last executing test programs:

6.556599833s ago: executing program 3 (id=6864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x3c, r1, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}]}]}]}, 0x3c}}, 0x20004800)

6.356094332s ago: executing program 3 (id=6867):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x1e, 0x4, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000000)={0x38, r4, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200000000000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) (async)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async, rerun: 64)
r5 = socket(0x1e, 0x4, 0x0) (rerun: 64)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000900)={{0x2, 0x4e23, @local}, {0x1, @local}, 0x2, {0x2, 0x4e21, @local}, 'veth1_virt_wifi\x00'}) (async)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async, rerun: 32)
close(0x4) (async, rerun: 32)
r7 = socket(0xa, 0x3, 0xff)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000680)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001300)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendmsg$inet6(r7, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000003a0202"], 0x28}, 0x922bac8576bdadce) (async)
sendto$unix(r7, &(0x7f0000000440)="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", 0x11f, 0x80, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 32)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32)
setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000000)=0x63, 0x4) (async, rerun: 64)
r9 = socket$inet(0x2, 0x2, 0x0) (rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x6, 0x9, 0x93, 0x10, 0xf51, 0x5}) (async)
connect(r0, &(0x7f0000000040)=@can, 0x80)
setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e24, @empty}, 0x10)

5.840012568s ago: executing program 4 (id=6873):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, 0x0, 0x0, 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0)

5.837521346s ago: executing program 3 (id=6874):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000480))
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)

4.87666555s ago: executing program 2 (id=6876):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r2 = socket(0x26, 0x2, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x0, 0x310, 0x448, 0xd0, 0x310, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, &(0x7f0000000180), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @local}, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffff00], 'ipvlan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x87, 0x81, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffff00, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'bond_slave_1\x00', 'wg2\x00', {0xff}, {0xff}, 0x84, 0x7, 0x2, 0x10}, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x9, 0x8b}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x2c, 0x4}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff0000ff, 0xff, 0xff, 0xffffffff], [0xc7e101faa359e61e, 0xffffffff, 0x0, 0xffffff00], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {}, 0x5e, 0x1, 0x4, 0x87}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x6, 0x0, [0x7, 0x0, 0x3, 0x401, 0x6, 0x6, 0x7, 0x7, 0x0, 0x10, 0x9, 0x0, 0x4, 0xb, 0x8, 0x3], 0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@broadcast, 0x4, 0x35, 0x3}}}, {{@ipv6={@remote, @local, [0xff, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x21, 0x8, 0x0, 0x23}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x32, 0x10, 0x5, 0x1, 0x7, 0x4a0, 0xa2}}, @common=@dst={{0x48}, {0x2, 0x4, 0x1, [0x6eb8, 0x64, 0x3, 0x4, 0x8, 0x80, 0x2, 0x6, 0x6, 0x1, 0x0, 0x7, 0x7fff, 0x9, 0x7a93, 0xff80], 0x7}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'pimreg\x00', {0x54580000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, 0x0, 0x4)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)

4.776404892s ago: executing program 2 (id=6877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x3c, r1, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}]}]}]}, 0x3c}}, 0x20004800)

4.457821631s ago: executing program 2 (id=6879):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

4.297563585s ago: executing program 2 (id=6880):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = getpid()
write$cgroup_pid(r1, &(0x7f0000000180)=r3, 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r4, &(0x7f0000019880)=[{&(0x7f0000000080)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x1000000000000105)
r5 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)

4.295560224s ago: executing program 4 (id=6881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x1a, 0x7, 0x1, 0x0, "72bf6a5b96fd64215a0e435d440123f902281f61dc61"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x144}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4.155676881s ago: executing program 3 (id=6883):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2401, &(0x7f0000000040)={@align=0xb, {0xfffc, 0xb8, 0xd42, 0x2df}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={<r1=>0x0, 0x229, 0xd}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x81}, &(0x7f0000000200)=0x8)
close(r0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x80, 0x4d, 0x8, 0x59, @remote, @private0, 0x8000, 0x10, 0xda03, 0x4504021d}})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000780)={&(0x7f0000000640)=""/183, 0xb7, <r3=>0x0, &(0x7f0000000700)=""/96, 0x60}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%-5lx  \x00'}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x31, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0xc, 0xe, 0x8, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0xcdf, 0xf7, &(0x7f0000000440)=""/247, 0x41100, 0x0, '\x00', r2, @fallback=0x20, r0, 0x8, &(0x7f0000000600)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x9, &(0x7f00000008c0)=[r0, r0, r4, r0, r0, r0, r0, r0], &(0x7f0000000900)=[{0x2, 0x3, 0x6, 0xa}, {0x4, 0x1, 0x7, 0x3}, {0x1, 0x4, 0x6, 0xa}, {0x3, 0x4, 0xb, 0x5}, {0x4, 0x2, 0xf, 0x1}, {0x1, 0x2, 0x2, 0x9}, {0x2, 0x4, 0x9, 0x4}, {0x4, 0x2, 0xb, 0x3}, {0x4, 0x4, 0xa, 0x8}], 0x10, 0x6}, 0x94)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={<r6=>0x0}, &(0x7f0000000c40)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000000d80)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000dc0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000e00)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000f40)=0xe8)
r10 = getgid()
r11 = socket$igmp6(0xa, 0x3, 0x2)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x1000, 0xd5, 0x1, 0x4, r4, 0x7, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x6}, 0x50)
r14 = gettid()
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000017c0)=<r15=>0x0)
r16 = getgid()
r17 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001800)=<r18=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0, <r19=>0x0}, &(0x7f0000001880)=0xc)
sendmmsg$unix(r0, &(0x7f0000001980)=[{{&(0x7f0000000a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="39435e211f5aa7aa3fb18abfde2c3ac1f7eaedf2cdbd8a69a110fe22137026", 0x1f}, {&(0x7f0000000b40)="573a79eaa5d6f0690f3d9765cb7a8c0958ef745e413bfc827de3d309e276495881b4aab702885d3c819b9e8395d3b9f9c12388f00b6198dfdede697e682068f756c5cf70f855ef8a3ed928", 0x4b}], 0x2, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x58, 0x8080}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="6578a4f4359bdbf0c1d6f1a48573c5cccd367dae341a693672bdb0ee2e3ddf96651e2da3140c700575bd01e8bd730c0914ba2a4c67512b4c3f5fbae1804ec94642b3ebfb3b4b25886a9730e4ab84d912947c0f49c7b558ee93d17f217f9acdce076f8b94e2d0754196bd1403bd7e602b49892f1ed859050344cfd46073aeed5c7ce2c8fcde70af85d01b95c6f2c0fb8de6d7ceeed45c3d6154f80d19e2fe41e3ee", 0xa1}, {&(0x7f00000010c0)="ab780f434ff1c441e62c92e389b1b155579504368fbcea558e9ed27e992fc4a0db14f72f5be715d26f1919ff8dba15af7d2894201c794c77266cd8c776f36d032679e373d5c961d50f3698924938662140acc46c3fbdceb325d0740c5a14550bc46c162c508426221195b03ac92fc3b91708d7af622d9730f08d9a54a0329556c8351d17ebe2a9d9f3a4fa05fa66a6b8c417eaea2d62d813d87785287880df4fa1726fdf7116668921892c95089d1036d0988945c2aef55203062c84514606ce28f3f01ae67ebe71ef3c25367018", 0xce}], 0x2, 0x0, 0x0, 0x4042840}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001200)="60abd0e75225ce289c4a71a9c384eb2258698c58f2101a4eb930a2d209a27bcd3bf9382ae130ab46478a105725e8d313f08a7d67c8857736f36785fbfa04735ebbf3d16fa8fe404b221df88654b538e529503f6ce668fc0cd9746650b46ad7fe3d01d51f2327a7bea29ae72b67bde7abb1c2c8e15ebc847ecbb25ea6941496f1775c78a80481e35a1a33024647341230ab6892a7ea6990635e8a0ed6fec4ef8acd3b7a254e6f5719f68662324890ff4720cd6ec75d391e72cd16d6b8859ff744286f9bed23fd106fd575e24d2b910ead9146d2ac894b1bb3527ac5c9d2fabbcff53be8912a63d7966cecaecfd38a549dbb81b919586c0e60c9d2c388b138f1", 0xff}, {&(0x7f0000001300)}, {&(0x7f0000001340)="64df4a2ea7119f1831dc43fb9cf6f66fbcbdff0d48ce4bbc5801fa6c1f1fe54785e1997038cb6fa1111206621dc9ae6c77eec049050871826e710232c9e3836b0d544b976615725777e73b5b996381f47919d61214ddf4143a8c06d4fead7dce3b600925bc72a733a2c7f2cce979e56372186bff89c67a0ef06f99000957cd17ee796ed3595130252e44", 0x8a}, {&(0x7f0000001400)="7170d86069f82d8a4d1b46d5ef27df289127c706e3dcda85f6e69d75b75d8df3b45e992438b9ee06bdfbc492c96569607a32339df7ec25f2e64bc5dfb44c50ecdbb11a73813691e60a9388f4c0d166a84fa9", 0x52}, {&(0x7f0000001480)="b3e44307601d722c5025bd7006a91545816f6091a8d4cdf1fb558098a40386cee673a24948b02ab9d096a0732dc1fc7a46d44f313d3420cfed79cb34803b326bb251104efbcf0e9e07c994130fff2d03a00a6075f0a512297fb40b70c0feca590210c6ad2ca89e200a6fe8070803fa5a7b0e6c38059baf7747", 0x79}, {&(0x7f0000001500)="b6a6c3a2b62184bea178005de46f61569f8de889193ac78f7b4aaf7002eb04145b150fb95ff50fe0eb62e10460237e7120528f256dd658544b35988d004e63c11a6f18ab8b152511a1d07ebb18781f95778fc412bd5141d5aa507573f45e6313d78540e2db53d63125b9ac3d7a283141d9efb81bc29f84997b5f5bd12ba8c995e0", 0x81}, {&(0x7f00000015c0)="9c6a932d52c79a246c3af9503913ec4fd83df21906250dfdf98ba0e3bf76002e3c07d292d939d41411c8c448f6dd22f89bfd495bcfe8a76fe140318e962ad16b4fbbb69c5cce43cd60344b77bdcb56e5bd2d17d921f58ade9342b2263d72d7c4708cb92f487bfab0e5016e24c82c0c2a23d5d34e5f659ae41e0b2dca926ce2448823200b503778f272e3dd21f07363c2affff0cf7af979fbc9048e479d256e81fa520636318d5cb6d320b5b280d303d00364fe806359d4e436290701dc2da7dbbcd3eccbabc31cd3e89ab2e4b6", 0xcd}], 0x7, &(0x7f00000018c0)=[@rights={{0x20, 0x1, 0x1, [r5, r11, r5, r4]}}, @rights={{0x2c, 0x1, 0x1, [r12, r4, r4, r0, r5, r13, r4]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x28, 0x1, 0x1, [r5, r5, r17, r0, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xffffffffffffffff, r19}}}], 0xb8, 0x4000010}}], 0x3, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001a40)='dctcp-reno', 0xa)
sendmsg$nl_route_sched(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)=@delchain={0x88, 0x65, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {0xfff3, 0x2}, {0x1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xb2}}, @filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffc00}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6623}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40880}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001c00)={'batadv_slave_0\x00', <r20=>0x0})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001c40)={0x4}, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d80)={@map=r4, 0x1e, 0x1, 0x101, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001cc0)=[0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0], <r21=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001dc0)={@fallback=r4, r0, 0x0, 0x2000, r5, @value=r0, @void, @void, @void, r21}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001e00)={r5, r20, 0x25, 0x17, @void}, 0x10)

3.952033292s ago: executing program 3 (id=6886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0400000000000000000000000000000d040000000000000000000004000000000400000000000008030000000000004f2e5f008189e43deb376d548d06dda0d34f5d89b547cd460420b02de0d30685819f660b308ae6aa0e909f67975f0de4f0bfc33a9abb45748ea36804c63a40a7ec3b9a2cd0c6d58239e40539ac7f2c4f5df9310f66540c88619c01b493667fcd6008a667115271e595d6c557"], 0x0, 0x53}, 0x28)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x800)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="24040000", @ANYRESDEC, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000080001"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40081)
r7 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r7, &(0x7f0000002f80)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002400)=[{&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000740)=""/133, 0x85}, {&(0x7f00000011c0)=""/209, 0xd1}, {&(0x7f00000012c0)=""/29, 0x1d}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/243, 0xf3}], 0x6, &(0x7f0000002e40)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0xa36b}, {&(0x7f0000002480)=""/124, 0x7c}, &(0x7f0000002c80)=[{&(0x7f0000002500)=""/147, 0x93}, {&(0x7f00000025c0)=""/188, 0xbc}, {&(0x7f0000002680)=""/93, 0x5d}, {&(0x7f0000002700)=""/223, 0xdf}, {&(0x7f0000002800)=""/202, 0xca}, {&(0x7f0000002900)=""/67, 0x43}, {&(0x7f0000002980)=""/185, 0xb9}, {&(0x7f0000002a40)=""/102, 0x66}, {&(0x7f0000002ac0)=""/239, 0xef}, {&(0x7f0000002bc0)=""/159, 0x9f}], 0xa, 0x0, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x7fffffff, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x200, 0xe2c1}, &(0x7f0000002d40)=0x6, &(0x7f0000002d80)=0x9, 0xaf, 0x9, 0x8ed8, 0x8001, 0x2, 0x7f}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xfffff001}, &(0x7f0000002dc0)=0x4, &(0x7f0000002e00)=0x9, 0x8, 0x8000, 0xb, 0x1, 0x0, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffa, 0x60}}], 0x128, 0x4000040}, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004)

3.94037183s ago: executing program 4 (id=6887):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth1_virt_wifi\x00', @local})
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99", 0xe}, {&(0x7f0000000580)="a492e95857d9dad0c70b72425db11aaf3ffd93dad70350", 0x17}, {&(0x7f0000000ac0)="9f52141c0fb098636f2d98c3", 0xc}], 0x5)

3.43519977s ago: executing program 2 (id=6889):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2a, 0x0, 0x3, 0x401, 0x1, 0x51, 0x0, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x7, [0x28000005, 0xfffffffd]}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="0000000000000000000000000000fbfff0e5", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x2a, 0x0, 0x3, 0x401, 0x1, 0x51, 0x0, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x7, [0x28000005, 0xfffffffd]}}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="0000000000000000000000000000fbfff0e5", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

3.088639242s ago: executing program 0 (id=6890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c000280050003000100007d0800024000000016080001400000000f14000000"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
r1 = socket$kcm(0x11, 0xa, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)
r4 = accept(r1, 0x0, &(0x7f0000000180))
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@local, @empty, <r6=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x17}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80)

2.95176608s ago: executing program 3 (id=6891):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x1, 0x1, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

2.858593046s ago: executing program 0 (id=6893):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000220000001800018014000200766972745f7769666930000000000000f8c93822da8fb829f3e0b2672f84"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x1a, 0x4, 0xc9)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={<r4=>r3, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x6}, &(0x7f0000000140)=0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r5, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
ioctl$FIONCLEX(r0, 0x5450)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r8, @ANYBLOB="00042cbd7000fedbdf254c0000000c0058003300"], 0x20}}, 0x4008082)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/344], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4004010)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000440)={'veth0\x00', 0x8000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

2.842097624s ago: executing program 1 (id=6894):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000004, 0x0, 0x0, 0x0, 0x2000}, [@printk={@d, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xc8, &(0x7f0000000440)=""/200, 0x0, 0x40}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x13cac0546f95b70a, &(0x7f0000000100)=0xa, 0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x31)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40), 0x0, 0x0, 0x5c}}], 0x1, 0x2008005b)

2.599768715s ago: executing program 1 (id=6895):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0)

2.586550623s ago: executing program 4 (id=6896):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0xe4, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0xb, 0xbffc}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000)
sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', r5, 0x10, 0x40, 0x8, 0x1, {{0x1a, 0x4, 0x2, 0x3, 0x68, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x4, [{@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x6}]}, @timestamp={0x44, 0x24, 0xb8, 0x0, 0x4, [0x4, 0x5, 0x4, 0x2, 0x7c, 0x4, 0x7, 0x4]}, @lsrr={0x83, 0x13, 0x7b, [@broadcast, @broadcast, @broadcast, @multicast2]}, @end]}}}}})
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000000000000100000d000000000f00000001000080002e6100"], &(0x7f00000009c0)=""/25, 0x30, 0x19, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000840000000008000000059500000002000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001800000002000000000000000400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000be070000850000000600000085000000050000009500000000000000"], &(0x7f00000008c0)='GPL\x00', 0x2, 0x69, &(0x7f0000000900)=""/105, 0x41100, 0x70, '\x00', r5, @cgroup_sysctl, r10, 0x8, &(0x7f0000000a40)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x7, &(0x7f0000000a80)=[r8, r8, r8], &(0x7f0000000ac0)=[{0x1, 0x5, 0xd, 0xf}, {0x2, 0x4, 0xd, 0x4}, {0x1, 0x3, 0x7, 0x9}, {0x2, 0x3, 0xd}, {0x1, 0x3, 0x8, 0x7}, {0x1, 0x3, 0x4, 0x8}, {0x0, 0x1, 0xd, 0x5}], 0x10, 0x6}, 0x94)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="db8e80a32c7f05f755194fe4de21d5281535bd48aa867cb710b849e44cf79240e699155ed7a4fba54e71aa49f276b0c58c700dbcef1aa80ba08960fab30d27fbbac363db918ec207e0fd7e2d7ad371dbabe442387b6ed3e90519bc588906d41498d18defa71bb1c27aea5302ae502e93475b0560f66804b2dd069d", 0x7b, 0x44084001, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x385ef14f}, 0x1c)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500"], 0x2c}}, 0x884)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=<r11=>0x0, @ANYBLOB="80000000000000002400128009000100697069700000000014000280080001000000400005000900890000001400030074756e6c"], 0x58}}, 0x1020)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000680)="187be42749174f7a44f1c95f7c0382790e1364e64622ac0ab885117d3467ba9a52314cfd147a225f982f16c62bb2ac9c5b5e52f74db0536d542eb52457281c41cbc835a2c62437c3b4dbd5fefbff9e31759104e84038df442f0f23b109f8136740f2dab804bbcff33dfc7a725c6fb50305bdc4560733e7d0b9b01adf6493838061a89cd32f08f6758fff80adfadbb95bb4f3d5dd880e5f9fbb47ee6a78060737f092a0d09838f9ef009b35e000b45aea74ea97a9a1fbb7c37b254b3f4cd2417502080b1f4dd7a70f171e523717da1a57112d316b91f96f2735d117", 0xdb, 0x44000, &(0x7f0000000780)={0x2, 0x0, @empty, 0x1}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r11], 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)

2.576366994s ago: executing program 0 (id=6897):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom(r0, 0x0, 0x0, 0x12140, 0x0, 0x0) (async)
close(0x3) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1) (async)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x80000000a, 0xffffffb4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x8}, @timestamp, @window={0x3, 0xe978, 0x46}, @sack_perm, @sack_perm], 0x6)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) (async)
r6 = socket(0x1e, 0x5, 0x0)
connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}}}, 0x10) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="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", 0x2ad}], 0x1}, 0x20004000) (async)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.400032287s ago: executing program 1 (id=6898):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x105c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000)

2.392640192s ago: executing program 4 (id=6899):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x5c, 0x0, 0x2, 0x301, 0x0, 0x0, {0xac178069ca18387e, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x44}}, 0x84)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x3b9aca00}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

2.327773151s ago: executing program 0 (id=6900):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x800000, 0x9, 0x0, 0x2000, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0xa}, 0x50)

2.223542424s ago: executing program 1 (id=6901):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={<r2=>0xffffffffffffffff, &(0x7f0000000000)='.\xef(\x00', 0x8040, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x101]}, {0x6, 0x1, 0x5}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000200)=0x7})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@empty, <r9=>0x0}, &(0x7f0000000380)=0x14)
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r12=>0x0, 0x29, 0x6, 0xf, 0x3, 0x26, @local, @remote, 0x700, 0x8000, 0x1, 0x5}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', <r14=>0x0, 0x20, 0x1, 0x7f, 0x1, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x65, 0x0, 0x1a, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0xa, [{@multicast2}, {@broadcast, 0x5}, {@multicast1, 0x3}, {@broadcast, 0xc}, {@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xfd, 0x3, 0x9, [{@private=0xa010102, 0xc}, {@remote, 0x10}, {@private=0xa010102, 0x7}, {@loopback, 0x6}, {@private=0xa010101, 0x8}]}, @lsrr={0x83, 0x17, 0x23, [@private=0xa010102, @broadcast, @local, @multicast1, @multicast2]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xdd, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xca, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5c}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40090}, 0x4000)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)

2.154345303s ago: executing program 4 (id=6902):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x6, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0x6)
write(r2, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080)={r7})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000550001002abd70000200000007000000", @ANYRES32=r1, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="00020200e000000200000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400)

2.003163997s ago: executing program 0 (id=6903):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000440)=""/210, &(0x7f0000000540)=0xd2)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x7, [@restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x8}}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @struct={0x4, 0x2, 0x0, 0x4, 0x1, 0xff, [{0xa, 0x2, 0x6}, {0xa, 0x5, 0x6}]}, @union={0x0, 0x2, 0x0, 0x5, 0x1, 0x2, [{0x10, 0x2, 0x9}, {0xe, 0x3, 0x200}]}, @restrict={0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x6, 0x4}]}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x7, [{0xb, 0x1, 0x6}, {0xd, 0x5, 0x81}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x2e, 0x61, 0x30, 0x0]}}, &(0x7f0000000700)=""/210, 0xfb, 0xd2, 0x0, 0x4, 0x10000}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5f01f52f71a8c445, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0xba0, 0xf, &(0x7f0000000a40)=""/15, 0x41000, 0x8, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xf, 0xd, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000b80)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x3, 0x5, 0xc, 0x6}, {0x2, 0x5, 0x1, 0x1}, {0x0, 0x5, 0x4, 0x4}], 0x10, 0x200}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x2, 0x0, 0x4, 0x7, 0xa05, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r12}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1a, 0x15, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9343, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @exit, @exit, @generic={0x7c, 0xc, 0x8, 0x40, 0x9}, @call={0x85, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x4800000, 0x0, 0x0, 0x41000, 0x74, '\x00', r3, @fallback=0x3f, r6, 0x8, &(0x7f0000000840)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x4, &(0x7f0000000f40)=[0xffffffffffffffff, 0xffffffffffffffff, r8, r9, r10, r11, r12], &(0x7f0000000f80)=[{0x2, 0x5, 0x2}, {0x4, 0x4, 0x6, 0x5}, {0x3, 0x1, 0x4, 0x2}, {0x0, 0x4, 0x2, 0x4}], 0x10, 0x8000}, 0x94)
getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000140)=""/160, &(0x7f0000000300)=0xa0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r14, 0x8983, &(0x7f0000000340)={0x2, 'vlan1\x00', {0x7}, 0x9})

1.70799397s ago: executing program 1 (id=6904):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x709)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r8, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delneigh={0x34, 0x1d, 0x400, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x0, r2, 0x4, 0x147, 0x5}, [@NDA_SRC_VNI={0x8, 0xb, 0x500000}, @NDA_NH_ID={0x8, 0xd, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0x5}]}, 0x34}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0xfffffff3, 0x0, 0x3, 0x500, 0x4, 0x40920000, r2})

1.579941223s ago: executing program 0 (id=6905):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), 0x0}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
preadv(r4, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000440)=""/39, 0x27}], 0x2, 0x9, 0xbf1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

1.355965111s ago: executing program 1 (id=6906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={r3, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 2 (id=6907):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd3, &(0x7f00000000c0)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x44000) (async)

kernel console output (not intermixed with test programs):

on device batadv0
[  862.823130][T29432] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  862.833985][T29432] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  862.845061][T29432] 0·: left allmulticast mode
[  862.850602][T29432] hsr_slave_0: left allmulticast mode
[  862.856952][T29432] hsr_slave_1: left allmulticast mode
[  862.867236][T29432] veth1_macvtap: left promiscuous mode
[  862.874640][T29432] veth0_macvtap: left promiscuous mode
[  862.881953][T29432] veth0_macvtap: entered promiscuous mode
[  862.893723][T29432] veth1_macvtap: entered promiscuous mode
[  862.913439][T29444] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5878'.
[  862.923058][T29432] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  862.934650][T29432] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  862.943108][T29443] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5878'.
[  862.954542][T29432] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  862.966719][T29432] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  862.977846][T29432] veth3: left promiscuous mode
[  862.987097][T29432] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  863.008731][T29432] 8021q: adding VLAN 0 to HW filter on device bond1
[  863.024151][T29432] veth5: left promiscuous mode
[  863.055400][T29432] 8021q: adding VLAN 0 to HW filter on device bond2
[  863.076738][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.085229][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.093416][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.102348][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.111592][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.120528][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.129988][T29432] 8021q: adding VLAN 0 to HW filter on device bond3
[  863.144351][T29432] veth7: left promiscuous mode
[  863.189726][T29432] 8021q: adding VLAN 0 to HW filter on device bond4
[  863.214443][T29432] ip6gretap0: entered promiscuous mode
[  863.226028][T28783] bond3: (slave ip6gretap1): link status up again after 0 ms
[  863.226841][T29432] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  863.255562][T29237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.358310][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1
[  863.360044][T29453] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5879'.
[  863.375224][T28002] lo speed is unknown, defaulting to 1000
[  863.395405][T28002] syz2: Port: 1 Link ACTIVE
[  863.468140][T28800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  863.486588][ T5629] Bluetooth: hci1: command tx timeout
[  863.541670][T29446] syzkaller0: entered promiscuous mode
[  863.563436][T29446] syzkaller0: entered allmulticast mode
[  863.577931][T29237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.622851][T28800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  863.632063][T28800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  865.973163][T28798] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  866.062444][T29464] netlink: 'syz.0.5881': attribute type 7 has an invalid length.
[  866.116552][T29466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5882'.
[  866.139928][T29237] team0: Port device team_slave_0 added
[  866.175550][T29467] gre1: entered promiscuous mode
[  866.222115][T29237] team0: Port device team_slave_1 added
[  866.278072][T28787] net_ratelimit: 15 callbacks suppressed
[  866.278095][T28787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.292943][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  866.347180][T29472] netlink: 'syz.1.5883': attribute type 27 has an invalid length.
[  866.447189][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  866.526828][T29237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.540057][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  866.586894][T29237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.699500][T28797] hsr_slave_0: left promiscuous mode
[  866.717508][T28797] hsr_slave_1: left promiscuous mode
[  866.793144][T28797] veth0_macvtap: left promiscuous mode
[  866.804307][T28797] veth1_vlan: left promiscuous mode
[  867.373371][T29503] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5888'.
[  867.393341][T29503] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5888'.
[  867.789412][T29237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.799065][T29237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.827586][T29237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.886454][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2
[  867.997390][T29514] netlink: 'syz.4.5891': attribute type 83 has an invalid length.
[  868.015126][T29516] netlink: 'syz.0.5892': attribute type 1 has an invalid length.
[  868.032948][T29516] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5892'.
[  868.200727][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.210338][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.251607][T29237] hsr_slave_0: entered promiscuous mode
[  868.277436][T29237] hsr_slave_1: entered promiscuous mode
[  868.507543][T28797] IPVS: stop unused estimator thread 0...
[  868.522646][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  868.796744][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5899'.
[  868.839207][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.847971][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.856703][T28801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.865691][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  868.882681][T29553] tunl0: Caught tx_queue_len zero misconfig
[  869.020219][T29560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5902'.
[  869.171231][T29560] ip6gre1: entered promiscuous mode
[  869.176927][T29560] ip6gre1: entered allmulticast mode
[  869.232901][T29569] netlink: 'syz.2.5902': attribute type 6 has an invalid length.
[  869.257257][T29569] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5902'.
[  869.716092][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  869.782252][T29587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  869.814151][T29587] netlink: 'syz.1.5904': attribute type 3 has an invalid length.
[  870.180241][T29603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'.
[  870.679374][T29622] IPv6: NLM_F_CREATE should be specified when creating new route
[  870.877789][T28002] IPVS: starting estimator thread 0...
[  870.930871][T29237] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  870.938297][T29636] netlink: 'syz.2.5915': attribute type 5 has an invalid length.
[  870.954750][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  870.964007][T29636] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  870.974556][T29237] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  870.977904][T29637] IPVS: using max 34 ests per chain, 81600 per kthread
[  871.010775][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  871.026040][T29636] syzkaller0: entered promiscuous mode
[  871.039441][T29636] tipc: Resetting bearer <eth:syzkaller0>
[  871.060781][T29237] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  871.091331][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  871.107740][T29641] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1806) !
[  871.177805][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5917'.
[  871.263247][T29237] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  871.308838][T29237] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  871.375267][T29650] 8021q: adding VLAN 0 to HW filter on device bond1
[  871.439200][T29643] 8021q: adding VLAN 0 to HW filter on device bond1
[  871.454203][T29643] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  871.475039][T29643] bond1: (slave vti0): Error -95 calling set_mac_address
[  871.521590][T29641] tipc: Resetting bearer <eth:syzkaller0>
[  871.565861][T28787] net_ratelimit: 12 callbacks suppressed
[  871.565883][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  871.796779][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  871.901015][T29685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5926'.
[  871.915845][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5925'.
[  871.940987][T29684] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5925'.
[  872.011011][T29237] 8021q: adding VLAN 0 to HW filter on device bond0
[  872.020629][T29684] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5925'.
[  872.038330][T29681] netlink: 'syz.0.5924': attribute type 1 has an invalid length.
[  872.048003][T28801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.057082][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  872.076066][T29691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5926'.
[  872.101816][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5926'.
[  872.123317][T29684] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  872.136453][T29684] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  872.151686][T29237] 8021q: adding VLAN 0 to HW filter on device team0
[  872.163394][T29684] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  872.178053][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.212720][T28794] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.219957][T28794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.262088][T28798] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.269452][T28798] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.307858][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.445949][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.567777][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.684103][T29707] netlink: 'syz.1.5929': attribute type 10 has an invalid length.
[  872.696347][T28797] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.816649][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  872.911523][T29714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5929'.
[  872.984088][T29718] veth0: entered promiscuous mode
[  873.049085][T29716] veth0: left promiscuous mode
[  873.338341][T29737] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5936'.
[  873.375350][T29736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  873.494752][T29737] wireguard: wg2: Could not create IPv4 socket
[  873.500832][T29747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'.
[  873.561865][T29736] syzkaller0: entered promiscuous mode
[  873.606630][T29736] syzkaller0: entered allmulticast mode
[  873.653483][T29742] wireguard: wg2: Could not create IPv4 socket
[  873.750470][T29734] tipc: Resetting bearer <eth:syzkaller0>
[  873.829970][T29734] tipc: Disabling bearer <eth:syzkaller0>
[  873.903536][T29754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  873.929429][T29762] lo: Caught tx_queue_len zero misconfig
[  873.955986][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  874.118887][T29756] syzkaller0: entered promiscuous mode
[  874.134559][T29756] syzkaller0: entered allmulticast mode
[  874.144090][T29756] tipc: Resetting bearer <eth:syzkaller0>
[  874.199358][T29237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  874.370130][T29753] tipc: Resetting bearer <eth:syzkaller0>
[  874.378648][T29775] netlink: 'syz.0.5943': attribute type 1 has an invalid length.
[  876.787304][T29753] tipc: Disabling bearer <eth:syzkaller0>
[  876.807563][T29785] __nla_validate_parse: 2 callbacks suppressed
[  876.807584][T29785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5945'.
[  876.841961][T28801] net_ratelimit: 17 callbacks suppressed
[  876.841983][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  877.014412][T29793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5947'.
[  877.027065][T29237] veth0_vlan: entered promiscuous mode
[  877.077075][T29237] veth1_vlan: entered promiscuous mode
[  877.139841][T29804] vxcan1: tx drop: invalid da for name 0x00000000000000c7
[  877.168951][T28797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.178488][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  877.187939][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  877.244707][T29237] veth0_macvtap: entered promiscuous mode
[  877.292057][T29237] veth1_macvtap: entered promiscuous mode
[  877.327451][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  877.370753][T29809] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5949'.
[  877.409121][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5949'.
[  877.449095][T29237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.455720][T29809] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5949'.
[  877.501322][T29237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.542332][T28800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.567273][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5949'.
[  877.577868][T28800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.611195][T28800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.638466][T28800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.662559][T29809] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5949'.
[  877.796307][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  878.145715][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  878.287754][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  878.496054][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  878.561817][T28787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.610601][T28787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.667784][T28787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.679373][T28787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  878.687092][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  878.865848][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  879.042338][T29868] netlink: 'syz.4.5957': attribute type 6 has an invalid length.
[  879.067631][T29869] netlink: 'syz.4.5957': attribute type 6 has an invalid length.
[  879.087259][T29868] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5957'.
[  879.111441][T29869] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5957'.
[  879.491502][T29882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5959'.
[  879.567749][T29891] netlink: 'syz.0.5960': attribute type 1 has an invalid length.
[  879.576047][T29888] netlink: 'syz.4.5961': attribute type 1 has an invalid length.
[  879.658226][T29888] 8021q: adding VLAN 0 to HW filter on device bond17
[  879.750226][T29894] bond17: (slave veth17): Enslaving as an active interface with a down link
[  879.789093][T29888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.820825][T29888] bond17: (slave batadv0): making interface the new active one
[  879.831026][T29888] batadv0: entered promiscuous mode
[  879.837215][T29888] bond17: (slave batadv0): Enslaving as an active interface with an up link
[  880.641739][T29934] netlink: 'syz.0.5968': attribute type 1 has an invalid length.
[  881.827123][T29913] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  881.919503][T29934] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  881.926672][T28797] net_ratelimit: 16 callbacks suppressed
[  881.926693][T28797] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  882.176639][T28797] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  882.277747][T28797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.286827][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.304580][T28798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.313725][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  882.323790][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  882.360880][T29971] netlink: 'syz.3.5975': attribute type 1 has an invalid length.
[  882.385747][T29969] __nla_validate_parse: 6 callbacks suppressed
[  882.385766][T29969] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5975'.
[  882.415394][T29975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5976'.
[  882.430470][T29969] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  882.494154][T29971] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  882.495206][T29980] tunl0: Caught tx_queue_len zero misconfig
[  882.705295][T29992] syzkaller0: entered promiscuous mode
[  882.731828][T29976] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  882.758249][T29992] syzkaller0: entered allmulticast mode
[  882.786056][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  882.945391][T30009] netlink: 'syz.2.5981': attribute type 1 has an invalid length.
[  882.959897][T30009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5981'.
[  883.480325][T30027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5985'.
[  883.821173][T30045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5987'.
[  883.828297][T30039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5987'.
[  883.946729][T30045] bond9: entered allmulticast mode
[  884.393940][T30072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  884.904082][T30093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5996'.
[  885.066738][T30090] 8021q: adding VLAN 0 to HW filter on device eth0
[  885.138674][T30090] 8021q: adding VLAN 0 to HW filter on device eth1
[  885.177381][T30090] 8021q: adding VLAN 0 to HW filter on device eth2
[  885.201511][T30090] 8021q: adding VLAN 0 to HW filter on device eth3
[  885.232786][T30090] 8021q: adding VLAN 0 to HW filter on device bond1
[  885.276877][T28800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  886.136235][T30147] netlink: 'syz.0.6008': attribute type 1 has an invalid length.
[  886.367200][T30147] bond2: entered promiscuous mode
[  886.372898][T30147] 8021q: adding VLAN 0 to HW filter on device bond2
[  886.539896][T30157] 8021q: adding VLAN 0 to HW filter on device bond2
[  886.563819][T30157] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  886.578857][T30157] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  886.593958][T30157] bond2: (slave ip6gre1): making interface the new active one
[  886.602978][T30157] ip6gre1: entered promiscuous mode
[  886.611860][T30157] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  886.674637][T30169] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  886.698860][T30169] bond15 (unregistering): Released all slaves
[  886.744055][T30176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6011'.
[  886.871472][T30179] syzkaller0: entered promiscuous mode
[  886.877617][T30179] syzkaller0: entered allmulticast mode
[  886.996077][T28787] net_ratelimit: 26 callbacks suppressed
[  886.996099][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  887.149347][T28797] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  887.278859][T30199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'.
[  887.292241][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  887.337094][T30202] gretap0: refused to change device tx_queue_len
[  887.362326][T30202] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  887.405254][T28787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.413770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  887.466107][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  887.626061][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  887.752109][T30203] wireguard: wg2: Could not create IPv4 socket
[  887.760604][T30203] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  887.799724][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  889.358697][T30163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  889.715742][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  889.891548][T30303] netlink: 'syz.0.6026': attribute type 1 has an invalid length.
[  889.942948][T30305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6026'.
[  890.080317][T30313] netlink: 'syz.0.6026': attribute type 10 has an invalid length.
[  890.108710][T30313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6026'.
[  890.180418][T30291] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  890.266001][T30290] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6025'.
[  890.534883][T30303] 8021q: adding VLAN 0 to HW filter on device bond3
[  890.606179][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  890.644908][T30308] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  890.684163][T30313] dummy0: entered promiscuous mode
[  890.711487][T30313] bond3: (slave dummy0): Removing an active aggregator
[  890.762061][T30313] bond3: (slave dummy0): Releasing backup interface
[  891.043316][T30344] netlink: 'syz.1.6032': attribute type 5 has an invalid length.
[  891.072717][T30344] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6032'.
[  891.164029][T30344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6032'.
[  891.565289][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'.
[  891.594135][T30365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6036'.
[  891.648840][T30365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6036'.
[  891.710600][T30355] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6034'.
[  891.735432][T30355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6034'.
[  892.099624][T30392] netlink: 'syz.4.6040': attribute type 1 has an invalid length.
[  892.120846][T28800] net_ratelimit: 35 callbacks suppressed
[  892.120869][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  892.397114][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  892.517540][T28797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.526067][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  892.537183][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  892.786235][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  892.922237][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  893.067128][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  893.083992][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.093299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.111613][T30442] netlink: 'syz.2.6051': attribute type 1 has an invalid length.
[  893.155962][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  893.168521][T30442] 8021q: adding VLAN 0 to HW filter on device bond15
[  893.259939][T30446] 8021q: adding VLAN 0 to HW filter on device bond15
[  893.311673][T30446] bond15: (slave gre1): The slave device specified does not support setting the MAC address
[  893.356201][T30446] bond15: (slave gre1): Error -95 calling set_mac_address
[  893.420077][T30442] gretap4: entered promiscuous mode
[  893.440910][T30442] bond15: (slave gretap4): making interface the new active one
[  893.450451][T30442] bond15: (slave gretap4): Enslaving as an active interface with an up link
[  893.484507][T30450] macvlan3: entered promiscuous mode
[  893.507067][T30450] macvlan3: entered allmulticast mode
[  893.538502][T30450] bond15: entered promiscuous mode
[  893.544892][T30450] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  893.558023][T30450] bond15: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap4
[  893.570543][T30450] bond15: left promiscuous mode
[  893.879651][T30474] bond16: option xmit_hash_policy: invalid value (8)
[  893.889896][T30474] bond16 (unregistering): Released all slaves
[  893.994169][T30481] lo speed is unknown, defaulting to 1000
[  895.753007][T30425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  895.980023][T30501] syzkaller0: entered promiscuous mode
[  895.991853][T30501] syzkaller0: entered allmulticast mode
[  896.035260][T30501] gre1: entered promiscuous mode
[  896.198868][T30515] 8021q: VLANs not supported on sit0
[  896.210125][T30516] 8021q: VLANs not supported on sit0
[  896.253077][T30511] bond4 (unregistering): Released all slaves
[  896.272206][T30516] __nla_validate_parse: 3 callbacks suppressed
[  896.272226][T30516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6062'.
[  896.302543][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6062'.
[  896.367263][T30515] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  896.711687][T30541] netlink: 'syz.3.6069': attribute type 1 has an invalid length.
[  896.979557][T30552] : entered promiscuous mode
[  897.053458][T30558] netlink: 'syz.1.6076': attribute type 1 has an invalid length.
[  897.111900][T30561] netlink: 'syz.3.6077': attribute type 1 has an invalid length.
[  897.125326][T30558] 8021q: adding VLAN 0 to HW filter on device bond10
[  897.138638][T28788] net_ratelimit: 35 callbacks suppressed
[  897.138677][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  897.212313][T30561] 8021q: adding VLAN 0 to HW filter on device bond1
[  897.234099][T30563] 8021q: adding VLAN 0 to HW filter on device bond10
[  897.245293][T30563] bond10: (slave gre2): The slave device specified does not support setting the MAC address
[  897.258636][T30563] bond10: (slave gre2): Error -95 calling set_mac_address
[  897.312905][T30558] gretap3: entered promiscuous mode
[  897.349608][T30558] bond10: (slave gretap3): making interface the new active one
[  897.381469][T30558] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  897.440826][T30568] 8021q: adding VLAN 0 to HW filter on device bond1
[  897.455515][T30568] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  897.474021][T30568] bond1: (slave gre1): Error -95 calling set_mac_address
[  897.557944][T30576] tap0: tun_chr_ioctl cmd 2148553947
[  897.587593][T30588] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  897.593285][T30572] macvlan0: entered promiscuous mode
[  897.605182][T30572] macvlan0: entered allmulticast mode
[  897.612730][T30572] team0: Device macvlan0 is already an upper device of the team interface
[  897.651961][T30561] gretap1: entered promiscuous mode
[  897.681689][T30561] bond1: (slave gretap1): making interface the new active one
[  897.698887][T30561] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  897.737679][T30578] macvlan2: entered promiscuous mode
[  897.749118][T30578] macvlan2: entered allmulticast mode
[  897.760370][T30578] bond1: entered promiscuous mode
[  897.772948][T30578] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  897.792363][T30578] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  897.814250][T30578] bond1: left promiscuous mode
[  897.900331][T30593] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  897.924381][T30593] CPU: 0 UID: 0 PID: 30593 Comm: syz.0.6084 Not tainted syzkaller #0 PREEMPT(full) 
[  897.924410][T30593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  897.924424][T30593] Call Trace:
[  897.924433][T30593]  <TASK>
[  897.924443][T30593]  dump_stack_lvl+0xe8/0x150
[  897.924478][T30593]  sysfs_warn_dup+0x8e/0xa0
[  897.924509][T30593]  sysfs_do_create_link_sd+0xc0/0x110
[  897.924540][T30593]  device_add_class_symlinks+0x1cf/0x240
[  897.924581][T30593]  device_add+0x475/0xbb0
[  897.924617][T30593]  wiphy_register+0x1fb1/0x2fe0
[  897.924669][T30593]  ? __pfx_wiphy_register+0x10/0x10
[  897.924702][T30593]  ? __pfx_netdev_run_todo+0x10/0x10
[  897.924730][T30593]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  897.924767][T30593]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  897.924810][T30593]  ieee80211_register_hw+0x3c56/0x4910
[  897.924844][T30593]  ? ieee80211_register_hw+0x1951/0x4910
[  897.924893][T30593]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  897.924919][T30593]  ? __asan_memset+0x22/0x50
[  897.924948][T30593]  ? __hrtimer_setup+0x1b7/0x260
[  897.924975][T30593]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  897.925003][T30593]  mac80211_hwsim_new_radio+0x3306/0x57b0
[  897.925069][T30593]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  897.925096][T30593]  ? __asan_memcpy+0x40/0x70
[  897.925130][T30593]  hwsim_new_radio_nl+0xd96/0xfa0
[  897.925168][T30593]  genl_family_rcv_msg_doit+0x22a/0x330
[  897.925209][T30593]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  897.925254][T30593]  ? bpf_lsm_capable+0x9/0x20
[  897.925275][T30593]  ? security_capable+0x7e/0x2c0
[  897.925314][T30593]  genl_rcv_msg+0x61c/0x7a0
[  897.925351][T30593]  ? __pfx_genl_rcv_msg+0x10/0x10
[  897.925381][T30593]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  897.925420][T30593]  netlink_rcv_skb+0x232/0x4b0
[  897.925445][T30593]  ? __pfx_genl_rcv_msg+0x10/0x10
[  897.925477][T30593]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  897.925518][T30593]  ? down_read+0x270/0x2e0
[  897.925546][T30593]  ? genl_rcv+0xd/0x40
[  897.925580][T30593]  genl_rcv+0x28/0x40
[  897.925612][T30593]  netlink_unicast+0x75c/0x8e0
[  897.925645][T30593]  netlink_sendmsg+0x813/0xb40
[  897.925680][T30593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  897.925708][T30593]  ? aa_sock_msg_perm+0xf1/0x1b0
[  897.925742][T30593]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  897.925773][T30593]  ____sys_sendmsg+0x972/0x9f0
[  897.925798][T30593]  ? __might_fault+0xaf/0x130
[  897.925832][T30593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  897.925866][T30593]  ? import_iovec+0x73/0xa0
[  897.925897][T30593]  ___sys_sendmsg+0x2a5/0x360
[  897.925920][T30593]  ? __lock_acquire+0x6b5/0x2cf0
[  897.925948][T30593]  ? __pfx____sys_sendmsg+0x10/0x10
[  897.925979][T30593]  ? futex_wait+0x2a2/0x390
[  897.926046][T30593]  ? __fget_files+0x2a/0x420
[  897.926073][T30593]  ? __fget_files+0x3a0/0x420
[  897.926110][T30593]  __x64_sys_sendmsg+0x1bd/0x2a0
[  897.926138][T30593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  897.926172][T30593]  ? rcu_is_watching+0x15/0xb0
[  897.926208][T30593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.926232][T30593]  do_syscall_64+0x174/0x580
[  897.926255][T30593]  ? trace_irq_disable+0x3b/0x140
[  897.926285][T30593]  ? clear_bhb_loop+0x40/0x90
[  897.926311][T30593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  897.926332][T30593] RIP: 0033:0x7faf3f19ce59
[  897.926352][T30593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.926370][T30593] RSP: 002b:00007faf4000d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  897.926393][T30593] RAX: ffffffffffffffda RBX: 00007faf3f415fa0 RCX: 00007faf3f19ce59
[  897.926408][T30593] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  897.926422][T30593] RBP: 00007faf3f232d6f R08: 0000000000000000 R09: 0000000000000000
[  897.926435][T30593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.926448][T30593] R13: 00007faf3f416038 R14: 00007faf3f415fa0 R15: 00007ffd3b42bd38
[  897.926483][T30593]  </TASK>
[  898.339072][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.347660][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.360487][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.369665][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  898.393179][T30603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6088'.
[  898.459314][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  898.576423][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  898.691322][T30611] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6091'.
[  898.770267][T11373] bridge0: entered promiscuous mode
[  898.776175][T28797] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  898.915946][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  898.981023][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6093'.
[  898.992200][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  899.124525][T30614] nbd3: detected capacity change from 0 to 63
[  899.200591][T30622] 8021q: adding VLAN 0 to HW filter on device bond1
[  899.222497][T30622] gretap1: left promiscuous mode
[  899.307010][ T5629] block nbd3: Receive control failed (result -104)
[  899.441153][T30639] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6098'.
[  899.574120][T30647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6099'.
[  899.822679][T30657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6101'.
[  900.049352][T30667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6104'.
[  900.113537][T30667] xfrm1: entered promiscuous mode
[  900.154131][T30667] xfrm1: entered allmulticast mode
[  900.178275][T30667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6104'.
[  901.467338][T30745] syz_tun: entered allmulticast mode
[  901.498800][T30745] syz_tun: left allmulticast mode
[  901.580132][T30756] __nla_validate_parse: 11 callbacks suppressed
[  901.580154][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6124'.
[  901.647136][T30760] netlink: 'syz.4.6124': attribute type 1 has an invalid length.
[  901.659323][T30743] xt_TCPMSS: Only works on TCP SYN packets
[  901.811237][T30761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6125'.
[  901.991479][T30782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6130'.
[  902.078988][T30784] xt_CT: No such helper "syz1"
[  902.146294][T28788] net_ratelimit: 28 callbacks suppressed
[  902.146316][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  902.174574][T30793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  902.296545][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  902.317752][T30799] netlink: 'syz.1.6134': attribute type 10 has an invalid length.
[  902.351592][T30799] bond8: (slave dummy0): Releasing active interface
[  902.444956][T30807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6139'.
[  902.471779][T30810] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  902.698874][T30799] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  902.749281][T30799] team0: Failed to send options change via netlink (err -105)
[  902.761812][T30827] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  902.794192][T30827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  902.807285][T30799] team0: Port device dummy0 added
[  902.815885][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  902.830335][   T29] audit: type=1800 audit(1781202274.164:21): pid=30804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6135" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=531 res=0 errno=0
[  902.996892][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  903.120560][T30835] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6142'.
[  903.127031][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  903.154467][T30835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6142'.
[  903.195161][T30835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6142'.
[  903.255707][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  903.376105][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  903.922302][T30859] lo speed is unknown, defaulting to 1000
[  904.013826][T18992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  904.034004][T18992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  904.053893][T18992] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  904.068593][T18992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  904.077476][T18992] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  904.796544][T19314] syz_tun (unregistering): left allmulticast mode
[  904.807838][T19314] syz_tun (unregistering): left promiscuous mode
[  904.819090][T19314] bridge0: port 2(syz_tun) entered disabled state
[  905.311462][T30867] lo speed is unknown, defaulting to 1000
[  905.470842][T30928] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6165'.
[  905.664785][T30935] netlink: 276 bytes leftover after parsing attributes in process `syz.4.6166'.
[  905.748188][T30937] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6166'.
[  906.117472][T18992] Bluetooth: hci5: command tx timeout
[  906.247035][T30867] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.258318][T30867] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.270444][T30867] bridge_slave_0: entered allmulticast mode
[  906.290916][T30867] bridge_slave_0: entered promiscuous mode
[  906.300924][T30867] bridge0: port 2(bridge_slave_1) entered blocking state
[  906.308921][T30867] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.317029][T30867] bridge_slave_1: entered allmulticast mode
[  906.325348][T30867] bridge_slave_1: entered promiscuous mode
[  906.374121][T30867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.399028][T30867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.446994][T30953] netlink: 'syz.3.6170': attribute type 7 has an invalid length.
[  906.465126][T30953] netlink: 'syz.3.6170': attribute type 8 has an invalid length.
[  906.542293][T30867] team0: Port device team_slave_0 added
[  906.560132][T30867] team0: Port device team_slave_1 added
[  906.673674][T30867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.684894][T30960] __nla_validate_parse: 2 callbacks suppressed
[  906.684916][T30960] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6172'.
[  906.707080][T30867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.765708][T30867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.801037][T30960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.831764][T30960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.872198][T30967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6173'.
[  906.881764][T30960] bond0 (unregistering): Released all slaves
[  906.933869][T30867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.951070][T30867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.990556][T30867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  907.069219][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6173'.
[  907.181231][T30867] hsr_slave_0: entered promiscuous mode
[  907.198750][T30867] hsr_slave_1: entered promiscuous mode
[  907.219691][T30867] debugfs: 'hsr0' already exists in 'hsr'
[  907.240537][T30867] Cannot create hsr debugfs directory
[  907.756598][T28795] net_ratelimit: 23 callbacks suppressed
[  907.756620][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  907.820583][T30867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  907.832693][T30867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.843309][T30867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  907.853867][T30867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0
[  907.879829][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.888039][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.897253][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  907.906258][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  908.194758][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6182'.
[  908.208594][T18992] Bluetooth: hci5: command tx timeout
[  908.243625][T30867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  908.270373][T31011] netlink: 'syz.0.6183': attribute type 1 has an invalid length.
[  908.290798][T30867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.309402][T30867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  908.321972][T30867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0
[  908.462754][T31011] bond4: entered promiscuous mode
[  908.468941][T31011] bond4: entered allmulticast mode
[  908.476998][T31011] 8021q: adding VLAN 0 to HW filter on device bond4
[  908.496712][T31014] erspan1: entered allmulticast mode
[  908.508279][T31014] bond4: (slave erspan1): making interface the new active one
[  908.516594][T31014] erspan1: entered promiscuous mode
[  908.525314][T31014] bond4: (slave erspan1): Enslaving as an active interface with an up link
[  908.547644][T31021] syz.0.6183 (31021) used obsolete PPPIOCDETACH ioctl
[  908.646340][T30867] bond0: (slave netdevsim1): Releasing backup interface
[  908.668456][T30867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  908.680242][T30867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.697436][T30867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  908.719032][T30867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0
[  908.748090][T31027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6187'.
[  908.809661][T28787] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  908.864320][T30867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  908.878259][T30867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.899886][T30867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  908.919685][T30867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0
[  909.029887][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  909.171495][T28787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.180042][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.195247][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  909.625072][T30867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  909.671765][T30867] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  909.692465][T30867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  909.721819][T30867] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  909.734174][T30867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  909.764039][T30867] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  909.788895][T30867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  909.829479][T30867] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  909.993989][T31054] xt_bpf: check failed: parse error
[  910.063504][T30867] 8021q: adding VLAN 0 to HW filter on device bond0
[  910.129468][T30867] 8021q: adding VLAN 0 to HW filter on device team0
[  910.140696][T31057] netlink: 'syz.4.6194': attribute type 1 has an invalid length.
[  910.161249][T28795] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.168474][T28795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.250278][T31057] 8021q: adding VLAN 0 to HW filter on device bond18
[  910.278995][T18992] Bluetooth: hci5: command tx timeout
[  910.302924][T28787] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.310163][T28787] bridge0: port 2(bridge_slave_1) entered forwarding state
[  910.382254][T31066] netlink: 'syz.3.6197': attribute type 4 has an invalid length.
[  910.466929][T31074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6197'.
[  910.503579][T31066] netlink: 'syz.3.6197': attribute type 21 has an invalid length.
[  910.515066][T31066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6197'.
[  910.526591][T31071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6195'.
[  910.535975][T31071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6195'.
[  910.546759][T31076] tipc: Started in network mode
[  910.551757][T31076] tipc: Node identity 4665d62403d3, cluster identity 4711
[  910.560020][T31076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  910.593408][T31076] syzkaller0: entered promiscuous mode
[  910.616085][T31076] syzkaller0: entered allmulticast mode
[  910.734713][T31076] tipc: Resetting bearer <eth:syzkaller0>
[  910.807803][T31072] tipc: Resetting bearer <eth:syzkaller0>
[  910.830249][T31080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6199'.
[  910.833768][T31082] netlink: 'syz.4.6200': attribute type 1 has an invalid length.
[  910.902040][T31072] tipc: Disabling bearer <eth:syzkaller0>
[  910.927503][T31086] siw: device registration error -23
[  911.035434][T31082] 8021q: adding VLAN 0 to HW filter on device bond19
[  911.065207][T31084] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  911.096318][T31084] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  911.106592][T31084] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  911.112725][T31096] netlink: 'syz.3.6203': attribute type 1 has an invalid length.
[  911.128312][T31097] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  911.152851][T31086] veth19: entered allmulticast mode
[  911.167360][T31086] bond19: (slave veth19): Enslaving as an active interface with an up link
[  911.214777][T31089] bond19 (unregistering): (slave veth19): Releasing backup interface
[  911.234544][T31089] bond19 (unregistering): Released all slaves
[  911.353897][T31092] tipc: New replicast peer: 255.255.255.255
[  911.376801][T31092] tipc: Enabled bearer <udp:syz2>, priority 26
[  911.450426][T31097] bond5: entered promiscuous mode
[  911.466873][T31097] 8021q: adding VLAN 0 to HW filter on device bond5
[  911.609261][T31100] bond0: (slave geneve2): making interface the new active one
[  911.619251][T31100] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  911.635034][T31101] bond0 (unregistering): (slave geneve2): Releasing active interface
[  911.647601][T31101] bond0 (unregistering): Released all slaves
[  911.812662][T31114] __nla_validate_parse: 5 callbacks suppressed
[  911.812687][T31114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'.
[  912.204073][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'.
[  912.366235][T18992] Bluetooth: hci5: command tx timeout
[  912.495694][T27997] tipc: Node number set to 1169610276
[  912.533468][T30867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  912.768452][T31164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9
[  912.986823][T28788] net_ratelimit: 20 callbacks suppressed
[  912.986845][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  913.028507][T30867] veth0_vlan: entered promiscuous mode
[  913.080098][T30867] veth1_vlan: entered promiscuous mode
[  913.127303][T31173] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6217'.
[  913.140475][T31173] netlink: 'syz.3.6217': attribute type 1 has an invalid length.
[  913.149512][T31173] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6217'.
[  913.153510][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  913.245564][T30867] veth0_macvtap: entered promiscuous mode
[  913.271074][T30867] veth1_macvtap: entered promiscuous mode
[  913.318410][T30867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  913.382933][T30867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  913.407546][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  913.426507][T28788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  913.445024][T28788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  913.490977][T28798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  913.502631][T31180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'.
[  913.516475][T28798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  913.549792][T31180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'.
[  913.580415][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  913.611649][T31184] netlink: 'syz.0.6222': attribute type 1 has an invalid length.
[  913.636268][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.645212][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.657355][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.666442][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  913.754559][T31184] 8021q: adding VLAN 0 to HW filter on device bond6
[  913.763918][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6223'.
[  913.787750][T31190] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6223'.
[  913.822657][T31185] 8021q: adding VLAN 0 to HW filter on device bond6
[  913.851758][T31185] bond6: (slave gre2): The slave device specified does not support setting the MAC address
[  913.883395][T31185] bond6: (slave gre2): Error -95 calling set_mac_address
[  913.954469][T31187] gretap1: entered promiscuous mode
[  913.972087][T31187] bond6: (slave gretap1): making interface the new active one
[  913.984225][T31187] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  914.005686][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  914.035084][T28798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.083815][T28798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.134519][T28798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  914.150017][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  914.164301][T28798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  914.423597][T31210] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6150'.
[  914.478234][T31217] netlink: 'syz.4.6233': attribute type 4 has an invalid length.
[  914.974821][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  914.991854][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  915.001772][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  915.013264][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  915.021418][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  915.710784][T31255] lo speed is unknown, defaulting to 1000
[  915.979201][T31232] lo speed is unknown, defaulting to 1000
[  916.155092][T31277] netlink: 'syz.0.6250': attribute type 13 has an invalid length.
[  916.179519][T31277] netlink: 'syz.0.6250': attribute type 17 has an invalid length.
[  916.366048][T31277] dummy0: left promiscuous mode
[  916.541048][T31277] ip6tnl1: left allmulticast mode
[  916.612642][T31277] gre1: left promiscuous mode
[  916.629659][T31277] bond2: left promiscuous mode
[  916.634975][T31277] ip6gre1: left promiscuous mode
[  916.661359][T31277] bond4: left promiscuous mode
[  916.667515][T31277] erspan1: left promiscuous mode
[  916.672788][T31277] bond4: left allmulticast mode
[  916.681748][T31277] erspan1: left allmulticast mode
[  916.717991][T31277] bond5: left promiscuous mode
[  916.779703][T31277] batadv0: entered promiscuous mode
[  916.789678][T31277] 8021q: adding VLAN 0 to HW filter on device macsec1
[  916.801156][T31277] 8021q: adding VLAN 0 to HW filter on device bond6
[  916.815404][T31277] gretap1: left promiscuous mode
[  917.077469][ T5629] Bluetooth: hci0: command tx timeout
[  917.486150][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  917.571860][T31326] Bluetooth: MGMT ver 1.23
[  917.789369][T28794] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  917.897166][T28794] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  917.927522][T28794] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  918.032517][T28788] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  918.152231][T31356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6269'.
[  918.175040][T31232] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.187765][T31232] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.195162][T31232] bridge_slave_0: entered allmulticast mode
[  918.203923][T31232] bridge_slave_0: entered promiscuous mode
[  918.218827][T31358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6269'.
[  918.243454][T31232] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.255206][T31232] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.264849][T31232] bridge_slave_1: entered allmulticast mode
[  918.277444][T31232] bridge_slave_1: entered promiscuous mode
[  918.469094][T31232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  918.491214][T31232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  918.609463][T31378] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6275'.
[  918.621531][T31232] team0: Port device team_slave_0 added
[  918.638246][T31378] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6275'.
[  918.659249][T31232] team0: Port device team_slave_1 added
[  918.772315][T28794] net_ratelimit: 24 callbacks suppressed
[  918.772335][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.787161][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.842070][T31232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  918.866449][T31232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  918.895463][T31396] netlink: 'syz.1.6280': attribute type 1 has an invalid length.
[  918.904578][T31232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  918.952155][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6278'.
[  918.963942][T31394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6278'.
[  919.043444][T31396] 8021q: adding VLAN 0 to HW filter on device bond11
[  919.072989][T31232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  919.089069][T31232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  919.115485][T31232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  919.145933][T31399] 8021q: adding VLAN 0 to HW filter on device bond11
[  919.153415][T31399] bond11: (slave gre2): The slave device specified does not support setting the MAC address
[  919.165953][T31399] bond11: (slave gre2): Error -95 calling set_mac_address
[  919.166436][T18992] Bluetooth: hci0: command tx timeout
[  919.195156][T31401] macvlan0: entered promiscuous mode
[  919.201308][T31401] macvlan0: entered allmulticast mode
[  919.208317][T31401] team0: Device macvlan0 is already an upper device of the team interface
[  919.232346][T31394] ipip0: entered promiscuous mode
[  919.238427][T31394] ipip0: entered allmulticast mode
[  919.343277][T31232] hsr_slave_0: entered promiscuous mode
[  919.380792][T31232] hsr_slave_1: entered promiscuous mode
[  919.405007][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.414142][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  919.424177][T31232] debugfs: 'hsr0' already exists in 'hsr'
[  919.444240][T31232] Cannot create hsr debugfs directory
[  919.764730][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6287'.
[  920.047751][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.057219][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.066618][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.075760][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.084599][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.093130][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.253997][T18992] Bluetooth: hci0: command tx timeout
[  923.087036][T31439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6292'.
[  923.199304][T31450] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6296'.
[  923.247367][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  923.283034][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6292'.
[  923.315840][T18992] Bluetooth: hci0: command tx timeout
[  923.802621][T28792] net_ratelimit: 410 callbacks suppressed
[  923.802644][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  923.854490][T31449] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  923.948059][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  924.086386][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  924.346234][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  924.375384][T31502] netlink: 'syz.0.6307': attribute type 1 has an invalid length.
[  924.434740][T31502] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  924.516539][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.534045][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.692759][T31232] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  924.760735][T31232] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  924.782655][T31232] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  924.803000][T31514] netlink: 'syz.0.6311': attribute type 1 has an invalid length.
[  924.814137][T31232] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  924.823501][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  924.837381][T31516] netlink: 'syz.1.6309': attribute type 23 has an invalid length.
[  924.845329][T31516] netlink: 'syz.1.6309': attribute type 21 has an invalid length.
[  924.854040][T31516] IPv6: NLM_F_CREATE should be specified when creating new route
[  924.871661][T31518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6311'.
[  924.903447][T31232] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  924.913989][T31521] netlink: 'syz.3.6312': attribute type 2 has an invalid length.
[  924.927447][T31521] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6312'.
[  924.942659][T31232] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  924.963704][T31232] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  924.992598][T31232] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  925.009475][T31518] 8021q: adding VLAN 0 to HW filter on device bond7
[  925.017685][T31523] x_tables: duplicate underflow at hook 1
[  925.029984][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  925.071552][T31514] 8021q: adding VLAN 0 to HW filter on device bond7
[  925.085363][T31514] bond7: (slave geneve3): making interface the new active one
[  925.096879][T31514] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  925.131877][T28792] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  925.153382][T28792] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  925.166188][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.175179][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.200357][T28792] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  925.221529][T28792] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  925.378133][T31543] batadv0: entered promiscuous mode
[  925.395851][T18992] Bluetooth: hci0: command 0x0401 tx timeout
[  925.479504][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6318'.
[  925.492555][T31549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6318'.
[  925.544798][T31232] 8021q: adding VLAN 0 to HW filter on device bond0
[  925.618774][T31556] netlink: 'syz.3.6319': attribute type 1 has an invalid length.
[  925.696757][T31232] 8021q: adding VLAN 0 to HW filter on device team0
[  925.785793][T31556] 8021q: adding VLAN 0 to HW filter on device bond0
[  925.836790][T31557] 8021q: adding VLAN 0 to HW filter on device bond0
[  925.848196][T31557] bond0: (slave gre1): The slave device specified does not support setting the MAC address
[  925.860505][T31557] bond0: (slave gre1): Error -95 calling set_mac_address
[  925.903761][T31562] macvlan2: entered promiscuous mode
[  925.910307][T31562] macvlan2: entered allmulticast mode
[  925.916293][T31562] team0: Device macvlan2 is already an upper device of the team interface
[  926.168880][T28788] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.176135][T28788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.215104][T28800] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.222376][T28800] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.657933][T31581] Bluetooth: MGMT ver 1.23
[  927.123206][T31605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6331'.
[  927.174520][T31605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  927.387445][T31605] batman_adv: batadv0: Removing interface: batadv_slave_0
[  927.794505][T31232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  928.202078][T31232] veth0_vlan: entered promiscuous mode
[  928.223592][T31232] veth1_vlan: entered promiscuous mode
[  928.279971][T31232] veth0_macvtap: entered promiscuous mode
[  928.297940][T31232] veth1_macvtap: entered promiscuous mode
[  928.313530][T31643] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6338'.
[  928.337669][T31232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.378161][T31232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.429152][T28794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.472493][T28794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.527614][T28794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.539510][T31650] netlink: 'syz.1.6340': attribute type 39 has an invalid length.
[  928.547139][T28794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  928.718060][T31643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6338'.
[  928.802879][T31652] lo speed is unknown, defaulting to 1000
[  928.976574][T28788] net_ratelimit: 23 callbacks suppressed
[  928.976600][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  929.042314][T28800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  929.075469][T28800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  929.227016][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  929.516480][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  929.538524][T28797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  929.583132][T28797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  929.651143][ T4961] block nbd3: Possible stuck request ffff888027a67a80: control (read@0,1024B). Runtime 30 seconds
[  929.662042][ T4961] block nbd3: Possible stuck request ffff888027a67c40: control (read@1024,1024B). Runtime 30 seconds
[  929.673435][ T4961] block nbd3: Possible stuck request ffff888027a67e00: control (read@2048,1024B). Runtime 30 seconds
[  929.684535][ T4961] block nbd3: Possible stuck request ffff888027a67fc0: control (read@3072,1024B). Runtime 30 seconds
[  929.777138][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  929.992121][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  930.116967][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  930.181616][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6353'.
[  930.219030][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6353'.
[  930.232906][T31700] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6353'.
[  930.248273][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  930.281056][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.289241][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.298408][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.311168][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'.
[  930.342629][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'.
[  930.363102][T31703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6356'.
[  930.380490][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'.
[  930.414158][T31701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6355'.
[  930.449521][T31708] pimreg: entered allmulticast mode
[  930.637660][T31708] pimreg: left allmulticast mode
[  930.845809][T31722] sctp: [Deprecated]: syz.1.6358 (pid 31722) Use of int in max_burst socket option.
[  930.845809][T31722] Use struct sctp_assoc_value instead
[  930.852306][T31720] ip6gre1: entered promiscuous mode
[  930.902380][T31720] ip6gre1: entered allmulticast mode
[  931.600754][T31744] 8021q: VLANs not supported on nlmon0
[  932.292745][T31771] netlink: 'syz.4.6373': attribute type 13 has an invalid length.
[  932.591621][T31789] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  932.736990][T31771] netlink: 'syz.4.6373': attribute type 2 has an invalid length.
[  932.779380][T31789] bridge5: entered promiscuous mode
[  932.799215][T31789] bridge5: entered allmulticast mode
[  933.160206][T31816] xt_hashlimit: size too large, truncated to 1048576
[  933.305232][T31821] netlink: 'syz.0.6386': attribute type 1 has an invalid length.
[  933.352511][T31817] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.385856][T31821] __nla_validate_parse: 25 callbacks suppressed
[  933.385878][T31821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6386'.
[  933.532570][T31817] bridge_slave_0 (unregistering): left allmulticast mode
[  933.561848][T31817] bridge_slave_0 (unregistering): left promiscuous mode
[  933.592413][T31817] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.080901][T28792] net_ratelimit: 26 callbacks suppressed
[  934.080922][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  934.325888][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  934.406442][T31853] bridge_slave_0: left allmulticast mode
[  934.447693][T31853] bridge_slave_0: left promiscuous mode
[  934.459718][T31862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6395'.
[  934.479946][T31853] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.517839][T31853] bridge_slave_1: left allmulticast mode
[  934.536892][T31853] bridge_slave_1: left promiscuous mode
[  934.546719][T31867] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6398'.
[  934.566452][T31853] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.592792][T31853] bond0: (slave bond_slave_0): Releasing backup interface
[  934.605818][T31853] bond0: (slave bond_slave_1): Releasing backup interface
[  934.621578][T31853] team0: Port device team_slave_0 removed
[  934.647347][T31853] team0: Port device team_slave_1 removed
[  934.667305][T31853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  934.685461][T31853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  934.715742][T31853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  934.736744][T31853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  934.747954][T31880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6399'.
[  934.759656][T31853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  934.799027][T31859] team0: Mode changed to "loadbalance"
[  934.815470][T31865] vlan0: entered promiscuous mode
[  934.837010][T31865] team0: Port device vlan0 added
[  934.854127][T31872] vlan0: entered promiscuous mode
[  934.866995][T31872] bridge0: entered promiscuous mode
[  934.887564][T31878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6398'.
[  934.898778][T31873] syzkaller1: entered allmulticast mode
[  934.945827][T31873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6399'.
[  935.020147][T31880] bond1: option broadcast_neighbor: invalid value (30)
[  935.046008][T31880] bond1 (unregistering): Released all slaves
[  935.088864][T31882] syzkaller1: tun_chr_ioctl cmd 1074025677
[  935.116228][T31882] syzkaller1: Linktype set failed because interface is up
[  935.145826][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  935.154552][T31869] tipc: Started in network mode
[  935.162787][T31869] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  935.171527][T31869] tipc: Enabled bearer <eth:team0>, priority 0
[  935.410968][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  935.411761][T28800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.428195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.495082][T31902] xt_recent: Unsupported userspace flags (000000b1)
[  935.549616][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  935.659021][T31910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6408'.
[  935.686108][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  935.848277][T31923] vlan0: entered promiscuous mode
[  935.854047][T31923] bridge0: entered promiscuous mode
[  935.877281][T28800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.954419][T31923] netlink: 'syz.0.6412': attribute type 4 has an invalid length.
[  936.323521][T31953] netlink: 'syz.2.6420': attribute type 1 has an invalid length.
[  936.342621][T31953] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6420'.
[  936.364506][T28001] tipc: Node number set to 11578026
[  936.372384][T31953] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6420'.
[  936.384250][T31953] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6420'.
[  936.806112][T31976] veth1: entered promiscuous mode
[  936.811477][T31976] macsec2: entered promiscuous mode
[  936.819402][T31976] macsec2: entered allmulticast mode
[  936.825444][T31976] veth1: entered allmulticast mode
[  936.835475][T31976] veth1: left allmulticast mode
[  936.857177][T31976] veth1: left promiscuous mode
[  936.919935][T31966] macsec2: entered promiscuous mode
[  937.239705][T31996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10
[  937.904821][T32028] netlink: 'syz.1.6441': attribute type 10 has an invalid length.
[  938.124245][T32033] nbd: nbd4 already in use
[  938.321626][T11360] IPVS: starting estimator thread 0...
[  938.425660][T32041] IPVS: using max 28 ests per chain, 67200 per kthread
[  938.493760][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  938.514973][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  938.523204][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  938.532482][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  938.540363][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  938.640202][T32054] __nla_validate_parse: 8 callbacks suppressed
[  938.640222][T32054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6450'.
[  938.698086][T32054] sctp: [Deprecated]: syz.4.6450 (pid 32054) Use of int in maxseg socket option.
[  938.698086][T32054] Use struct sctp_assoc_value instead
[  939.138457][T28798] net_ratelimit: 36 callbacks suppressed
[  939.138479][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  939.212851][T32079] FAULT_INJECTION: forcing a failure.
[  939.212851][T32079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  939.261116][T32079] CPU: 1 UID: 0 PID: 32079 Comm: syz.4.6452 Not tainted syzkaller #0 PREEMPT(full) 
[  939.261147][T32079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  939.261161][T32079] Call Trace:
[  939.261170][T32079]  <TASK>
[  939.261180][T32079]  dump_stack_lvl+0xe8/0x150
[  939.261211][T32079]  should_fail_ex+0x412/0x560
[  939.261240][T32079]  _copy_to_user+0x31/0xb0
[  939.261269][T32079]  do_sock_getsockopt+0x6ea/0x7e0
[  939.261301][T32079]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  939.261343][T32079]  ? __fget_files+0x3a0/0x420
[  939.261400][T32079]  ? __fget_files+0x2a/0x420
[  939.261437][T32079]  __x64_sys_getsockopt+0x1a4/0x240
[  939.261480][T32079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.261505][T32079]  do_syscall_64+0x174/0x580
[  939.261528][T32079]  ? trace_irq_disable+0x3b/0x140
[  939.261558][T32079]  ? clear_bhb_loop+0x40/0x90
[  939.261583][T32079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.261603][T32079] RIP: 0033:0x7fcb4739ce59
[  939.261622][T32079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.261641][T32079] RSP: 002b:00007fcb48337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  939.261664][T32079] RAX: ffffffffffffffda RBX: 00007fcb47615fa0 RCX: 00007fcb4739ce59
[  939.261680][T32079] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003
[  939.261694][T32079] RBP: 00007fcb48337090 R08: 0000200000000140 R09: 0000000000000000
[  939.261709][T32079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  939.261722][T32079] R13: 00007fcb47616038 R14: 00007fcb47615fa0 R15: 00007ffdb52ffa18
[  939.261758][T32079]  </TASK>
[  939.445967][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  939.522415][T32087] bridge_slave_1: left allmulticast mode
[  939.544059][T32087] bridge_slave_1: left promiscuous mode
[  939.551741][T32087] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.630917][T32087] bond0: (slave bond_slave_0): Releasing backup interface
[  939.712520][T32087] bond0: (slave bond_slave_1): Releasing backup interface
[  939.744134][T32087] team0: Port device team_slave_0 removed
[  939.784671][T32087] team0: Port device team_slave_1 removed
[  939.795288][T32087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  939.812601][T32087] batman_adv: batadv0: Removing interface: batadv_slave_1
[  939.829785][T32087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  939.953159][T32100] team0: Port device vlan0 removed
[  940.013278][T32102] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6454'.
[  940.031710][T32081] ip6gre2: entered allmulticast mode
[  940.068132][T32102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6454'.
[  940.096691][T32081] team0: Port device ip6gre2 added
[  940.128630][T32111] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6457'.
[  940.140564][T28802] tipc: Resetting bearer <eth:team0>
[  940.149100][T32111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6457'.
[  940.238975][T32100] tipc: Resetting bearer <eth:team0>
[  940.270077][T32100] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  940.305776][T28783] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  940.395325][T32116] Bluetooth: MGMT ver 1.23
[  940.408158][T32046] lo speed is unknown, defaulting to 1000
[  940.422134][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'.
[  940.431313][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  940.596493][ T5629] Bluetooth: hci3: command tx timeout
[  940.659674][T32126] syzkaller0: entered promiscuous mode
[  940.680692][T32126] syzkaller0: entered allmulticast mode
[  940.920785][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  941.086221][T28800] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  941.116860][T32137] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6462'.
[  941.160659][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.169792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.257585][T32046] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.265084][T32046] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.273273][T32046] bridge_slave_0: entered allmulticast mode
[  941.282473][T32046] bridge_slave_0: entered promiscuous mode
[  941.292001][T32046] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.301460][T32046] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.309563][T32046] bridge_slave_1: entered allmulticast mode
[  941.318008][T32046] bridge_slave_1: entered promiscuous mode
[  941.369186][T32046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  941.391715][T32046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  941.483715][T32046] team0: Port device team_slave_0 added
[  941.494533][T32146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.530174][T32046] team0: Port device team_slave_1 added
[  941.613276][T32046] batman_adv: batadv0: Adding interface: batadv_slave_0
[  941.630775][T32046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.678585][T32046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  941.692651][T32046] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.700342][T32046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.734094][T32046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.822003][T32046] hsr_slave_0: entered promiscuous mode
[  941.846265][T32046] hsr_slave_1: entered promiscuous mode
[  941.861586][T32046] debugfs: 'hsr0' already exists in 'hsr'
[  941.878733][T32046] Cannot create hsr debugfs directory
[  942.249231][T32163] netlink: 560 bytes leftover after parsing attributes in process `syz.4.6472'.
[  942.297707][T32163] netlink: 964 bytes leftover after parsing attributes in process `syz.4.6472'.
[  942.360290][T32163] netlink: 560 bytes leftover after parsing attributes in process `syz.4.6472'.
[  942.492150][T32173] netlink: 'syz.3.6475': attribute type 1 has an invalid length.
[  942.500677][T32173] netlink: 'syz.3.6475': attribute type 2 has an invalid length.
[  942.559291][T32173] tipc: Started in network mode
[  942.564929][T32173] tipc: Node identity 3eda483107b8, cluster identity 4711
[  942.578960][T32173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  942.592080][T32173] syzkaller0: entered promiscuous mode
[  942.623787][T32173] syzkaller0: entered allmulticast mode
[  942.676326][ T5629] Bluetooth: hci3: command tx timeout
[  942.719309][T32046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  942.782944][T32181] gtp0: entered promiscuous mode
[  942.788505][T32181] gtp0: entered allmulticast mode
[  942.801793][T32181] team0: Device gtp0 is of different type
[  942.826862][T32172] tipc: Resetting bearer <eth:syzkaller0>
[  942.860715][T32172] tipc: Disabling bearer <eth:syzkaller0>
[  942.971965][T32046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.101379][T32195] sctp: [Deprecated]: syz.3.6483 (pid 32195) Use of struct sctp_assoc_value in delayed_ack socket option.
[  943.101379][T32195] Use struct sctp_sack_info instead
[  943.363434][T32046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  943.900975][T32232] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6490'.
[  944.386432][T28798] net_ratelimit: 18 callbacks suppressed
[  944.386454][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  944.441844][   T29] audit: type=1107 audit(1781202315.774:22): pid=32254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  944.587090][T28783] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  944.756377][ T5629] Bluetooth: hci3: command tx timeout
[  944.825801][T28783] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  944.872543][T32046] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  944.915027][T32046] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  944.943766][T32046] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  944.958960][T32267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6496'.
[  944.979869][T32269] netlink: 'syz.4.6497': attribute type 1 has an invalid length.
[  945.015168][T32046] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  945.069226][T32272] sctp: [Deprecated]: syz.2.6498 (pid 32272) Use of int in max_burst socket option deprecated.
[  945.069226][T32272] Use struct sctp_assoc_value instead
[  945.153239][T32046] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  945.216584][T32046] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  945.245356][T32046] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  945.294486][T32046] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  945.464960][T32283] lo speed is unknown, defaulting to 1000
[  945.466891][T28783] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  945.520118][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6499'.
[  945.706825][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  945.747145][T32295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6500'.
[  945.781102][T32295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6500'.
[  946.068745][T32301] team0: Device wg0 is of different type
[  946.099360][T32301] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  946.216864][T32046] 8021q: adding VLAN 0 to HW filter on device bond0
[  946.267639][T32046] 8021q: adding VLAN 0 to HW filter on device team0
[  946.294476][T32310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6505'.
[  946.319041][T28802] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.326284][T28802] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.389419][T28802] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.396709][T28802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.447042][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  946.486108][T32317] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  946.567819][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  946.670774][T32326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6513'.
[  946.683220][T32326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6513'.
[  946.749880][T32329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6512'.
[  946.837934][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.846176][ T5629] Bluetooth: hci3: command tx timeout
[  946.847104][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  946.972218][T32329] syzkaller0: entered promiscuous mode
[  946.986312][T32329] syzkaller0: entered allmulticast mode
[  947.062952][T32345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6518'.
[  950.710403][T28798] net_ratelimit: 11 callbacks suppressed
[  950.710425][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  950.772862][T32374] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.804345][T32374] bridge_slave_0 (unregistering): left allmulticast mode
[  950.828021][T32374] bridge_slave_0 (unregistering): left promiscuous mode
[  950.847481][T32374] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.912235][T32377] __nla_validate_parse: 3 callbacks suppressed
[  950.912256][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6524'.
[  950.946264][T32377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6524'.
[  951.021276][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.122031][T32386] netlink: 'syz.4.6527': attribute type 10 has an invalid length.
[  951.143938][T32386] netlink: 'syz.4.6527': attribute type 10 has an invalid length.
[  951.167692][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.192945][T32390] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6528'.
[  951.265332][T32393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6529'.
[  951.286474][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.476731][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.615805][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.735071][T32420] veth0: Caught tx_queue_len zero misconfig
[  951.774860][T32420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6535'.
[  951.794355][T32421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6534'.
[  951.806619][T32420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6535'.
[  951.849096][T32421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  951.859617][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  951.988768][T32432] netlink: 'syz.2.6537': attribute type 13 has an invalid length.
[  952.015420][T32432] netlink: 'syz.2.6537': attribute type 17 has an invalid length.
[  952.238556][T32436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6537'.
[  952.283253][T32444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6540'.
[  952.297996][T32445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6540'.
[  952.677639][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.687606][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  952.761683][T32430] tipc: Resetting bearer <eth:team0>
[  953.956145][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  954.358557][T32432] 8021q: adding VLAN 0 to HW filter on device bond0
[  954.370397][T32432] 8021q: adding VLAN 0 to HW filter on device team0
[  954.377961][T32432] tipc: Resetting bearer <eth:team0>
[  954.384041][T32432] tipc: Resetting bearer <eth:team0>
[  954.400931][T32432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.556984][T28801] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  954.577219][T28801] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  954.606157][T32046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  954.634365][T28801] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  954.658745][T28801] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  954.781592][T32046] veth0_vlan: entered promiscuous mode
[  954.807183][T32046] veth1_vlan: entered promiscuous mode
[  954.892314][T32046] veth0_macvtap: entered promiscuous mode
[  954.904156][T32046] veth1_macvtap: entered promiscuous mode
[  954.942386][T32046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  954.964621][T32046] batman_adv: batadv0: Interface activated: batadv_slave_1
[  954.988021][T28801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  955.022019][T28801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  955.048345][T28801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  955.078351][T28801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  955.223810][T32467] nbd: must specify a size in bytes for the device
[  955.453532][T32472] macsec1: entered promiscuous mode
[  955.564081][T28802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.581725][T28802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.700115][T28801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  955.708936][T28801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  955.747649][T28801] net_ratelimit: 15 callbacks suppressed
[  955.747671][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  955.903404][T32491] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  955.913583][T32491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  955.935797][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  956.056856][T28783] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  956.199396][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  956.955679][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  957.107500][T32530] netlink: 'syz.3.6566': attribute type 1 has an invalid length.
[  957.252021][T32533] bond2: (slave bridge2): making interface the new active one
[  957.267125][T32533] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  957.286680][T32538] __nla_validate_parse: 1 callbacks suppressed
[  957.286700][T32538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6569'.
[  957.556601][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  957.612478][T32541] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6567'.
[  957.642188][T32541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6567'.
[  957.797196][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  957.805675][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  958.058347][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  958.163190][T32583] FAULT_INJECTION: forcing a failure.
[  958.163190][T32583] name failslab, interval 1, probability 0, space 0, times 0
[  958.188906][T32583] CPU: 0 UID: 0 PID: 32583 Comm: syz.4.6577 Not tainted syzkaller #0 PREEMPT(full) 
[  958.188938][T32583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  958.188953][T32583] Call Trace:
[  958.188963][T32583]  <TASK>
[  958.188973][T32583]  dump_stack_lvl+0xe8/0x150
[  958.189005][T32583]  should_fail_ex+0x412/0x560
[  958.189048][T32583]  should_failslab+0xa8/0x100
[  958.189073][T32583]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  958.189104][T32583]  ? __alloc_skb+0x186/0x7d0
[  958.189125][T32583]  ? __alloc_skb+0x1d0/0x7d0
[  958.189142][T32583]  ? __local_bh_enable_ip+0xd0/0x130
[  958.189171][T32583]  __alloc_skb+0x1d0/0x7d0
[  958.189197][T32583]  netlink_sendmsg+0x5d4/0xb40
[  958.189233][T32583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  958.189274][T32583]  ? aa_sock_msg_perm+0xf1/0x1b0
[  958.189308][T32583]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  958.189341][T32583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  958.189365][T32583]  sock_write_iter+0x49b/0x4f0
[  958.189397][T32583]  ? __pfx_sock_write_iter+0x10/0x10
[  958.189448][T32583]  do_iter_readv_writev+0x619/0x8c0
[  958.189486][T32583]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  958.189526][T32583]  ? bpf_lsm_file_permission+0x9/0x20
[  958.189575][T32583]  ? security_file_permission+0x75/0x260
[  958.189606][T32583]  ? rw_verify_area+0x255/0x4d0
[  958.189641][T32583]  vfs_writev+0x33c/0x990
[  958.189677][T32583]  ? __pfx_vfs_writev+0x10/0x10
[  958.189719][T32583]  ? __fget_files+0x2a/0x420
[  958.189753][T32583]  ? __fget_files+0x3a0/0x420
[  958.189780][T32583]  ? __fget_files+0x2a/0x420
[  958.189818][T32583]  do_writev+0x154/0x2e0
[  958.189846][T32583]  ? __pfx_do_writev+0x10/0x10
[  958.189882][T32583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.189907][T32583]  do_syscall_64+0x174/0x580
[  958.189934][T32583]  ? clear_bhb_loop+0x40/0x90
[  958.189963][T32583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  958.189986][T32583] RIP: 0033:0x7fcb4739ce59
[  958.190007][T32583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  958.190026][T32583] RSP: 002b:00007fcb48337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  958.190050][T32583] RAX: ffffffffffffffda RBX: 00007fcb47615fa0 RCX: 00007fcb4739ce59
[  958.190067][T32583] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  958.190081][T32583] RBP: 00007fcb48337090 R08: 0000000000000000 R09: 0000000000000000
[  958.190094][T32583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  958.190108][T32583] R13: 00007fcb47616038 R14: 00007fcb47615fa0 R15: 00007ffdb52ffa18
[  958.190141][T32583]  </TASK>
[  958.235267][T32582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6578'.
[  958.566435][T32591] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6581'.
[  958.745342][T32591] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6581'.
[  958.941448][T32609] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6586'.
[  958.954154][T32609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6586'.
[  959.122080][T32617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6589'.
[  959.261372][T32626] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6590'.
[  959.713360][T32647] sctp: [Deprecated]: syz.2.6597 (pid 32647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  959.713360][T32647] Use struct sctp_sack_info instead
[  959.744247][ T4961] block nbd3: Possible stuck request ffff888027a67a80: control (read@0,1024B). Runtime 60 seconds
[  959.755343][ T4961] block nbd3: Possible stuck request ffff888027a67c40: control (read@1024,1024B). Runtime 60 seconds
[  959.766807][ T4961] block nbd3: Possible stuck request ffff888027a67e00: control (read@2048,1024B). Runtime 60 seconds
[  959.777927][ T4961] block nbd3: Possible stuck request ffff888027a67fc0: control (read@3072,1024B). Runtime 60 seconds
[  959.833033][T32648] sctp: [Deprecated]: syz.2.6597 (pid 32648) Use of struct sctp_assoc_value in delayed_ack socket option.
[  959.833033][T32648] Use struct sctp_sack_info instead
[  960.130711][T32657] lo speed is unknown, defaulting to 1000
[  960.416535][T32675] netlink: 'syz.0.6609': attribute type 4 has an invalid length.
[  960.469349][T32677] netlink: 'syz.0.6609': attribute type 4 has an invalid length.
[  960.779533][T28798] net_ratelimit: 23 callbacks suppressed
[  960.779555][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  960.947552][T32694] Cannot find map_set index 17 as target
[  961.116007][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.255988][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.376109][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.515081][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.656758][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.801878][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  961.985740][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  962.134217][T32740] syzkaller1: entered promiscuous mode
[  962.163684][T32740] syzkaller1: entered allmulticast mode
[  962.330412][T32749] __nla_validate_parse: 10 callbacks suppressed
[  962.330444][T32749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6630'.
[  962.356856][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  962.366795][T32750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6629'.
[  962.378199][T32750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6629'.
[  962.387839][T32749] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6630'.
[  962.421817][T32752] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6630'.
[  962.487790][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  962.546249][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6632'.
[  962.658201][T32762] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  962.669005][T32757] syzkaller0: entered promiscuous mode
[  962.676528][T32757] syzkaller0: entered allmulticast mode
[  962.741822][T32766] pim6reg: entered allmulticast mode
[  962.799589][T32762] syzkaller0: entered promiscuous mode
[  962.812603][T32762] syzkaller0: entered allmulticast mode
[  962.834683][  T300] syzkaller1: entered promiscuous mode
[  962.850352][  T300] syzkaller1: entered allmulticast mode
[  963.204251][  T316] FAULT_INJECTION: forcing a failure.
[  963.204251][  T316] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  963.231797][  T316] CPU: 0 UID: 0 PID: 316 Comm: syz.4.6644 Not tainted syzkaller #0 PREEMPT(full) 
[  963.231826][  T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  963.231840][  T316] Call Trace:
[  963.231849][  T316]  <TASK>
[  963.231858][  T316]  dump_stack_lvl+0xe8/0x150
[  963.231890][  T316]  should_fail_ex+0x412/0x560
[  963.231919][  T316]  _copy_from_user+0x2d/0xb0
[  963.231946][  T316]  ___sys_sendmsg+0x1c6/0x360
[  963.231971][  T316]  ? __lock_acquire+0x6b5/0x2cf0
[  963.232000][  T316]  ? __pfx____sys_sendmsg+0x10/0x10
[  963.232022][  T316]  ? __lock_acquire+0x6b5/0x2cf0
[  963.232050][  T316]  ? kstrtouint+0x6e/0xe0
[  963.232146][  T316]  __sys_sendmmsg+0x27c/0x4e0
[  963.232192][  T316]  ? __pfx___sys_sendmmsg+0x10/0x10
[  963.232215][  T316]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  963.232269][  T316]  ? ksys_write+0x242/0x270
[  963.232312][  T316]  ? __pfx_ksys_write+0x10/0x10
[  963.232351][  T316]  __x64_sys_sendmmsg+0xa0/0xc0
[  963.232375][  T316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.232398][  T316]  do_syscall_64+0x174/0x580
[  963.232421][  T316]  ? trace_irq_disable+0x3b/0x140
[  963.232454][  T316]  ? clear_bhb_loop+0x40/0x90
[  963.232480][  T316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  963.232521][  T316] RIP: 0033:0x7fcb4739ce59
[  963.232541][  T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  963.232561][  T316] RSP: 002b:00007fcb48337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  963.232586][  T316] RAX: ffffffffffffffda RBX: 00007fcb47615fa0 RCX: 00007fcb4739ce59
[  963.232603][  T316] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000007
[  963.232617][  T316] RBP: 00007fcb48337090 R08: 0000000000000000 R09: 0000000000000000
[  963.232631][  T316] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001
[  963.232645][  T316] R13: 00007fcb47616038 R14: 00007fcb47615fa0 R15: 00007ffdb52ffa18
[  963.232682][  T316]  </TASK>
[  963.643861][  T326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6643'.
[  963.711313][  T327] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6647'.
[  963.737885][  T331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6646'.
[  963.755158][  T331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6646'.
[  964.031109][  T339] lo speed is unknown, defaulting to 1000
[  964.518539][  T360] FAULT_INJECTION: forcing a failure.
[  964.518539][  T360] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  964.532983][  T360] CPU: 0 UID: 0 PID: 360 Comm: syz.1.6655 Not tainted syzkaller #0 PREEMPT(full) 
[  964.533009][  T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  964.533021][  T360] Call Trace:
[  964.533028][  T360]  <TASK>
[  964.533037][  T360]  dump_stack_lvl+0xe8/0x150
[  964.533064][  T360]  should_fail_ex+0x412/0x560
[  964.533089][  T360]  _copy_from_user+0x2d/0xb0
[  964.533117][  T360]  ___sys_sendmsg+0x1c6/0x360
[  964.533139][  T360]  ? __lock_acquire+0x6b5/0x2cf0
[  964.533164][  T360]  ? __pfx____sys_sendmsg+0x10/0x10
[  964.533183][  T360]  ? __lock_acquire+0x6b5/0x2cf0
[  964.533208][  T360]  ? kstrtouint+0x6e/0xe0
[  964.533272][  T360]  __sys_sendmmsg+0x27c/0x4e0
[  964.533301][  T360]  ? __pfx___sys_sendmmsg+0x10/0x10
[  964.533321][  T360]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  964.533367][  T360]  ? ksys_write+0x242/0x270
[  964.533398][  T360]  ? __pfx_ksys_write+0x10/0x10
[  964.533432][  T360]  __x64_sys_sendmmsg+0xa0/0xc0
[  964.533454][  T360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.533475][  T360]  do_syscall_64+0x174/0x580
[  964.533495][  T360]  ? trace_irq_disable+0x3b/0x140
[  964.533524][  T360]  ? clear_bhb_loop+0x40/0x90
[  964.533547][  T360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.533566][  T360] RIP: 0033:0x7f85ce59ce59
[  964.533584][  T360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.533600][  T360] RSP: 002b:00007f85cf3b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  964.533622][  T360] RAX: ffffffffffffffda RBX: 00007f85ce815fa0 RCX: 00007f85ce59ce59
[  964.533635][  T360] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000007
[  964.533647][  T360] RBP: 00007f85cf3b0090 R08: 0000000000000000 R09: 0000000000000000
[  964.533659][  T360] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001
[  964.533670][  T360] R13: 00007f85ce816038 R14: 00007f85ce815fa0 R15: 00007fff8f09eb78
[  964.533711][  T360]  </TASK>
[  964.885244][  T362] syzkaller0: entered promiscuous mode
[  964.935315][  T362] syzkaller0: entered allmulticast mode
[  965.770998][  T408] netlink: 'syz.1.6670': attribute type 1 has an invalid length.
[  965.836077][T28793] net_ratelimit: 28 callbacks suppressed
[  965.836098][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  965.977974][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.122981][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.245712][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.368228][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.447412][  T442] netlink: 'syz.1.6684': attribute type 1 has an invalid length.
[  966.505977][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.646907][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.760579][T28788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.770062][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.816942][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  966.824605][  T457] nbd: couldn't find a device at index 0
[  967.250621][  T475] netlink: 'syz.0.6693': attribute type 1 has an invalid length.
[  967.268516][  T457] bridge1: port 1(veth5) entered blocking state
[  967.278458][  T457] bridge1: port 1(veth5) entered disabled state
[  967.285486][  T457] veth5: entered allmulticast mode
[  967.296412][  T457] veth5: entered promiscuous mode
[  967.336484][  T461] bridge1: port 2(veth0_to_bond) entered blocking state
[  967.357598][  T461] bridge1: port 2(veth0_to_bond) entered disabled state
[  967.366601][  T461] veth0_to_bond: entered allmulticast mode
[  967.386946][  T461] veth0_to_bond: entered promiscuous mode
[  967.425038][  T465] bridge1: port 3(veth7) entered blocking state
[  967.433800][  T465] bridge1: port 3(veth7) entered disabled state
[  967.442955][  T465] veth7: entered allmulticast mode
[  967.451181][  T465] veth7: entered promiscuous mode
[  967.505235][  T485] __nla_validate_parse: 11 callbacks suppressed
[  967.505256][  T485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6693'.
[  967.714414][  T479] bond8: (slave geneve4): making interface the new active one
[  967.728312][  T479] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  967.748636][  T496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6698'.
[  967.953131][T28794] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  967.979471][T28794] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  967.988288][T28794] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  968.023984][T28794] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  968.170181][  T512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6702'.
[  968.210607][  T512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6702'.
[  969.073230][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.082978][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.093643][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.102887][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.112278][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.121451][  T528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6706'.
[  969.847927][  T466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  970.079731][  T533] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  970.449791][  T553] netlink: 'syz.3.6715': attribute type 1 has an invalid length.
[  970.542737][  T553] 8021q: adding VLAN 0 to HW filter on device bond3
[  970.729314][  T559] bond3: (slave veth3): Enslaving as an active interface with a down link
[  970.764696][  T553] bond3: (slave dummy0): making interface the new active one
[  970.778374][  T553] dummy0: entered promiscuous mode
[  970.787767][  T553] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  970.819867][  T569] geneve5: entered promiscuous mode
[  970.870638][  T553] bond3: (slave dummy0): Releasing active interface
[  970.884832][  T553] dummy0 (unregistering): left promiscuous mode
[  970.907036][T28792] net_ratelimit: 33 callbacks suppressed
[  970.907058][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  971.103049][  T579] xt_CT: No such helper "netbios-ns"
[  971.207298][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  971.287028][  T588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  971.335961][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  971.451324][  T592] bond1: option tlb_dynamic_lb: invalid value (47)
[  971.470098][  T592] bond1 (unregistering): Released all slaves
[  971.557922][  T595] bond4: option miimon: invalid value (18446744073709551607)
[  971.566202][  T595] bond4: option miimon: allowed values 0 - 2147483647
[  971.591166][  T595] bond4 (unregistering): Released all slaves
[  971.615420][T28801] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  971.624779][T28801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  971.649604][T28801] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  971.658973][T28801] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  971.691413][ T5629] block nbd8: Receive control failed (result -32)
[  971.698665][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  971.807959][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  971.878291][T28801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.887915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.936844][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  972.020643][  T611] netlink: 'syz.1.6730': attribute type 1 has an invalid length.
[  972.029589][  T611] netlink: 'syz.1.6730': attribute type 1 has an invalid length.
[  972.040090][T28002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  972.144485][  T615] netlink: 'syz.3.6729': attribute type 2 has an invalid length.
[  972.668926][  T625] __nla_validate_parse: 15 callbacks suppressed
[  972.668948][  T625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6734'.
[  972.780362][  T642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6734'.
[  972.956598][  T651] batadv_slave_1: entered promiscuous mode
[  973.003521][  T654] batadv_slave_1: left promiscuous mode
[  973.100228][  T660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6745'.
[  973.121405][  T660] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  973.294244][T28798] bridge1: port 2(veth0_to_bond) entered blocking state
[  973.301454][T28798] bridge1: port 2(veth0_to_bond) entered forwarding state
[  973.436931][  T678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'.
[  973.656283][  T688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6754'.
[  973.665414][  T688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6754'.
[  973.677450][  T688] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6754'.
[  973.702580][  T688] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  973.720921][  T688] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  973.740428][  T688] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  974.184990][  T706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6762'.
[  974.419265][  T711] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6763'.
[  974.447283][  T711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6763'.
[  974.521633][  T711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  975.383154][  T725] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  975.406126][  T725] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  975.869769][  T764] tipc: Resetting bearer <eth:team0>
[  975.918402][T28792] net_ratelimit: 419 callbacks suppressed
[  975.918424][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  976.093150][  T770] netlink: 'syz.1.6783': attribute type 1 has an invalid length.
[  976.110494][T28801] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  976.150364][  T777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.161592][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.188930][  T770] bond1: entered promiscuous mode
[  976.194707][  T770] 8021q: adding VLAN 0 to HW filter on device bond1
[  976.201731][T27996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.236587][T28794] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  976.366368][T28794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.374812][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.383655][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  976.521882][T11360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  976.543010][  T786] netlink: 'syz.3.6788': attribute type 11 has an invalid length.
[  976.603114][  T787] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode
[  976.625986][  T787] mac80211_hwsim hwsim91 wlan0: entered allmulticast mode
[  976.723178][  T795] netlink: 'syz.3.6790': attribute type 10 has an invalid length.
[  977.070459][  T813] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  977.101659][  T813] xt_cgroup: path and classid specified
[  977.189778][  T819] hsr_slave_0: left promiscuous mode
[  977.198225][  T819] hsr_slave_1: left promiscuous mode
[  978.069105][  T859] __nla_validate_parse: 13 callbacks suppressed
[  978.069128][  T859] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6807'.
[  978.101250][  T859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6807'.
[  978.116855][  T861] netlink: 'syz.0.6809': attribute type 25 has an invalid length.
[  978.134305][  T861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6809'.
[  978.183096][T28798] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  978.185027][  T861] netlink: 'syz.0.6809': attribute type 25 has an invalid length.
[  978.216084][  T861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6809'.
[  978.227514][T28798] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  978.299222][T28798] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  978.315342][T28798] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  978.494674][  T877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'.
[  978.505780][  T876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'.
[  978.677883][  T887] sctp: [Deprecated]: syz.0.6818 (pid 887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  978.677883][  T887] Use struct sctp_sack_info instead
[  978.734032][  T893] vxcan2: entered allmulticast mode
[  978.771408][  T889] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6819'.
[  979.112474][  T918] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6829'.
[  979.405244][  T947] syzkaller1: entered promiscuous mode
[  979.416063][  T947] syzkaller1: entered allmulticast mode
[  979.571746][  T957] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6837'.
[  979.658208][  T963] netlink: 'syz.2.6839': attribute type 1 has an invalid length.
[  979.683742][  T963] netlink: 'syz.2.6839': attribute type 2 has an invalid length.
[  980.148428][  T978] xt_bpf: check failed: parse error
[  980.745490][  T996] bridge2: entered promiscuous mode
[  980.757252][  T996] bridge2: entered allmulticast mode
[  980.771048][  T998] netlink: 'syz.0.6850': attribute type 27 has an invalid length.
[  980.857609][ T1001] netpci0: tun_chr_ioctl cmd 2151700607
[  980.870091][ T1001] netpci0: tun_chr_ioctl cmd 1074025678
[  980.887068][ T1001] netpci0: group set to 0
[  980.925721][T28792] net_ratelimit: 57 callbacks suppressed
[  980.925743][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.056205][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.227744][ T1016] bond9 (unregistering): Released all slaves
[  981.256426][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.389961][ T1015] bridge5: entered promiscuous mode
[  981.401709][T27996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  981.403567][ T1015] bridge5: entered allmulticast mode
[  981.432524][ T1032] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6860'.
[  981.445326][ T1032] gretap0: entered promiscuous mode
[  981.477859][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.495013][ T1032] 0ªî{X¹¦: renamed from gretap0
[  981.506006][ T1032] 0ªî{X¹¦: left promiscuous mode
[  981.512913][ T1032] 0ªî{X¹¦: entered allmulticast mode
[  981.522764][ T1032] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  981.630960][ T1025] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  981.685607][T28788] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.865917][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  981.919880][T28802] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  981.948060][T28802] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  981.978606][T28802] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  982.014316][T28802] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  982.048898][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  982.095331][ T1067] netlink: 'syz.2.6866': attribute type 18 has an invalid length.
[  982.337305][ T1090] netlink: 'syz.0.6870': attribute type 21 has an invalid length.
[  982.371302][ T1090] netlink: 'syz.0.6870': attribute type 21 has an invalid length.
[  982.907325][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.915054][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.086116][ T1082] bridge1: port 2(veth0_to_bond) entered disabled state
[  983.194951][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  983.387827][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  983.833718][ T1082] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  983.878464][ T1082] bond1: left promiscuous mode
[  983.885033][ T1082] bridge2: left promiscuous mode
[  983.891081][ T1082] bridge2: left allmulticast mode
[  983.901812][ T1085] kthread_run failed with err -4
[  983.954576][ T1100] macvlan2: entered promiscuous mode
[  983.972194][ T1100] macvlan2: entered allmulticast mode
[  983.981113][ T1090] __nla_validate_parse: 12 callbacks suppressed
[  983.981133][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6870'.
[  984.012327][ T1100] team0: Device macvlan2 is already an upper device of the team interface
[  984.037373][ T1090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6870'.
[  984.074160][T28798] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  984.100320][T28798] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  984.255795][T28798] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  984.280503][T28798] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  984.304869][T28798] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  984.332523][T28798] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  984.356579][T28798] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  984.376716][T28798] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  984.570152][ T1133] netlink: 'syz.0.6884': attribute type 9 has an invalid length.
[  984.585750][ T1133] netlink: 'syz.0.6884': attribute type 6 has an invalid length.
[  984.598720][ T1133] netlink: 'syz.0.6884': attribute type 7 has an invalid length.
[  984.607092][ T1133] netlink: 'syz.0.6884': attribute type 8 has an invalid length.
[  984.654023][ T1140] netlink: 'syz.3.6886': attribute type 1 has an invalid length.
[  984.685006][ T1140] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6886'.
[  984.706999][ T1140] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6886'.
[  984.727405][ T1140] netlink: 'syz.3.6886': attribute type 1 has an invalid length.
[  984.736392][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6887'.
[  985.626167][ T1159] block nbd9: server does not support multiple connections per device.
[  985.690284][ T1159] block nbd9: shutting down sockets
[  985.957213][T28798] net_ratelimit: 13 callbacks suppressed
[  985.957234][T28798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.971955][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.986855][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  985.995878][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.006743][T28802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.015080][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  986.031484][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  986.205686][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  986.347147][T28793] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  986.375474][ T1167] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  986.412098][ T1167] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  986.426195][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6901'.
[  986.483737][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  986.542650][ T1167] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  986.570545][ T1167] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  986.618923][ T1167] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  986.631471][ T1167] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  986.642981][ T1201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6903'.
[  986.774424][ T1201] 8021q: adding VLAN 0 to HW filter on device bond9
[  986.782894][ T1167] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  986.789886][ T1167] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  986.813262][ T1207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6904'.
[  986.897849][ T1209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6904'.
[  986.947514][ T1207] bond2: entered promiscuous mode
[  986.953141][ T1207] 8021q: adding VLAN 0 to HW filter on device bond2
[  986.961635][ T1167] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  986.982203][ T1167] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  987.876028][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  988.477161][T28801] 
[  988.479554][T28801] ======================================================
[  988.486586][T28801] WARNING: possible circular locking dependency detected
[  988.493641][T28801] syzkaller #0 Not tainted
[  988.498081][T28801] ------------------------------------------------------
[  988.505118][T28801] kworker/u8:29/28801 is trying to acquire lock:
[  988.511469][T28801] ffff88805ee3d030 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  988.520666][T28801] 
[  988.520666][T28801] but task is already holding lock:
[  988.528048][T28801] ffff888055cd6558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  988.538051][T28801] 
[  988.538051][T28801] which lock already depends on the new lock.
[  988.538051][T28801] 
[  988.548487][T28801] 
[  988.548487][T28801] the existing dependency chain (in reverse order) is:
[  988.557617][T28801] 
[  988.557617][T28801] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}:
[  988.565921][T28801]        _raw_spin_lock+0x2e/0x40
[  988.571052][T28801]        sch_direct_xmit+0x15f/0x4c0
[  988.576406][T28801]        __dev_queue_xmit+0x180f/0x3950
[  988.582058][T28801]        hsr_forward_skb+0x166e/0x2a70
[  988.587562][T28801]        send_hsr_supervision_frame+0x731/0xcb0
[  988.593844][T28801]        hsr_announce+0x1db/0x370
[  988.598907][T28801]        call_timer_fn+0x192/0x5e0
[  988.604051][T28801]        __run_timer_base+0x652/0x8b0
[  988.609470][T28801]        run_timer_softirq+0xb7/0x170
[  988.614870][T28801]        handle_softirqs+0x22a/0x840
[  988.620183][T28801]        __irq_exit_rcu+0xca/0x220
[  988.625326][T28801]        irq_exit_rcu+0x9/0x30
[  988.630119][T28801]        sysvec_apic_timer_interrupt+0xa6/0xc0
[  988.636396][T28801]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  988.642934][T28801]        __zap_vma_range+0xea6/0x4b70
[  988.648335][T28801]        unmap_vmas+0x3ac/0x570
[  988.653223][T28801]        exit_mmap+0x280/0x9e0
[  988.658059][T28801]        __mmput+0x118/0x430
[  988.662708][T28801]        exit_mm+0x1f6/0x2d0
[  988.667342][T28801]        do_exit+0x6a2/0x22c0
[  988.672054][T28801]        do_group_exit+0x21b/0x2d0
[  988.677196][T28801]        get_signal+0x1284/0x1330
[  988.682241][T28801]        arch_do_signal_or_restart+0xbc/0x840
[  988.688376][T28801]        exit_to_user_mode_loop+0xa9/0x680
[  988.694208][T28801]        do_syscall_64+0x353/0x580
[  988.699358][T28801]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  988.705800][T28801] 
[  988.705800][T28801] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  988.713575][T28801]        __lock_acquire+0x15a5/0x2cf0
[  988.718982][T28801]        lock_acquire+0x106/0x350
[  988.724040][T28801]        _raw_spin_lock_bh+0x36/0x50
[  988.729354][T28801]        hsr_dev_xmit+0x237/0x360
[  988.734417][T28801]        dev_hard_start_xmit+0x2cd/0x830
[  988.740085][T28801]        __dev_queue_xmit+0x14d9/0x3950
[  988.745670][T28801]        ip_finish_output2+0xca9/0x1070
[  988.751329][T28801]        ip_output+0x29f/0x450
[  988.756140][T28801]        iptunnel_xmit+0x621/0xd10
[  988.761359][T28801]        ip_tunnel_xmit+0x193a/0x1f20
[  988.766772][T28801]        __gre_xmit+0x19e/0x240
[  988.771722][T28801]        erspan_xmit+0xa41/0x14d0
[  988.776807][T28801]        dev_hard_start_xmit+0x2cd/0x830
[  988.782477][T28801]        sch_direct_xmit+0x251/0x4c0
[  988.787804][T28801]        __dev_queue_xmit+0x180f/0x3950
[  988.793386][T28801]        alb_send_lp_vid+0x348/0x550
[  988.798783][T28801]        alb_send_learning_packets+0x12c/0x300
[  988.804978][T28801]        bond_alb_monitor+0x3d5/0x17e0
[  988.810471][T28801]        process_scheduled_works+0xb5d/0x1860
[  988.816576][T28801]        worker_thread+0xa53/0xfc0
[  988.821717][T28801]        kthread+0x389/0x470
[  988.826332][T28801]        ret_from_fork+0x514/0xb70
[  988.831462][T28801]        ret_from_fork_asm+0x1a/0x30
[  988.836768][T28801] 
[  988.836768][T28801] other info that might help us debug this:
[  988.836768][T28801] 
[  988.847008][T28801]  Possible unsafe locking scenario:
[  988.847008][T28801] 
[  988.854464][T28801]        CPU0                    CPU1
[  988.859864][T28801]        ----                    ----
[  988.865247][T28801]   lock(&qdisc_xmit_lock_key#3);
[  988.870299][T28801]                                lock(&hsr->seqnr_lock);
[  988.877337][T28801]                                lock(&qdisc_xmit_lock_key#3);
[  988.884898][T28801]   lock(&hsr->seqnr_lock);
[  988.889423][T28801] 
[  988.889423][T28801]  *** DEADLOCK ***
[  988.889423][T28801] 
[  988.897664][T28801] 10 locks held by kworker/u8:29/28801:
[  988.903222][T28801]  #0: ffff888064c5e140 ((wq_completion)bond4#9){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  988.914302][T28801]  #1: ffffc9000ef67c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  988.927206][T28801]  #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  988.936813][T28801]  #3: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  988.946772][T28801]  #4: ffff888030818228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950
[  988.959420][T28801]  #5: ffff888055cd6558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  988.969755][T28801]  #6: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  988.978681][T28801]  #7: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  988.988447][T28801]  #8: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950
[  988.998398][T28801]  #9: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  989.007572][T28801] 
[  989.007572][T28801] stack backtrace:
[  989.013475][T28801] CPU: 0 UID: 0 PID: 28801 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) 
[  989.013496][T28801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  989.013508][T28801] Workqueue: bond4 bond_alb_monitor
[  989.013526][T28801] Call Trace:
[  989.013535][T28801]  <TASK>
[  989.013543][T28801]  dump_stack_lvl+0xe8/0x150
[  989.013562][T28801]  print_circular_bug+0x2e1/0x300
[  989.013586][T28801]  check_noncircular+0x12e/0x150
[  989.013610][T28801]  __lock_acquire+0x15a5/0x2cf0
[  989.013629][T28801]  ? __siphash_unaligned+0x25f/0x3b0
[  989.013729][T28801]  ? skb_network_protocol+0x23d/0x400
[  989.013750][T28801]  ? hsr_dev_xmit+0x237/0x360
[  989.013769][T28801]  lock_acquire+0x106/0x350
[  989.013786][T28801]  ? hsr_dev_xmit+0x237/0x360
[  989.013809][T28801]  ? __pfx_netif_skb_features+0x10/0x10
[  989.013829][T28801]  ? hsr_dev_xmit+0x237/0x360
[  989.013848][T28801]  _raw_spin_lock_bh+0x36/0x50
[  989.013864][T28801]  ? hsr_dev_xmit+0x237/0x360
[  989.013884][T28801]  hsr_dev_xmit+0x237/0x360
[  989.013904][T28801]  ? hsr_dev_xmit+0x2d/0x360
[  989.013925][T28801]  dev_hard_start_xmit+0x2cd/0x830
[  989.013951][T28801]  __dev_queue_xmit+0x14d9/0x3950
[  989.013974][T28801]  ? __dev_queue_xmit+0x2b6/0x3950
[  989.013996][T28801]  ? lockdep_hardirqs_on+0x7a/0x110
[  989.014016][T28801]  ? __pfx___dev_queue_xmit+0x10/0x10
[  989.014036][T28801]  ? neigh_connected_output+0x1ea/0x460
[  989.014090][T28801]  ? eth_header+0x11b/0x200
[  989.014110][T28801]  ? __asan_memcpy+0x40/0x70
[  989.014160][T28801]  ? ip_finish_output2+0x3c2/0x1070
[  989.014177][T28801]  ip_finish_output2+0xca9/0x1070
[  989.014192][T28801]  ? ip_skb_dst_mtu+0x80b/0xa50
[  989.014219][T28801]  ? ip_finish_output+0x40e/0x530
[  989.014246][T28801]  ip_output+0x29f/0x450
[  989.014271][T28801]  ? ip_output+0x5b/0x450
[  989.014302][T28801]  iptunnel_xmit+0x621/0xd10
[  989.014327][T28801]  ip_tunnel_xmit+0x193a/0x1f20
[  989.014363][T28801]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  989.014390][T28801]  ? __pfx_gre_build_header+0x10/0x10
[  989.014414][T28801]  ? kfree+0x1c5/0x640
[  989.014435][T28801]  ? pskb_expand_head+0x458/0x1390
[  989.014458][T28801]  __gre_xmit+0x19e/0x240
[  989.014481][T28801]  ? __pfx___gre_xmit+0x10/0x10
[  989.014507][T28801]  erspan_xmit+0xa41/0x14d0
[  989.014534][T28801]  ? ret_from_fork_asm+0x1a/0x30
[  989.014556][T28801]  ? __pfx_erspan_xmit+0x10/0x10
[  989.014584][T28801]  dev_hard_start_xmit+0x2cd/0x830
[  989.014611][T28801]  sch_direct_xmit+0x251/0x4c0
[  989.014641][T28801]  ? __pfx_sch_direct_xmit+0x10/0x10
[  989.014674][T28801]  ? kthread+0x2e0/0x470
[  989.014699][T28801]  __dev_queue_xmit+0x180f/0x3950
[  989.014723][T28801]  ? __dev_queue_xmit+0x2b6/0x3950
[  989.014751][T28801]  ? __pfx___dev_queue_xmit+0x10/0x10
[  989.014773][T28801]  ? rcu_is_watching+0x15/0xb0
[  989.014793][T28801]  ? trace_kmem_cache_alloc+0x29/0xe0
[  989.014817][T28801]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  989.014849][T28801]  ? alb_send_lp_vid+0x14e/0x550
[  989.014869][T28801]  alb_send_lp_vid+0x348/0x550
[  989.014889][T28801]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  989.014913][T28801]  alb_send_learning_packets+0x12c/0x300
[  989.014932][T28801]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  989.014949][T28801]  ? bond_alb_monitor+0xf8/0x17e0
[  989.014969][T28801]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  989.014998][T28801]  bond_alb_monitor+0x3d5/0x17e0
[  989.015017][T28801]  ? bond_alb_monitor+0xf8/0x17e0
[  989.015034][T28801]  ? __pfx_bond_alb_monitor+0x10/0x10
[  989.015052][T28801]  ? process_scheduled_works+0xa70/0x1860
[  989.015069][T28801]  ? process_scheduled_works+0xa70/0x1860
[  989.015087][T28801]  process_scheduled_works+0xb5d/0x1860
[  989.015118][T28801]  ? __pfx_process_scheduled_works+0x10/0x10
[  989.015139][T28801]  ? assign_work+0x3d5/0x5e0
[  989.015158][T28801]  worker_thread+0xa53/0xfc0
[  989.015188][T28801]  kthread+0x389/0x470
[  989.015209][T28801]  ? __pfx_worker_thread+0x10/0x10
[  989.015226][T28801]  ? __pfx_kthread+0x10/0x10
[  989.015248][T28801]  ret_from_fork+0x514/0xb70
[  989.015267][T28801]  ? __pfx_ret_from_fork+0x10/0x10
[  989.015284][T28801]  ? __switch_to+0xc79/0x1410
[  989.015310][T28801]  ? __pfx_kthread+0x10/0x10
[  989.015332][T28801]  ret_from_fork_asm+0x1a/0x30
[  989.015360][T28801]  </TASK>
[  989.729400][ T1217] ip6gre2: left allmulticast mode
[  989.768586][ T1217] geneve5: left promiscuous mode
[  989.805644][ T1225] ieee80211 phy106: Selected rate control algorithm 'minstrel_ht'
[  989.839791][ T4961] block nbd3: Possible stuck request ffff888027a67a80: control (read@0,1024B). Runtime 90 seconds
[  989.850746][ T4961] block nbd3: Possible stuck request ffff888027a67c40: control (read@1024,1024B). Runtime 90 seconds
[  989.862409][ T4961] block nbd3: Possible stuck request ffff888027a67e00: control (read@2048,1024B). Runtime 90 seconds
[  989.874295][ T4961] block nbd3: Possible stuck request ffff888027a67fc0: control (read@3072,1024B). Runtime 90 seconds
[  989.942106][T28795] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  989.957804][T28795] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  989.967367][T28795] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  989.980974][T28795] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  990.016001][T28795] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  990.036498][T28795] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  990.062812][T28795] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  990.072248][T28795] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  990.080924][T28795] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  990.090208][T28795] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  990.098768][T28795] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  990.107947][T28795] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  990.116750][T28795] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  990.125128][T28795] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  990.133795][T28795] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  990.143135][T28795] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  991.045670][T28792] net_ratelimit: 17 callbacks suppressed
[  991.045692][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.077062][T28798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  991.085378][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  991.165655][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.275876][T28802] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.385698][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.495651][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.615689][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  991.716464][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  991.724635][T28795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  993.111943][ T4996] udevd[4996]: worker [30084] /devices/virtual/block/nbd3 is taking a long time
[  996.145701][T28792] net_ratelimit: 48 callbacks suppressed
[  996.145723][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.196722][T28792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  996.205020][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  996.265700][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.375884][T28795] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.485649][T28792] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.596285][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.715708][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.826171][T28798] bond3: (slave ip6gretap1): failed to get link speed/duplex
[  996.836669][T28798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog