last executing test programs:

3.721834784s ago: executing program 4 (id=8212):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
unshare(0x22020600)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/37, 0x25, 0xe9})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100080000008510000001000000950000000000000018400000ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0xac}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
unshare(0x22020600) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000000)=""/37, 0x25, 0xe9}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100080000008510000001000000950000000000000018400000ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x94) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async)

3.55166371s ago: executing program 4 (id=8216):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="651968c4839dd0a466979619b81dc1dc8adf", 0x12}], 0x1, 0x0, 0x0, 0x10}, 0x804)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47e"], 0x1c}}, 0x0)

3.449312507s ago: executing program 4 (id=8218):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="050000007f00000069113200000000008510000002000000850000000500000095001400000000009500a50500000000b2a91568f8b3edda83c1fedc359c57803bbc0ff98905e4ae6ac066fea5c765be2f7fd7b702d30af031a3ccd36b79059c7ddc53a05932379a91d4aa99281fe181b58cf8e40471cb144a3616978d5889951b7cea1d79ef9147bf6c41554232e407744adb1f4f3395f8b9ee0d64c30dada8ea7f4f6f5d71db8b23a494fcee8de3ca54e2502df1aec58721009b2d6d976cb4fd"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r4}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close(r7)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000180)=0x8004, 0x4)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000884703040100ff7f05000800031200180610000401809d730000045c8d852922dc1c28ae6a5773242d9ebbbbbbbb58bb7ce0689e6829d41dff"], 0x3b)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r10, 0x25, 0x0, @void}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x0, '\x00', r10, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50)

3.070480298s ago: executing program 4 (id=8224):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee754847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0x38}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="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", 0xfb}], 0x68, &(0x7f0000002180)=ANY=[@ANYRESDEC=r1], 0x1148}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0)

2.758576251s ago: executing program 4 (id=8228):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="651968c4839dd0a466979619b81dc1dc8adf", 0x12}], 0x1, 0x0, 0x0, 0x10}, 0x804)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be70"], 0x1c}}, 0x0)

2.66133752s ago: executing program 4 (id=8231):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x100}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x7f}}]}, 0x44}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r5=>0x0, 0x8016, 0x1, 0x6, 0x9, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x66, 0x0, 0x5, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x1c, 0x35, 0x0, 0x0, [0xf403, 0x7c2d, 0x1, 0x1ff, 0x800, 0xc]}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x5, [0x9, 0x80000000, 0x7]}, @noop, @timestamp={0x44, 0x14, 0xc3, 0x0, 0x2, [0x7, 0xf28, 0x6796f6f8, 0x8]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x18c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ppoll(&(0x7f00000000c0)=[{r2, 0x10}], 0x1, 0x0, 0x0, 0x0)

2.418752787s ago: executing program 3 (id=8233):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x5c)
unshare(0x2a060400)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x8, 0x0, 0x0}}, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x9, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x73, &(0x7f0000000680)=""/115, 0x41100, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000006c0)='./cgroup/cgroup.procs/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000010a40)=[0x93e6], 0x0, 0x0, 0x1}}, 0x40)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000fcffffffffffff53fa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r7, 0x25, 0x4, @void}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
syz_emit_ethernet(0x7a, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0161b7", 0x44, 0x2f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x1, {0x3ff}}}, {0x8, 0x22eb, 0x5, {{0x1, 0x2, 0xdb, 0x1, 0x0, 0x1, 0x5, 0x7}, 0x2, {0x2, 0x4, 0x0, 0x13, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
close(r9)

2.04581289s ago: executing program 2 (id=8237):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000600)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4d25}, 0x400000, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0xb8}}, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000500039042dbd70000010000000000000", @ANYRES32=r5, @ANYBLOB="0118020043110000200012800b00010065727370616e000010000280040012000800140001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40418c0}, 0x4008000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r12, 0x1, 0x70bd29, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000001540)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x94fe1f99f47dfc1a}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x17, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0x6, 0xa, 0x18, 0x10}, @ldst={0x0, 0x0, 0x6, 0x4, 0x4, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x2, 0x5, 0xd8, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001180)=[r1], &(0x7f00000011c0)=[{0x1, 0x3, 0xc, 0xb}, {0x0, 0x2, 0x3, 0xa}, {0x5, 0x4, 0x7, 0x9}, {0x3, 0x4, 0xb, 0x2}, {0x0, 0x4, 0x7, 0x2}], 0x10, 0x2}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})

1.986065483s ago: executing program 0 (id=8238):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a87d8d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0x0)
ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
epoll_create(0x9) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a87d8d, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0x0) (async)
ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) (async)

1.780793757s ago: executing program 0 (id=8239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r7 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r3, @ANYBLOB="14000200fe5b66"], 0x2c}}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r9, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01"], 0x3c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$BTRFS_IOC_BALANCE(r10, 0x5000940c, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0x3e)

1.757689205s ago: executing program 3 (id=8240):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
write(r0, 0x0, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYBLOB="399d499b1317c40a09d52f573b95e3fd408dceba956fdfbe4f8b7a286f974875627c1d4ef0298f272ee3b2f6c888274140e526e5bfbed234ab1e9381ad64c66877fd8ec4a834d02ef350286e7602fe829c05062248", @ANYBLOB="000000000000000000000000000000000000000099deebf0474113b5587fc97e95e7e8565ce65ab4516577bf0e6e11234fe3272d2c336e49d5e681abd3a30e47fb65da1929ea08bbdbae154b6c7a02e0e683d17084ab9b2d2f88cfdfcca1384c06b66b2298c11293c78dc98749d147116c0389950271736ceab968150c11efb96861aa6d4aac623555028329f51399aca24a0c87aa142bb9a3a5048591910af7bab4b2c20da68f19e33cba5ad3f196c7edc24ed89a5470f1887c78f988dccf3d02edc455bcb5e97820264ca37cabe2000000000000", @ANYRES16=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000005f54000000000000000000fa00d0103991"], 0x50)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x11, r2, 0x20000)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xb, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.748680682s ago: executing program 2 (id=8241):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="651968c4839dd0a466979619b81dc1dc8adf", 0x12}], 0x1, 0x0, 0x0, 0x10}, 0x804)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be70"], 0x1c}}, 0x0)

1.652251724s ago: executing program 2 (id=8242):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240)={0x0, 0x2710}, 0x3e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'dvmrp0\x00', {0x1}, 0xd43a}) (async)
setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "c80b516dda5bee70", "74c289bfa825c781a1f1997da00a3345", "82eff78f", "5ec36f40cf749574"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x35}, '\x00', "9b84f987950fe1df25fa8f46981234157e047d8fab471be6d85befa32cbaa5bc"}, 0x38) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB="0000000000068a0f2f4b1a2825b9738667bec400000000002000000000000000000005fd94a4c77da8a3d9a85cfa62e86e1caeac6a4b1349679482a8f2e5d28d5f9166bb154cf358bb21aa0181e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000120000000000bc020000020800008500000086ecfbff17110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x40000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r11, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xd, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0ee2e8ada0a6c0a9fe236d701"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
r14 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3)

1.524564066s ago: executing program 0 (id=8243):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x48)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x1080)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x7, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.483039035s ago: executing program 2 (id=8244):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)="1590eb89a8d69c8d9b18f83aec4e10e7b2ade86eb84ae941a7c02d055c1500dbb2ae2e41259d1ba873442b93d225fe04cba1fdf4a98815be0cc7d8cb88189a46a360c111f88736ac1eb2a0566c6db652d0cde6fe5adb9df290ec035ca9e3e281")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00'})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r6, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x1}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5)

1.273443511s ago: executing program 0 (id=8245):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x24040801}, 0x4008054)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="60100201010072b57c63b686de87aec4ba941a3c989342942337a55445d234708b5fca9f2464452ed5fde7e304b2fac2b6"], 0x6)
socket(0xa, 0x80000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

992.719229ms ago: executing program 1 (id=8247):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e19, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0}, 0x200440e0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xf8, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8040, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x9c, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x6, 0x80006, 0x80}}]}, {0x5b, 0x6, "27d3e67f68226ba6e1dbd8b045a433688eee47f03d8270997b97e155317fb06bb0afd80a26acfd1cf2aead477dc608f61cd02015251fc832e993021621bfcc13eaa9efef42e9b3d518b8f2e742919f5a15c9541e8ab988"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)

945.560311ms ago: executing program 0 (id=8248):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x1d, &(0x7f0000002600)}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000013000500000000000000000000000000e169dfcdfafc91da5cb8719a2d686e4b4c517c33df5dea7a9cd079a4165bf5e204829b88a6e4245bc623083929ab28cd724df411997c7e6296851d4ff0ab71c7d78663878f8a56e847f03f1bcdbf13f86b5ff5eba6e022d30a98d3527629ffd757b4c271af16a0dce8f4b10e3bc0356002958e554c844007e36036806a8250a73c0f7841c6c69d093f5fab712317baff7847daa39d4b51ec", @ANYRES32=0x0, @ANYBLOB="2804070010180000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=0x0, @ANYBLOB="0c002b8008000100", @ANYRES32=r0, @ANYBLOB], 0x48}}, 0x0)

845.187898ms ago: executing program 1 (id=8249):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0x7a) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) (async, rerun: 32)
syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8320081003c0008004500002040000000032f9078ac14140ae05d5d08"], 0x36) (async, rerun: 64)
write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x6005}, @val={0x1, 0x0, 0x792a, 0x101, 0x9, 0x5}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x21, 0x4e, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}, {0x17, 0x9, 0x0, @multicast2, "87e421c624ebcf45e02467459d3e56183ff8eabb8d477f17ae508bb4f97008e14b0545e3299065c21e812defd5372d945ca8"}}}, 0x5c) (async, rerun: 64)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r4}) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000000c0)) (async, rerun: 32)
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async, rerun: 64)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})

727.275065ms ago: executing program 3 (id=8250):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/410], 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x48001)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0)
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000007c0)=0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xfffb, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x3, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10, 0x80000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c40"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x4002})
readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$kcm(0x10, 0x2, 0x10)

564.802519ms ago: executing program 1 (id=8251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd70000000000080"], 0x1c}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'erspan0\x00', <r5=>0x0, 0x20, 0x1, 0x2, 0x5, {{0x6, 0x4, 0x1, 0x3c, 0x18, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', <r6=>0x0, 0x80, 0x0, 0x7, 0xa, {{0x1e, 0x4, 0x0, 0x7, 0x78, 0x67, 0x0, 0x7f, 0x2b, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @end, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0xc0, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @multicast1, @loopback, @empty, @empty, @broadcast, @broadcast]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x3, "81"}, @lsrr={0x83, 0x1f, 0xe2, [@multicast2, @local, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @empty]}, @ssrr={0x89, 0xf, 0xc4, [@broadcast, @private=0xa010100, @loopback]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c800}, 0x4048011)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

364.707432ms ago: executing program 1 (id=8252):
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="651968c4839dd0a466979619b81dc1dc8adf", 0x12}], 0x1, 0x0, 0x0, 0x10}, 0x804)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be70"], 0x1c}}, 0x0)

321.533526ms ago: executing program 3 (id=8253):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

297.965041ms ago: executing program 2 (id=8254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

282.931075ms ago: executing program 1 (id=8255):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000640000006910770000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x0, 0x1, 0x5, 0xb}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0084}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004060900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061786c6f6164000c00028008000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="40450000000000001c0012800b00010067726574617000000c00028008000400b227000008000a00", @ANYRES32=r7, @ANYBLOB="4fc25b61030000001c9f7fa1fedc6a92db07"], 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000bc0)={'sit0\x00', <r8=>0x0, 0x7, 0x7, 0x10001, 0x10000, {{0x49, 0x4, 0x2, 0xc, 0x124, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x4, 0x12, "fdb9aca00cebc09623a2604711e09843"}, {0x0, 0xf, "7bc09fdbf0c5b267cd2e48208f"}]}, @rr={0x7, 0x13, 0x58, [@remote, @private=0xa010101, @remote, @remote]}, @timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x2, [{@broadcast, 0x7}]}, @rr={0x7, 0xb, 0x1b, [@dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010101]}, @rr={0x7, 0xb, 0x6, [@remote, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0x5a, 0x3, 0x4, [{@broadcast, 0x6}, {@empty}, {@multicast1, 0xb0}, {@private=0xa010102, 0x9}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x96, 0x3, 0x0, [{@multicast1, 0x7}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x93}, {@empty, 0x6}, {@multicast2}]}, @ssrr={0x89, 0x13, 0x46, [@broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0x20, 0x1, 0xf, [{@private=0xa010101, 0x52783a0e}, {@broadcast, 0x2}, {@loopback, 0x5}]}, @cipso={0x86, 0xd, 0x1, [{0x1, 0x7, "a297ab8738"}]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={<r9=>0x0, @rand_addr, @multicast1}, &(0x7f0000000640)=0xffffffffffffffbc)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={<r10=>0x0, @initdev, @broadcast}, &(0x7f00000006c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6gre0\x00', <r11=>0x0, 0x2b, 0x93, 0x3, 0x1ff, 0x48, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0xf7c3, 0x8}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={<r12=>0x0, @multicast2, @multicast1}, &(0x7f0000000800)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000840)={'syztnl1\x00', <r13=>0x0, 0x40, 0x7, 0x7, 0x4, {{0x7, 0x4, 0x2, 0x3c, 0x1c, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x7, 0x7c, [@multicast2]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000d40)={0x26c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8a76a1c7dc66d147)
getsockopt$bt_hci(r4, 0x84, 0x1f, 0x0, &(0x7f0000001180)=0x8f00)
syz_genetlink_get_family_id$wireguard(&(0x7f0000002840), r2)
r14 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r14, 0x8983, &(0x7f0000000200)={0x7, 'ip6tnl0\x00', {0x541}, 0x9})

209.028092ms ago: executing program 0 (id=8256):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081020100bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
sendmmsg(r3, &(0x7f000000d780)=[{{&(0x7f0000001040)=@caif, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000014c0)={'ip6tnl0\x00', &(0x7f0000001440)={'syztnl0\x00', <r7=>0x0, 0x4, 0xd, 0x2, 0x6, 0x71, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x60, 0x80, 0x400000, 0xfffffff9}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003300)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="f53f7b27cb3eba2f6e03b5d2ecd1d01ed30ec1f84c25a791bdbe563a7f9c2056b2fcfc2d2e67923e82e4fa98a849039238be4d6abe2fba8dc4e5a4a79002a829510f1fb7ca6f9994905d009ee621f02565ee1fe51c29c70a61ead157cf0c593a932ced55518495c6a0c30b376a2cb0bc7b4d8d2338d4600bf19295fe97ab98d3144077bf64030ae01018125b2551b7ef1b66f2cc730c2a201fc335ee683b836d3d27fdf8941add2ac10978a68942e0cc5bf6b72fcc678ced8e3f19039e1735efa0cfcc357a07dcca2545171530496f2ed837f84904d9d9e027f5e31816e30d065c23d04419e933d67bbede74413e0229badbe17d1f90d2", 0xf7}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x8, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000700)}, {&(0x7f0000000740)}, {&(0x7f0000001180)="4284f7e1d510d2bec869d582fdf98e3893926ab038eb29b292dcfd28e95d328b63fadbb76db7625760c3b2157193ee93ce8634f41a61c8bdb4aa540db93cef5deb9a238265145cdc309bfacd670383857665fb4161dfb64d6da80dbad7d9e59a590917d3baece7b5655f4f51df7fada5fb44ffaa07f2bfeb37709977a64004e913596ddf290f0cf03215", 0x8a}, {&(0x7f0000001240)="95cca19ca7cb4ddbd9e523be4e212a2b9d42", 0x12}], 0x4}}, {{&(0x7f00000012c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001300)="c1fbd7ecfca83edcee872b8ecd9dda6a34318ecb74a85a03e96582d2cb6fe1022bb649dd83ccb67dd933b8bd322ead5815c56da3ccf4ec4d7ca2a51a8209658651c632ce62749019413905c0bc066ed59b825112d4cbe9a874d9b9a7f0d969bd80c5586e2033f523e54415fcc4ea2ff2d7d400e2b31f7dcf1de1288948ba1ce4afc440e397d0d54b99efb26e72c9b496a3325dea7b2d99157c5a0e3bd2ddcfa8902e3f7f261c6e77d395f9e7b27115b8ebbbeb77c4cdad8daa33cd9172a85f6b32c92a4fb02f35f19e3fa5653385", 0xce}], 0x1, &(0x7f00000015c0)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x62, 0x0, 0x1, [0xf3, 0x5bb0, 0x8, 0xd92d, 0x8, 0x2]}, @timestamp={0x44, 0x24, 0x7, 0x0, 0x6, [0x8, 0xfffffeff, 0x800, 0x8, 0x8, 0x55f339f0, 0xe19d, 0xc37]}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0x8, [0x5, 0x2, 0xf, 0x4, 0x9, 0x1, 0xfffffff8]}, @timestamp={0x44, 0xc, 0xed, 0x0, 0x7, [0xfac8, 0x9]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x2, [{0x0, 0x3, "a5"}, {0x6, 0x3, "f9"}, {0x7, 0x6, "41a9a84a"}, {0x0, 0x12, "6aa75cb7efa534c2650e819707128695"}, {0x7, 0x12, "fc3d7f1c7965d5f7cbc68d6542db88a7"}, {0x1, 0x8, "7d595e138fef"}]}, @cipso={0x86, 0x29, 0x3, [{0x5, 0xf, "4f98737868dc5662c6f622b17e"}, {0x6, 0xa, "484b925e0cd3b767"}, {0x2, 0xa, "ba1be2ef8d354e41"}]}, @rr={0x7, 0xb, 0xa5, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @remote}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0xcd, 0xf, "3414afe10a1cd7d30f208d15a6"}, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0xa0, 0x3, 0x0, [{@empty, 0xff0}]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xce, 0x1, 0x3, [{@rand_addr=0x64010100, 0x7f}, {@local, 0x5}, {@private=0xa010102, 0xff}, {@rand_addr=0x64010100, 0x40}, {@remote, 0x6}, {@broadcast, 0xaf8a}]}, @lsrr={0x83, 0xb, 0x44, [@multicast2, @multicast2]}, @lsrr={0x83, 0x1f, 0xa5, [@local, @empty, @local, @empty, @remote, @broadcast, @loopback]}, @rr={0x7, 0x1f, 0x31, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote]}, @noop]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x32, [@dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x4, 0x54, 0x0, 0xc}, @ssrr={0x89, 0x13, 0x89, [@loopback, @local, @remote, @dev={0xac, 0x14, 0x14, 0x27}]}, @ssrr={0x89, 0x3, 0x5f}, @generic={0x94, 0x2}, @timestamp_addr={0x44, 0x24, 0x4a, 0x1, 0x8, [{@loopback}, {@broadcast, 0x8}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x9}]}, @timestamp={0x44, 0x14, 0xe9, 0x0, 0xb, [0xa4, 0x5, 0x9, 0xbe8c]}, @timestamp_prespec={0x44, 0x4, 0xf5, 0x3, 0x3}]}}}], 0x2c0}}, {{&(0x7f00000018c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001980)}, {0x0}, {0x0}], 0x3, &(0x7f0000001d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7284}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0xb, 0x74, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@rand_addr=0x64010102, 0x8001}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0xa0}}, {{&(0x7f0000003080)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000003280)=[{&(0x7f00000030c0)="7f8abaab79c886272a2e2d93f78d9c741f9afd0644605e98e680582f4183477863384063c580436b6622b6d3ffcc135e7ef86b3ccc14a3e8087b5889772be27503f6ebda3d747776b764137496db", 0x4e}, {&(0x7f0000003140)}, {0x0}], 0x3, &(0x7f00000032c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf1}}], 0x18}}], 0x5, 0x4000)

182.311854ms ago: executing program 3 (id=8257):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20)
recvfrom$unix(r1, &(0x7f0000000140)=""/64, 0x40, 0x2022, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x30)
read(r0, &(0x7f0000000280)=""/4096, 0x1000) (async)
recvfrom$unix(r0, &(0x7f0000001280)=""/236, 0xec, 0x10000, &(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32)
r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001400)="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")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), 0xffffffffffffffff) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001580)={<r6=>0x0, @empty, @remote}, &(0x7f00000015c0)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001600)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001640)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001680)={'batadv_slave_1\x00', <r9=>0x0}) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000016c0)=<r10=>0x0, &(0x7f0000001700)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001740)={'batadv0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000001880)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xa4, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4041) (async, rerun: 32)
r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {}, {0x0, @struct, <r13=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r12, 0xd000941e, &(0x7f0000001d00)={r13, "a6eba343c5b288c6e0b746ca4b8c448f"}) (async)
sendto$inet6(r0, &(0x7f0000002d00)="a910f6fa93b624f70b542053d8ba018b148a22ee2b930f7f708999318ae6e943f22798e1a964660a10ea50b4c1e33eeeab607c48e81f994c6cbf686dcd9fcce55f0e11229940ac45222fc0da225ec8573e20933a61906fa9221fee1d35740a6423a3f66a5744813c1fc4383344645a08171f770d2a605fecfbfdc8b003e9af7d74cd3a42a7c76a21cf0c1d028eb9c89b1c4c1a8c1d4841bf5d078ca30e6e221a6a0f0183134b07fda371d3950bca13b3099633555192dd4fbd0bee1a27a02ca6fed2904e86dc8f1ce24b49294e4c7976765f5d4e9705f4bb675717de9dea", 0xde, 0x0, &(0x7f0000002e00)={0xa, 0x4e23, 0x7, @local, 0x10001}, 0x1c) (async, rerun: 64)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000002e40)={<r14=>0xffffffffffffffff}) (rerun: 64)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002f00)={0x4, &(0x7f0000002ec0)=[{0x2, 0x7, 0x3, 0xff}, {0x5, 0xfc, 0xf, 0x5}, {0x5, 0x5, 0x4, 0x1}, {0xf, 0x8, 0x3f, 0x1}]}, 0x10) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r14) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002fc0)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0xbdc6a45fa4b748e6}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x1c, r15, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) (async, rerun: 32)
read(r12, &(0x7f00000030c0)=""/115, 0x73) (async, rerun: 32)
sendmsg$can_raw(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x1d, r6}, 0x10, &(0x7f0000003200)={&(0x7f0000003180)=@canfd={{0x4}, 0x32, 0x1, 0x0, 0x0, "f4c1cd11af3ec251774c7afdc849666913a848770773a22ed22ef3a1d3f6f5a3cec05dd9c1c14c6e7209542182637ff85797723ebad6614fbd3f052ad076bf7e"}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0xc010) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x13, 0xf, &(0x7f0000003340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffb730, 0x0, 0x0, 0x0, 0x1}, @exit, @exit, @generic={0x3, 0xe, 0x1, 0xfa22, 0x689006d}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x235}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}], &(0x7f00000033c0)='GPL\x00', 0x7, 0x57, &(0x7f0000003400)=""/87, 0x41100, 0x2, '\x00', 0x0, @fallback=0x7, r0, 0x8, &(0x7f0000003480)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x2, 0x0, &(0x7f00000034c0)=[{0x4, 0x3, 0x0, 0x5}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x8}, 0x94)

134.767878ms ago: executing program 2 (id=8258):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24040801}, 0x4008054)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="60100201010072b57c63b686de87aec4ba941a3c989342942337a55445d234708b5fca9f2464452ed5fde7e304b2fac2b6"], 0x6)
socket(0xa, 0x80000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.111758ms ago: executing program 3 (id=8259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000300)="fb", 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

0s ago: executing program 1 (id=8260):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x130, 0x98, 0x1c8, 0x1c8, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x12, 0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x0, 0x0, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000380)) (async)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000380))
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000880)={0x11, 0x0, {0xa, @usage=0x5, 0x0, 0x7ff, 0xe, 0x7, 0x4, 0x79, 0x6, @usage=0x8, 0x62831a5b, 0x0, [0xffff, 0x2, 0xe956, 0x2, 0xab, 0x100000000]}, {0x2, @usage=0xe5, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0x441, 0x2, @usage, 0x8, 0xffff, [0x7, 0x10001, 0x100, 0x67, 0x323, 0x87c7]}, {0x10001, @struct={0xa1, 0xf50}, 0x0, 0x4, 0x5, 0xd31a, 0xa, 0x2, 0x2, @usage=0x5, 0x8, 0x200, [0x100, 0x8, 0x81, 0x1, 0x696]}, {0x8, 0x1d, 0x4}})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r2}, {@void, @max}})
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6tnl0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x40440d7}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x7f)

kernel console output (not intermixed with test programs):

841.739039][T32121] RSP: 002b:00007f0593112028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  841.739056][T32121] RAX: ffffffffffffffda RBX: 00007f0592415fa0 RCX: 00007f059219c799
[  841.739068][T32121] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003
[  841.739080][T32121] RBP: 00007f0593112090 R08: 0000000000000000 R09: 0000000000000000
[  841.739091][T32121] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  841.739117][T32121] R13: 00007f0592416038 R14: 00007f0592415fa0 R15: 00007ffd4633e218
[  841.739146][T32121]  </TASK>
[  842.182875][T30724] bond9: (slave .`): failed to get link speed/duplex
[  842.207243][T32123] pimreg: entered allmulticast mode
[  842.299263][T30724] bond9: (slave .`): failed to get link speed/duplex
[  842.459153][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  842.575015][T32153] syzkaller1: tun_chr_ioctl cmd 1074025677
[  842.627188][T32153] syzkaller1: Linktype set failed because interface is up
[  842.678581][T30724] bond9: (slave .`): failed to get link speed/duplex
[  842.688735][   T10] syzkaller1: tun_net_xmit 90
[  842.699716][T26863] syzkaller1: tun_net_xmit 86
[  842.964259][T32184] __nla_validate_parse: 20 callbacks suppressed
[  842.964281][T32184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6803'.
[  842.979408][T32186] FAULT_INJECTION: forcing a failure.
[  842.979408][T32186] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.999712][T32188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6805'.
[  843.009412][T32184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6803'.
[  843.011394][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6803'.
[  843.019232][T32157] lo speed is unknown, defaulting to 1000
[  843.029054][T32186] CPU: 0 UID: 0 PID: 32186 Comm: syz.2.6804 Not tainted syzkaller #0 PREEMPT(full) 
[  843.029086][T32186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  843.029097][T32186] Call Trace:
[  843.029104][T32186]  <TASK>
[  843.029112][T32186]  dump_stack_lvl+0xe8/0x150
[  843.029140][T32186]  should_fail_ex+0x412/0x560
[  843.029168][T32186]  _copy_from_user+0x2d/0xb0
[  843.029194][T32186]  ___sys_recvmsg+0x175/0x590
[  843.029212][T32186]  ? __lock_acquire+0x6b5/0x2cf0
[  843.029241][T32186]  ? __pfx____sys_recvmsg+0x10/0x10
[  843.029290][T32186]  do_recvmmsg+0x334/0x800
[  843.029315][T32186]  ? __pfx_do_recvmmsg+0x10/0x10
[  843.029342][T32186]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  843.029374][T32186]  __x64_sys_recvmmsg+0x198/0x250
[  843.029395][T32186]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  843.029423][T32186]  do_syscall_64+0x14d/0xf80
[  843.029438][T32186]  ? trace_irq_disable+0x3b/0x150
[  843.029461][T32186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.029478][T32186]  ? clear_bhb_loop+0x40/0x90
[  843.029499][T32186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  843.029516][T32186] RIP: 0033:0x7f059219c799
[  843.029531][T32186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.029546][T32186] RSP: 002b:00007f0593112028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  843.029572][T32186] RAX: ffffffffffffffda RBX: 00007f0592415fa0 RCX: 00007f059219c799
[  843.029585][T32186] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003
[  843.029597][T32186] RBP: 00007f0593112090 R08: 0000000000000000 R09: 0000000000000000
[  843.029608][T32186] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  843.029617][T32186] R13: 00007f0592416038 R14: 00007f0592415fa0 R15: 00007ffd4633e218
[  843.029644][T32186]  </TASK>
[  843.042118][T32188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6805'.
[  843.056653][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6806'.
[  843.149130][T32167] lo speed is unknown, defaulting to 1000
[  843.169680][T32184] macvlan2: entered promiscuous mode
[  843.212291][T32201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6803'.
[  843.219143][T32184] macvlan2: entered allmulticast mode
[  843.285594][T32184] veth1_to_batadv: entered allmulticast mode
[  843.664126][T32221] xt_cgroup: path and classid specified
[  843.819825][T32227] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6819'.
[  843.830914][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6820'.
[  843.841452][T32232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6820'.
[  844.029487][T32240] xt_CT: No such helper "netbios-ns"
[  844.102121][T32254] xt_CT: No such helper "netbios-ns"
[  844.121592][T32260] netlink: 'syz.0.6828': attribute type 1 has an invalid length.
[  844.251679][T32260] 8021q: adding VLAN 0 to HW filter on device bond3
[  844.948134][T32314] netlink: 'syz.3.6844': attribute type 1 has an invalid length.
[  844.983181][T32314] 8021q: adding VLAN 0 to HW filter on device bond3
[  845.106943][T32320] macvlan2: entered promiscuous mode
[  845.113358][T32320] macvlan2: entered allmulticast mode
[  845.119905][T32320] veth1_to_batadv: entered allmulticast mode
[  845.425285][T32329] lo speed is unknown, defaulting to 1000
[  845.781670][T32353] netlink: 'syz.0.6856': attribute type 1 has an invalid length.
[  845.794550][T32354] bridge0: entered allmulticast mode
[  845.833140][T32354] netlink: 'syz.2.6855': attribute type 2 has an invalid length.
[  845.987971][T26852] net_ratelimit: 19 callbacks suppressed
[  845.987992][T26852] bond9: (slave .`): failed to get link speed/duplex
[  846.130200][  T140] bond9: (slave .`): failed to get link speed/duplex
[  846.298613][  T140] bond9: (slave .`): failed to get link speed/duplex
[  846.475486][T32384] netlink: 'syz.0.6864': attribute type 1 has an invalid length.
[  846.557027][T32392] bond4: entered promiscuous mode
[  846.587903][T32392] bond4: entered allmulticast mode
[  846.596101][T32392] 8021q: adding VLAN 0 to HW filter on device bond4
[  846.749628][T26933] bond9: (slave .`): failed to get link speed/duplex
[  846.892988][T26852] bond9: (slave .`): failed to get link speed/duplex
[  847.009801][  T140] bond9: (slave .`): failed to get link speed/duplex
[  847.159808][T26933] bond9: (slave .`): failed to get link speed/duplex
[  847.259825][T32402] netlink: zone id is out of range
[  847.268538][T26852] bond9: (slave .`): failed to get link speed/duplex
[  847.445936][   T63] bond9: (slave .`): failed to get link speed/duplex
[  847.659462][T32454] netlink: 'syz.1.6887': attribute type 8 has an invalid length.
[  848.005006][T32472] __nla_validate_parse: 24 callbacks suppressed
[  848.005027][T32472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6892'.
[  848.206784][T32498] netlink: 480 bytes leftover after parsing attributes in process `syz.3.6898'.
[  848.238623][T32498] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6898'.
[  848.247902][T32498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6898'.
[  848.256455][T32499] lo speed is unknown, defaulting to 1000
[  848.372241][T32507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  848.414833][T32510] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6897'.
[  848.496217][T32516] netlink: 'syz.4.6904': attribute type 10 has an invalid length.
[  848.516717][T32516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6904'.
[  848.538653][T32516] dummy0: entered promiscuous mode
[  848.585399][T32520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6903'.
[  848.656741][T32524] netlink: 284 bytes leftover after parsing attributes in process `syz.4.6906'.
[  848.721468][T32527] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6907'.
[  848.760476][T32529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6908'.
[  848.885025][T32531] lo speed is unknown, defaulting to 1000
[  849.058349][T32544] SET target dimension over the limit!
[  849.623009][T32580] sctp: [Deprecated]: syz.2.6920 (pid 32580) Use of int in max_burst socket option.
[  849.623009][T32580] Use struct sctp_assoc_value instead
[  849.726018][T32579] smc: adding net device wlan0 with user defined pnetid SYZ0
[  849.964974][T32598] netlink: 'syz.0.6925': attribute type 1 has an invalid length.
[  850.000765][T32598] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  850.996222][T32656] net_ratelimit: 29 callbacks suppressed
[  850.996243][T32656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  851.069245][T26863] bond9: (slave .`): failed to get link speed/duplex
[  851.179519][   T63] bond9: (slave .`): failed to get link speed/duplex
[  851.319110][   T63] bond9: (slave .`): failed to get link speed/duplex
[  851.371357][T32681] macsec1: entered promiscuous mode
[  851.391264][T32681] geneve1: entered promiscuous mode
[  851.397574][T32681] macsec1: entered allmulticast mode
[  851.420735][T32681] geneve1: entered allmulticast mode
[  851.523257][T32694] syzkaller1: tun_chr_ioctl cmd 1074025677
[  851.546104][T32694] syzkaller1: linktype set to 260
[  851.588575][T26933] bond9: (slave .`): failed to get link speed/duplex
[  851.682357][T32708] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  851.729970][  T140] bond9: (slave .`): failed to get link speed/duplex
[  851.739306][   T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  851.744387][T32710] netlink: 'syz.2.6956': attribute type 1 has an invalid length.
[  851.862229][T32710] bond7 (unregistering): Released all slaves
[  851.929225][  T140] bond9: (slave .`): failed to get link speed/duplex
[  852.058586][  T140] bond9: (slave .`): failed to get link speed/duplex
[  852.113954][T32736] macsec0: entered promiscuous mode
[  852.156348][T32739] FAULT_INJECTION: forcing a failure.
[  852.156348][T32739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  852.177933][T32739] CPU: 0 UID: 0 PID: 32739 Comm: syz.0.6966 Not tainted syzkaller #0 PREEMPT(full) 
[  852.177961][T32739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  852.177972][T32739] Call Trace:
[  852.177980][T32739]  <TASK>
[  852.177989][T32739]  dump_stack_lvl+0xe8/0x150
[  852.178020][T32739]  should_fail_ex+0x412/0x560
[  852.178049][T32739]  _copy_from_user+0x2d/0xb0
[  852.178075][T32739]  do_ipv6_setsockopt+0x264/0x31c0
[  852.178205][T32739]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  852.178229][T32739]  ? get_pid_task+0x20/0x1f0
[  852.178245][T32739]  ? get_pid_task+0x20/0x1f0
[  852.178257][T32739]  ? get_pid_task+0x20/0x1f0
[  852.178286][T32739]  ? __lock_acquire+0x6b5/0x2cf0
[  852.178323][T32739]  ? aa_sk_perm+0x6d5/0x900
[  852.178353][T32739]  ? __pfx_aa_sk_perm+0x10/0x10
[  852.178379][T32739]  ? __fget_files+0x2a/0x420
[  852.178401][T32739]  ? aa_sock_opt_perm+0xff/0x1a0
[  852.178425][T32739]  ipv6_setsockopt+0x59/0x170
[  852.178449][T32739]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  852.178475][T32739]  do_sock_setsockopt+0x17c/0x1b0
[  852.178505][T32739]  __x64_sys_setsockopt+0x13d/0x1b0
[  852.178535][T32739]  do_syscall_64+0x14d/0xf80
[  852.178552][T32739]  ? trace_irq_disable+0x3b/0x150
[  852.178576][T32739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.178595][T32739]  ? clear_bhb_loop+0x40/0x90
[  852.178617][T32739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  852.178635][T32739] RIP: 0033:0x7fd2d399c799
[  852.178652][T32739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.178667][T32739] RSP: 002b:00007fd2d48e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  852.178686][T32739] RAX: ffffffffffffffda RBX: 00007fd2d3c15fa0 RCX: 00007fd2d399c799
[  852.178699][T32739] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003
[  852.178710][T32739] RBP: 00007fd2d48e6090 R08: 0000000000000014 R09: 0000000000000000
[  852.178721][T32739] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  852.178733][T32739] R13: 00007fd2d3c16038 R14: 00007fd2d3c15fa0 R15: 00007ffca9bbc0c8
[  852.178762][T32739]  </TASK>
[  852.400078][   T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  852.511906][T32741] 8021q: adding VLAN 0 to HW filter on device bond4
[  852.556720][  T140] bond9: (slave .`): failed to get link speed/duplex
[  852.669073][T30724] bond9: (slave .`): failed to get link speed/duplex
[  852.729941][   T63] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  853.009723][T32765] netlink: 'syz.1.6973': attribute type 1 has an invalid length.
[  853.054506][  T301] __nla_validate_parse: 21 callbacks suppressed
[  853.054524][  T301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6975'.
[  853.061875][T32763] netem: change failed
[  853.189845][  T305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6975'.
[  853.347738][  T311] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6978'.
[  853.643193][  T326] netlink: 'syz.2.6982': attribute type 16 has an invalid length.
[  853.659618][  T326] netlink: 'syz.2.6982': attribute type 17 has an invalid length.
[  853.747257][  T326] dummy0: left promiscuous mode
[  853.795344][  T140] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  853.805507][  T140] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  853.816009][  T324] sysfs: cannot create duplicate filename '/class/ieee80211/

Ï€ã,ÄûÔxµ…üb©)%ë�	]ô‚3DûLÌ¥”!'
[  853.829136][  T324] CPU: 1 UID: 0 PID: 324 Comm: syz.3.6981 Not tainted syzkaller #0 PREEMPT(full) 
[  853.829161][  T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  853.829173][  T324] Call Trace:
[  853.829180][  T324]  <TASK>
[  853.829188][  T324]  dump_stack_lvl+0xe8/0x150
[  853.829225][  T324]  sysfs_warn_dup+0x8e/0xa0
[  853.829252][  T324]  sysfs_do_create_link_sd+0xc0/0x110
[  853.829280][  T324]  device_add_class_symlinks+0x1cf/0x240
[  853.829307][  T324]  device_add+0x475/0xb70
[  853.829332][  T324]  wiphy_register+0x1d73/0x2d50
[  853.829375][  T324]  ? __pfx_wiphy_register+0x10/0x10
[  853.829399][  T324]  ? __pfx_netdev_run_todo+0x10/0x10
[  853.829422][  T324]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  853.829453][  T324]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  853.829491][  T324]  ieee80211_register_hw+0x35f0/0x42c0
[  853.829534][  T324]  ? ieee80211_register_hw+0x1421/0x42c0
[  853.829566][  T324]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  853.829605][  T324]  ? __hrtimer_setup+0x181/0x200
[  853.829633][  T324]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  853.829660][  T324]  mac80211_hwsim_new_radio+0x3334/0x5b60
[  853.829710][  T324]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  853.829730][  T324]  ? kstrndup+0xbf/0x160
[  853.829765][  T324]  hwsim_new_radio_nl+0xf6a/0x1c00
[  853.829804][  T324]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  853.829833][  T324]  ? rcu_is_watching+0x15/0xb0
[  853.829860][  T324]  ? trace_kmalloc+0x2a/0x110
[  853.829885][  T324]  ? __nla_parse+0x40/0x60
[  853.829918][  T324]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  853.829951][  T324]  genl_family_rcv_msg_doit+0x22a/0x330
[  853.829977][  T324]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  853.830011][  T324]  ? bpf_lsm_capable+0x9/0x20
[  853.830037][  T324]  ? security_capable+0x7e/0x2c0
[  853.830067][  T324]  genl_rcv_msg+0x61c/0x7a0
[  853.830093][  T324]  ? __pfx_genl_rcv_msg+0x10/0x10
[  853.830113][  T324]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  853.830134][  T324]  ? __lock_acquire+0x6b5/0x2cf0
[  853.830166][  T324]  netlink_rcv_skb+0x232/0x4b0
[  853.830191][  T324]  ? __pfx_genl_rcv_msg+0x10/0x10
[  853.830210][  T324]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  853.830250][  T324]  ? down_read+0x272/0x2e0
[  853.830270][  T324]  ? genl_rcv+0xd/0x40
[  853.830291][  T324]  genl_rcv+0x28/0x40
[  853.830310][  T324]  netlink_unicast+0x80f/0x9b0
[  853.830341][  T324]  ? __pfx_netlink_unicast+0x10/0x10
[  853.830367][  T324]  ? netlink_sendmsg+0x650/0xb40
[  853.830392][  T324]  ? skb_put+0x11b/0x210
[  853.830423][  T324]  netlink_sendmsg+0x813/0xb40
[  853.830459][  T324]  ? __pfx_netlink_sendmsg+0x10/0x10
[  853.830489][  T324]  ? aa_sock_msg_perm+0xf1/0x1b0
[  853.830528][  T324]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  853.830556][  T324]  ____sys_sendmsg+0x972/0x9f0
[  853.830585][  T324]  ? __pfx_____sys_sendmsg+0x10/0x10
[  853.830615][  T324]  ? import_iovec+0x73/0xa0
[  853.830651][  T324]  ___sys_sendmsg+0x2a5/0x360
[  853.830679][  T324]  ? __pfx____sys_sendmsg+0x10/0x10
[  853.830707][  T324]  ? futex_wake+0x4ac/0x580
[  853.830763][  T324]  ? __fget_files+0x2a/0x420
[  853.830792][  T324]  ? __fget_files+0x3a0/0x420
[  853.830830][  T324]  __x64_sys_sendmsg+0x1bd/0x2a0
[  853.830851][  T324]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  853.830880][  T324]  ? rcu_is_watching+0x15/0xb0
[  853.830916][  T324]  do_syscall_64+0x14d/0xf80
[  853.830934][  T324]  ? trace_irq_disable+0x3b/0x150
[  853.830963][  T324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.830984][  T324]  ? clear_bhb_loop+0x40/0x90
[  853.831009][  T324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.831028][  T324] RIP: 0033:0x7f4ed5b9c799
[  853.831048][  T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.831067][  T324] RSP: 002b:00007f4ed3dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  853.831088][  T324] RAX: ffffffffffffffda RBX: 00007f4ed5e16090 RCX: 00007f4ed5b9c799
[  853.831103][  T324] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  853.831116][  T324] RBP: 00007f4ed5c32c99 R08: 0000000000000000 R09: 0000000000000000
[  853.831129][  T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  853.831141][  T324] R13: 00007f4ed5e16128 R14: 00007f4ed5e16090 R15: 00007ffedfe35e88
[  853.831175][  T324]  </TASK>
[  854.310031][T10964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  854.507569][  T345] bridge0: entered promiscuous mode
[  854.516597][  T345] macsec1: entered promiscuous mode
[  854.539368][  T349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6990'.
[  854.699898][  T358] veth1: entered allmulticast mode
[  854.830531][  T368] dummy0: left promiscuous mode
[  854.865155][  T371] sctp: [Deprecated]: syz.3.6997 (pid 371) Use of int in max_burst socket option.
[  854.865155][  T371] Use struct sctp_assoc_value instead
[  855.044996][  T381] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  855.045995][  T380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7000'.
[  855.109643][  T383] bond5: ARP target 9.0.0.0 is already present
[  855.116105][  T383] bond5: option arp_ip_target: invalid value (9)
[  855.127308][  T383] bond5 (unregistering): Released all slaves
[  855.430782][  T398] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7008'.
[  855.446674][  T398] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7008'.
[  855.458006][  T398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7008'.
[  855.763762][  T423] sctp: [Deprecated]: syz.3.7014 (pid 423) Use of struct sctp_assoc_value in delayed_ack socket option.
[  855.763762][  T423] Use struct sctp_sack_info instead
[  855.928335][  T432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7018'.
[  856.007388][  T432] bond7: Unable to set down delay as MII monitoring is disabled
[  856.023218][  T432] bond7 (unregistering): Released all slaves
[  856.079175][ T7722] net_ratelimit: 20 callbacks suppressed
[  856.079194][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  856.199797][T30724] bond9: (slave .`): failed to get link speed/duplex
[  856.321108][T30724] bond9: (slave .`): failed to get link speed/duplex
[  856.350315][  T459] dvmrp0: left allmulticast mode
[  856.355699][  T459] pimreg: left allmulticast mode
[  856.386613][  T462] netlink: 428 bytes leftover after parsing attributes in process `syz.4.7029'.
[  856.439209][  T140] bond9: (slave .`): failed to get link speed/duplex
[  856.551383][T21537] IPVS: starting estimator thread 0...
[  856.569775][  T140] bond9: (slave .`): failed to get link speed/duplex
[  856.670272][  T472] IPVS: using max 39 ests per chain, 93600 per kthread
[  856.679412][  T140] bond9: (slave .`): failed to get link speed/duplex
[  856.828037][  T476] 8021q: adding VLAN 0 to HW filter on device bond0
[  856.840045][  T476] 8021q: adding VLAN 0 to HW filter on device team0
[  856.851951][  T476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  856.869987][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  856.914552][  T480] syzkaller0: entered promiscuous mode
[  856.921198][  T480] syzkaller0: entered allmulticast mode
[  857.109195][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  857.231022][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  857.285511][  T510] IPVS: length: 29 != 24
[  857.441445][  T517] netlink: 'syz.3.7049': attribute type 1 has an invalid length.
[  857.571733][  T525] bond7: entered promiscuous mode
[  857.577095][  T525] bond7: entered allmulticast mode
[  857.586280][  T525] 8021q: adding VLAN 0 to HW filter on device bond7
[  857.600108][  T522] bond5: entered promiscuous mode
[  857.605491][  T522] bond5: entered allmulticast mode
[  857.612592][  T522] 8021q: adding VLAN 0 to HW filter on device bond5
[  857.954105][  T554] vlan2: entered allmulticast mode
[  857.962888][  T554] bond0: entered allmulticast mode
[  857.989923][  T554] bond_slave_0: entered allmulticast mode
[  857.995911][  T554] bond_slave_1: entered allmulticast mode
[  858.070559][  T558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  858.089339][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  858.101186][  T558] bond_slave_0: left allmulticast mode
[  858.123831][  T558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  858.135380][  T558] bond_slave_1: left allmulticast mode
[  858.142864][  T558] bond0 (unregistering): Released all slaves
[  858.365040][  T580] __nla_validate_parse: 7 callbacks suppressed
[  858.365057][  T580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7063'.
[  858.637491][  T596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7067'.
[  858.912488][  T621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7071'.
[  858.944267][  T616] lo speed is unknown, defaulting to 1000
[  859.028286][  T625] netlink: 'syz.2.7072': attribute type 1 has an invalid length.
[  859.122353][  T634] netlink: 'syz.1.7073': attribute type 1 has an invalid length.
[  859.144965][  T636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7072'.
[  859.180115][  T634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7073'.
[  859.261826][  T639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7072'.
[  859.302447][  T630] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  859.331044][  T630] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  859.406656][  T636] bond7: (slave bridge1): Enslaving as an active interface with a down link
[  859.441067][  T639] 8021q: adding VLAN 0 to HW filter on device bond7
[  859.475000][  T625] macvlan3: entered promiscuous mode
[  859.498147][  T625] macvlan3: entered allmulticast mode
[  859.509529][  T625] bond7: entered promiscuous mode
[  859.517224][  T625] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  859.532484][  T625] bond7: left promiscuous mode
[  859.537617][  T648] x_tables: duplicate underflow at hook 1
[  859.866429][  T667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7081'.
[  859.913663][  T670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7080'.
[  860.114528][  T677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7084'.
[  860.838571][  T691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7087'.
[  861.090530][ T7722] net_ratelimit: 19 callbacks suppressed
[  861.090552][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  861.213251][  T140] bond9: (slave .`): failed to get link speed/duplex
[  861.349211][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  861.407567][  T709] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  861.433430][  T709] bond6 (unregistering): Released all slaves
[  861.478831][   T63] bond9: (slave .`): failed to get link speed/duplex
[  861.599088][   T63] bond9: (slave .`): failed to get link speed/duplex
[  861.631547][  T726] netlink: 'syz.0.7098': attribute type 26 has an invalid length.
[  861.659773][  T726] netlink: 'syz.0.7098': attribute type 26 has an invalid length.
[  861.764364][   T63] bond9: (slave .`): failed to get link speed/duplex
[  861.909655][T26863] bond9: (slave .`): failed to get link speed/duplex
[  861.956916][  T753] lo speed is unknown, defaulting to 1000
[  862.069105][   T63] bond9: (slave .`): failed to get link speed/duplex
[  862.239900][  T765] bridge: RTM_NEWNEIGH with invalid ether address
[  862.247086][  T767] bridge: RTM_NEWNEIGH with invalid ether address
[  862.290588][T26863] bond9: (slave .`): failed to get link speed/duplex
[  862.306726][  T762] block nbd4: NBD_DISCONNECT
[  862.323650][  T762] block nbd4: Send disconnect failed -32
[  862.349175][  T762] block nbd4: shutting down sockets
[  862.408650][  T140] bond9: (slave .`): failed to get link speed/duplex
[  862.420948][  T775] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  862.432769][  T775] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  862.450745][  T775] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  862.717950][  T793] netlink: 'syz.2.7117': attribute type 6 has an invalid length.
[  862.798694][ T5952] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  862.898342][  T808] lo speed is unknown, defaulting to 1000
[  863.009614][  T814] netlink: 'syz.0.7124': attribute type 16 has an invalid length.
[  863.103558][  T814] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.111413][  T814] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.185607][  T814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  863.204115][  T814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  863.282826][  T814] tipc: Resetting bearer <eth:syzkaller0>
[  863.327277][  T816] netlink: 'syz.1.7125': attribute type 12 has an invalid length.
[  863.358178][  T816] netlink: 'syz.1.7125': attribute type 29 has an invalid length.
[  863.376626][  T816] __nla_validate_parse: 9 callbacks suppressed
[  863.376645][  T816] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7125'.
[  863.420707][  T816] netlink: 51 bytes leftover after parsing attributes in process `syz.1.7125'.
[  863.575143][  T831] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.7127'.
[  863.595193][  T140] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  863.606400][  T831] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.7127'.
[  863.627621][  T140] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  863.639319][  T140] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  863.651770][  T140] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0
[  863.662038][  T140] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  863.681350][  T140] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  863.715871][  T140] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  863.732132][  T140] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0
[  863.732309][  T834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7128'.
[  863.785846][  T140] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  863.798165][  T140] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  863.799500][  T824] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7126'.
[  863.808107][  T140] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  863.831030][  T140] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0
[  863.963013][  T140] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  863.976632][  T849] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7131'.
[  863.988054][  T140] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  863.998163][  T849] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7131'.
[  864.010505][  T140] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  864.020110][  T140] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0
[  864.029576][  T849] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7131'.
[  864.056141][  T849] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7131'.
[  864.214554][  T863] syzkaller0: entered promiscuous mode
[  864.223043][  T863] syzkaller0: entered allmulticast mode
[  864.536468][  T882] netlink: 'syz.1.7144': attribute type 83 has an invalid length.
[  864.726534][  T893] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  865.406737][  T949] tipc: Started in network mode
[  865.413849][  T949] tipc: Node identity fec2ba191ca1, cluster identity 4711
[  865.422621][  T949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  865.523661][  T959] vlan2: entered promiscuous mode
[  865.532552][  T959] geneve1: entered promiscuous mode
[  865.544113][  T959] vlan2: entered allmulticast mode
[  865.555019][  T959] geneve1: entered allmulticast mode
[  865.653978][  T968] batman_adv: batadv0: Adding interface: gretap2
[  865.666304][  T968] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  865.731077][  T968] batman_adv: batadv0: Interface activated: gretap2
[  866.086348][  T987] sctp: [Deprecated]: syz.1.7175 (pid 987) Use of int in maxseg socket option.
[  866.086348][  T987] Use struct sctp_assoc_value instead
[  866.101969][T30724] net_ratelimit: 20 callbacks suppressed
[  866.101988][T30724] bond9: (slave .`): failed to get link speed/duplex
[  866.252385][  T140] bond9: (slave .`): failed to get link speed/duplex
[  866.289207][  T970] lec:lec_atm_close: lec0: Shut down!
[  866.305800][  T998] bridge_slave_0 (unregistering): left allmulticast mode
[  866.331939][  T998] bridge_slave_0 (unregistering): left promiscuous mode
[  866.359954][  T998] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.437351][  T140] bond9: (slave .`): failed to get link speed/duplex
[  866.540725][ T1008] vlan2: entered allmulticast mode
[  866.549902][ T1008] hsr0: entered allmulticast mode
[  866.555070][ T1008] hsr_slave_0: entered allmulticast mode
[  866.568140][ T1008] hsr_slave_1: entered allmulticast mode
[  866.594108][   T10] tipc: Node number set to 3798186521
[  866.648743][   T63] bond9: (slave .`): failed to get link speed/duplex
[  866.758730][T26863] bond9: (slave .`): failed to get link speed/duplex
[  866.868747][   T63] bond9: (slave .`): failed to get link speed/duplex
[  866.978687][   T63] bond9: (slave .`): failed to get link speed/duplex
[  867.048637][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  867.088784][T30724] bond9: (slave .`): failed to get link speed/duplex
[  867.209485][T30724] bond9: (slave .`): failed to get link speed/duplex
[  867.328947][T26863] bond9: (slave .`): failed to get link speed/duplex
[  871.159007][T26863] net_ratelimit: 33 callbacks suppressed
[  871.159029][T26863] bond9: (slave .`): failed to get link speed/duplex
[  871.278653][   T63] bond9: (slave .`): failed to get link speed/duplex
[  871.394518][  T140] bond9: (slave .`): failed to get link speed/duplex
[  871.508694][  T140] bond9: (slave .`): failed to get link speed/duplex
[  871.618692][  T140] bond9: (slave .`): failed to get link speed/duplex
[  871.728724][  T140] bond9: (slave .`): failed to get link speed/duplex
[  871.838602][   T63] bond9: (slave .`): failed to get link speed/duplex
[  871.959494][  T140] bond9: (slave .`): failed to get link speed/duplex
[  872.008833][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms
[  872.016962][    C0] lec:lec_tx_timeout: lec0
[  872.021768][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  872.079254][   T63] bond9: (slave .`): failed to get link speed/duplex
[  872.189243][T26863] bond9: (slave .`): failed to get link speed/duplex
[  876.179451][T30724] net_ratelimit: 35 callbacks suppressed
[  876.179473][T30724] bond9: (slave .`): failed to get link speed/duplex
[  876.309253][  T140] bond9: (slave .`): failed to get link speed/duplex
[  876.418807][T26852] bond9: (slave .`): failed to get link speed/duplex
[  876.529183][  T140] bond9: (slave .`): failed to get link speed/duplex
[  876.638754][T26852] bond9: (slave .`): failed to get link speed/duplex
[  876.758749][T26852] bond9: (slave .`): failed to get link speed/duplex
[  876.868757][T26852] bond9: (slave .`): failed to get link speed/duplex
[  876.978886][T26863] bond9: (slave .`): failed to get link speed/duplex
[  877.048549][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  877.056693][    C0] lec:lec_tx_timeout: lec0
[  877.089106][T26852] bond9: (slave .`): failed to get link speed/duplex
[  877.198828][T30724] bond9: (slave .`): failed to get link speed/duplex
[  881.208933][T26863] net_ratelimit: 35 callbacks suppressed
[  881.208956][T26863] bond9: (slave .`): failed to get link speed/duplex
[  881.329056][T26863] bond9: (slave .`): failed to get link speed/duplex
[  881.438717][  T140] bond9: (slave .`): failed to get link speed/duplex
[  881.549077][  T140] bond9: (slave .`): failed to get link speed/duplex
[  881.658779][T30724] bond9: (slave .`): failed to get link speed/duplex
[  881.770050][T26852] bond9: (slave .`): failed to get link speed/duplex
[  881.878719][T26852] bond9: (slave .`): failed to get link speed/duplex
[  881.989197][  T140] bond9: (slave .`): failed to get link speed/duplex
[  882.098962][  T140] bond9: (slave .`): failed to get link speed/duplex
[  882.209354][T30724] bond9: (slave .`): failed to get link speed/duplex
[  884.968896][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  886.319323][T26852] net_ratelimit: 36 callbacks suppressed
[  886.319342][T26852] bond9: (slave .`): failed to get link speed/duplex
[  886.439010][T26875] bond9: (slave .`): failed to get link speed/duplex
[  886.548779][   T63] bond9: (slave .`): failed to get link speed/duplex
[  886.658717][T26875] bond9: (slave .`): failed to get link speed/duplex
[  886.769156][   T63] bond9: (slave .`): failed to get link speed/duplex
[  886.878666][T26875] bond9: (slave .`): failed to get link speed/duplex
[  886.988654][T26875] bond9: (slave .`): failed to get link speed/duplex
[  887.108854][   T63] bond9: (slave .`): failed to get link speed/duplex
[  887.218672][T26852] bond9: (slave .`): failed to get link speed/duplex
[  887.329081][T26852] bond9: (slave .`): failed to get link speed/duplex
[  891.328777][T30724] net_ratelimit: 35 callbacks suppressed
[  891.328798][T30724] bond9: (slave .`): failed to get link speed/duplex
[  891.448873][T30724] bond9: (slave .`): failed to get link speed/duplex
[  891.559614][T26875] bond9: (slave .`): failed to get link speed/duplex
[  891.668755][T26852] bond9: (slave .`): failed to get link speed/duplex
[  891.779238][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  891.888624][T26875] bond9: (slave .`): failed to get link speed/duplex
[  891.999092][T26852] bond9: (slave .`): failed to get link speed/duplex
[  892.109078][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  892.219159][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  892.328976][T26875] bond9: (slave .`): failed to get link speed/duplex
[  896.410425][T26875] net_ratelimit: 36 callbacks suppressed
[  896.410440][T26875] bond9: (slave .`): failed to get link speed/duplex
[  896.528899][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  896.638595][T26852] bond9: (slave .`): failed to get link speed/duplex
[  896.748992][T26852] bond9: (slave .`): failed to get link speed/duplex
[  896.859341][T26875] bond9: (slave .`): failed to get link speed/duplex
[  896.969696][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  897.078672][T26875] bond9: (slave .`): failed to get link speed/duplex
[  897.189082][   T63] bond9: (slave .`): failed to get link speed/duplex
[  897.302451][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  897.418695][   T63] bond9: (slave .`): failed to get link speed/duplex
[  901.508577][ T7722] net_ratelimit: 36 callbacks suppressed
[  901.508593][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  901.629095][   T63] bond9: (slave .`): failed to get link speed/duplex
[  901.738999][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  901.848685][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  901.959015][T30724] bond9: (slave .`): failed to get link speed/duplex
[  902.069013][T30724] bond9: (slave .`): failed to get link speed/duplex
[  902.178767][T30724] bond9: (slave .`): failed to get link speed/duplex
[  902.288935][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  902.399059][T26863] bond9: (slave .`): failed to get link speed/duplex
[  902.508619][T26863] bond9: (slave .`): failed to get link speed/duplex
[  906.588731][T30724] net_ratelimit: 36 callbacks suppressed
[  906.588752][T30724] bond9: (slave .`): failed to get link speed/duplex
[  906.709336][T26863] bond9: (slave .`): failed to get link speed/duplex
[  906.819048][T26863] bond9: (slave .`): failed to get link speed/duplex
[  906.928802][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  907.038997][T26863] bond9: (slave .`): failed to get link speed/duplex
[  907.149071][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  907.258913][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  907.370171][T26875] bond9: (slave .`): failed to get link speed/duplex
[  907.479042][T26863] bond9: (slave .`): failed to get link speed/duplex
[  907.589260][T26875] bond9: (slave .`): failed to get link speed/duplex
[  911.608788][ T7722] net_ratelimit: 35 callbacks suppressed
[  911.608810][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  911.728600][T26852] bond9: (slave .`): failed to get link speed/duplex
[  911.838939][T26875] bond9: (slave .`): failed to get link speed/duplex
[  911.949038][T26863] bond9: (slave .`): failed to get link speed/duplex
[  912.058969][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  912.168675][T26863] bond9: (slave .`): failed to get link speed/duplex
[  912.279108][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  912.398883][T26852] bond9: (slave .`): failed to get link speed/duplex
[  912.508610][T26863] bond9: (slave .`): failed to get link speed/duplex
[  912.618696][T26852] bond9: (slave .`): failed to get link speed/duplex
[  913.382595][ T1027] __nla_validate_parse: 10 callbacks suppressed
[  913.382614][ T1027] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7184'.
[  913.432150][ T1027] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7184'.
[  913.471112][ T1022] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7182'.
[  913.547863][ T1041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7187'.
[  913.577852][ T1043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7189'.
[  913.599534][ T1043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7189'.
[  913.752452][ T1056] lo speed is unknown, defaulting to 1000
[  914.064329][ T1077] netlink: 'syz.0.7195': attribute type 4 has an invalid length.
[  914.093046][ T1077] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7195'.
[  914.100753][ T1089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7196'.
[  914.146620][ T1083] bond5: entered allmulticast mode
[  914.210316][ T1094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7199'.
[  914.311761][ T1083] bridge4: entered promiscuous mode
[  914.317977][ T1083] bridge4: entered allmulticast mode
[  914.327760][ T1083] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  914.489444][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7203'.
[  914.659154][ T1121] netlink: 'syz.3.7207': attribute type 1 has an invalid length.
[  914.746827][ T1121] 8021q: adding VLAN 0 to HW filter on device bond6
[  915.239126][ T1152] lo speed is unknown, defaulting to 1000
[  915.625294][ T1163] bond0 (unregistering): Released all slaves
[  915.903380][ T1183] netlink: 'syz.1.7223': attribute type 1 has an invalid length.
[  915.967034][ T1183] 8021q: adding VLAN 0 to HW filter on device bond0
[  916.516845][ T1218] lo speed is unknown, defaulting to 1000
[  916.581452][ T1225] bond6: Unable to set peer notification delay as MII monitoring is disabled
[  916.595923][ T1225] bond6 (unregistering): Released all slaves
[  916.632575][ T1229] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  916.633673][ T1228] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  916.680398][ T1230] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  916.714077][ T1239] netlink: 'syz.3.7233': attribute type 23 has an invalid length.
[  916.729026][   T63] net_ratelimit: 22 callbacks suppressed
[  916.729046][   T63] bond9: (slave .`): failed to get link speed/duplex
[  916.836873][ T1241] Cannot find set identified by id 65534 to match
[  916.988677][ T1252] netlink: 'syz.1.7237': attribute type 1 has an invalid length.
[  917.008911][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  917.075070][ T1252] 8021q: adding VLAN 0 to HW filter on device bond8
[  917.119410][ T1259] 
@0Ù: renamed from bond_slave_1
[  917.172524][ T1264] netlink: 'syz.2.7241': attribute type 4 has an invalid length.
[  917.194541][ T1267] syzkaller0: entered promiscuous mode
[  917.212824][ T1267] syzkaller0: entered allmulticast mode
[  917.400746][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  917.425189][ T1270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.500396][ T1270] veth1_macvtap: left allmulticast mode
[  917.527472][ T1270] ªªªªª»: left allmulticast mode
[  917.628305][T26933] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  917.641930][T26933] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  917.652204][T26933] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  917.666742][T26933] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  917.711066][T26933] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  917.724174][T26933] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  917.734566][ T1278] lo speed is unknown, defaulting to 1000
[  917.767793][T26933] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  917.778022][T26933] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  917.788954][T26933] bond9: (slave .`): failed to get link speed/duplex
[  917.808873][ T1297] sctp: [Deprecated]: syz.2.7247 (pid 1297) Use of struct sctp_assoc_value in delayed_ack socket option.
[  917.808873][ T1297] Use struct sctp_sack_info instead
[  917.826942][ T1290] syzkaller1: entered promiscuous mode
[  917.828094][ T1297] netlink: 'syz.2.7247': attribute type 1 has an invalid length.
[  917.840664][ T1290] syzkaller1: entered allmulticast mode
[  917.927541][ T1297] bond8: Unable to set up delay as MII monitoring is disabled
[  917.973572][ T1297] bond8 (unregistering): Released all slaves
[  918.058824][T30724] bond9: (slave .`): failed to get link speed/duplex
[  918.237053][   T63] bond9: (slave .`): failed to get link speed/duplex
[  918.357847][   T63] bond9: (slave .`): failed to get link speed/duplex
[  918.383076][ T1315] batadv1: entered promiscuous mode
[  918.389002][ T1315] batadv1: entered allmulticast mode
[  918.479455][T26933] bond9: (slave .`): failed to get link speed/duplex
[  918.571006][ T1338] netlink: 'syz.0.7258': attribute type 2 has an invalid length.
[  918.580407][ T1331] bond9: entered promiscuous mode
[  918.585967][ T1331] 8021q: adding VLAN 0 to HW filter on device bond9
[  918.609706][T26933] bond9: (slave .`): failed to get link speed/duplex
[  918.633088][ T1326] nbd: must specify an index to disconnect
[  918.749691][   T63] bond9: (slave .`): failed to get link speed/duplex
[  918.833881][ T1346] lo speed is unknown, defaulting to 1000
[  918.978710][T30724] bond9: (slave .`): failed to get link speed/duplex
[  919.072453][ T1354] __nla_validate_parse: 72 callbacks suppressed
[  919.072473][ T1354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7264'.
[  919.094179][ T1354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7264'.
[  919.108239][ T1354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7264'.
[  919.343701][ T1373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7269'.
[  919.362832][ T1378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7270'.
[  919.466404][ T1383] x_tables: duplicate underflow at hook 3
[  919.502470][ T1381] tipc: Resetting bearer <eth:syzkaller0>
[  919.713990][ T1394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7274'.
[  919.765754][ T1389] lo speed is unknown, defaulting to 1000
[  919.782345][ T1398] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  919.789059][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7276'.
[  919.798284][ T1396] netlink: 252 bytes leftover after parsing attributes in process `syz.1.7276'.
[  919.825595][ T1396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7276'.
[  920.088918][ T1414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7282'.
[  920.168653][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  920.601400][ T1449] netlink: 'syz.2.7290': attribute type 3 has an invalid length.
[  920.826041][ T1468] tipc: Enabling <eth:lo> not permitted
[  920.840432][ T1468] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  920.869676][ T1468] xt_HMARK: spi-set and port-set can't be combined
[  921.161893][ T1498] netlink: 'syz.4.7306': attribute type 1 has an invalid length.
[  921.221212][ T1498] 8021q: adding VLAN 0 to HW filter on device bond6
[  921.830622][T26875] net_ratelimit: 24 callbacks suppressed
[  921.830643][T26875] bond9: (slave .`): failed to get link speed/duplex
[  921.840476][ T1516] GUP no longer grows the stack in syz.0.7311 (1516): 200000003000-20000000a000 (200000001000)
[  921.856085][ T1516] CPU: 1 UID: 0 PID: 1516 Comm: syz.0.7311 Not tainted syzkaller #0 PREEMPT(full) 
[  921.856103][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  921.856112][ T1516] Call Trace:
[  921.856117][ T1516]  <TASK>
[  921.856122][ T1516]  dump_stack_lvl+0xe8/0x150
[  921.856148][ T1516]  __get_user_pages+0x2453/0x29d0
[  921.856167][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[  921.856193][ T1516]  ? __gup_longterm_locked+0xc4e/0x1630
[  921.856210][ T1516]  ? down_read_killable+0x1bb/0x340
[  921.856227][ T1516]  __gup_longterm_locked+0xdcf/0x1630
[  921.856256][ T1516]  gup_fast_fallback+0x1d82/0x22e0
[  921.856289][ T1516]  ? __pfx_gup_fast_fallback+0x10/0x10
[  921.856306][ T1516]  ? is_valid_gup_args+0x11f/0x200
[  921.856323][ T1516]  ? get_user_pages_fast+0x4d/0xb0
[  921.856343][ T1516]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  921.856365][ T1516]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  921.856380][ T1516]  iov_iter_get_pages2+0x5e/0xa0
[  921.856397][ T1516]  __se_sys_vmsplice+0x7b3/0x1490
[  921.856424][ T1516]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  921.856442][ T1516]  ? __pfx_futex_wake+0x10/0x10
[  921.856505][ T1516]  do_syscall_64+0x14d/0xf80
[  921.856524][ T1516]  ? trace_irq_disable+0x3b/0x150
[  921.856549][ T1516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.856571][ T1516]  ? clear_bhb_loop+0x40/0x90
[  921.856594][ T1516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  921.856614][ T1516] RIP: 0033:0x7fd2d399c799
[  921.856634][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  921.856652][ T1516] RSP: 002b:00007fd2d48e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  921.856671][ T1516] RAX: ffffffffffffffda RBX: 00007fd2d3c15fa0 RCX: 00007fd2d399c799
[  921.856679][ T1516] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  921.856686][ T1516] RBP: 00007fd2d3a32c99 R08: 0000000000000000 R09: 0000000000000000
[  921.856693][ T1516] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  921.856700][ T1516] R13: 00007fd2d3c16038 R14: 00007fd2d3c15fa0 R15: 00007ffca9bbc0c8
[  921.856718][ T1516]  </TASK>
[  922.078515][T26852] bond9: (slave .`): failed to get link speed/duplex
[  922.162058][ T1518] netlink: 'syz.1.7312': attribute type 5 has an invalid length.
[  922.208899][T26875] bond9: (slave .`): failed to get link speed/duplex
[  922.329888][T26875] bond9: (slave .`): failed to get link speed/duplex
[  922.441457][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  922.579014][T26875] bond9: (slave .`): failed to get link speed/duplex
[  922.689521][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  922.846839][ T1558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  922.889214][T26875] bond9: (slave .`): failed to get link speed/duplex
[  922.934573][ T1564] netlink: 'syz.1.7325': attribute type 1 has an invalid length.
[  923.062881][ T1556] lo speed is unknown, defaulting to 1000
[  923.069981][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  923.088541][ T1561] lo speed is unknown, defaulting to 1000
[  923.994052][ T1596] netlink: 'syz.1.7332': attribute type 1 has an invalid length.
[  924.054420][ T1596] 8021q: adding VLAN 0 to HW filter on device bond10
[  924.154858][ T1608] netlink: 'syz.3.7337': attribute type 13 has an invalid length.
[  924.255899][ T1616] __nla_validate_parse: 14 callbacks suppressed
[  924.255920][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7340'.
[  924.258789][T10964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  924.263673][ T1616] netlink: 252 bytes leftover after parsing attributes in process `syz.4.7340'.
[  924.294042][ T1615] netlink: 'syz.1.7339': attribute type 3 has an invalid length.
[  924.303063][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7340'.
[  924.315708][ T1619] netlink: 'syz.1.7339': attribute type 1 has an invalid length.
[  924.329427][ T1619] netlink: 'syz.1.7339': attribute type 1 has an invalid length.
[  924.593123][ T1644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7347'.
[  924.632929][ T1644] netlink: 'syz.4.7347': attribute type 2 has an invalid length.
[  924.743284][ T1652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7350'.
[  924.755367][ T1652] nbd: must specify a device to reconfigure
[  924.784660][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7352'.
[  924.798611][ T1657] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7352'.
[  924.810535][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7352'.
[  924.838794][T10964] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  924.904809][ T1664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7353'.
[  924.938172][ T1659] 8021q: adding VLAN 0 to HW filter on device bond7
[  924.982051][ T1659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7353'.
[  925.189487][ T1676] bond8: entered promiscuous mode
[  925.195209][ T1676] 8021q: adding VLAN 0 to HW filter on device bond8
[  925.278264][ T1676] bond8: (slave bridge3): making interface the new active one
[  925.287491][ T1676] bridge3: entered promiscuous mode
[  925.296447][ T1676] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  925.340849][ T1683] gtp0: entered promiscuous mode
[  925.345825][ T1683] gtp0: entered allmulticast mode
[  925.360784][ T1682] lo speed is unknown, defaulting to 1000
[  925.852242][ T1698] nbd: must specify a size in bytes for the device
[  926.201313][ T1720] validate_nla: 4 callbacks suppressed
[  926.201333][ T1720] netlink: 'syz.2.7370': attribute type 1 has an invalid length.
[  926.266295][ T1720] 8021q: adding VLAN 0 to HW filter on device bond8
[  926.529080][ T1748] netlink: 'syz.4.7378': attribute type 1 has an invalid length.
[  926.557816][ T1749] macvlan0: entered promiscuous mode
[  926.564740][ T1749] netlink: 'syz.0.7377': attribute type 2 has an invalid length.
[  926.858906][T26871] net_ratelimit: 26 callbacks suppressed
[  926.858928][T26871] bond9: (slave .`): failed to get link speed/duplex
[  926.965259][ T1765] macvtap0: entered promiscuous mode
[  927.075977][ T1771] netlink: 'syz.2.7386': attribute type 1 has an invalid length.
[  927.163529][ T1771] 8021q: adding VLAN 0 to HW filter on device bond10
[  927.188602][ T7722] bond9: (slave .`): failed to get link speed/duplex
[  927.199655][ T1748] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  927.243501][ T1778] lo speed is unknown, defaulting to 1000
[  927.352255][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  927.387296][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  927.412667][ T1782] batman_adv: batadv0: Removing interface: ip6gretap1
[  927.492365][ T1797] batman_adv: batadv0: Removing interface: batadv_slave_0
[  927.493446][ T1794] netlink: 'syz.1.7392': attribute type 4 has an invalid length.
[  927.509581][ T1797] batman_adv: batadv0: Removing interface: batadv_slave_1
[  927.578873][ T1800] netlink: 'syz.1.7392': attribute type 4 has an invalid length.
[  927.636166][ T1790] batman_adv: batadv0: Adding interface: ipvlan2
[  927.643200][ T1790] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  927.677595][ T1790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.690227][ T1807] netlink: 'syz.2.7394': attribute type 1 has an invalid length.
[  927.705836][ T1790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.718050][ T1790] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  927.730771][ T1797] xt_TPROXY: Can be used only with -p tcp or -p udp
[  927.777546][ T1796] team0: Port device team_slave_0 removed
[  927.889742][ T1802] bond11 (unregistering): Released all slaves
[  927.972740][T26853] bond9: (slave .`): failed to get link speed/duplex
[  928.122773][ T7714] bond9: (slave .`): failed to get link speed/duplex
[  928.144682][ T1827] tipc: Invalid UDP bearer configuration
[  928.144803][ T1827] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  928.222883][ T1833] netlink: 'syz.2.7400': attribute type 1 has an invalid length.
[  928.252048][ T1827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.268654][ T1827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  928.354058][ T1833] 8021q: adding VLAN 0 to HW filter on device bond11
[  928.450450][ T1827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.462481][ T1827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  928.519227][T26871] bond9: (slave .`): failed to get link speed/duplex
[  928.591834][ T1827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  928.604916][ T1827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  928.704804][ T1862] bridge_slave_1: left allmulticast mode
[  928.713585][ T1862] bridge_slave_1: left promiscuous mode
[  928.720065][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.761010][ T1869] sctp: [Deprecated]: syz.2.7411 (pid 1869) Use of int in max_burst socket option deprecated.
[  928.761010][ T1869] Use struct sctp_assoc_value instead
[  928.793610][ T1862] bridge_slave_0: left allmulticast mode
[  928.807825][ T1862] bridge_slave_0: left promiscuous mode
[  928.841168][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.977603][ T1827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  929.004509][ T1827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  929.098962][T26855] bond9: (slave .`): failed to get link speed/duplex
[  929.130159][ T1889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  929.205301][ T1893] netlink: 'syz.2.7416': attribute type 1 has an invalid length.
[  929.271996][ T7714] bond9: (slave .`): failed to get link speed/duplex
[  929.335895][ T7714] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  929.355764][ T7714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  929.397106][ T7714] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  929.415575][ T7714] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  929.477393][T26856] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  929.497073][T26856] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  929.538622][T26856] bond9: (slave .`): failed to get link speed/duplex
[  929.563106][T26853] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  929.596479][T26853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  929.650916][T26853] bond9: (slave .`): failed to get link speed/duplex
[  929.707653][ T1917] __nla_validate_parse: 17 callbacks suppressed
[  929.707674][ T1917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7423'.
[  929.726851][ T1917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7423'.
[  929.743369][ T1917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7423'.
[  929.768201][ T1919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7424'.
[  929.841354][ T1926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7425'.
[  929.847257][ T1915] lo speed is unknown, defaulting to 1000
[  929.859383][ T1926] bond0: entered promiscuous mode
[  929.865113][ T1926] bond_slave_0: entered promiscuous mode
[  929.875312][ T1926] 
@0Ù: entered promiscuous mode
[  929.882875][ T1926] gretap0: entered promiscuous mode
[  929.889955][ T1926] hsr1: entered promiscuous mode
[  929.934353][ T1919] nbd: socks must be embedded in a SOCK_ITEM attr
[  929.972568][ T1930] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7426'.
[  929.984708][ T1924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7424'.
[  930.021524][ T1924] nbd: socks must be embedded in a SOCK_ITEM attr
[  930.042581][ T1932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7427'.
[  930.059069][ T1057] block nbd64: NBD_DISCONNECT
[  930.084771][ T1932] netlink: 'syz.0.7427': attribute type 30 has an invalid length.
[  930.116696][T26871] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  930.127567][ T1932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7427'.
[  930.179487][T26871] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  930.202153][ T1057] udevd[1057]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  930.279553][T26871] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  930.323267][T26871] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  930.365687][ T1941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7429'.
[  930.421080][ T1942] bond0: entered promiscuous mode
[  930.426378][ T1947] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  930.441252][ T1942] dummy0: entered promiscuous mode
[  930.451940][ T1942] debugfs: 'hsr1' already exists in 'hsr'
[  930.457841][ T1942] Cannot create hsr debugfs directory
[  930.497110][ T1942] hsr1: entered promiscuous mode
[  930.683598][ T1964] erspan0: entered promiscuous mode
[  931.667489][ T2019] dvmrp12: entered allmulticast mode
[  931.697079][ T1296] lec:lec_start_xmit: lec0:No lecd attached
[  931.709640][ T2016] dvmrp12: left allmulticast mode
[  931.741046][ T2008] lo speed is unknown, defaulting to 1000
[  931.899753][ T7714] net_ratelimit: 13 callbacks suppressed
[  931.899772][ T7714] bond9: (slave .`): failed to get link speed/duplex
[  932.003792][ T2040] validate_nla: 1 callbacks suppressed
[  932.003810][ T2040] netlink: 'syz.4.7462': attribute type 1 has an invalid length.
[  932.134943][ T2040] bond7: entered promiscuous mode
[  932.163853][ T2040] 8021q: adding VLAN 0 to HW filter on device bond7
[  932.266015][ T2048] 8021q: adding VLAN 0 to HW filter on device bond8
[  932.275890][ T2048] bond7: (slave bond8): making interface the new active one
[  932.283716][ T2048] bond8: entered promiscuous mode
[  932.289767][ T2048] bond7: (slave bond8): Enslaving as an active interface with an up link
[  932.341259][T26853] bond9: (slave .`): failed to get link speed/duplex
[  932.428842][ T2059] netlink: 'syz.1.7466': attribute type 1 has an invalid length.
[  932.429997][ T2062] gretap2: entered promiscuous mode
[  932.443195][ T2062] gretap2: entered allmulticast mode
[  932.499960][ T2059] 8021q: adding VLAN 0 to HW filter on device bond11
[  932.529931][T26856] bond9: (slave .`): failed to get link speed/duplex
[  932.533079][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.562072][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.569392][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.576368][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.583598][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.591171][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.598222][ T2067] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  932.692228][ T2080] vlan3: entered allmulticast mode
[  933.387956][ T2091] macsec0: entered allmulticast mode
[  933.614387][ T2101] veth6: entered allmulticast mode
[  933.616980][ T2106] netlink: 'syz.1.7483': attribute type 1 has an invalid length.
[  933.698851][ T2108] Bluetooth: MGMT ver 1.23
[  933.800225][ T2115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  934.076322][ T2127] xt_hashlimit: max too large, truncated to 1048576
[  934.099271][ T2127] xt_bpf: check failed: parse error
[  934.306377][ T2138] netlink: 'syz.4.7494': attribute type 1 has an invalid length.
[  934.344876][ T2138] 8021q: adding VLAN 0 to HW filter on device bond9
[  934.419084][ T2141] netlink: 'syz.4.7496': attribute type 1 has an invalid length.
[  934.742437][ T2156] FAULT_INJECTION: forcing a failure.
[  934.742437][ T2156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  934.760101][ T2156] CPU: 1 UID: 0 PID: 2156 Comm: syz.1.7500 Not tainted syzkaller #0 PREEMPT(full) 
[  934.760128][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  934.760139][ T2156] Call Trace:
[  934.760147][ T2156]  <TASK>
[  934.760156][ T2156]  dump_stack_lvl+0xe8/0x150
[  934.760185][ T2156]  should_fail_ex+0x412/0x560
[  934.760214][ T2156]  _copy_from_user+0x2d/0xb0
[  934.760243][ T2156]  __copy_msghdr+0x3c5/0x5b0
[  934.760274][ T2156]  ___sys_sendmsg+0x213/0x360
[  934.760295][ T2156]  ? __pfx____sys_sendmsg+0x10/0x10
[  934.760317][ T2156]  ? kstrtouint+0x6e/0xe0
[  934.760363][ T2156]  ? __fget_files+0x2a/0x420
[  934.760387][ T2156]  ? __fget_files+0x3a0/0x420
[  934.760418][ T2156]  __sys_sendmmsg+0x27c/0x4e0
[  934.760438][ T2156]  ? __pfx___sys_sendmmsg+0x10/0x10
[  934.760453][ T2156]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  934.760492][ T2156]  ? ksys_write+0x242/0x270
[  934.760515][ T2156]  ? __pfx_ksys_write+0x10/0x10
[  934.760543][ T2156]  __x64_sys_sendmmsg+0xa0/0xc0
[  934.760563][ T2156]  do_syscall_64+0x14d/0xf80
[  934.760580][ T2156]  ? trace_irq_disable+0x3b/0x150
[  934.760604][ T2156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.760622][ T2156]  ? clear_bhb_loop+0x40/0x90
[  934.760644][ T2156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.760662][ T2156] RIP: 0033:0x7f5bef99c799
[  934.760680][ T2156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.760694][ T2156] RSP: 002b:00007f5bf0876028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  934.760715][ T2156] RAX: ffffffffffffffda RBX: 00007f5befc15fa0 RCX: 00007f5bef99c799
[  934.760728][ T2156] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000012
[  934.760740][ T2156] RBP: 00007f5bf0876090 R08: 0000000000000000 R09: 0000000000000000
[  934.760752][ T2156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  934.760763][ T2156] R13: 00007f5befc16038 R14: 00007f5befc15fa0 R15: 00007ffdd4fb6e18
[  934.760799][ T2156]  </TASK>
[  935.111960][ T2162] __nla_validate_parse: 25 callbacks suppressed
[  935.111979][ T2162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7502'.
[  935.180121][ T2166] netlink: 'syz.1.7504': attribute type 1 has an invalid length.
[  935.294404][ T2166] 8021q: adding VLAN 0 to HW filter on device bond12
[  935.403915][ T2180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7508'.
[  935.556101][ T2197] FAULT_INJECTION: forcing a failure.
[  935.556101][ T2197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  935.571891][ T2197] CPU: 1 UID: 0 PID: 2197 Comm: syz.3.7513 Not tainted syzkaller #0 PREEMPT(full) 
[  935.571916][ T2197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  935.571928][ T2197] Call Trace:
[  935.571936][ T2197]  <TASK>
[  935.571944][ T2197]  dump_stack_lvl+0xe8/0x150
[  935.571974][ T2197]  should_fail_ex+0x412/0x560
[  935.572003][ T2197]  _copy_to_user+0x31/0xb0
[  935.572040][ T2197]  simple_read_from_buffer+0xe1/0x170
[  935.572070][ T2197]  proc_fail_nth_read+0x1bb/0x230
[  935.572106][ T2197]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  935.572134][ T2197]  ? rw_verify_area+0x2a6/0x4d0
[  935.572153][ T2197]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  935.572179][ T2197]  vfs_read+0x20c/0xa70
[  935.572196][ T2197]  ? fdget_pos+0x246/0x320
[  935.572226][ T2197]  ? __pfx___mutex_lock+0x10/0x10
[  935.572247][ T2197]  ? __pfx_vfs_read+0x10/0x10
[  935.572267][ T2197]  ? __fget_files+0x2a/0x420
[  935.572296][ T2197]  ? __fget_files+0x3a0/0x420
[  935.572319][ T2197]  ? __fget_files+0x2a/0x420
[  935.572353][ T2197]  ksys_read+0x150/0x270
[  935.572374][ T2197]  ? __pfx_ksys_read+0x10/0x10
[  935.572409][ T2197]  do_syscall_64+0x14d/0xf80
[  935.572425][ T2197]  ? trace_irq_disable+0x3b/0x150
[  935.572450][ T2197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.572468][ T2197]  ? clear_bhb_loop+0x40/0x90
[  935.572491][ T2197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  935.572509][ T2197] RIP: 0033:0x7f4ed5b5cfce
[  935.572526][ T2197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  935.572541][ T2197] RSP: 002b:00007f4ed3df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  935.572561][ T2197] RAX: ffffffffffffffda RBX: 00007f4ed3df66c0 RCX: 00007f4ed5b5cfce
[  935.572575][ T2197] RDX: 000000000000000f RSI: 00007f4ed3df60a0 RDI: 0000000000000015
[  935.572587][ T2197] RBP: 00007f4ed3df6090 R08: 0000000000000000 R09: 0000000000000000
[  935.572597][ T2197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  935.572608][ T2197] R13: 00007f4ed5e16038 R14: 00007f4ed5e15fa0 R15: 00007ffedfe35e88
[  935.572639][ T2197]  </TASK>
[  936.055851][ T2211] lo speed is unknown, defaulting to 1000
[  936.614268][ T2245] lo speed is unknown, defaulting to 1000
[  936.719191][ T2249] lo speed is unknown, defaulting to 1000
[  936.844305][ T2256] dvmrp1: entered allmulticast mode
[  936.873789][ T2260] dvmrp1: left allmulticast mode
[  936.910201][ T2256] x_tables: duplicate underflow at hook 2
[  936.963321][ T2253] syzkaller0: left promiscuous mode
[  936.977218][ T2253] syzkaller0: left allmulticast mode
[  936.979342][ T2266] x_tables: duplicate underflow at hook 2
[  936.989447][ T2259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  937.012667][ T2259] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7528'.
[  937.034247][ T2259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.045905][ T2259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.055080][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms
[  937.055114][    C0] lec:lec_tx_timeout: lec0
[  937.092852][ T2259] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  937.110435][ T2259] bond0 (unregistering): Released all slaves
[  937.134015][T26856] net_ratelimit: 3347 callbacks suppressed
[  937.134031][T26856] bond9: (slave .`): failed to get link speed/duplex
[  937.201155][T10960] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  937.261939][ T2269] lo speed is unknown, defaulting to 1000
[  937.579633][ T1155] bond9: (slave .`): failed to get link speed/duplex
[  937.719240][T26871] bond9: (slave .`): failed to get link speed/duplex
[  937.766587][ T2304] netlink: 'syz.1.7538': attribute type 1 has an invalid length.
[  937.821770][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7534'.
[  937.825516][ T2304] gretap3: entered allmulticast mode
[  937.991135][ T2317] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16
[  938.090109][T10960] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  938.139709][ T1155] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  938.171832][T26856] bond9: (slave .`): failed to get link speed/duplex
[  938.210774][ T2319] FAULT_INJECTION: forcing a failure.
[  938.210774][ T2319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  938.235676][ T2319] CPU: 0 UID: 0 PID: 2319 Comm: syz.4.7541 Not tainted syzkaller #0 PREEMPT(full) 
[  938.235703][ T2319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  938.235715][ T2319] Call Trace:
[  938.235722][ T2319]  <TASK>
[  938.235730][ T2319]  dump_stack_lvl+0xe8/0x150
[  938.235761][ T2319]  should_fail_ex+0x412/0x560
[  938.235789][ T2319]  _copy_from_user+0x2d/0xb0
[  938.235817][ T2319]  __sys_connect+0x156/0x450
[  938.235845][ T2319]  ? __pfx___sys_connect+0x10/0x10
[  938.235879][ T2319]  ? __pfx_ksys_write+0x10/0x10
[  938.235907][ T2319]  __x64_sys_connect+0x7a/0x90
[  938.235932][ T2319]  do_syscall_64+0x14d/0xf80
[  938.235948][ T2319]  ? trace_irq_disable+0x3b/0x150
[  938.235972][ T2319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.235990][ T2319]  ? clear_bhb_loop+0x40/0x90
[  938.236013][ T2319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.236030][ T2319] RIP: 0033:0x7f322239c799
[  938.236047][ T2319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  938.236062][ T2319] RSP: 002b:00007f32232c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  938.236082][ T2319] RAX: ffffffffffffffda RBX: 00007f3222615fa0 RCX: 00007f322239c799
[  938.236095][ T2319] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  938.236107][ T2319] RBP: 00007f32232c6090 R08: 0000000000000000 R09: 0000000000000000
[  938.236118][ T2319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  938.236128][ T2319] R13: 00007f3222616038 R14: 00007f3222615fa0 R15: 00007fff435c61a8
[  938.236157][ T2319]  </TASK>
[  938.415588][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7544'.
[  938.441111][ T2322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7542'.
[  938.463728][ T2324] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7544'.
[  938.488524][ T7714] bond9: (slave .`): failed to get link speed/duplex
[  938.679185][ T2336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7545'.
[  938.719636][ T7714] bond9: (slave .`): failed to get link speed/duplex
[  938.872015][T26853] bond9: (slave .`): failed to get link speed/duplex
[  938.903286][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7550'.
[  939.018625][T26929] bond9: (slave .`): failed to get link speed/duplex
[  939.056824][ T2360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7553'.
[  939.123832][ T2366] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  939.189022][T26856] bond9: (slave .`): failed to get link speed/duplex
[  939.219225][T26929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  939.228034][T26929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  939.279790][ T2372] netlink: 'syz.1.7556': attribute type 1 has an invalid length.
[  939.430315][T10964] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  939.647029][ T2381] lo speed is unknown, defaulting to 1000
[  940.457869][ T2435] __nla_validate_parse: 65 callbacks suppressed
[  940.457888][ T2435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7574'.
[  940.633799][ T2450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7576'.
[  940.818203][ T2454] syzkaller0: entered promiscuous mode
[  940.842184][ T2466] siw: device registration error -23
[  940.851585][ T2454] syzkaller0: entered allmulticast mode
[  940.893432][ T2466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7582'.
[  942.106392][ T2484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7586'.
[  943.051948][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  944.728977][T26858] net_ratelimit: 10 callbacks suppressed
[  944.728998][T26858] bond9: (slave .`): failed to get link speed/duplex
[  944.781421][ T2499] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  944.795705][ T2499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  944.933223][ T2506] syzkaller1: entered promiscuous mode
[  944.958673][ T2506] syzkaller1: entered allmulticast mode
[  945.118750][T26858] bond9: (slave .`): failed to get link speed/duplex
[  945.162076][ T2531] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7594'.
[  945.282179][ T2529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  945.430506][ T2545] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7597'.
[  945.520578][ T2533] bond13: entered promiscuous mode
[  945.570898][ T2533] bond13: entered allmulticast mode
[  945.592140][ T2533] 8021q: adding VLAN 0 to HW filter on device bond13
[  945.689850][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  945.726049][ T2552] xt_hashlimit: size too large, truncated to 1048576
[  945.732011][ T2545] macsec1: left allmulticast mode
[  945.758932][ T2545] veth3: left promiscuous mode
[  945.804661][ T2545] bridge0: left allmulticast mode
[  945.830159][ T2545] vlan2: left promiscuous mode
[  945.830845][ T2539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7597'.
[  945.853284][ T2545] geneve1: left promiscuous mode
[  945.863791][ T2545] vlan2: left allmulticast mode
[  945.895408][ T2545] geneve1: left allmulticast mode
[  945.943202][ T2545] gtp0: left promiscuous mode
[  945.948237][ T2545] gtp0: left allmulticast mode
[  946.023509][T26932] bond9: (slave .`): failed to get link speed/duplex
[  946.035410][ T2563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7601'.
[  946.089702][ T2568] FAULT_INJECTION: forcing a failure.
[  946.089702][ T2568] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  946.092768][ T2563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7601'.
[  946.144300][ T2568] CPU: 1 UID: 0 PID: 2568 Comm: syz.4.7603 Not tainted syzkaller #0 PREEMPT(full) 
[  946.144325][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  946.144336][ T2568] Call Trace:
[  946.144343][ T2568]  <TASK>
[  946.144351][ T2568]  dump_stack_lvl+0xe8/0x150
[  946.144382][ T2568]  should_fail_ex+0x412/0x560
[  946.144411][ T2568]  _copy_from_iter+0x1d3/0x1670
[  946.144435][ T2568]  ? unwind_next_frame+0xa5/0x23c0
[  946.144467][ T2568]  ? __lock_acquire+0x6b5/0x2cf0
[  946.144490][ T2568]  ? __pfx__copy_from_iter+0x10/0x10
[  946.144527][ T2568]  tun_get_user+0x275/0x3dd0
[  946.144695][ T2568]  ? aa_file_perm+0x192/0x15e0
[  946.144723][ T2568]  ? aa_file_perm+0x50e/0x15e0
[  946.144744][ T2568]  ? __pfx_tun_get_user+0x10/0x10
[  946.144765][ T2568]  ? aa_file_perm+0x192/0x15e0
[  946.144792][ T2568]  ? __lock_acquire+0x6b5/0x2cf0
[  946.144823][ T2568]  ? ref_tracker_alloc+0x35c/0x4c0
[  946.144878][ T2568]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  946.144905][ T2568]  ? tun_get+0x1c/0x2f0
[  946.144931][ T2568]  ? tun_get+0x1c/0x2f0
[  946.144951][ T2568]  ? tun_get+0x1c/0x2f0
[  946.144976][ T2568]  tun_chr_write_iter+0x113/0x200
[  946.145002][ T2568]  vfs_write+0x61d/0xb90
[  946.145029][ T2568]  ? __pfx_vfs_write+0x10/0x10
[  946.145057][ T2568]  ? __fget_files+0x2a/0x420
[  946.145089][ T2568]  ksys_write+0x150/0x270
[  946.145109][ T2568]  ? __pfx_ksys_write+0x10/0x10
[  946.145136][ T2568]  do_syscall_64+0x14d/0xf80
[  946.145154][ T2568]  ? trace_irq_disable+0x3b/0x150
[  946.145178][ T2568]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.145196][ T2568]  ? clear_bhb_loop+0x40/0x90
[  946.145218][ T2568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.145236][ T2568] RIP: 0033:0x7f322239c799
[  946.145254][ T2568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  946.145269][ T2568] RSP: 002b:00007f32232c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  946.145288][ T2568] RAX: ffffffffffffffda RBX: 00007f3222615fa0 RCX: 00007f322239c799
[  946.145301][ T2568] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003
[  946.145312][ T2568] RBP: 00007f32232c6090 R08: 0000000000000000 R09: 0000000000000000
[  946.145326][ T2568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  946.145337][ T2568] R13: 00007f3222616038 R14: 00007f3222615fa0 R15: 00007fff435c61a8
[  946.145366][ T2568]  </TASK>
[  946.151233][ T2566] netlink: 'syz.3.7601': attribute type 5 has an invalid length.
[  946.183603][ T2581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7606'.
[  946.219520][ T2578] netlink: 'syz.2.7605': attribute type 1 has an invalid length.
[  946.257647][ T2566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7601'.
[  946.262751][ T2582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7601'.
[  946.331708][ T2581] netlink: 'syz.1.7606': attribute type 2 has an invalid length.
[  946.480332][ T2582] ip6tnl4: entered allmulticast mode
[  946.508283][ T2578] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  946.516219][ T2581] hmac(sha224): entered promiscuous mode
[  946.583271][ T2599] netlink: 'syz.2.7608': attribute type 11 has an invalid length.
[  946.630362][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  946.723591][ T2609] FAULT_INJECTION: forcing a failure.
[  946.723591][ T2609] name failslab, interval 1, probability 0, space 0, times 0
[  946.737318][ T2609] CPU: 1 UID: 0 PID: 2609 Comm: syz.0.7611 Not tainted syzkaller #0 PREEMPT(full) 
[  946.737343][ T2609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  946.737354][ T2609] Call Trace:
[  946.737362][ T2609]  <TASK>
[  946.737369][ T2609]  dump_stack_lvl+0xe8/0x150
[  946.737400][ T2609]  should_fail_ex+0x412/0x560
[  946.737429][ T2609]  should_failslab+0xa8/0x100
[  946.737451][ T2609]  ? dst_alloc+0x105/0x170
[  946.737541][ T2609]  kmem_cache_alloc_noprof+0x87/0x650
[  946.737569][ T2609]  dst_alloc+0x105/0x170
[  946.737593][ T2609]  ip_route_output_key_hash_rcu+0x14d0/0x25d0
[  946.737674][ T2609]  ? ip_route_output_key_hash+0xd8/0x2a0
[  946.737709][ T2609]  ip_route_output_key_hash+0x18d/0x2a0
[  946.737733][ T2609]  ? look_up_lock_class+0x57/0x110
[  946.737759][ T2609]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  946.737802][ T2609]  ip_route_output_flow+0x2a/0x150
[  946.737829][ T2609]  ip4_datagram_release_cb+0x89f/0xbe0
[  946.737891][ T2609]  ? ip4_datagram_release_cb+0xa2/0xbe0
[  946.737914][ T2609]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[  946.737933][ T2609]  ? do_raw_spin_lock+0x12b/0x2f0
[  946.737965][ T2609]  ? release_sock+0x2f/0x1f0
[  946.737987][ T2609]  ? __pfx_ip4_datagram_release_cb+0x10/0x10
[  946.738009][ T2609]  release_sock+0x1a3/0x1f0
[  946.738033][ T2609]  udp_connect+0x4f/0x1f0
[  946.738086][ T2609]  __sys_connect+0x312/0x450
[  946.738114][ T2609]  ? __pfx___sys_connect+0x10/0x10
[  946.738151][ T2609]  ? __pfx_ksys_write+0x10/0x10
[  946.738179][ T2609]  __x64_sys_connect+0x7a/0x90
[  946.738204][ T2609]  do_syscall_64+0x14d/0xf80
[  946.738220][ T2609]  ? trace_irq_disable+0x3b/0x150
[  946.738244][ T2609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.738262][ T2609]  ? clear_bhb_loop+0x40/0x90
[  946.738282][ T2609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.738299][ T2609] RIP: 0033:0x7fd2d399c799
[  946.738316][ T2609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  946.738329][ T2609] RSP: 002b:00007fd2d48e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  946.738348][ T2609] RAX: ffffffffffffffda RBX: 00007fd2d3c15fa0 RCX: 00007fd2d399c799
[  946.738359][ T2609] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  946.738369][ T2609] RBP: 00007fd2d48e6090 R08: 0000000000000000 R09: 0000000000000000
[  946.738379][ T2609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  946.738388][ T2609] R13: 00007fd2d3c16038 R14: 00007fd2d3c15fa0 R15: 00007ffca9bbc0c8
[  946.738415][ T2609]  </TASK>
[  946.785597][ T2610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7612'.
[  946.929672][T26858] bond9: (slave .`): failed to get link speed/duplex
[  946.960856][ T2617] netlink: 516 bytes leftover after parsing attributes in process `syz.2.7612'.
[  947.119344][ T2616] tipc: Started in network mode
[  947.158768][ T2616] tipc: Node identity 167d9116d9f2, cluster identity 4711
[  947.178721][ T2616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  947.186335][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  947.217764][ T2631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7618'.
[  947.296327][ T2619] syzkaller0: entered promiscuous mode
[  947.303644][ T2619] syzkaller0: entered allmulticast mode
[  947.311272][ T2619] tipc: Resetting bearer <eth:syzkaller0>
[  947.328600][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  947.360351][ T2615] tipc: Resetting bearer <eth:syzkaller0>
[  947.391848][ T2644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7619'.
[  947.612456][ T2652] FAULT_INJECTION: forcing a failure.
[  947.612456][ T2652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  947.633905][ T2652] CPU: 1 UID: 0 PID: 2652 Comm: syz.2.7621 Not tainted syzkaller #0 PREEMPT(full) 
[  947.633928][ T2652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  947.633938][ T2652] Call Trace:
[  947.633945][ T2652]  <TASK>
[  947.633953][ T2652]  dump_stack_lvl+0xe8/0x150
[  947.633980][ T2652]  should_fail_ex+0x412/0x560
[  947.634004][ T2652]  _copy_from_user+0x2d/0xb0
[  947.634028][ T2652]  kstrtouint_from_user+0xd6/0x180
[  947.634049][ T2652]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  947.634082][ T2652]  proc_fail_nth_write+0x8e/0x210
[  947.634103][ T2652]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  947.634128][ T2652]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  947.634149][ T2652]  vfs_write+0x29a/0xb90
[  947.634185][ T2652]  ? __pfx_vfs_write+0x10/0x10
[  947.634203][ T2652]  ? __fget_files+0x2a/0x420
[  947.634227][ T2652]  ? __fget_files+0x3a0/0x420
[  947.634246][ T2652]  ? __fget_files+0x2a/0x420
[  947.634274][ T2652]  ksys_write+0x150/0x270
[  947.634292][ T2652]  ? __pfx_ksys_write+0x10/0x10
[  947.634318][ T2652]  do_syscall_64+0x14d/0xf80
[  947.634333][ T2652]  ? trace_irq_disable+0x3b/0x150
[  947.634354][ T2652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.634369][ T2652]  ? clear_bhb_loop+0x40/0x90
[  947.634388][ T2652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.634403][ T2652] RIP: 0033:0x7f059215cfce
[  947.634419][ T2652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  947.634433][ T2652] RSP: 002b:00007f05930cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  947.634451][ T2652] RAX: ffffffffffffffda RBX: 00007f05930d06c0 RCX: 00007f059215cfce
[  947.634462][ T2652] RDX: 0000000000000001 RSI: 00007f05930d00a0 RDI: 0000000000000005
[  947.634471][ T2652] RBP: 00007f05930d0090 R08: 0000000000000000 R09: 0000000000000000
[  947.634480][ T2652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  947.634489][ T2652] R13: 00007f0592416218 R14: 00007f0592416180 R15: 00007ffd4633e218
[  947.634515][ T2652]  </TASK>
[  950.616427][ T2615] tipc: Disabling bearer <eth:syzkaller0>
[  950.650167][T26867] bond9: (slave .`): failed to get link speed/duplex
[  950.660238][ T2643] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  950.681886][ T2643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  950.692311][ T2643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  950.780427][ T2645] tipc: Resetting bearer <eth:syzkaller0>
[  950.817930][ T2673] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  950.838987][ T2665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7624'.
[  950.888543][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  950.898954][T10960] tipc: Node number set to 3482292502
[  950.904857][T26858] bond9: (slave .`): failed to get link speed/duplex
[  950.986734][ T2664] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  950.997850][ T2672] pim6reg1: entered promiscuous mode
[  951.014647][ T2672] pim6reg1: entered allmulticast mode
[  951.138762][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  951.219551][ T2700] netlink: 'syz.1.7631': attribute type 1 has an invalid length.
[  951.283475][ T2700] 8021q: adding VLAN 0 to HW filter on device bond14
[  951.348567][ T2715] xt_hashlimit: size too large, truncated to 1048576
[  951.387215][ T2712] bond14: (slave veth7): Enslaving as an active interface with a down link
[  951.490756][ T2700] 8021q: adding VLAN 0 to HW filter on device batadv1
[  951.499950][ T2700] bond14: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  951.590820][T26854] bond9: (slave .`): failed to get link speed/duplex
[  951.684408][ T2736] lo speed is unknown, defaulting to 1000
[  951.720480][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  951.858645][  T140] bond9: (slave .`): failed to get link speed/duplex
[  951.964965][ T2752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7639'.
[  951.980278][   T63] bond9: (slave .`): failed to get link speed/duplex
[  951.998219][ T2752] hsr_slave_0: left promiscuous mode
[  952.033251][ T2752] hsr_slave_1: left promiscuous mode
[  952.043135][   T29] audit: type=1107 audit(1773265013.978:18): pid=2754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ºýéñ2€á¯sýw
[  952.043135][   T29] ÑTÍv«ä1O)ê" `'
[  952.043135][   T29] Èdj6ÒŠ’¹¹. ˆÌ©Íª	Å—7c›–i‰žqÛ‚ðÆI*7ókNá£Ûë×W!ûùj†½#–º)x2§¥UÛÙ/ÊÜÇO’ˆXY¢ûÚB ½#¾'
[  952.280172][ T2763] lo speed is unknown, defaulting to 1000
[  952.292029][T26867] bond9: (slave .`): failed to get link speed/duplex
[  952.613431][ T2787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  952.698150][T26854] bond9: (slave .`): failed to get link speed/duplex
[  952.845093][ T2802] veth1_macvtap: entered allmulticast mode
[  952.883295][ T2791] lo speed is unknown, defaulting to 1000
[  952.985217][ T2799] IPVS: length: 132 != 8
[  953.031141][ T2806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7652'.
[  953.211227][ T2821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7652'.
[  953.241452][ T2806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7652'.
[  953.255282][ T2806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7652'.
[  953.336314][ T2828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7656'.
[  953.668892][ T2834] netlink: 'syz.0.7658': attribute type 4 has an invalid length.
[  953.695515][ T2835] syzkaller1: entered promiscuous mode
[  953.703987][ T2835] syzkaller1: entered allmulticast mode
[  953.837674][ T2877] netlink: 'syz.1.7665': attribute type 3 has an invalid length.
[  953.877215][ T2877] netlink: 'syz.1.7665': attribute type 3 has an invalid length.
[  953.906650][ T2877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7665'.
[  954.280670][ T2891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7669'.
[  954.489844][ T2897] syzkaller0: Caught tx_queue_len zero misconfig
[  954.497171][ T2897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  954.782199][ T2906] netlink: 388 bytes leftover after parsing attributes in process `syz.3.7675'.
[  954.840447][ T2913] tipc: Invalid UDP bearer configuration
[  954.840497][ T2913] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  954.897597][ T2916] netlink: 'syz.0.7678': attribute type 1 has an invalid length.
[  955.036590][ T2925] lo speed is unknown, defaulting to 1000
[  955.036945][ T2927] syzkaller0: entered promiscuous mode
[  955.063384][ T2927] syzkaller0: entered allmulticast mode
[  955.083154][ T2907] lo speed is unknown, defaulting to 1000
[  956.545115][ T2973] netlink: 'syz.1.7691': attribute type 9 has an invalid length.
[  956.592254][ T2973] __nla_validate_parse: 2 callbacks suppressed
[  956.592275][ T2973] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.7691'.
[  956.689071][ T7709] net_ratelimit: 13 callbacks suppressed
[  956.689092][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  956.830706][  T140] bond9: (slave .`): failed to get link speed/duplex
[  956.955671][T26867] bond9: (slave .`): failed to get link speed/duplex
[  957.089511][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  957.117979][ T2999] netlink: 'syz.0.7699': attribute type 5 has an invalid length.
[  957.219159][  T140] bond9: (slave .`): failed to get link speed/duplex
[  957.392237][ T3000] 8021q: adding VLAN 0 to HW filter on device bond9
[  957.409527][  T140] bond9: (slave .`): failed to get link speed/duplex
[  957.424518][ T3009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7703'.
[  957.440899][ T3009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7703'.
[  957.475670][ T3011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7704'.
[  957.578959][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  957.699973][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  957.832982][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  957.854613][ T3024] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7708'.
[  957.921905][ T3026] xt_bpf: check failed: parse error
[  957.943019][ T3026] siw: device registration error -23
[  957.963007][  T140] bond9: (slave .`): failed to get link speed/duplex
[  958.071788][ T3039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7713'.
[  958.271087][ T3041] lo speed is unknown, defaulting to 1000
[  958.334406][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  958.348013][ T3048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  958.362329][ T3048] batman_adv: batadv0: Interface deactivated: gretap2
[  958.372697][ T3048] batman_adv: batadv0: Removing interface: gretap2
[  958.524513][ T3058] geneve3: entered promiscuous mode
[  958.540263][T26867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  958.552673][T26867] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.588088][T26867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  958.623392][T26867] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.005609][ T3081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7725'.
[  959.023753][ T3080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7725'.
[  959.132891][ T3088] syzkaller1: entered promiscuous mode
[  959.139595][ T3088] syzkaller1: entered allmulticast mode
[  959.289330][ T3091] lo speed is unknown, defaulting to 1000
[  959.664685][ T3120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7737'.
[  960.139861][ T3131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7742'.
[  960.284368][ T3137] netlink: 'syz.3.7744': attribute type 1 has an invalid length.
[  960.360975][ T3136] lo speed is unknown, defaulting to 1000
[  960.361792][ T3137] netlink: 'syz.3.7744': attribute type 1 has an invalid length.
[  961.758634][ T7709] net_ratelimit: 25 callbacks suppressed
[  961.758658][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  961.939595][T26854] bond9: (slave .`): failed to get link speed/duplex
[  961.966058][ T3170] lo speed is unknown, defaulting to 1000
[  962.188654][T26932] bond9: (slave .`): failed to get link speed/duplex
[  962.346759][T26854] bond9: (slave .`): failed to get link speed/duplex
[  962.665416][  T140] bond9: (slave .`): failed to get link speed/duplex
[  962.799476][T26932] bond9: (slave .`): failed to get link speed/duplex
[  962.908667][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  963.018541][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  963.148897][T26858] bond9: (slave .`): failed to get link speed/duplex
[  963.278689][T26858] bond9: (slave .`): failed to get link speed/duplex
[  963.800258][ T3228] __nla_validate_parse: 6 callbacks suppressed
[  963.800277][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7771'.
[  964.075569][ T3231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7772'.
[  964.114294][ T3231] team0: Port device team_slave_0 removed
[  964.320068][ T3245] netlink: 'syz.2.7778': attribute type 11 has an invalid length.
[  964.449167][ T3247] syzkaller0: entered promiscuous mode
[  964.455991][ T3247] syzkaller0: entered allmulticast mode
[  964.510626][ T3247] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  964.527299][ T3252] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  964.528051][ T3247] netlink: 'syz.1.7777': attribute type 83 has an invalid length.
[  964.557874][ T3252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7779'.
[  964.708082][ T3256] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.7779'.
[  964.864536][ T3264] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7783'.
[  964.884534][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7783'.
[  964.909131][ T3264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7783'.
[  964.969674][ T3269] netlink: 'syz.0.7786': attribute type 1 has an invalid length.
[  965.086460][ T3273] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7786'.
[  965.127787][ T3272] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7787'.
[  965.155339][ T3274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7786'.
[  965.196777][ T3274] bond6 (unregistering): Released all slaves
[  965.396551][ T3281] netlink: 'syz.2.7789': attribute type 13 has an invalid length.
[  965.956438][ T3300] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  966.074882][ T3302] lo speed is unknown, defaulting to 1000
[  966.798477][ T7709] net_ratelimit: 22 callbacks suppressed
[  966.798498][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  966.948833][T26932] bond9: (slave .`): failed to get link speed/duplex
[  967.058663][T26858] bond9: (slave .`): failed to get link speed/duplex
[  967.168583][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  967.296448][  T140] bond9: (slave .`): failed to get link speed/duplex
[  967.420839][T26858] bond9: (slave .`): failed to get link speed/duplex
[  967.529745][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  967.561538][T26858] bond9: (slave .`): failed to get link speed/duplex
[  967.678531][T26858] bond9: (slave .`): failed to get link speed/duplex
[  967.789261][  T140] bond9: (slave .`): failed to get link speed/duplex
[  967.939471][T26858] bond9: (slave .`): failed to get link speed/duplex
[  968.140907][ T3387] netlink: 'syz.1.7820': attribute type 1 has an invalid length.
[  968.159186][ T3392] netlink: 'syz.1.7820': attribute type 1 has an invalid length.
[  968.167183][ T3392] netlink: 'syz.1.7820': attribute type 2 has an invalid length.
[  968.191103][ T3387] netlink: 'syz.1.7820': attribute type 2 has an invalid length.
[  968.215877][ T3392] netlink: 'syz.1.7820': attribute type 1 has an invalid length.
[  968.232545][ T3392] netlink: 'syz.1.7820': attribute type 1 has an invalid length.
[  968.242001][ T3392] netlink: 'syz.1.7820': attribute type 1 has an invalid length.
[  968.286593][ T3393] lo speed is unknown, defaulting to 1000
[  968.367946][ T3383] lo speed is unknown, defaulting to 1000
[  968.918768][ T3430] __nla_validate_parse: 10 callbacks suppressed
[  968.918858][ T3430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7828'.
[  968.994322][ T3430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7828'.
[  969.074747][ T3435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7830'.
[  969.091289][ T3435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7830'.
[  969.115153][ T3435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7830'.
[  969.422487][ T3435] lo speed is unknown, defaulting to 1000
[  970.065376][ T3463] xt_hashlimit: max too large, truncated to 1048576
[  970.073749][ T3463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7838'.
[  970.187121][ T3467] sctp: [Deprecated]: syz.1.7841 (pid 3467) Use of int in max_burst socket option.
[  970.187121][ T3467] Use struct sctp_assoc_value instead
[  970.449459][ T3482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7846'.
[  970.503085][ T3478] syzkaller0: entered promiscuous mode
[  970.519556][ T3478] syzkaller0: entered allmulticast mode
[  970.559734][ T3478] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  970.659084][ T3478] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  970.708700][ T3478] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  970.875500][ T3495] lec:lec_atm_close: lec0: Shut down!
[  970.914152][ T3498] ip6tnl0: Caught tx_queue_len zero misconfig
[  970.931800][ T3499] lo speed is unknown, defaulting to 1000
[  971.169423][ T3512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7851'.
[  971.361428][ T3523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7854'.
[  971.387932][ T3523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7854'.
[  971.419022][ T3523] validate_nla: 1 callbacks suppressed
[  971.419041][ T3523] netlink: 'syz.4.7854': attribute type 1 has an invalid length.
[  971.500659][ T3523] 8021q: adding VLAN 0 to HW filter on device bond10
[  971.851865][ T3543] netlink: 'syz.2.7858': attribute type 21 has an invalid length.
[  971.867588][ T3543] netlink: 'syz.2.7858': attribute type 6 has an invalid length.
[  971.905796][ T3539] bond7: option packets_per_slave: invalid value (575537162)
[  971.923217][ T3539] bond7: option packets_per_slave: allowed values 0 - 65535
[  971.945066][ T3544] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  971.962315][ T3539] bond7 (unregistering): Released all slaves
[  972.059811][  T140] net_ratelimit: 20 callbacks suppressed
[  972.059832][  T140] bond9: (slave .`): failed to get link speed/duplex
[  972.228555][  T140] bond9: (slave .`): failed to get link speed/duplex
[  972.469494][  T140] bond9: (slave .`): failed to get link speed/duplex
[  972.485485][ T3577] bridge0: port 1(syz_tun) entered blocking state
[  972.496065][ T3577] bridge0: port 1(syz_tun) entered disabled state
[  972.512060][ T3577] syz_tun: entered allmulticast mode
[  972.520924][ T3577] syz_tun: entered promiscuous mode
[  972.536062][ T3579] syzkaller0: entered promiscuous mode
[  972.542492][ T3579] syzkaller0: entered allmulticast mode
[  972.598653][  T140] bond9: (slave .`): failed to get link speed/duplex
[  972.738974][T26858] bond9: (slave .`): failed to get link speed/duplex
[  973.068067][ T3610] netlink: 'syz.0.7882': attribute type 5 has an invalid length.
[  976.008433][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5140 ms
[  976.016741][    C0] lec:lec_tx_timeout: lec0
[  977.033219][ T3626] __nla_validate_parse: 10 callbacks suppressed
[  977.033239][ T3626] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.7885'.
[  977.066620][T26867] bond9: (slave .`): failed to get link speed/duplex
[  977.199273][T26867] bond9: (slave .`): failed to get link speed/duplex
[  977.328898][T26867] bond9: (slave .`): failed to get link speed/duplex
[  977.459178][T26858] bond9: (slave .`): failed to get link speed/duplex
[  977.578060][ T3648] ip6erspan0: entered allmulticast mode
[  977.628670][T26867] bond9: (slave .`): failed to get link speed/duplex
[  977.706321][ T3660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7896'.
[  977.748501][  T140] bond9: (slave .`): failed to get link speed/duplex
[  977.858807][T26867] bond9: (slave .`): failed to get link speed/duplex
[  977.906159][ T3665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7898'.
[  977.968563][  T140] bond9: (slave .`): failed to get link speed/duplex
[  978.053218][ T3669] lo speed is unknown, defaulting to 1000
[  978.079794][T26867] bond9: (slave .`): failed to get link speed/duplex
[  978.121619][ T3675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7900'.
[  978.136295][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7901'.
[  978.148064][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7900'.
[  978.156291][ T3674] netlink: zone id is out of range
[  978.197998][ T3674] netlink: zone id is out of range
[  978.690885][ T3704] bridge2: entered promiscuous mode
[  978.865826][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7914'.
[  978.877156][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7915'.
[  978.918671][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7914'.
[  979.095519][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7920'.
[  979.437965][ T3759] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  979.643898][ T3772] bond8: Removing last ns target with arp_interval on
[  979.677530][ T3777] bridge_slave_0: left allmulticast mode
[  979.698755][ T3777] bridge_slave_0: left promiscuous mode
[  979.706300][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state
[  979.720746][ T3777] bridge_slave_1: left allmulticast mode
[  979.726767][ T3777] bridge_slave_1: left promiscuous mode
[  979.740498][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.761005][ T3777] bond0: (slave bond_slave_0): Releasing backup interface
[  979.773943][ T3777] bond0: (slave 
4
@0Ù): Releasing backup interface
[  979.785917][ T3777] team0: Port device team_slave_0 removed
[  979.795602][ T3777] team0: Port device team_slave_1 removed
[  979.880877][ T3782] : entered promiscuous mode
[  980.521331][ T3838] bond9: option min_links: invalid value (18446744073709551612)
[  980.529707][ T3838] bond9: option min_links: allowed values 0 - 2147483647
[  980.544879][ T3838] bond9 (unregistering): Released all slaves
[  980.763661][ T3854] lo speed is unknown, defaulting to 1000
[  981.000373][ T3869] netlink: 'syz.3.7957': attribute type 13 has an invalid length.
[  981.109577][T10965] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  981.130696][ T3870] netlink: 'syz.2.7955': attribute type 1 has an invalid length.
[  981.244081][ T3865] lec:lec_start_xmit: lec0:No lecd attached
[  981.300301][ T3854] 8021q: VLANs not supported on ip6tnl0
[  981.330637][ T3854] IPVS: length: 132 != 8
[  981.385093][ T3854] pimreg: entered allmulticast mode
[  981.437586][ T3869] lo speed is unknown, defaulting to 1000
[  981.437667][ T3854] pimreg: left allmulticast mode
[  981.508160][ T3883] lo speed is unknown, defaulting to 1000
[  981.790210][ T3895] lo speed is unknown, defaulting to 1000
[  982.010147][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  982.136498][ T3910] netlink: 'syz.0.7967': attribute type 62 has an invalid length.
[  982.166960][ T3915] __nla_validate_parse: 13 callbacks suppressed
[  982.166982][ T3915] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7965'.
[  982.242925][  T140] net_ratelimit: 423 callbacks suppressed
[  982.242982][  T140] bond9: (slave .`): failed to get link speed/duplex
[  982.305805][ T3910] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  982.458580][T26858] bond9: (slave .`): failed to get link speed/duplex
[  982.488737][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7970'.
[  982.659257][  T140] bond9: (slave .`): failed to get link speed/duplex
[  982.746458][ T3939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7973'.
[  982.798961][T26854] bond9: (slave .`): failed to get link speed/duplex
[  983.002808][ T3950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7974'.
[  983.032917][ T3942] xfrm1: entered allmulticast mode
[  983.042124][ T3946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7976'.
[  983.178898][T26932] bond9: (slave .`): failed to get link speed/duplex
[  983.225786][ T3958] lo speed is unknown, defaulting to 1000
[  983.248001][ T3955] netlink: 'syz.4.7977': attribute type 13 has an invalid length.
[  983.266829][ T3959] netlink: 'syz.2.7979': attribute type 4 has an invalid length.
[  983.280047][ T3955] netlink: 'syz.4.7977': attribute type 17 has an invalid length.
[  983.302524][ T3955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  983.337059][ T3963] netlink: 'syz.1.7980': attribute type 1 has an invalid length.
[  983.358843][ T3963] netlink: 13 bytes leftover after parsing attributes in process `syz.1.7980'.
[  983.370414][ T3964] ip6gre0: entered promiscuous mode
[  983.377557][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7979'.
[  983.532547][T26858] bond9: (slave .`): failed to get link speed/duplex
[  983.559998][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7983'.
[  983.589351][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7983'.
[  983.601833][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7983'.
[  983.668973][T26932] bond9: (slave .`): failed to get link speed/duplex
[  983.779015][T26867] bond9: (slave .`): failed to get link speed/duplex
[  983.889192][T26867] bond9: (slave .`): failed to get link speed/duplex
[  985.155139][ T4063] netlink: 'syz.1.8003': attribute type 1 has an invalid length.
[  985.586994][ T4096] netlink: 'syz.2.8011': attribute type 2 has an invalid length.
[  986.577650][ T4140] No such timeout policy "syz1"
[  986.801151][ T4151] bond10: option ad_user_port_key: invalid value (65535)
[  986.845421][ T4151] bond10: option ad_user_port_key: allowed values 0 - 1023
[  986.865106][ T4151] bond10 (unregistering): Released all slaves
[  986.907267][ T4164] netlink: 'syz.2.8032': attribute type 2 has an invalid length.
[  987.048438][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms
[  987.056961][    C0] lec:lec_tx_timeout: lec0
[  987.063244][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  987.288831][T26867] net_ratelimit: 26 callbacks suppressed
[  987.288851][T26867] bond9: (slave .`): failed to get link speed/duplex
[  987.368006][ T4178] lo speed is unknown, defaulting to 1000
[  987.450236][T26867] bond9: (slave .`): failed to get link speed/duplex
[  987.578561][T26932] bond9: (slave .`): failed to get link speed/duplex
[  987.919346][  T140] bond9: (slave .`): failed to get link speed/duplex
[  988.040049][   T63] bond9: (slave .`): failed to get link speed/duplex
[  988.149001][   T63] bond9: (slave .`): failed to get link speed/duplex
[  988.280144][ T4229] nbd0: detected capacity change from 0 to 59
[  988.311929][ T4235] team_slave_1: Caught tx_queue_len zero misconfig
[  988.332234][ T4235] __nla_validate_parse: 16 callbacks suppressed
[  988.332253][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8055'.
[  988.358959][T26932] bond9: (slave .`): failed to get link speed/duplex
[  988.400615][T16744] block nbd0: Receive control failed (result -104)
[  988.469577][T26932] bond9: (slave .`): failed to get link speed/duplex
[  988.617692][  T140] bond9: (slave .`): failed to get link speed/duplex
[  988.748497][T26867] bond9: (slave .`): failed to get link speed/duplex
[  989.110632][ T4269] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8064'.
[  989.125764][ T4271] netlink: 'syz.1.8065': attribute type 1 has an invalid length.
[  989.134227][ T4271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8065'.
[  989.457267][ T4287] lo speed is unknown, defaulting to 1000
[  989.553425][ T4291] 8021q: VLANs not supported on wg0
[  989.942672][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8080'.
[  990.173693][ T4337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8085'.
[  990.206735][ T4339] syzkaller1: entered promiscuous mode
[  990.215537][ T4339] syzkaller1: entered allmulticast mode
[  990.402765][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8090'.
[  990.667504][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8093'.
[  991.141307][ T4392] netlink: 'syz.2.8100': attribute type 1 has an invalid length.
[  991.180177][ T4392] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8100'.
[  991.205811][ T4392] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8100'.
[  991.249487][ T4392] netlink: 'syz.2.8100': attribute type 1 has an invalid length.
[  991.269236][ T4392] netlink: 'syz.2.8100': attribute type 8 has an invalid length.
[  991.290700][ T4392] netlink: 606 bytes leftover after parsing attributes in process `syz.2.8100'.
[  991.357431][ T4403] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  991.358954][ T4402] netlink: 'syz.1.8105': attribute type 1 has an invalid length.
[  991.484177][ T4402] 8021q: adding VLAN 0 to HW filter on device bond15
[  991.854034][ T4438] netlink: 'syz.3.8115': attribute type 10 has an invalid length.
[  991.866427][ T4438] xt_ecn: cannot match TCP bits for non-tcp packets
[  991.927653][ T4440] tipc: Invalid UDP bearer configuration
[  991.927705][ T4440] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  992.078436][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  992.087377][    C0] lec:lec_tx_timeout: lec0
[  992.120098][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.149315][ T4448] netpci0: tun_chr_ioctl cmd 1074025678
[  992.165665][ T4448] netpci0: group set to 0
[  992.167436][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.178572][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.185986][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.196083][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.219562][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.227010][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.235332][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.244185][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.254273][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.264614][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.272921][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.296579][ T4456] sch_fq: defrate 4294967293 ignored.
[  992.303896][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.312166][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.320051][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.344019][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.352143][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.359594][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.367138][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.375538][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.384361][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.392535][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.401767][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.432023][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.452246][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.471639][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.491359][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.529148][  T140] net_ratelimit: 29 callbacks suppressed
[  992.529168][  T140] bond9: (slave .`): failed to get link speed/duplex
[  992.544028][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.552017][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.559719][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.589061][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.601063][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.611468][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.622068][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.630610][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.671419][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.691703][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.712624][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.720266][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.727470][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.735933][  T140] bond9: (slave .`): failed to get link speed/duplex
[  992.740062][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.749766][ T4477] netlink: 'syz.0.8126': attribute type 3 has an invalid length.
[  992.750206][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.766697][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.774189][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.805123][ T4477] nbd: must specify at least one socket
[  992.814539][ T4477] block nbd0: NBD_DISCONNECT
[  992.821541][ T4477] block nbd0: Send disconnect failed -32
[  992.827697][ T4477] block nbd0: shutting down sockets
[  992.852077][T26867] bond9: (slave .`): failed to get link speed/duplex
[  992.855599][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.883467][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.899801][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.908147][    C1] blk_print_req_error: 138 callbacks suppressed
[  992.908191][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  992.908264][ T4450] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  992.915001][    C1] buffer_io_error: 138 callbacks suppressed
[  992.915020][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  992.915105][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  992.915130][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  992.915178][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  992.915201][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  992.915248][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  992.915270][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  993.019094][ T4116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.031338][ T4116] Buffer I/O error on dev nbd0, logical block 0, async page read
[  993.041497][ T4484] netlink: 'syz.1.8129': attribute type 21 has an invalid length.
[  993.053296][ T4116] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.070019][ T4116] Buffer I/O error on dev nbd0, logical block 1, async page read
[  993.079284][ T4116] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.120272][  T140] bond9: (slave .`): failed to get link speed/duplex
[  993.120520][ T4116] Buffer I/O error on dev nbd0, logical block 2, async page read
[  993.141736][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  993.143583][ T1296] lec:lec_start_xmit: lec0:No lecd attached
[  993.166093][ T4116] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.195733][ T4116] Buffer I/O error on dev nbd0, logical block 3, async page read
[  993.205120][ T4116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.215969][ T4116] Buffer I/O error on dev nbd0, logical block 0, async page read
[  993.225666][ T4116] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  993.237726][ T4116] Buffer I/O error on dev nbd0, logical block 1, async page read
[  993.253310][ T4116] ldm_validate_partition_table(): Disk read failed.
[  993.304786][ T4116] Dev nbd0: unable to read RDB block 0
[  993.331079][ T4116]  nbd0: unable to read partition table
[  993.340907][ T4499] bond0: option min_links: invalid value (18446744073709551614)
[  993.353467][ T4116] ldm_validate_partition_table(): Disk read failed.
[  993.354119][ T4499] bond0: option min_links: allowed values 0 - 2147483647
[  993.379926][  T140] bond9: (slave .`): failed to get link speed/duplex
[  993.388287][ T4116] Dev nbd0: unable to read RDB block 0
[  993.405211][ T4116]  nbd0: unable to read partition table
[  993.508919][  T140] bond9: (slave .`): failed to get link speed/duplex
[  993.589107][ T4515] xt_bpf: check failed: parse error
[  993.630181][ T4517] __nla_validate_parse: 14 callbacks suppressed
[  993.630215][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8140'.
[  993.655849][ T4521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8138'.
[  993.682914][ T4519] lo speed is unknown, defaulting to 1000
[  993.689584][T26867] bond9: (slave .`): failed to get link speed/duplex
[  993.881371][ T4541] IPVS: stopping backup sync thread 1947 ...
[  993.938914][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  994.058544][T26867] bond9: (slave .`): failed to get link speed/duplex
[  994.429699][ T4571] bond12: (slave veth11): Enslaving as an active interface with a down link
[  994.467385][ T4572] bond12: (slave veth13): Enslaving as an active interface with a down link
[  994.473517][ T4582] netlink: 'syz.4.8153': attribute type 1 has an invalid length.
[  994.505532][ T4568] bond12: (slave veth15): Enslaving as an active interface with a down link
[  994.555514][ T4582] 8021q: adding VLAN 0 to HW filter on device bond11
[  994.567722][ T4573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8151'.
[  994.596140][ T4584] veth7: entered promiscuous mode
[  994.606712][ T4584] bond11: (slave veth7): Enslaving as an active interface with an up link
[  994.630359][T26867] bond9: (slave .`): failed to get link speed/duplex
[  994.925491][ T4612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8161'.
[  995.066220][ T4619] netlink: 'syz.4.8163': attribute type 1 has an invalid length.
[  995.153139][ T4619] 8021q: adding VLAN 0 to HW filter on device bond12
[  995.295102][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8169'.
[  995.422146][ T4648] x_tables: duplicate underflow at hook 1
[  995.481221][ T4653] x_tables: duplicate underflow at hook 2
[  995.755664][ T4671] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8178'.
[  995.782059][ T4671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8178'.
[  995.807549][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8180'.
[  995.835833][ T4679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8181'.
[  995.880388][ T4677] 8021q: adding VLAN 0 to HW filter on device bond10
[  996.069563][ T4692] Cannot find del_set index 2 as target
[  996.181878][ T4702] bridge5: entered promiscuous mode
[  996.400409][ T4714] bond11: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  996.428635][ T4714] bond11 (unregistering): Released all slaves
[  996.532837][ T4724] syzkaller0: Caught tx_queue_len zero misconfig
[  996.894969][ T4755] lo speed is unknown, defaulting to 1000
[  997.107664][ T4762] pim6reg99999999: entered allmulticast mode
[  997.139619][ T4762] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8201'.
[  997.476070][ T4787] lo speed is unknown, defaulting to 1000
[  997.552166][T26854] net_ratelimit: 25 callbacks suppressed
[  997.552185][T26854] bond9: (slave .`): failed to get link speed/duplex
[  997.738901][T26867] bond9: (slave .`): failed to get link speed/duplex
[  997.750099][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  997.750290][ T4804] pim6reg1: entered promiscuous mode
[  997.794798][ T4804] pim6reg1: entered allmulticast mode
[  997.888749][T26854] bond9: (slave .`): failed to get link speed/duplex
[  997.974145][ T4829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  998.110467][T26867] bond9: (slave .`): failed to get link speed/duplex
[  998.168903][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  998.177341][    C0] lec:lec_tx_timeout: lec0
[  998.182866][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  998.218880][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  998.281090][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  998.350603][T26854] bond9: (slave .`): failed to get link speed/duplex
[  998.469527][T26932] bond9: (slave .`): failed to get link speed/duplex
[  998.589541][  T140] bond9: (slave .`): failed to get link speed/duplex
[  998.698708][ T7709] bond9: (slave .`): failed to get link speed/duplex
[  998.764595][ T4883] netlink: 'syz.2.8232': attribute type 39 has an invalid length.
[  998.912386][ T4878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  999.207673][ T4878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  999.342403][T26854] bond9: (slave .`): failed to get link speed/duplex
[  999.393288][ T4878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  999.511861][ T4878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  999.605993][ T4908] __nla_validate_parse: 5 callbacks suppressed
[  999.606015][ T4908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8239'.
[  999.643227][ T4908] syzkaller1: entered promiscuous mode
[  999.649488][ T4908] syzkaller1: entered allmulticast mode
[  999.714713][T26854] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  999.860307][ T4878] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1000.168846][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1000.754807][ T4949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1000.842708][ T4942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8248'.
[ 1000.879360][ T4952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 1001.116496][ T4961] bridge6: the hash_elasticity option has been deprecated and is always 16
[ 1001.125433][ T4962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8255'.
[ 1001.136947][ T4961] bridge6: entered allmulticast mode
[ 1001.157500][ T4963] netlink: 'syz.0.8256': attribute type 1 has an invalid length.
[ 1001.257887][ T4963] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1001.348227][ T4985] 
[ 1001.350785][ T4985] ======================================================
[ 1001.358793][ T4985] WARNING: possible circular locking dependency detected
[ 1001.366273][ T4985] syzkaller #0 Not tainted
[ 1001.370815][ T4985] ------------------------------------------------------
[ 1001.378530][ T4985] syz.1.8260/4985 is trying to acquire lock:
[ 1001.384907][ T4985] ffffffff8fd43a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[ 1001.395288][ T4985] 
[ 1001.395288][ T4985] but task is already holding lock:
[ 1001.403111][ T4985] ffff88807aebcc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[ 1001.412861][ T4985] 
[ 1001.412861][ T4985] which lock already depends on the new lock.
[ 1001.412861][ T4985] 
[ 1001.423367][ T4985] 
[ 1001.423367][ T4985] the existing dependency chain (in reverse order) is:
[ 1001.432858][ T4985] 
[ 1001.432858][ T4985] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[ 1001.441226][ T4985]        _raw_spin_lock_bh+0x36/0x50
[ 1001.447104][ T4985]        nr_rt_device_down+0x153/0x860
[ 1001.452577][ T4985]        nr_device_event+0x137/0x150
[ 1001.457889][ T4985]        notifier_call_chain+0x1be/0x400
[ 1001.463756][ T4985]        __dev_notify_flags+0x16d/0x310
[ 1001.469384][ T4985]        netif_change_flags+0xe8/0x1a0
[ 1001.474848][ T4985]        dev_change_flags+0x130/0x260
[ 1001.480499][ T4985]        dev_ioctl+0x7b4/0x1150
[ 1001.485751][ T4985]        sock_do_ioctl+0x23e/0x320
[ 1001.490943][ T4985]        sock_ioctl+0x5c6/0x7f0
[ 1001.496059][ T4985]        __se_sys_ioctl+0xfc/0x170
[ 1001.501353][ T4985]        do_syscall_64+0x14d/0xf80
[ 1001.506487][ T4985]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.513204][ T4985] 
[ 1001.513204][ T4985] -> #1 (nr_node_list_lock){+...}-{3:3}:
[ 1001.521036][ T4985]        _raw_spin_lock_bh+0x36/0x50
[ 1001.526334][ T4985]        nr_rt_device_down+0xbe/0x860
[ 1001.531884][ T4985]        nr_device_event+0x137/0x150
[ 1001.537165][ T4985]        notifier_call_chain+0x1be/0x400
[ 1001.542979][ T4985]        __dev_notify_flags+0x16d/0x310
[ 1001.548556][ T4985]        netif_change_flags+0xe8/0x1a0
[ 1001.554134][ T4985]        dev_change_flags+0x130/0x260
[ 1001.559605][ T4985]        dev_ioctl+0x7b4/0x1150
[ 1001.564496][ T4985]        sock_do_ioctl+0x23e/0x320
[ 1001.569701][ T4985]        sock_ioctl+0x5c6/0x7f0
[ 1001.574833][ T4985]        __se_sys_ioctl+0xfc/0x170
[ 1001.579947][ T4985]        do_syscall_64+0x14d/0xf80
[ 1001.585428][ T4985]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.592388][ T4985] 
[ 1001.592388][ T4985] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[ 1001.600844][ T4985]        __lock_acquire+0x15a5/0x2cf0
[ 1001.607044][ T4985]        lock_acquire+0xf0/0x2e0
[ 1001.612335][ T4985]        _raw_spin_lock_bh+0x36/0x50
[ 1001.617903][ T4985]        nr_remove_neigh+0x25/0xe0
[ 1001.623285][ T4985]        nr_add_node+0x1e41/0x2630
[ 1001.628571][ T4985]        nr_rt_ioctl+0xe59/0xf90
[ 1001.633955][ T4985]        sock_do_ioctl+0x101/0x320
[ 1001.639900][ T4985]        sock_ioctl+0x5c6/0x7f0
[ 1001.645115][ T4985]        __se_sys_ioctl+0xfc/0x170
[ 1001.650322][ T4985]        do_syscall_64+0x14d/0xf80
[ 1001.655696][ T4985]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.662660][ T4985] 
[ 1001.662660][ T4985] other info that might help us debug this:
[ 1001.662660][ T4985] 
[ 1001.673018][ T4985] Chain exists of:
[ 1001.673018][ T4985]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[ 1001.673018][ T4985] 
[ 1001.687711][ T4985]  Possible unsafe locking scenario:
[ 1001.687711][ T4985] 
[ 1001.695473][ T4985]        CPU0                    CPU1
[ 1001.701013][ T4985]        ----                    ----
[ 1001.706387][ T4985]   lock(&nr_node->node_lock);
[ 1001.711328][ T4985]                                lock(nr_node_list_lock);
[ 1001.718608][ T4985]                                lock(&nr_node->node_lock);
[ 1001.726206][ T4985]   lock(nr_neigh_list_lock);
[ 1001.731767][ T4985] 
[ 1001.731767][ T4985]  *** DEADLOCK ***
[ 1001.731767][ T4985] 
[ 1001.740284][ T4985] 1 lock held by syz.1.8260/4985:
[ 1001.745478][ T4985]  #0: ffff88807aebcc70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630
[ 1001.755711][ T4985] 
[ 1001.755711][ T4985] stack backtrace:
[ 1001.761977][ T4985] CPU: 1 UID: 0 PID: 4985 Comm: syz.1.8260 Not tainted syzkaller #0 PREEMPT(full) 
[ 1001.762000][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[ 1001.762010][ T4985] Call Trace:
[ 1001.762017][ T4985]  <TASK>
[ 1001.762025][ T4985]  dump_stack_lvl+0xe8/0x150
[ 1001.762050][ T4985]  print_circular_bug+0x2e1/0x300
[ 1001.762073][ T4985]  check_noncircular+0x12e/0x150
[ 1001.762095][ T4985]  __lock_acquire+0x15a5/0x2cf0
[ 1001.762120][ T4985]  lock_acquire+0xf0/0x2e0
[ 1001.762135][ T4985]  ? nr_remove_neigh+0x25/0xe0
[ 1001.762150][ T4985]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1001.762164][ T4985]  ? nr_remove_neigh+0x25/0xe0
[ 1001.762175][ T4985]  _raw_spin_lock_bh+0x36/0x50
[ 1001.762194][ T4985]  ? nr_remove_neigh+0x25/0xe0
[ 1001.762206][ T4985]  nr_remove_neigh+0x25/0xe0
[ 1001.762219][ T4985]  nr_add_node+0x1e41/0x2630
[ 1001.762241][ T4985]  ? dev_get_by_name+0x21/0x200
[ 1001.762256][ T4985]  ? dev_get_by_name+0x21/0x200
[ 1001.762269][ T4985]  ? nr_call_to_digi+0x136/0x1b0
[ 1001.762295][ T4985]  nr_rt_ioctl+0xe59/0xf90
[ 1001.762317][ T4985]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1001.762333][ T4985]  ? __pfx_nr_rt_ioctl+0x10/0x10
[ 1001.762355][ T4985]  ? apparmor_capable+0x126/0x170
[ 1001.762828][ T4985]  ? capable+0x88/0xe0
[ 1001.762847][ T4985]  ? nr_ioctl+0x1b1/0x3b0
[ 1001.762865][ T4985]  sock_do_ioctl+0x101/0x320
[ 1001.762882][ T4985]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1001.762903][ T4985]  sock_ioctl+0x5c6/0x7f0
[ 1001.762918][ T4985]  ? __pfx_sock_ioctl+0x10/0x10
[ 1001.762932][ T4985]  ? __fget_files+0x2a/0x420
[ 1001.762951][ T4985]  ? __fget_files+0x3a0/0x420
[ 1001.762969][ T4985]  ? __fget_files+0x2a/0x420
[ 1001.762988][ T4985]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1001.763014][ T4985]  ? __pfx_sock_ioctl+0x10/0x10
[ 1001.763028][ T4985]  __se_sys_ioctl+0xfc/0x170
[ 1001.763044][ T4985]  do_syscall_64+0x14d/0xf80
[ 1001.763057][ T4985]  ? trace_irq_disable+0x3b/0x150
[ 1001.763078][ T4985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.763092][ T4985]  ? clear_bhb_loop+0x40/0x90
[ 1001.763107][ T4985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.763121][ T4985] RIP: 0033:0x7f5bef99c799
[ 1001.763136][ T4985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1001.763148][ T4985] RSP: 002b:00007f5bf0855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1001.763164][ T4985] RAX: ffffffffffffffda RBX: 00007f5befc16090 RCX: 00007f5bef99c799
[ 1001.763174][ T4985] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000008
[ 1001.763183][ T4985] RBP: 00007f5befa32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1001.763192][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1001.763201][ T4985] R13: 00007f5befc16128 R14: 00007f5befc16090 R15: 00007ffdd4fb6e18
[ 1001.763217][ T4985]  </TASK>
[ 1002.599248][T26854] net_ratelimit: 21 callbacks suppressed
[ 1002.599267][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1002.719388][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1002.829346][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1002.939148][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1003.049827][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1003.169131][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1003.198408][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[ 1003.206851][    C0] lec:lec_tx_timeout: lec0
[ 1003.289183][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1003.399954][T26858] bond9: (slave .`): failed to get link speed/duplex
[ 1003.508843][T26932] bond9: (slave .`): failed to get link speed/duplex
[ 1003.620422][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1006.968547][    C0] lec:lec_start_xmit: lec0:No lecd attached
[ 1007.639322][   T63] net_ratelimit: 35 callbacks suppressed
[ 1007.639344][   T63] bond9: (slave .`): failed to get link speed/duplex
[ 1007.759066][T26858] bond9: (slave .`): failed to get link speed/duplex
[ 1007.869412][ T7709] bond9: (slave .`): failed to get link speed/duplex
[ 1007.979305][T26867] bond9: (slave .`): failed to get link speed/duplex
[ 1008.098999][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1008.209125][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1008.319395][T26858] bond9: (slave .`): failed to get link speed/duplex
[ 1008.428505][T26854] bond9: (slave .`): failed to get link speed/duplex
[ 1008.538810][T26867] bond9: (slave .`): failed to get link speed/duplex
[ 1008.658926][T26867] bond9: (slave .`): failed to get link speed/duplex