last executing test programs:

16.87680165s ago: executing program 0 (id=2901):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xffff, 0xffffff80}, {0x0, 0xc2}]}})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x6, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "715150b1971bbe75", "8c419c4cb217d59a5e2108c76ca18dad", "8869fdbb", "ddc7586e28e54682"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)

15.896032794s ago: executing program 0 (id=2907):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0)
r1 = socket(0xa, 0x1, 0x3)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x10001, {{0xa, 0x4e23, 0xfff, @local, 0x36de}}, {{0xa, 0x4e21, 0x71, @private2, 0xffff0001}}}, 0x108)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0)

15.68628392s ago: executing program 0 (id=2909):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0xfffc, @loopback}, 0xfb)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/142, &(0x7f0000000340), &(0x7f0000000440), 0x1, r2}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2bf77000)

15.551905983s ago: executing program 0 (id=2910):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000007c0)={0x80, 0x0, 0x100, 0x2, 0x3}, 0x14) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000007c0)={0x80, 0x0, 0x100, 0x2, 0x3}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0x10, 0x3, 0x0) (async)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
close(r5) (async)
close(r5)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
close(r1)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x9da2f7991aa65289, &(0x7f0000000100)=[{0x20, 0x83, 0xfd, 0xfffff036}, {0x40, 0x4, 0x3, 0x7ff}, {0x8, 0x8, 0x7, 0x8}]})
ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180))
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x30, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000880)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a000d000500000000000072080003000500000000", 0x39}], 0x1)

15.239080617s ago: executing program 0 (id=2915):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
clock_gettime(0x0, &(0x7f00000001c0))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r3}, 0x10, 0x0}, 0x8081)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040)

7.780240032s ago: executing program 4 (id=2956):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x17, 0xffff, 0x0, 0x8, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2, 0x0, 0x6}}}}}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = epoll_create1(0x0)
r2 = socket(0x1, 0x80802, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa000000d})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448dc, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

7.365616425s ago: executing program 4 (id=2958):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb8}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)={r6, 0x6, 0x2}, 0x8)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001040)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001180)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="ff710000", @ANYRES16=r8, @ANYBLOB="100027bd7000fedbdf251a0000000c002e80060002000000000008000300", @ANYRES32=r11, @ANYBLOB="0c00060003000000000000000c000600010000000100000008000300", @ANYRES32=r12, @ANYBLOB="0c0006000300000003000000"], 0x54}}, 0x4090)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000010c0)={r6, @in6={{0xa, 0x4e21, 0x1, @private2, 0x2}}}, &(0x7f0000000000)=0x84)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newchain={0x30, 0x1e, 0x1, 0x1000, 0x7ffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x20044000)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001300), r9)
r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16)
ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=<r18=>0x0)
sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r18], 0x1c}}, 0x840)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x41820013}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r14, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x30000000)
r19 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r19, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a2f2f140002"], 0x44}, 0x1, 0x1000000}, 0x0)

6.656982296s ago: executing program 2 (id=2962):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000540000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000000100)={0x18, 0x11, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x5b, 0x0, 0x0, @u32=0x5ff}]}, 0x18}, {&(0x7f0000000640)={0x70, 0x3d, 0x100, 0x70bd28, 0x25dfdbff, "", [@typed={0x40, 0x126, 0x0, 0x0, @binary="77a902deefa796631ad6c67a4bb852e954b96b7633430108a2febdc65c5b73a031ccefe1c339df54fecfc8c9330dc74f4af5f39082215915e2353d8f"}, @nested={0x20, 0x106, 0x0, 0x1, [@nested={0x4, 0xc1}, @typed={0x14, 0x156, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x30}]}]}, 0x70}, {&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x70}, {&(0x7f0000003400)={0x74, 0x17, 0xc29, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x3b, 0x1b, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @uid}, @generic="9d3fe16ee457e09237befb4421f38fff21452ce546e46fd9396aaa5e98c33f69cf13cfafd2a2f7a974847819190703"]}, @generic="b94d09cd", @typed={0xc, 0x139, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x2}}, @typed={0x4, 0x11d}]}, 0x74}, {&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x320}, {&(0x7f00000048c0)={0x10, 0x33, 0x300, 0x70bd27, 0x25dfdbfe}, 0x10}], 0x6, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0x0, &(0x7f00000006c0), &(0x7f0000000a80)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000ac0), 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1b35b, r0, 0x1, &(0x7f0000000f00)=[0xffffffffffffffff, r0], &(0x7f0000000f40)=[{0x3, 0x2, 0x5, 0x8}], 0x10, 0x6f7}, 0x94) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="10005e8004000180080002e8b2353200ea6737ad090e976e155fdbb3d706556dfcc75c1d3423915610539b451288c3714f6e2c329ebdbe89d7c7e566343cbbf64c831062850b3af7c3cec06e17780c79359250e161e0022eeb6d80c969b79641cd174c28b9d70a21e1a3c128545307f3f47a115db4b118f94bdeb844b5d503fde640449c73a8053332e108b5c23898856e8f19654551b0830e2d3526271482e56260be717b747e3141533fc3eb69200000e5365b364a9f75c576dc69b02dbe1470f3218147d92ade2ddba5c53e089ae3c3d247f093836d9cc5f04d407d1f00"/245], 0x2c}}, 0x0) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r6, 0xfffffffc) (async)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000e90f005fba000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESOCT=r3, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000701000000000000060000006b11a1000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

6.295891511s ago: executing program 3 (id=2964):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
syz_emit_ethernet(0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd60e4d70000383a00fe880000000000000000000000000001ff020000000000000000000000000401020090780000000060fd90630000ff00000000000000f800ef0400000000ff020000000000000000000000000001ef9edaaa64947bfe00002c2d85330daaca4df2ae99c1e07baa22f214b1ab87ef"], 0x0)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x12, 0x29, 0x36, {0x42}}}], 0x18}, 0x3400c8d4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008090000000000000000000063112d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x8924)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4)
listen(r2, 0xfffffffd)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(r8, 0x0, 0x0, 0x400c885, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

6.019352571s ago: executing program 3 (id=2965):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0xffff}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000100fcff070004000000010000000400488018000180140010800e000b8008000100ac1414bbfcda0000080002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000002220000000a0001007778a6a7700a"], 0x20}}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000009ebab84221d08eeb000a30000000050a010100000000000000000a0000030900010073797a31000000000900030073797a320000000004000480140000001100010000000000000000000200000a"], 0x58}, 0x1, 0x0, 0x0, 0x28000095}, 0x24000800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5fd63edbfd8ad8de16e68701009a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

4.233985198s ago: executing program 2 (id=2966):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r0=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x5)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r0}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000260000000000119078000000000000000000004e200012907800000000000005000000000000007e44c0e5ef20dce396397fb747e09c31a60d5fb13c1b1d0229b12e3c2e9b96d71419015185b1aa1d0414167b3f8b3bbb1be4354d735b30f24c886c0ac4e34f00bbc59e531e8df72b2d53aca1b121340739918cdf9549e2df2581adb63e9679526bb9588998b96dba2f37955772de23daee9cf66808ed9e35821698bf8dccf978a690877fbdd9169124fb1924c134b6db2535deab617f858e0d5199fd9fdb3ba0677f808704646f1fb21065e8b38c2cac1553a698c0c433"], 0x0)
recvfrom(r6, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0x8}, {0x8, 0xb}, {0xffee, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000004c0)={{0x2, @rand_addr=0x1, 0x4e22, 0x2, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x0, 0x2000040}}, 0x44)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
r12 = socket(0xf, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000008140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
socket$phonet_pipe(0x23, 0x5, 0x2)

4.160796464s ago: executing program 3 (id=2967):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x22020400)
clock_gettime(0x4, &(0x7f0000003400))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}})
socket$inet_udp(0x2, 0x2, 0x0) (async)
unshare(0x22020400) (async)
clock_gettime(0x4, &(0x7f0000003400)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300000000"], 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) (async)

4.068001903s ago: executing program 4 (id=2969):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="1198040000000000ac05fcfd6c1c001280090001007806726d000008000c0002800800021c0d9f52ba41fc1854e692d9b8a6cf61ef4a606b60c7f06c5a4c6ba44e79e24cfa97b68305b4fd66368343678d401202c2f4697675c0d6969947cafaaa19ebdeb27b4874dcfeb7df766ae05f1359f50b5e6c9c43cc1bbff60eea59957f453f840aa1f7ae72167d8230d48ee96b6a90895e555ce514a155b46c06d21fd817e12134a8c6f58895f86c2e3e6e1974b441c7f99a4c1446c83ae6af918f69e774cb013b"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x1f})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x7b7306ca40510a6}) (async)
epoll_pwait(r4, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0) (async)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000001000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac141438000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff000000000000000000000000000000003200000000000000000000000000000000000000000000000200000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x23c}}, 0x0) (async)
r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_freezer_state(r7, &(0x7f00000001c0)='THAWED\x00', 0x7) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2a, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x81}, {0x9c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x5, 0x0, 0xf8, 0x1000}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

4.000114114s ago: executing program 1 (id=2970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82600, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x74bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0x6}, {0xfff8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x8, 0xfffffffa, 0x7, 0x9, 0xa7}}}}]}, 0x4c}}, 0x4004000)

3.64382866s ago: executing program 4 (id=2971):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', r1, 0x2f, 0x7f, 0x20, 0x6, 0x33, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x700, 0x4, 0x8}})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000800)={{<r2=>r0, &(0x7f0000000180)='batadv0\x00', 0x400840, &(0x7f00000001c0)={@align=0x7, {0x81, 0x4, 0x7fff, 0x7}}, 0x9, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x1}, 0x5, &(0x7f0000000740)=[{0x3, 0x1, &(0x7f00000002c0)='.^#$!^&\x00', &(0x7f0000000300)="e4d8d65678a8bdb5200b5eb07c291617071fefc2944190cd3009239f8300a31836722371bc279261faad355ecf5d596b6edcacb46e4612129f937db1b5da0c847891b2c9cd191cd29c5abc44d7459b45b3c07c59fa6787455bd3edddf9a76de80443185ae328fb4862a8a83d8c509c29f5a2ec3af5a3d4e0ef2a1f572c92bdcd5ac8939ae8759127eef5ba54b2ca39d3be112acb1e010b06e07e1bae2605ea595bd92b4f342a98d3d8ea7504dc48c8e138b5948b9086831933f1dafc4745e0b86d833c7f37930e508bc92ebc37e71503a1d5441f8a35f5103490f4849c3089f07db4d1213765cd6942a6ff9f9e80424b9a4b9cbf4f8f193935", 0xf9, 0x2}, {0x2, 0x7, &(0x7f0000000400)='syztnl1\x00', &(0x7f0000000440)="a7c1d551abf0a42b820de3947e09eb1c38366b2fdbf1ec5d0b11b2eec970f4a096b9d84b5d8ca106e2221173a060b6d3783653d92e3fcd23041373d4185fc5294cd6ac91e979b2af9572c1e7538302c0d2346b8a59c9fc0f71e2c625ba32d1699c1346ca11c9e049b913c450c794c62da79131304c9b3aaa877535f08f65c12ea18c0e598f52f38528", 0x89, 0x14}, {0x0, 0x6, &(0x7f0000000500)='\x00', &(0x7f0000000540)="8df15c2d0bb0a8f139e01c0aaae4c5eadb259313cc4356837188bc", 0x1b, 0x30}, {0x3, 0x7, &(0x7f0000000580)='ip6tnl0\x00', &(0x7f0000000640)="ae2fe9aea78c6164ad9745656ff8679095407579ee56cfc1bd9f17fc0887f91c57885213602bac203f5b798264709f4dc8d33b2de76b9f2513a3df2c3a3942b9f7f4f14df3ea6908ee4f6c92fd178420f600791e8a30f461be431965722d4d0378511eed3c60bd3f73d27e7f76be22f57a", 0x71}, {0x2, 0x1000, &(0x7f00000006c0)='ip6gre0\x00', &(0x7f0000000700)="5ee1b33cfb4b8391", 0x8, 0x20}]})
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000880)=0x8, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x4004080)

3.581118409s ago: executing program 3 (id=2972):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000c43e93560d04feecf76009f8b1c1b310d00aa6327b3f089ce83a6b2b37cbbfc343aad2ad", @ANYBLOB="231a7fda67d3dd394edcd642cf6c91050d1bf05819dc0e50c601d75c648780c20e76f59e2f385da203ea538290a35e40e52536aeb145a527a934b32fb3720f0cfc0f7af24e1ec20dc10f1cf4f77ffb52a338a0fdf3dd9952ec501680bde40bef4d327f356a5424aef4afef3752fa4d3eb79fc4741daa4ab9df2acff2f2d0573b4fd379ae689b6544e035e82fcae7fbcf5890a36bd9912408cc949fec5fae444248cd2d764a74a958e68649cdc4a0e60cc0ec389bc0abb33d60f9797e3134cdef77946982c8a3", @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000000000071121a00009d0ed16f6b33690b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000180050800500020002000000040005008d"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x8010)
socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0xff000000, 0xffffffff, 0xff], [0xff, 0xff], 'bridge0\x00', 'team0\x00', {0xff}, {}, 0x2c, 0xfc, 0x2, 0x70}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb03}, {0x4}], 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200)={<r8=>0x0, 0x9}, &(0x7f0000000780)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000840)={r8, 0x2}, 0x8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r10, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x40010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20)
setsockopt$inet6_tcp_int(r7, 0x6, 0x4, &(0x7f0000000600)=0x4409, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r11, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0806000186dd06100004aaaaaaaaaa26fc0100000000000000000000000000010021c709eb7d528445862b238eaaaaaaaaaaaaff000000000000000000ffff00000000"], &(0x7f0000000900)={0x1, 0x1, [0x162, 0x5b4, 0xe7d, 0x89e]})

3.572111216s ago: executing program 1 (id=2973):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4)
close(0x3)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, 0x0, 0x8000800)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0xa, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x28}, r7}, 0x14)

3.424232674s ago: executing program 4 (id=2974):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000002ecc9a3b4eaf5cf362f0ff04000000d13095ff08000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000007c0)={0x80, 0x0, 0x100, 0x2, 0x3}, 0x14)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nfc={0x27, r5, 0x0, 0x6}, @l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, @can={0x1d, r6}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)='team0\x00', 0x9, 0x1, 0xecc7})
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000400000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0x6, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
write$cgroup_devices(r9, 0x0, 0x6)
write(r7, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0)
r11 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040))
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000080))
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

3.341287857s ago: executing program 3 (id=2975):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = socket$kcm(0xa, 0x4, 0x0)
r6 = socket$kcm(0xa, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6})
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c200000", @ANYRESHEX, @ANYBLOB="01002abd7000fedbdf254b000000"], 0x14}}, 0x80)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7})
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6})
socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

3.178072264s ago: executing program 1 (id=2976):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x6c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xff], 'bridge_slave_0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x5, 0x49}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
sendmmsg$sock(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="09f4f1a408bc39475ec9f2abf2afd10d682186d6ad7ce0ee88243d052be4c94f8a0fe1d6b24abe8a85f2c91bb4cd49f9b1afa0819a8f75a75e968880f348ef53d2f9a911e21ddd7a8470dd5c453fb30af4f007efea1eb33e49a4167060a9d2f4e9a5bc716389f3da2af2acf0887218a5889705b3c87da6f2eb943058fc0801f78266ee49e66b598dcf3d4927d212dffb6dc8e643d78fe9ac765a7efae05a875f60795e532f3ac3d90601d6eafd857aaaa71d00d31e078cf3c6e8ecb4fe82872b9b8c03d93a1ffb22df", 0xc9}, {&(0x7f0000000380)="8b74836c873f20e34972e4eb281f3a4834b5585c756f65c7ccec0d42fe4da61d246f205072a05431ee", 0x29}, {&(0x7f00000003c0)="7d2452c168c2c5c5b3c85e088f2bf569d72e6d228be316cd9fb7f5be85d41e0a774eda7d3d9e02590fef552c8baf523addd728263cc146148d2ca03473be7fd12fd31ed354559c02aca5b0cb1647b2f4bf05bc8229d2c9851cc8ee594d71717ebc3ea7860a76b4cd99108758715b7ea615e41a9026f8fe4040200e6253f5baf5185d06fc61fb3e032a57b4604e000ccf97ade845af4daf742d1664bd1416baeee7ce9f1d9a8bf40798ded7e4887af0786156fe815ad506dfb9c5cee1f93915c14579f077cb572dc209fbc1b94dd8ff1a39589b3d2858701d481fcc0908f9e2", 0xdf}, {&(0x7f0000000500)="5d70ef481776a5e957cf6a465d6efd35791b52f9ecd5ce129420a3bc68732bcd155d311ee4f2025e4bab67de9cd2f2cbc3f2817cabbb991522a624e781996b4e88afc1c742526a27596039d5d7972af5e21f9a649f70627e4e461e0699d1fb0a390c1c9ff8324bf388cba3cf", 0x6c}], 0x4, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x41f5}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}], 0xd8}}, {{&(0x7f00000006c0)=@caif=@rfm={0x25, 0x0, "79bbc9aaf4efb3cbd94ff0c3a76b651f"}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)="826dd72847dbf2903f5ec42be55c4d95e8f8a0cec2023bb83a1c78c75f2a2dc9ef847537316aec1340b4f26978e9e4fcb65a0fae8937f3cbebaf6ab098452a50f2843769b2756286b28aec933082cf44843f8c2d2f5e54f3d4c87b2f5a75d9594d4e2c65c35a67966f7501b713e2abc98c10033169b3f4d263badf80c17408a747489def5dc51f0a600eda7814244433ca928a0ba2d31dc0ffb6653d17d4f3c014", 0xa1}, {&(0x7f0000000800)="1b332c49971fa2285e7c3cf06bd29f247702fbaf9b31d4b6d75c48de84c9698f47fba3deac61445c57ec21083b8b6fccf2cb3591311e222d26383834940c444c72e5288c27de", 0x46}], 0x2, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7942e5e}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x90}}], 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)

2.992093629s ago: executing program 2 (id=2977):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x371, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1d0, 0x16, 0x400, 0x70bd25, 0x25dfdbfc, {0x15}, [@typed={0x4, 0x95}, @nested={0x5d, 0x11b, 0x0, 0x1, [@generic="ef7b58bbcb1f336ff46020bffee8fa7683c1b4277fa274403ff76c667183f49d3cc53b387cd1fdd719356152c34135f1c5e73cad5e8d26667b5901686f0705bf20b2f7e5521f07ee568cbccc08", @nested={0x4, 0x115}, @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="bda6333076", @nested={0x14d, 0x66, 0x0, 0x1, [@nested={0x4, 0xf8}, @generic="0dea1f52d070f53b475d18259c2d81c482f26012d0832d5d17e9a2edce95a7ed1880cd24ef722d1023c3eb2643a7866d92ebc1c81974792d556cf0bc9da390762baf3641373760cf1f1f45638a8d3de4951425209c53d0f6859523ad3b4f6258926ae2a2640720b8c98c60afbdeadcf12f193ed3aeeeaa9f902779618c5328f94cb7c912121bb05c371940ecd1fd583e0047909033895919bf1391f803a279", @generic="71436a131fa641f6f5a3a4c50c3253fcd201ea780e79a3aeb852ce42a38dc6c557143ce9c5e4f457b51a3421bb86cb549dd4c393ad68a08eb0831658c045b4cb95cf9553466aad064766b084fe47da9ec9b06c4b43fdb475984c9fd0510adfa9b5d87b6b96da5be010af33cc6577a0f05c1fd7b71225ca5e73a424916bb33b18426b61dd570385791676127975bdded5a7cb14040ac7", @nested={0x4, 0x77}, @typed={0x9, 0x7b, 0x0, 0x0, @str='ipip\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x24000004}, 0x81)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000200081dc26bd70000300000002000000060000041f000000050016000400"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0xfe, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

2.95796135s ago: executing program 1 (id=2978):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94)
setsockopt(0xffffffffffffffff, 0x7, 0x7, &(0x7f0000000680)="15c45c0d1d42b7ca8028068b91154ce8ebe5b92593b59209e5b5686d52d821db3f583e1edf4680cc63d838aff42a09a792e50247d7ecbe7173d57065346cf8fec274806f75c1f1d2477d1e3c0fbdc9842f03e7fafd097319b672f95ed8dd43ea3773a184563519210ddd14ca34c3e274ca9f7f46c5fd60fc60efefd271cb3f2d7617a7156483669d60ce29b26eb506c2adb9d65a7f033954d80fca72f9370987b72652df60bca619c6", 0xa9) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001002bbd7000ffdbdf25e00000020000000000000000000000004dfc0100000000000000000000000000010000ffff000200000a00000000000000cfb6d15404f51d56955b950e1678faf6bb30fc4197936a2b0860576da3616f556f23070f12eeee58506cf2946eec3cd1e89a785746b7f2dd623f681e85c2411ca9b748414aae3e279c09d9da03337c265ce32cd56db66c77c1b211fb37559450705cfde5a1ac623ed1db15f0175029677652e1b5ff37154eb6f3bae2f84f3054aa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4ffffffffffff04000000000000000000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffffc06b6e000000000300000000"], 0xb8}}, 0x4004) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) (async)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000019c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001040)={0x92c, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x8e8, 0x8, 0x0, 0x1, [{0x450, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x3d0, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x364, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x3}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0bae2b3c657cfa4def8916cb69f5f9136f528db381f077a08334edc0b9d8877c"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x92c}, 0x1, 0x0, 0x0, 0x400c054}, 0x480) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804)
sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2"}], 0x12fa}, 0x20008004) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r4, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x40084) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000740)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1, 0x0, 0xb0}, 0x0) (async)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x28}, 0xc) (async)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xd4, '\x00', 0x0, r8, 0x3, 0x3, 0x2}, 0x50)

2.859447078s ago: executing program 2 (id=2979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
socket$inet6(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async)
socket$inet6(0xa, 0x3, 0x3a) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

2.591770204s ago: executing program 2 (id=2980):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', <r4=>0x0, 0x787, 0x8, 0x3ff, 0x9, {{0x17, 0x4, 0x3, 0x19, 0x5c, 0x64, 0x0, 0x80, 0x8, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x1b, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @multicast2, @multicast1]}, @timestamp={0x44, 0x20, 0x4f, 0x0, 0x1, [0x6575, 0x2480, 0x8, 0x0, 0x6, 0x570, 0x1]}, @rr={0x7, 0xb, 0xa7, [@multicast2, @broadcast]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', r4, 0x4, 0xb, 0x3, 0xccf, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7807, 0x0, 0x8, 0x1}})
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}}}}}}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcd3df2501000000e5ffffff0b"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xa}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r9}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xdc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40)

311.916028ms ago: executing program 2 (id=2981):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) (async)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b280063301"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async)
socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getqdisc={0x40, 0x26, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xb}, {0xffff}, {0x0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x200400d4) (async)
syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000680)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @random="94f9994d30b1", @from_mac=@device_b, {0x8, 0x9}, "", @value={0x1, 0x1, 0x0, 0x1, 0x8}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x9d, "9996634c1843e627296de6c28cb234ee049ca8fe6fa8a7b43334dbd7349eeea7c26db9310b62ae19fa54ccba61a65cb42637c0fab01845bc57971c77be68a113aff58c3a775ffef90bd1009824fcd422562b3b9e9570e4380cdd68fce7af3cf723e8c4354e4e7c77f9d2ac90c532aad1300bbafcea830be108f6e04f65972683613477532260e91faf20f42732653864f0f741121c27e635f22b83e409"}, {@device_a, @device_b, 0x1c, "e101d9d925668c27f131ecb582a076147fb9fe95c50855bbedf837aa"}, {@device_a, @broadcast, 0xf2, "b9c47f739de35302e2e1d5e3f0173e28529d459c5cd0ee59581579e2c51d1084d7ebfc2c0b17724881a1ee90bf56465f4c2b5cd9224365588fef7dd613133422f432caeef4313a222794dc4473104891af8b41cf3493796eda4d887d79dc696f73f5c6dd6cd2c10690e649f85a4e330268f38b410468a2649772e6e46947e6d2a02740b9d7e2cb03daadda36b439875fc540d748c0e0ebc9e8e2dd883a9d6496f59a28096bc2f17191b257caeab712ee7898398e41b30d1aec8060e2eb363ebd187db5f56e515d659d1620fafe20355ca18616fa9c3b99f2965ef1097c652e59a4bfd6178ee0a3d08005d712ee3da911b03a"}, {@device_a, @device_a, 0x45, "bbbce0890239df9d4edb1ba83e195462c65ba7b88b306ceaeabcc22a9db6fe3d3704feb2655d8adea8bb7af5f04fd37e505efe9d537ef9cb7b10e5ef8af6b64864971419b6"}]}, 0x24a) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, 0x0, &(0x7f0000000280)=r1}, 0x20) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}}, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async, rerun: 32)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8) (async, rerun: 32)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

286.998316ms ago: executing program 1 (id=2982):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="be031f9b15", 0x5}], 0x1)
syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "100000430000"}]}}}}}}, 0x0) (async)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0xf5e, 0x12)

284.945157ms ago: executing program 3 (id=2983):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0xff, 0x0, 0x0, 0x6, 0x80, 0x10c7, 0x3, 0x4, 0x2, 0x1, 'syz0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x40, r6, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000012, 0x8a, 0x0, &(0x7f0000000440)="63eced8e46dc3f2ddf33c9e9b9864762cede0e8128ff18c878a11ac795ccc025a6efd0822cce0553d78a784d22b3bc24ccb4b0d427b1d7e2f79934e5cd44ec27c004594deed8484fa36e2c25592387168d07000000ddf5b1d2e2cc648738be02fecc53d1c22d9d801ec1283002d0cd8e87e99c4214928a2a0f948658225dc4c1aca62c8967902869f4fa", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800)

35.969972ms ago: executing program 4 (id=2984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001000000000000000000200a900000000583ab1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001000000000000000000200a900000000583ab1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)

20.015872ms ago: executing program 1 (id=2985):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010907004000fcdbdf25021800200003ff090000000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="4c00000011000f14001100020000150002000000200000", 0x17)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0xd1d6b2a488c642a7, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)

0s ago: executing program 0 (id=2920):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40080)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r7)

kernel console output (not intermixed with test programs):

T13050] net_ratelimit: 67 callbacks suppressed
[  331.961025][T13050] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  332.063655][T13051] ipvlan1: entered promiscuous mode
[  332.079145][T13051] ipvlan1: left promiscuous mode
[  332.159956][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  332.160013][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  332.270829][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  332.270876][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  332.318669][T13038] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  332.327580][T13038] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  332.382405][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  332.382449][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  332.599880][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  332.599932][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  332.717197][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  332.918342][T13082] __nla_validate_parse: 9 callbacks suppressed
[  332.918367][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'.
[  333.048506][T13082] 8021q: adding VLAN 0 to HW filter on device bond6
[  333.082040][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.084694][T13084] bond6: (slave batadv0): Enslaving as an active interface with an up link
[  333.132326][T13094] netlink: 'syz.4.1721': attribute type 10 has an invalid length.
[  333.404506][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'.
[  333.773145][T13121] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.773298][T13121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.773688][T13121] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.773835][T13121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.881545][T13121] erspan0: entered promiscuous mode
[  334.304125][ T6679] tipc: Subscription rejected, illegal request
[  334.469436][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'.
[  334.892196][T13129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.011978][T13174] netlink: 'syz.4.1744': attribute type 1 has an invalid length.
[  335.012004][T13174] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1744'.
[  335.067717][T13176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1744'.
[  335.342957][T13191] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1745'.
[  335.584765][T13204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1751'.
[  335.688427][T13213] Cannot find add_set index 2 as target
[  335.695648][   T30] audit: type=1800 audit(1790813657.009:44): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1755" name="memory.events" dev="tmpfs" ino=1817 res=0 errno=0
[  336.088256][T13234] Bluetooth: MGMT ver 1.23
[  336.396749][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1763'.
[  336.464102][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1764'.
[  336.508887][T13248] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  336.538303][T13248] bond7 (unregistering): Released all slaves
[  336.548728][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  336.583837][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'.
[  336.677849][T13254] wg0: Caught tx_queue_len zero misconfig
[  336.818364][T13260] vlan2: entered allmulticast mode
[  336.818398][T13260] bridge0: entered allmulticast mode
[  336.992780][T13268] netlink: 'syz.2.1769': attribute type 1 has an invalid length.
[  337.071405][ T6678] net_ratelimit: 72 callbacks suppressed
[  337.071431][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  337.071651][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  337.198825][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  337.198873][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  337.250684][T13286] netlink: 'syz.1.1775': attribute type 1 has an invalid length.
[  337.327984][T13286] bond7: entered promiscuous mode
[  337.343734][T13286] 8021q: adding VLAN 0 to HW filter on device bond7
[  337.350303][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  337.350360][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  337.466207][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  337.466264][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  337.572492][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  337.572553][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  337.620362][T13307] netlink: 'syz.0.1781': attribute type 1 has an invalid length.
[  337.885974][T13313] bond12: entered promiscuous mode
[  337.886483][T13313] 8021q: adding VLAN 0 to HW filter on device bond12
[  338.238416][T13337] __nla_validate_parse: 4 callbacks suppressed
[  338.245249][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'.
[  338.245459][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'.
[  338.462240][T13346] netlink: 'syz.3.1789': attribute type 5 has an invalid length.
[  340.782141][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  341.710231][T13393] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1802'.
[  341.732967][T13393] siw: device registration error -23
[  341.746812][T13393] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1802'.
[  341.747025][T13393] 0ªî{X¹¦: renamed from gretap0
[  341.755627][T13393] 0ªî{X¹¦: entered allmulticast mode
[  342.115810][ T6669] net_ratelimit: 78 callbacks suppressed
[  342.115835][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  342.115873][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  342.130591][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1805'.
[  342.194357][T13401] syzkaller1: entered promiscuous mode
[  342.194386][T13401] syzkaller1: entered allmulticast mode
[  342.278813][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  342.278862][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  342.284709][T13410] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  342.689556][ T6679] bond4: (slave bridge1): failed to get link speed/duplex
[  342.690292][ T6679] bond4: (slave bridge2): failed to get link speed/duplex
[  342.771476][T13434] geneve1: entered promiscuous mode
[  342.858979][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  342.859483][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  343.117812][T13452] netlink: 'syz.2.1816': attribute type 83 has an invalid length.
[  343.145275][T13452] netlink: 'syz.2.1816': attribute type 8 has an invalid length.
[  343.166868][T13410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.209185][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  343.252889][T13455] netlink: 'syz.2.1817': attribute type 4 has an invalid length.
[  343.252915][T13455] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1817'.
[  343.543012][T13410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.611824][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'.
[  343.740483][T13468] xt_CT: You must specify a L4 protocol and not use inversions on it
[  343.872337][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'.
[  344.085602][T13410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.312778][ T6684] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.529032][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.631936][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'.
[  344.639301][ T6670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.641991][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.793551][T13518] netlink: 'syz.1.1834': attribute type 27 has an invalid length.
[  344.877295][T13516] netlink: 'syz.4.1832': attribute type 2 has an invalid length.
[  345.272547][T13531] netlink: 'syz.3.1837': attribute type 4 has an invalid length.
[  345.272572][T13531] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1837'.
[  345.275977][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'.
[  346.544906][T13561] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1846'.
[  346.969422][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1852'.
[  347.056916][T13579] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1854'.
[  347.130422][T13577] batadv0: entered promiscuous mode
[  347.131953][T13577] macvtap1: entered promiscuous mode
[  347.132769][T13577] macvtap1: entered allmulticast mode
[  347.132787][T13577] batadv0: entered allmulticast mode
[  347.135906][T13577] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  347.176900][T13577] batadv0: left allmulticast mode
[  347.177158][T13577] batadv0: left promiscuous mode
[  347.244670][T13586] netlink: 'syz.0.1856': attribute type 2 has an invalid length.
[  347.362800][T13586] ´: entered promiscuous mode
[  347.369740][  T152] net_ratelimit: 49 callbacks suppressed
[  347.369831][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  347.369867][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  347.489271][   T49] bond4: (slave bridge1): failed to get link speed/duplex
[  347.489320][   T49] bond4: (slave bridge2): failed to get link speed/duplex
[  347.598634][   T49] bond4: (slave bridge2): failed to get link speed/duplex
[  347.598684][   T49] bond4: (slave bridge1): failed to get link speed/duplex
[  347.708978][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  347.709028][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  347.818979][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  347.819028][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  347.881115][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'.
[  348.381099][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'.
[  348.624151][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'.
[  348.702156][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'.
[  349.166542][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1879'.
[  349.262430][T13660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'.
[  349.529030][T13667] netlink: 'syz.1.1882': attribute type 1 has an invalid length.
[  349.572639][T13667] 8021q: adding VLAN 0 to HW filter on device bond8
[  349.614485][T13667] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  349.721491][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1887'.
[  349.853125][T13683] netlink: 'syz.4.1888': attribute type 1 has an invalid length.
[  349.895276][T13683] bond13: entered promiscuous mode
[  349.895749][T13683] 8021q: adding VLAN 0 to HW filter on device bond13
[  350.015660][T13690] netlink: 13188 bytes leftover after parsing attributes in process `syz.1.1890'.
[  350.044341][T13693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'.
[  350.533929][T13714] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  350.537560][T13714] bond14: (slave macvlan0): making interface the new active one
[  350.554475][T13714] bond14: (slave macvlan0): Enslaving as an active interface with an up link
[  350.579759][   T44] bond_slave_0: entered promiscuous mode
[  350.579804][   T44] 
@0Ù: entered promiscuous mode
[  350.643252][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'.
[  350.776762][T13723] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1897'.
[  351.006729][T13743] block nbd2: Receive control failed (result -32)
[  351.016017][ T9581] block nbd2: Receive control failed (result -32)
[  351.603862][T13773] veth0_macvtap: Caught tx_queue_len zero misconfig
[  352.438965][  T159] net_ratelimit: 76 callbacks suppressed
[  352.438993][  T159] bond4: (slave bridge1): failed to get link speed/duplex
[  352.439953][ T6675] bond4: (slave bridge2): failed to get link speed/duplex
[  352.550342][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  352.550919][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  352.659460][ T6675] bond4: (slave bridge1): failed to get link speed/duplex
[  352.659998][ T6675] bond4: (slave bridge2): failed to get link speed/duplex
[  352.768848][ T6675] bond4: (slave bridge2): failed to get link speed/duplex
[  352.769107][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  352.879708][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  352.879750][ T6675] bond4: (slave bridge1): failed to get link speed/duplex
[  354.214280][T13757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  354.400578][T13794] __nla_validate_parse: 4 callbacks suppressed
[  354.400623][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'.
[  354.515753][T13800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  354.808614][T13815] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  354.809679][T13815] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  354.810145][T13815] tipc: Resetting bearer <eth:syzkaller0>
[  354.841191][T13815] x_tables: duplicate underflow at hook 1
[  355.281775][T13846] netlink: 'syz.0.1926': attribute type 1 has an invalid length.
[  355.395153][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'.
[  355.410467][T13850] bond10: (slave geneve2): making interface the new active one
[  355.412802][T13850] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  355.414994][T13846] 8021q: adding VLAN 0 to HW filter on device bond10
[  355.708124][   T38] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  355.719755][  T152] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  355.719890][  T152] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  355.719927][  T152] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  355.916814][T13865] netlink: 'syz.1.1930': attribute type 1 has an invalid length.
[  355.999914][T13865] 8021q: adding VLAN 0 to HW filter on device bond9
[  356.033567][T13866] bond9: entered allmulticast mode
[  356.034443][T13866] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1930'.
[  357.672304][T13927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1944'.
[  357.864609][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'.
[  357.879781][ T6684] net_ratelimit: 71 callbacks suppressed
[  357.879805][ T6684] bond4: (slave bridge2): failed to get link speed/duplex
[  357.884462][ T6684] bond4: (slave bridge1): failed to get link speed/duplex
[  357.990214][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  357.991540][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  358.101016][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  358.103222][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  358.188313][T13955] netlink: 'syz.1.1947': attribute type 2 has an invalid length.
[  358.188339][T13955] netlink: 'syz.1.1947': attribute type 1 has an invalid length.
[  358.188353][T13955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1947'.
[  358.219654][ T6670] bond4: (slave bridge1): failed to get link speed/duplex
[  358.220724][ T6670] bond4: (slave bridge2): failed to get link speed/duplex
[  358.330104][   T49] bond4: (slave bridge2): failed to get link speed/duplex
[  358.331216][   T49] bond4: (slave bridge1): failed to get link speed/duplex
[  359.041014][T13995] x_tables: duplicate underflow at hook 1
[  360.191226][T14010] bridge: RTM_NEWNEIGH with invalid state 0x20
[  360.204574][T14016] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  360.791936][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'.
[  360.791966][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'.
[  361.421745][T14036] 8021q: adding VLAN 0 to HW filter on device bond10
[  361.590841][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'.
[  362.931355][  T152] net_ratelimit: 52 callbacks suppressed
[  362.931379][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  362.931414][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  363.050311][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  363.072187][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  363.165579][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  363.179523][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  363.268407][T14131] veth1_to_bond: entered allmulticast mode
[  363.270175][T14131] veth1_to_bond: entered promiscuous mode
[  363.270781][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'.
[  363.320949][T14131] veth1_to_bond (unregistering): left allmulticast mode
[  363.320999][T14131] veth1_to_bond (unregistering): left promiscuous mode
[  363.353510][T14131] bond0: (slave bond_slave_1): Releasing backup interface
[  363.380996][ T1102] bond4: (slave bridge2): failed to get link speed/duplex
[  363.381044][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  363.488624][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  363.488682][ T1102] bond4: (slave bridge2): failed to get link speed/duplex
[  363.602989][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603179][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603333][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603481][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603641][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603791][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.603930][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.604081][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.604227][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.604379][T14139] netlink: 'syz.1.1996': attribute type 1 has an invalid length.
[  363.693118][T14139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1996'.
[  364.540922][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'.
[  364.565008][T14191] bond11: Unable to set up delay as MII monitoring is disabled
[  364.569006][T14191] bond11 (unregistering): Released all slaves
[  365.348855][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  365.423418][T14196] bridge0: port 3(vlan2) entered disabled state
[  365.423591][T14196] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.424696][T14196] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.596317][T14196] tipc: Resetting bearer <ib:veth1_to_bridge>
[  365.712006][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.739649][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.943695][T14196] veth1_vlan: left allmulticast mode
[  366.230954][ T9581] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  366.517970][T14196] ipvlan2: left allmulticast mode
[  366.517998][T14196] macvlan1: left allmulticast mode
[  366.558971][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.559074][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.559109][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.559144][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  366.887066][T14246] block nbd4: not configured, cannot reconfigure
[  367.006252][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'.
[  367.038948][   T30] audit: type=1107 audit(1790813688.359:45): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�f ‡ñ7'
[  367.367497][T14273] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2022'.
[  367.435298][T14278] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  367.812390][T14291] x_tables: ip_tables: osf match: only valid for protocol 6
[  367.933957][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'.
[  368.091126][  T152] net_ratelimit: 552 callbacks suppressed
[  368.091152][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  368.091210][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  368.199963][ T6672] bond4: (slave bridge1): failed to get link speed/duplex
[  368.200018][ T6672] bond4: (slave bridge2): failed to get link speed/duplex
[  368.309199][   T89] bond4: (slave bridge2): failed to get link speed/duplex
[  368.309250][   T89] bond4: (slave bridge1): failed to get link speed/duplex
[  368.419550][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  368.419594][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  368.539584][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  368.539637][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  368.564395][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2031'.
[  368.764928][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'.
[  369.105470][T14338] xt_CT: No such helper "syz1"
[  369.171665][T14345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.179002][T14342] mac80211_hwsim hwsim7 +
: renamed from syzkaller0 (while UP)
[  369.234257][T14342] tipc: Disabling bearer <eth:syzkaller0>
[  369.242916][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'.
[  369.470245][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'.
[  369.470301][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'.
[  369.470579][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'.
[  369.470616][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'.
[  369.555619][T14362] syzkaller1: entered promiscuous mode
[  369.555645][T14362] syzkaller1: entered allmulticast mode
[  370.334413][T14411] validate_nla: 25 callbacks suppressed
[  370.334506][T14411] netlink: 'syz.0.2051': attribute type 4 has an invalid length.
[  370.354425][T14411] netlink: 'syz.0.2051': attribute type 4 has an invalid length.
[  370.435379][T14372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.560598][T14433] pim6reg: entered allmulticast mode
[  371.629607][T14433] bridge0: entered promiscuous mode
[  371.629633][T14433] bridge0: entered allmulticast mode
[  371.631077][T14431] pim6reg: left allmulticast mode
[  371.720233][T14426] infiniband syz0: set active
[  371.720252][T14426] infiniband syz0: added bond_slave_1
[  371.723500][T14426] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  371.727580][T14426] infiniband syz0: Couldn't open port 1
[  371.727809][T14426] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  371.727830][T14426] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  371.727853][T14426] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  371.773646][T14426] RDS/IB: syz0: added
[  371.776550][T14426] smc: adding ib device syz0 with port count 1
[  371.776731][T14426] smc:    ib device syz0 port 1 has no pnetid
[  372.932481][T14489] netlink: 'syz.3.2064': attribute type 29 has an invalid length.
[  372.932510][T14489] __nla_validate_parse: 6 callbacks suppressed
[  372.932523][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'.
[  372.933191][T14489] netlink: 'syz.3.2064': attribute type 29 has an invalid length.
[  372.933209][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'.
[  372.944417][T14489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'.
[  373.098113][T14497] sctp: [Deprecated]: syz.2.2066 (pid 14497) Use of int in max_burst socket option.
[  373.098113][T14497] Use struct sctp_assoc_value instead
[  373.158823][ T6682] net_ratelimit: 72 callbacks suppressed
[  373.158848][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  373.158887][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  373.269223][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  373.269269][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  373.378701][ T6679] bond4: (slave bridge2): failed to get link speed/duplex
[  373.378752][ T6679] bond4: (slave bridge1): failed to get link speed/duplex
[  373.498900][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  373.519243][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  373.545947][T14509] netlink: 'syz.2.2069': attribute type 1 has an invalid length.
[  373.564931][T14509] bond12: entered promiscuous mode
[  373.565338][T14509] 8021q: adding VLAN 0 to HW filter on device bond12
[  373.566732][T14508] ip6tnl0: Caught tx_queue_len zero misconfig
[  373.567464][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'.
[  373.607954][T14512] 8021q: adding VLAN 0 to HW filter on device bond12
[  373.608294][T14512] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  373.608316][T14512] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  373.625980][T14512] bond12: (slave ip6gre1): making interface the new active one
[  373.626005][T14512] ip6gre1: entered promiscuous mode
[  373.656133][T14512] bond12: (slave ip6gre1): Enslaving as an active interface with an up link
[  373.674364][   T89] bond4: (slave bridge2): failed to get link speed/duplex
[  373.674412][   T89] bond4: (slave bridge1): failed to get link speed/duplex
[  374.143729][T14442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.143902][T14453] netlink: 'syz.4.2060': attribute type 11 has an invalid length.
[  374.143922][T14453] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.2060'.
[  374.748728][T14522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2072'.
[  374.755001][T14522] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2072'.
[  374.774409][T14522] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2072'.
[  374.799901][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'.
[  375.616684][T14580] netlink: 'syz.0.2081': attribute type 11 has an invalid length.
[  375.714981][T14582] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  375.753328][T14582] x_tables: ip_tables: osf match: only valid for protocol 6
[  375.845377][T14590] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2085'.
[  376.354529][T14617] netlink: 'syz.1.2091': attribute type 3 has an invalid length.
[  376.566867][T14625] SET target dimension over the limit!
[  376.743724][T14631] 8021q: adding VLAN 0 to HW filter on device bond13
[  376.821806][T14636] macvtap1: entered allmulticast mode
[  376.863910][T14631] bond13: (slave sit2): refused to change device type
[  376.913193][T14641] team0: Port device bond0 removed
[  376.914913][T14641] bridge_slave_0: left allmulticast mode
[  376.914939][T14641] bridge_slave_0: left promiscuous mode
[  376.919796][T14641] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.939222][T14641] bridge_slave_1: left allmulticast mode
[  376.939248][T14641] bridge_slave_1: left promiscuous mode
[  376.939464][T14641] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.946388][T14641] vlan2: left promiscuous mode
[  376.946408][T14641] geneve0: left promiscuous mode
[  376.972595][T14641] bond0: (slave bond_slave_0): Releasing backup interface
[  377.561387][T14682] netlink: 'syz.2.2102': attribute type 55 has an invalid length.
[  377.613572][T14681] netlink: 'syz.1.2104': attribute type 5 has an invalid length.
[  377.955850][T14697] __nla_validate_parse: 16 callbacks suppressed
[  377.955875][T14697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2107'.
[  378.288673][   T89] net_ratelimit: 58 callbacks suppressed
[  378.288697][   T89] bond4: (slave bridge1): failed to get link speed/duplex
[  378.288734][   T89] bond4: (slave bridge2): failed to get link speed/duplex
[  378.399369][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  378.399422][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  378.510941][T14728] netlink: 'syz.4.2117': attribute type 21 has an invalid length.
[  379.032959][T14728] netlink: 'syz.4.2117': attribute type 1 has an invalid length.
[  379.032987][T14728] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2117'.
[  379.057572][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  379.057661][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  379.169259][ T6679] bond4: (slave bridge2): failed to get link speed/duplex
[  379.169308][ T6679] bond4: (slave bridge1): failed to get link speed/duplex
[  379.290244][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  379.290296][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  379.351894][T14736] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  379.356714][T14738] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2119'.
[  379.398100][T14736] veth9: entered promiscuous mode
[  379.455359][T14747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2121'.
[  379.455390][T14747] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2121'.
[  379.601901][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'.
[  380.207229][T14760] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  380.509007][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2128'.
[  380.509561][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  380.510136][T14773] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2128'.
[  380.573021][   T30] audit: type=1804 audit(1790813701.889:46): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2129" name="/newroot/436/memory.events" dev="tmpfs" ino=2282 res=1 errno=0
[  380.573205][   T30] audit: type=1800 audit(1790813701.889:47): pid=14775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2129" name="memory.events" dev="tmpfs" ino=2282 res=0 errno=0
[  381.432361][T14721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  381.639725][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'.
[  382.131864][T14822] netlink: 'syz.4.2140': attribute type 1 has an invalid length.
[  382.174103][T14822] bond15: option mode: invalid value (11)
[  382.236848][T14822] bond15 (unregistering): Released all slaves
[  383.171473][T14877] netlink: 'syz.3.2157': attribute type 4 has an invalid length.
[  383.299975][ T6687] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  383.307893][T14884] bond15: entered promiscuous mode
[  383.308354][T14884] 8021q: adding VLAN 0 to HW filter on device bond15
[  383.314152][T14884] __nla_validate_parse: 8 callbacks suppressed
[  383.314173][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'.
[  383.318834][ T6678] net_ratelimit: 66 callbacks suppressed
[  383.318854][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  383.318899][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  383.432069][ T6679] bond4: (slave bridge1): failed to get link speed/duplex
[  383.432119][ T6679] bond4: (slave bridge2): failed to get link speed/duplex
[  383.443216][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'.
[  383.539035][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  383.539084][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  383.648913][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  383.649001][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  383.711814][T14907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2163'.
[  383.712895][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'.
[  383.768817][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  383.768867][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  383.873556][T14914] vlan3: entered allmulticast mode
[  383.873581][T14914] bond0: entered allmulticast mode
[  383.896458][T14919] FAULT_INJECTION: forcing a failure.
[  383.896458][T14919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  383.896499][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.0.2166 Not tainted syzkaller #0 PREEMPT(full) 
[  383.896521][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  383.896533][T14919] Call Trace:
[  383.896552][T14919]  <TASK>
[  383.896603][T14919]  dump_stack_lvl+0xe8/0x150
[  383.896733][T14919]  should_fail_ex+0x410/0x560
[  383.896837][T14919]  _copy_from_user+0x2d/0xb0
[  383.896921][T14919]  copy_from_bpfptr+0x5c/0x90
[  383.896971][T14919]  bpf_prog_load+0xcdb/0x1c20
[  383.897009][T14919]  ? __pfx_bpf_prog_load+0x10/0x10
[  383.897083][T14919]  __sys_bpf+0xd0d/0xd90
[  383.897116][T14919]  ? __pfx___sys_bpf+0x10/0x10
[  383.897150][T14919]  ? __fget_files+0x2a/0x420
[  383.897229][T14919]  ? ksys_write+0x242/0x270
[  383.897275][T14919]  ? __pfx_ksys_write+0x10/0x10
[  383.897322][T14919]  __x64_sys_bpf+0xba/0xd0
[  383.897347][T14919]  do_syscall_64+0x166/0x520
[  383.897479][T14919]  ? trace_irq_disable+0x3b/0x140
[  383.897538][T14919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.897597][T14919]  ? clear_bhb_loop+0x70/0xc0
[  383.897622][T14919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.897642][T14919] RIP: 0033:0x7f1483d9e159
[  383.897684][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.897701][T14919] RSP: 002b:00007f1484d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  383.897732][T14919] RAX: ffffffffffffffda RBX: 00007f1484025fa0 RCX: 00007f1483d9e159
[  383.897746][T14919] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[  383.897759][T14919] RBP: 00007f1484d13090 R08: 0000000000000000 R09: 0000000000000000
[  383.897772][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  383.897783][T14919] R13: 00007f1484026038 R14: 00007f1484025fa0 R15: 00007ffd511b6a28
[  383.897816][T14919]  </TASK>
[  384.114409][T14922] IPv6: NLM_F_CREATE should be specified when creating new route
[  386.136286][T14875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  386.304345][T14958] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2176'.
[  386.374769][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'.
[  386.445513][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'.
[  386.906221][T14971] syzkaller1: entered promiscuous mode
[  386.906247][T14971] syzkaller1: entered allmulticast mode
[  387.038964][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'.
[  387.169325][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2190'.
[  387.271073][T15012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.292516][T15011] tipc: Resetting bearer <eth:syzkaller0>
[  387.341309][T15011] tipc: Disabling bearer <eth:syzkaller0>
[  387.348320][T15017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2192'.
[  388.430929][ T6678] net_ratelimit: 74 callbacks suppressed
[  388.430954][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  388.430994][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  388.541885][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  388.541951][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  388.669108][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  388.669155][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  388.681970][T15064] netlink: Conntrack attr has 8 unknown bytes
[  388.682004][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.682514][T15067] x_tables: duplicate underflow at hook 3
[  388.686634][T15066] xt_ecn: cannot match TCP bits for non-tcp packets
[  388.778594][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  388.778640][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  389.034669][T15086] netlink: 'syz.4.2210': attribute type 219 has an invalid length.
[  389.075958][T15080] __nla_validate_parse: 4 callbacks suppressed
[  389.075984][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2209'.
[  389.077285][T15080] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2209'.
[  389.077303][T15080] tipc: Invalid UDP bearer configuration
[  389.077351][T15080] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  389.578606][T15104] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2214'.
[  389.684331][T15108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2215'.
[  390.064126][T15094] netlink: 'syz.3.2213': attribute type 8 has an invalid length.
[  390.122433][T15097] netlink: 'syz.3.2213': attribute type 10 has an invalid length.
[  390.159795][T15119] netlink: 'syz.4.2218': attribute type 1 has an invalid length.
[  390.260820][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'.
[  390.342480][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'.
[  390.493424][T15134] xt_hashlimit: size too large, truncated to 1048576
[  390.546489][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'.
[  390.550692][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'.
[  390.550926][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'.
[  390.551142][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'.
[  391.396426][T15175] ovs-dp0: entered promiscuous mode
[  392.619628][ T6682] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.619677][ T6682] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.620423][ T6682] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.620454][ T6682] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.620508][ T6682] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.620533][ T6682] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.620570][ T6682] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.620593][ T6682] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.629126][ T7079] syz0: Port: 1 Link DOWN
[  392.702540][T15233] netlink: 'syz.2.2246': attribute type 3 has an invalid length.
[  392.753804][T15233] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  393.439368][ T6685] net_ratelimit: 66 callbacks suppressed
[  393.439393][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  393.439433][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  393.550217][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  393.550266][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  393.660110][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  393.660170][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  393.770087][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  393.770134][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  393.881883][T15279] syzkaller0: entered promiscuous mode
[  393.881905][T15279] syzkaller0: entered allmulticast mode
[  393.971391][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  393.971439][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  394.157599][T15291] pim6reg: left allmulticast mode
[  394.403084][T15305] __nla_validate_parse: 76 callbacks suppressed
[  394.403106][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'.
[  394.487459][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2267'.
[  394.501437][T15308] bridge0: port 3(gretap0) entered disabled state
[  394.502104][T15308] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.502531][T15308] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.510201][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2267'.
[  394.516285][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2267'.
[  394.522277][T15311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2267'.
[  394.786313][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'.
[  395.100206][T15347] x_tables: duplicate entry at hook 1
[  395.176691][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'.
[  395.177764][T15343] bridge_slave_1: Caught tx_queue_len zero misconfig
[  395.203997][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2275'.
[  395.228363][T15347] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  395.357500][T15353] syzkaller0: entered promiscuous mode
[  395.357525][T15353] syzkaller0: entered allmulticast mode
[  395.432070][T15353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.433518][T15357] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.571255][T15361] xt_limit: Overflow, try lower: 0/0
[  395.730347][ T9551] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  395.820586][ T7079] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  395.820911][T15357] tipc: Resetting bearer <eth:syzkaller0>
[  395.873536][T15357] tipc: Disabling bearer <eth:syzkaller0>
[  396.062696][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'.
[  396.339599][T15398] bridge10: entered promiscuous mode
[  396.339628][T15398] bridge10: entered allmulticast mode
[  396.609706][T15390] syzkaller0: entered promiscuous mode
[  396.609734][T15390] syzkaller0: entered allmulticast mode
[  396.844261][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'.
[  397.287603][T15441] batman_adv: batadv0: Adding interface: macvtap1
[  397.287623][T15441] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  397.287648][T15441] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  397.335712][T15436] syzkaller0: entered promiscuous mode
[  397.335737][T15436] syzkaller0: entered allmulticast mode
[  397.591716][T15456] netlink: 'syz.4.2300': attribute type 10 has an invalid length.
[  398.190858][T15478] ipvlan3: entered promiscuous mode
[  398.468907][ T6667] net_ratelimit: 78 callbacks suppressed
[  398.468930][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  398.468968][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  398.578816][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  398.578863][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  398.691217][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  398.691270][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  398.803183][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  398.803234][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  398.915100][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  398.915146][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  399.606598][T15540] syz_tun: entered allmulticast mode
[  399.871338][T15552] __nla_validate_parse: 9 callbacks suppressed
[  399.871361][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2324'.
[  399.875091][T15552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.879158][T15556] batadv_slave_1: entered promiscuous mode
[  399.931205][T15552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.996062][T15553] batadv_slave_1: left promiscuous mode
[  399.996559][T15560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.379726][T15585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'.
[  400.789676][T15597] netlink: 'syz.0.2333': attribute type 1 has an invalid length.
[  400.888128][T15603] xt_policy: neither incoming nor outgoing policy selected
[  401.103878][T15611] netlink: 'syz.3.2337': attribute type 21 has an invalid length.
[  401.103974][T15611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2337'.
[  401.104011][T15611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2337'.
[  401.143383][T15609] batadv_slave_0: entered allmulticast mode
[  401.144005][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'.
[  401.432258][T15619] netlink: 'syz.0.2339': attribute type 3 has an invalid length.
[  401.611040][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'.
[  401.632688][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'.
[  401.972433][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'.
[  401.972463][T15656] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2346'.
[  402.017250][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'.
[  402.557759][T15679] netlink: 'syz.4.2350': attribute type 1 has an invalid length.
[  402.586760][T15678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.616655][ T6678] tipc: Subscription rejected, illegal request
[  402.617832][T15680] netlink: 'syz.1.2349': attribute type 10 has an invalid length.
[  403.141295][T15688] syzkaller0: entered promiscuous mode
[  403.141323][T15688] syzkaller0: entered allmulticast mode
[  406.217728][T15694] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  406.228673][ T6667] net_ratelimit: 61 callbacks suppressed
[  406.228697][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  406.228735][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  406.354878][T15710] FAULT_INJECTION: forcing a failure.
[  406.354878][T15710] name failslab, interval 1, probability 0, space 0, times 0
[  406.354915][T15710] CPU: 1 UID: 0 PID: 15710 Comm: syz.3.2357 Not tainted syzkaller #0 PREEMPT(full) 
[  406.354939][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  406.354951][T15710] Call Trace:
[  406.354959][T15710]  <TASK>
[  406.354970][T15710]  dump_stack_lvl+0xe8/0x150
[  406.355006][T15710]  should_fail_ex+0x410/0x560
[  406.355036][T15710]  should_failslab+0xa8/0x100
[  406.355102][T15710]  __kvmalloc_node_noprof+0x176/0x820
[  406.355125][T15710]  ? array_map_direct_value_addr+0x7c/0x100
[  406.355160][T15710]  ? bpf_compute_postorder+0x83/0x970
[  406.355179][T15710]  ? bpf_compute_postorder+0x83/0x970
[  406.355206][T15710]  bpf_compute_postorder+0x83/0x970
[  406.355229][T15710]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  406.355258][T15710]  ? add_kfuncs+0x251/0x2e0
[  406.355286][T15710]  bpf_check+0x261f/0x2ef0
[  406.355330][T15710]  ? __pfx_bpf_check+0x10/0x10
[  406.355357][T15710]  ? bpf_obj_name_cpy+0x194/0x1e0
[  406.355397][T15710]  bpf_prog_load+0x14d6/0x1c20
[  406.355437][T15710]  ? __pfx_bpf_prog_load+0x10/0x10
[  406.355490][T15710]  __sys_bpf+0xd0d/0xd90
[  406.355522][T15710]  ? __pfx___sys_bpf+0x10/0x10
[  406.355557][T15710]  ? __fget_files+0x2a/0x420
[  406.355605][T15710]  ? ksys_write+0x242/0x270
[  406.355646][T15710]  ? __pfx_ksys_write+0x10/0x10
[  406.355681][T15710]  __x64_sys_bpf+0xba/0xd0
[  406.355706][T15710]  do_syscall_64+0x166/0x520
[  406.355731][T15710]  ? trace_irq_disable+0x3b/0x140
[  406.355752][T15710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.355772][T15710]  ? clear_bhb_loop+0x70/0xc0
[  406.355796][T15710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.355814][T15710] RIP: 0033:0x7fae6c39e159
[  406.355834][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.355851][T15710] RSP: 002b:00007fae6d2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  406.355874][T15710] RAX: ffffffffffffffda RBX: 00007fae6c625fa0 RCX: 00007fae6c39e159
[  406.355889][T15710] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005
[  406.355902][T15710] RBP: 00007fae6d2c6090 R08: 0000000000000000 R09: 0000000000000000
[  406.355915][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  406.355928][T15710] R13: 00007fae6c626038 R14: 00007fae6c625fa0 R15: 00007ffcd7b261d8
[  406.355963][T15710]  </TASK>
[  406.578581][T15726] __nla_validate_parse: 1 callbacks suppressed
[  406.578604][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2361'.
[  406.658680][T15712] bond12 (unregistering): Released all slaves
[  406.718502][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  406.718559][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  406.758784][T15722] erspan0: left promiscuous mode
[  406.758816][T15722] macsec0: entered promiscuous mode
[  406.809134][T15728] erspan0: entered promiscuous mode
[  406.809446][T15728] macsec0: left promiscuous mode
[  406.833927][T15732] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2362'.
[  406.848053][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  406.859066][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  406.950960][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  406.969964][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  407.059337][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  407.078934][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  408.048003][T15771] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.056662][T15771] 8021q: adding VLAN 0 to HW filter on device team0
[  408.066869][T15771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.095770][T15771] tipc: Resetting bearer <ib:veth1_to_bridge>
[  408.120811][T15771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.127329][T15771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.165669][T15771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  408.165696][T15771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  408.189431][T15771] veth1_vlan: left promiscuous mode
[  408.202537][T15771] veth0_vlan: left promiscuous mode
[  408.205745][T15771] veth0_vlan: entered promiscuous mode
[  408.211770][T15771] veth1_vlan: entered promiscuous mode
[  408.222553][T15771] veth1_macvtap: left promiscuous mode
[  408.225526][T15771] veth0_macvtap: left promiscuous mode
[  408.226676][T15771] veth0_macvtap: entered promiscuous mode
[  408.236837][T15771] veth1_macvtap: entered promiscuous mode
[  408.432344][T15771] 8021q: adding VLAN 0 to HW filter on device bond1
[  408.435823][T15771] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  408.435848][T15771] hsr1: Slave B (veth0_to_team) is not up; please bring it up to get a fully working HSR network
[  408.476734][T15771] 8021q: adding VLAN 0 to HW filter on device bond2
[  408.524693][T15771] geneve0: entered promiscuous mode
[  408.526049][T15771] 8021q: adding VLAN 0 to HW filter on device batadv1
[  408.551890][T15771] 8021q: adding VLAN 0 to HW filter on device eth0
[  408.554391][T15771] 8021q: adding VLAN 0 to HW filter on device eth1
[  408.556844][T15771] 8021q: adding VLAN 0 to HW filter on device eth2
[  408.579550][T15771] 8021q: adding VLAN 0 to HW filter on device eth3
[  408.676967][   T13] bridge0: port 3(vlan2) entered blocking state
[  408.677089][   T13] bridge0: port 3(vlan2) entered forwarding state
[  408.900349][ T6682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.902644][ T6682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.902826][ T6682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.902990][ T6682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.951155][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'.
[  409.031439][T15796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2373'.
[  409.661172][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2381'.
[  409.807567][T15811] tc action pedit 'at' offset -2147483645 out of bounds
[  410.024914][T15813] sit2: entered promiscuous mode
[  410.161291][T15820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2384'.
[  410.622090][T15841] netlink: 'syz.1.2389': attribute type 1 has an invalid length.
[  410.727514][T15845] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2391'.
[  410.738377][T15848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  410.751691][T15848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.798212][T15849] gtp0: entered promiscuous mode
[  410.798238][T15849] gtp0: entered allmulticast mode
[  410.931597][T15855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2388'.
[  411.085081][T15859] netlink: 'syz.3.2396': attribute type 1 has an invalid length.
[  411.154820][T15859] bond3: entered promiscuous mode
[  411.155282][T15859] 8021q: adding VLAN 0 to HW filter on device bond3
[  411.164705][T15859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2396'.
[  411.245074][T15859] bond3: (slave bridge6): making interface the new active one
[  411.245099][T15859] bridge6: entered promiscuous mode
[  411.245983][T15859] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  411.271543][ T6678] net_ratelimit: 49 callbacks suppressed
[  411.271565][ T6678] bond4: (slave bridge2): failed to get link speed/duplex
[  411.271604][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  411.401359][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  411.401394][ T6678] bond4: (slave bridge1): failed to get link speed/duplex
[  411.509556][ T6667] bond4: (slave bridge1): failed to get link speed/duplex
[  411.509622][ T6667] bond4: (slave bridge2): failed to get link speed/duplex
[  411.591507][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  411.602278][T15882] netlink: zone id is out of range
[  411.602293][T15882] netlink: zone id is out of range
[  411.602300][T15882] netlink: get zone limit has 4 unknown bytes
[  411.713214][T15890] netlink: 'syz.3.2405': attribute type 37 has an invalid length.
[  412.281027][T15915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2409'.
[  412.281066][T15915] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2409'.
[  412.289755][T15915] netlink: 'syz.1.2409': attribute type 1 has an invalid length.
[  412.289776][T15915] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2409'.
[  412.323811][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'.
[  412.659461][T15926] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2412'.
[  412.852071][T15934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2416'.
[  412.852871][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2416'.
[  412.852895][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2416'.
[  413.242895][T15967] netlink: 'syz.4.2424': attribute type 2 has an invalid length.
[  413.291872][T15967] 
þ: entered promiscuous mode
[  414.271035][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'.
[  414.271064][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2435'.
[  414.405301][T16013] netlink: 'syz.0.2433': attribute type 1 has an invalid length.
[  415.442194][T16042] x_tables: duplicate underflow at hook 4
[  416.279040][   T49] net_ratelimit: 75 callbacks suppressed
[  416.279067][   T49] bond4: (slave bridge2): failed to get link speed/duplex
[  416.279144][   T49] bond4: (slave bridge1): failed to get link speed/duplex
[  416.390155][ T6685] bond4: (slave bridge1): failed to get link speed/duplex
[  416.390259][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  416.416693][T16079] Bluetooth: hci0: unsupported parameter 5135
[  416.416718][T16079] Bluetooth: hci0: unsupported parameter 8192
[  416.416732][T16079] Bluetooth: hci0: unsupported parameter 5135
[  416.416743][T16079] Bluetooth: hci0: unsupported parameter 8192
[  416.417574][T16080] Bluetooth: hci0: unsupported parameter 5135
[  416.417593][T16080] Bluetooth: hci0: unsupported parameter 8192
[  416.417691][T16080] Bluetooth: hci0: unsupported parameter 5135
[  416.417705][T16080] Bluetooth: hci0: unsupported parameter 8192
[  416.487155][T16083] ip_tables: iptables: counters copy to user failed while replacing table
[  416.499856][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  416.499989][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  416.627262][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  416.627357][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  416.729699][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  417.450991][T16117] netlink: 'syz.2.2462': attribute type 1 has an invalid length.
[  417.607913][T16117] __nla_validate_parse: 9 callbacks suppressed
[  417.607953][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2462'.
[  417.666329][T16119] bond14: (slave geneve2): Opening slave failed
[  417.726207][T16117] 8021q: adding VLAN 0 to HW filter on device bond14
[  417.754299][T16123] tipc: Resetting bearer <eth:syz_tun>
[  417.972486][T16138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'.
[  418.117306][T16143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2469'.
[  418.117643][T16143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'.
[  418.156261][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'.
[  418.914443][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2480'.
[  418.914480][T16191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'.
[  418.914495][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2480'.
[  420.212997][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'.
[  420.532044][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'.
[  420.620657][T16257] x_tables: duplicate underflow at hook 3
[  422.953508][    C1] net_ratelimit: 58 callbacks suppressed
[  422.953535][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  424.869859][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  424.891141][T16326] ip_tables: iptables: counters copy to user failed while replacing table
[  424.903543][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  424.903595][ T1102] bond4: (slave bridge2): failed to get link speed/duplex
[  425.010104][ T6672] bond4: (slave bridge2): failed to get link speed/duplex
[  425.032147][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  425.065042][T16337] __nla_validate_parse: 3 callbacks suppressed
[  425.065066][T16337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2513'.
[  425.100012][T16340] FAULT_INJECTION: forcing a failure.
[  425.100012][T16340] name failslab, interval 1, probability 0, space 0, times 0
[  425.100052][T16340] CPU: 1 UID: 0 PID: 16340 Comm: syz.1.2514 Not tainted syzkaller #0 PREEMPT(full) 
[  425.100074][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  425.100086][T16340] Call Trace:
[  425.100094][T16340]  <TASK>
[  425.100103][T16340]  dump_stack_lvl+0xe8/0x150
[  425.100138][T16340]  should_fail_ex+0x410/0x560
[  425.100165][T16340]  ? __alloc_skb+0x1db/0x7a0
[  425.100303][T16340]  should_failslab+0xa8/0x100
[  425.100326][T16340]  ? __alloc_skb+0x1db/0x7a0
[  425.100344][T16340]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  425.100374][T16340]  ? __alloc_skb+0x18d/0x7a0
[  425.100398][T16340]  ? __alloc_skb+0x1db/0x7a0
[  425.100429][T16340]  __alloc_skb+0x1db/0x7a0
[  425.100458][T16340]  netlink_ack+0x136/0xb30
[  425.100549][T16340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  425.100602][T16340]  ? __lock_acquire+0x747/0x2de0
[  425.100660][T16340]  netlink_rcv_skb+0x2a4/0x4a0
[  425.100691][T16340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  425.100717][T16340]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  425.100761][T16340]  ? netlink_deliver_tap+0x2e/0x1b0
[  425.100790][T16340]  ? netlink_deliver_tap+0x2e/0x1b0
[  425.100833][T16340]  netlink_unicast+0x7bd/0x940
[  425.100871][T16340]  netlink_sendmsg+0x813/0xb40
[  425.100909][T16340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.100935][T16340]  ? apparmor_socket_sendmsg+0x98/0x360
[  425.100997][T16340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.101015][T16340]  sock_sendmsg_nosec+0x14e/0x190
[  425.101065][T16340]  ____sys_sendmsg+0x54e/0x850
[  425.101119][T16340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.101157][T16340]  ? import_iovec+0x73/0xa0
[  425.101208][T16340]  ___sys_sendmsg+0x2a5/0x360
[  425.101231][T16340]  ? __lock_acquire+0x747/0x2de0
[  425.101256][T16340]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.101317][T16340]  ? __fget_files+0x2a/0x420
[  425.101342][T16340]  ? __fget_files+0x3a2/0x420
[  425.101380][T16340]  __x64_sys_sendmsg+0x1b1/0x290
[  425.101408][T16340]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.101459][T16340]  do_syscall_64+0x166/0x520
[  425.101484][T16340]  ? trace_irq_disable+0x3b/0x140
[  425.101504][T16340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.101525][T16340]  ? clear_bhb_loop+0x70/0xc0
[  425.101550][T16340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.101570][T16340] RIP: 0033:0x7f3ada19e159
[  425.101592][T16340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.101609][T16340] RSP: 002b:00007f3adb0b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.101633][T16340] RAX: ffffffffffffffda RBX: 00007f3ada425fa0 RCX: 00007f3ada19e159
[  425.101648][T16340] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
[  425.101661][T16340] RBP: 00007f3adb0b0090 R08: 0000000000000000 R09: 0000000000000000
[  425.101674][T16340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.101686][T16340] R13: 00007f3ada426038 R14: 00007f3ada425fa0 R15: 00007ffee9e36128
[  425.101720][T16340]  </TASK>
[  425.122494][ T6666] bond4: (slave bridge2): failed to get link speed/duplex
[  425.151302][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  425.240175][ T6672] bond4: (slave bridge2): failed to get link speed/duplex
[  425.268580][ T6672] bond4: (slave bridge1): failed to get link speed/duplex
[  425.496148][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'.
[  426.194205][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'.
[  426.233160][T16376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2526'.
[  426.625700][T16397] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2532'.
[  426.727344][T16402] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  426.741241][T16402] netlink: 'syz.2.2534': attribute type 1 has an invalid length.
[  426.786808][T16402] erspan2: entered allmulticast mode
[  427.151699][T16428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'.
[  427.183243][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'.
[  427.346383][T16439] netlink: 'syz.4.2541': attribute type 2 has an invalid length.
[  427.367841][T16441] FAULT_INJECTION: forcing a failure.
[  427.367841][T16441] name failslab, interval 1, probability 0, space 0, times 0
[  427.367878][T16441] CPU: 1 UID: 0 PID: 16441 Comm: syz.0.2542 Not tainted syzkaller #0 PREEMPT(full) 
[  427.367904][T16441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  427.367917][T16441] Call Trace:
[  427.367925][T16441]  <TASK>
[  427.367935][T16441]  dump_stack_lvl+0xe8/0x150
[  427.367970][T16441]  should_fail_ex+0x410/0x560
[  427.367996][T16441]  ? __alloc_skb+0x1db/0x7a0
[  427.368019][T16441]  should_failslab+0xa8/0x100
[  427.368045][T16441]  ? __alloc_skb+0x1db/0x7a0
[  427.368065][T16441]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  427.368095][T16441]  ? __alloc_skb+0x18d/0x7a0
[  427.368120][T16441]  ? __alloc_skb+0x1db/0x7a0
[  427.368151][T16441]  __alloc_skb+0x1db/0x7a0
[  427.368179][T16441]  netlink_ack+0x136/0xb30
[  427.368205][T16441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  427.368234][T16441]  ? __copy_skb_header+0xa3/0x4a0
[  427.368272][T16441]  netlink_rcv_skb+0x2a4/0x4a0
[  427.368301][T16441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  427.368327][T16441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  427.368368][T16441]  ? netlink_deliver_tap+0x2e/0x1b0
[  427.368394][T16441]  ? netlink_deliver_tap+0x2e/0x1b0
[  427.368428][T16441]  netlink_unicast+0x7bd/0x940
[  427.368467][T16441]  netlink_sendmsg+0x813/0xb40
[  427.368496][T16441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.368524][T16441]  ? apparmor_socket_sendmsg+0x98/0x360
[  427.368549][T16441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  427.368567][T16441]  sock_sendmsg_nosec+0x14e/0x190
[  427.368589][T16441]  ____sys_sendmsg+0x54e/0x850
[  427.368622][T16441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  427.368658][T16441]  ? import_iovec+0x73/0xa0
[  427.368696][T16441]  ___sys_sendmsg+0x2a5/0x360
[  427.368720][T16441]  ? __lock_acquire+0x747/0x2de0
[  427.368746][T16441]  ? __pfx____sys_sendmsg+0x10/0x10
[  427.368811][T16441]  ? __fget_files+0x2a/0x420
[  427.368837][T16441]  ? __fget_files+0x3a2/0x420
[  427.368875][T16441]  __x64_sys_sendmsg+0x1b1/0x290
[  427.368905][T16441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  427.368955][T16441]  do_syscall_64+0x166/0x520
[  427.368980][T16441]  ? trace_irq_disable+0x3b/0x140
[  427.368999][T16441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.369018][T16441]  ? clear_bhb_loop+0x70/0xc0
[  427.369042][T16441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.369061][T16441] RIP: 0033:0x7f1483d9e159
[  427.369080][T16441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.369098][T16441] RSP: 002b:00007f1484d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  427.369120][T16441] RAX: ffffffffffffffda RBX: 00007f1484025fa0 RCX: 00007f1483d9e159
[  427.369134][T16441] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
[  427.369147][T16441] RBP: 00007f1484d13090 R08: 0000000000000000 R09: 0000000000000000
[  427.369159][T16441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.369171][T16441] R13: 00007f1484026038 R14: 00007f1484025fa0 R15: 00007ffd511b6a28
[  427.369202][T16441]  </TASK>
[  427.999991][ T6666] net_ratelimit: 280 callbacks suppressed
[  428.000018][ T6666] bond4: (slave bridge1): failed to get link speed/duplex
[  428.000057][ T6666] bond4: (slave bridge2): failed to get link speed/duplex
[  428.111526][T14304] bond4: (slave bridge2): failed to get link speed/duplex
[  428.111572][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  428.231199][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  428.231249][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  428.254544][T16477] netlink: 'syz.2.2551': attribute type 1 has an invalid length.
[  428.361692][T16477] 8021q: adding VLAN 0 to HW filter on device bond15
[  428.389971][T16478] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  428.390285][T14304] bond4: (slave bridge2): failed to get link speed/duplex
[  428.390339][ T6666] bond4: (slave bridge1): failed to get link speed/duplex
[  428.392264][T16477] bond15: entered promiscuous mode
[  428.392284][T16477] bond15: entered allmulticast mode
[  428.414187][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.498542][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  428.498590][T14304] bond4: (slave bridge2): failed to get link speed/duplex
[  428.742415][T16504] netlink: 'syz.2.2556': attribute type 1 has an invalid length.
[  428.779649][T16504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2556'.
[  428.786118][T16504] bond15: (slave veth0_to_bond): Releasing active interface
[  428.800684][T16504] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  428.806736][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  428.815171][T16504] macvlan2: entered promiscuous mode
[  428.815193][T16504] macvlan2: entered allmulticast mode
[  428.815877][T16504] bond16: entered promiscuous mode
[  428.816647][T16504] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  428.817449][T16504] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  428.844842][T16504] bond16: left promiscuous mode
[  429.262845][T16528] syzkaller1: entered promiscuous mode
[  429.262871][T16528] syzkaller1: entered allmulticast mode
[  429.400347][T16523] netlink: 'syz.4.2563': attribute type 10 has an invalid length.
[  430.293047][T16543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'.
[  430.622555][T16533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.656375][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'.
[  430.795856][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'.
[  431.040617][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2579'.
[  431.273656][T16595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2580'.
[  431.324793][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'.
[  431.574837][T16561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  431.905721][T16612] syzkaller0: entered promiscuous mode
[  431.905750][T16612] syzkaller0: entered allmulticast mode
[  432.216261][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'.
[  432.266807][T16625] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2589'.
[  432.266837][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'.
[  432.622015][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'.
[  433.110402][ T1102] net_ratelimit: 57 callbacks suppressed
[  433.110428][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  433.110466][ T1102] bond4: (slave bridge2): failed to get link speed/duplex
[  433.222051][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  433.222096][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  433.271339][T16663] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  433.271371][T16663] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  433.347940][T16668] netlink: 'syz.3.2601': attribute type 4 has an invalid length.
[  433.385108][T16668] netlink: 'syz.3.2601': attribute type 4 has an invalid length.
[  433.409889][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  433.409951][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  433.550455][ T1102] bond4: (slave bridge2): failed to get link speed/duplex
[  433.550502][ T1102] bond4: (slave bridge1): failed to get link speed/duplex
[  433.634669][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  434.688307][T16733] netlink: 'syz.1.2617': attribute type 21 has an invalid length.
[  434.688334][T16733] IPv6: NLM_F_CREATE should be specified when creating new route
[  434.689692][T16733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  434.689704][T16733] IPv6: NLM_F_CREATE should be set when creating new route
[  434.689743][T16733] IPv6: NLM_F_CREATE should be set when creating new route
[  434.689766][T16733] IPv6: NLM_F_CREATE should be set when creating new route
[  435.264685][T16760] tipc: New replicast peer: 255.255.255.255
[  435.298776][T16760] tipc: Enabled bearer <udp:syz2>, priority 10
[  435.323270][T16760] __nla_validate_parse: 17 callbacks suppressed
[  435.323291][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2623'.
[  435.344945][T16761] syzkaller1: entered promiscuous mode
[  435.344974][T16761] syzkaller1: entered allmulticast mode
[  435.509919][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'.
[  435.573826][T16769] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2625'.
[  435.575928][T16770] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2625'.
[  435.643250][T16764] bond17: entered promiscuous mode
[  435.643870][T16764] 8021q: adding VLAN 0 to HW filter on device bond17
[  435.648530][T16771] syzkaller1: left promiscuous mode
[  435.648573][T16771] syzkaller1: left allmulticast mode
[  435.855204][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'.
[  436.379007][ T9551] tipc: Node number set to 101926217
[  436.417338][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2630'.
[  436.616443][T16797] syzkaller1: entered promiscuous mode
[  436.616586][T16797] syzkaller1: entered allmulticast mode
[  437.435034][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'.
[  438.221355][   T59] net_ratelimit: 60 callbacks suppressed
[  438.221382][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  438.221417][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  438.340706][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  438.340758][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  438.451472][ T6666] bond4: (slave bridge2): failed to get link speed/duplex
[  438.451517][ T6666] bond4: (slave bridge1): failed to get link speed/duplex
[  438.560190][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  438.560247][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  438.598584][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'.
[  438.598603][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'.
[  438.950167][    C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  439.772888][T16805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  440.692688][T16823] veth5: entered allmulticast mode
[  440.698873][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  440.865168][T16833] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2638'.
[  440.865385][T16833] 0·: renamed from hsr0 (while UP)
[  440.932901][T16833] 0·: entered allmulticast mode
[  440.932933][T16833] hsr_slave_0: entered allmulticast mode
[  440.932952][T16833] hsr_slave_1: entered allmulticast mode
[  441.020706][T16845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2643'.
[  441.060697][T16851] nbd: must specify at least one socket
[  441.144070][T16860] netlink: 'syz.3.2645': attribute type 10 has an invalid length.
[  441.300820][T16860] team0: Port device dummy0 added
[  441.441851][T16866] syzkaller0: entered promiscuous mode
[  441.441877][T16866] syzkaller0: entered allmulticast mode
[  441.530372][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'.
[  442.000726][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2658'.
[  442.000821][T16896] lo: Caught tx_queue_len zero misconfig
[  442.013618][T16900] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  442.035758][T16900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'.
[  442.046797][T16898] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2659'.
[  442.124244][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2658'.
[  442.165854][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2658'.
[  442.463575][T16913] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  442.871140][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'.
[  443.080849][T16945] netlink: 'syz.0.2672': attribute type 11 has an invalid length.
[  443.225070][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  443.350808][T16954] netlink: 'syz.0.2675': attribute type 1 has an invalid length.
[  443.599314][   T59] net_ratelimit: 31 callbacks suppressed
[  443.599340][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  443.599389][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  443.617945][T16956] 8021q: adding VLAN 0 to HW filter on device bond12
[  443.670400][T16959] 8021q: adding VLAN 0 to HW filter on device bond12
[  443.674868][T16959] bond12: (slave geneve3): making interface the new active one
[  443.675864][T16959] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  443.679096][ T6685] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  443.682498][   T59] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  443.683468][   T59] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0
[  443.683506][   T59] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0
[  443.688264][T16966] bond0: ARP target 0.0.0.2 is already present
[  443.688290][T16966] bond0: option arp_ip_target: invalid value (33554432)
[  443.693881][T16964] ip_tables: iptables: counters copy to user failed while replacing table
[  443.707512][T16962] netlink: 'syz.4.2676': attribute type 4 has an invalid length.
[  443.860032][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  443.860083][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  443.970076][ T6666] bond4: (slave bridge1): failed to get link speed/duplex
[  443.970125][ T6666] bond4: (slave bridge2): failed to get link speed/duplex
[  444.130403][T16979] 8021q: adding VLAN 0 to HW filter on device bond18
[  444.289457][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  444.290706][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  444.398938][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  444.845170][T17026] netlink: 'syz.3.2690': attribute type 1 has an invalid length.
[  444.945238][T17027] x_tables: duplicate underflow at hook 3
[  444.955024][T17026] bond4: entered promiscuous mode
[  444.955456][T17026] 8021q: adding VLAN 0 to HW filter on device bond4
[  445.014913][T17021] veth9: entered allmulticast mode
[  445.027905][T17021] bond4: (slave veth9): making interface the new active one
[  445.027931][T17021] veth9: entered promiscuous mode
[  445.046432][T17021] bond4: (slave veth9): Enslaving as an active interface with an up link
[  445.046757][T17033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.062349][T17036] syzkaller0: entered promiscuous mode
[  445.062375][T17036] syzkaller0: entered allmulticast mode
[  445.145809][T17033] tipc: Resetting bearer <eth:syzkaller0>
[  445.160507][T17031] tipc: Resetting bearer <eth:syzkaller0>
[  445.222036][T17031] tipc: Disabling bearer <eth:syzkaller0>
[  445.236621][T17040] macvlan0: entered promiscuous mode
[  445.237880][T17040] netlink: 'syz.3.2694': attribute type 1 has an invalid length.
[  445.237902][T17040] netlink: 'syz.3.2694': attribute type 2 has an invalid length.
[  445.372850][T17042] smc: net device lo erased user defined pnetid SYZ0
[  445.846593][T17060] No such timeout policy "syz0"
[  446.008239][T17063] __nla_validate_parse: 12 callbacks suppressed
[  446.008262][T17063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2704'.
[  446.117717][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'.
[  446.117744][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'.
[  446.202874][T17074] netlink: 'syz.0.2706': attribute type 83 has an invalid length.
[  446.336226][T17074] netlink: 'syz.0.2706': attribute type 32 has an invalid length.
[  446.571480][T17097] netlink: 'syz.2.2711': attribute type 1 has an invalid length.
[  446.571508][T17097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2711'.
[  446.672102][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'.
[  446.729455][T17114] netlink: 'syz.2.2713': attribute type 10 has an invalid length.
[  446.757574][T17114] syz_tun: entered promiscuous mode
[  446.759842][T17114] tipc: Resetting bearer <eth:syz_tun>
[  446.760171][T17114] tipc: Resetting bearer <eth:syz_tun>
[  446.794411][T17105] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2713'.
[  446.810093][T17114] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  446.827645][T17119] Cannot find add_set index 34 as target
[  448.303579][T17159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2725'.
[  448.303607][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'.
[  448.421785][T17171] netlink: 'syz.0.2730': attribute type 4 has an invalid length.
[  448.697917][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'.
[  448.765704][T17183] 8021q: adding VLAN 0 to HW filter on device bond5
[  448.775250][T17188] batman_adv: batadv0: Adding interface: vlan3
[  448.775268][T17188] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.775303][T17188] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  448.790159][T14304] net_ratelimit: 50 callbacks suppressed
[  448.790181][T14304] bond4: (slave bridge2): failed to get link speed/duplex
[  448.790237][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  448.835494][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2735'.
[  448.853720][T17183] netlink: 'syz.3.2734': attribute type 10 has an invalid length.
[  448.866177][T17192] team0: Port device dummy0 removed
[  448.913185][T17192] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  449.011551][T17183] dummy0: entered promiscuous mode
[  449.015530][T17183] bond5: (slave dummy0): Releasing backup interface
[  449.017442][T17209] xt_hashlimit: max too large, truncated to 1048576
[  449.027363][T17196] tc_dump_action: action bad kind
[  449.042531][T17209] netlink: 'syz.1.2740': attribute type 49 has an invalid length.
[  449.198730][T17209] ip6gretap0: entered promiscuous mode
[  449.198756][T17209] ip6gretap0: entered allmulticast mode
[  449.376522][  T152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  449.388633][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  449.388675][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  449.501877][  T152] bond4: (slave bridge1): failed to get link speed/duplex
[  449.501928][  T152] bond4: (slave bridge2): failed to get link speed/duplex
[  449.609537][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  449.950442][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  449.950505][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  449.956206][T17236] syzkaller1: entered promiscuous mode
[  449.956231][T17236] syzkaller1: entered allmulticast mode
[  450.063997][ T6685] bond4: (slave bridge2): failed to get link speed/duplex
[  450.089959][T17245] syzkaller0: entered promiscuous mode
[  450.089985][T17245] syzkaller0: entered allmulticast mode
[  451.740639][T17298] IPv6: NLM_F_CREATE should be specified when creating new route
[  451.801359][ T5279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  451.875379][T17306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  451.931040][T17300] __nla_validate_parse: 2 callbacks suppressed
[  451.931063][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'.
[  452.202520][ T5279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  452.531346][T17319] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2761'.
[  452.532227][T17320] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2761'.
[  452.587624][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'.
[  452.950354][ T9581] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  453.807992][T17270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  453.873130][T14304] net_ratelimit: 53 callbacks suppressed
[  453.873158][T14304] bond4: (slave bridge1): failed to get link speed/duplex
[  453.873200][T14304] bond4: (slave bridge2): failed to get link speed/duplex
[  453.980669][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  453.980714][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  454.089695][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  454.089742][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  454.158289][T17340] smc: net device vlan1 applied user defined pnetid SYZ2
[  454.198796][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  454.198846][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  454.260265][T17334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.312384][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  454.508342][T17341] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  454.823819][   T30] audit: type=1800 audit(1790813776.139:48): pid=17356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2769" name="memory.events" dev="tmpfs" ino=2766 res=0 errno=0
[  456.120191][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.120634][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.123246][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.124147][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.127201][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.127847][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2789'.
[  456.262615][ T5279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.428356][ T9551] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  456.733590][T17306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.809632][T17454] tipc: Invalid UDP bearer configuration
[  456.809687][T17454] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  456.869507][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.875056][T17465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.999505][ T7079] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  457.077319][T17478] batadv_slave_0: entered promiscuous mode
[  457.101920][T17475] batadv_slave_0: left promiscuous mode
[  457.193084][T17483] Bluetooth: MGMT ver 1.23
[  457.195216][T17483] erspan0: left promiscuous mode
[  457.213546][T17483] erspan0: entered promiscuous mode
[  457.265397][T17484] netlink: 'syz.3.2806': attribute type 83 has an invalid length.
[  457.296495][T17490] __nla_validate_parse: 122 callbacks suppressed
[  457.296519][T17490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2810'.
[  457.321552][T17488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2808'.
[  457.321582][T17488] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2808'.
[  457.428240][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2813'.
[  457.446829][T17493] ipvlan2: entered allmulticast mode
[  457.446851][T17493] syz_tun: entered allmulticast mode
[  457.465622][T17500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2812'.
[  457.551238][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2814'.
[  457.645333][T17502] team_slave_1: Caught tx_queue_len zero misconfig
[  457.706819][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'.
[  457.727839][T17504] can: request_module (can-proto-0) failed.
[  457.790167][T17512] can: request_module (can-proto-0) failed.
[  458.686810][T17465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  458.878635][T17327] net_ratelimit: 72 callbacks suppressed
[  458.878661][T17327] bond4: (slave bridge2): failed to get link speed/duplex
[  458.909060][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  458.988937][T17327] bond4: (slave bridge2): failed to get link speed/duplex
[  459.018786][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  459.099162][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  459.129137][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  459.209029][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  459.239122][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  459.318833][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  459.349123][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  460.260404][ T5279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  460.450049][T17465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  461.908819][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  463.938854][T17326] net_ratelimit: 82 callbacks suppressed
[  463.938880][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  463.988961][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  464.048635][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  464.099124][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  464.158973][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  464.208605][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  464.260706][ T5279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.268649][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  464.318790][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  464.379022][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  464.428855][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  464.668166][T17306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.948872][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  468.958783][   T59] net_ratelimit: 81 callbacks suppressed
[  468.958811][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  469.018643][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  469.069163][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  469.128639][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  469.178958][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  469.238750][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  469.289174][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  469.349514][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  469.399074][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  469.458871][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  471.989270][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  473.978800][ T6671] net_ratelimit: 82 callbacks suppressed
[  473.978827][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  474.029026][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  474.088876][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  474.138863][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  474.199211][T17327] bond4: (slave bridge2): failed to get link speed/duplex
[  474.249055][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  474.309125][T17327] bond4: (slave bridge2): failed to get link speed/duplex
[  474.358955][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  474.418787][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  474.469555][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  477.028776][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  478.989196][   T59] net_ratelimit: 81 callbacks suppressed
[  478.989222][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  479.038689][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  479.098879][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  479.149187][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  479.209501][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  479.258681][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  479.318708][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  479.368962][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  479.429706][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  479.478948][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  479.979540][T17306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  482.069488][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  484.009329][   T59] net_ratelimit: 81 callbacks suppressed
[  484.009356][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  484.069039][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  484.118622][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  484.179182][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  484.228804][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  484.289002][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  484.338979][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  484.399267][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  484.458819][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  484.508737][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  487.108888][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  489.050521][T17326] net_ratelimit: 81 callbacks suppressed
[  489.050549][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  489.118823][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  489.158956][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  489.229266][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  489.269724][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  489.338843][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  489.379360][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  489.448984][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  489.489635][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  489.558881][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  492.148778][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.089476][   T38] net_ratelimit: 81 callbacks suppressed
[  494.089501][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  494.129148][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  494.198713][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  494.239233][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  494.309596][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  494.349172][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  494.428687][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  494.458971][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  494.538956][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  494.569568][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  497.188835][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  498.115089][T17550] rdma_rxe: rxe_newlink: failed to add wg2
[  498.174613][T17561] netlink: 'syz.4.2822': attribute type 12 has an invalid length.
[  498.174638][T17561] netlink: 'syz.4.2822': attribute type 29 has an invalid length.
[  498.174651][T17561] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2822'.
[  498.174671][T17561] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2822'.
[  498.876507][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2828'.
[  499.097051][T17615] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  499.133069][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2832'.
[  499.140658][T17618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2832'.
[  499.148942][   T38] net_ratelimit: 79 callbacks suppressed
[  499.148965][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  499.149001][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  499.175074][T17619] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2831'.
[  499.275870][T17622] bridge11: entered promiscuous mode
[  499.278000][T17626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2834'.
[  499.279974][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  499.280015][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  499.297826][T17625] netlink: 'syz.3.2835': attribute type 83 has an invalid length.
[  499.390459][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  499.390509][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  499.499738][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  499.499789][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  499.503410][T17635] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2838'.
[  499.504382][T17635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2838'.
[  499.505220][T17635] netlink: 'syz.3.2838': attribute type 12 has an invalid length.
[  499.505239][T17635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2838'.
[  499.510589][T17635] nbd: illegal input index 524288
[  499.609284][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  499.609335][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  499.611437][T17639] tipc: New replicast peer: 172.20.20.187
[  499.611594][T17639] tipc: Enabled bearer <udp:syz0>, priority 10
[  499.730759][T17641] smbdirect: ib_dev[syz1] removed
[  500.226109][T17665] bond17: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  500.227492][T17665] bond17 (unregistering): Released all slaves
[  500.447691][T17679] x_tables: duplicate entry at hook 1
[  500.598867][T17683] syzkaller0: entered promiscuous mode
[  500.598904][T17683] syzkaller0: entered allmulticast mode
[  501.671326][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  502.228895][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  502.717113][T16323] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c
[  503.736242][T17808] __nla_validate_parse: 8 callbacks suppressed
[  503.736268][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'.
[  503.783209][T17808] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  503.793505][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'.
[  503.835626][T17808] hsr_slave_1 (unregistering): left promiscuous mode
[  504.147573][T17822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2880'.
[  504.292536][T17832] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  504.293672][T17832] net_ratelimit: 78 callbacks suppressed
[  504.293688][T17832] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  504.309125][T17831] syzkaller0: entered promiscuous mode
[  504.309148][T17831] syzkaller0: entered allmulticast mode
[  504.320107][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  504.320154][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  504.355710][T17837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2883'.
[  504.360319][T17839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2883'.
[  504.548653][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  504.548703][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  504.629314][T17848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  504.662215][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  504.686378][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  504.769512][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'.
[  504.769669][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  504.794689][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  504.864905][T17857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2889'.
[  504.874839][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2888'.
[  504.879563][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  504.975322][T17864] netlink: 'syz.4.2890': attribute type 2 has an invalid length.
[  505.107293][T17866] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2891'.
[  505.137958][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.150491][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.156641][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.167371][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.194842][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.195871][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.209563][T17874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.239320][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.250030][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.280208][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.299087][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.320328][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.322116][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.323852][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.325538][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.327252][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.381082][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.383025][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.384829][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.386635][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.416584][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.437484][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.492705][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.521909][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.539405][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.555784][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.580752][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.587888][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.598269][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.611385][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.635040][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.636850][T17870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  505.686443][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'.
[  507.268737][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  507.283496][T17956] sit0: entered promiscuous mode
[  507.572337][T17961] syzkaller1: tun_chr_ioctl cmd 2147767521
[  508.258299][T17994] netlink: 'syz.3.2918': attribute type 2 has an invalid length.
[  508.695266][T18008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.884432][T13743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  508.895923][T13743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  508.906953][T13743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  508.916496][T13743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  508.924304][T13743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  509.433383][T18043] __nla_validate_parse: 9 callbacks suppressed
[  509.433419][T18043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2927'.
[  509.490376][   T59] net_ratelimit: 77 callbacks suppressed
[  509.490401][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  509.490443][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  509.600548][   T59] bond4: (slave bridge2): failed to get link speed/duplex
[  509.600597][   T59] bond4: (slave bridge1): failed to get link speed/duplex
[  509.711775][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  509.711824][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  509.759456][T18054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2931'.
[  509.759493][T18054] bridge_slave_1: entered allmulticast mode
[  509.819665][ T6671] bond4: (slave bridge2): failed to get link speed/duplex
[  509.819716][ T6671] bond4: (slave bridge1): failed to get link speed/duplex
[  509.971572][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  509.971630][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  510.298293][T18084] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2933'.
[  510.784393][T18099] netlink: 'syz.4.2938': attribute type 1 has an invalid length.
[  510.976586][T18099] bond17: entered promiscuous mode
[  510.978298][T18095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2938'.
[  510.980193][T18099] 8021q: adding VLAN 0 to HW filter on device bond17
[  510.982979][T18095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2938'.
[  511.028640][ T9581] Bluetooth: hci5: command tx timeout
[  511.148256][T18095] bond17: entered allmulticast mode
[  511.162593][T18109] bond0: Device is already in use.
[  511.405908][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'.
[  511.413801][T18122] Cannot find del_set index 4 as target
[  511.550198][T17306] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.017101][T18139] netlink: 'syz.2.2941': attribute type 1 has an invalid length.
[  512.271043][T18139] 8021q: adding VLAN 0 to HW filter on device bond19
[  512.308759][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.450368][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'.
[  512.786962][T18151] bond19: (slave veth7): Enslaving as an active interface with a down link
[  512.787722][T18015] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.787918][T18015] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.788082][T18015] bridge_slave_0: entered allmulticast mode
[  512.821883][T18015] bridge_slave_0: entered promiscuous mode
[  512.876792][T18154] lo: left allmulticast mode
[  512.894136][T18154] gre0: left promiscuous mode
[  512.894163][T18154] gre0: left allmulticast mode
[  512.906154][T18154] 0ªî{X¹¦: left allmulticast mode
[  512.953691][T18154] syz_tun: left promiscuous mode
[  512.975256][T18154] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.060693][T18154] veth1_vlan: left promiscuous mode
[  513.062094][T18154] veth0_vlan: left promiscuous mode
[  513.064105][T18154] veth0_vlan: entered promiscuous mode
[  513.065523][T18154] veth1_vlan: entered promiscuous mode
[  513.065757][T18154] macvlan0: left promiscuous mode
[  513.102076][T18154] veth1_macvtap: left promiscuous mode
[  513.103490][T18154] veth0_macvtap: left promiscuous mode
[  513.104929][T18154] veth0_macvtap: entered promiscuous mode
[  513.106366][T18154] veth1_macvtap: entered promiscuous mode
[  513.108999][ T9581] Bluetooth: hci5: command tx timeout
[  513.147805][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  513.158264][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  513.167952][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  513.178249][T18154] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  513.191928][T18154] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  513.209237][T18154] bond1: left allmulticast mode
[  513.209261][T18154] bridge2: left allmulticast mode
[  513.210486][T18154] 8021q: adding VLAN 0 to HW filter on device bond1
[  513.214028][T18154] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.246197][  T945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  513.263194][T18154] 8021q: adding VLAN 0 to HW filter on device bond3
[  513.265047][T18154] veth3: left allmulticast mode
[  513.296006][T18154] 8021q: adding VLAN 0 to HW filter on device bond4
[  513.298144][T18154] 8021q: adding VLAN 0 to HW filter on device bond5
[  513.315150][T18154] 8021q: adding VLAN 0 to HW filter on device bond6
[  513.316965][T18154] 8021q: adding VLAN 0 to HW filter on device bond7
[  513.317871][T18154] bond8: left promiscuous mode
[  513.317895][T18154] bond8: left allmulticast mode
[  513.318278][T18154] 8021q: adding VLAN 0 to HW filter on device bond8
[  513.358288][T18154] bond9: left promiscuous mode
[  513.358319][T18154] bond9: left allmulticast mode
[  513.360313][T18154] 8021q: adding VLAN 0 to HW filter on device bond9
[  513.363243][T18154] 8021q: adding VLAN 0 to HW filter on device bond10
[  513.367005][T18154] 8021q: adding VLAN 0 to HW filter on device bond11
[  513.368064][T18154] bond12: left promiscuous mode
[  513.368082][T18154] ip6gre1: left promiscuous mode
[  513.370492][T18154] 8021q: adding VLAN 0 to HW filter on device bond12
[  513.372687][T18154] 8021q: adding VLAN 0 to HW filter on device bond13
[  513.373495][T18154] bond13: entered allmulticast mode
[  513.373770][T18154] macvtap1: left allmulticast mode
[  513.373783][T18154] bond13: left allmulticast mode
[  513.374260][T18154] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  513.385015][T18154] ipvlan3: left promiscuous mode
[  513.386000][T18154] sit2: left promiscuous mode
[  513.391526][T18154] bond15: left promiscuous mode
[  513.391550][T18154] bond15: left allmulticast mode
[  513.392051][T18154] 8021q: adding VLAN 0 to HW filter on device bond15
[  513.403560][T18154] 8021q: adding VLAN 0 to HW filter on device bond16
[  513.406422][T18154] bond17: left promiscuous mode
[  513.413256][T18154] veth5: left allmulticast mode
[  513.596827][T18015] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.597041][T18015] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.597188][T18015] bridge_slave_1: entered allmulticast mode
[  513.624251][T18015] bridge_slave_1: entered promiscuous mode
[  513.650965][ T9545] syz0: Port: 1 Link ACTIVE
[  513.658101][T18180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2946'.
[  513.768799][ T9544] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  513.771548][ T6671] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.771584][ T6671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.823715][ T6671] bond16: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  513.824046][ T6671] bond16: (slave veth0_to_bond): making interface the new active one
[  513.855565][ T6671] bond16: active interface up!
[  513.859703][T17326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.859737][T17326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.916450][T17326] bond19: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  513.931582][T17326] bond19: (slave veth7): making interface the new active one
[  513.954595][T17326] bond19: active interface up!
[  513.959477][   T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.959508][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.049717][ T6671] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  514.049756][ T6671] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.121214][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.142200][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.347211][T18015] team0: Port device team_slave_0 added
[  514.347869][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  514.533723][T18015] team0: Port device team_slave_1 added
[  514.662593][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.662611][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.662634][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.664953][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.664968][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  514.664991][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.995553][T18015] hsr_slave_0: entered promiscuous mode
[  515.004755][T18015] hsr_slave_1: entered promiscuous mode
[  515.006844][T18015] debugfs: 'hsr0' already exists in 'hsr'
[  515.006870][T18015] Cannot create hsr debugfs directory
[  515.193416][ T9581] Bluetooth: hci5: command tx timeout
[  515.274169][T18244] xt_hashlimit: size too large, truncated to 1048576
[  515.764621][T17325] net_ratelimit: 24 callbacks suppressed
[  515.764648][T17325] bond4: (slave bridge2): failed to get link speed/duplex
[  515.783937][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  515.818901][T18259] netlink: 'syz.4.2958': attribute type 9 has an invalid length.
[  515.871869][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  515.896273][T17327] bond4: (slave bridge1): failed to get link speed/duplex
[  515.925166][T18266] netlink: 'syz.3.2960': attribute type 2 has an invalid length.
[  515.982419][T17326] bond4: (slave bridge2): failed to get link speed/duplex
[  516.000156][T17326] bond4: (slave bridge1): failed to get link speed/duplex
[  516.081715][T16323] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  516.089201][T16323] bond4: (slave bridge2): failed to get link speed/duplex
[  516.111017][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  516.351652][T18015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.351689][T18015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.351715][T18015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  516.351739][T18015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  516.484138][T18015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.484180][T18015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.484205][T18015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  516.484231][T18015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  516.552588][T16323] bond4: (slave bridge1): failed to get link speed/duplex
[  516.552684][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  516.621725][T18015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.621764][T18015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.621789][T18015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  516.621814][T18015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  516.743888][T18015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.743915][T18015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.743930][T18015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  516.743946][T18015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0
[  517.109854][T17327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.110045][T17327] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  517.268517][ T9581] Bluetooth: hci5: command tx timeout
[  517.348765][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.149337][ T9551] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  518.505477][T18259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.526360][T18015] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  518.569407][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  518.570691][T18015] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  518.636305][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  518.637370][T18015] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  518.669629][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  518.674712][T18015] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  518.724703][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  518.827041][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2969'.
[  518.922882][T18015] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.004156][T18326] syzkaller0: entered promiscuous mode
[  519.004182][T18326] syzkaller0: entered allmulticast mode
[  519.044275][T18015] 8021q: adding VLAN 0 to HW filter on device team0
[  519.055983][T18321] netlink: 'syz.1.2970': attribute type 2 has an invalid length.
[  519.075812][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.075938][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  519.157960][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.158082][ T6670] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.524523][ T6670] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  520.257228][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  520.270464][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2980'.
[  520.345501][T18015] veth0_vlan: entered promiscuous mode
[  520.358889][T18015] veth1_vlan: entered promiscuous mode
[  520.397432][T18015] veth0_macvtap: entered promiscuous mode
[  520.410801][T18015] veth1_macvtap: entered promiscuous mode
[  520.434623][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.451870][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.489939][  T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.510745][  T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.553263][ T6687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.570563][ T6687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.808699][   T13] net_ratelimit: 62 callbacks suppressed
[  520.808724][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  520.808761][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  520.928688][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  520.928739][   T13] bond4: (slave bridge2): failed to get link speed/duplex
[  521.038616][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  521.059483][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  521.148632][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  521.169500][ T6669] bond4: (slave bridge1): failed to get link speed/duplex
[  521.258674][ T6669] bond4: (slave bridge2): failed to get link speed/duplex
[  521.298653][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  521.349742][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  522.389414][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  522.394871][T18341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  522.514598][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.514621][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.600168][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  522.600193][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  522.737935][T18390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.903629][T18393] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  522.980955][T18411] nbd3: detected capacity change from 0 to 63
[  523.017517][T18404] bond10: option packets_per_slave: invalid value (926363952)
[  523.017545][T18404] bond10: option packets_per_slave: allowed values 0 - 65535
[  523.034842][T18410] Bluetooth: hci0: unsupported parameter 5135
[  523.034867][T18410] Bluetooth: hci0: unsupported parameter 8192
[  523.034880][T18410] Bluetooth: hci0: unsupported parameter 5135
[  523.034893][T18410] Bluetooth: hci0: unsupported parameter 8192
[  523.281394][ T9573] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  523.286589][ T9573] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  523.289554][ T9573] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  523.309042][ T9573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  523.309685][ T9573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  523.334970][T13743] 
[  523.337370][T13743] ======================================================
[  523.344478][T13743] WARNING: possible circular locking dependency detected
[  523.351656][T13743] syzkaller #0 Not tainted
[  523.356104][T13743] ------------------------------------------------------
[  523.363209][T13743] kworker/u9:6/13743 is trying to acquire lock:
[  523.369483][T13743] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0
[  523.380113][T13743] 
[  523.380113][T13743] but task is already holding lock:
[  523.387538][T13743] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  523.397002][T13743] 
[  523.397002][T13743] which lock already depends on the new lock.
[  523.397002][T13743] 
[  523.407405][T13743] 
[  523.407405][T13743] the existing dependency chain (in reverse order) is:
[  523.416422][T13743] 
[  523.416422][T13743] -> #10 (&root->kernfs_rwsem){++++}-{4:4}:
[  523.424625][T13743]        down_write+0x96/0x200
[  523.429846][T13743]        kernfs_add_one+0x41/0x6f0
[  523.435012][T13743]        kernfs_create_dir_ns+0x1a1/0x230
[  523.440767][T13743]        internal_create_group+0x440/0x1180
[  523.446725][T13743]        cpuhp_invoke_callback+0x434/0x810
[  523.452973][T13743]        cpuhp_issue_call+0x3f0/0x750
[  523.458453][T13743]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[  523.465063][T13743]        __cpuhp_setup_state+0x3f/0x60
[  523.470545][T13743]        do_one_initcall+0x250/0x870
[  523.475859][T13743]        do_initcall_level+0x10a/0x1a0
[  523.481552][T13743]        do_initcalls+0x59/0xa0
[  523.486442][T13743]        kernel_init_freeable+0x29d/0x3e0
[  523.492166][T13743]        kernel_init+0x22/0x1d0
[  523.497030][T13743]        ret_from_fork+0x514/0xb70
[  523.502169][T13743]        ret_from_fork_asm+0x1a/0x30
[  523.507466][T13743] 
[  523.507466][T13743] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}:
[  523.515467][T13743] 
[  523.515467][T13743] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  523.523221][T13743]        cpus_read_lock+0x42/0x160
[  523.528368][T13743]        static_key_slow_inc+0x12/0x30
[  523.533888][T13743]        setup_udp_tunnel_sock+0x2df/0x4f0
[  523.539895][T13743]        l2tp_tunnel_register+0xe77/0x1570
[  523.545819][T13743]        pppol2tp_connect+0x8e3/0x18b0
[  523.551320][T13743]        __sys_connect+0x316/0x450
[  523.553145][ T9581] block nbd3: Receive control failed (result -104)
[  523.563008][T13743]        __x64_sys_connect+0x7a/0x90
[  523.568323][T13743]        do_syscall_64+0x166/0x520
[  523.573481][T13743]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.579962][T13743] 
[  523.579962][T13743] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  523.587721][T13743]        lock_sock_nested+0x41/0x100
[  523.593035][T13743]        inet_shutdown+0x6a/0x390
[  523.598244][T13743]        nbd_mark_nsock_dead+0x2cb/0x550
[  523.604325][T13743]        recv_work+0x1cee/0x1e10
[  523.609961][T13743]        process_scheduled_works+0xc3d/0x1630
[  523.616211][T13743]        worker_thread+0xa47/0xfb0
[  523.621353][T13743]        kthread+0x38b/0x480
[  523.625971][T13743]        ret_from_fork+0x514/0xb70
[  523.631099][T13743]        ret_from_fork_asm+0x1a/0x30
[  523.636693][T13743] 
[  523.636693][T13743] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  523.644745][T13743]        __mutex_lock+0x19d/0x1550
[  523.654301][T13743]        nbd_queue_rq+0x373/0xff0
[  523.659367][T13743]        blk_mq_dispatch_rq_list+0x499/0x1990
[  523.665575][T13743]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  523.672512][T13743]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  523.679031][T13743]        blk_mq_run_work_fn+0x16c/0x300
[  523.684626][T13743]        process_scheduled_works+0xc3d/0x1630
[  523.690735][T13743]        worker_thread+0xa47/0xfb0
[  523.695984][T13743]        kthread+0x38b/0x480
[  523.700617][T13743]        ret_from_fork+0x514/0xb70
[  523.705776][T13743]        ret_from_fork_asm+0x1a/0x30
[  523.711117][T13743] 
[  523.711117][T13743] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  523.718412][T13743]        __mutex_lock+0x19d/0x1550
[  523.723721][T13743]        nbd_queue_rq+0xc1/0xff0
[  523.728695][T13743]        blk_mq_dispatch_rq_list+0x499/0x1990
[  523.734807][T13743]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  523.741698][T13743]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  523.748255][T13743]        blk_mq_run_work_fn+0x16c/0x300
[  523.753867][T13743]        process_scheduled_works+0xc3d/0x1630
[  523.759985][T13743]        worker_thread+0xa47/0xfb0
[  523.765141][T13743]        kthread+0x38b/0x480
[  523.769751][T13743]        ret_from_fork+0x514/0xb70
[  523.774896][T13743]        ret_from_fork_asm+0x1a/0x30
[  523.780337][T13743] 
[  523.780337][T13743] -> #4 (set->srcu){.+.+}-{0:0}:
[  523.787528][T13743]        __synchronize_srcu+0xc9/0x2f0
[  523.793008][T13743]        elevator_switch+0x1e8/0x7b0
[  523.798373][T13743]        elevator_change+0x2fa/0x480
[  523.803718][T13743]        elevator_set_default+0x375/0x440
[  523.809523][T13743]        blk_register_queue+0x3f3/0x4e0
[  523.815128][T13743]        __add_disk+0x6b8/0xdb0
[  523.820153][T13743]        add_disk_fwnode+0x100/0x3a0
[  523.825472][T13743]        nbd_dev_add+0x733/0xb60
[  523.830444][T13743]        nbd_init+0x168/0x1f0
[  523.835225][T13743]        do_one_initcall+0x250/0x870
[  523.840515][T13743]        do_initcall_level+0x10a/0x1a0
[  523.845973][T13743]        do_initcalls+0x59/0xa0
[  523.850904][T13743]        kernel_init_freeable+0x29d/0x3e0
[  523.856621][T13743]        kernel_init+0x22/0x1d0
[  523.861484][T13743]        ret_from_fork+0x514/0xb70
[  523.866677][T13743]        ret_from_fork_asm+0x1a/0x30
[  523.871960][T13743] 
[  523.871960][T13743] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  523.879791][T13743]        __mutex_lock+0x19d/0x1550
[  523.884913][T13743]        elevator_change+0x1af/0x480
[  523.890191][T13743]        elevator_set_none+0xb5/0x140
[  523.895644][T13743]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  523.901990][T13743]        nbd_start_device+0x189/0xb30
[  523.907359][T13743]        nbd_genl_connect+0x167d/0x1cd0
[  523.912914][T13743]        genl_family_rcv_msg_doit+0x233/0x340
[  523.918979][T13743]        genl_rcv_msg+0x614/0x7a0
[  523.924019][T13743]        netlink_rcv_skb+0x226/0x4a0
[  523.929369][T13743]        genl_rcv+0x28/0x40
[  523.933925][T13743]        netlink_unicast+0x7bd/0x940
[  523.939226][T13743]        netlink_sendmsg+0x813/0xb40
[  523.944528][T13743]        sock_sendmsg_nosec+0x14e/0x190
[  523.950086][T13743]        ____sys_sendmsg+0x54e/0x850
[  523.955371][T13743]        ___sys_sendmsg+0x2a5/0x360
[  523.960582][T13743]        __x64_sys_sendmsg+0x1b1/0x290
[  523.966048][T13743]        do_syscall_64+0x166/0x520
[  523.971169][T13743]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.977577][T13743] 
[  523.977577][T13743] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  523.986887][T13743]        blk_alloc_queue+0x544/0x690
[  523.992202][T13743]        __blk_mq_alloc_disk+0x194/0x390
[  523.997848][T13743]        nbd_dev_add+0x494/0xb60
[  524.002778][T13743]        nbd_init+0x168/0x1f0
[  524.007464][T13743]        do_one_initcall+0x250/0x870
[  524.012749][T13743]        do_initcall_level+0x10a/0x1a0
[  524.018201][T13743]        do_initcalls+0x59/0xa0
[  524.023043][T13743]        kernel_init_freeable+0x29d/0x3e0
[  524.028771][T13743]        kernel_init+0x22/0x1d0
[  524.033664][T13743]        ret_from_fork+0x514/0xb70
[  524.038770][T13743]        ret_from_fork_asm+0x1a/0x30
[  524.044074][T13743] 
[  524.044074][T13743] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  524.051807][T13743]        fs_reclaim_acquire+0x71/0x100
[  524.057263][T13743]        kmem_cache_alloc_noprof+0x5f/0x600
[  524.063165][T13743]        __kernfs_iattrs+0xdd/0x380
[  524.068357][T13743]        kernfs_iop_setattr+0xe6/0x3f0
[  524.073826][T13743]        notify_change+0xbba/0xea0
[  524.078950][T13743]        do_truncate+0x1c2/0x250
[  524.083930][T13743]        path_openat+0x15b5/0x1d60
[  524.089038][T13743]        do_file_open+0x23e/0x4a0
[  524.094052][T13743]        do_sys_openat2+0x115/0x200
[  524.099261][T13743]        __x64_sys_openat+0x138/0x170
[  524.104639][T13743]        do_syscall_64+0x166/0x520
[  524.109762][T13743]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.116181][T13743] 
[  524.116181][T13743] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  524.124698][T13743]        __lock_acquire+0x164c/0x2de0
[  524.130087][T13743]        lock_acquire+0x115/0x350
[  524.135134][T13743]        down_write+0x96/0x200
[  524.139910][T13743]        kernfs_link_sibling+0x4c7/0x5a0
[  524.145535][T13743]        kernfs_add_one+0x2db/0x6f0
[  524.150754][T13743]        kernfs_create_dir_ns+0x1a1/0x230
[  524.156479][T13743]        sysfs_create_dir_ns+0x12f/0x2a0
[  524.162125][T13743]        kobject_add_internal+0x622/0xcd0
[  524.167901][T13743]        kobject_add+0x163/0x240
[  524.172830][T13743]        device_add+0x3fa/0xb80
[  524.177698][T13743]        hci_conn_add_sysfs+0xd5/0x210
[  524.183182][T13743]        hci_conn_complete_evt+0x8a8/0x1350
[  524.189129][T13743]        hci_event_packet+0x6cd/0xf10
[  524.194494][T13743]        hci_rx_work+0x3ee/0x1020
[  524.199539][T13743]        process_scheduled_works+0xc3d/0x1630
[  524.205604][T13743]        worker_thread+0xa47/0xfb0
[  524.210710][T13743]        kthread+0x38b/0x480
[  524.215292][T13743]        ret_from_fork+0x514/0xb70
[  524.220410][T13743]        ret_from_fork_asm+0x1a/0x30
[  524.225693][T13743] 
[  524.225693][T13743] other info that might help us debug this:
[  524.225693][T13743] 
[  524.235920][T13743] Chain exists of:
[  524.235920][T13743]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  524.235920][T13743] 
[  524.250621][T13743]  Possible unsafe locking scenario:
[  524.250621][T13743] 
[  524.258116][T13743]        CPU0                    CPU1
[  524.263553][T13743]        ----                    ----
[  524.268941][T13743]   lock(&root->kernfs_rwsem);
[  524.273707][T13743]                                lock(cpuhp_state_mutex);
[  524.280810][T13743]                                lock(&root->kernfs_rwsem);
[  524.288094][T13743]   lock(&root->kernfs_iattr_rwsem);
[  524.293376][T13743] 
[  524.293376][T13743]  *** DEADLOCK ***
[  524.293376][T13743] 
[  524.301545][T13743] locks held by kworker/u9:6/13743: 4, last CPU#0:
[  524.308067][T13743]  #0: ffff888050b58940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  524.319064][T13743]  #1: ffffc90006b6fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  524.331055][T13743]  #2: ffff888053a300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350
[  524.340884][T13743]  #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0
[  524.350713][T13743] 
[  524.350713][T13743] stack backtrace:
[  524.356602][T13743] CPU: 0 UID: 0 PID: 13743 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  524.366163][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  524.376223][T13743] Workqueue: hci4 hci_rx_work
[  524.380909][T13743] Call Trace:
[  524.384189][T13743]  <TASK>
[  524.387117][T13743]  dump_stack_lvl+0xe8/0x150
[  524.391709][T13743]  print_circular_bug+0x2e2/0x300
[  524.396953][T13743]  check_noncircular+0x12f/0x150
[  524.401913][T13743]  __lock_acquire+0x164c/0x2de0
[  524.406779][T13743]  ? __lock_acquire+0x747/0x2de0
[  524.411723][T13743]  lock_acquire+0x115/0x350
[  524.416223][T13743]  ? kernfs_link_sibling+0x4c7/0x5a0
[  524.421510][T13743]  down_write+0x96/0x200
[  524.426474][T13743]  ? kernfs_link_sibling+0x4c7/0x5a0
[  524.431761][T13743]  ? __pfx_down_write+0x10/0x10
[  524.436713][T13743]  ? kernfs_root+0x1c/0x230
[  524.441234][T13743]  ? kernfs_root+0x1c/0x230
[  524.445741][T13743]  ? kernfs_root+0x1c/0x230
[  524.450262][T13743]  ? kernfs_root+0x1ea/0x230
[  524.454854][T13743]  kernfs_link_sibling+0x4c7/0x5a0
[  524.459973][T13743]  kernfs_add_one+0x2db/0x6f0
[  524.465194][T13743]  kernfs_create_dir_ns+0x1a1/0x230
[  524.470558][T13743]  sysfs_create_dir_ns+0x12f/0x2a0
[  524.475720][T13743]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  524.482065][T13743]  ? do_raw_spin_unlock+0xf5/0x200
[  524.487267][T13743]  kobject_add_internal+0x622/0xcd0
[  524.492751][T13743]  kobject_add+0x163/0x240
[  524.497192][T13743]  ? __pfx_kobject_add+0x10/0x10
[  524.502130][T13743]  ? get_device_parent+0x366/0x3a0
[  524.507234][T13743]  device_add+0x3fa/0xb80
[  524.511561][T13743]  hci_conn_add_sysfs+0xd5/0x210
[  524.516595][T13743]  hci_conn_complete_evt+0x8a8/0x1350
[  524.521978][T13743]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  524.527966][T13743]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  524.533783][T13743]  ? skb_pull_data+0xf0/0x200
[  524.538530][T13743]  hci_event_packet+0x6cd/0xf10
[  524.543401][T13743]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  524.549199][T13743]  ? __pfx_hci_event_packet+0x10/0x10
[  524.554772][T13743]  ? audit_filter_rules+0x45f0/0x5d10
[  524.560186][T13743]  ? hci_send_to_monitor+0xe2/0x590
[  524.565445][T13743]  hci_rx_work+0x3ee/0x1020
[  524.569971][T13743]  ? process_scheduled_works+0x97a/0x1630
[  524.575711][T13743]  process_scheduled_works+0xc3d/0x1630
[  524.581266][T13743]  ? __pfx_process_scheduled_works+0x10/0x10
[  524.587255][T13743]  ? assign_work+0x3cf/0x5d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  524.591842][T13743]  worker_thread+0xa47/0xfb0
[  524.596441][T13743]  ? __kthread_parkme+0x71/0x1f0
[  524.601439][T13743]  kthread+0x38b/0x480
[  524.605519][T13743]  ? __pfx_worker_thread+0x10/0x10
[  524.610629][T13743]  ? __pfx_kthread+0x10/0x10
[  524.615223][T13743]  ret_from_fork+0x514/0xb70
[  524.619818][T13743]  ? __pfx_ret_from_fork+0x10/0x10
[  524.624946][T13743]  ? __switch_to+0xc89/0x1420
[  524.629682][T13743]  ? __pfx_kthread+0x10/0x10
[  524.634328][T13743]  ret_from_fork_asm+0x1a/0x30
[  524.639209][T13743]  </TASK>
[  524.707035][T18404] bond10 (unregistering): Released all slaves
[  525.404283][T18394] tipc: Resetting bearer <eth:syz_tun>
[  525.453747][T18394] bond0: (slave syz_tun): Releasing backup interface
[  525.462949][T18394] tipc: Resetting bearer <eth:syz_tun>
[  525.463772][T18394] tipc: Disabling bearer <eth:syz_tun>
[  525.705466][ T6682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.734670][ T6682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.784867][ T6682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.818608][ T6687] net_ratelimit: 41 callbacks suppressed
[  525.818633][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  525.844296][ T6682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.858582][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  525.912274][ T6682] bridge_slave_1: left allmulticast mode
[  525.912300][ T6682] bridge_slave_1: left promiscuous mode
[  525.912454][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.915735][ T6682] bridge_slave_0: left allmulticast mode
[  525.915761][ T6682] bridge_slave_0: left promiscuous mode
[  525.915901][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.988141][ T6682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.998855][ T6682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.000116][ T6682] bond0 (unregistering): Released all slaves
[  526.033542][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  526.033582][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  526.178525][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  526.178568][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  526.289364][   T38] bond4: (slave bridge2): failed to get link speed/duplex
[  526.289406][   T38] bond4: (slave bridge1): failed to get link speed/duplex
[  526.337703][ T6682] hsr_slave_0: left promiscuous mode
[  526.338156][ T6682] hsr_slave_1: left promiscuous mode
[  526.349930][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.349960][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.350482][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.350498][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.354062][ T6682] veth1_macvtap: left promiscuous mode
[  526.354091][ T6682] veth0_macvtap: left promiscuous mode
[  526.354157][ T6682] veth1_vlan: left promiscuous mode
[  526.354204][ T6682] veth0_vlan: left promiscuous mode
[  526.482897][ T6682] team0 (unregistering): Port device team_slave_1 removed
[  526.486353][ T6682] team0 (unregistering): Port device team_slave_0 removed
[  526.546012][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  526.558632][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  526.558667][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  526.887800][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  527.114369][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  527.342212][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  527.428616][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  529.828976][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  529.834276][ T2405] block nbd3: Connection timed out, retrying (0/1 alive)
[  529.834323][ T2405] block nbd3: Connection timed out, retrying (0/1 alive)
[  529.834351][ T2405] block nbd3: Connection timed out, retrying (0/1 alive)
[  529.834378][ T2405] block nbd3: Connection timed out, retrying (0/1 alive)
[  529.834429][ T2405] block nbd3: Dead connection, failed to find a fallback
[  529.834443][ T2405] block nbd3: shutting down sockets
[  529.834454][ T2405] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.834479][ T2405] Buffer I/O error on dev nbd3, logical block 3, async page read
[  529.834502][ T2405] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.834521][ T2405] Buffer I/O error on dev nbd3, logical block 2, async page read
[  529.834536][ T2405] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.834555][ T2405] Buffer I/O error on dev nbd3, logical block 1, async page read
[  529.834570][ T2405] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.834588][ T2405] Buffer I/O error on dev nbd3, logical block 0, async page read
[  529.834813][ T2405] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  529.834835][ T2405] Buffer I/O error on dev nbd3, logical block 0, async page read
[  529.834847][ T2405] Buffer I/O error on dev nbd3, logical block 1, async page read
[  529.834859][ T2405] Buffer I/O error on dev nbd3, logical block 2, async page read
[  529.834871][ T2405] Buffer I/O error on dev nbd3, logical block 3, async page read
[  529.834958][ T2405] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.834980][ T2405] Buffer I/O error on dev nbd3, logical block 0, async page read
[  529.835043][ T2405] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.835064][ T2405] Buffer I/O error on dev nbd3, logical block 1, async page read
[  529.835127][ T2405] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.835199][ T2405] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.835281][ T2405] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  529.837292][T18245] ldm_validate_partition_table(): Disk read failed.
[  529.838151][T18245] Dev nbd3: unable to read RDB block 0
[  529.839490][T18245]  nbd3: unable to read partition table
[  529.846449][T18245] ldm_validate_partition_table(): Disk read failed.
[  529.847308][T18245] Dev nbd3: unable to read RDB block 0
[  529.848265][T18245]  nbd3: unable to read partition table
[  530.918629][ T6687] net_ratelimit: 76 callbacks suppressed
[  530.918654][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  530.930259][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  531.028786][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  531.038831][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  531.138710][ T6682] bond4: (slave bridge2): failed to get link speed/duplex
[  531.149790][ T6687] bond4: (slave bridge1): failed to get link speed/duplex
[  531.249071][T17324] bond4: (slave bridge2): failed to get link speed/duplex
[  531.259990][ T6682] bond4: (slave bridge1): failed to get link speed/duplex
[  531.358734][ T6687] bond4: (slave bridge2): failed to get link speed/duplex
[  531.369834][T17324] bond4: (slave bridge1): failed to get link speed/duplex
[  532.468576][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!