last executing test programs:

5.593242245s ago: executing program 1 (id=13381):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44000010}, 0x4000005)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)

3.090862601s ago: executing program 1 (id=13391):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0xa}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000080001"], 0x1c}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0xa, 0xd)
r2 = socket$netlink(0x10, 0x3, 0x13)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)

3.082881049s ago: executing program 0 (id=13393):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x1, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000780)={r3, 0x1, 0x6, @local}, 0x10)
close(0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a000002000711"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.897383628s ago: executing program 4 (id=13394):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}]}}]}}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@newchain={0xce8, 0x64, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0x6, 0x9}, {0xfff1, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x64, 0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xc84, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xeac}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_POLICE={0xc40, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x8, 0x3, 0x4, 0xb84, 0x80, 0xfff, 0x5, 0x1ff, 0x5, 0xaffb, 0x6, 0xf9, 0x9, 0x1ff, 0x6, 0x8, 0x8, 0x6, 0x7, 0x4000000, 0x6, 0x0, 0x49a, 0x800, 0xe72, 0x9, 0x8, 0xff, 0x1, 0xc, 0x243d45d3, 0x0, 0xf, 0xffffffff, 0x61, 0x7fff, 0x701e, 0x8, 0x56d, 0x0, 0x9, 0x4, 0xa, 0x1, 0x8, 0x8001, 0x93e7, 0xc74, 0x1e, 0x800, 0x27, 0x8, 0x0, 0x2, 0x3, 0x6f7f, 0xc, 0x1, 0x6, 0x6, 0x800, 0x6, 0x400, 0x0, 0xfffffff8, 0x4, 0xa, 0xfffff001, 0x6, 0x8, 0x3, 0x40, 0x5, 0xf5, 0x1, 0x1, 0x1000, 0x81, 0x8, 0x6, 0x18ed627b, 0x0, 0x40000000, 0xfffffffb, 0x7, 0x9, 0x0, 0xd, 0xffff, 0xffffb6cb, 0x9, 0x4, 0x366, 0xefa, 0x8, 0x4, 0x6, 0x9, 0x10, 0x1000, 0x2, 0x2, 0x1127, 0x5, 0x1, 0x8e6, 0x100, 0xc3, 0x3, 0x79, 0x7fffffff, 0x10001, 0x1, 0x2, 0x2, 0x1, 0x8, 0x3, 0x3e, 0x6302, 0x4, 0x1, 0x0, 0x3, 0x67c, 0x9, 0xffff, 0x675, 0x1, 0x9, 0x80, 0x4, 0x57, 0x1, 0xee1d, 0x4, 0x7, 0x10, 0xfffff000, 0x894, 0x200, 0x6, 0x100, 0x4, 0x7, 0x9, 0x9, 0xf, 0x9, 0xee4, 0x0, 0x183, 0x88c5, 0x2, 0x10, 0xd, 0x0, 0x97c, 0x9, 0x2, 0x1, 0x2, 0x3, 0x0, 0x100, 0x81, 0x100, 0x1, 0xec, 0xffff, 0x7fffffff, 0x97, 0x2, 0x2, 0x8, 0x6, 0x7, 0x0, 0xfffffb5f, 0x7fffffff, 0x80000001, 0x4, 0xfa, 0x8, 0x7, 0x5, 0x5449, 0xfff, 0x0, 0x7, 0x4, 0x7f, 0x5, 0x9, 0x3, 0x4, 0xfffffffd, 0x2, 0xfffffffb, 0x8, 0x40, 0x3d, 0x9, 0x6, 0x8, 0x71ebf94d, 0x5, 0x3, 0x7, 0x94, 0x2, 0x1, 0x6, 0x7, 0x1cc00000, 0x1, 0xda, 0x7, 0x81, 0xffff, 0x1, 0xb3, 0x2, 0x3, 0x7, 0x80000001, 0x80, 0x7, 0x0, 0x0, 0xcd6e, 0xfffffc01, 0x467, 0x2, 0x9, 0x4, 0x8, 0x7fffffff, 0x5, 0xe, 0xde4, 0x824, 0xffffff75, 0x13, 0x4, 0x2, 0x0, 0x3, 0x6, 0x7, 0x10, 0x3, 0x0, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2d, 0x8001, 0xfff, 0x2a, 0x3, 0x3, 0x7, 0x2, 0x80, 0x6, 0xc8, 0x616, 0xff, 0xffffffff, 0x5, 0x9, 0x0, 0xc, 0x0, 0x9, 0x6, 0x2190, 0x0, 0x283, 0xbe0000, 0xa, 0x1f4, 0x0, 0x6, 0x86b3, 0x2, 0x7ff, 0x349, 0x4, 0xe25, 0xd, 0x5, 0xfffffff7, 0xc98, 0x2, 0x2, 0x9, 0x8001, 0x311, 0x7, 0x2, 0x9, 0x98f, 0x200, 0x94ae, 0x9, 0x4, 0x8, 0x40, 0x7, 0x10001, 0xf6, 0x49a, 0x2, 0xc, 0x7ff, 0x6, 0x9c, 0x5, 0xb5a, 0x800, 0x0, 0xffff7fff, 0x0, 0x5, 0x8daf939, 0x4, 0x5, 0x4, 0x1d2, 0x10001, 0x1, 0x4, 0x4000, 0x8001, 0xfffffffc, 0x9, 0xdae1, 0x7ff, 0x1, 0x81, 0x40, 0x262f, 0xb, 0x8, 0x8, 0x3, 0x3, 0x80e5, 0x7, 0x2, 0x9, 0x7, 0x22d, 0x3, 0x4, 0x8, 0x1, 0x5, 0x18a, 0x45e8, 0xfffffff7, 0x5, 0xfffffff9, 0x4, 0x0, 0x7, 0x0, 0x2, 0x7f, 0x4, 0x5, 0xfffffffa, 0x7fffffff, 0x7f, 0x800, 0x5, 0x10001, 0x9, 0x5, 0x400, 0x8, 0x2, 0x9, 0x8, 0x2, 0xea, 0xf, 0x4, 0x8, 0x0, 0x0, 0x96e7, 0x2, 0x5, 0x9, 0xf, 0x200, 0x1, 0x5, 0x3ff, 0x100, 0x2, 0x2, 0x2, 0x3, 0xa93, 0xff, 0x0, 0xfae1, 0x6, 0x2, 0xd, 0x4, 0x0, 0x9, 0x6c, 0x7d, 0xda46, 0x6, 0x6c98, 0xffff, 0x7, 0x0, 0xb, 0xffff, 0x3, 0x8, 0x80000000, 0x7e66, 0x40000000, 0x203, 0xd, 0x10, 0x6, 0xbb, 0xd318, 0x2, 0x1, 0x9, 0x1ff, 0xffc, 0x6, 0xfffffff8, 0x0, 0x95a2, 0x7b, 0xc73d, 0x80, 0xf, 0x8, 0x1, 0xa6, 0x1, 0x1, 0x3, 0xa69, 0xfffffffb, 0x2, 0x8001, 0xfffffffd, 0x8, 0x87, 0x1, 0x79b, 0x2, 0x10001, 0xfffffffb, 0x10, 0x81, 0xffff7d97, 0x4, 0x3, 0x5, 0x2, 0x49fe80, 0xb, 0x9, 0x6, 0x400, 0x5, 0x5, 0xfffffff7, 0x3, 0x2, 0x1, 0x7f, 0x3, 0x0, 0xc3, 0x8, 0x5, 0x6, 0x81, 0x7, 0x617f, 0x8000, 0xb66, 0x6, 0x23d6, 0xffff, 0x8, 0x32, 0xe, 0x6, 0x4, 0x5, 0x9, 0x4, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xfffffffc, 0x6, 0xfa, 0xffff, 0xf24, 0xfc13, 0x7, 0x1, 0x0, 0x66a, 0x5, 0xfffffff4, 0x200, 0x7, 0x3, 0x1000, 0x9, 0xf484, 0x2f8b69dd, 0x3, 0x1, 0x22, 0xd0c, 0x1e04, 0x1ff, 0x5, 0x9, 0x8d, 0x3, 0x10001, 0x31e33907, 0x330, 0x3, 0x8001, 0x2, 0x4, 0x6, 0x3, 0x4, 0x0, 0x4, 0xf4, 0x5, 0x7, 0x9, 0x4, 0x0, 0x3, 0x9, 0x9, 0x2, 0xfffffff8, 0x7, 0x7, 0x8, 0xff, 0x2, 0x7, 0x5, 0xfffffff7, 0x1ff, 0x0, 0x8b50, 0x9, 0x7, 0x566, 0xe4d, 0x2, 0x3, 0x1ff, 0x40, 0x6, 0x2, 0x1844, 0x5, 0xff, 0x1, 0x0, 0x8, 0xfffffff8, 0x1, 0x6, 0x1, 0xfffffffb, 0x0, 0x7, 0x8, 0x28f9, 0x6, 0x9, 0x8, 0x5, 0x800, 0x7, 0x2, 0x3, 0x7, 0x2, 0xea7f, 0x5, 0x1, 0xfffff1b6, 0xead, 0x2, 0x2000000, 0x1000, 0xffff8001, 0x56a, 0x1000, 0x0, 0x1ff, 0x4, 0x684b, 0xe, 0x2, 0x5, 0xffffffff, 0x5, 0xc0000000, 0x80000000, 0x4, 0x7, 0x8, 0x5, 0x3, 0x8000, 0x9, 0x395, 0xd, 0x3, 0x1, 0x9, 0x4d5f, 0x8, 0x0, 0x80, 0xbc8, 0x3b, 0x3, 0x6, 0x800, 0x7fffffff, 0x5, 0x1, 0x3, 0x4, 0x401, 0x5, 0x0, 0x0, 0xfffffffe, 0x6, 0x7, 0x401, 0x800, 0x2, 0x3, 0x10001, 0x9, 0x1, 0x40, 0x4, 0x3ff, 0x5, 0x369b, 0xf, 0x81, 0x5, 0x4, 0x200, 0x9, 0x5, 0x4, 0xb3c, 0x7ff, 0x652f, 0x9, 0x6, 0xb8e, 0x3, 0x7, 0xb1, 0x6, 0x8, 0x0, 0x5, 0x7fffffff, 0x4, 0xfffffff8, 0x80, 0x5dd, 0xffff0000, 0x8, 0x1000, 0x6, 0x4, 0x80, 0x9, 0x0, 0x1, 0x2, 0x1, 0x101, 0x2, 0xffffff1e, 0x5b, 0xdd4, 0x1, 0x0, 0x4, 0x4fa, 0x5e, 0x8, 0x2, 0x7, 0x6, 0x8, 0x4, 0xff, 0x1, 0x3, 0x2, 0x1000, 0xf3f, 0x6, 0x2, 0x9, 0x3, 0x10, 0x7, 0x0, 0x7fffffff, 0x2, 0x3, 0xada, 0xa, 0x6, 0x9, 0x7d3a, 0xfffffffc, 0xffffffff, 0xe1, 0x5, 0x9, 0x7, 0xf, 0x5, 0x7, 0x800, 0x79, 0x1, 0x8, 0x1ff, 0x6]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x4}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_CHAIN={0x8, 0xb, 0x36b}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xce8}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc001)
r3 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040))
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="40001d0010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e657665000010000280040006000500030006000000"], 0x40}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x90000005})
epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
writev(r7, &(0x7f0000000780)=[{&(0x7f00000001c0)="02a51c4fd963", 0x6}], 0x1)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="993bcb2a0bd33a8de4e776edfbebb4c8f986719a47b25013e8fb919c44f2b51b53a21caa62616d13898916d868e76fc5817dc575b495303f53e3d5d0ca81f6a1ace4ddbd6904646c6c05f9e01a13fd5a24b5f7127f489f47dce13ee30144fb22e9e09f25cc45ad5e05691b3217940466c6aee6f63e0e8cbc6210719a95b977ccddc7a0ba144d640f514dd89417d7be339e1357a11bdcfc37bc62b505e4e907f7a5ffd829300f1efbd6"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000001380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000440)={0x18c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x53}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xb8, 0x2a, [@random_vendor={0xdd, 0x31, "eeb4f2761a53f1244757ad86327e08976e6c1087aa773baec8dd71154680d6b5ea46890423573a2de6cde40bf0c3d8fdfe"}, @perr={0x84, 0x49, {0x12, 0x5, [{{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x42}, {{}, @broadcast, 0x2, @void, 0x35}, {{}, @device_b, 0x6, @void, 0x3}, {{}, @device_a, 0xe, @void, 0x17}, {{}, @device_b, 0x7, @void, 0x1f}]}}, @random={0x0, 0x34, "0e354377b7ee50277f3e1dd09b9f3d90fe2c02d60dd6405d1387b49fbcaa3a8613225f0f5597bcadfb59d731dcf44bcea7e4e933"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_IE={0x90, 0x2a, [@perr={0x84, 0x82, {0x7, 0x8, [{{}, @broadcast, 0x2, @void, 0xa}, {{}, @device_b, 0x0, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x9b, @value=@device_b, 0x8}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0xf}, {{}, @device_a, 0xd68, @void, 0x3c}, {{}, @device_b, 0xb65c, @void, 0x17}, {{0x0, 0x1}, @device_b, 0xaa, @value, 0x1d}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x21}]}}, @cf={0x4, 0x6, {0x39, 0x2, 0x5, 0x4}}]}]}, 0x18c}}, 0x4000010)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100))
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

2.304311135s ago: executing program 1 (id=13397):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x8010)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r2}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800001b00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

2.231965389s ago: executing program 0 (id=13399):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x95}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0x30}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000300000000010000000300000009000000000000000000007dfd8792915b8a02030000000b0000000000000a010000000000"], 0x0, 0x4a}, 0x28)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r8, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0)

2.21149222s ago: executing program 3 (id=13400):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80, 0x800)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x21, 0x70bd2c, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000014)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x53}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xea10}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4c2f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000)
sendto$packet(r1, &(0x7f00000003c0)="f90507b82fd24e5b5cf631eecd9a0794cb83bac13b2d396c9880ba04b775f4c2da56a1f0736e9ac4fe84a21ef45fbbb7298d5a4514dae2e53bd3e6432011bf498a0e0a811bb6b3dfa13b3366d13c1579e0", 0x51, 0x24000008, &(0x7f0000000440)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
connect$pppl2tp(r1, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x4, 0x0, {0xa, 0x4e23, 0x9, @loopback, 0x1}}}, 0x3a)
r5 = accept$ax25(r1, 0x0, &(0x7f00000004c0))
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000500)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}})
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x108, 0x13, 0x10, 0x70bd2b, 0x25dfdbfb, {0x2, 0xfd, 0x4, 0x3f, {0x4e21, 0x4e21, [0x3ff, 0x6, 0x7, 0x10], [0x8, 0x40, 0x26], r4, [0x3, 0x146c9be8]}, 0x7, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "07d7c505d1218aabcae2c6934c590afdd5dec410905e2bfbba8be24c66cb2339d8c23fff785b6ec18f02e621c007ab8d303fa8cea498fee2ef7ecbfd4bb4678bbd47f18e9735f4d45fcb0cb27742aaff33650f62af79bf0ae2c6fa2adfc0599c00c8429bd24248ee7d4b740c9a6fc6552d03c50228159d30a3e9e937c935d1d7fa5fd1790e21af7c1d270f71ce417cdfe9ddb624ed93a8af35945957c410c3d696b0ddc0cac7fb739eb7bcdaceec64c3bc1c5bcf15"}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x234, r7, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3ec9cac47c758f99c15a8dfe907ab2b26d12206c463221db817c"}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x823}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @remote, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @private0, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x863}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xca0}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @empty, 0x141}}}}]}]}, 0x234}}, 0x4004004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r8)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000f80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b80)={0x3c0, r9, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x398, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xda.-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\.{}\'!-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/)]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '+)./\xa9$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',:\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\$}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, './{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "81679005cd6576f213b48baf4d854f08d08ec8a29de53d9cf66f7b0b91167fe96db1960de011a600c296b7be88e9ad130bea5d325cdfd0707f2233f2985b236ce95dc3c0a6f67763"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2f7}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'wireguard\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'eth'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'wireguard\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$&+(@,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '-,#^\\&!\x86@/(\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "8a029cfdcf45826e8cedb60844fb246fa20ed6a459e424ce79649fbea3d85aa4c372eddd3a3bd69975c8ab4b9f43919a0270620aba84e1ea70c77ee72dc7d398cd60d8fb13d602f41cd0efc24e88982f22d6d3795bfd98f0978f971d2c7b01ce3c263a5cbc74cf5b2254b1f6b1891046fc00ed8d8e3517387dc4677e69f566763c04b3b25a6a6eac2a540627dabe33be1ab47f04ab7ea6ec5fe331c5fbc1f1049012"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "ea801c20909af376b29afda2684e08d8cb4ac844d5dec460b320b29dc1b2c9ab1beb0c63ad048cdd54672ad9c6d6f6ba9472bcb3927902e0c810f1e0d4016ea4a2797672c68965196e4ad547843c4cc884a3fd9b33f44184605a512ad36a076bccd7bcc15917c1f9ac95641425f74bcdc8260bba572f5ff77a528a6d7528d27838c1bdabe9a59d1a56894884ee99fb24a45912bf442d"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x81}, 0xc000)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000030c0)={'tunl0\x00', &(0x7f0000003040)={'gretap0\x00', <r11=>r4, 0x700, 0x8, 0x7f, 0x24c6, {{0xb, 0x4, 0x3, 0x2e, 0x2c, 0x3, 0x0, 0x2, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0xa3, 0x0, 0x9, [0x9e, 0x7, 0xffffffff, 0x3, 0x2]}]}}}}})
sendmmsg$inet6(r10, &(0x7f0000003180)=[{{&(0x7f0000000fc0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000001000)="03a6412aa5d01be4d7823ab6a7c759c0ffc11c011ddf7995e368bf3b11b992149eb575b4764fb9ded6c1bc98f34264f6fb8a393a5575061242f398211b0962593fa372956702321ac348d1d76bd57bed86689d36efa4ce7e8cbd2940b2a8807cb9c53df168811cf898089ade3f73776d77bae622cf", 0x75}, {&(0x7f0000001080)="6f10434dad5d49530be17bf38c57c21999956036c5588816786c9e6e4164c9ba9216a44a940a1cf406caf3cfd8a92c0d12b6fe47bc6c9aa818fc132b23a419b5232ff8170d6dbca6bff3503137a9ae2266412f7dabb4d494800d6d728047574b1436fbf0216d895180b2824a1c589c5a6a7f1457be0157cbe6b7959422bf2804a3b7a10c89af4100f9fb227cfcbc49e032eed24e7535a8b943647f3c3e7bd31001a872fd042f5f89e3d595965d1b77692d72ffdd688dba6150c5f0d171ea1f15012a72b34a7d52aaf3fb78c6c98b8c3f90065a16", 0xd4}, {&(0x7f0000001180)="d896445625f0d170de45174ef9b12a0839083be8a1e16d4bbbdd70efee3c7499840dccc49ce0817faa39b20253718ef30e58f8d607b2691131860a0ee5b6fb66221e55a9bfc86b1b22cdba48fef8772134326379011c45f0a60ef9407e106a01d7887986a76151ab0cd623a8df1cbdda", 0x70}, {&(0x7f0000001200)="7285f1ac0a32236d05409c49b9852a63f1eb642ceb3383c1925a5115bc406057ca2fcb980851f8aa9b101618b8571aa6be3ca14cb894d4bc0a81cde6d3cf04a775417dc75c435a2dff26fb22ab66a5530ee1c12a0b69e074d69c3d672bb38ab81581111b041c55e984e462e70e03358998090ee90b92ddc68c28da8eafff0907ad7423dc190d0cc215df62b074dd6a653eb1", 0x92}, {&(0x7f00000012c0)="b393f74ec8ebac86747fd76efcf60bb647617fcef6c10aea07fb243c05815a022e239dab01a7cf88383a82803beb9a60566bf64bf596d685ef9992332c7cb97b53251e2c29ef1855a6c591eb10", 0x4d}, {&(0x7f0000001340)="de6a9f91b4d37365a79dcf9969a6eac37d64373af32690e7bb9cc56bef287d4a44147002e752932b52f931b441a3ad807a4366bab29ee69cc566a5577e42274585c9e4f758b2d92c34adfec60b9394529b679df4301a330cbe210d7696e6ce5acb4ad304c6ed688febcc17d398e6977d807353450d94b7c86a5af585468b6f4c71ab10f281", 0x85}, {&(0x7f0000001400)="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", 0xfc}, {&(0x7f0000001500)="3df3cd4ce1ea7277a3d0333d6a43970d525c038b27f62ed2b960c3ef61f0bd0943523574f575011a3f18331c73eb31fd015e3d2ce01a98918f3beac5d4cbc13a0b56c1e76da36479e27ff4780282", 0x4e}], 0x8, &(0x7f0000001600)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001640)="b8e0ba3424c9577599c9832c8ba1f62e4b55a33d623ae1ab9f77ce3f18bc2496bd0c45e7c6ebde29c288bb05bb8c02a8482063c0d370c45818ade8987a3b4bc4af594ec9e3a7921f8bf2d5da20c93f9955cd45f0f84f77089c4de6d1ff937a420c5a4afc353b167efcb42027090326b17a3c8904", 0x74}, {&(0x7f00000016c0)="0621261b6f3cb4b2d1c6b563347cac2d3290a6cd14019f97ce9c419582d7a75ba398dd5532d6efa1f1db05b4af1aa00b32814172c56b0c08a92b33c8f313a39825ca2311b8fd6cb42a951d1dc3", 0x4d}, {&(0x7f0000001740)="c997bb8b806d21fdb81f7b24cac86560ac0adc435be58aec37e36153c0e8cd7510c5c7b11611028e2fd268838aa5654c472df913b1eb8d8fe6f9539426d508e8ad84498e309538c27a1909ccf2c3db822a2afb74c7a39e93147875", 0x5b}, {&(0x7f00000017c0)="19d97d7bd4c3aefcdd6af4354cb1f755a077c16330005a855df3486b47b3c98aac6fd9059077044f6a0fc897d57ae297c0374dbaaceb990ac1ecbaade33076caf67acbfac3589633817123d87f43cb75204d6f7ab4bd193263835b69b49b7af095e905e20359f53a326e4b15a4910fa15f319fad679773b5eff3bd450402aa765e08bdef09867db6ce066665524c5633657044992cf650cdf15e541ad938d0ae2db4fd45b4815bcb3d7d971a65f22b22da265bace83fc6e002ca18bdb9982e60010d1583f26e1e8cd37d9f576729fa9a660d12", 0xd3}], 0x4, &(0x7f0000001900)=[@hopopts={{0xa8, 0x29, 0x36, {0x3b, 0x11, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @hao={0xc9, 0x10, @local}, @generic={0x0, 0x61, "e783d8940fa4b21b48905927236bd7130f45f94f78a02b15b4dfd6ba07ffaa72885b1146ba97146553e9e7a33ebff687bc4d1787e564c8a9e3da79d5f6cb9670fab90d9befffcd0d5c75f0dec7a8510a9facee36d1163dd9773a00ef3810502192"}, @generic={0x4, 0x2, 'qR'}]}}}, @dstopts={{0x1270, 0x29, 0x37, {0xc, 0x24b, '\x00', [@pad1, @generic={0xff, 0x1000, "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"}, @hao={0xc9, 0x10, @local}, @generic={0x94, 0xfb, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xa, 0xe3, "20ae10b71bdecb6bc30f5a1e30d40455ef74bf3de29a9fa3be23d1d8618a6ba69c949a7715bfecb27ad9853c44de3dc45e949fec14c6ee6b4f65bd7d3fbb1dd471122ba49fe2ac376359898a8ede9c3b4ea265b0618aab4cb96cb4658de6f5ae0efb2f0a2d1b508a7e40f0ef08fe63d943ba8046124198d1280805d2f73b7d2681dbb3c1ad395a7c75146801973eceafe99c416f4d179e903c2940ae04b96c90cea4f4de2ce4389bce9fc464e8441ebd83ee93ff912d3fe1bb78fa5a68850ce70562b71fd60019d48f2f6c1ce91129e0ad5506de71bba40b1e1feb01d7dbc920c6b670"}, @generic={0x0, 0x47, "0a6e89548e971bce23b69f988c942a1275c85c3727580b6afb779afb73513ca0889eb5549c063c919a2aa17fa3bfad7f79a76947352f12dc525322d6e1d3a71c84e7111c77898c"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x1318}}, {{&(0x7f0000002c40)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8c8}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002c80)="ed81179cbc4ad89fa8a40b8cffed04879fd39b6752cc37c5ed64e976ee79970bdee91ba3ef9dfb337b0c4c3955467078d510ec4988a13117bc7e0b8b6ca56c3bd02e488f0f43c3fea2ed7e03e6c49aab0ad2838cd6be0e5cfad3d114d606029dc9f7baf19672099051179b3effe7bb096de5f2fbb37c64d02051f9", 0x7b}, {&(0x7f0000002d00)="1bc5b08e44cfd41583855362ee", 0xd}, {&(0x7f0000002d40)="b954c38086bd742f384907c853735f564bd32b0927f81bd6b53ed557ef57715716f01e919402a1dcb47526e80b99e1ba3a008161fdb4", 0x36}, {&(0x7f0000002d80)="c641d2afd25c7295d158423d1c92be898092df78a1febb77130ae88dc422ed35b1dce7", 0x23}, {&(0x7f0000002dc0)="e66e4357b11da001e7360627877146c4aa11104fbaccb08ce815178fe3775389df47e19c9b91ceb89a164462b7fe2abdd4f15a761392d94aec6bdb841136c2d879e43da7738493b8af89aead5592887d348335d769b0d95e4f8f9d67223c88cb27c341ace35aed2ff1f0fb61fb760892c461d6f9ac3734ee616a5b16668737a2bcfbb0abc427c41fb2c2940e91088a47fd4b944d2865390ef51536f82956ccbb0b8b41478c", 0xa5}, {&(0x7f0000002e80)="0d70fffa68cbf0689004683d5fc2f50a8bcdc8853109027719c2dca2cffe0525000e500c741b5440b676d4740c249493cf1c95309ee2660266c62106e3191c8b6515f755713eccbb6d9c767ead481b8d4e63959fb1ca7a78da8597d9c158aee7fe53bdff3c2e81c61370c3d1efcdebc4b787cf92bbb184bc8d064938a7", 0x7d}, {&(0x7f0000002f00)="0382118ae01f18db28959c7da2d82269e23c96e722657ea3643d398fa5266e2b9d0f41bc57b85246bf8a01b531ff160423fc09f3d5de5a01edefa2262ca8321afca8bdff005f1045c9a2b0c2c48016370791989f6d8775f6974c00a995148a00252658bfffdd75b039c7da9ac66816611ae53ea05bca5ed0b87620a53a71eeda3f0dd1b403b4c27228465c6f901c514a410c12ec786cb1b5033b0e3ac1ec98b419e8c89b5745df087ab68b", 0xab}], 0x7, &(0x7f0000003100)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r11}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffff}]}}}], 0x48}}], 0x3, 0x8010)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000034c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003480)={&(0x7f0000003280)={0x1e0, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64d}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfe, @rand_addr=' \x01\x00', 0xcb}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x37}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1f9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x400c050}, 0x20048840)
r12 = getpid()
syz_open_procfs$namespace(r12, &(0x7f0000003500)='ns/net\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)=@ipv6_getnetconf={0x3c, 0x52, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0xca}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xf}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48005}, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680), r0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x14, r13, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
sendmsg$AUDIT_TRIM(r1, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x10, 0x3f6, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4040881)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000003880))
ioctl$XFS_IOC_READLINK_BY_HANDLE(r6, 0xc038586c, &(0x7f00000039c0)={r8, &(0x7f00000038c0)='\x00', 0x80002, &(0x7f0000003900)={@_ha_fsid={[0x9, 0x9]}, {0x1, 0x5dda, 0xffffffff}}, 0x5b, &(0x7f0000003940), &(0x7f0000003980)=0x8183})

1.386131518s ago: executing program 1 (id=13402):
r0 = socket$inet(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x800) (rerun: 32)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000900))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x5, 0x7fff, 0xa}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async, rerun: 32)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (rerun: 32)
close(r6) (async)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c12590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000800)={{<r10=>r0, &(0x7f00000002c0)='\x00', 0x10000, &(0x7f0000000500)={@_ha_fsid={[0xd, 0xb88]}, {0x49, 0x968, 0xffffff00, 0xb}}, 0x5, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, {[0xfb1552c, 0x9, 0x2, 0xff]}, 0xb99, 0xfb, &(0x7f00000005c0)=""/251})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r10, 0x111, 0x1, 0x1ff, 0x4) (async)
getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, 0x0, &(0x7f0000002180)) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xd, 0x3, 0x60000000, 0x80000000, 0x21c26, r10, 0x8, '\x00', 0x0, r5, 0x5, 0x1, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x7, 0x9, 0x9, 0x81, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x16, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xc, 0x9, 0x0, 0x4, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', r4, @fallback=0xd, r6, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0xf, 0x6, 0xce6}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000280)=[r8], &(0x7f0000000340)=[{0x3, 0x2, 0x8, 0x4}, {0x5, 0x4, 0x6, 0x9}, {0x4, 0x3, 0x2, 0x3}, {0x4, 0x1, 0xe, 0x9}, {0x5, 0x4, 0xd, 0xc}, {0x2, 0x5, 0x99, 0x8}, {0x3, 0x3, 0x8, 0xa}, {0x2, 0x3, 0x7, 0x8}], 0x10, 0xfffffff8}, 0x94)

1.353859181s ago: executing program 2 (id=13403):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048024}, 0x4)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}}, 0x880)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x44}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x24000000)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000a00)={'vxcan0\x00', <r10=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, <r11=>0x0}, &(0x7f0000000a80)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip_vti0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', <r12=>0x0, 0x50, 0x8010, 0x7, 0x1, {{0x1c, 0x4, 0x3, 0x1e, 0x70, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @ssrr={0x89, 0x1b, 0x40, [@broadcast, @broadcast, @remote, @broadcast, @empty, @rand_addr=0x64010100]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0xd, "ccf0e0066570538d50df4b"}, {0x2, 0xb, "fe25aa77bacba8a2ef"}]}, @end, @timestamp={0x44, 0xc, 0x4e, 0x0, 0x5, [0x9, 0x3]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @noop, @rr={0x7, 0x7, 0x5c, [@private=0xa010101]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'erspan0\x00', &(0x7f0000000bc0)={'erspan0\x00', <r13=>0x0, 0x88, 0x40, 0x16833318, 0x1, {{0x11, 0x4, 0x1, 0x3d, 0x44, 0x64, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1, {[@rr={0x7, 0x2b, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @remote, @empty, @rand_addr=0x64010101, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000c80)={'wg1\x00', <r14=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000cc0)={@mcast1, <r15=>0x0}, &(0x7f0000000d00)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000d40)={'ip_vti0\x00', <r16=>0x0, 0x87, 0x8, 0xffffff4f, 0x200, {{0x27, 0x4, 0x0, 0xc, 0x9c, 0x67, 0x0, 0x61, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x24, 0xdc, 0x0, 0x4, [0x7fffffff, 0xfffffff8, 0x6a77, 0xfffffffd, 0x72, 0xb, 0x480, 0x6]}, @rr={0x7, 0x2b, 0xf8, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @remote, @empty, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2]}, @generic={0x7, 0x10, "4df4d6a5c07e942ad82d6752aa31"}, @rr={0x7, 0x27, 0x97, [@rand_addr=0x64010100, @local, @loopback, @broadcast, @empty, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'tunl0\x00', &(0x7f0000000e40)={'sit0\x00', <r17=>0x0, 0x0, 0x40, 0x0, 0xa5f, {{0x14, 0x4, 0x3, 0x1d, 0x50, 0x66, 0x0, 0x8, 0x2f, 0x0, @local, @remote, {[@lsrr={0x83, 0x23, 0xd8, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0x17, 0x82, [@remote, @empty, @local, @multicast2, @empty]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000011c0)={&(0x7f0000000900), 0xc, &(0x7f0000001180)={&(0x7f0000000f00)={0x274, r7, 0x501, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
r18 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r18, 0x6, 0xa, &(0x7f0000001200)=0x9, 0x4)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ac}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)

1.295372204s ago: executing program 3 (id=13404):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000002e80)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x1, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0)

1.28754581s ago: executing program 0 (id=13405):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket(0x840000000002, 0x3, 0x100)
setsockopt$inet_msfilter(r1, 0x0, 0x30, 0x0, 0x2000000)

1.176193618s ago: executing program 4 (id=13406):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendto$l2tp(r0, &(0x7f00000000c0)="82663c4d91d58dd0d3d3dbb7e47e208eae1364aa990ef7bfeb1a64ef3baa4d89d5aeccadef5fe532214db1d887fe0b9f0531d356e4ac36ff9a71ea2647cf8a9bf3060caba468caa218ad10111a1f3aa6b2e7", 0x52, 0x1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4}}]}, 0x38}}, 0x0)

1.1437281s ago: executing program 3 (id=13407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendto(r1, &(0x7f00000000c0)="7de47cf11e500646f44aa93a04ed684ed90adcba91c64dfca01a0de177f5387db68d37d6a327e0e9920da75d5f6c8830ec74bc7f96468c8e415555cb6be8561eedfae1ec43312a878b65c61caaf35e0e7490e023f6dc195cd4d9e63d3320f93ba097b40d79152fd7caceb254dae9453b66a440ede8f70bac5a9c82a968a68147b5af3bff50fc", 0x86, 0x11, &(0x7f0000000240)=@hci={0x1f, 0x1, 0x2}, 0x80)

1.050667963s ago: executing program 2 (id=13408):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x1000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', <r4=>0x0, 0x58, 0x10, 0x7, 0x0, {{0xf, 0x4, 0x1, 0x30, 0x3c, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x52, [@multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x39, [@local, @remote, @multicast1, @private=0xa010102, @loopback]}]}}}}})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000440)={<r5=>0xffffffffffffffff})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r4, 0x30, 0x5, @val=@netkit={@void, @value=r1}}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10)
r7 = socket(0x10, 0x803, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r9, 0x8915, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="185f2400159f1f8c52a23d9de4dbdf2502084300", @ANYRES32=0x0], 0x18}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.024859894s ago: executing program 0 (id=13409):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x1, @local}, 0x10)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000780)={r3, 0x1, 0x6, @local}, 0x10)
close(0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a000002000711"], 0x0)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.02459315s ago: executing program 1 (id=13410):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3f000000010040", 0x7)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

923.968219ms ago: executing program 4 (id=13411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x23, 0x803, 0x40)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}}, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000b1ca35795ca712d28b00000000004f971196ea3c009f7a174b5c889d5d3425c35734826ebd4190126c2ddef9c308eea20a11e529927221f9739d704c2afc63308009d0814f9a10ea5fd256ba5b7018ce379dbe3e5cc0acab2f99dcef3448104ac4bb5a97584309a2fabb1b78eaeae11c613b43cb6dbf38b77f10a8f768fef9a0137884d0593f9f4fde4349ea"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0xa0, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff5999}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}, @IFLA_MAP={0x24, 0xe, {0x6, 0x5, 0x1, 0x2295, 0x60, 0x3}}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x1}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7fc2e}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0xa0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x2d, &(0x7f0000000000)=0x80000001, 0x4)
setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000001c0)={@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc)

858.87981ms ago: executing program 2 (id=13412):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000)

857.211738ms ago: executing program 3 (id=13413):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'})
r1 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0xd}, 0x94)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000380)=""/147, &(0x7f0000000100)=0x93)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x17c}}, 0x40080)

677.992976ms ago: executing program 3 (id=13414):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
listen(r1, 0x7ff) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
r3 = accept4(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000000000)=""/14, 0xe, 0x100, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9", 0xf}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0)
recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/149, 0x95}], 0x1}, 0x20000002) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x10, 0x6}]}, {0x0, [0x6f, 0x5f, 0x5f, 0x0, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) (async)
r4 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4)
r5 = socket$kcm(0x2, 0x0, 0x84) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x25, 0x0, 0x8) (async, rerun: 64)
setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90) (rerun: 64)

635.826176ms ago: executing program 1 (id=13415):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) (async)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
setsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x1010, r4, 0xf0196000)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r7, 0x0)

546.768964ms ago: executing program 4 (id=13416):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9c23}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x14b3}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x50}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x13}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x819)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)

413.771698ms ago: executing program 2 (id=13417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c4, 0x40, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x100, 0x142, 0x0, 0x1, [@nested={0xfc, 0x38, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @u32=0x2}, @nested={0x18, 0x140, 0x0, 0x1, [@nested={0x4, 0x33}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x5b, 0x0, 0x0, @fd=r0}]}, @generic="541836c256957ea382e1ce1ee065bc5aff880f7220ae8d88326b75e2422ef6ebe264fb07ef58627b9739b0f6e46a1bdd1bd1c78a655ddbd278ae1d867583cb0aa42a37a0276f296baa60228003479b7ce371525805ad41868ec3eab61023ac0ebdf2cf86d309eac785fac92550a5bf5e544a374d8a76f5735eefd461301174edc91b0ff12f8336c0aec5829f97711766329b974edc79601878e1d16de11c7d975a606011", @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="6c4b8815031720b32a11b7f1b0c92d7100100000e60475b9735caedd2ea7f893155a9d53b2831da3bbf3bc24"]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xa1, 0x2, 0x0, 0x1, [@generic="464d4daeac98eff87617beab842ea3892a648806df095eeef216fbef0ee057a96ba1052727c7edb531cc7feaadad4a405b9cd34e0a9545c35e0757e4f1fcf66f0726c641b84c29d9ac8d1b8e0e87420e8ef9cc5e994b293ea1b398e88608573fa2faa4cd621bfaca516e45d5682818608deef9f0c01d9cf05cc7ac373fdf5d98bdf1fe9db36cee8b54f11fe5798a6123bab44ec8ae4481e1298449001c"]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

402.119531ms ago: executing program 0 (id=13418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x100, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xca0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x400}, 0x8880)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa8bf94635cb2e24b3a880000df002400128009000100626f6e64000000081400028008001c008c040000"], 0x44}}, 0x0)

327.178853ms ago: executing program 4 (id=13419):
r0 = socket(0x1e, 0x2, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSMAXCID(r3, 0x4004743c, 0x0)

227.22123ms ago: executing program 3 (id=13420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x5c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000180)=0x2, 0x4) (async)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000180)=0x2, 0x4)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r7, 0x1, 0xfffffffe, 0x4, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffb}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804)

188.955048ms ago: executing program 2 (id=13421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

2.534961ms ago: executing program 4 (id=13422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast1}, 0x230, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffa, 0x3, 0x7})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc}}}]}, 0x3c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x3, r4}, 0xc)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}]}}]}, 0x4c}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

2.234433ms ago: executing program 0 (id=13423):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x2d, 0x2, 0x0) (async)
socket(0x2d, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001800092d00000000000000001c140000fe000001"], 0xa0}}, 0x0)

0s ago: executing program 2 (id=13424):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', <r2=>0x0, 0x7, 0x40, 0x689, 0x7740, {{0x1f, 0x4, 0x0, 0x7, 0xfffffffffffffc7a, 0x64, 0x0, 0xab, 0x29, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x20, 0xb8, 0x0, 0xc, [0x3, 0x8, 0x8, 0x7, 0xf, 0x0, 0x80000000]}, @generic={0x83, 0xe, "47788e27d7e16b8a77dd611b"}, @rr={0x7, 0x1b, 0xf7, [@multicast1, @private=0xa010102, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x1c, 0x7a, 0x0, 0x1, [0x7, 0x7, 0x780, 0x9, 0x6, 0x8001]}]}}}}})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x2, 0x0, 0x0, r2, 0xffffffff}, 0xc)

kernel console output (not intermixed with test programs):

ate
[ 1014.154698][T16740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1014.165849][T16740] bridge_slave_0: entered allmulticast mode
[ 1014.182321][T16740] bridge_slave_0: entered promiscuous mode
[ 1014.226537][T16740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.242968][T16740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.264676][T16740] bridge_slave_1: entered allmulticast mode
[ 1014.288238][T16740] bridge_slave_1: entered promiscuous mode
[ 1014.430108][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1014.537869][T16844] syzkaller0: entered promiscuous mode
[ 1014.543391][T16844] syzkaller0: entered allmulticast mode
[ 1014.575886][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1014.652223][ T5839] Bluetooth: hci4: command tx timeout
[ 1014.728267][T16740] team0: Port device team_slave_0 added
[ 1014.741869][T16740] team0: Port device team_slave_1 added
[ 1016.474230][   T36] net_ratelimit: 164 callbacks suppressed
[ 1016.474253][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.509903][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.538539][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.567490][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.595658][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.624702][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.654710][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.676510][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.709429][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.734290][ T5839] Bluetooth: hci4: command tx timeout
[ 1016.738100][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.883062][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1016.890465][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1016.917436][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1016.940790][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1016.970231][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1017.034162][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1017.124810][T16910] __nla_validate_parse: 3 callbacks suppressed
[ 1017.124827][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11983'.
[ 1017.195434][T16740] hsr_slave_0: entered promiscuous mode
[ 1017.213713][T16740] hsr_slave_1: entered promiscuous mode
[ 1017.220838][T16740] debugfs: 'hsr0' already exists in 'hsr'
[ 1017.230935][T16740] Cannot create hsr debugfs directory
[ 1017.240594][T16917] FAULT_INJECTION: forcing a failure.
[ 1017.240594][T16917] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1017.274213][T16917] CPU: 1 UID: 0 PID: 16917 Comm: syz.4.11985 Not tainted syzkaller #0 PREEMPT(full) 
[ 1017.274239][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1017.274250][T16917] Call Trace:
[ 1017.274258][T16917]  <TASK>
[ 1017.274265][T16917]  dump_stack_lvl+0xe8/0x150
[ 1017.274292][T16917]  should_fail_ex+0x412/0x560
[ 1017.274321][T16917]  _copy_from_user+0x2d/0xb0
[ 1017.274340][T16917]  copy_from_sockptr+0x5e/0x90
[ 1017.274365][T16917]  do_ip_setsockopt+0x1b85/0x2ea0
[ 1017.274396][T16917]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1017.274419][T16917]  ? aa_sk_perm+0x82d/0x960
[ 1017.274442][T16917]  ? __fget_files+0x2a/0x420
[ 1017.274465][T16917]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1017.274489][T16917]  ? __fget_files+0x2a/0x420
[ 1017.274504][T16917]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1017.274529][T16917]  ip_setsockopt+0x66/0x110
[ 1017.274549][T16917]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1017.274569][T16917]  do_sock_setsockopt+0x17c/0x1b0
[ 1017.274595][T16917]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1017.274621][T16917]  do_syscall_64+0x14d/0xf80
[ 1017.274642][T16917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1017.274659][T16917]  ? trace_irq_disable+0x37/0x100
[ 1017.274678][T16917]  ? clear_bhb_loop+0x40/0x90
[ 1017.274699][T16917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1017.274716][T16917] RIP: 0033:0x7f4527b9bf79
[ 1017.274732][T16917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1017.274746][T16917] RSP: 002b:00007f4528a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1017.274765][T16917] RAX: ffffffffffffffda RBX: 00007f4527e15fa0 RCX: 00007f4527b9bf79
[ 1017.274779][T16917] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000004
[ 1017.274790][T16917] RBP: 00007f4528a2c090 R08: 000000000000000c R09: 0000000000000000
[ 1017.274801][T16917] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1017.274812][T16917] R13: 00007f4527e16038 R14: 00007f4527e15fa0 R15: 00007fffcbb86c58
[ 1017.274843][T16917]  </TASK>
[ 1017.536728][T16904] bridge_slave_0: left allmulticast mode
[ 1017.542416][T16904] bridge_slave_0: left promiscuous mode
[ 1017.554091][T16904] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1017.574479][T16904] bridge_slave_1: left allmulticast mode
[ 1017.616001][T16904] bridge_slave_1: left promiscuous mode
[ 1017.618414][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11986'.
[ 1017.621836][T16904] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.659790][T16904] bond0: (slave bond_slave_0): Releasing backup interface
[ 1017.676794][T16904] bond0: (slave bond_slave_1): Releasing backup interface
[ 1017.714822][T16904] team0: Port device team_slave_0 removed
[ 1017.732851][T16904] team0: Port device team_slave_1 removed
[ 1017.745049][T16904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1017.752670][T16904] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1017.767748][T16904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1017.775669][T16904] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1017.881038][T16925] team0: Port device team_slave_0 removed
[ 1017.910286][T13892] syz1: Port: 1 Link DOWN
[ 1018.030647][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11990'.
[ 1018.105829][T16951] netlink: 'syz.2.11993': attribute type 1 has an invalid length.
[ 1018.174401][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11993'.
[ 1018.215610][T16958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11993'.
[ 1018.383210][T16967] bond0: entered promiscuous mode
[ 1018.407406][T16967] bond_slave_0: entered promiscuous mode
[ 1018.423808][T16967] bond_slave_1: entered promiscuous mode
[ 1018.465512][T16967] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode
[ 1018.493564][T16967] bond0: left promiscuous mode
[ 1018.514242][T16967] bond_slave_0: left promiscuous mode
[ 1018.519967][T16967] bond_slave_1: left promiscuous mode
[ 1018.526932][T16967] mac80211_hwsim hwsim94 wlan1: left promiscuous mode
[ 1018.555462][T16740] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.576816][T16740] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1018.734814][T16740] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.746890][T16740] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1018.818057][ T5839] Bluetooth: hci4: command tx timeout
[ 1018.837572][T17005] netlink: 'syz.4.12004': attribute type 2 has an invalid length.
[ 1018.849085][T16998] bond4: Unable to set up delay as MII monitoring is disabled
[ 1018.879966][T16998] bond4 (unregistering): Released all slaves
[ 1018.899047][T17005] netlink: 'syz.4.12004': attribute type 1 has an invalid length.
[ 1018.943873][T16740] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1018.958171][T16740] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.000858][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12006'.
[ 1019.081898][T16740] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1019.086615][T17024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12008'.
[ 1019.099929][T16740] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1019.129660][T17024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12008'.
[ 1019.297301][T16740] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1019.324747][T16740] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1019.336379][T16740] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1019.347873][T16740] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1019.482956][T16740] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1019.527637][T16740] 8021q: adding VLAN 0 to HW filter on device team0
[ 1019.551739][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.558954][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1019.589707][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.596937][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1019.649931][T17008] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1019.695965][T16740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1019.868585][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12015'.
[ 1020.006671][T17069] netlink: 'syz.3.12016': attribute type 11 has an invalid length.
[ 1020.036234][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12016'.
[ 1020.078866][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1020.098491][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1020.107116][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1020.342421][T16740] veth0_vlan: entered promiscuous mode
[ 1020.381943][T17085] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[ 1020.407423][T16740] veth1_vlan: entered promiscuous mode
[ 1020.575277][T16740] veth0_macvtap: entered promiscuous mode
[ 1020.609633][T16740] veth1_macvtap: entered promiscuous mode
[ 1020.668062][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1020.714901][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1020.740999][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.776629][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.801338][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.869988][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1020.887246][ T5839] Bluetooth: hci4: command tx timeout
[ 1021.025802][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1021.027219][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1021.033658][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1021.059731][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1021.514315][ T1156] net_ratelimit: 156 callbacks suppressed
[ 1021.514335][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1021.529014][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1021.645339][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1021.653116][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1021.767637][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1021.780812][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1021.895310][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1021.903284][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1022.014165][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.022305][   T36] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1023.801102][T17133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1023.862077][T17164] netlink: 'syz.0.12034': attribute type 10 has an invalid length.
[ 1023.872949][T17164] __nla_validate_parse: 3 callbacks suppressed
[ 1023.872968][T17164] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12034'.
[ 1023.894783][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1023.934837][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1024.069129][T17226] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1024.150719][T17232] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12042'.
[ 1024.198279][T17230] sctp: [Deprecated]: syz.4.12041 (pid 17230) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1024.198279][T17230] Use struct sctp_sack_info instead
[ 1024.248155][T17237] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1024.316640][T17232] bond1 (unregistering): Released all slaves
[ 1024.445234][T17240] netlink: 'syz.2.12045': attribute type 9 has an invalid length.
[ 1024.458808][T16203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1024.474337][T16203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1024.483987][T16203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1024.485097][T17240] netlink: 'syz.2.12045': attribute type 11 has an invalid length.
[ 1024.524587][T16203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1024.532052][T17240] netlink: 'syz.2.12045': attribute type 12 has an invalid length.
[ 1024.540302][T16203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1024.575863][T17240] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.12045'.
[ 1024.604423][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12045'.
[ 1024.721033][T17254] syzkaller0: entered promiscuous mode
[ 1024.749608][T17254] syzkaller0: entered allmulticast mode
[ 1024.766182][T17246] erspan0 speed is unknown, defaulting to 1000
[ 1025.046761][T17268] netlink: 'syz.0.12053': attribute type 1 has an invalid length.
[ 1025.112312][T17268] bond1: entered promiscuous mode
[ 1025.117890][T17268] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1025.134227][T17260] erspan0 speed is unknown, defaulting to 1000
[ 1025.188615][T17277] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1025.205255][T17277] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[ 1025.238097][T17277] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[ 1025.256916][T17281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12056'.
[ 1025.272086][T17277] bond1: (slave vcan1): making interface the new active one
[ 1025.294622][T17281] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1025.312458][T17277] vcan1: entered promiscuous mode
[ 1025.332059][T17277] bond1: (slave vcan1): Enslaving as an active interface with an up link
[ 1025.538725][T17246] chnl_net:caif_netlink_parms(): no params data found
[ 1025.640116][T17297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12060'.
[ 1025.742731][T17300] syzkaller0: entered promiscuous mode
[ 1025.776934][T17300] syzkaller0: entered allmulticast mode
[ 1025.907390][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12064'.
[ 1025.959498][T17246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1025.968198][T17246] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1025.976208][T17246] bridge_slave_0: entered allmulticast mode
[ 1025.984261][T17246] bridge_slave_0: entered promiscuous mode
[ 1025.993121][T17246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.000326][T17246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.008087][T17246] bridge_slave_1: entered allmulticast mode
[ 1026.015614][T17246] bridge_slave_1: entered promiscuous mode
[ 1026.033828][T17325] netlink: 'syz.4.12066': attribute type 10 has an invalid length.
[ 1026.060515][T17325] team0: Device ipvlan1 failed to register rx_handler
[ 1026.152428][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.163142][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12065'.
[ 1026.193703][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1026.302599][T17334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12069'.
[ 1026.312360][T17246] team0: Port device team_slave_0 added
[ 1026.361672][T17339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12071'.
[ 1026.385667][T17246] team0: Port device team_slave_1 added
[ 1026.503133][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1026.523262][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1026.557715][ T3529] net_ratelimit: 111 callbacks suppressed
[ 1026.557733][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.562773][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.586412][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.602622][   T36] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1026.645593][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.652567][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1026.655728][T16203] Bluetooth: hci2: command tx timeout
[ 1026.724592][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.760229][T17366] netlink: 'syz.4.12076': attribute type 1 has an invalid length.
[ 1026.769194][T17366] netlink: 'syz.4.12076': attribute type 4 has an invalid length.
[ 1026.774149][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.787135][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.802143][T17360] lo: Caught tx_queue_len zero misconfig
[ 1026.814600][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.854205][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.885789][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.917495][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1026.976165][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1027.142264][T17246] hsr_slave_0: entered promiscuous mode
[ 1027.150998][T17246] hsr_slave_1: entered promiscuous mode
[ 1027.159970][T17246] debugfs: 'hsr0' already exists in 'hsr'
[ 1027.167271][T17246] Cannot create hsr debugfs directory
[ 1027.832786][T17383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1027.847357][T17246] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1027.877252][T17246] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1027.896400][T17246] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1027.944399][T17246] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1028.017441][T17425] mac80211_hwsim hwsim102 ÿ
: renamed from wlan1
[ 1028.163744][T17432] syzkaller0: entered promiscuous mode
[ 1028.172546][T17432] syzkaller0: entered allmulticast mode
[ 1028.254949][T17246] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1028.264389][ T5908] IPVS: starting estimator thread 0...
[ 1028.287276][T17246] 8021q: adding VLAN 0 to HW filter on device team0
[ 1028.331818][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1028.339006][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1028.341331][T17441] delete_channel: no stack
[ 1028.379009][T17439] IPVS: using max 34 ests per chain, 81600 per kthread
[ 1028.407162][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1028.414352][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1028.729299][T16203] Bluetooth: hci2: command tx timeout
[ 1028.828659][T17474] erspan0 speed is unknown, defaulting to 1000
[ 1028.837738][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1028.911536][T17479] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1028.929264][T17246] veth0_vlan: entered promiscuous mode
[ 1029.042199][T17246] veth1_vlan: entered promiscuous mode
[ 1029.103317][T17484] SET target dimension over the limit!
[ 1029.147952][T17479] netlink: 'syz.4.12103': attribute type 3 has an invalid length.
[ 1029.156193][T17479] __nla_validate_parse: 6 callbacks suppressed
[ 1029.156208][T17479] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12103'.
[ 1029.180088][T17246] veth0_macvtap: entered promiscuous mode
[ 1029.239346][T17246] veth1_macvtap: entered promiscuous mode
[ 1029.372474][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1029.407249][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1029.451342][ T1091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1029.813498][T17520] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12115'.
[ 1029.965885][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12116'.
[ 1029.977209][T17528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12116'.
[ 1030.183948][T19573] lec:lec_start_xmit: lec0:No lecd attached
[ 1030.815242][T16203] Bluetooth: hci2: command tx timeout
[ 1031.095701][ T1091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.115097][T17533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12117'.
[ 1031.135832][ T1091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.156986][ T1091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.406748][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1031.428620][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.498432][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12123'.
[ 1031.509172][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1031.523037][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1031.575832][T17555] net_ratelimit: 155 callbacks suppressed
[ 1031.575851][T17555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1031.614190][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1031.621970][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1031.754521][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1031.762292][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1031.894456][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1031.902233][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1031.923718][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1031.936100][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1031.946364][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1031.966459][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1031.979405][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1032.052052][T17576] erspan0 speed is unknown, defaulting to 1000
[ 1032.075403][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.134703][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.160519][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12131'.
[ 1032.204562][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.268814][T17583] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12131'.
[ 1032.288257][T17576] chnl_net:caif_netlink_parms(): no params data found
[ 1032.335698][T17596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12132'.
[ 1032.494521][T17601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12134'.
[ 1032.577975][T17576] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1032.585781][T17576] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1032.593103][T17576] bridge_slave_0: entered allmulticast mode
[ 1032.601906][T17576] bridge_slave_0: entered promiscuous mode
[ 1032.620702][T17576] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1032.628035][T17576] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1032.636612][T17576] bridge_slave_1: entered allmulticast mode
[ 1032.644706][T17576] bridge_slave_1: entered promiscuous mode
[ 1032.786630][ T1091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1032.801509][ T1091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1032.843697][T17576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1032.857076][T17576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1032.884641][ T5839] Bluetooth: hci2: command tx timeout
[ 1032.966857][ T1091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1032.987706][ T1091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1033.077928][T17576] team0: Port device team_slave_0 added
[ 1033.107988][T17576] team0: Port device team_slave_1 added
[ 1033.176083][ T1091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1033.202014][ T1091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1033.290342][T17637] syzkaller0: entered promiscuous mode
[ 1033.296303][T17637] syzkaller0: entered allmulticast mode
[ 1033.316875][   T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1033.325764][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1033.352392][ T1091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1033.366842][ T1091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1034.005406][ T5839] Bluetooth: hci0: command tx timeout
[ 1034.996380][T17576] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1035.003467][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1035.030708][T17576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1035.041714][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.052605][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1035.063968][T17652] netlink: 'syz.2.12149': attribute type 4 has an invalid length.
[ 1035.094908][T17576] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1035.101882][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1035.145726][T17576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1035.258675][T17669] __nla_validate_parse: 37 callbacks suppressed
[ 1035.258692][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12153'.
[ 1035.277918][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12153'.
[ 1035.306929][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12153'.
[ 1035.339592][T17576] hsr_slave_0: entered promiscuous mode
[ 1035.359979][T17576] hsr_slave_1: entered promiscuous mode
[ 1035.373723][T17576] debugfs: 'hsr0' already exists in 'hsr'
[ 1035.389108][T17576] Cannot create hsr debugfs directory
[ 1035.604746][ T1091] bridge_slave_1: left allmulticast mode
[ 1035.612164][ T1091] bridge_slave_1: left promiscuous mode
[ 1035.624522][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1035.680579][ T1091] ¾x9ÿ: left allmulticast mode
[ 1035.695231][ T1091] ¾x9ÿ: left promiscuous mode
[ 1035.700485][ T1091] bridge0: port 1(
1¾x9ÿ) entered disabled state
[ 1035.732621][ T1091] veth5: left allmulticast mode
[ 1035.745548][T17700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12160'.
[ 1035.756060][ T1091] veth5: left promiscuous mode
[ 1035.761934][ T1091] bridge1: port 1(veth5) entered disabled state
[ 1035.769751][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms
[ 1035.777763][    C0] lec:lec_tx_timeout: lec0
[ 1035.938312][ T1091] bond5 (unregistering): (slave vti0): Releasing backup interface
[ 1035.948874][ T1091] vti0 (unregistering): left promiscuous mode
[ 1036.094234][ T5839] Bluetooth: hci0: command tx timeout
[ 1036.108932][ T1091] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1036.118401][ T1091] bond1 (unregistering): Released all slaves
[ 1036.132259][ T1091] bond2 (unregistering): Released all slaves
[ 1036.146254][ T1091] bond0 (unregistering): Released all slaves
[ 1036.161198][ T1091] bond3 (unregistering): (slave lo): Releasing backup interface
[ 1036.169728][ T1091] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1036.190170][ T1091] bond3 (unregistering): Released all slaves
[ 1036.206842][ T1091] bond4 (unregistering): Released all slaves
[ 1036.219835][ T1091] bond5 (unregistering): Released all slaves
[ 1036.485889][ T1091] : left promiscuous mode
[ 1036.503563][T17717] syzkaller1: entered promiscuous mode
[ 1036.509379][T17717] syzkaller1: entered allmulticast mode
[ 1036.517714][T17720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12165'.
[ 1036.584223][   T12] net_ratelimit: 206 callbacks suppressed
[ 1036.584243][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.593359][ T1091] tipc: Left network mode
[ 1036.600849][T17723] tipc: Started in network mode
[ 1036.612543][T17723] tipc: Node identity ee04710c685a, cluster identity 4711
[ 1036.630820][T17723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1036.648918][T17717] syzkaller0: entered promiscuous mode
[ 1036.655278][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.676451][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.694311][T17717] syzkaller0: entered allmulticast mode
[ 1036.715196][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.755219][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.786544][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.800616][T17723] tipc: Resetting bearer <eth:syzkaller0>
[ 1036.818353][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.865112][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.924653][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.954180][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.964625][T17715] tipc: Resetting bearer <eth:syzkaller0>
[ 1036.981230][T17745] netlink: 'syz.3.12173': attribute type 1 has an invalid length.
[ 1037.025327][T17715] tipc: Disabling bearer <eth:syzkaller0>
[ 1037.340218][T17753] macvtap1: entered promiscuous mode
[ 1037.352247][T17753] macvtap1: entered allmulticast mode
[ 1037.371365][T17753] veth1_vlan: entered allmulticast mode
[ 1037.396818][T17756] macvtap2: entered promiscuous mode
[ 1037.402302][T17756] macvtap2: entered allmulticast mode
[ 1037.498217][ T1091] hsr_slave_0: left promiscuous mode
[ 1037.529286][ T1091] veth1_macvtap: left promiscuous mode
[ 1037.539299][ T1091] veth0_macvtap: left promiscuous mode
[ 1037.545427][ T1091] veth1_vlan: left promiscuous mode
[ 1037.556895][ T1091] veth0_vlan: left promiscuous mode
[ 1037.976709][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12182'.
[ 1038.020869][ T1091] team0 (unregistering): Port device team_slave_1 removed
[ 1038.092481][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12183'.
[ 1038.116239][ T1091] smc: removing net device team0 with user defined pnetid SYZ2
[ 1038.163212][T17793] hsr_slave_0: left promiscuous mode
[ 1038.168701][ T5839] Bluetooth: hci0: command tx timeout
[ 1038.178951][T17793] hsr_slave_1: left promiscuous mode
[ 1038.505161][T17805] erspan0 speed is unknown, defaulting to 1000
[ 1038.567773][T17800] erspan0 speed is unknown, defaulting to 1000
[ 1038.999861][T17576] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1039.026228][T17828] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12191'.
[ 1039.052793][T17576] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1039.083325][T17576] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1039.095587][T17576] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1039.120494][ T1091] IPVS: stop unused estimator thread 0...
[ 1039.142988][T17832] netlink: 'syz.2.12192': attribute type 1 has an invalid length.
[ 1039.510590][T17853] sctp: [Deprecated]: syz.3.12197 (pid 17853) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1039.510590][T17853] Use struct sctp_sack_info instead
[ 1039.529510][T17576] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1039.595535][T17576] 8021q: adding VLAN 0 to HW filter on device team0
[ 1039.624631][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1039.631820][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1039.657814][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.665012][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1039.882883][T17868] netlink: 'syz.0.12203': attribute type 1 has an invalid length.
[ 1039.933873][T17868] netlink: 'syz.0.12203': attribute type 2 has an invalid length.
[ 1039.966951][T17868] netlink: 'syz.0.12203': attribute type 1 has an invalid length.
[ 1039.995923][T17868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12203'.
[ 1040.021338][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12205'.
[ 1040.089108][T17881] netlink: 'syz.1.12205': attribute type 7 has an invalid length.
[ 1040.176599][T17576] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1040.245161][ T5839] Bluetooth: hci0: command tx timeout
[ 1040.320547][T17903] __nla_validate_parse: 1 callbacks suppressed
[ 1040.320567][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12211'.
[ 1040.396365][T17903] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12211'.
[ 1040.738477][T17930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12216'.
[ 1041.013735][T17941] Bluetooth: MGMT ver 1.23
[ 1041.066857][T17576] veth0_vlan: entered promiscuous mode
[ 1041.096577][T17948] netlink: 'syz.0.12220': attribute type 3 has an invalid length.
[ 1041.266985][T17576] veth1_vlan: entered promiscuous mode
[ 1041.297436][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12223'.
[ 1041.323437][T17954] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12223'.
[ 1041.335620][T17955] xt_hashlimit: size too large, truncated to 1048576
[ 1041.345333][T17954] xt_hashlimit: size too large, truncated to 1048576
[ 1041.408611][T17954] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1041.418152][T17576] veth0_macvtap: entered promiscuous mode
[ 1041.460466][T17955] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1041.462591][T17576] veth1_macvtap: entered promiscuous mode
[ 1041.592451][T17576] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1041.600648][   T49] net_ratelimit: 145 callbacks suppressed
[ 1041.600667][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.622220][T17576] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1041.644964][   T49] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1041.696933][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.723951][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.745808][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.755202][ T5969] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.794172][ T5969] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.795465][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.814787][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.842868][T17980] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.12229'.
[ 1041.844612][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.894813][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.924727][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1041.984720][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.011746][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1042.108481][T17997] netlink: 'syz.0.12232': attribute type 10 has an invalid length.
[ 1042.153172][T17997] veth0_vlan: left promiscuous mode
[ 1042.160427][T17997] veth0_vlan: entered promiscuous mode
[ 1042.178487][T17997] team0: Device veth0_vlan failed to register rx_handler
[ 1042.205367][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12233'.
[ 1042.234261][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.242109][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.261529][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12233'.
[ 1042.285473][T18003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12234'.
[ 1042.302037][T17992] syzkaller0: entered promiscuous mode
[ 1042.310466][T17992] syzkaller0: entered allmulticast mode
[ 1042.428169][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.450625][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.866515][T18034] netlink: 'syz.4.12129': attribute type 26 has an invalid length.
[ 1042.899086][T18034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12129'.
[ 1042.973322][T18040] xt_cluster: node mask cannot exceed total number of nodes
[ 1043.452677][T18039] lec:lec_atm_close: lec0: Shut down!
[ 1043.810930][T18063] FAULT_INJECTION: forcing a failure.
[ 1043.810930][T18063] name failslab, interval 1, probability 0, space 0, times 0
[ 1043.832008][T18063] CPU: 1 UID: 0 PID: 18063 Comm: syz.0.12249 Not tainted syzkaller #0 PREEMPT(full) 
[ 1043.832036][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1043.832047][T18063] Call Trace:
[ 1043.832055][T18063]  <TASK>
[ 1043.832063][T18063]  dump_stack_lvl+0xe8/0x150
[ 1043.832091][T18063]  should_fail_ex+0x412/0x560
[ 1043.832119][T18063]  should_failslab+0xa8/0x100
[ 1043.832144][T18063]  __kmalloc_cache_noprof+0x88/0x660
[ 1043.832166][T18063]  ? nl80211_get_station+0x21e/0x6c0
[ 1043.832184][T18063]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1043.832209][T18063]  nl80211_get_station+0x21e/0x6c0
[ 1043.832227][T18063]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1043.832248][T18063]  ? rcu_is_watching+0x15/0xb0
[ 1043.832268][T18063]  ? trace_contention_end+0x39/0x100
[ 1043.832288][T18063]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1043.832304][T18063]  ? __mutex_lock+0x319/0x1300
[ 1043.832366][T18063]  ? nl80211_pre_doit+0x4f1/0x930
[ 1043.832402][T18063]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1043.832431][T18063]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1043.832491][T18063]  ? __dev_queue_xmit+0x274/0x3850
[ 1043.832522][T18063]  genl_rcv_msg+0x61c/0x7a0
[ 1043.832549][T18063]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1043.832569][T18063]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1043.832589][T18063]  ? __pfx_nl80211_get_station+0x10/0x10
[ 1043.832604][T18063]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1043.832631][T18063]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1043.832662][T18063]  netlink_rcv_skb+0x232/0x4b0
[ 1043.832682][T18063]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1043.832704][T18063]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1043.832719][T18063]  ? genl_rcv+0x19/0x40
[ 1043.832756][T18063]  ? down_read+0x272/0x2e0
[ 1043.832776][T18063]  ? genl_rcv+0xd/0x40
[ 1043.832795][T18063]  genl_rcv+0x28/0x40
[ 1043.832811][T18063]  netlink_unicast+0x80f/0x9b0
[ 1043.832840][T18063]  ? __pfx_netlink_unicast+0x10/0x10
[ 1043.832865][T18063]  ? netlink_sendmsg+0x650/0xb40
[ 1043.832880][T18063]  ? skb_put+0x11b/0x210
[ 1043.832902][T18063]  netlink_sendmsg+0x813/0xb40
[ 1043.832924][T18063]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1043.832940][T18063]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1043.832959][T18063]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1043.832978][T18063]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1043.832991][T18063]  ____sys_sendmsg+0xa68/0xad0
[ 1043.833011][T18063]  ? __might_fault+0xaf/0x130
[ 1043.833031][T18063]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1043.833054][T18063]  ? import_iovec+0x73/0xa0
[ 1043.833071][T18063]  ___sys_sendmsg+0x2a5/0x360
[ 1043.833086][T18063]  ? __lock_acquire+0x6b5/0x2cf0
[ 1043.833103][T18063]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1043.833146][T18063]  ? __fget_files+0x2a/0x420
[ 1043.833159][T18063]  ? __fget_files+0x3a0/0x420
[ 1043.833179][T18063]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1043.833197][T18063]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1043.833221][T18063]  ? __pfx_ksys_write+0x10/0x10
[ 1043.833246][T18063]  do_syscall_64+0x14d/0xf80
[ 1043.833263][T18063]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.833276][T18063]  ? trace_irq_disable+0x37/0x100
[ 1043.833291][T18063]  ? clear_bhb_loop+0x40/0x90
[ 1043.833306][T18063]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1043.833319][T18063] RIP: 0033:0x7fcc12b9bf79
[ 1043.833333][T18063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1043.833346][T18063] RSP: 002b:00007fcc13aea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1043.833361][T18063] RAX: ffffffffffffffda RBX: 00007fcc12e15fa0 RCX: 00007fcc12b9bf79
[ 1043.833371][T18063] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1043.833379][T18063] RBP: 00007fcc13aea090 R08: 0000000000000000 R09: 0000000000000000
[ 1043.833388][T18063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1043.833402][T18063] R13: 00007fcc12e16038 R14: 00007fcc12e15fa0 R15: 00007ffd08de0708
[ 1043.833424][T18063]  </TASK>
[ 1044.511218][T18096] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1044.668092][T18106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.735965][T18106] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.792881][T18114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1044.812623][T18114] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1045.361131][T18162] __nla_validate_parse: 7 callbacks suppressed
[ 1045.361150][T18162] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12279'.
[ 1045.606378][T18181] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12283'.
[ 1045.621715][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12284'.
[ 1045.833241][T18194] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12290'.
[ 1046.030058][T18207] sctp: [Deprecated]: syz.2.12294 (pid 18207) Use of int in maxseg socket option.
[ 1046.030058][T18207] Use struct sctp_assoc_value instead
[ 1046.166732][T18214] delete_channel: no stack
[ 1046.192129][T18220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12295'.
[ 1046.219810][T18221] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12299'.
[ 1046.231701][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12295'.
[ 1046.401523][T18243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12305'.
[ 1046.415035][T18243] netlink: 35 bytes leftover after parsing attributes in process `syz.2.12305'.
[ 1046.444155][T18243] netlink: 'syz.2.12305': attribute type 5 has an invalid length.
[ 1046.452750][T18243] netlink: 'syz.2.12305': attribute type 6 has an invalid length.
[ 1046.461709][T18243] netlink: 35 bytes leftover after parsing attributes in process `syz.2.12305'.
[ 1046.485130][T18248] netlink: 'syz.3.12307': attribute type 4 has an invalid length.
[ 1046.614168][ T1091] net_ratelimit: 110 callbacks suppressed
[ 1046.614186][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1046.646470][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1046.674622][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1046.687475][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1046.747685][T18264] xt_SECMARK: invalid mode: 9
[ 1046.815265][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1046.843352][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1046.967046][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1046.984648][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1047.094133][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.112157][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1047.171194][T18285] FAULT_INJECTION: forcing a failure.
[ 1047.171194][T18285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1047.252903][T18285] CPU: 0 UID: 0 PID: 18285 Comm: syz.4.12317 Not tainted syzkaller #0 PREEMPT(full) 
[ 1047.252938][T18285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1047.252950][T18285] Call Trace:
[ 1047.252958][T18285]  <TASK>
[ 1047.252966][T18285]  dump_stack_lvl+0xe8/0x150
[ 1047.252993][T18285]  should_fail_ex+0x412/0x560
[ 1047.253019][T18285]  _copy_from_user+0x2d/0xb0
[ 1047.253038][T18285]  __sys_sendto+0x2af/0x7a0
[ 1047.253061][T18285]  ? __pfx___sys_sendto+0x10/0x10
[ 1047.253078][T18285]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1047.253110][T18285]  ? __fget_files+0x3a0/0x420
[ 1047.253137][T18285]  ? ksys_write+0x242/0x270
[ 1047.253159][T18285]  ? __pfx_ksys_write+0x10/0x10
[ 1047.253182][T18285]  __x64_sys_sendto+0xde/0x100
[ 1047.253204][T18285]  do_syscall_64+0x14d/0xf80
[ 1047.253226][T18285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.253240][T18285]  ? trace_irq_disable+0x37/0x100
[ 1047.253259][T18285]  ? clear_bhb_loop+0x40/0x90
[ 1047.253277][T18285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.253294][T18285] RIP: 0033:0x7f7c3c59bf79
[ 1047.253309][T18285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.253324][T18285] RSP: 002b:00007f7c3d38c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1047.253344][T18285] RAX: ffffffffffffffda RBX: 00007f7c3c816090 RCX: 00007f7c3c59bf79
[ 1047.253356][T18285] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000003
[ 1047.253368][T18285] RBP: 00007f7c3d38c090 R08: 0000200000000200 R09: 0000000000000014
[ 1047.253379][T18285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1047.253389][T18285] R13: 00007f7c3c816128 R14: 00007f7c3c816090 R15: 00007ffd6f89cbd8
[ 1047.253418][T18285]  </TASK>
[ 1047.725252][T18313] tipc: Failed to remove unknown binding: 66,0,0/0:3935501990/3935501991
[ 1047.743021][T18313] tipc: Failed to remove unknown binding: 66,0,0/0:3935501990/3935501991
[ 1048.113337][T18341] syzkaller0: entered promiscuous mode
[ 1048.124215][T18341] syzkaller0: entered allmulticast mode
[ 1048.804176][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms
[ 1048.812211][    C0] lec:lec_tx_timeout: lec0
[ 1051.674270][ T3529] net_ratelimit: 79 callbacks suppressed
[ 1051.674290][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1051.687818][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1051.804248][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1051.812038][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1051.924251][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1051.933263][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1052.044271][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.052055][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1052.164255][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.172019][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1054.334618][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[ 1056.704190][ T3529] net_ratelimit: 80 callbacks suppressed
[ 1056.704207][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1056.717700][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1056.834235][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1056.843313][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1056.954309][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1056.962074][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1057.084240][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.092007][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1057.204247][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.212005][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1059.764131][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms
[ 1059.772159][    C0] lec:lec_tx_timeout: lec0
[ 1061.724282][ T3529] net_ratelimit: 80 callbacks suppressed
[ 1061.724312][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1061.737785][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1061.854200][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1061.863327][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1061.984232][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1061.991992][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1062.104840][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.112581][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1062.224201][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.231961][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1066.774930][ T1156] net_ratelimit: 80 callbacks suppressed
[ 1066.774951][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1066.788473][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1066.904236][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1066.911990][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1067.024214][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.031987][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1067.144205][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.151946][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1067.264213][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.271991][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1071.497172][T18360] ip6t_srh: unknown srh invflags 4000
[ 1071.519661][T18362] syzkaller0: entered promiscuous mode
[ 1071.527060][T18362] syzkaller0: entered allmulticast mode
[ 1071.636413][T18368] __nla_validate_parse: 4 callbacks suppressed
[ 1071.636431][T18368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12342'.
[ 1071.785050][   T12] net_ratelimit: 83 callbacks suppressed
[ 1071.785070][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1071.834339][T18379] sctp: [Deprecated]: syz.0.12345 (pid 18379) Use of int in max_burst socket option deprecated.
[ 1071.834339][T18379] Use struct sctp_assoc_value instead
[ 1071.842800][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1071.955302][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12345'.
[ 1071.955302][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12345'.
[ 1071.955332][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12345'.
[ 1071.964862][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12345'.
[ 1071.994777][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.015300][T18391] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[ 1072.025050][T18391] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1072.035342][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.045058][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1072.054149][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12351'.
[ 1072.155839][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.163859][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1072.273062][T18414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12355'.
[ 1072.273773][T18413] netlink: 84 bytes leftover after parsing attributes in process `syz.3.12356'.
[ 1072.295208][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.307213][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12355'.
[ 1072.308070][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12354'.
[ 1072.851969][T18445] syzkaller0: entered promiscuous mode
[ 1072.860870][T18445] syzkaller0: entered allmulticast mode
[ 1073.167081][T18454] bond4: entered promiscuous mode
[ 1073.172267][T18454] bond4: entered allmulticast mode
[ 1073.179164][T18454] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1073.192787][T18458] macvlan4: entered promiscuous mode
[ 1073.222377][T18458] macvlan4: entered allmulticast mode
[ 1073.243995][T18458] 8021q: adding VLAN 0 to HW filter on device macvlan4
[ 1073.546417][T18485] syzkaller0: entered promiscuous mode
[ 1073.551941][T18485] syzkaller0: entered allmulticast mode
[ 1073.569913][T18489] netlink: 'syz.1.12380': attribute type 1 has an invalid length.
[ 1073.633894][T18489] bond1: (slave gretap1): making interface the new active one
[ 1073.653849][T18489] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1073.717247][T18489] gretap2: entered promiscuous mode
[ 1073.740820][T18489] bond1: (slave gretap2): Enslaving as an active interface with an up link
[ 1073.783376][T18498] macvlan2: entered promiscuous mode
[ 1073.791545][T18498] macvlan2: entered allmulticast mode
[ 1073.798741][T18498] bond1: entered promiscuous mode
[ 1073.803894][T18498] gretap1: entered promiscuous mode
[ 1073.810141][T18498] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1073.818988][T18498] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1073.836418][T18498] bond1: left promiscuous mode
[ 1073.845387][T18498] gretap1: left promiscuous mode
[ 1075.039977][T18603] tipc: Invalid UDP bearer configuration
[ 1075.040028][T18603] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1075.221496][T18610] SET target dimension over the limit!
[ 1075.283816][T18614] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1075.324418][T18616] netlink: 'syz.4.12416': attribute type 1 has an invalid length.
[ 1075.576083][T18632] syzkaller0: entered promiscuous mode
[ 1075.594209][T18632] syzkaller0: entered allmulticast mode
[ 1075.700220][T18638] netlink: 'syz.3.12423': attribute type 9 has an invalid length.
[ 1075.881016][T18648] netlink: 'syz.1.12426': attribute type 26 has an invalid length.
[ 1075.903103][T18652] netlink: 'syz.0.12428': attribute type 1 has an invalid length.
[ 1075.927362][T18652] bond2: entered promiscuous mode
[ 1075.932690][T18652] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1075.976199][T18652] bond2: (slave bridge2): making interface the new active one
[ 1075.983746][T18652] bridge2: entered promiscuous mode
[ 1075.991864][T18652] bond2: (slave bridge2): Enslaving as an active interface with an up link
[ 1076.255098][T18667] syzkaller0: entered promiscuous mode
[ 1076.260890][T18667] syzkaller0: entered allmulticast mode
[ 1076.497025][T18680] netlink: 'syz.0.12437': attribute type 26 has an invalid length.
[ 1076.722463][T18702] __nla_validate_parse: 21 callbacks suppressed
[ 1076.722483][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12442'.
[ 1076.797370][   T12] net_ratelimit: 120 callbacks suppressed
[ 1076.797391][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1076.819956][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1076.934494][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1076.945477][T18709] syzkaller0: entered promiscuous mode
[ 1076.950992][T18709] syzkaller0: entered allmulticast mode
[ 1076.956897][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1076.981800][T18706] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12443'.
[ 1076.998150][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.054141][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.062352][T18706] gretap0: entered promiscuous mode
[ 1077.096706][T18706] gretap0: left promiscuous mode
[ 1077.101422][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.145855][T18706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1077.145893][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.200100][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1077.387950][T18739] block nbd4: server does not support multiple connections per device.
[ 1077.396752][T18739] block nbd4: shutting down sockets
[ 1077.496497][T18751] Cannot find set identified by id 0 to match
[ 1079.085713][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12461'.
[ 1079.111611][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12461'.
[ 1079.249099][T18781] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1079.492268][T18797] lo speed is unknown, defaulting to 1000
[ 1079.500713][T18797] lo speed is unknown, defaulting to 1000
[ 1079.507757][T18797] lo speed is unknown, defaulting to 1000
[ 1079.530280][T18797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1079.602415][T18797] lo speed is unknown, defaulting to 1000
[ 1079.610435][T18797] lo speed is unknown, defaulting to 1000
[ 1079.618101][T18797] lo speed is unknown, defaulting to 1000
[ 1079.626517][T18797] lo speed is unknown, defaulting to 1000
[ 1079.641302][T18797] lo speed is unknown, defaulting to 1000
[ 1079.648908][T18797] lo speed is unknown, defaulting to 1000
[ 1079.657738][T18797] lo speed is unknown, defaulting to 1000
[ 1079.667764][T18797] lo speed is unknown, defaulting to 1000
[ 1080.047318][T18835] netlink: 272 bytes leftover after parsing attributes in process `syz.1.12484'.
[ 1080.090690][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12485'.
[ 1080.394286][T18858] netlink: 'syz.0.12491': attribute type 10 has an invalid length.
[ 1080.402389][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12491'.
[ 1080.412956][T18858] dummy0: entered promiscuous mode
[ 1080.421674][T18858] bridge0: port 3(dummy0) entered blocking state
[ 1080.433775][T18858] bridge0: port 3(dummy0) entered disabled state
[ 1080.450821][T18858] dummy0: entered allmulticast mode
[ 1080.506837][T18858] bridge0: port 3(dummy0) entered blocking state
[ 1080.513331][T18858] bridge0: port 3(dummy0) entered forwarding state
[ 1080.530211][T18860] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.672969][T18873] mac80211_hwsim hwsim126 wlan0: entered promiscuous mode
[ 1080.687608][T18885] netlink: 'syz.3.12497': attribute type 5 has an invalid length.
[ 1080.928037][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12502'.
[ 1081.087497][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12504'.
[ 1081.289110][T18932] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12512'.
[ 1081.644378][T18953] netlink: 'syz.4.12518': attribute type 11 has an invalid length.
[ 1081.824174][   T36] net_ratelimit: 144 callbacks suppressed
[ 1081.824195][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1081.852255][   T36] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1081.974310][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1081.983009][   T36] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1082.105696][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.144991][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.181297][T18985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1082.198244][   T49] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.210529][ T1793] lo speed is unknown, defaulting to 1000
[ 1082.226484][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.251436][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1082.375023][T16203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1082.386068][T16203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1082.410432][T16203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1082.418640][T16203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1082.428697][T16203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1082.552950][T18990] erspan0 speed is unknown, defaulting to 1000
[ 1082.579836][T18990] lo speed is unknown, defaulting to 1000
[ 1082.687651][T19008] netlink: 'syz.0.12537': attribute type 1 has an invalid length.
[ 1082.746917][T19008] __nla_validate_parse: 3 callbacks suppressed
[ 1082.746934][T19008] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12537'.
[ 1082.808944][T19015] x_tables: duplicate underflow at hook 1
[ 1082.880143][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12540'.
[ 1082.963476][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12542'.
[ 1083.009655][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12542'.
[ 1083.088577][T18990] chnl_net:caif_netlink_parms(): no params data found
[ 1083.202056][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12546'.
[ 1083.255370][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12545'.
[ 1083.263471][T19038] ip6gre1: entered promiscuous mode
[ 1083.271991][T19038] ip6gre1: entered allmulticast mode
[ 1083.274988][T19041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12547'.
[ 1083.448467][T18990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1083.450752][T19053] sctp: [Deprecated]: syz.1.12548 (pid 19053) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1083.450752][T19053] Use struct sctp_sack_info instead
[ 1083.455851][T18990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.480279][T18990] bridge_slave_0: entered allmulticast mode
[ 1083.488077][T18990] bridge_slave_0: entered promiscuous mode
[ 1083.499119][T18990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1083.506666][T18990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.514476][T18990] bridge_slave_1: entered allmulticast mode
[ 1083.522341][T18990] bridge_slave_1: entered promiscuous mode
[ 1083.562661][T18990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.586197][T18990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1083.654396][T18990] team0: Port device team_slave_0 added
[ 1083.670684][T18990] team0: Port device team_slave_1 added
[ 1083.749902][T19059] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12551'.
[ 1083.752089][T18990] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1083.765377][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12551'.
[ 1083.773295][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.784646][T19059] netlink: 31 bytes leftover after parsing attributes in process `syz.1.12551'.
[ 1083.801810][T18990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1083.822692][T19036] x_tables: unsorted entry at hook 1
[ 1083.829450][T19043] x_tables: unsorted entry at hook 1
[ 1083.836598][T19059] netlink: 'syz.1.12551': attribute type 3 has an invalid length.
[ 1083.847559][T19059] netlink: 'syz.1.12551': attribute type 2 has an invalid length.
[ 1083.866302][T18990] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1083.873520][T18990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1083.906519][T18990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1084.024584][T18990] hsr_slave_0: entered promiscuous mode
[ 1084.034657][T18990] hsr_slave_1: entered promiscuous mode
[ 1084.092884][T19072] bond2: Unable to set down delay as MII monitoring is disabled
[ 1084.102975][T19072] bond2 (unregistering): Released all slaves
[ 1084.136695][T19069] 
@0Ù: renamed from bond_slave_1 (while UP)
[ 1084.179249][T19071] veth3: entered promiscuous mode
[ 1084.397496][T19083] netlink: 'syz.0.12559': attribute type 3 has an invalid length.
[ 1084.434742][T19083] netlink: 'syz.0.12559': attribute type 3 has an invalid length.
[ 1084.484228][T16203] Bluetooth: hci1: command tx timeout
[ 1084.683107][T18990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1084.702914][T18990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.715501][T18990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1084.836821][T19118] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[ 1084.842032][T18990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1084.860855][T18990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1084.871759][T18990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1084.914566][ T3529] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1084.933702][ T3529] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1084.953148][ T3529] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1084.962274][T19112] bridge_slave_1: left allmulticast mode
[ 1084.969825][T19112] bridge_slave_1: left promiscuous mode
[ 1084.976069][T19112] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1084.994318][T19112] bridge_slave_0: left allmulticast mode
[ 1085.000125][T19112] bridge_slave_0: left promiscuous mode
[ 1085.010055][T19112] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.351568][T18990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1085.372089][T18990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.401673][T18990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1085.443512][ T3529] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1085.930845][T18990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1085.956388][T18990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1085.976078][T18990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1086.142660][T19141] bond1: Invalid ad_actor_system MAC address.
[ 1086.150230][T19141] bond1: option ad_actor_system: invalid value (1)
[ 1086.199727][T19141] bond1 (unregistering): Released all slaves
[ 1086.285075][T19145] syzkaller0: entered promiscuous mode
[ 1086.305561][T19145] syzkaller0: entered allmulticast mode
[ 1086.565998][T16203] Bluetooth: hci1: command tx timeout
[ 1086.592735][T18990] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1086.685409][T18990] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1086.799892][T18990] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1086.823190][T18990] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1086.851282][   T36] net_ratelimit: 159 callbacks suppressed
[ 1086.851303][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1086.884274][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1086.907961][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1086.934291][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1086.955382][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.017813][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.057869][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.084521][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1087.157272][T19175] ip6gre1: entered allmulticast mode
[ 1087.217800][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.255627][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.456893][T18990] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1087.491636][T18990] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.510039][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1087.517239][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1087.558021][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1087.565248][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1087.932076][T18990] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1087.953359][ T1091] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1087.962326][ T1091] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1087.974504][ T1091] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1087.983356][ T1091] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1087.993086][T19213] __nla_validate_parse: 8 callbacks suppressed
[ 1087.993104][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12591'.
[ 1087.993722][T19212] syzkaller0: entered promiscuous mode
[ 1088.015296][T19212] syzkaller0: entered allmulticast mode
[ 1088.046596][T19212] bond3: option lp_interval: invalid value (0)
[ 1088.052799][T19212] bond3: option lp_interval: allowed values 1 - 2147483647
[ 1088.061608][T19212] bond3 (unregistering): Released all slaves
[ 1088.141697][T18990] veth0_vlan: entered promiscuous mode
[ 1088.152723][T18990] veth1_vlan: entered promiscuous mode
[ 1088.197802][T18990] veth0_macvtap: entered promiscuous mode
[ 1088.210369][T18990] veth1_macvtap: entered promiscuous mode
[ 1088.239789][T18990] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1088.262288][T18990] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.291120][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.318765][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.330285][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.365284][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.414307][T19222] netlink: 'syz.4.12594': attribute type 1 has an invalid length.
[ 1088.441855][T19222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12594'.
[ 1088.521564][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.550507][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.610799][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.622060][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.644536][T16203] Bluetooth: hci1: command tx timeout
[ 1089.275755][T19281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12611'.
[ 1089.737821][T19308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12619'.
[ 1089.749035][T19308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12619'.
[ 1089.821791][T19313] netlink: 'syz.2.12620': attribute type 14 has an invalid length.
[ 1089.832476][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12620'.
[ 1089.859015][T19313] netlink: 'syz.2.12620': attribute type 14 has an invalid length.
[ 1089.859862][   T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1089.873820][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12620'.
[ 1089.889965][   T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1089.899900][T19317] netlink: 'syz.2.12620': attribute type 21 has an invalid length.
[ 1089.917503][   T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1089.930709][T19321] netlink: 'syz.2.12620': attribute type 21 has an invalid length.
[ 1089.937449][   T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1089.947963][T19321] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12620'.
[ 1089.954307][T19317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12620'.
[ 1089.978431][T19320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12623'.
[ 1090.000258][T19321] netlink: 'syz.2.12620': attribute type 4 has an invalid length.
[ 1090.008563][T19321] netlink: 'syz.2.12620': attribute type 5 has an invalid length.
[ 1090.009073][T19323] "syz.0.12625" (19323) uses obsolete ecb(arc4) skcipher
[ 1090.027658][T19317] netlink: 'syz.2.12620': attribute type 4 has an invalid length.
[ 1090.040315][T19317] netlink: 'syz.2.12620': attribute type 5 has an invalid length.
[ 1090.156272][T19331] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1090.295184][T19337] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[ 1090.321425][   T30] audit: type=1800 audit(1771259538.827:12): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12632" name="memory.events" dev="tmpfs" ino=638 res=0 errno=0
[ 1090.350025][T19337] bond1 (unregistering): Released all slaves
[ 1090.378328][   T30] audit: type=1804 audit(1771259538.857:13): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.12632" name="/newroot/123/memory.events" dev="tmpfs" ino=638 res=1 errno=0
[ 1090.700798][T19357] bridge_slave_0: left allmulticast mode
[ 1090.727724][T16203] Bluetooth: hci1: command tx timeout
[ 1090.750107][T19357] bridge_slave_0: left promiscuous mode
[ 1090.764394][T19357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.801627][T19357] bridge_slave_1: left allmulticast mode
[ 1090.817937][T19357] bridge_slave_1: left promiscuous mode
[ 1090.826996][T19357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.843107][T19357] bond0: (slave bond_slave_0): Releasing backup interface
[ 1090.861867][T19357] bond0: (slave bond_slave_1): Releasing backup interface
[ 1090.883396][T19357] team0: Port device team_slave_0 removed
[ 1090.904547][T19357] team0: Port device team_slave_1 removed
[ 1090.912437][T19357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1090.920530][T19357] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1091.000103][T19375] vcan2: entered promiscuous mode
[ 1091.024647][T19375] vcan2: entered allmulticast mode
[ 1091.358406][T19413] netlink: 'syz.2.12653': attribute type 6 has an invalid length.
[ 1091.410610][T19416] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 1091.425319][T19416] bond1 (unregistering): Released all slaves
[ 1091.924742][ T1156] net_ratelimit: 126 callbacks suppressed
[ 1091.924762][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1091.965957][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1091.985112][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.095066][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.134265][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.165699][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.183981][   T36] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1092.304414][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.330687][T19483] bond0: option ad_select: unable to set because the bond device is up
[ 1092.343900][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.374653][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.516206][T19490] geneve2: entered promiscuous mode
[ 1092.521618][T19490] geneve2: entered allmulticast mode
[ 1092.540779][T19496] syzkaller0: entered promiscuous mode
[ 1092.548214][T19496] syzkaller0: entered allmulticast mode
[ 1092.686444][T19512] bond1 (unregistering): Released all slaves
[ 1092.804971][T16203] Bluetooth: hci1: command tx timeout
[ 1092.826099][T19522] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1093.012923][T19532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1093.041207][T19532] >A: renamed from syzkaller0
[ 1093.059322][T19532] tipc: Disabling bearer <eth:syzkaller0>
[ 1093.117208][T19545] __nla_validate_parse: 30 callbacks suppressed
[ 1093.117227][T19545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12692'.
[ 1093.153259][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12691'.
[ 1093.231344][T19558] delete_channel: no stack
[ 1093.239016][T19556] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.12694'.
[ 1093.336121][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12696'.
[ 1093.638100][T19572] 8021q: VLANs not supported on gre0
[ 1093.654093][T19580] 8021q: VLANs not supported on gre0
[ 1093.686673][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12702'.
[ 1093.707249][T19586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12704'.
[ 1093.715814][T19589] bond0: entered promiscuous mode
[ 1093.721592][T19589] bond_slave_0: entered promiscuous mode
[ 1093.728047][T19589] bond_slave_1: entered promiscuous mode
[ 1093.772156][T19589] bond0: left promiscuous mode
[ 1093.779762][T19589] bond_slave_0: left promiscuous mode
[ 1093.786088][T19589] bond_slave_1: left promiscuous mode
[ 1094.326914][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12710'.
[ 1094.538467][T19618] validate_nla: 2 callbacks suppressed
[ 1094.538486][T19618] netlink: 'syz.1.12714': attribute type 16 has an invalid length.
[ 1094.544302][T19573] lec:lec_start_xmit: lec0:No lecd attached
[ 1094.559356][T19618] netlink: 'syz.1.12714': attribute type 17 has an invalid length.
[ 1094.697539][T19630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12717'.
[ 1095.400226][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12722'.
[ 1095.573347][T19656] netlink: 'syz.4.12725': attribute type 21 has an invalid length.
[ 1095.582635][T19656] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12725'.
[ 1095.627169][T19660] netlink: 'syz.3.12727': attribute type 1 has an invalid length.
[ 1095.636359][T19663] netlink: 'syz.3.12727': attribute type 1 has an invalid length.
[ 1095.685422][T19658] syzkaller0: entered promiscuous mode
[ 1095.691117][T19658] syzkaller0: entered allmulticast mode
[ 1095.794881][T19672] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1096.939007][   T12] net_ratelimit: 137 callbacks suppressed
[ 1096.939028][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1096.981014][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.005230][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.048546][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.076170][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.119865][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.144328][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.164297][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.195083][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.214460][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1098.139477][T19721] __nla_validate_parse: 3 callbacks suppressed
[ 1098.139500][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12742'.
[ 1098.174569][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12742'.
[ 1098.305679][T19731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12747'.
[ 1098.440580][T19746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12751'.
[ 1098.637709][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12752'.
[ 1098.786445][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12757'.
[ 1098.814906][T19772] netlink: 2045 bytes leftover after parsing attributes in process `syz.1.12757'.
[ 1099.058817][T19792] netlink: 'syz.3.12762': attribute type 4 has an invalid length.
[ 1099.067350][T19782] netlink: 'syz.4.12759': attribute type 16 has an invalid length.
[ 1099.067374][T19782] netlink: 'syz.4.12759': attribute type 17 has an invalid length.
[ 1099.093882][T19792] netlink: 17 bytes leftover after parsing attributes in process `syz.3.12762'.
[ 1099.200851][T19804] netlink: 'syz.0.12763': attribute type 1 has an invalid length.
[ 1099.279334][T19782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1099.291637][T19782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1099.315952][T19811] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12763'.
[ 1099.423499][ T1793] lo speed is unknown, defaulting to 1000
[ 1099.431050][ T1793] syz0: Port: 1 Link DOWN
[ 1099.471160][T19804] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1099.543766][T19811] IPv6: sit2: Disabled Multicast RS
[ 1099.605157][T19811] sit2: entered allmulticast mode
[ 1099.637034][   T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1099.678471][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.730287][T19830] bridge0: port 3(ipvlan2) entered blocking state
[ 1099.745356][T19830] bridge0: port 3(ipvlan2) entered disabled state
[ 1099.764396][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms
[ 1099.770519][T19830] ipvlan2: entered allmulticast mode
[ 1099.772493][    C0] lec:lec_tx_timeout: lec0
[ 1099.777875][T19830] bridge0: entered allmulticast mode
[ 1099.823607][T19830] ipvlan2: left allmulticast mode
[ 1099.829217][T19830] bridge0: left allmulticast mode
[ 1099.859913][T19835] netlink: 'syz.3.12770': attribute type 83 has an invalid length.
[ 1099.870967][   T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1099.889107][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12769'.
[ 1099.901928][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.920591][   T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1099.938545][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.959018][   T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1099.970567][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.125544][T19850] netlink: 'syz.2.12772': attribute type 5 has an invalid length.
[ 1100.207868][T19850] geneve2: entered promiscuous mode
[ 1100.229740][T19850] geneve2: entered allmulticast mode
[ 1100.250420][   T36] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[ 1100.262189][   T36] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[ 1100.297787][   T36] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[ 1100.318426][   T36] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[ 1100.687565][T19883] netlink: 'syz.2.12782': attribute type 7 has an invalid length.
[ 1100.821746][T19897] x_tables: duplicate underflow at hook 2
[ 1101.100775][T19913] erspan0 speed is unknown, defaulting to 1000
[ 1101.173193][T19913] lo speed is unknown, defaulting to 1000
[ 1101.250399][T19930] syzkaller1: entered promiscuous mode
[ 1101.257779][T19930] syzkaller1: entered allmulticast mode
[ 1101.415609][T19942] netlink: 'syz.0.12800': attribute type 15 has an invalid length.
[ 1101.680357][ T1156] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[ 1101.702525][T19942] netlink: 'syz.0.12800': attribute type 15 has an invalid length.
[ 1101.756348][ T1156] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[ 1101.784710][ T1156] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[ 1101.825643][ T1156] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[ 1101.888623][T19970] netlink: 'syz.2.12806': attribute type 1 has an invalid length.
[ 1101.912435][T19971] netlink: 'syz.2.12806': attribute type 1 has an invalid length.
[ 1101.944963][ T3529] net_ratelimit: 162 callbacks suppressed
[ 1101.944983][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1101.963853][T19971] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[ 1101.975315][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1101.978149][T19971] bond1 (unregistering): Released all slaves
[ 1101.996281][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1102.010054][T19970] netlink: 'syz.2.12806': attribute type 1 has an invalid length.
[ 1102.024204][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1102.041953][ T3529] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1102.173080][T19977] netlink: 'syz.1.12807': attribute type 1 has an invalid length.
[ 1102.185252][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1102.213735][T19977] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1102.221503][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1102.229646][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1102.344300][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1102.405160][   T58] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1102.470244][T19998] bond1: entered promiscuous mode
[ 1102.476181][T19998] bond1: entered allmulticast mode
[ 1102.481703][T19998] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1102.551958][T19998] syzkaller0: entered promiscuous mode
[ 1102.564806][T20009] netlink: 'syz.1.12814': attribute type 8 has an invalid length.
[ 1102.567590][T19998] syzkaller0: entered allmulticast mode
[ 1103.848707][ T5839] Bluetooth: hci0: command tx timeout
[ 1104.795162][T20061] __nla_validate_parse: 17 callbacks suppressed
[ 1104.795181][T20061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12826'.
[ 1104.878791][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12830'.
[ 1105.003202][T20076] tipc: Started in network mode
[ 1105.010308][T20076] tipc: Node identity aaaaaaaaaa17, cluster identity 4711
[ 1105.034482][T20076] tipc: Enabled bearer <eth:bond_slave_1>, priority 6
[ 1105.056146][T20075] syzkaller0: entered promiscuous mode
[ 1105.074113][T20075] syzkaller0: entered allmulticast mode
[ 1105.375435][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12839'.
[ 1105.648350][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12846'.
[ 1105.662944][T20110] validate_nla: 1 callbacks suppressed
[ 1105.662965][T20110] netlink: 'syz.4.12843': attribute type 4 has an invalid length.
[ 1105.683636][T20110] netlink: 'syz.4.12843': attribute type 4 has an invalid length.
[ 1105.698589][ T1793] lo speed is unknown, defaulting to 1000
[ 1105.706300][ T1793] syz0: Port: 1 Link ACTIVE
[ 1105.755302][T20127] netlink: 'syz.3.12848': attribute type 10 has an invalid length.
[ 1105.763772][T20127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.781433][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12849'.
[ 1105.803460][T20127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.810728][T20127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1105.822678][T20127] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1105.893192][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12848'.
[ 1106.157429][ T5947] tipc: Node number set to 12429994
[ 1106.212961][T20159] netlink: 'syz.4.12857': attribute type 24 has an invalid length.
[ 1106.222347][T20159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12857'.
[ 1106.228547][T20162] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12859'.
[ 1106.330441][T20170] netlink: 'syz.1.12861': attribute type 15 has an invalid length.
[ 1106.453474][T20171] syzkaller0: entered promiscuous mode
[ 1106.459883][T20171] syzkaller0: entered allmulticast mode
[ 1106.478634][T20183] syzkaller0: entered promiscuous mode
[ 1106.498195][T20183] syzkaller0: entered allmulticast mode
[ 1106.606188][T20189] netlink: 'syz.3.12866': attribute type 1 has an invalid length.
[ 1106.615672][T20189] netlink: 236 bytes leftover after parsing attributes in process `syz.3.12866'.
[ 1106.956831][   T12] net_ratelimit: 166 callbacks suppressed
[ 1106.956860][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1106.989102][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.014207][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.034504][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.054227][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.074293][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.107085][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.131525][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1107.140408][ T3529] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.167157][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.828329][T20218] netlink: 'syz.1.12873': attribute type 7 has an invalid length.
[ 1109.035591][T20237] netlink: 'syz.1.12880': attribute type 16 has an invalid length.
[ 1109.055064][T20237] netlink: 'syz.1.12880': attribute type 17 has an invalid length.
[ 1110.029210][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1110.042795][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.052334][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1110.064494][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.085944][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1110.104696][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.144929][T20258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.154937][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1110.163827][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.283515][T20294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.12890'.
[ 1110.408909][T20300] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[ 1110.455911][T20307] netlink: 'syz.0.12896': attribute type 1 has an invalid length.
[ 1110.476838][T20304] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[ 1110.479402][T20307] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.12896'.
[ 1110.526209][T20308] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.12896'.
[ 1110.575705][T20313] ip6gre2: entered allmulticast mode
[ 1110.666727][T20317] validate_nla: 3 callbacks suppressed
[ 1110.666746][T20317] netlink: 'syz.3.12898': attribute type 11 has an invalid length.
[ 1110.688513][T20319] netlink: 'syz.1.12899': attribute type 3 has an invalid length.
[ 1110.702516][T20317] wireguard0: entered promiscuous mode
[ 1110.709673][T20317] wireguard0: entered allmulticast mode
[ 1110.718220][T20317] team0: Device wireguard0 is of different type
[ 1110.762996][T20323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12901'.
[ 1110.813382][T20327] syzkaller0: entered promiscuous mode
[ 1110.813889][T20323] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[ 1110.819709][T20327] syzkaller0: entered allmulticast mode
[ 1110.903390][T20332] netlink: 'syz.2.12903': attribute type 1 has an invalid length.
[ 1110.915533][T20332] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1111.120531][T20345] netlink: 'syz.2.12908': attribute type 1 has an invalid length.
[ 1111.251890][T20356] bond2: (slave ip6gretap1): making interface the new active one
[ 1111.266477][T20356] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1111.281857][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12912'.
[ 1111.286293][T20356] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1111.324964][T20356] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1111.684714][T20392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12921'.
[ 1111.751353][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12922'.
[ 1111.770281][T20395] netlink: 'syz.1.12923': attribute type 10 has an invalid length.
[ 1111.781577][T20396] netlink: 'syz.3.12922': attribute type 5 has an invalid length.
[ 1111.851570][T20398] syzkaller1: entered promiscuous mode
[ 1111.860523][T20398] syzkaller1: entered allmulticast mode
[ 1112.030528][T20410] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003
[ 1112.044174][   T58] net_ratelimit: 184 callbacks suppressed
[ 1112.044191][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1112.069673][   T58] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1112.206014][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1112.219428][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1112.235108][T20420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12932'.
[ 1112.269548][T20420] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1112.326832][T20272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1112.369872][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1112.382724][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1112.423000][T20428] veth1_macvtap: left promiscuous mode
[ 1112.446868][T20428] macsec0: entered promiscuous mode
[ 1112.453682][T20437] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12937'.
[ 1112.482461][T20428] macsec0: entered allmulticast mode
[ 1112.511232][T20422] veth1_macvtap: entered promiscuous mode
[ 1112.517202][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1112.536218][T20422] veth1_macvtap: entered allmulticast mode
[ 1112.544683][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1112.551569][T20422] macsec0: left promiscuous mode
[ 1112.571665][T20422] macsec0: left allmulticast mode
[ 1112.577493][T20422] veth1_macvtap: left allmulticast mode
[ 1112.737599][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12941'.
[ 1112.793278][T20452] netlink: 'syz.0.12942': attribute type 1 has an invalid length.
[ 1112.874565][T20452] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1112.934726][T20465] bond4: (slave geneve2): making interface the new active one
[ 1112.946768][T20465] bond4: (slave geneve2): Enslaving as an active interface with an up link
[ 1112.958127][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1113.011755][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1113.050449][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1113.057100][T20475] netlink: 'syz.1.12947': attribute type 9 has an invalid length.
[ 1113.068896][T20475] netlink: 'syz.1.12947': attribute type 11 has an invalid length.
[ 1113.078186][T20475] netlink: 'syz.1.12947': attribute type 12 has an invalid length.
[ 1113.104204][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1113.758098][T20529] x_tables: unsorted entry at hook 3
[ 1113.936839][T20544] IPVS: Unknown mcast interface: vcan0
[ 1114.214017][T20561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1114.248036][T20561] bridge_slave_1: left allmulticast mode
[ 1114.265517][T20561] bridge_slave_1: left promiscuous mode
[ 1114.284498][T20561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1114.306451][T20561] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1114.350217][T20568] syzkaller0: entered promiscuous mode
[ 1114.355833][T20568] syzkaller0: entered allmulticast mode
[ 1115.023275][ T5947] IPVS: starting estimator thread 0...
[ 1115.106727][T20632] bond5: Unable to set peer notification delay as MII monitoring is disabled
[ 1115.126187][T20628] IPVS: using max 39 ests per chain, 93600 per kthread
[ 1115.135618][T20632] bond5 (unregistering): Released all slaves
[ 1115.517558][T20667] __nla_validate_parse: 22 callbacks suppressed
[ 1115.517577][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13009'.
[ 1115.538232][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13010'.
[ 1115.549399][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13009'.
[ 1115.564732][T20670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13010'.
[ 1115.580606][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13010'.
[ 1115.602498][T20667] bond1: entered promiscuous mode
[ 1115.609818][T20667] bond1: entered allmulticast mode
[ 1115.615698][T20667] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1115.632041][T20670] geneve3: entered promiscuous mode
[ 1115.644741][T20670] geneve3: entered allmulticast mode
[ 1115.670306][T20674] macvlan2: entered promiscuous mode
[ 1115.675873][T20674] macvlan2: entered allmulticast mode
[ 1115.683079][T20674] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1115.726694][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.747517][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.773376][ T1297] lec:lec_start_xmit: lec0:No lecd attached
[ 1115.800465][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.832364][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.847788][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13016'.
[ 1115.873258][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13016'.
[ 1116.202679][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13025'.
[ 1116.213343][T20713] bond2 (unregistering): Released all slaves
[ 1116.255705][T20710] gtp0: entered promiscuous mode
[ 1116.261022][T20710] gtp0: entered allmulticast mode
[ 1116.407651][T20731] validate_nla: 8 callbacks suppressed
[ 1116.407670][T20731] netlink: 'syz.2.13026': attribute type 1 has an invalid length.
[ 1116.444201][T20731] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13026'.
[ 1116.453448][T20731] netlink: 658 bytes leftover after parsing attributes in process `syz.2.13026'.
[ 1116.466413][T20738] netlink: 'syz.4.13030': attribute type 21 has an invalid length.
[ 1116.466548][T20739] veth0: entered promiscuous mode
[ 1116.494822][T20738] netlink: 'syz.4.13030': attribute type 21 has an invalid length.
[ 1116.511053][T20739] xt_hashlimit: size too large, truncated to 1048576
[ 1116.792606][T20759] netlink: 'syz.4.13035': attribute type 1 has an invalid length.
[ 1117.004505][T20736] veth0: left promiscuous mode
[ 1117.084535][   T12] net_ratelimit: 123 callbacks suppressed
[ 1117.084557][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.134606][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.164270][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.184242][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.205358][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.253312][T20773] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1117.260715][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.300232][T20774] vlan2: entered promiscuous mode
[ 1117.304464][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.309663][T20774] geneve1: entered promiscuous mode
[ 1117.318698][T20774] vlan2: entered allmulticast mode
[ 1117.323949][T20774] geneve1: entered allmulticast mode
[ 1117.345868][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.388151][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.434814][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.531695][T20794] bridge_slave_0: left allmulticast mode
[ 1117.537780][T20794] bridge_slave_0: left promiscuous mode
[ 1117.545316][T20794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.567190][T20794] bond0: (slave bridge_slave_1): Releasing backup interface
[ 1117.633131][T20794] bond0: (slave bond_slave_0): Releasing backup interface
[ 1117.658615][T20794] bond0: (slave bond_slave_1): Releasing backup interface
[ 1117.668792][T20794] tipc: Resetting bearer <eth:bond_slave_1>
[ 1117.679173][T20794] tipc: Resetting bearer <eth:bond_slave_1>
[ 1117.713997][T20794] team0: Port device team_slave_0 removed
[ 1117.741772][T20794] team0: Port device team_slave_1 removed
[ 1117.758054][T20794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1117.766372][T20794] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1117.776154][T20794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1117.783577][T20794] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1117.819085][T20799] geneve4: entered promiscuous mode
[ 1117.825763][T20799] geneve4: entered allmulticast mode
[ 1118.619512][T20854] nbd: nbd3 already in use
[ 1118.864016][T20862] netlink: 'syz.3.13062': attribute type 11 has an invalid length.
[ 1120.533067][T20895] __nla_validate_parse: 13 callbacks suppressed
[ 1120.533086][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13072'.
[ 1120.599922][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13074'.
[ 1120.804077][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[ 1120.807867][T20915] erspan0 speed is unknown, defaulting to 1000
[ 1120.812148][    C0] lec:lec_tx_timeout: lec0
[ 1120.822147][T20915] lo speed is unknown, defaulting to 1000
[ 1120.910199][T20929] netlink: 'syz.3.13081': attribute type 3 has an invalid length.
[ 1120.980292][T20929] bond2: option min_links: invalid value (18446744073709551614)
[ 1121.030733][T20929] bond2: option min_links: allowed values 0 - 2147483647
[ 1121.041906][T20929] bond2 (unregistering): Released all slaves
[ 1121.161320][T20950] xt_hashlimit: size too large, truncated to 1048576
[ 1121.227099][T20942] veth0: entered promiscuous mode
[ 1121.251292][T20939] ¾x9ÿ: renamed from bridge_slave_0
[ 1121.497819][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13088'.
[ 1121.502683][T20960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13088'.
[ 1121.528007][T20960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13088'.
[ 1121.566400][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13088'.
[ 1121.577440][T20940] veth0: left promiscuous mode
[ 1121.612444][T20960] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13088'.
[ 1121.804929][T20973] netlink: 312 bytes leftover after parsing attributes in process `syz.4.13093'.
[ 1121.954527][T20984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1121.995299][T20984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1122.011661][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13098'.
[ 1122.040019][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13100'.
[ 1122.098465][T20985] bond5: entered promiscuous mode
[ 1122.104849][T20985] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1122.112300][T20997] veth0: entered promiscuous mode
[ 1122.144436][ T1156] net_ratelimit: 184 callbacks suppressed
[ 1122.144455][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.157570][T20997] xt_hashlimit: size too large, truncated to 1048576
[ 1122.168463][T20985] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1122.186174][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.208014][T20985] bond5: (slave sit2): The slave device specified does not support setting the MAC address
[ 1122.220772][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.225518][T20985] bond5: (slave sit2): Error -95 calling set_mac_address
[ 1122.260726][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.285274][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.366383][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.396422][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.424943][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.444194][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.464194][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1122.501664][T20999] syzkaller1: entered promiscuous mode
[ 1122.514373][T20999] syzkaller1: entered allmulticast mode
[ 1122.523115][T20996] veth0: left promiscuous mode
[ 1122.781429][T21016] syzkaller0: entered promiscuous mode
[ 1122.824154][T21016] syzkaller0: entered allmulticast mode
[ 1122.981844][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[ 1124.860593][T21063] batman_adv: batadv0: Adding interface: dummy0
[ 1124.867164][T21063] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1124.945240][T21063] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1125.018148][T21077] sctp: [Deprecated]: syz.2.13120 (pid 21077) Use of int in max_burst socket option deprecated.
[ 1125.018148][T21077] Use struct sctp_assoc_value instead
[ 1125.053698][T21073] bond0 (unregistering): Released all slaves
[ 1125.578122][T21125] xt_l2tp: invalid flags combination: 8
[ 1125.648021][T21127] __nla_validate_parse: 6 callbacks suppressed
[ 1125.648131][T21127] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13137'.
[ 1125.651132][T21130] siw: device registration error -23
[ 1125.678676][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13137'.
[ 1125.701276][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13137'.
[ 1125.771836][T21136] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13142'.
[ 1125.789913][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13141'.
[ 1125.828936][T21138] netlink: 'syz.3.13141': attribute type 2 has an invalid length.
[ 1125.908828][T21142] bond0: option fail_over_mac: invalid value (16)
[ 1125.938533][T21142] bond0 (unregistering): Released all slaves
[ 1126.320405][T13867] IPVS: starting estimator thread 0...
[ 1126.374889][T21185] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13156'.
[ 1126.429088][T21180] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1126.465783][T21189] netlink: 332 bytes leftover after parsing attributes in process `syz.4.13158'.
[ 1126.523947][T21196] netlink: 'syz.3.13159': attribute type 1 has an invalid length.
[ 1126.536572][T21195] netlink: 'syz.3.13159': attribute type 1 has an invalid length.
[ 1126.690215][T21204] IPv6: sit2: Disabled Multicast RS
[ 1126.697578][T21204] sit2: entered allmulticast mode
[ 1126.719965][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13163'.
[ 1126.773226][T21211] xt_TCPMSS: Only works on TCP SYN packets
[ 1126.783159][T21211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13164'.
[ 1127.014752][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13169'.
[ 1127.114425][T21231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1127.121735][T21231] IPv6: NLM_F_CREATE should be set when creating new route
[ 1127.154340][   T12] net_ratelimit: 159 callbacks suppressed
[ 1127.154361][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.174670][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1127.293102][T21246] mac80211_hwsim hwsim120 : renamed from wlan1
[ 1127.316361][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.344238][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.362280][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1127.486080][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.505788][T21256] netlink: 'syz.4.13182': attribute type 10 has an invalid length.
[ 1127.515185][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.527384][T21256] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1127.544606][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.564386][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1127.582723][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1127.582816][T21259] xt_TCPMSS: Only works on TCP SYN packets
[ 1127.619010][T21264] Cannot find del_set index 4 as target
[ 1127.633801][T21264] syzkaller0: entered promiscuous mode
[ 1127.662349][T21264] syzkaller0: entered allmulticast mode
[ 1127.693307][T21264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1127.718371][T21263] tipc: Resetting bearer <eth:syzkaller0>
[ 1127.775339][T21263] tipc: Disabling bearer <eth:syzkaller0>
[ 1127.850768][T21272] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1127.913167][T21272] syzkaller0: entered promiscuous mode
[ 1127.923342][T21272] syzkaller0: entered allmulticast mode
[ 1128.312048][T21315] netlink: 'syz.3.13200': attribute type 1 has an invalid length.
[ 1128.339062][T21316] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma?
[ 1128.429771][T21321] bond2: (slave gretap1): making interface the new active one
[ 1128.440981][T21321] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1128.630717][T21347] No such timeout policy "syz0"
[ 1128.839435][T21353] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1128.891307][T17154] lo speed is unknown, defaulting to 1000
[ 1128.893478][T21366] syzkaller1: entered promiscuous mode
[ 1128.898170][T17154] syz0: Port: 1 Link DOWN
[ 1128.920873][T21366] syzkaller1: entered allmulticast mode
[ 1128.939414][T21362] geneve2: entered promiscuous mode
[ 1128.944863][T21362] geneve2: entered allmulticast mode
[ 1128.952558][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.978383][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.050270][T21353] bond0 (unregistering): Released all slaves
[ 1129.088199][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.103144][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1129.288827][T21390] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[ 1129.323200][T21391] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[ 1129.347198][T21391] netlink: 'syz.1.13222': attribute type 62 has an invalid length.
[ 1129.349883][T21387] dummy0: left allmulticast mode
[ 1129.360353][T21387] bridge0: port 3(dummy0) entered disabled state
[ 1129.371131][T21387] bridge_slave_0: left allmulticast mode
[ 1129.377646][T21387] bridge_slave_0: left promiscuous mode
[ 1129.383631][T21387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1129.397718][T21387] bridge_slave_1: left allmulticast mode
[ 1129.403661][T21387] bridge_slave_1: left promiscuous mode
[ 1129.410008][T21387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1129.421241][T21387] bond0: (slave bond_slave_0): Releasing backup interface
[ 1129.431981][T21387] bond0: (slave bond_slave_1): Releasing backup interface
[ 1129.449890][T21387] team0: Port device team_slave_1 removed
[ 1129.458196][T21387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1129.465978][T21387] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1129.479797][T21387] bond1: (slave vcan1): Releasing backup interface
[ 1129.487855][T21387] vcan1: left promiscuous mode
[ 1129.497172][T21387] bond2: (slave bridge2): Releasing backup interface
[ 1129.503960][T21387] bridge2: left promiscuous mode
[ 1129.516982][T21387] bond4: (slave geneve2): Releasing active interface
[ 1129.533924][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1129.565058][ T1156] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1129.579281][ T1156] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1129.592234][ T1156] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1129.812319][T21415] nbd: must specify at least one socket
[ 1130.736833][T21484] __nla_validate_parse: 27 callbacks suppressed
[ 1130.736852][T21484] netlink: 212384 bytes leftover after parsing attributes in process `syz.4.13251'.
[ 1130.790187][T21488] netlink: 'syz.1.13252': attribute type 1 has an invalid length.
[ 1130.799519][T21488] netlink: 236 bytes leftover after parsing attributes in process `syz.1.13252'.
[ 1130.846915][T21490] netlink: 'syz.3.13253': attribute type 1 has an invalid length.
[ 1130.855168][T21490] netlink: 'syz.3.13253': attribute type 3 has an invalid length.
[ 1130.862996][T21490] netlink: 212 bytes leftover after parsing attributes in process `syz.3.13253'.
[ 1130.922409][T21490] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1131.454535][T21530] netlink: 300 bytes leftover after parsing attributes in process `syz.4.13264'.
[ 1131.560888][T21533] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[ 1131.722894][T21540] siw: device registration error -23
[ 1131.794321][T21553] sctp: [Deprecated]: syz.0.13271 (pid 21553) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1131.794321][T21553] Use struct sctp_sack_info instead
[ 1131.834679][T21553] sctp: [Deprecated]: syz.0.13271 (pid 21553) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1131.834679][T21553] Use struct sctp_sack_info instead
[ 1131.939250][T21553] can: request_module (can-proto-4) failed.
[ 1132.169265][T20272] net_ratelimit: 127 callbacks suppressed
[ 1132.169284][T20272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.199567][T21574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.208883][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.233870][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.274239][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1132.336460][T21580] syzkaller0: entered promiscuous mode
[ 1132.343400][T21580] syzkaller0: entered allmulticast mode
[ 1132.362368][T21577] erspan0 speed is unknown, defaulting to 1000
[ 1132.374315][T21585] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13279'.
[ 1132.384581][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.394972][T21577] lo speed is unknown, defaulting to 1000
[ 1132.415039][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.434334][   T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.464389][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.485853][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1132.669286][T21597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13282'.
[ 1132.781293][T21577] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13278'.
[ 1132.792105][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13278'.
[ 1133.395773][T21644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13297'.
[ 1133.407990][T21644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13297'.
[ 1134.261948][T21720] bond0: option fail_over_mac: invalid value (16)
[ 1134.277654][T21726] netlink: 'syz.1.13319': attribute type 1 has an invalid length.
[ 1134.304805][T21720] bond0 (unregistering): Released all slaves
[ 1134.626447][T21748] erspan0 speed is unknown, defaulting to 1000
[ 1134.651890][T21752] bond3 (unregistering): Released all slaves
[ 1134.669070][T21748] lo speed is unknown, defaulting to 1000
[ 1135.147753][T21777] : entered promiscuous mode
[ 1135.301529][T21788] syzkaller0: entered promiscuous mode
[ 1135.308101][T21788] syzkaller0: entered allmulticast mode
[ 1135.352236][T21790] veth3: entered allmulticast mode
[ 1135.376478][T21788] tipc: Started in network mode
[ 1135.383618][T21788] tipc: Node identity 92890abaef1d, cluster identity 4711
[ 1135.391776][T21788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1135.435946][T21788] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.460440][T21787] tipc: Resetting bearer <eth:syzkaller0>
[ 1135.520089][T21787] tipc: Disabling bearer <eth:syzkaller0>
[ 1135.750780][T21817] __nla_validate_parse: 12 callbacks suppressed
[ 1135.750798][T21817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13349'.
[ 1135.945291][T21831] netlink: 'syz.3.13353': attribute type 1 has an invalid length.
[ 1136.009359][T21828] udevd[21828]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1136.042564][T21837] batadv_slave_1: entered promiscuous mode
[ 1136.067118][T21837] batadv_slave_1: left promiscuous mode
[ 1136.077018][T21582] udevd[21582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1136.172451][T21850] veth0: entered promiscuous mode
[ 1136.195233][T21850] xt_hashlimit: size too large, truncated to 1048576
[ 1136.429702][T21856] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1136.686616][T21856] bond0 (unregistering): Released all slaves
[ 1136.799109][T21863] syzkaller1: entered promiscuous mode
[ 1136.844283][T21863] syzkaller1: entered allmulticast mode
[ 1136.851940][T21849] veth0: left promiscuous mode
[ 1136.968971][T21880] x_tables: duplicate underflow at hook 1
[ 1137.109981][T21884] netlink: 'syz.0.13367': attribute type 1 has an invalid length.
[ 1137.210590][   T12] net_ratelimit: 124 callbacks suppressed
[ 1137.210610][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1137.238716][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1137.244251][T21892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13370'.
[ 1137.355663][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1137.374130][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1137.505832][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1137.522554][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1137.548147][T21918] veth0: entered promiscuous mode
[ 1137.565781][T21918] xt_hashlimit: size too large, truncated to 1048576
[ 1137.654280][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1137.665887][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1137.814281][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1137.822461][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1137.915041][T21929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13379'.
[ 1137.930254][T21929] netlink: 'syz.1.13379': attribute type 30 has an invalid length.
[ 1137.958836][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13379'.
[ 1137.984981][T21914] veth0: left promiscuous mode
[ 1138.123296][T21934] netlink: 'syz.4.13382': attribute type 63 has an invalid length.
[ 1138.135683][T21934] netlink: 'syz.4.13382': attribute type 63 has an invalid length.
[ 1138.223650][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13384'.
[ 1138.424540][T21946] netlink: 'syz.4.13385': attribute type 10 has an invalid length.
[ 1138.750866][T21959] syzkaller0: entered promiscuous mode
[ 1138.757134][T21959] syzkaller0: entered allmulticast mode
[ 1140.403239][T21919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1140.578499][T21968] netlink: 'syz.4.13390': attribute type 8 has an invalid length.
[ 1140.648556][T21975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13391'.
[ 1140.683374][T21974] ip6_vti0: entered allmulticast mode
[ 1140.725388][T21977] veth0: entered promiscuous mode
[ 1140.768157][T21977] xt_hashlimit: size too large, truncated to 1048576
[ 1140.796207][T21974] syzkaller1: entered promiscuous mode
[ 1140.801726][T21974] syzkaller1: entered allmulticast mode
[ 1140.867626][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13392'.
[ 1140.985844][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13394'.
[ 1141.352358][T21976] veth0: left promiscuous mode
[ 1141.495631][T21999] syzkaller0: entered promiscuous mode
[ 1141.511390][T21999] syzkaller0: entered allmulticast mode
[ 1142.224345][   T58] net_ratelimit: 105 callbacks suppressed
[ 1142.224366][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.255594][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.296144][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.314774][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.335354][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.382357][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1142.444738][T22017] netlink: 'syz.0.13405': attribute type 1 has an invalid length.
[ 1142.495431][T22017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1142.516174][ T3000] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.523953][ T3000] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1142.581488][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13406'.
[ 1142.674328][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1142.755267][T22033] veth0: entered promiscuous mode
[ 1142.816083][T22033] xt_hashlimit: size too large, truncated to 1048576
[ 1142.890601][T22038] tipc: Enabled bearer <eth:vlan0>, priority 10
[ 1142.953358][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13411'.
[ 1143.141557][T22030] veth0: left promiscuous mode
[ 1143.358068][T22059] netlink: 'syz.0.13418': attribute type 1 has an invalid length.
[ 1143.444406][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[ 1143.450966][T22059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13418'.
[ 1143.589600][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13420'.
[ 1143.720737][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13422'.
[ 1143.728419][T22076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13423'.
[ 1143.748973][T22072] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13422'.
[ 1143.815728][T22069] 
[ 1143.818115][T22069] ======================================================
[ 1143.825135][T22069] WARNING: possible circular locking dependency detected
[ 1143.832171][T22069] syzkaller #0 Not tainted
[ 1143.836591][T22069] ------------------------------------------------------
[ 1143.843611][T22069] syz.3.13420/22069 is trying to acquire lock:
[ 1143.849772][T22069] ffff888026732bc0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[ 1143.859187][T22069] 
[ 1143.859187][T22069] but task is already holding lock:
[ 1143.866556][T22069] ffff888026732680 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1143.876760][T22069] 
[ 1143.876760][T22069] which lock already depends on the new lock.
[ 1143.876760][T22069] 
[ 1143.887158][T22069] 
[ 1143.887158][T22069] the existing dependency chain (in reverse order) is:
[ 1143.896159][T22069] 
[ 1143.896159][T22069] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[ 1143.904751][T22069]        blk_alloc_queue+0x546/0x680
[ 1143.910026][T22069]        __blk_mq_alloc_disk+0x197/0x390
[ 1143.915641][T22069]        nbd_dev_add+0x499/0xb50
[ 1143.920558][T22069]        nbd_init+0x168/0x1f0
[ 1143.925222][T22069]        do_one_initcall+0x250/0x840
[ 1143.930494][T22069]        do_initcall_level+0x104/0x190
[ 1143.935940][T22069]        do_initcalls+0x59/0xa0
[ 1143.940775][T22069]        kernel_init_freeable+0x2a6/0x3d0
[ 1143.946477][T22069]        kernel_init+0x1d/0x1d0
[ 1143.951309][T22069]        ret_from_fork+0x51e/0xb90
[ 1143.956403][T22069]        ret_from_fork_asm+0x1a/0x30
[ 1143.961675][T22069] 
[ 1143.961675][T22069] -> #5 (fs_reclaim){+.+.}-{0:0}:
[ 1143.968866][T22069]        fs_reclaim_acquire+0x71/0x100
[ 1143.974311][T22069]        kmem_cache_alloc_node_noprof+0x4a/0x690
[ 1143.980620][T22069]        __alloc_skb+0x1d0/0x7d0
[ 1143.985543][T22069]        __ip6_append_data+0x2a44/0x3c50
[ 1143.991164][T22069]        ip6_append_data+0x10f/0x280
[ 1143.996432][T22069]        rawv6_sendmsg+0x12d3/0x18e0
[ 1144.001703][T22069]        ____sys_sendmsg+0x894/0xad0
[ 1144.006977][T22069]        ___sys_sendmsg+0x2a5/0x360
[ 1144.012164][T22069]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1144.017612][T22069]        do_syscall_64+0x14d/0xf80
[ 1144.022710][T22069]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.029108][T22069] 
[ 1144.029108][T22069] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1144.036823][T22069]        lock_sock_nested+0x48/0x100
[ 1144.042092][T22069]        inet_shutdown+0x6a/0x390
[ 1144.047100][T22069]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1144.052720][T22069]        recv_work+0x1bf4/0x1d00
[ 1144.057644][T22069]        process_scheduled_works+0xaec/0x17a0
[ 1144.063696][T22069]        worker_thread+0xa50/0xfc0
[ 1144.068797][T22069]        kthread+0x388/0x470
[ 1144.073375][T22069]        ret_from_fork+0x51e/0xb90
[ 1144.078472][T22069]        ret_from_fork_asm+0x1a/0x30
[ 1144.083747][T22069] 
[ 1144.083747][T22069] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1144.091376][T22069]        __mutex_lock+0x19f/0x1300
[ 1144.096477][T22069]        nbd_queue_rq+0x37b/0x1100
[ 1144.101568][T22069]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1144.107618][T22069]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1144.114451][T22069]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1144.120937][T22069]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1144.126548][T22069]        blk_mq_dispatch_list+0xd16/0xe10
[ 1144.132249][T22069]        blk_mq_flush_plug_list+0x48d/0x570
[ 1144.138122][T22069]        __blk_flush_plug+0x3ed/0x4d0
[ 1144.143476][T22069]        __submit_bio+0x28d/0x580
[ 1144.148484][T22069]        submit_bio_noacct_nocheck+0x2f4/0xa20
[ 1144.154621][T22069]        block_read_full_folio+0x599/0x830
[ 1144.160411][T22069]        filemap_read_folio+0x137/0x3b0
[ 1144.165942][T22069]        do_read_cache_folio+0x358/0x590
[ 1144.171564][T22069]        read_part_sector+0xb6/0x2b0
[ 1144.176829][T22069]        adfspart_check_ICS+0xa5/0xa40
[ 1144.182270][T22069]        bdev_disk_changed+0x7ba/0x1550
[ 1144.187803][T22069]        blkdev_get_whole+0x380/0x510
[ 1144.193162][T22069]        bdev_open+0x31e/0xd30
[ 1144.197909][T22069]        blkdev_open+0x470/0x610
[ 1144.202829][T22069]        do_dentry_open+0x785/0x14e0
[ 1144.208104][T22069]        vfs_open+0x3b/0x340
[ 1144.212672][T22069]        path_openat+0x2e08/0x3860
[ 1144.217768][T22069]        do_file_open+0x23e/0x4a0
[ 1144.222775][T22069]        do_sys_openat2+0x113/0x200
[ 1144.227951][T22069]        __x64_sys_openat+0x138/0x170
[ 1144.233303][T22069]        do_syscall_64+0x14d/0xf80
[ 1144.238400][T22069]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.244798][T22069] 
[ 1144.244798][T22069] -> #2 (&cmd->lock){+.+.}-{4:4}:
[ 1144.251991][T22069]        __mutex_lock+0x19f/0x1300
[ 1144.257091][T22069]        nbd_queue_rq+0xc6/0x1100
[ 1144.262097][T22069]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1144.268148][T22069]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1144.274983][T22069]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1144.281468][T22069]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1144.287080][T22069]        blk_mq_dispatch_list+0xd16/0xe10
[ 1144.292786][T22069]        blk_mq_flush_plug_list+0x48d/0x570
[ 1144.298662][T22069]        __blk_flush_plug+0x3ed/0x4d0
[ 1144.304019][T22069]        __submit_bio+0x28d/0x580
[ 1144.309028][T22069]        submit_bio_noacct_nocheck+0x2f4/0xa20
[ 1144.315165][T22069]        block_read_full_folio+0x599/0x830
[ 1144.320955][T22069]        filemap_read_folio+0x137/0x3b0
[ 1144.326487][T22069]        do_read_cache_folio+0x358/0x590
[ 1144.332107][T22069]        read_part_sector+0xb6/0x2b0
[ 1144.337374][T22069]        adfspart_check_ICS+0xa5/0xa40
[ 1144.342814][T22069]        bdev_disk_changed+0x7ba/0x1550
[ 1144.348341][T22069]        blkdev_get_whole+0x380/0x510
[ 1144.353696][T22069]        bdev_open+0x31e/0xd30
[ 1144.358447][T22069]        blkdev_open+0x470/0x610
[ 1144.363369][T22069]        do_dentry_open+0x785/0x14e0
[ 1144.368641][T22069]        vfs_open+0x3b/0x340
[ 1144.373209][T22069]        path_openat+0x2e08/0x3860
[ 1144.378303][T22069]        do_file_open+0x23e/0x4a0
[ 1144.383312][T22069]        do_sys_openat2+0x113/0x200
[ 1144.388496][T22069]        __x64_sys_openat+0x138/0x170
[ 1144.393860][T22069]        do_syscall_64+0x14d/0xf80
[ 1144.398959][T22069]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.405362][T22069] 
[ 1144.405362][T22069] -> #1 (set->srcu){.+.+}-{0:0}:
[ 1144.412469][T22069]        __synchronize_srcu+0xca/0x3e0
[ 1144.417913][T22069]        elevator_switch+0x1e8/0x7a0
[ 1144.423181][T22069]        elevator_change+0x2cc/0x450
[ 1144.428448][T22069]        elevator_set_default+0x36c/0x430
[ 1144.434154][T22069]        blk_register_queue+0x34e/0x3f0
[ 1144.439686][T22069]        __add_disk+0x677/0xd50
[ 1144.444526][T22069]        add_disk_fwnode+0xfb/0x480
[ 1144.449713][T22069]        nbd_dev_add+0x72c/0xb50
[ 1144.454636][T22069]        nbd_init+0x168/0x1f0
[ 1144.459296][T22069]        do_one_initcall+0x250/0x840
[ 1144.464574][T22069]        do_initcall_level+0x104/0x190
[ 1144.470022][T22069]        do_initcalls+0x59/0xa0
[ 1144.474858][T22069]        kernel_init_freeable+0x2a6/0x3d0
[ 1144.480565][T22069]        kernel_init+0x1d/0x1d0
[ 1144.485396][T22069]        ret_from_fork+0x51e/0xb90
[ 1144.490490][T22069]        ret_from_fork_asm+0x1a/0x30
[ 1144.495761][T22069] 
[ 1144.495761][T22069] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[ 1144.503562][T22069]        __lock_acquire+0x15a5/0x2cf0
[ 1144.508920][T22069]        lock_acquire+0x106/0x330
[ 1144.513927][T22069]        __mutex_lock+0x19f/0x1300
[ 1144.519027][T22069]        elevator_change+0x1b3/0x450
[ 1144.524300][T22069]        elevator_set_none+0xb5/0x140
[ 1144.529656][T22069]        blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[ 1144.535975][T22069]        nbd_start_device+0x17f/0xb10
[ 1144.541334][T22069]        nbd_genl_connect+0x165b/0x1cf0
[ 1144.546859][T22069]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1144.552910][T22069]        genl_rcv_msg+0x61c/0x7a0
[ 1144.557919][T22069]        netlink_rcv_skb+0x232/0x4b0
[ 1144.563187][T22069]        genl_rcv+0x28/0x40
[ 1144.567673][T22069]        netlink_unicast+0x80f/0x9b0
[ 1144.572955][T22069]        netlink_sendmsg+0x813/0xb40
[ 1144.578224][T22069]        ____sys_sendmsg+0xa68/0xad0
[ 1144.583495][T22069]        ___sys_sendmsg+0x2a5/0x360
[ 1144.588676][T22069]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1144.594124][T22069]        do_syscall_64+0x14d/0xf80
[ 1144.599224][T22069]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.605623][T22069] 
[ 1144.605623][T22069] other info that might help us debug this:
[ 1144.605623][T22069] 
[ 1144.615832][T22069] Chain exists of:
[ 1144.615832][T22069]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53
[ 1144.615832][T22069] 
[ 1144.629553][T22069]  Possible unsafe locking scenario:
[ 1144.629553][T22069] 
[ 1144.636983][T22069]        CPU0                    CPU1
[ 1144.642327][T22069]        ----                    ----
[ 1144.647673][T22069]   lock(&q->q_usage_counter(io)#53);
[ 1144.653044][T22069]                                lock(fs_reclaim);
[ 1144.659528][T22069]                                lock(&q->q_usage_counter(io)#53);
[ 1144.667406][T22069]   lock(&q->elevator_lock);
[ 1144.671984][T22069] 
[ 1144.671984][T22069]  *** DEADLOCK ***
[ 1144.671984][T22069] 
[ 1144.680121][T22069] 6 locks held by syz.3.13420/22069:
[ 1144.685387][T22069]  #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1144.693559][T22069]  #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 1144.702506][T22069]  #2: ffff8880267c11d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[ 1144.713891][T22069]  #3: ffff8880267c10d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[ 1144.724840][T22069]  #4: ffff888026732680 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x198/0x450
[ 1144.735443][T22069]  #5: ffff8880267326b8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[ 1144.746303][T22069] 
[ 1144.746303][T22069] stack backtrace:
[ 1144.752176][T22069] CPU: 0 UID: 0 PID: 22069 Comm: syz.3.13420 Not tainted syzkaller #0 PREEMPT(full) 
[ 1144.752192][T22069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1144.752201][T22069] Call Trace:
[ 1144.752208][T22069]  <TASK>
[ 1144.752215][T22069]  dump_stack_lvl+0xe8/0x150
[ 1144.752234][T22069]  print_circular_bug+0x2e1/0x300
[ 1144.752253][T22069]  check_noncircular+0x12e/0x150
[ 1144.752272][T22069]  __lock_acquire+0x15a5/0x2cf0
[ 1144.752294][T22069]  ? elevator_change+0x1b3/0x450
[ 1144.752307][T22069]  lock_acquire+0x106/0x330
[ 1144.752320][T22069]  ? elevator_change+0x1b3/0x450
[ 1144.752338][T22069]  __mutex_lock+0x19f/0x1300
[ 1144.752355][T22069]  ? elevator_change+0x1b3/0x450
[ 1144.752371][T22069]  ? rcu_is_watching+0x15/0xb0
[ 1144.752387][T22069]  ? elevator_change+0x1b3/0x450
[ 1144.752401][T22069]  ? __pfx___mutex_lock+0x10/0x10
[ 1144.752417][T22069]  ? enable_work+0x17f/0x230
[ 1144.752433][T22069]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1144.752452][T22069]  ? __cancel_work_sync+0xf7/0x110
[ 1144.752468][T22069]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[ 1144.752485][T22069]  elevator_change+0x1b3/0x450
[ 1144.752501][T22069]  elevator_set_none+0xb5/0x140
[ 1144.752515][T22069]  ? __pfx_elevator_set_none+0x10/0x10
[ 1144.752530][T22069]  ? xa_load+0x1db/0x210
[ 1144.752549][T22069]  blk_mq_update_nr_hw_queues+0x5e7/0x1ae0
[ 1144.752571][T22069]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1144.752587][T22069]  ? kernfs_add_one+0x477/0x5c0
[ 1144.752605][T22069]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1144.752625][T22069]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 1144.752643][T22069]  nbd_start_device+0x17f/0xb10
[ 1144.752659][T22069]  ? device_create_file+0xf4/0x1b0
[ 1144.752679][T22069]  nbd_genl_connect+0x165b/0x1cf0
[ 1144.752695][T22069]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1144.752711][T22069]  ? rcu_is_watching+0x15/0xb0
[ 1144.752727][T22069]  ? __nla_parse+0x40/0x60
[ 1144.752741][T22069]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1144.752762][T22069]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1144.752781][T22069]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1144.752800][T22069]  ? __lock_acquire+0x6b5/0x2cf0
[ 1144.752817][T22069]  genl_rcv_msg+0x61c/0x7a0
[ 1144.752834][T22069]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1144.752849][T22069]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 1144.752866][T22069]  netlink_rcv_skb+0x232/0x4b0
[ 1144.752879][T22069]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1144.752895][T22069]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1144.752907][T22069]  ? genl_rcv+0x19/0x40
[ 1144.752928][T22069]  ? down_read+0x272/0x2e0
[ 1144.752944][T22069]  ? genl_rcv+0xd/0x40
[ 1144.752959][T22069]  genl_rcv+0x28/0x40
[ 1144.752973][T22069]  netlink_unicast+0x80f/0x9b0
[ 1144.752993][T22069]  ? __pfx_netlink_unicast+0x10/0x10
[ 1144.753011][T22069]  ? netlink_sendmsg+0x650/0xb40
[ 1144.753024][T22069]  ? skb_put+0x11b/0x210
[ 1144.753039][T22069]  netlink_sendmsg+0x813/0xb40
[ 1144.753056][T22069]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1144.753070][T22069]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1144.753088][T22069]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1144.753105][T22069]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1144.753118][T22069]  ____sys_sendmsg+0xa68/0xad0
[ 1144.753134][T22069]  ? __might_fault+0xaf/0x130
[ 1144.753152][T22069]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1144.753170][T22069]  ? import_iovec+0x73/0xa0
[ 1144.753184][T22069]  ___sys_sendmsg+0x2a5/0x360
[ 1144.753199][T22069]  ? __lock_acquire+0x6b5/0x2cf0
[ 1144.753213][T22069]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1144.753231][T22069]  ? futex_wait+0x29a/0x380
[ 1144.753255][T22069]  ? __fget_files+0x2a/0x420
[ 1144.753268][T22069]  ? __fget_files+0x3a0/0x420
[ 1144.753283][T22069]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1144.753300][T22069]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1144.753319][T22069]  ? rcu_is_watching+0x15/0xb0
[ 1144.753337][T22069]  do_syscall_64+0x14d/0xf80
[ 1144.753353][T22069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.753366][T22069]  ? trace_irq_disable+0x37/0x100
[ 1144.753382][T22069]  ? clear_bhb_loop+0x40/0x90
[ 1144.753396][T22069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1144.753409][T22069] RIP: 0033:0x7effc519bf79
[ 1144.753423][T22069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1144.753435][T22069] RSP: 002b:00007effc60f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1144.753449][T22069] RAX: ffffffffffffffda RBX: 00007effc5416090 RCX: 00007effc519bf79
[ 1144.753459][T22069] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[ 1144.753469][T22069] RBP: 00007effc52327e0 R08: 0000000000000000 R09: 0000000000000000
[ 1144.753478][T22069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1144.753486][T22069] R13: 00007effc5416128 R14: 00007effc5416090 R15: 00007fff38a616f8
[ 1144.753502][T22069]  </TASK>
[ 1144.990182][T22077] netlink: 'syz.4.13422': attribute type 39 has an invalid length.
[ 1145.407738][T16203] block nbd4: Receive control failed (result -32)
[ 1145.417512][T16203] block nbd4: Receive control failed (result -32)
[ 1145.454596][T22069] nbd4: detected capacity change from 0 to 127
[ 1145.462636][T22065] block nbd4: Dead connection, failed to find a fallback
[ 1145.474500][T22065] block nbd4: shutting down sockets
[ 1145.479726][T22065] blk_print_req_error: 138 callbacks suppressed
[ 1145.479741][T22065] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.504414][T22065] buffer_io_error: 138 callbacks suppressed
[ 1145.504429][T22065] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1145.524376][T22065] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.533883][T22065] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 1145.543818][T22065] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.553665][T22065] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 1145.561932][T22065] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.572322][T22065] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 1145.580373][T22065] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.590312][T22065] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1145.598637][T22065] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.608796][T22065] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 1145.617134][T22065] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.627592][T22065] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 1145.635641][T22065] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.645398][T22065] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 1145.653186][T22065] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.663006][T22065] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 1145.671170][T22065] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1145.681888][T22065] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 1145.690363][T22065] ldm_validate_partition_table(): Disk read failed.
[ 1145.697641][T22065] Dev nbd4: unable to read RDB block 0
[ 1145.703526][T22065]  nbd4: unable to read partition table
[ 1145.713183][T22065] ldm_validate_partition_table(): Disk read failed.
[ 1145.720359][T22065] Dev nbd4: unable to read RDB block 0
[ 1145.727637][T22065]  nbd4: unable to read partition table
[ 1147.344327][   T12] net_ratelimit: 71 callbacks suppressed
[ 1147.344347][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1147.357893][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1147.474241][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1147.482005][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1147.594190][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1147.601971][   T58] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1147.724172][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1147.731931][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1147.845264][ T1091] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1147.853049][ T1091] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1148.574166][T16203] Bluetooth: hci2: command 0x0406 tx timeout
[ 1152.404418][ T1156] net_ratelimit: 80 callbacks suppressed
[ 1152.404437][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1152.417882][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1152.534172][ T1156] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1152.541928][ T1156] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1152.664209][   T58] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1152.671971][   T58] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1152.784183][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1152.792122][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex
[ 1152.904260][   T12] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1152.912095][   T12] bond6: (slave ip6gretap1): failed to get link speed/duplex