last executing test programs:

2.948098851s ago: executing program 4 (id=2424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.876102848s ago: executing program 4 (id=2425):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

2.753498468s ago: executing program 4 (id=2429):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r1, &(0x7f0000005340), 0x0, 0x20000004)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpeername(r3, &(0x7f0000000440)=@tipc=@name, &(0x7f00000004c0)=0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00', <r5=>0x0})
listen(r1, 0x2)
accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0xfffffe93)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0xffffffffffffffff, 0x47}}, 0x20)
ioctl$OCFS2_IOC_GROUP_EXTEND(r6, 0x40046f01, &(0x7f0000000200)=0x10000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r5, 0x2f, 0x2, 0x2, 0x1, 0x10, @mcast2, @empty, 0x40, 0x1, 0xc18c, 0x7}})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, 0x0, 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)

2.433638084s ago: executing program 0 (id=2434):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private1}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32844, 0xc1}}, 0x20}}, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x1c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8141ba5ccf7ef84}, 0x0)

2.377766803s ago: executing program 3 (id=2435):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.306254707s ago: executing program 3 (id=2436):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
bind$nfc_llcp(r4, &(0x7f00000000c0)={0x27, 0x0, 0x10000001, 0x7, 0x7, 0x3, "bac5115c7dad4887fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e63a4a7a6cc35d3deb00", 0x20}, 0x60)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x58)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000140)={r5, 0xfff, 0x0, 0x7})
setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.141547657s ago: executing program 3 (id=2439):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

1.918301295s ago: executing program 0 (id=2442):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8)
close(r6)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000017c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_ext={0x1c, 0x6, &(0x7f0000001680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3556, 0x0, 0x0, 0x0, 0x1000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe02, 0x0, 0x0, 0x0, 0x49f}], &(0x7f00000016c0)='syzkaller\x00', 0x7fff, 0x1c, &(0x7f0000001700)=""/28, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x5, 0x4, 0x80, 0x4}, 0x10, 0x14aef, 0xffffffffffffffff, 0x2, &(0x7f00000018c0)=[r6, r0, 0x1, r7, r8], &(0x7f0000001900)=[{0x4, 0x4, 0x6, 0x3}, {0x4, 0x3, 0x1, 0x4}], 0x10, 0xa868}, 0x94)
close(r3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x240408c4}, 0x2004c844)
sendmsg$sock(r1, &(0x7f0000001600)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x1, 0x0, 0x2, 0x2}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000300)="f224242ab819447a00cd4e6f9c9c567e0a56c803c756cd11668c80cb264374bda73587bddf143a5e30158a", 0x2b}, {&(0x7f0000000340)="3c72dbd64880a4614c57d277743cbf20bf572248ed2d726c753e51", 0x1b}, {&(0x7f0000000fc0)="0ad761dd1d1c03802fa4f23af52e7ca975639edc8207c468a350723f8f5a599ced4ac235b42735b5a5f7022b9726d3d8ef7f8c1018df96ef17dfe7cbce3c62517d33390fcb69141bcb823c4f76edd3f3b3d0cc46c2962149c8f1286e90f3f850308e8ba8c183dc29760aac2ad48950953fc88370f0d1d189e087d18a0766f13976b72d92f035023e1404d30ae2b954a8008ccc9d41ac9210557f5e65c3b6386a6bb5610e21cbbfb3b77a3b2c22d25d5b70b19e972f0c7f7fb47a2f16cd4dd3f8397c4f08bfb6888c434c79d1cf11aa9b444888c1df1c76", 0xd7}, {&(0x7f00000010c0)="f42784bfb3122e0317df651c0cf88a2220739bb21df99e03324a98e86ae956f1c5187778c2700531419a74581150113bb69ab751be6d2e9da2089f50d20191ca7c7f4deea733949099db6f", 0x4b}, {&(0x7f0000001140)="8bac1634e3460c3a9ec36c96d83a73a877781b72e71d7cddd85c63fd4f14b21b56e4df0898d77eda5957d750ee449ec3264af207bdb2c6b49b072b3641222d2269bf7f477f74d339bf8408a32527c7437d01f90e3c7fa59f292ac6d1684eac67f238dae31a37355728822d5e7050d1c9d7cc6cab8b855f0d9d30c4a3ccd007c444dfcaa998746d9f3fb33dd7bca5708c1a7b283d1e2ac98cb7cbdd710eb2c6743a4be3a49b599688a4c2b5a2171c760f1313483fe50a9544748e269ac42d4dc5da321d4cdeea3057198383fc7a34c9dfaaa2e3d26fd12e99ee655cb309d276", 0xdf}, {&(0x7f0000001240)="5f8ffc069070f4605c33be9882c96a56b6b66805c05b0a851cac5e68539a575fdce20ccebace76084d4110f773aff4c50b464a6ea49a55da36476d20bb1809c3d0eeea5c5a3cfe97b386463c422587cb2331c811af89b1bb34f46cf1c4ce681984e835395c3c1739e4ae3d058bd173dcfe0fa2d810c08482b9bcca5add6d3a802d90350f58951eb63bdeb0ff3ec346d903a8207d88b38a6192f9c7856b9c4c141ce3995e7912de6977863aee19cfb56d4d5b9c90c59d2eca5bff5b99cfe697c7a6fdc76fbf08553b3cce43e03ca6fb0cd5ea0a8d920d3fd155a5d8195b8a14e61e2bf83ab396d0402c6747573ea2453997e0021754", 0xf5}, {&(0x7f0000001340)="92a5c839e88059e5cf06a5cd2d9e4a8dfc8cbf89512befb50b2cdcd0ffc9ec43681cea4724c616e32786c812a104a49246fbc9d478c6e54b8760a2c0e1e9d18ee7b25d1deffed11538a6f96767439d8825ce30d70a1109cfdb4866accd606d403228de578d54603d66da82877ede2654c3d4453ff35699e499d2d6", 0x7b}, {&(0x7f00000013c0)="ccb11454640de5167d8910e255ae12af84f01891f63e0254e656f314adb2ed30f182b48bf3621b95a826e19c809f58e20a62b2813e664892e63e1bd9956013141a099fb8a96711838f34b5cccf70c98421366e812623dc4ce890d5e27c6c0fe9331b0ca51def472eded6f0f02240e4ba906d2fc5f6aae333578192a9b1584750c794e3f9374e1b838110e3305570b693504a534e4b38c603fc8223ee316e5ae46a28ff0b3e85fd8c76d35aa7867358a38ca1e67f39605637da5f230d905d571593ca2d0a29179a53f90398654ad317fb6c558b62e727fc9aa0b5e8a878270055a8f93b2ea1a64d9006685ed84ef71cc1", 0xf0}], 0x8, &(0x7f0000001540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}, 0x20000810)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@getae={0x40, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0xa, 0xff}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x3504}}, 0x40}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71189e000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r11, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x11dc0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r12)

1.916663398s ago: executing program 3 (id=2443):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x0, 0x30, 0xffff, 0x6b6db423}, &(0x7f0000000040)=0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x8, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
syz_emit_ethernet(0x5e, &(0x7f0000000340)={@random="e33110355bfc", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1}}}}}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006100)=ANY=[@ANYBLOB="a84f00003d00010325bd7000fedbdf250d000000451403"], 0x4fa8}, 0x1, 0x0, 0x0, 0x200448d3}, 0x80)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x44}, [@nested={0x7, 0x11, 0x0, 0x1, [@generic="e796bd"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf548}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6af5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000804}, 0x800)

1.858011473s ago: executing program 1 (id=2444):
syz_emit_ethernet(0x9a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x27, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6, 0x9, @loopback, @loopback, {[@timestamp={0x44, 0x28, 0x42, 0x0, 0x9, [0x6, 0xd0b, 0x5, 0x1, 0x200, 0xddb7, 0x60000000, 0x5, 0x0]}, @timestamp_addr={0x44, 0x44, 0x2f, 0x1, 0x6, [{@multicast1, 0x2}, {@broadcast, 0xffffcd7b}, {@empty, 0x8299}, {@multicast2, 0xf}, {@multicast1, 0x1ff}, {@empty, 0x46}, {@multicast1, 0xf1}, {@remote, 0x1}]}, @end, @generic={0x83, 0x3, "11"}, @lsrr={0x83, 0x17, 0x8d, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}]}}, "00186371ae9b1c03"}}}}}, 0x0)

1.716254519s ago: executing program 1 (id=2446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.612841094s ago: executing program 4 (id=2447):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/20, 0x14}}], 0x1, 0x40000022, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000020100)={0x4, 0x7, &(0x7f00000201c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000060000000b70000000000000095"], &(0x7f0000020200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@dellink={0x30, 0x11, 0xc, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x1000}, [@IFLA_WEIGHT={0x8, 0xf, 0xa}, @IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x5}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r6)
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000200)={0x34, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x121000, 0x0)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f00000006c0)={'veth1_to_bridge\x00', 0x7e34})
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000000))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)

1.544817396s ago: executing program 1 (id=2448):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8010, 0xffffffffffffffff, 0x32cc0000)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0))

1.482093648s ago: executing program 0 (id=2449):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x4000001, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000140), 0x12)
r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x74, &(0x7f0000000440)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x400, @mcast1, 0x2d4}, @in6={0xa, 0x4e22, 0xf479, @mcast2, 0xeb}, @in6={0xa, 0x4e23, 0xffffff7d, @loopback, 0xd}]}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r4, 0x694}, &(0x7f0000000300)=0x8)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c)
openat$cgroup_freezer_state(r1, 0x0, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, 0x0)
pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000640)=0x10)
getpeername$inet6(r8, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18)
close(r6)
pread64(r2, &(0x7f0000000080)=""/46, 0x2e, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.381410734s ago: executing program 1 (id=2451):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7105", @ANYRESHEX=0x0], 0xbb)
write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)
r6 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=@deltaction={0x204, 0x31, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x71ee}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x372}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x25cd}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd6b}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a2e}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40880}, 0x20000002)

1.329012684s ago: executing program 3 (id=2452):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd701cfcdbdf2512000000080001ee", @ANYRES32=r4, @ANYBLOB="0500e4000000000006001a0102000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x20000080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r6, 0x29, 0x16, 0x0, &(0x7f0000001e80))
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffc0000}, @mark={0xc, 0x15, {0x350759, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r9, @ANYRESOCT=r10, @ANYRESDEC=r5, @ANYRES64=r7, @ANYRES64=r2], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @private2, 0x8}}, 0x5b, 0x8002}, 0x90)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

985.747603ms ago: executing program 2 (id=2453):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

964.754488ms ago: executing program 1 (id=2454):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ppoll(&(0x7f0000000080)=[{r0, 0x2218}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000380)=r5}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xd9, 0x0, &(0x7f0000000980)="63eced8e46dc3f2ddf33c9e9b9860a2daa835ae4495a02cae561af08917f43d40d1aa08afb1ec6e888695d9a06cbf9fbf1520fcbfcd889658236af087dc9d286da1180260699d827a43530c7112a41bea3cefc79acbf46fe6c027ec5b012c90c29100246134dabd29c29b1be8a9df821951b26953c45bf0d0ba987270c9a5f2b7bf9d187ff0f1ebbec4a52b37c7d28bfd770ad54c618d38182f2f1d1bc7576fab5f3f3f9c2f303d4c0efa456af90c386e81970dedd7ad337bbf377e69f012390b81f5e04c65e9a7af9fa161a6c8fbfde81a88e49e6626460be", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0, 0x10}, @map_fd={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x6, 0x2, 0x0, r7}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x12, &(0x7f0000000380)=""/18, 0x40f00, 0x22, '\x00', r8, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000540)=[{0x1, 0x1, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x5, 0x4}, {0x3, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x2}, {0x4, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query, @map_idx, @generic={0x5, 0x3, 0x4, 0xea76, 0xfffffff8}], 0x0, 0x1, 0xf3, &(0x7f0000000640)=""/243, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x7, 0x31a}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x2, 0x0, 0x100000a}, @generic={0xfc, 0x0, 0x0, 0x2}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa, 0x0, 0xb}, @generic={0x85, 0x0, 0x0, 0x0, 0xaa}, @generic={0x93}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
close(r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000dc0)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002b40)=@newtfilter={0x16c0, 0x2c, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0xfff1}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1664, 0x2, [@TCA_FW_ACT={0x1640, 0x4, [@m_nat={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x988, 0x0, 0x5, 0x1, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1ff, 0x6, 0x4, 0x4}, @remote, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x62c, 0x300, 0x5, 0x464, 0x1}, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xfffffffd}}]}, {0x67, 0x6, "f8044b4ee97dc515a951084c2171a1485e422e7a4a1acb937bd6fc6d9413092998b20a30f8c1fe3f46753734586e6de6474c7375eeb3586aed46d81d8c24cfb342e8590e763e7caec3012a5482ab63216513423975e8ea8c5df1c83ffb6418e454f8c6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x104, 0x1f, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0xa8, 0x6, "01ec89b7fce1ad84ce6153bb49ce6af1876773aec63bcb6ea4a5de9486b5f84b22c6458625499ab159ef607365aad51311e6fab6ec090eaaa854aab80a3878c958c67ed8d3c7471a75bd0f9e112e9033e8a6f61a2e263f553162311547a7bb2a434b40c681e52e75f213750c11a12596a3874b17f21782f8d33efddf705b3d86045bed70dffcf455eb423cbb1c7241243b13fffa748294e3477df421bbf4dd85b25369b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_mpls={0x48, 0xd, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x892f}]}, {0x9, 0x6, "2a8544525c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_tunnel_key={0xe8, 0xa, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffff800, 0xffffffb6, 0x10000000, 0x0, 0x5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x60, 0x6, "5c4abc56d14219b3e8f0d33c62013eac15668b183e6f5f151347a1adb50666ec82f2f75d878214e0abcf5e1a466779ffa9241ebbca07967e5c43f1a751cccaa82e6a2f35533246224aa547ed8ef467c393c67f81b136a6cd36aa7689"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x170, 0x1d, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6af9, 0x26cc, 0x4, 0x9, 0xace}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0xe7, 0x6, "810606c3ba1acbff6b5e1839aa888cb554e550d2bc1413e3063cdaaf089a5fce93bdc8990bed6f2f88923921c07cab63f43970a3436464e76b2fee6efc40ab184669f09bd104057e43a4e3a70958badcf92fbac77e7696ead0460389b704c5555ba0dcdcdea4cbba826300d346c96f04e0620259ffeac660b525dc87cf3b2b720812d5e8e7196a62d4733ec972714b23df4d177c2405c73fad2073c1c85cd01d4c42f7b935039fdab2187016ff6b2e4b492435647d780c60e2cc374d93a50bbdd55c64eb52c0d6b85df29cdd3e67897cd57c3ded953e4814cbef2715653fb8811baf4d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x118, 0x9, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x48, 0x6, {0x400, 'security\x00', 0x3, 0x7, "e0a3db2777c3adc997737efeab91f62f9b2e748ec9529848a3ca33f08dd8"}}]}, {0x96, 0x6, "762053b8e4e40a54c735c6cb9a148f6cf89fc0fecc58d3a81870dad02fdd87d8d9a10335765b6a7c7563f8d7bb4274080806f324de7c6a063aed10a9a34fc908a038a3bd40742474815f7020c96116655bb03f730e791de08353542e219558df13ae2980cf19f6eff742d8170cb85032b9f0b18c912e7c329bb7e7dceb4a652eb401cda74df67066242d4384c4f0ac285ae0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x1078, 0xb, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xc}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xd}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe1, 0x12}}, @TCA_FW_CLASSID={0x8, 0x1, {0x18, 0xd}}, @TCA_FW_MASK={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x16c0}}, 0x0)

859.856856ms ago: executing program 2 (id=2455):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000ac0))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x4)
close(r0)
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000280)=0x10, &(0x7f00000003c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000006c0))
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r6=>0x0})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000000000000008000000000000000000080012000200020000000000000000003000230002"], 0xa0}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0xfce)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001f0100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c000280080002007f00000108001f0004000000"], 0x40}}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000200050800000000000082000080180100006adcf9890976f088c8b80b873b37da827030a11cbc66d7680a38dfe218c7a08d8cd6372ecf0ac783a872536b99927ec06880b05f7abfdc30167f2987334b5900225b01b15322efca77e524c4ef7f29a3258e16f1f049a513d3420722644eb2e6c54de5dbde4e6e0c07251259baa9fe2093e8176d3b3b7b8c2c392395e543cf3ef8e767dec3a36250a561db", @ANYRES32, @ANYRESOCT=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ac}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)

613.434412ms ago: executing program 4 (id=2456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e1232a8a371039dbee9", 0x5ee}], 0x1}, 0x20000885)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="0a003402020200000800490000ac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x800c880)

537.245749ms ago: executing program 1 (id=2457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r1, &(0x7f0000005340), 0x0, 0x20000004)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpeername(r3, &(0x7f0000000440)=@tipc=@name, &(0x7f00000004c0)=0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a01010000000000000000010020000900010073797a30000000002c000000030a01020000000000000000020000060900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000097c04018008000100636d7000700402800c00038005000100ac0000000800014000000009a4010380f8000100350d286254c026c969fbc920a9703a7f8381da8aadef50512d15a0b00215a8fec424c9dc070d85d9b35c74e9503fd2b91454e78018c06ef0efa34c5fbec1da320e80fdde027864b3ea00281b03a14fa03ee2051b6af27bed1eb91e1ec48fcc1f3654b22469d3016d076533c282217c8f10c417a1527cc464e987c27570cc88d523f8f1fbfd2a2481a3b7ebdd2e5add268608489834ceaa7c0555581248bb1b92aabe5f4c14af1a389a6d2e57f32e99b7b8e94fedfd180e7eaf8d5a814be3478b615497540d5d1e0dfe1a1f9180d3e59b2a51bb70c373c08ae14a87979d5e56901bfd3b6a44769cd1c85b2dda753d731a6aa3382278000100dccee4a0e2c2768c75971179a498b9d3fdba90a0e03a88d857fffa33bbb22b0afe5651e84fcc72ef399283ff13075e8cc0b34288865719f325979b494e64e6e136630306d97e4646aee729426b8216e303b2acd6fbd98e54243e210f9ca89011081924080d7440108afb081061c497242c31e4ee3000028008000340000000040900020073797a3100000000080003400000000308000180fffffffb0800034000000004b40203808a000100105bc9af9cc2e3a7f79b27054508fc7904912dbfc1f4ea4340f1301656b8b4fef1c2fb715874ff800ec060f7f75ea57e7f6c98f0092389f722222ed2a4ba86e51a093b97791c6b91921baca2aa63263e6752c811fb3acf24c463b7a08bbb84ead4685481bd8c7b3574202ed02f6f04ff9000153e807f44aee823210e04b7280c1b706654c0cc0000c3000100f74afe2c8767a9190fb6afe3688504f56fe9819c08a610f2cb31e7b7b778fe48d906a45a32b18a5e8891f51b9a37eb59628fda37d42f468ded6d6dddedc9364b956267bb635ba1209817526d3c70e7ca2753372fc44fe09f81f7e2d3f41746ad42489fcad935eee243cc9e47b5c98213efb809cbdfa4ed2c25d16ba8b922f3112a557fc549937c463eac87fa494a17eb692f8fbeee755eb695e5eddb3f3d1c5498fa6fa0dc201dd997de7d4719438e0b74fdb4fe91c828b382b3e1e94437d200400001000e38d44e3206bb7f9033bb2059f080c0b236109d5d8e6779d2c1d5ad8ad5a47b543b3a1ce8de37a53793ee5b11b98b962e5f6bcf9c7c80192d99bddf28000280080003400000000408000180fffffffb0900020073797a300000000008000180fffffffb5c000280080003400000000208000180ffffffff08000180fffffffc0900020073797a320000000008000180fffffffd0900020073797a32000000000800034000000001080003400000000308000340000000030800034000000004990001007439e22dd280dea21d71ce8a2796727f44c469df21a5817b7f4d9420ddb3c546186bfb03aa87cc7af33ab8a0ee6fc3ab94da78dcd8b144275b20bd945bf0cec3cb78489a0953f420639cc5391006bdd49631dafd56a69579c31cd3f512ee72f80587a0cf58a9e8178d6289c76676c694ae1c68ecf7062e8a4d008f39f82f1e688e58939fa247ff3d7865b22d60232827f6dabd02590000000900010073797a3000000000140000001100010000000000000000000000000aa0a3c5c21b596fa96952ce2c3bb689cd370c516b7899ea0c7dbcff480ad0aea7cb06c78071314dc2c686595b223cceda3fe1f263f00d60c7037e105f00e9f92d8c596f5cc68e4c9f77602f173c73b3bfb16543517f02e117d0f608cb7305852c31e5c9b60b969732a54f086fa8cfb67c5970bd52463dfa3ef01af0340ec2920492d5dd52077732212da65bc534e065ec9d38481cf4943721021f75e3610ecc8c4dfc811e2c23476e92ffa853dbc26b70a407ddf362df0c75fe8112fd0265e7844f5e722b64822f8612a28802fe210120e3a11c70"], 0x548}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00', <r5=>0x0})
listen(r1, 0x2)
accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0xfffffe93)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0xffffffffffffffff, 0x47}}, 0x20)
ioctl$OCFS2_IOC_GROUP_EXTEND(r6, 0x40046f01, &(0x7f0000000200)=0x10000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r5, 0x2f, 0x2, 0x2, 0x1, 0x10, @mcast2, @empty, 0x40, 0x1, 0xc18c, 0x7}})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, 0x0, 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14)

451.273415ms ago: executing program 2 (id=2458):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94)

343.100734ms ago: executing program 2 (id=2459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

275.636212ms ago: executing program 3 (id=2460):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf252000000014002d800800020000000000080003000700000008000300", @ANYRESOCT=r1, @ANYBLOB="b934"], 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x100)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) (async)
sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc810)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0xe0aeb5411b960657) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=0x4)
connect$packet(r3, &(0x7f0000000140)={0x11, 0x11, r4, 0x1, 0x3, 0x6, @random="06eaa8975a39"}, 0x14) (async)
socket$inet(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6(0xa, 0x3, 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x1, 0x6, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$packet(0x11, 0xa, 0x300) (async)
socket$netlink(0x10, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)

275.14327ms ago: executing program 0 (id=2461):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xc) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

274.592188ms ago: executing program 2 (id=2462):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="44b70000001100010400"/21, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

258.031378ms ago: executing program 4 (id=2463):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100088018000c8014000b80080009000000000008000a006000"/63], 0x44}}, 0x0)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r10, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c)
getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000600), &(0x7f0000000640)=0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f00000002c0)="6a05848e44b57035b8051a1d05cc6ca5dd7f2f57685e8f5a18e446fe07601a54e200a06aa402495206a603a515f8b35e631709baaaf48abc0382948b9bae7d4c0939e90695f589ba497e9258bcf0c23695bd4f543e5f7dec99c956d379ba8b58cc5925c988d70254b3456e6ebc5b9ec792c62f8d4a0bf02d3bfc6157a6305cf05dc5f4409b64b0daa7e55ad8ab3ba03d496276651818b310b07b743892a404c25004eceb3ce119d117ace6ecdd0b507b6a", &(0x7f00000003c0)=""/138, &(0x7f0000000480)="34e8f9a2a8564c1b58d638bd304155c12674575cca3b75f34f562d3ed9f15cad3a5ef255885720be5687cd8d72f0ac52793cea319972ae3afc766b", &(0x7f00000004c0)="db22baac04568bcb2337d57e", 0x6, r11}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r11}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r11, 0x0, 0xd88d02a0}, 0x38)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380), 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000180)={{<r12=>r3, &(0x7f0000000000)='nl80211\x00', 0x8100, &(0x7f0000000080)={@_ha_fsid={[0x4]}, {0x7, 0x1, 0x7, 0x488b}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}, {[0x8, 0x800, 0x38000000, 0x1000]}, 0xffff, 0x2c, &(0x7f00000005c0)=""/44})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14)
setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f00000002c0)={r13, @local, @multicast2}, 0xc)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd2b, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe", 0xec}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

136.154213ms ago: executing program 0 (id=2464):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@typedef={0x7fff, 0x0, 0x0, 0x8, 0x4}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x81}, {0xb, 0xb}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30, 0x30, 0x0]}}, &(0x7f0000000080)=""/3, 0x78, 0x3, 0x1, 0x1, 0x10000, @value=r0}, 0x28)

85.066038ms ago: executing program 2 (id=2465):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r0)

0s ago: executing program 0 (id=2466):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000a5000000010000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x50)
r3 = socket(0x2, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x3, @mcast2, 0x91f}], 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2000002, 0x0, 0x0, 0x0, 0x2b}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xd4}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)
accept(r4, &(0x7f0000000100)=@alg, &(0x7f0000000240)=0x80)

kernel console output (not intermixed with test programs):


[  180.339475][ T8740] batman_adv: batadv0: Adding interface: ip6gretap1
[  180.339494][ T8740] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.339526][ T8740] batman_adv: batadv0: Interface activated: ip6gretap1
[  180.416122][ T8742] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[  180.455288][ T8746] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  180.495405][ T8742] 8021q: adding VLAN 0 to HW filter on device bond7
[  180.531310][ T8747] gretap1: entered allmulticast mode
[  180.635146][ T8749] batman_adv: batadv0: Removing interface: dummy0
[  180.654755][ T8749] bond7: (slave dummy0): making interface the new active one
[  180.655777][ T8749] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  180.658102][ T8742] 
: renamed from dummy0 (while UP)
[  180.981395][ T8780] team_slave_1: entered promiscuous mode
[  180.989504][ T8780] vlan2: entered promiscuous mode
[  181.050494][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.761'.
[  181.101928][ T8780] vlan2: entered promiscuous mode
[  181.191128][ T8780] vlan2: entered promiscuous mode
[  181.280838][ T8780] vlan2: entered promiscuous mode
[  181.398209][ T8780] vlan2: entered promiscuous mode
[  181.523554][ T8780] vlan2: entered promiscuous mode
[  181.588215][ T8780] vlan2: entered promiscuous mode
[  181.648224][ T8817] netlink: 'syz.3.767': attribute type 3 has an invalid length.
[  181.648248][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'.
[  181.681256][ T8780] vlan2: entered promiscuous mode
[  181.856315][ T8822] syzkaller1: tun_chr_ioctl cmd 1074025677
[  181.856439][ T8822] syzkaller1: linktype set to 769
[  182.222125][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'.
[  182.280456][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.772'.
[  182.404158][ T8842] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  182.639563][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'.
[  182.696376][ T8827] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  182.867769][ T8867] netlink: 'syz.3.779': attribute type 4 has an invalid length.
[  182.895495][ T8869] netlink: 'syz.2.777': attribute type 8 has an invalid length.
[  183.247485][ T8885] netlink: 'syz.1.783': attribute type 18 has an invalid length.
[  183.247511][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  183.310246][ T8233] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.310304][ T8233] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.310358][ T8233] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.310392][ T8233] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.413744][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'.
[  183.643269][ T8880] svc: failed to register nfsdv3 RPC service (errno 101).
[  183.675861][ T8880] svc: failed to register nfsaclv3 RPC service (errno 101).
[  183.725877][ T8908] syzkaller1: tun_chr_ioctl cmd 1074812117
[  183.728207][ T8908] syzkaller1: tun_chr_ioctl cmd 1074812117
[  183.728382][ T8911] syzkaller1: tun_chr_ioctl cmd 1074025673
[  183.744546][ T8905] netlink: 'syz.4.788': attribute type 1 has an invalid length.
[  183.760687][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'.
[  183.833055][ T8905] bond6: entered promiscuous mode
[  183.833572][ T8905] 8021q: adding VLAN 0 to HW filter on device bond6
[  183.995253][ T8925] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  184.028803][ T8923] syzkaller0: entered promiscuous mode
[  184.028841][ T8923] syzkaller0: entered allmulticast mode
[  184.089578][ T8930] netlink: 'syz.0.796': attribute type 10 has an invalid length.
[  184.107470][ T8930] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  184.119874][ T8930] team0: Port device netdevsim1 added
[  184.293676][ T8946] PKCS7: Unknown OID: [4] (bad)
[  184.293697][ T8946] PKCS7: Only support pkcs7_signedData type
[  184.516188][ T8959] bond4: invalid ARP target 0.0.0.0 specified for addition
[  184.516208][ T8959] bond4: option arp_ip_target: invalid value (0)
[  184.517712][ T8959] bond4 (unregistering): Released all slaves
[  184.942422][ T8975] syzkaller0: entered promiscuous mode
[  184.942447][ T8975] syzkaller0: entered allmulticast mode
[  185.211460][ T8987] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  185.277392][ T8991] __nla_validate_parse: 6 callbacks suppressed
[  185.277415][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'.
[  185.328225][ T8994] vlan2: entered allmulticast mode
[  185.328249][ T8994] bond0: entered allmulticast mode
[  185.532326][ T8988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.676489][ T8988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.811669][ T8988] team0: Port device netdevsim1 removed
[  185.814524][ T8988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.928505][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.816'.
[  185.953734][ T8988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.047321][ T9019] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  186.242834][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'.
[  186.248282][ T9022] netlink: Conntrack attr has 8 unknown bytes
[  186.248322][ T9022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.248706][ T9023] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  186.248726][ T9023] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.451106][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.452567][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.452694][ T8234] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.452738][ T8234] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.551898][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.824'.
[  186.634543][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.827'.
[  186.634570][ T9037] netlink: 11 bytes leftover after parsing attributes in process `syz.0.827'.
[  186.634591][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.827'.
[  186.634606][ T9037] netlink: 11 bytes leftover after parsing attributes in process `syz.0.827'.
[  186.634623][ T9037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.827'.
[  187.488788][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'.
[  211.738101][ T5621] Bluetooth: hci2: command 0x0406 tx timeout
[  211.738175][   T52] Bluetooth: hci0: command 0x1407 tx timeout
[  216.855789][ T4932] Bluetooth: hci1: command 0x0406 tx timeout
[  216.855833][ T4932] Bluetooth: hci3: command 0x0406 tx timeout
[  275.702869][ T9087] netlink: 'syz.4.840': attribute type 3 has an invalid length.
[  275.940041][ T9092] syzkaller0: entered promiscuous mode
[  275.940067][ T9092] syzkaller0: entered allmulticast mode
[  275.944656][ T9097] bridge0: entered allmulticast mode
[  276.011579][ T9106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'.
[  276.297634][ T9110] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.846'.
[  278.365917][ T9110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.366673][ T9110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.367221][ T9110] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  278.367242][ T9110] batman_adv: batadv0: Removing interface: ip6gretap1
[  278.884905][ T9162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.857'.
[  279.049292][ T9167] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  279.049987][ T9168] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  279.135628][ T9167] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.860'.
[  279.390921][ T9188] Bluetooth: hci0: unsupported parameter 5161
[  279.390945][ T9188] Bluetooth: hci0: unsupported parameter 8192
[  279.390962][ T9188] Bluetooth: hci0: unsupported parameter 5161
[  279.390975][ T9188] Bluetooth: hci0: unsupported parameter 8192
[  279.843095][ T9204] netlink: 1224 bytes leftover after parsing attributes in process `syz.0.866'.
[  279.843123][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.843143][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.879553][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.879577][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.920459][ T9204] batman_adv: batadv0: Interface deactivated: dummy0
[  279.920488][ T9204] batman_adv: batadv0: Removing interface: dummy0
[  279.969056][ T9204] batman_adv: batadv0: Interface deactivated: macvlan2
[  279.969081][ T9204] batman_adv: batadv0: Removing interface: macvlan2
[  280.457521][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'.
[  281.201424][ T9255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.876'.
[  281.582283][   T52] Bluetooth: hci4: link tx timeout
[  281.582713][   T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  281.887215][ T9275] netlink: 'syz.2.882': attribute type 2 has an invalid length.
[  282.050911][ T9275] : entered promiscuous mode
[  282.110275][ T9284] netlink: 84 bytes leftover after parsing attributes in process `syz.4.883'.
[  282.385249][ T9290] geneve2: entered promiscuous mode
[  282.400083][   T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.400128][   T87] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.400162][   T87] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.400196][   T87] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.420483][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056944400: rx timeout, send abort
[  282.421143][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056944400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  282.800721][ T9309] netlink: 'syz.1.886': attribute type 11 has an invalid length.
[  282.809648][ T9309] tc_dump_action: action bad kind
[  283.065587][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'.
[  283.068350][ T9318] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.068350][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.166873][ T9319] syzkaller0: entered promiscuous mode
[  283.166900][ T9319] syzkaller0: entered allmulticast mode
[  283.206401][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.278331][ T9325] netlink: 964 bytes leftover after parsing attributes in process `syz.4.891'.
[  283.278358][ T9325] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  283.378188][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.378295][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.378383][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.378473][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.385129][ T9320] netlink: 'syz.3.889': attribute type 4 has an invalid length.
[  283.649918][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  284.703598][   T31] audit: type=1800 audit(1790934136.940:3): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.901" name=680B20 dev="tmpfs" ino=982 res=0 errno=0
[  286.616034][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'.
[  286.617281][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'.
[  286.652076][ T9417] tipc: Started in network mode
[  286.652110][ T9417] tipc: Node identity ac14140f, cluster identity 4711
[  286.659477][ T9417] tipc: New replicast peer: 255.255.255.255
[  286.683036][ T9417] tipc: Enabled bearer <udp:syz2>, priority 10
[  286.797934][ T9429] tipc: New replicast peer: 172.20.20.170
[  286.798467][ T9429] tipc: Enabled bearer <udp:syz2>, priority 10
[  286.823535][ T1557] bridge0: entered promiscuous mode
[  287.307108][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'.
[  287.366923][ T9458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.388909][ T9460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.774372][ T1557] tipc: Node number set to 2886997007
[  287.789273][ T9480] FAULT_INJECTION: forcing a failure.
[  287.789273][ T9480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.789310][ T9480] CPU: 1 UID: 0 PID: 9480 Comm: syz.3.918 Not tainted syzkaller #0 PREEMPT(full) 
[  287.789335][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  287.789350][ T9480] Call Trace:
[  287.789359][ T9480]  <TASK>
[  287.789368][ T9480]  dump_stack_lvl+0xe8/0x150
[  287.789404][ T9480]  should_fail_ex+0x410/0x560
[  287.789436][ T9480]  _copy_from_user+0x2d/0xb0
[  287.789466][ T9480]  __sys_bpf+0x2e7/0xd90
[  287.789501][ T9480]  ? __pfx___sys_bpf+0x10/0x10
[  287.789538][ T9480]  ? __fget_files+0x2a/0x420
[  287.789588][ T9480]  ? ksys_write+0x242/0x270
[  287.789623][ T9480]  ? __pfx_ksys_write+0x10/0x10
[  287.789662][ T9480]  __x64_sys_bpf+0xba/0xd0
[  287.789687][ T9480]  do_syscall_64+0x166/0x520
[  287.789718][ T9480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.789744][ T9480]  ? clear_bhb_loop+0x70/0xc0
[  287.789770][ T9480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.789792][ T9480] RIP: 0033:0x7f0716f9e159
[  287.789813][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.789831][ T9480] RSP: 002b:00007f0717f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  287.789857][ T9480] RAX: ffffffffffffffda RBX: 00007f0717225fa0 RCX: 00007f0716f9e159
[  287.789873][ T9480] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000008
[  287.789888][ T9480] RBP: 00007f0717f13090 R08: 0000000000000000 R09: 0000000000000000
[  287.789903][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.789917][ T9480] R13: 00007f0717226038 R14: 00007f0717225fa0 R15: 00007ffe83d1b228
[  287.789951][ T9480]  </TASK>
[  287.983976][ T8433] tipc: Node number set to 4152144991
[  288.049688][ T9483] ip_tables: iptables: counters copy to user failed while replacing table
[  288.528550][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'.
[  288.539947][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'.
[  288.860926][ T9528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'.
[  288.975139][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'.
[  289.190766][ T9535] netlink: 60 bytes leftover after parsing attributes in process `syz.2.931'.
[  289.298096][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'.
[  289.309623][ T9542] bridge_slave_1: left allmulticast mode
[  289.309650][ T9542] bridge_slave_1: left promiscuous mode
[  289.323685][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.345680][ T9542] bridge_slave_0: left allmulticast mode
[  289.345711][ T9542] bridge_slave_0: left promiscuous mode
[  289.345978][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.404441][ T9542] bridge0 (unregistering): left allmulticast mode
[  289.434628][ T9544] syzkaller0: entered promiscuous mode
[  289.434682][ T9544] syzkaller0: entered allmulticast mode
[  289.618345][ T9556] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.935'.
[  289.639725][ T9556] validate_nla: 58 callbacks suppressed
[  289.641783][ T9556] netlink: 'syz.0.935': attribute type 1 has an invalid length.
[  289.784152][ T9566] xt_bpf: check failed: parse error
[  290.055865][ T9574] netlink: 'syz.1.942': attribute type 8 has an invalid length.
[  290.059024][ T9578] netlink: 'syz.1.942': attribute type 8 has an invalid length.
[  290.123562][ T9572] netlink: 'syz.1.942': attribute type 8 has an invalid length.
[  290.646770][ T9606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.648770][ T9607] syzkaller0: entered promiscuous mode
[  290.648793][ T9607] syzkaller0: entered allmulticast mode
[  290.668618][ T9607] syzkaller0: left allmulticast mode
[  290.687645][ T9614] tipc: Resetting bearer <eth:syzkaller0>
[  290.741993][ T9605] tipc: Resetting bearer <eth:syzkaller0>
[  290.772511][ T9605] tipc: Disabling bearer <eth:syzkaller0>
[  290.976697][ T9623] tap0: tun_chr_ioctl cmd 1074025677
[  290.976845][ T9623] tap0: linktype set to 805
[  291.131885][ T9627] syzkaller0: renamed from gre1
[  291.208701][ T9630] ip6gre1: entered allmulticast mode
[  291.709690][ T9652] __nla_validate_parse: 14 callbacks suppressed
[  291.709716][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.964'.
[  291.712949][ T9652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.964'.
[  292.164533][ T9665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'.
[  292.204636][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'.
[  292.268333][ T9661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.967'.
[  292.385488][ T9671] netlink: 'syz.3.970': attribute type 1 has an invalid length.
[  292.581549][ T9675] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  292.607380][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'.
[  292.637311][ T9671] veth5: entered promiscuous mode
[  292.646248][ T9671] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  292.669483][ T9675] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.687634][  T999] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.812960][ T9694] netlink: 'syz.3.976': attribute type 10 has an invalid length.
[  292.827728][  T999] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.920055][ T9683] openvswitch: netlink: Key type 135 is out of range max 32
[  292.932681][ T9696] netlink: 'syz.3.976': attribute type 10 has an invalid length.
[  293.036125][ T9680] syzkaller0: entered promiscuous mode
[  293.036146][ T9680] syzkaller0: entered allmulticast mode
[  293.059107][ T9694] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  293.069310][ T9694] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  293.078273][ T9694] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  293.089044][ T9694] team0: Port device netdevsim1 added
[  293.205572][ T9696] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  293.223033][ T9696] team0: Port device netdevsim1 removed
[  293.225218][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  293.226484][ T9696] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  293.227458][ T9696] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  293.449215][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'.
[  293.652648][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  293.907407][ T9736] netlink: 'syz.2.982': attribute type 2 has an invalid length.
[  293.928164][ T9736] netlink: 'syz.2.982': attribute type 4 has an invalid length.
[  293.928191][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.982'.
[  294.529034][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.4.984'.
[  295.834725][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'.
[  295.869200][ T9750] veth1: entered allmulticast mode
[  295.879625][ T9750] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  295.970432][ T9762] netlink: 'syz.3.991': attribute type 1 has an invalid length.
[  295.988110][ T8233] IPVS: starting estimator thread 0...
[  296.016598][ T9762] bridge4: entered promiscuous mode
[  296.079918][ T9763] IPVS: using max 24 ests per chain, 57600 per kthread
[  296.104708][ T9759] syzkaller0: entered promiscuous mode
[  296.104733][ T9759] syzkaller0: entered allmulticast mode
[  296.220380][ T5632] block nbd0: Receive control failed (result -32)
[  296.379650][ T9777] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  296.533797][ T9777] 8021q: adding VLAN 0 to HW filter on device bond2
[  296.584270][ T9776] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[  296.913936][ T9805] geneve2: entered promiscuous mode
[  296.962529][ T9808] netlink: 'syz.3.999': attribute type 23 has an invalid length.
[  297.048470][ T9812] __nla_validate_parse: 8 callbacks suppressed
[  297.048492][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'.
[  297.170296][ T9822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1004'.
[  297.173248][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.173997][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.264250][ T9828] netlink: 'syz.1.1003': attribute type 10 has an invalid length.
[  298.031368][ T9828] team0 (unregistering): Port device team_slave_0 removed
[  298.037660][ T9828] team0 (unregistering): Port device team_slave_1 removed
[  298.066676][ T9851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.134350][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.134649][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.134825][ T9865] bridge_slave_0: entered allmulticast mode
[  298.137436][ T9865] bridge_slave_0: entered promiscuous mode
[  298.167677][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.167808][ T9865] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.190404][ T9833] tipc: Disabling bearer <eth:syzkaller0>
[  298.223465][ T9858] bridge_slave_0: left allmulticast mode
[  298.223497][ T9858] bridge_slave_0: left promiscuous mode
[  298.223754][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.257532][ T9869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1009'.
[  298.316334][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'.
[  298.454775][ T9875] netlink: 'syz.2.1012': attribute type 2 has an invalid length.
[  298.502673][ T9881] sctp: [Deprecated]: syz.3.1013 (pid 9881) Use of int in maxseg socket option.
[  298.502673][ T9881] Use struct sctp_assoc_value instead
[  298.543270][ T9875] 
: entered promiscuous mode
[  298.604855][ T9880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.646405][ T9880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.662641][ T9880] bond0 (unregistering): Released all slaves
[  298.716161][ T9889] netlink: 'syz.0.1014': attribute type 2 has an invalid length.
[  298.760071][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.786292][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1015'.
[  298.944048][ T9900] netlink: 'syz.4.1020': attribute type 1 has an invalid length.
[  299.542252][ T9927] x_tables: duplicate underflow at hook 3
[  299.766557][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1033'.
[  300.298130][ T9949] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  300.337842][ T9949] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  300.567385][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'.
[  301.054272][ T9999] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1049'.
[  301.078831][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'.
[  301.149175][ T9996] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1048'.
[  301.426370][T10014] netlink: 'syz.2.1052': attribute type 1 has an invalid length.
[  301.480082][T10014] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.670681][T10063] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[  302.670706][T10063] netlink: 'syz.0.1061': attribute type 4 has an invalid length.
[  302.670722][T10063] __nla_validate_parse: 2 callbacks suppressed
[  302.670736][T10063] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1061'.
[  302.672289][T10063] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[  302.672310][T10063] netlink: 'syz.0.1061': attribute type 4 has an invalid length.
[  302.672326][T10063] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1061'.
[  303.357555][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'.
[  303.560936][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'.
[  303.608151][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'.
[  303.645084][T10102] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  303.739354][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'.
[  303.794189][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1071'.
[  303.820964][T10102] bond0: entered promiscuous mode
[  303.823930][T10102] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.051102][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'.
[  304.054659][T10121] No such timeout policy "s
"
[  304.054678][T10121] netlink: Failed to associated timeout policy 's
'
[  304.246372][T10133] netlink: 'syz.1.1079': attribute type 2 has an invalid length.
[  304.246397][T10133] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1079'.
[  304.306422][T10139] netlink: 'syz.1.1079': attribute type 2 has an invalid length.
[  304.306446][T10139] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1079'.
[  304.528763][T10152] netlink: 'syz.2.1082': attribute type 4 has an invalid length.
[  304.582448][T10158] bridge0: port 3(erspan0) entered blocking state
[  304.582678][T10158] bridge0: port 3(erspan0) entered disabled state
[  304.582847][T10158] erspan0: entered allmulticast mode
[  304.586795][T10158] erspan0: entered promiscuous mode
[  304.589012][T10158] bridge0: port 3(erspan0) entered blocking state
[  304.589119][T10158] bridge0: port 3(erspan0) entered forwarding state
[  304.613566][T10149] syzkaller0: entered promiscuous mode
[  304.613592][T10149] syzkaller0: entered allmulticast mode
[  304.678639][T10158] nbd1: detected capacity change from 0 to 63
[  304.685344][T10158] block nbd1: NBD_DISCONNECT
[  304.740767][T10158] block nbd1: Disconnected due to user request.
[  304.753851][ T1687] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.754467][ T1687] Buffer I/O error on dev nbd1, logical block 0, async page read
[  304.760852][ T1687] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.760948][ T1687] Buffer I/O error on dev nbd1, logical block 1, async page read
[  304.761871][ T1687] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.761955][ T1687] Buffer I/O error on dev nbd1, logical block 2, async page read
[  304.762327][ T1687] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.762412][ T1687] Buffer I/O error on dev nbd1, logical block 3, async page read
[  304.764303][ T1687] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.764390][ T1687] Buffer I/O error on dev nbd1, logical block 0, async page read
[  304.767041][ T1687] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.767126][ T1687] Buffer I/O error on dev nbd1, logical block 1, async page read
[  304.767630][ T1687] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.767770][ T1687] Buffer I/O error on dev nbd1, logical block 2, async page read
[  304.774956][ T1687] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  304.774994][ T1687] Buffer I/O error on dev nbd1, logical block 3, async page read
[  304.830770][ T1687] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  304.830867][ T1687] Buffer I/O error on dev nbd1, logical block 0, async page read
[  304.830913][ T1687] Buffer I/O error on dev nbd1, logical block 1, async page read
[  304.838764][ T1687] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  304.844935][T10158] block nbd1: shutting down sockets
[  304.853126][T10166] ldm_validate_partition_table(): Disk read failed.
[  304.897502][T10166] Dev nbd1: unable to read RDB block 0
[  304.910856][T10166]  nbd1: unable to read partition table
[  304.996454][T10166] ldm_validate_partition_table(): Disk read failed.
[  305.008961][T10166] Dev nbd1: unable to read RDB block 0
[  305.020785][T10166]  nbd1: unable to read partition table
[  305.284944][T10175] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.285085][T10175] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.285650][T10175] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.286190][T10175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.355683][T10175] bridge0: entered promiscuous mode
[  305.355763][T10175] bridge0: entered allmulticast mode
[  305.735714][T10198] netlink: 'syz.1.1087': attribute type 1 has an invalid length.
[  305.821237][T10198] 8021q: adding VLAN 0 to HW filter on device bond8
[  305.946969][T10198] bond8: (slave geneve3): making interface the new active one
[  305.961357][T10198] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  306.321111][T10228] ip6gre2: entered promiscuous mode
[  306.321138][T10228] ip6gre2: entered allmulticast mode
[  306.328233][T10228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  306.718465][T10239] macvlan2: left promiscuous mode
[  306.748011][T10239] 8021q: adding VLAN 0 to HW filter on device bond3
[  306.761967][T10239] 8021q: adding VLAN 0 to HW filter on device bond4
[  306.762870][T10239] bridge4: left promiscuous mode
[  306.764777][T10239] 8021q: adding VLAN 0 to HW filter on device bond5
[  306.765722][T10239] bridge5: left promiscuous mode
[  306.803881][T10239] bond6: left promiscuous mode
[  306.847709][ T1166] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  306.848050][ T1166] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  306.870447][ T8431] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  307.028508][T10264] IPv6: addrconf: prefix option has invalid lifetime
[  307.048854][T10263] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  307.220041][ T8433] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  307.363489][T10275] netlink: 'syz.4.1115': attribute type 9 has an invalid length.
[  307.427700][T10280] netlink: 'syz.4.1115': attribute type 1 has an invalid length.
[  307.430035][ T8431] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  307.469887][T10276] netlink: 'syz.0.1113': attribute type 10 has an invalid length.
[  307.470845][T10276] syz_tun: entered promiscuous mode
[  307.516849][T10276] bond2: (slave syz_tun): Removing an active aggregator
[  307.533342][T10276] bond2: (slave syz_tun): Releasing backup interface
[  308.146571][T10307] syzkaller0: entered promiscuous mode
[  308.146597][T10307] syzkaller0: entered allmulticast mode
[  308.437600][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.487832][T10319] __nla_validate_parse: 7 callbacks suppressed
[  308.487855][T10319] netlink: 16194 bytes leftover after parsing attributes in process `syz.2.1121'.
[  308.577513][T10323] xt_limit: Overflow, try lower: 268435456/134217728
[  308.659518][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'.
[  309.018801][T10315] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  309.145694][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'.
[  310.450117][ T5632] Bluetooth: hci0: command 0x1407 tx timeout
[  310.520746][T10282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  310.530384][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  310.900913][T10345] xt_hashlimit: size too large, truncated to 1048576
[  310.939255][T10348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1126'.
[  310.939290][T10348] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  311.647913][T10384] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1133'.
[  311.649712][T10385] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1133'.
[  311.878181][T10401] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0
[  311.938770][T10405] sctp: [Deprecated]: syz.2.1140 (pid 10405) Use of struct sctp_assoc_value in delayed_ack socket option.
[  311.938770][T10405] Use struct sctp_sack_info instead
[  312.101884][   T52] Bluetooth: hci0: unexpected event for opcode 0x0000
[  312.234053][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'.
[  312.235584][T10426] siw: device registration error -23
[  312.318859][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1144'.
[  312.375697][T10432] sctp: [Deprecated]: syz.2.1145 (pid 10432) Use of int in max_burst socket option.
[  312.375697][T10432] Use struct sctp_assoc_value instead
[  312.504007][T10440] netlink: 'syz.1.1147': attribute type 1 has an invalid length.
[  312.556455][T10442] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1148'.
[  312.823659][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1151'.
[  313.612314][T10503] __nla_validate_parse: 1 callbacks suppressed
[  313.612336][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'.
[  313.679080][T10503] IPVS: sh: FWM 3 0x00000003 - no destination available
[  313.679325][    C0] IPVS: sh: FWM 3 0x00000003 - no destination available
[  313.784270][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'.
[  313.785171][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'.
[  313.861184][T10513] 8021q: adding VLAN 0 to HW filter on device bond5
[  313.866462][T10516] bond5: option ad_select: unable to set because the bond device is up
[  313.969961][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  314.089606][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  314.569142][T10547] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40
[  314.879633][T10570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.073847][T10576] netlink: 'syz.1.1181': attribute type 1 has an invalid length.
[  315.242620][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.242645][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.242870][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.242888][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.289990][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.290015][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'.
[  315.435518][T10595] bond6 (unregistering): Released all slaves
[  316.131789][ T5632] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  316.131875][ T5632] Bluetooth: hci0: Injecting HCI hardware error event
[  316.139351][   T52] Bluetooth: hci0: hardware error 0x00
[  316.382473][T10628] tipc: New replicast peer: 255.255.255.255
[  316.383150][T10628] tipc: Enabled bearer <udp:syz2>, priority 10
[  316.399027][T10628] netlink: 'syz.2.1191': attribute type 1 has an invalid length.
[  316.416840][T10629] IPVS: stopping master sync thread 10401 ...
[  316.433855][T10628] bond6: entered promiscuous mode
[  316.434391][T10628] 8021q: adding VLAN 0 to HW filter on device bond6
[  316.458117][T10629] x_tables: duplicate underflow at hook 2
[  316.471515][T10636] netlink: 'syz.3.1193': attribute type 1 has an invalid length.
[  317.382372][    T9] tipc: Node number set to 3820431619
[  317.608911][T10683] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  317.608961][T10683] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  317.760679][T10689] syzkaller0: entered promiscuous mode
[  317.760707][T10689] syzkaller0: entered allmulticast mode
[  317.796262][T10691] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  318.216486][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  318.283401][T10706] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  318.450541][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  318.776539][T10733] __nla_validate_parse: 15 callbacks suppressed
[  318.776564][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'.
[  319.497271][T10716] team0: entered promiscuous mode
[  319.497297][T10716] team_slave_0: entered promiscuous mode
[  319.497526][T10716] team_slave_1: entered promiscuous mode
[  319.497848][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'.
[  319.661358][T10745] ip6t_srh: unknown srh match flags  4000
[  320.303218][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'.
[  320.718059][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  321.226938][T10797] syzkaller0: entered promiscuous mode
[  321.226965][T10797] syzkaller0: entered allmulticast mode
[  321.463318][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'.
[  322.189237][T10853] vxcan2: entered allmulticast mode
[  322.333396][T10861] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  322.350065][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1240'.
[  322.506290][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888079493000: rx timeout, send abort
[  322.622912][T10873] x_tables: ip_tables: osf match: only valid for protocol 6
[  322.641717][T10877] netlink: 'syz.1.1245': attribute type 1 has an invalid length.
[  322.641740][T10877] netlink: 'syz.1.1245': attribute type 2 has an invalid length.
[  322.798765][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'.
[  323.007013][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888079493000: abort rx timeout. Force session deactivation
[  323.009319][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888079491800: rx timeout, send abort
[  323.086913][T10893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.288444][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  323.392382][T10910] sctp: [Deprecated]: syz.2.1257 (pid 10910) Use of int in max_burst socket option.
[  323.392382][T10910] Use struct sctp_assoc_value instead
[  323.436234][T10911] netlink: 'syz.0.1255': attribute type 2 has an invalid length.
[  323.509380][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888079491800: abort rx timeout. Force session deactivation
[  323.577826][T10911] : entered promiscuous mode
[  323.590779][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'.
[  324.199206][T10940] hsr0: entered promiscuous mode
[  324.268989][T10938] hsr0: left promiscuous mode
[  324.456890][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'.
[  324.456929][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1269'.
[  324.605286][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'.
[  324.923960][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'.
[  325.178239][T10969] team0: left promiscuous mode
[  325.178268][T10969] team_slave_0: left promiscuous mode
[  325.179716][T10969] team_slave_1: left promiscuous mode
[  325.214544][T10969] bond6: left promiscuous mode
[  325.305383][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1273'.
[  325.566755][T10981] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  326.216880][T11010] netlink: 'syz.0.1280': attribute type 1 has an invalid length.
[  326.369419][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'.
[  326.570025][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1287'.
[  326.616665][T10831] IPVS: starting estimator thread 0...
[  326.629287][T11031] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1286'.
[  326.657247][T11032] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  326.658850][T11032] bond7 (unregistering): Released all slaves
[  326.722247][T11042] IPVS: using max 25 ests per chain, 60000 per kthread
[  326.769356][T11041] ip6tnl2: entered allmulticast mode
[  326.783153][T11047] netlink: 'syz.4.1293': attribute type 1 has an invalid length.
[  327.293049][T11072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'.
[  327.349648][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'.
[  327.515012][T11072] erspan0: entered promiscuous mode
[  327.536076][T11072] erspan0: left promiscuous mode
[  328.051279][T11110] team0 (unregistering): Port device team_slave_0 removed
[  328.071825][T11110] team0 (unregistering): Port device team_slave_1 removed
[  328.515596][T11125] syzkaller0: entered promiscuous mode
[  328.515621][T11125] syzkaller0: entered allmulticast mode
[  329.042230][T11142] netlink: 'syz.4.1315': attribute type 1 has an invalid length.
[  329.042359][T11142] netlink: 'syz.4.1315': attribute type 4 has an invalid length.
[  329.043043][T11142] netlink: 'syz.4.1315': attribute type 1 has an invalid length.
[  329.043060][T11142] netlink: 'syz.4.1315': attribute type 4 has an invalid length.
[  329.253807][T11146] netlink: zone id is out of range
[  329.253824][T11146] netlink: zone id is out of range
[  329.271363][T11141] af_packet: tpacket_rcv: packet too big, clamped from 144 to 4294967272. macoff=96
[  329.725886][T11165] __nla_validate_parse: 7 callbacks suppressed
[  329.725909][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'.
[  329.725934][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'.
[  330.055104][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  330.151361][T11192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1332'.
[  330.397588][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'.
[  330.787524][T10832] IPVS: starting estimator thread 0...
[  330.870448][T11228] IPVS: using max 25 ests per chain, 60000 per kthread
[  330.890146][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1347'.
[  330.916896][T11231] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  330.916932][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.970617][T11236] netlink: Unknown nat attribute (0)
[  330.970654][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.970990][T11230] netlink: Unknown nat attribute (0)
[  330.971029][T11230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.280544][T11255] ip_tables: iptables: counters copy to user failed while replacing table
[  331.962934][T11270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'.
[  332.384831][T11285] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  332.384849][T11285] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.1358'.
[  332.818152][T11317] netlink: 956 bytes leftover after parsing attributes in process `syz.0.1364'.
[  332.818181][T11317] openvswitch: netlink: Flow key attr not present in new flow.
[  332.966263][T11324] netlink: 'syz.1.1365': attribute type 10 has an invalid length.
[  333.170011][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  333.396801][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'.
[  333.855280][ T5632] Bluetooth: hci3: unexpected event for opcode 0x0000
[  335.426851][T11300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.450310][T11292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.674663][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1381'.
[  335.718431][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'.
[  335.775198][T11385] team0: left promiscuous mode
[  335.775859][T11385] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  335.923311][T11400] netlink: 9160 bytes leftover after parsing attributes in process `syz.3.1386'.
[  335.953838][ T5632] Bluetooth: hci2: unexpected event for opcode 0x0000
[  336.189824][T11422] netlink: 'syz.4.1388': attribute type 5 has an invalid length.
[  336.255696][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  336.655074][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1391'.
[  336.814716][T11441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.334836][T11457] netlink: 'syz.4.1397': attribute type 1 has an invalid length.
[  337.382609][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'.
[  337.382635][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'.
[  337.890678][ T5632] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  337.890859][ T5632] Bluetooth: hci3: Injecting HCI hardware error event
[  337.895883][ T5632] Bluetooth: hci3: hardware error 0x00
[  339.047911][T11482] netlink: 'syz.2.1401': attribute type 39 has an invalid length.
[  339.168295][T11457] bond7: entered promiscuous mode
[  339.168808][T11457] 8021q: adding VLAN 0 to HW filter on device bond7
[  339.194792][T11462] 8021q: adding VLAN 0 to HW filter on device bond7
[  339.195081][T11462] bond7: (slave gre2): The slave device specified does not support setting the MAC address
[  339.195096][T11462] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  339.238461][T11462] bond7: (slave gre2): making interface the new active one
[  339.238490][T11462] gre2: entered promiscuous mode
[  339.272884][T11462] bond7: (slave gre2): Enslaving as an active interface with an up link
[  339.279324][T11463] bond0: (slave bond_slave_1): Releasing backup interface
[  339.345554][T11464] macvtap1: entered allmulticast mode
[  339.345578][T11464] veth0_to_bridge: entered allmulticast mode
[  339.394595][T11464] veth0_to_bridge: left allmulticast mode
[  339.555928][T11476] bridge0: left promiscuous mode
[  339.555955][T11476] bridge0: left allmulticast mode
[  339.558595][T11472] bridge_slave_0: left allmulticast mode
[  339.558613][T11472] bridge_slave_0: left promiscuous mode
[  339.558772][T11472] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.657900][T11488] bridge0: port 3(erspan0) entered disabled state
[  339.782376][T11488] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.803010][T11488] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.828465][   T52] Bluetooth: hci4: unexpected event for opcode 0x0000
[  339.970162][   T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  339.970266][   T52] Bluetooth: hci2: Injecting HCI hardware error event
[  339.971589][ T5621] Bluetooth: hci2: hardware error 0x00
[  340.029014][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'.
[  340.176843][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'.
[  340.189637][T11528] ip_tables: iptables: counters copy to user failed while replacing table
[  340.363623][T11544] netlink: 'syz.2.1415': attribute type 1 has an invalid length.
[  340.400470][T11544] 8021q: adding VLAN 0 to HW filter on device bond7
[  340.420456][T11545] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.423463][T11545] bond7: (slave batadv0): making interface the new active one
[  340.424650][T11545] bond7: (slave batadv0): Enslaving as an active interface with an up link
[  340.461912][T11544] 8021q: adding VLAN 0 to HW filter on device batadv1
[  340.464802][T11544] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  340.552284][T11545] syzkaller1: entered promiscuous mode
[  340.552307][T11545] syzkaller1: entered allmulticast mode
[  340.580279][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  340.826677][T11556] syzkaller1: entered promiscuous mode
[  340.826703][T11556] syzkaller1: entered allmulticast mode
[  341.140744][T11567] netlink: 'syz.4.1420': attribute type 18 has an invalid length.
[  341.170108][ T5632] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  341.230529][T10833] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  341.230579][T10833] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  341.230628][T10833] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  341.230663][T10833] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  341.640606][T11588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1424'.
[  342.053559][ T5621] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  342.447159][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'.
[  342.607584][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'.
[  342.607631][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'.
[  342.983341][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'.
[  343.222512][T11630] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  343.662608][T11684] netlink: 'syz.3.1443': attribute type 21 has an invalid length.
[  343.892531][ T5621] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  343.892607][ T5621] Bluetooth: hci4: Injecting HCI hardware error event
[  343.895999][ T5632] Bluetooth: hci4: hardware error 0x00
[  344.043403][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'.
[  344.043428][T11693] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1446'.
[  344.043444][T11693] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1446'.
[  344.043463][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1446'.
[  344.703591][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'.
[  344.751379][T11739] netlink: 'syz.4.1456': attribute type 16 has an invalid length.
[  344.751408][T11739] netlink: 'syz.4.1456': attribute type 3 has an invalid length.
[  344.794375][T11741] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  346.053123][ T5632] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  347.515555][T11719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.875053][T11763] IPVS: set_ctl: invalid protocol: 8 172.30.1.1:20001
[  347.876253][T11763] __nla_validate_parse: 1 callbacks suppressed
[  347.876302][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'.
[  347.978036][T11776] Bluetooth: MGMT ver 1.23
[  348.850243][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'.
[  348.891824][T11784] vlan0: entered allmulticast mode
[  348.891958][T11784] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  349.172147][T11799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'.
[  349.486690][T11816] sctp: [Deprecated]: syz.2.1474 (pid 11816) Use of struct sctp_assoc_value in delayed_ack socket option.
[  349.486690][T11816] Use struct sctp_sack_info instead
[  349.528746][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'.
[  349.713509][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1474'.
[  350.420461][T11850] x_tables: duplicate underflow at hook 1
[  351.003024][T11869] Bluetooth: hci0: unsupported parameter 5135
[  351.003050][T11869] Bluetooth: hci0: unsupported parameter 8192
[  351.003089][T11869] Bluetooth: hci0: unsupported parameter 5135
[  351.003104][T11869] Bluetooth: hci0: unsupported parameter 8192
[  351.063409][T11855] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) !
[  351.087372][T11870] netlink: 'syz.4.1489': attribute type 4 has an invalid length.
[  351.725605][T11894] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  351.768648][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'.
[  351.944799][T11907] openvswitch: netlink: Message has 8 unknown bytes.
[  352.056955][T11901] 8021q: adding VLAN 0 to HW filter on device batadv1
[  352.059197][T11901] bond7: left promiscuous mode
[  352.059214][T11901] gre2: left promiscuous mode
[  352.087646][T11901] 8021q: adding VLAN 0 to HW filter on device bond8
[  352.370528][ T8430] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec
[  352.426077][T11925] netlink: 'syz.0.1503': attribute type 6 has an invalid length.
[  352.426095][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  352.501898][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1500'.
[  352.720253][T11935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1506'.
[  353.573998][T11954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1509'.
[  355.641456][T11948] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  355.641504][T11948] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  355.665872][T11933] ip6gretap0: entered promiscuous mode
[  355.666005][T11933] macsec1: entered allmulticast mode
[  355.666021][T11933] ip6gretap0: entered allmulticast mode
[  355.805130][T11960] netlink: 'syz.2.1510': attribute type 1 has an invalid length.
[  355.805174][T11960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.937630][T11970] netlink: 'syz.3.1512': attribute type 2 has an invalid length.
[  355.937654][T11970] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1512'.
[  355.976199][T11965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.976881][T11956] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1510'.
[  356.102326][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'.
[  356.466031][T11991] netlink: 'syz.3.1517': attribute type 12 has an invalid length.
[  356.466059][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'.
[  357.064993][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.127314][T12019] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1528'.
[  357.127350][T12019] netlink: 'syz.3.1528': attribute type 3 has an invalid length.
[  357.248872][T12018] syzkaller0: entered promiscuous mode
[  357.248900][T12018] syzkaller0: entered allmulticast mode
[  357.725311][T12022] infiniband syz2: set active
[  357.725457][T12022] infiniband syz2: added team_slave_0
[  357.754911][T12022] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  357.754955][T12022] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  357.755079][T12022] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  357.831653][T12022] RDS/IB: syz2: added
[  357.831718][T12022] smc: adding ib device syz2 with port count 1
[  357.831739][T12022] smc:    ib device syz2 port 1 has no pnetid
[  358.512821][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'.
[  358.726755][T12050] bond8: Unable to set up delay as MII monitoring is disabled
[  358.748939][T12050] bond8 (unregistering): Released all slaves
[  360.180513][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'.
[  360.231801][T12100] syzkaller0: entered promiscuous mode
[  360.231828][T12100] syzkaller0: entered allmulticast mode
[  360.264596][T12102] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  360.590586][T12088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.978990][T12108] netlink: 'syz.1.1543': attribute type 10 has an invalid length.
[  360.989199][T12108] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1543'.
[  361.336438][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  361.478131][T12120] veth1_macvtap: entered promiscuous mode
[  361.479073][T12120] macsec2: entered promiscuous mode
[  361.953822][T12136] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  362.394416][T12152] bond3: entered promiscuous mode
[  362.394496][T12152] bond3: entered allmulticast mode
[  362.395751][T12152] 8021q: adding VLAN 0 to HW filter on device bond3
[  362.681518][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'.
[  362.869484][T12173] syzkaller0: entered promiscuous mode
[  362.869510][T12173] syzkaller0: entered allmulticast mode
[  363.151717][T12183] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1564'.
[  363.598097][T12197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1570'.
[  363.598354][T12197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1570'.
[  363.740061][T12205] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  363.856778][T12205] bond10: option mode: invalid value (8)
[  363.886990][T12205] bond10 (unregistering): Released all slaves
[  364.543468][T12236] syzkaller0: entered promiscuous mode
[  364.543495][T12236] syzkaller0: entered allmulticast mode
[  364.688883][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'.
[  364.775865][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'.
[  365.077547][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'.
[  365.230769][T12252] netlink: zone id is out of range
[  365.230818][T12252] netlink: zone id is out of range
[  365.230942][T12252] netlink: zone id is out of range
[  365.230985][T12252] netlink: zone id is out of range
[  365.230994][T12252] netlink: zone id is out of range
[  365.231020][T12252] netlink: zone id is out of range
[  365.231037][T12252] netlink: zone id is out of range
[  365.231046][T12252] netlink: zone id is out of range
[  365.231056][T12252] netlink: zone id is out of range
[  365.818313][T12277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1590'.
[  366.408816][T12304] syzkaller0: entered promiscuous mode
[  366.408842][T12304] syzkaller0: entered allmulticast mode
[  366.534791][ T8444] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  366.658805][T12318] sctp: [Deprecated]: syz.0.1603 (pid 12318) Use of int in max_burst socket option deprecated.
[  366.658805][T12318] Use struct sctp_assoc_value instead
[  366.733607][T12321] ipvlan0: left promiscuous mode
[  366.864192][T10838] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  366.904821][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'.
[  366.904857][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'.
[  367.310734][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'.
[  367.310771][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'.
[  367.570696][    T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  367.851365][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'.
[  367.851429][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1622'.
[  367.950923][T12371] bridge9: entered promiscuous mode
[  367.952600][T12371] bridge9: entered allmulticast mode
[  367.953407][T10838] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  367.953780][T10838] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  368.247593][T12390] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  368.537060][T12394] bond8: (slave veth5): Enslaving as an active interface with a down link
[  368.600674][T12390] bond8: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  368.858347][ T8430] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  368.993258][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'.
[  369.276307][T12427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1634'.
[  369.276519][T12427] unsupported nlmsg_type 40
[  369.393188][T12436] netlink: 'syz.0.1635': attribute type 1 has an invalid length.
[  369.430585][T12436] 8021q: adding VLAN 0 to HW filter on device bond4
[  369.434992][T12436] syz_tun: left promiscuous mode
[  369.439154][T12436] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  369.497580][T12431] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1633'.
[  369.896213][T12444] netlink: 'syz.4.1637': attribute type 1 has an invalid length.
[  370.401866][T12463] sit0: entered promiscuous mode
[  370.728643][T12470] dvmrp0: entered allmulticast mode
[  371.135664][T12476] __nla_validate_parse: 2 callbacks suppressed
[  371.135688][T12476] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1643'.
[  371.777430][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1647'.
[  371.855170][T12500] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  372.082937][T12513] netlink: 'syz.3.1649': attribute type 13 has an invalid length.
[  372.946929][T12527] xt_hashlimit: size too large, truncated to 1048576
[  373.088281][T12536] netlink: 'syz.1.1656': attribute type 1 has an invalid length.
[  373.156725][T12534] xt_hashlimit: size too large, truncated to 1048576
[  373.199790][T12536] 8021q: adding VLAN 0 to HW filter on device bond10
[  373.289640][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1656'.
[  373.398392][T12543] net_ratelimit: 63 callbacks suppressed
[  373.398472][T12543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.663032][T12540] bond10: (slave veth3): Enslaving as an active interface with a down link
[  373.867990][T12534] bond10 (unregistering): (slave veth3): Releasing active interface
[  373.894736][T12534] bond10 (unregistering): Released all slaves
[  373.963023][T12557] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1662'.
[  374.079527][T12561] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1660'.
[  374.090057][T12561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1660'.
[  374.266947][T12565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1664'.
[  374.488214][T12572] syzkaller0: entered promiscuous mode
[  374.488241][T12572] syzkaller0: entered allmulticast mode
[  374.741105][T12583] netlink: 'syz.1.1670': attribute type 61 has an invalid length.
[  374.845967][T12585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'.
[  374.946773][T12585] netlink: 'syz.2.1671': attribute type 5 has an invalid length.
[  375.418265][T12605] netlink: 'syz.4.1678': attribute type 1 has an invalid length.
[  376.136249][T12634] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  376.173412][T12633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.253033][T12639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.833440][T12644] netlink: 'syz.1.1684': attribute type 1 has an invalid length.
[  376.904333][T12645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'.
[  376.930091][T12651] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1685'.
[  376.965973][T12645] 8021q: adding VLAN 0 to HW filter on device bond10
[  376.967737][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'.
[  377.007276][T12644] bond10: (slave bridge3): making interface the new active one
[  377.033414][T12644] bond10: (slave bridge3): Enslaving as an active interface with an up link
[  378.882856][T12622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.034436][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1694'.
[  379.178183][T12692] netlink: 'syz.2.1696': attribute type 10 has an invalid length.
[  379.197572][T12692] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  379.206161][T12692] team0: Port device netdevsim1 added
[  379.266587][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1696'.
[  379.311174][T12692] netlink: 'syz.2.1696': attribute type 10 has an invalid length.
[  379.331196][T12692] team0: Port device netdevsim1 removed
[  379.489016][T12703] tipc: Disabling bearer <udp:syz2>
[  380.255084][T12742] ip_tables: iptables: counters copy to user failed while replacing table
[  380.338818][T12742] netlink: 'syz.2.1711': attribute type 16 has an invalid length.
[  380.338849][T12742] netlink: 'syz.2.1711': attribute type 17 has an invalid length.
[  380.475417][T12753] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1714'.
[  380.514804][T12742] 8021q: adding VLAN 0 to HW filter on device team0
[  380.587438][T12742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  380.587469][T12742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  380.619588][T12742] veth1_vlan: left promiscuous mode
[  380.627638][T12742] veth0_vlan: left promiscuous mode
[  380.636152][T12742] veth0_vlan: entered promiscuous mode
[  380.639527][T12742] veth1_vlan: entered promiscuous mode
[  380.660448][T12742] veth1_macvtap: left promiscuous mode
[  380.662486][T12742] veth0_macvtap: left promiscuous mode
[  380.664072][T12742] veth0_macvtap: entered promiscuous mode
[  380.665822][T12742] veth1_macvtap: entered promiscuous mode
[  380.700790][T12742] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  380.701249][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  380.704861][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  380.707366][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  380.709084][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  380.756444][T12742] 8021q: adding VLAN 0 to HW filter on device bond1
[  380.818261][T12742] bridge1: entered promiscuous mode
[  380.825451][T12742] 8021q: adding VLAN 0 to HW filter on device bond2
[  380.848978][T12742] ip6gretap1: left allmulticast mode
[  380.856800][T12742] 8021q: adding VLAN 0 to HW filter on device bond3
[  380.859192][T12742] vlan2: left allmulticast mode
[  380.859224][T12742] bond0: left allmulticast mode
[  380.898416][T12742] 8021q: adding VLAN 0 to HW filter on device bond8
[  380.920147][T10841] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  380.920185][T10841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.973051][T10841] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  380.973420][T10841] bond2: (slave veth0_to_bond): making interface the new active one
[  381.015313][T10841] bond2: active interface up!
[  381.237307][   T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  381.237538][   T39] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  381.262868][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  381.264208][   T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  381.264488][   T39] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  381.267421][   T39] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.267701][   T39] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.291713][ T8444] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  381.349389][ T8444] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  381.431539][   T39] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  381.431578][   T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.433022][   T39] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  381.481214][   T39] bond8: (slave veth5): making interface the new active one
[  381.484643][   T39] bond8: active interface up!
[  381.595640][ T8444] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  381.642173][T10838] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  381.642212][T10838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.642832][T10838] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  381.642864][T10838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.759425][T12785] pim6reg: entered allmulticast mode
[  381.820761][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'.
[  381.820787][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'.
[  381.820813][T12787] netlink: 'syz.4.1727': attribute type 18 has an invalid length.
[  381.824590][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'.
[  381.824612][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'.
[  381.824639][T12791] netlink: 'syz.4.1727': attribute type 18 has an invalid length.
[  382.216070][T12813] team0: Device is already in use.
[  382.414434][T12821] dvmrp0: entered allmulticast mode
[  382.416422][T12821] dvmrp0: left allmulticast mode
[  382.817350][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'.
[  383.201516][T12839] syzkaller0: entered promiscuous mode
[  383.201546][T12839] syzkaller0: entered allmulticast mode
[  383.203397][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1742'.
[  383.203425][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1742'.
[  383.203443][T12842] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1742'.
[  383.269207][ T7162] syzkaller0: tun_net_xmit 48
[  383.293502][T12839] syzkaller0: create flow: hash 4285773975 index 0
[  383.310908][T12846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1743'.
[  383.334117][T12846] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1743'.
[  383.509094][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'.
[  383.626350][T12862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1747'.
[  383.628655][T12863] syzkaller0: entered promiscuous mode
[  383.628678][T12863] syzkaller0: entered allmulticast mode
[  384.144467][T12878] geneve1: left promiscuous mode
[  384.598464][T12898] netlink: 'syz.3.1755': attribute type 1 has an invalid length.
[  384.598491][T12898] netlink: 64543 bytes leftover after parsing attributes in process `syz.3.1755'.
[  384.599213][T12898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1755'.
[  384.599234][T12898] openvswitch: netlink: Flow key attr not present in new flow.
[  386.935016][    C0] syzkaller0 (unregistering): delete flow: hash 4285773975 index 0
[  387.343420][T12887] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  387.759085][T12922] syzkaller0: entered promiscuous mode
[  387.759112][T12922] syzkaller0: entered allmulticast mode
[  387.798982][T12925] xt_l2tp: invalid flags combination: 8
[  387.836269][T12926] __nla_validate_parse: 1 callbacks suppressed
[  387.836293][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'.
[  387.965168][T12926] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  388.152493][T12937] netlink: 'syz.3.1764': attribute type 4 has an invalid length.
[  388.494396][T12912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.947729][T12962] sctp: [Deprecated]: syz.4.1772 (pid 12962) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.947729][T12962] Use struct sctp_sack_info instead
[  388.992789][T12965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1771'.
[  389.123204][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'.
[  389.668132][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'.
[  389.685341][T12989] xt_hashlimit: size too large, truncated to 1048576
[  389.723164][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'.
[  389.811581][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'.
[  390.009427][T13000] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1784'.
[  390.147424][T13005] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  390.147479][T13005] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  390.158215][T12995] virtio_blk virtio4: 1/0/0 default/read/poll queues
[  390.164777][T12995] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  390.238728][T13012] netlink: zone id is out of range
[  390.238991][T13012] netlink: zone id is out of range
[  390.239550][T13012] netlink: zone id is out of range
[  390.536406][   T31] audit: type=1804 audit(1790934242.770:4): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1787" name="/newroot/355/memory.events" dev="tmpfs" ino=1834 res=1 errno=0
[  390.551615][   T31] audit: type=1800 audit(1790934242.780:5): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1787" name="memory.events" dev="tmpfs" ino=1834 res=0 errno=0
[  390.650411][   T31] audit: type=1804 audit(1790934242.880:6): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1787" name="/newroot/355/memory.events" dev="tmpfs" ino=1834 res=1 errno=0
[  391.423070][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'.
[  391.456951][T13058] syzkaller0: entered promiscuous mode
[  391.456978][T13058] syzkaller0: entered allmulticast mode
[  391.617393][   T31] audit: type=1804 audit(1790934243.850:7): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1793" name="/newroot/356/cgroup.controllers" dev="tmpfs" ino=1841 res=1 errno=0
[  391.617685][   T31] audit: type=1800 audit(1790934243.850:8): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1793" name="cgroup.controllers" dev="tmpfs" ino=1841 res=0 errno=0
[  391.879223][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1800'.
[  391.947134][T13068] hsr0: entered promiscuous mode
[  391.947754][T13072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1802'.
[  392.145800][T13084] netlink: 'syz.3.1807': attribute type 10 has an invalid length.
[  392.173823][T13084] dummy0: left promiscuous mode
[  392.195105][T13084] team0: Port device dummy0 added
[  392.347522][T13095] netlink: 'syz.3.1808': attribute type 1 has an invalid length.
[  392.675200][T13107] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.153440][T13107] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.154026][T13105] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  393.295644][T13123] __nla_validate_parse: 1 callbacks suppressed
[  393.295667][T13123] netlink: 271 bytes leftover after parsing attributes in process `syz.4.1815'.
[  393.330527][    C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed
[  393.330548][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  393.331137][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  393.437198][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'.
[  393.572827][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'.
[  393.755462][T13150] netlink: 'syz.0.1820': attribute type 10 has an invalid length.
[  393.755488][T13150] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1820'.
[  393.911020][T13149] syzkaller0: entered promiscuous mode
[  393.911046][T13149] syzkaller0: entered allmulticast mode
[  394.246221][T13174] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.1823'.
[  394.246310][T13174] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.1823'.
[  394.434780][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'.
[  394.434808][T13178] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1826'.
[  394.460909][T13178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.465781][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'.
[  394.465808][T13178] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1826'.
[  394.470458][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.560918][T13182] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  394.573562][T13182] netlink: 'syz.4.1825': attribute type 1 has an invalid length.
[  394.617661][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  395.060827][T13207] netlink: 'syz.0.1833': attribute type 1 has an invalid length.
[  395.118330][T13211] netlink: 'syz.2.1835': attribute type 1 has an invalid length.
[  395.279963][T13211] 8021q: adding VLAN 0 to HW filter on device bond9
[  395.349519][T13216] bond9: (slave geneve3): making interface the new active one
[  395.379641][T13216] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  395.474036][T13219] tun0: tun_chr_ioctl cmd 2148553947
[  395.657102][T13233] netlink: 'syz.2.1840': attribute type 1 has an invalid length.
[  395.775419][T13235] 8021q: adding VLAN 0 to HW filter on device bond10
[  395.777229][T13244] netlink: Unknown conntrack attr (0)
[  395.777262][T13244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.834923][T13245] 8021q: adding VLAN 0 to HW filter on device bond10
[  395.851748][T13245] bond10: (slave geneve4): making interface the new active one
[  395.852466][T13245] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  395.898593][ T8235] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  395.913347][ T8235] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  395.914679][ T8235] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  395.914878][ T8235] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  396.077971][T13250] lo: entered promiscuous mode
[  396.149109][T13242] netlink: 'syz.1.1842': attribute type 2 has an invalid length.
[  397.189195][T13281] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  397.189227][T13281] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  397.814638][T13308] block nbd2: shutting down sockets
[  398.176601][T13325] FAULT_INJECTION: forcing a failure.
[  398.176601][T13325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.176648][T13325] CPU: 1 UID: 0 PID: 13325 Comm: syz.4.1858 Not tainted syzkaller #0 PREEMPT(full) 
[  398.176690][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  398.176712][T13325] Call Trace:
[  398.176749][T13325]  <TASK>
[  398.176807][T13325]  dump_stack_lvl+0xe8/0x150
[  398.176960][T13325]  should_fail_ex+0x410/0x560
[  398.177058][T13325]  _copy_from_user+0x2d/0xb0
[  398.177147][T13325]  __sys_bpf+0x2e7/0xd90
[  398.177207][T13325]  ? __pfx___sys_bpf+0x10/0x10
[  398.177273][T13325]  ? __fget_files+0x2a/0x420
[  398.177348][T13325]  ? ksys_write+0x242/0x270
[  398.177396][T13325]  ? __pfx_ksys_write+0x10/0x10
[  398.177436][T13325]  __x64_sys_bpf+0xba/0xd0
[  398.177462][T13325]  do_syscall_64+0x166/0x520
[  398.177564][T13325]  ? trace_irq_disable+0x3b/0x140
[  398.177600][T13325]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.177644][T13325]  ? clear_bhb_loop+0x70/0xc0
[  398.177672][T13325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.177695][T13325] RIP: 0033:0x7fe24919e159
[  398.177742][T13325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.177792][T13325] RSP: 002b:00007fe249f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  398.177838][T13325] RAX: ffffffffffffffda RBX: 00007fe249425fa0 RCX: 00007fe24919e159
[  398.177856][T13325] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000012
[  398.177871][T13325] RBP: 00007fe249f99090 R08: 0000000000000000 R09: 0000000000000000
[  398.177885][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.177898][T13325] R13: 00007fe249426038 R14: 00007fe249425fa0 R15: 00007ffc40d3d738
[  398.177932][T13325]  </TASK>
[  398.865082][T13351] __nla_validate_parse: 7 callbacks suppressed
[  398.865108][T13351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1865'.
[  398.909341][T13351] vxcan0: entered allmulticast mode
[  399.038458][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1866'.
[  399.273726][T13377] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1871'.
[  399.273754][T13377] openvswitch: netlink: Flow actions attr not present in new flow.
[  399.734464][T13390] syzkaller0: entered promiscuous mode
[  399.734491][T13390] syzkaller0: entered allmulticast mode
[  401.373473][T13478] dvmrp0: entered allmulticast mode
[  401.410310][T13478] dvmrp0: left allmulticast mode
[  401.633912][T13490] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1900'.
[  401.849601][T13500] batadv_slave_1: entered promiscuous mode
[  401.856276][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  401.856599][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.938604][T13500] batadv_slave_1 (unregistering): left promiscuous mode
[  401.939488][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.179671][T13505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.317782][T13506] tipc: Disabling bearer <eth:syzkaller0>
[  402.348355][T13512] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.1905'.
[  402.900451][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'.
[  403.324503][T13553] FAULT_INJECTION: forcing a failure.
[  403.324503][T13553] name failslab, interval 1, probability 0, space 0, times 0
[  403.324541][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.3.1917 Not tainted syzkaller #0 PREEMPT(full) 
[  403.324566][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  403.324581][T13553] Call Trace:
[  403.324589][T13553]  <TASK>
[  403.324600][T13553]  dump_stack_lvl+0xe8/0x150
[  403.324637][T13553]  should_fail_ex+0x410/0x560
[  403.324667][T13553]  ? __alloc_skb+0x1db/0x7a0
[  403.324804][T13553]  should_failslab+0xa8/0x100
[  403.324859][T13553]  ? __alloc_skb+0x1db/0x7a0
[  403.324883][T13553]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  403.324923][T13553]  ? __alloc_skb+0x18d/0x7a0
[  403.324949][T13553]  ? __alloc_skb+0x1db/0x7a0
[  403.324981][T13553]  __alloc_skb+0x1db/0x7a0
[  403.325012][T13553]  netlink_ack+0x136/0xb30
[  403.325108][T13553]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  403.325165][T13553]  ? __lock_acquire+0x747/0x2de0
[  403.325219][T13553]  netlink_rcv_skb+0x2a4/0x4a0
[  403.325256][T13553]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  403.325286][T13553]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  403.325336][T13553]  ? netlink_deliver_tap+0x2e/0x1b0
[  403.325371][T13553]  ? netlink_deliver_tap+0x2e/0x1b0
[  403.325413][T13553]  netlink_unicast+0x7bd/0x940
[  403.325459][T13553]  netlink_sendmsg+0x813/0xb40
[  403.325492][T13553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.325525][T13553]  ? apparmor_socket_sendmsg+0x98/0x360
[  403.325598][T13553]  ? __pfx_netlink_sendmsg+0x10/0x10
[  403.325619][T13553]  sock_sendmsg_nosec+0x14e/0x190
[  403.325683][T13553]  ____sys_sendmsg+0x54e/0x850
[  403.325719][T13553]  ? __pfx_____sys_sendmsg+0x10/0x10
[  403.325760][T13553]  ? import_iovec+0x73/0xa0
[  403.325793][T13553]  ___sys_sendmsg+0x2a5/0x360
[  403.325839][T13553]  ? __lock_acquire+0x747/0x2de0
[  403.325866][T13553]  ? __pfx____sys_sendmsg+0x10/0x10
[  403.325937][T13553]  ? __fget_files+0x2a/0x420
[  403.325966][T13553]  ? __fget_files+0x3a2/0x420
[  403.326008][T13553]  __x64_sys_sendmsg+0x1b1/0x290
[  403.326041][T13553]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  403.326097][T13553]  do_syscall_64+0x166/0x520
[  403.326127][T13553]  ? trace_irq_disable+0x3b/0x140
[  403.326149][T13553]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.326173][T13553]  ? clear_bhb_loop+0x70/0xc0
[  403.326200][T13553]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.326223][T13553] RIP: 0033:0x7f0716f9e159
[  403.326245][T13553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.326263][T13553] RSP: 002b:00007f0717f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.326288][T13553] RAX: ffffffffffffffda RBX: 00007f0717225fa0 RCX: 00007f0716f9e159
[  403.326305][T13553] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  403.326320][T13553] RBP: 00007f0717f13090 R08: 0000000000000000 R09: 0000000000000000
[  403.326334][T13553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.326348][T13553] R13: 00007f0717226038 R14: 00007f0717225fa0 R15: 00007ffe83d1b228
[  403.326386][T13553]  </TASK>
[  403.903427][T13567] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  403.927101][T13567] bond10 (unregistering): Released all slaves
[  403.996019][T13576] pim6reg: entered allmulticast mode
[  404.055573][T13577] netlink: 'syz.1.1925': attribute type 12 has an invalid length.
[  404.216410][ T8431] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  404.216720][T13588] macsec2: entered allmulticast mode
[  404.216742][T13588] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  404.218895][T13588] 8021q: adding VLAN 0 to HW filter on device macsec2
[  404.264744][T13588] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  404.303180][ T8431] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  404.383559][T13605] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  404.384178][ T8442] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  404.384383][T13591] macsec2: entered allmulticast mode
[  404.384403][T13591] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  404.386310][T13591] 8021q: adding VLAN 0 to HW filter on device macsec2
[  404.433914][T13591] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  404.476093][ T8442] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  404.526146][T13606] smc: net device lo applied user defined pnetid SYZ0
[  405.158242][T13628] 8021q: adding VLAN 0 to HW filter on device bond1
[  405.181784][T13628] 8021q: adding VLAN 0 to HW filter on device eth0
[  405.185679][T13628] 8021q: adding VLAN 0 to HW filter on device eth1
[  405.188525][T13628] 8021q: adding VLAN 0 to HW filter on device eth2
[  405.200670][T13628] 8021q: adding VLAN 0 to HW filter on device eth3
[  405.374252][ T8242] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.374304][ T8242] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.374342][ T8242] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.374379][ T8242] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.656488][T13647] 8021q: adding VLAN 0 to HW filter on device bond11
[  405.748222][T13655] gretap1: entered promiscuous mode
[  405.980987][T13659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1940'.
[  406.436914][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'.
[  406.474742][T13689] veth0: entered promiscuous mode
[  406.674507][T13699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1950'.
[  406.763648][T13706] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  406.975558][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'.
[  407.688405][T13736] sit0: left promiscuous mode
[  407.884346][T13736] netlink: 964 bytes leftover after parsing attributes in process `syz.0.1956'.
[  407.884378][T13736] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  408.132533][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'.
[  408.216382][T13741] syzkaller0: create flow: hash 711850387 index 2
[  408.514362][T13745] veth7: entered allmulticast mode
[  408.736682][T13758] syzkaller0: delete flow: hash 711850387 index 2
[  408.747959][T13753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  408.748786][T10837] syzkaller0: tun_net_xmit 76
[  408.749018][T10837] syzkaller0: tun_net_xmit 48
[  408.771573][ T8433] syzkaller0: tun_net_xmit 76
[  409.347324][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  409.347699][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  411.453086][T13791] syzkaller0: entered promiscuous mode
[  411.453113][T13791] syzkaller0: entered allmulticast mode
[  411.457459][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1968'.
[  411.458531][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1968'.
[  411.501800][T13791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.537235][T13790] tipc: Resetting bearer <eth:syzkaller0>
[  411.650301][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  411.684785][T13790] tipc: Disabling bearer <eth:syzkaller0>
[  412.864681][T13828] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1977'.
[  413.038325][T13843] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  413.172870][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  413.288581][T13854] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1981'.
[  413.303151][T13854] netlink: 'syz.3.1981': attribute type 3 has an invalid length.
[  413.416597][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1982'.
[  413.794733][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'.
[  413.794772][T13869] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  413.835749][T13869] tipc: Started in network mode
[  413.835784][T13869] tipc: Node identity 080211000001, cluster identity 4711
[  413.835937][T13869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.005339][T13877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1990'.
[  414.008883][T13877] nbd: socks must be embedded in a SOCK_ITEM attr
[  414.054780][T13877] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1990'.
[  414.096887][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'.
[  414.325136][T13887] syzkaller0: entered promiscuous mode
[  414.325163][T13887] syzkaller0: entered allmulticast mode
[  414.519140][T13896] syzkaller0: entered promiscuous mode
[  414.519164][T13896] syzkaller0: entered allmulticast mode
[  414.598312][T13896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.994050][ T5609] tipc: Node number set to 134418688
[  415.525723][T13933] IPv6: NLM_F_CREATE should be specified when creating new route
[  415.527749][T13933] IPv6: Can't replace route, no match found
[  415.701490][T13921] ipvlan2: entered promiscuous mode
[  415.782034][T13924] ipvlan3: entered promiscuous mode
[  415.942482][T13942] syzkaller1: entered promiscuous mode
[  415.942509][T13942] syzkaller1: entered allmulticast mode
[  416.458440][T13969] ip_tables: iptables: counters copy to user failed while replacing table
[  416.782943][T13993] __nla_validate_parse: 73 callbacks suppressed
[  416.782967][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2022'.
[  416.891587][T13999] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  417.037753][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'.
[  417.423631][T14024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'.
[  417.663354][T14034] netlink: 'syz.1.2035': attribute type 13 has an invalid length.
[  417.663380][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'.
[  417.807326][T14047] gtp1: entered promiscuous mode
[  417.807351][T14047] gtp1: entered allmulticast mode
[  417.823104][T14040] syzkaller0: entered promiscuous mode
[  417.823129][T14040] syzkaller0: entered allmulticast mode
[  418.357854][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'.
[  418.619025][T14080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2044'.
[  418.795716][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'.
[  418.856637][T14097] ipvlan4: entered allmulticast mode
[  418.877761][T14097] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  419.141862][T14108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2050'.
[  419.448000][T14119] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  419.550617][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'.
[  419.576442][T14130] Bluetooth: hci0: unsupported parameter 5134
[  419.576464][T14130] Bluetooth: hci0: unsupported parameter 8192
[  419.576476][T14130] Bluetooth: hci0: unsupported parameter 5134
[  419.576488][T14130] Bluetooth: hci0: unsupported parameter 8192
[  419.633508][T14119] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  419.685136][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'.
[  420.045064][T14124] veth7: entered promiscuous mode
[  420.046424][T14143] ip_tables: iptables: counters copy to user failed while replacing table
[  420.081137][T14124] bond5: (slave veth7): Enslaving as a backup interface with a down link
[  420.085383][ T8242] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  420.123114][T14119] 8021q: adding VLAN 0 to HW filter on device bond5
[  420.124742][T14143] xt_hashlimit: size too large, truncated to 1048576
[  420.183434][T14144] netlink: 'syz.4.2059': attribute type 21 has an invalid length.
[  420.190360][T10830] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  420.204419][T14148] netlink: 'syz.4.2059': attribute type 21 has an invalid length.
[  420.945670][T14184] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  421.716508][T14207] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  421.716572][T14207] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  421.717059][T14207] tipc: Resetting bearer <eth:syzkaller0>
[  422.218285][T14216] __nla_validate_parse: 1 callbacks suppressed
[  422.218317][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2078'.
[  422.416343][T14212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'.
[  422.707343][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'.
[  422.798148][ T5632] Bluetooth: hci1: unexpected event for opcode 0x0000
[  422.828103][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'.
[  423.267781][T14244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2085'.
[  423.466754][T14246] bond6: Removing last ns target with arp_interval on
[  423.466999][T14251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'.
[  423.693859][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2087'.
[  423.747486][T14257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2087'.
[  423.748320][T14262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2088'.
[  424.265229][T14272] syzkaller0: entered promiscuous mode
[  424.265254][T14272] syzkaller0: entered allmulticast mode
[  424.779663][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2095'.
[  425.276941][T14297] 8021q: adding VLAN 0 to HW filter on device bond6
[  425.326995][T14321] netlink: 'syz.3.2101': attribute type 2 has an invalid length.
[  425.350723][T10832] bond5: (slave ip6gretap2): link status up again after 0 ms
[  425.350757][T10832] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  425.351734][T10832] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  425.352166][T10832] bond5: active interface up!
[  425.360234][T14311] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  425.526857][T14311] xt_CT: No such helper "netbios-ns"
[  425.607467][ T8235] smc: removing ib device syz2
[  425.649507][T14316] bond11: entered promiscuous mode
[  425.676053][T14321] 
þ: entered promiscuous mode
[  425.687395][ T7162] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  425.699503][ T1557] infiniband syz2: ib_query_port failed (-19)
[  425.792207][ T7162] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  425.887653][ T8235] smbdirect: ib_dev[syz2] removed
[  425.916470][ T7162] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  425.945431][T14331] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  426.020567][ T7162] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  426.097935][T14335] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  426.097968][T14335] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  426.098418][T14335] tipc: Resetting bearer <eth:syzkaller0>
[  426.131441][ T8242] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  426.371639][T10833] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  426.521475][T10833] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  426.631715][T10832] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  427.264614][T14364] __nla_validate_parse: 3 callbacks suppressed
[  427.264658][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'.
[  427.786991][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'.
[  427.787036][T14375] vxlan: RTM_NEWNEIGH with invalid state 0x9
[  428.102598][T14391] IPv6: NLM_F_CREATE should be specified when creating new route
[  428.226900][T14392] syzkaller1: entered promiscuous mode
[  428.226925][T14392] syzkaller1: entered allmulticast mode
[  428.334325][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'.
[  428.334364][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'.
[  428.336275][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2114'.
[  428.964201][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2116'.
[  429.091558][T14396] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2114'.
[  429.115238][T14411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2117'.
[  429.164497][T14414] x_tables: duplicate entry at hook 2
[  429.509276][T14423] syzkaller0: entered promiscuous mode
[  429.509302][T14423] syzkaller0: entered allmulticast mode
[  429.893129][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'.
[  429.893715][T14442] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  429.981526][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2127'.
[  430.205938][T14446] bond12: option min_links: invalid value (18446744073709551612)
[  430.205970][T14446] bond12: option min_links: allowed values 0 - 2147483647
[  430.228908][T14446] bond12 (unregistering): Released all slaves
[  430.410630][ T8240] net_ratelimit: 23 callbacks suppressed
[  430.410652][ T8240] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  430.525125][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  430.558159][T14469] block nbd2: server does not support multiple connections per device.
[  430.601884][T14469] block nbd2: shutting down sockets
[  430.630696][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  430.737073][T14478] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  430.741952][T10841] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  430.854045][T10841] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  430.929015][T14482] bond11: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  431.052659][T14482] bond11 (unregistering): Released all slaves
[  431.201096][T10841] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  431.312146][T10841] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  431.420346][ T8240] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  431.532687][T10833] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  431.552067][T14502] netlink: 'syz.1.2141': attribute type 4 has an invalid length.
[  432.324831][T14524] syzkaller0: entered promiscuous mode
[  432.324857][T14524] syzkaller0: entered allmulticast mode
[  432.645986][T14533] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  432.646017][T14533] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  432.646446][T14533] tipc: Resetting bearer <eth:syzkaller0>
[  433.115424][T14555] netlink: 'syz.3.2156': attribute type 1 has an invalid length.
[  433.194913][T14560] __nla_validate_parse: 2 callbacks suppressed
[  433.194935][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'.
[  433.383305][T14571] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2160'.
[  433.384769][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'.
[  433.384799][T14571] netlink: 'syz.2.2160': attribute type 1 has an invalid length.
[  433.488214][T14573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.584664][T14578] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  433.705808][T14581] gretap1: entered allmulticast mode
[  433.724677][T14581] bond13: (slave gretap1): making interface the new active one
[  433.725539][T14581] bond13: (slave gretap1): Enslaving as an active interface with an up link
[  433.972923][ T5632] Bluetooth: hci1: unexpected event for opcode 0x0000
[  434.211959][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'.
[  434.267834][T14617] netlink: 'syz.4.2174': attribute type 32 has an invalid length.
[  434.267862][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'.
[  434.314149][T14617] bond11: Setting coupled_control to off (0)
[  434.340522][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2176'.
[  434.444265][T14627] netlink: 'syz.4.2177': attribute type 12 has an invalid length.
[  434.581631][T14632] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  434.609602][T14634] netlink: 'syz.4.2180': attribute type 10 has an invalid length.
[  435.426240][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2188'.
[  435.451670][T10832] net_ratelimit: 30 callbacks suppressed
[  435.451722][T10832] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  435.561064][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  435.670595][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  435.673238][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'.
[  435.692482][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'.
[  435.696838][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'.
[  435.782141][T10832] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  435.900961][ T8235] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  436.011360][ T8240] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  436.031953][T14702] netlink: 'syz.4.2196': attribute type 49 has an invalid length.
[  436.121253][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  436.233434][T10830] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  436.341691][T10833] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  436.449657][T14720] netlink: 'syz.0.2200': attribute type 6 has an invalid length.
[  436.452874][T10841] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  437.725028][T14781] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  437.725078][T14781] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  437.725531][T14781] tipc: Resetting bearer <eth:syzkaller0>
[  438.050653][ T5632] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  438.050751][ T5632] Bluetooth: hci1: Injecting HCI hardware error event
[  438.053087][ T5621] Bluetooth: hci1: hardware error 0x00
[  438.243513][T14812] __nla_validate_parse: 10 callbacks suppressed
[  438.243537][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2219'.
[  438.347832][T14812] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2219'.
[  438.687561][T14834] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  438.775145][T14837] block nbd2: server does not support multiple connections per device.
[  438.775530][T14837] block nbd2: shutting down sockets
[  438.929221][T14839] syzkaller0: left promiscuous mode
[  438.929250][T14839] syzkaller0: left allmulticast mode
[  438.995781][T14839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2229'.
[  439.120488][T14847] netlink: 'syz.3.2233': attribute type 21 has an invalid length.
[  439.297382][T14856] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2234'.
[  439.312266][T14856] 8021q: VLANs not supported on ip6gre0
[  439.401638][T14864] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004
[  439.476066][T14870] netlink: 'syz.4.2237': attribute type 32 has an invalid length.
[  439.476094][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2237'.
[  439.521876][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2238'.
[  439.565952][T14870] bond12: option coupled_control: invalid value (10)
[  439.585967][T14870] bond12 (unregistering): Released all slaves
[  439.680485][T14877] xt_limit: Overflow, try lower: 268435456/134217728
[  439.793286][T14883] ovs-dp0: entered promiscuous mode
[  440.070588][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2247'.
[  440.129861][ T5621] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  440.136798][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'.
[  440.160933][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'.
[  440.162735][T14912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2250'.
[  440.276418][T14908] 8021q: adding VLAN 0 to HW filter on device bond3
[  440.279201][T14915] bond0: left promiscuous mode
[  440.279479][T14915] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  440.334434][T14915] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.358565][T14915] bond3: (slave bond0): making interface the new active one
[  440.370666][T14915] bond3: (slave bond0): Enslaving as an active interface with an up link
[  440.373759][ T5609] syz1: Port: 1 Link ACTIVE
[  440.401239][T14922] netlink: 'syz.4.2249': attribute type 39 has an invalid length.
[  440.460035][T14930] netlink: 'syz.4.2249': attribute type 39 has an invalid length.
[  440.534776][T14908] bond3 (unregistering): (slave bond0): Releasing active interface
[  440.587293][T14908] bond3 (unregistering): Released all slaves
[  440.642769][  T943] syz1: Port: 1 Link DOWN
[  440.692223][T14944] netlink: 'syz.1.2253': attribute type 2 has an invalid length.
[  440.698166][ T8235] net_ratelimit: 29 callbacks suppressed
[  440.698191][ T8235] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  440.761974][T14944] ¿: entered promiscuous mode
[  440.802691][ T8242] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  440.852411][T14952] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  440.921264][ T8240] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  441.042640][ T8240] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  441.330693][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  441.371579][T14965] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  441.448919][T14965] bond12 (unregistering): Released all slaves
[  441.570421][T10833] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  441.720167][ T8235] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  441.762173][T14993] netlink: 'syz.4.2266': attribute type 1 has an invalid length.
[  441.835985][T14993] 8021q: adding VLAN 0 to HW filter on device bond12
[  441.912711][T14993] bond12: (slave geneve2): making interface the new active one
[  441.942029][T14993] bond12: (slave geneve2): Enslaving as an active interface with an up link
[  442.000888][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  442.221732][  T999] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  442.332111][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  442.611517][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  442.728528][T15031] netlink: 'syz.3.2272': attribute type 1 has an invalid length.
[  442.897061][T15047] Bluetooth: hci0: unsupported parameter 5135
[  442.897085][T15047] Bluetooth: hci0: unsupported parameter 8192
[  442.897099][T15047] Bluetooth: hci0: unsupported parameter 5135
[  442.897112][T15047] Bluetooth: hci0: unsupported parameter 8192
[  443.267289][T15055] tipc: Resetting bearer <eth:syzkaller0>
[  443.292832][T15059] netlink: 'syz.1.2279': attribute type 1 has an invalid length.
[  443.384240][T15059] 8021q: adding VLAN 0 to HW filter on device bond12
[  443.585993][T15070] macvlan2: entered promiscuous mode
[  443.586020][T15070] macvlan2: entered allmulticast mode
[  443.925832][T15086] __nla_validate_parse: 9 callbacks suppressed
[  443.925856][T15086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2282'.
[  444.030647][T15086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2282'.
[  444.139527][T15092] x_tables: duplicate underflow at hook 2
[  444.209529][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'.
[  444.326824][T15104] netlink: 'syz.0.2290': attribute type 1 has an invalid length.
[  444.503949][T15104] macvtap1: entered allmulticast mode
[  444.567407][T15109] bond7: (slave bridge7): making interface the new active one
[  444.596541][T15109] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  444.635921][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2292'.
[  444.791660][T15121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2293'.
[  444.795894][T15116] team1: entered promiscuous mode
[  444.795974][T15116] team1: entered allmulticast mode
[  444.797280][T15116] 8021q: adding VLAN 0 to HW filter on device team1
[  445.230541][T15139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.249210][T15139] syzkaller0: entered promiscuous mode
[  445.249235][T15139] syzkaller0: entered allmulticast mode
[  445.357548][T15139] tipc: Resetting bearer <eth:syzkaller0>
[  445.374935][T15138] tipc: Resetting bearer <eth:syzkaller0>
[  445.457856][T15138] tipc: Disabling bearer <eth:syzkaller0>
[  445.738011][T15143] syz.2.2301 (15143) used obsolete PPPIOCDETACH ioctl
[  445.738050][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  445.742343][ T8236] net_ratelimit: 49 callbacks suppressed
[  445.742403][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  445.742533][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  445.851288][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  445.851338][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  445.960394][T10840] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  445.960437][T10840] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  446.070988][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  446.071042][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  446.085519][T15173] syzkaller1: entered promiscuous mode
[  446.085583][T15173] syzkaller1: entered allmulticast mode
[  446.281653][T10840] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  446.281702][T10840] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  446.400347][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'.
[  446.400516][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'.
[  446.453499][ T8239] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  446.453586][ T8239] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.453634][ T8239] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  446.453671][ T8239] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  446.956662][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'.
[  447.036335][T15206] xt_hashlimit: size too large, truncated to 1048576
[  447.058975][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2316'.
[  447.093163][T15209] netlink: 'syz.3.2313': attribute type 10 has an invalid length.
[  447.146650][T15209] 8021q: adding VLAN 0 to HW filter on device team0
[  447.162489][T15209] bond0: (slave team0): Enslaving as an active interface with an up link
[  447.456101][T15244] netlink: 'syz.0.2320': attribute type 1 has an invalid length.
[  447.700845][T15246] 8021q: adding VLAN 0 to HW filter on device bond9
[  447.758658][T15246] bond8: (slave bond9): making interface the new active one
[  447.806472][T15246] bond8: (slave bond9): Enslaving as an active interface with an up link
[  447.996375][T15244] bond8: (slave gretap1): Enslaving as a backup interface with an up link
[  448.031271][T15258] 8021q: adding VLAN 0 to HW filter on device bond8
[  448.370078][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  448.584830][T15297] bond13: option lacp_rate: invalid value (128)
[  448.635268][T15297] bond13 (unregistering): Released all slaves
[  448.961203][T15321] __nla_validate_parse: 1 callbacks suppressed
[  448.961229][T15321] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2331'.
[  448.961808][T15323] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2331'.
[  449.023449][T15324] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2333'.
[  449.201148][T15333] netlink: 'syz.1.2336': attribute type 1 has an invalid length.
[  449.283043][T15333] bond13: (slave veth1): Enslaving as an active interface with a down link
[  449.306921][T15333] bond13: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  449.479433][T15341] block nbd0: reconnected socket
[  449.496885][T15341] netlink: 'syz.0.2338': attribute type 9 has an invalid length.
[  449.571277][ T5621] block nbd0: Receive control failed (result -32)
[  449.884975][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  449.885040][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  450.070762][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  450.070839][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  450.157595][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  450.157661][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'.
[  450.205043][T15374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2346'.
[  450.830526][ T8236] net_ratelimit: 58 callbacks suppressed
[  450.830549][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  450.830588][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  451.014986][T15403] 8021q: adding VLAN 0 to HW filter on device bond3
[  451.045763][T15407] gretap0: entered promiscuous mode
[  451.065892][T15407] gretap0: left promiscuous mode
[  451.097843][T15413] syzkaller0: entered promiscuous mode
[  451.097945][T15413] syzkaller0: entered allmulticast mode
[  451.140213][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  451.140263][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.144898][T15418] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  451.270766][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.270980][T10840] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  451.380600][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  451.380649][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.468998][T15432] netlink: 'syz.1.2360': attribute type 1 has an invalid length.
[  451.511899][ T8236] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  451.511936][ T8236] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.556705][T15432] veth7: entered allmulticast mode
[  451.579564][T15432] bond14: (slave veth7): Enslaving as an active interface with a down link
[  451.633959][T15438] bond14: (slave veth0_to_bond): making interface the new active one
[  451.636254][T15438] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  451.838974][T15444] x_tables: duplicate underflow at hook 2
[  452.221152][T15462] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  452.297958][T15471] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  452.346442][T15471] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  452.630233][T15493] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  452.630286][T15493] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  452.630774][T15493] tipc: Resetting bearer <eth:syzkaller0>
[  452.742205][T15496] erspan0: entered promiscuous mode
[  452.742419][T15496] vlan3: entered promiscuous mode
[  453.396473][ T8239] syzkaller0: tun_net_xmit 76
[  453.397951][ T8239] syzkaller0: tun_net_xmit 48
[  453.411090][  T943] syzkaller0: tun_net_xmit 76
[  453.434934][T15501] syzkaller0: create flow: hash 396451556 index 0
[  453.450554][ T5609] syzkaller0: tun_net_xmit 76
[  453.451885][ T8430] syzkaller0: tun_net_xmit 76
[  453.621456][T15501] syzkaller0 (unregistered): delete flow: hash 396451556 index 0
[  453.809080][T15512] bridge15: the hash_elasticity option has been deprecated and is always 16
[  453.809110][T15512] bridge15: entered allmulticast mode
[  454.008353][T15528] __nla_validate_parse: 21 callbacks suppressed
[  454.008379][T15528] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2388'.
[  454.125857][T15532] netlink: 'syz.3.2389': attribute type 1 has an invalid length.
[  454.215934][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2389'.
[  454.236675][T15534] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2390'.
[  454.450408][T15550] syzkaller0: entered promiscuous mode
[  454.450435][T15550] syzkaller0: entered allmulticast mode
[  454.695418][T15569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.117799][T15578] netlink: 'syz.3.2398': attribute type 1 has an invalid length.
[  455.240782][T15578] bond5: entered promiscuous mode
[  455.241386][T15578] 8021q: adding VLAN 0 to HW filter on device bond5
[  455.321315][T15580] macvtap0: entered allmulticast mode
[  455.547547][T15581] macvtap1: entered allmulticast mode
[  455.595377][T15578] bond5: (slave bridge16): making interface the new active one
[  455.595404][T15578] bridge16: entered promiscuous mode
[  455.597325][T15578] bond5: (slave bridge16): Enslaving as an active interface with an up link
[  455.850275][T10832] net_ratelimit: 64 callbacks suppressed
[  455.850299][T10832] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  455.850356][T10832] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  455.960005][   T87] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  455.960074][   T87] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  456.070073][ T8230] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  456.070120][ T8230] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  456.180331][ T8230] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  456.180383][ T8230] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  456.294179][T15609] syzkaller0: left promiscuous mode
[  456.294203][T15609] syzkaller0: left allmulticast mode
[  456.335941][T15609] bridge0: port 1(macsec2) entered blocking state
[  456.336290][T15609] bridge0: port 1(macsec2) entered disabled state
[  456.336444][T15609] macsec2: entered allmulticast mode
[  456.336463][T15609] bridge0: entered allmulticast mode
[  456.336582][T15609] bridge0: entered promiscuous mode
[  456.354442][T15609] macsec2: left allmulticast mode
[  456.354468][T15609] bridge0: left allmulticast mode
[  456.399574][ T8433] bridge0: left promiscuous mode
[  456.400316][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  456.400357][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  456.443276][T15611] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2406'.
[  456.443388][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'.
[  456.512396][T15611] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2406'.
[  456.587829][T15618] netlink: 620 bytes leftover after parsing attributes in process `syz.2.2408'.
[  456.600622][T15618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2408'.
[  456.845932][T15628] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2411'.
[  456.944810][T15635] syzkaller0: entered promiscuous mode
[  456.944837][T15635] syzkaller0: entered allmulticast mode
[  457.552579][T15626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  457.717182][T15654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2418'.
[  458.493817][T15689] netlink: 'syz.0.2428': attribute type 3 has an invalid length.
[  458.627518][T15691] syzkaller0: entered promiscuous mode
[  458.627544][T15691] syzkaller0: entered allmulticast mode
[  458.726164][T15702] xt_hashlimit: size too large, truncated to 1048576
[  458.726422][T15702] xt_hashlimit: invalid rate
[  459.117116][T15724] __nla_validate_parse: 4 callbacks suppressed
[  459.117138][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'.
[  459.348124][T15732] xt_hashlimit: size too large, truncated to 1048576
[  459.732530][T15749] netlink: 'syz.0.2449': attribute type 4 has an invalid length.
[  459.870849][T15757] syzkaller1: entered promiscuous mode
[  459.870875][T15757] syzkaller1: entered allmulticast mode
[  459.933542][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'.
[  459.965840][T10843] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30
[  460.000557][T15765] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  460.699249][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'.
[  460.930065][  T977] net_ratelimit: 69 callbacks suppressed
[  460.930088][  T977] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.930123][  T977] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  461.040851][  T977] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  461.040903][  T977] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  461.109949][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2463'.
[  461.150562][T10843] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  461.150609][T10843] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  461.189382][T15819] 
[  461.191824][T15819] ======================================================
[  461.198905][T15819] WARNING: possible circular locking dependency detected
[  461.206131][T15819] syzkaller #0 Not tainted
[  461.210596][T15819] ------------------------------------------------------
[  461.217722][T15819] syz.4.2463/15819 is trying to acquire lock:
[  461.223829][T15819] ffff888025af62a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  461.233427][T15819] 
[  461.233427][T15819] but task is already holding lock:
[  461.240833][T15819] ffff888025af5d80 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480
[  461.251173][T15819] 
[  461.251173][T15819] which lock already depends on the new lock.
[  461.251173][T15819] 
[  461.260288][T10843] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  461.260403][T10843] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  461.276372][T15819] 
[  461.276372][T15819] the existing dependency chain (in reverse order) is:
[  461.285419][T15819] 
[  461.285419][T15819] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  461.294176][T15819]        blk_alloc_queue+0x544/0x690
[  461.299571][T15819]        __blk_mq_alloc_disk+0x194/0x390
[  461.305314][T15819]        nbd_dev_add+0x494/0xb60
[  461.310358][T15819]        nbd_init+0x168/0x1f0
[  461.315175][T15819]        do_one_initcall+0x250/0x870
[  461.320489][T15819]        do_initcall_level+0x10a/0x1a0
[  461.326092][T15819]        do_initcalls+0x59/0xa0
[  461.330972][T15819]        kernel_init_freeable+0x29d/0x3e0
[  461.336717][T15819]        kernel_init+0x22/0x1d0
[  461.341655][T15819]        ret_from_fork+0x514/0xb70
[  461.346865][T15819]        ret_from_fork_asm+0x1a/0x30
[  461.352177][T15819] 
[  461.352177][T15819] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  461.359416][T15819]        fs_reclaim_acquire+0x71/0x100
[  461.364906][T15819]        __kmalloc_cache_node_noprof+0x66/0x620
[  461.371166][T15819]        create_worker+0x112/0x7c0
[  461.376324][T15819]        workqueue_prepare_cpu+0xe4/0x170
[  461.382075][T15819]        cpuhp_invoke_callback+0x434/0x810
[  461.387927][T15819]        _cpu_up+0x2ce/0x5b0
[  461.392549][T15819]        cpu_up+0x1d2/0x220
[  461.397077][T15819]        cpuhp_bringup_mask+0xb2/0x1a0
[  461.402655][T15819]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  461.409020][T15819]        bringup_nonboot_cpus+0x17/0x30
[  461.414595][T15819]        smp_init+0x32/0x110
[  461.419330][T15819]        kernel_init_freeable+0x27f/0x3e0
[  461.425079][T15819]        kernel_init+0x22/0x1d0
[  461.429953][T15819]        ret_from_fork+0x514/0xb70
[  461.435104][T15819]        ret_from_fork_asm+0x1a/0x30
[  461.440423][T15819] 
[  461.440423][T15819] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  461.448218][T15819]        cpus_read_lock+0x42/0x160
[  461.454150][T15819]        static_key_slow_inc+0x12/0x30
[  461.459670][T15819]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  461.465961][T15819]        nbd_genl_foreach_sock+0x265/0x450
[  461.471926][T15819]        nbd_genl_reconfigure+0xbbb/0x1040
[  461.477754][T15819]        genl_family_rcv_msg_doit+0x233/0x340
[  461.483877][T15819]        genl_rcv_msg+0x614/0x7a0
[  461.488932][T15819]        netlink_rcv_skb+0x226/0x4a0
[  461.494252][T15819]        genl_rcv+0x28/0x40
[  461.498791][T15819]        netlink_unicast+0x7bd/0x940
[  461.504107][T15819]        netlink_sendmsg+0x813/0xb40
[  461.509415][T15819]        sock_sendmsg_nosec+0x14e/0x190
[  461.514988][T15819]        ____sys_sendmsg+0x54e/0x850
[  461.520307][T15819]        ___sys_sendmsg+0x2a5/0x360
[  461.525542][T15819]        __x64_sys_sendmsg+0x1b1/0x290
[  461.531028][T15819]        do_syscall_64+0x166/0x520
[  461.536170][T15819]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.542636][T15819] 
[  461.542636][T15819] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  461.550487][T15819]        __mutex_lock+0x19d/0x1550
[  461.555697][T15819]        nbd_queue_rq+0x373/0xff0
[  461.560746][T15819]        blk_mq_dispatch_rq_list+0x499/0x1990
[  461.566843][T15819]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  461.573807][T15819]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  461.580338][T15819]        blk_mq_run_work_fn+0x16c/0x300
[  461.585925][T15819]        process_scheduled_works+0xc3d/0x1630
[  461.592024][T15819]        worker_thread+0xa47/0xfb0
[  461.597163][T15819]        kthread+0x38b/0x480
[  461.601768][T15819]        ret_from_fork+0x514/0xb70
[  461.606913][T15819]        ret_from_fork_asm+0x1a/0x30
[  461.612229][T15819] 
[  461.612229][T15819] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  461.619473][T15819]        __mutex_lock+0x19d/0x1550
[  461.624622][T15819]        nbd_queue_rq+0xc1/0xff0
[  461.629580][T15819]        blk_mq_dispatch_rq_list+0x499/0x1990
[  461.635670][T15819]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  461.642551][T15819]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  461.649085][T15819]        blk_mq_run_work_fn+0x16c/0x300
[  461.654689][T15819]        process_scheduled_works+0xc3d/0x1630
[  461.660788][T15819]        worker_thread+0xa47/0xfb0
[  461.665931][T15819]        kthread+0x38b/0x480
[  461.670549][T15819]        ret_from_fork+0x514/0xb70
[  461.675701][T15819]        ret_from_fork_asm+0x1a/0x30
[  461.681042][T15819] 
[  461.681042][T15819] -> #1 (set->srcu){.+.+}-{0:0}:
[  461.688205][T15819]        __synchronize_srcu+0xc9/0x2f0
[  461.693729][T15819]        elevator_switch+0x1e8/0x7b0
[  461.699050][T15819]        elevator_change+0x2fa/0x480
[  461.704365][T15819]        elevator_set_default+0x375/0x440
[  461.710109][T15819]        blk_register_queue+0x3f3/0x4e0
[  461.715742][T15819]        __add_disk+0x6b8/0xdb0
[  461.720617][T15819]        add_disk_fwnode+0x100/0x3a0
[  461.725928][T15819]        nbd_dev_add+0x733/0xb60
[  461.730900][T15819]        nbd_init+0x168/0x1f0
[  461.735608][T15819]        do_one_initcall+0x250/0x870
[  461.740928][T15819]        do_initcall_level+0x10a/0x1a0
[  461.746467][T15819]        do_initcalls+0x59/0xa0
[  461.751347][T15819]        kernel_init_freeable+0x29d/0x3e0
[  461.757091][T15819]        kernel_init+0x22/0x1d0
[  461.761962][T15819]        ret_from_fork+0x514/0xb70
[  461.767106][T15819]        ret_from_fork_asm+0x1a/0x30
[  461.772418][T15819] 
[  461.772418][T15819] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  461.780439][T15819]        __lock_acquire+0x164c/0x2de0
[  461.785853][T15819]        lock_acquire+0x115/0x350
[  461.790913][T15819]        __mutex_lock+0x19d/0x1550
[  461.796148][T15819]        elevator_change+0x1af/0x480
[  461.801463][T15819]        elevator_set_none+0xb5/0x140
[  461.806857][T15819]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  461.813217][T15819]        nbd_start_device+0x189/0xb30
[  461.818620][T15819]        nbd_genl_connect+0x167d/0x1cd0
[  461.824192][T15819]        genl_family_rcv_msg_doit+0x233/0x340
[  461.830296][T15819]        genl_rcv_msg+0x614/0x7a0
[  461.835343][T15819]        netlink_rcv_skb+0x226/0x4a0
[  461.840661][T15819]        genl_rcv+0x28/0x40
[  461.845189][T15819]        netlink_unicast+0x7bd/0x940
[  461.850509][T15819]        netlink_sendmsg+0x813/0xb40
[  461.855814][T15819]        sock_sendmsg_nosec+0x14e/0x190
[  461.861393][T15819]        ____sys_sendmsg+0x54e/0x850
[  461.866707][T15819]        ___sys_sendmsg+0x2a5/0x360
[  461.871934][T15819]        __x64_sys_sendmsg+0x1b1/0x290
[  461.877431][T15819]        do_syscall_64+0x166/0x520
[  461.882613][T15819]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.889058][T15819] 
[  461.889058][T15819] other info that might help us debug this:
[  461.889058][T15819] 
[  461.899303][T15819] Chain exists of:
[  461.899303][T15819]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51
[  461.899303][T15819] 
[  461.913078][T15819]  Possible unsafe locking scenario:
[  461.913078][T15819] 
[  461.920576][T15819]        CPU0                    CPU1
[  461.926022][T15819]        ----                    ----
[  461.931411][T15819]   lock(&q->q_usage_counter(io)#51);
[  461.936828][T15819]                                lock(fs_reclaim);
[  461.943354][T15819]                                lock(&q->q_usage_counter(io)#51);
[  461.951279][T15819]   lock(&q->elevator_lock);
[  461.955891][T15819] 
[  461.955891][T15819]  *** DEADLOCK ***
[  461.955891][T15819] 
[  461.964052][T15819] locks held by syz.4.2463/15819: 6, last CPU#0:
[  461.970498][T15819]  #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  461.978863][T15819]  #1: ffffffff902b8c60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  461.987874][T15819]  #2: ffff8880273069c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  461.999307][T15819]  #3: ffff8880273068d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  462.010315][T15819]  #4: ffff888025af5d80 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480
[  462.020979][T15819]  #5: ffff888025af5db8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  462.031892][T15819] 
[  462.031892][T15819] stack backtrace:
[  462.037805][T15819] CPU: 0 UID: 0 PID: 15819 Comm: syz.4.2463 Not tainted syzkaller #0 PREEMPT(full) 
[  462.047293][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  462.057374][T15819] Call Trace:
[  462.060676][T15819]  <TASK>
[  462.063634][T15819]  dump_stack_lvl+0xe8/0x150
[  462.068263][T15819]  print_circular_bug+0x2e2/0x300
[  462.073319][T15819]  check_noncircular+0x12f/0x150
[  462.078291][T15819]  __lock_acquire+0x164c/0x2de0
[  462.083176][T15819]  lock_acquire+0x115/0x350
[  462.087710][T15819]  ? elevator_change+0x1af/0x480
[  462.092685][T15819]  __mutex_lock+0x19d/0x1550
[  462.097317][T15819]  ? elevator_change+0x1af/0x480
[  462.102279][T15819]  ? rcu_is_watching+0x16/0xb0
[  462.107081][T15819]  ? elevator_change+0x1af/0x480
[  462.112047][T15819]  ? __pfx___mutex_lock+0x10/0x10
[  462.117108][T15819]  ? enable_work+0x17f/0x230
[  462.121743][T15819]  ? lockdep_hardirqs_on+0x7b/0x110
[  462.126982][T15819]  ? __cancel_work_sync+0xf8/0x110
[  462.132131][T15819]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  462.137621][T15819]  elevator_change+0x1af/0x480
[  462.142417][T15819]  elevator_set_none+0xb5/0x140
[  462.147294][T15819]  ? __pfx_elevator_set_none+0x10/0x10
[  462.152784][T15819]  ? xa_load+0x1db/0x210
[  462.157145][T15819]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  462.162995][T15819]  ? kernfs_add_one+0xfc/0x6f0
[  462.167842][T15819]  ? nbd_start_device+0x17d/0xb30
[  462.172903][T15819]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  462.179181][T15819]  ? sysfs_add_file_mode_ns+0x258/0x300
[  462.184774][T15819]  nbd_start_device+0x189/0xb30
[  462.189661][T15819]  ? device_create_file+0xf4/0x1b0
[  462.194885][T15819]  nbd_genl_connect+0x167d/0x1cd0
[  462.199938][T15819]  ? __pfx_nbd_genl_connect+0x10/0x10
[  462.205339][T15819]  ? rcu_is_watching+0x16/0xb0
[  462.210145][T15819]  ? __nla_parse+0x40/0x60
[  462.214603][T15819]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  462.220977][T15819]  genl_family_rcv_msg_doit+0x233/0x340
[  462.226564][T15819]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  462.232670][T15819]  ? __lock_acquire+0x747/0x2de0
[  462.237641][T15819]  genl_rcv_msg+0x614/0x7a0
[  462.242178][T15819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.247242][T15819]  ? __pfx_nbd_genl_connect+0x10/0x10
[  462.252646][T15819]  netlink_rcv_skb+0x226/0x4a0
[  462.257451][T15819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  462.262512][T15819]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  462.267891][T15819]  ? down_read+0x2be/0x330
[  462.272346][T15819]  genl_rcv+0x28/0x40
[  462.276361][T15819]  netlink_unicast+0x7bd/0x940
[  462.281167][T15819]  netlink_sendmsg+0x813/0xb40
[  462.285965][T15819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.291283][T15819]  ? apparmor_socket_sendmsg+0x98/0x360
[  462.296855][T15819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.302165][T15819]  sock_sendmsg_nosec+0x14e/0x190
[  462.307237][T15819]  ____sys_sendmsg+0x54e/0x850
[  462.312036][T15819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.317359][T15819]  ? import_iovec+0x73/0xa0
[  462.321893][T15819]  ___sys_sendmsg+0x2a5/0x360
[  462.326601][T15819]  ? __lock_acquire+0x747/0x2de0
[  462.331561][T15819]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.336794][T15819]  ? futex_wait+0x2a2/0x390
[  462.341367][T15819]  ? __fget_files+0x2a/0x420
[  462.345989][T15819]  ? __fget_files+0x3a2/0x420
[  462.350704][T15819]  __x64_sys_sendmsg+0x1b1/0x290
[  462.355684][T15819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  462.361184][T15819]  do_syscall_64+0x166/0x520
[  462.365826][T15819]  ? trace_irq_disable+0x3b/0x140
[  462.370879][T15819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.376971][T15819]  ? clear_bhb_loop+0x70/0xc0
[  462.381687][T15819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.387610][T15819] RIP: 0033:0x7fe24919e159
[  462.392051][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.411688][T15819] RSP: 002b:00007fe2473f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.420145][T15819] RAX: ffffffffffffffda RBX: 00007fe249426090 RCX: 00007fe24919e159
[  462.428149][T15819] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 000000000000000a
[  462.436153][T15819] RBP: 00007fe24923506b R08: 0000000000000000 R09: 0000000000000000
[  462.444154][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.452152][T15819] R13: 00007fe249426128 R14: 00007fe249426090 R15: 00007ffc40d3d738
[  462.460157][T15819]  </TASK>
[  462.473302][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  462.473589][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  462.522797][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'.
[  462.522836][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'.
[  462.556116][T10832] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  462.556366][T10832] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  462.556412][T10832] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  462.556978][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'.
[  462.557064][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'.
[  462.565959][T10832] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  462.666097][ T5632] block nbd2: Receive control failed (result -32)
[  462.666232][ T5621] block nbd2: Receive control failed (result -32)
[  466.020585][   T12] net_ratelimit: 62 callbacks suppressed
[  466.020611][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  466.020642][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  466.130003][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  466.130045][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  466.250696][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  466.270361][ T8230] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  466.360414][  T977] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  466.380208][ T8230] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  466.470412][ T8230] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  466.490440][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  471.030491][T10843] net_ratelimit: 81 callbacks suppressed
[  471.030516][T10843] bond5: (slave ip6gretap2): failed to get link speed/duplex
[  471.120410][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  471.140050][   T12] bond5: (slave ip6gretap2): failed to get link speed/duplex