_name_ns+0xaf/0x130
[  177.178330][ T9893]        sysfs_unmerge_group+0xd4/0x140
[  177.183886][ T9893]        dpm_sysfs_remove+0x76/0xd0
[  177.189096][ T9893]        device_del+0x250/0x8f0
[  177.194218][ T9893]        device_unregister+0x21/0xf0
[  177.199601][ T9893]        hci_conn_del+0xc36/0x1230
[  177.204811][ T9893]        hci_conn_hash_flush+0x191/0x260
[  177.210625][ T9893]        hci_dev_close_sync+0x821/0x10e0
[  177.216267][ T9893]        hci_dev_close+0x108/0x260
[  177.221398][ T9893]        sock_do_ioctl+0x101/0x320
[  177.226538][ T9893]        sock_ioctl+0x5c6/0x7f0
[  177.231408][ T9893]        __se_sys_ioctl+0xfc/0x170
[  177.236722][ T9893]        do_syscall_64+0x14d/0xf80
[  177.241863][ T9893]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.248465][ T9893] 
[  177.248465][ T9893] other info that might help us debug this:
[  177.248465][ T9893] 
[  177.258712][ T9893] Chain exists of:
[  177.258712][ T9893]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  177.258712][ T9893] 
[  177.273322][ T9893]  Possible unsafe locking scenario:
[  177.273322][ T9893] 
[  177.280770][ T9893]        CPU0                    CPU1
[  177.286219][ T9893]        ----                    ----
[  177.291686][ T9893]   lock(&root->kernfs_rwsem);
[  177.296552][ T9893]                                lock(cpuhp_state_mutex);
[  177.303667][ T9893]                                lock(&root->kernfs_rwsem);
[  177.311563][ T9893]   lock(&root->kernfs_iattr_rwsem);
[  177.316854][ T9893] 
[  177.316854][ T9893]  *** DEADLOCK ***
[  177.316854][ T9893] 
[  177.325170][ T9893] 3 locks held by syz.3.1065/9893:
[  177.330324][ T9893]  #0: ffff8880335f4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_close+0x100/0x260
[  177.339925][ T9893]  #1: ffff8880335f40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  177.349695][ T9893]  #2: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130
[  177.360507][ T9893] 
[  177.360507][ T9893] stack backtrace:
[  177.366504][ T9893] CPU: 1 UID: 0 PID: 9893 Comm: syz.3.1065 Not tainted syzkaller #0 PREEMPT(full) 
[  177.366527][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  177.366536][ T9893] Call Trace:
[  177.366545][ T9893]  <TASK>
[  177.366552][ T9893]  dump_stack_lvl+0xe8/0x150
[  177.366580][ T9893]  print_circular_bug+0x2e1/0x300
[  177.366606][ T9893]  check_noncircular+0x12e/0x150
[  177.366631][ T9893]  __lock_acquire+0x15a5/0x2cf0
[  177.366653][ T9893]  ? __lock_acquire+0x6b5/0x2cf0
[  177.366676][ T9893]  lock_acquire+0xf0/0x2e0
[  177.366694][ T9893]  ? kernfs_unlink_sibling+0x71/0x180
[  177.366713][ T9893]  down_write+0x96/0x200
[  177.366733][ T9893]  ? kernfs_unlink_sibling+0x71/0x180
[  177.366748][ T9893]  ? __pfx_down_write+0x10/0x10
[  177.366767][ T9893]  ? kernfs_root+0x1c/0x230
[  177.366788][ T9893]  ? kernfs_root+0x1c/0x230
[  177.366807][ T9893]  ? kernfs_root+0x1c/0x230
[  177.366828][ T9893]  ? kernfs_root+0x1ea/0x230
[  177.366849][ T9893]  kernfs_unlink_sibling+0x71/0x180
[  177.366873][ T9893]  __kernfs_remove+0x3e7/0x660
[  177.366889][ T9893]  kernfs_remove_by_name_ns+0xaf/0x130
[  177.366906][ T9893]  sysfs_unmerge_group+0xd4/0x140
[  177.366929][ T9893]  dpm_sysfs_remove+0x76/0xd0
[  177.366951][ T9893]  device_del+0x250/0x8f0
[  177.366969][ T9893]  ? klist_iter_exit+0xc1/0x100
[  177.366989][ T9893]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  177.367012][ T9893]  ? __pfx_device_del+0x10/0x10
[  177.367030][ T9893]  ? __pfx_autoremove_wake_function+0x10/0x10
[  177.367050][ T9893]  device_unregister+0x21/0xf0
[  177.367069][ T9893]  hci_conn_del+0xc36/0x1230
[  177.367094][ T9893]  hci_conn_hash_flush+0x191/0x260
[  177.367110][ T9893]  hci_dev_close_sync+0x821/0x10e0
[  177.367135][ T9893]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  177.367156][ T9893]  ? lockdep_hardirqs_on+0x7a/0x110
[  177.367173][ T9893]  ? enable_work+0x1fd/0x230
[  177.367198][ T9893]  hci_dev_close+0x108/0x260
[  177.367221][ T9893]  sock_do_ioctl+0x101/0x320
[  177.367244][ T9893]  ? __pfx_sock_do_ioctl+0x10/0x10
[  177.367263][ T9893]  ? do_futex+0x333/0x420
[  177.367286][ T9893]  sock_ioctl+0x5c6/0x7f0
[  177.367307][ T9893]  ? __pfx_sock_ioctl+0x10/0x10
[  177.367326][ T9893]  ? __fget_files+0x2a/0x420
[  177.367348][ T9893]  ? __fget_files+0x3a0/0x420
[  177.367369][ T9893]  ? __fget_files+0x2a/0x420
[  177.367392][ T9893]  ? bpf_lsm_file_ioctl+0x9/0x20
[  177.367411][ T9893]  ? __pfx_sock_ioctl+0x10/0x10
[  177.367430][ T9893]  __se_sys_ioctl+0xfc/0x170
[  177.367450][ T9893]  do_syscall_64+0x14d/0xf80
[  177.367467][ T9893]  ? trace_irq_disable+0x3b/0x150
[  177.367480][ T9893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.367495][ T9893]  ? clear_bhb_loop+0x40/0x90
[  177.367511][ T9893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.367526][ T9893] RIP: 0033:0x7f44ee79c819
[  177.367541][ T9893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.367554][ T9893] RSP: 002b:00007f44ef6a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.367573][ T9893] RAX: ffffffffffffffda RBX: 00007f44eea16090 RCX: 00007f44ee79c819
[  177.367584][ T9893] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000006
[  177.367594][ T9893] RBP: 00007f44ee832c91 R08: 0000000000000000 R09: 0000000000000000
[  177.367603][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.367613][ T9893] R13: 00007f44eea16128 R14: 00007f44eea16090 R15: 00007ffd801f88e8
[  177.367629][ T9893]  </TASK>
[  177.723759][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.732531][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.741132][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.747863][ T9906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'.
[  177.781578][ T7619] ldm_validate_partition_table(): Disk read failed.
[  177.842188][ T7619] Dev nbd2: unable to read RDB block 0
[  177.884329][ T7619]  nbd2: unable to read partition table
[  178.782405][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.791324][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.941694][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  178.949846][    C1] lec:lec_tx_timeout: lec0
[  178.954431][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  179.822176][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.862092][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.902115][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.952068][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.981927][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  183.990051][    C1] lec:lec_tx_timeout: lec0
[  183.994659][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  184.000872][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.782800][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.791051][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.032045][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.062187][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog