last executing test programs:

12.2552348s ago: executing program 2 (id=2066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'caif0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r9, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x30}, 0x440e0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010)
clock_gettime(0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdffffff", @ANYRES16=r11, @ANYBLOB="010026bd7000fedbdf2519000000200001801400020069705f767469300000000000000000000800030007000000"], 0x34}, 0x1, 0x0, 0x0, 0x22004801}, 0x20000000)

9.210001883s ago: executing program 2 (id=2085):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001780)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0], 0x0, 0xca, &(0x7f0000001840)=[{}, {}], 0x10, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000001900)}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000240)="a4be1c0d1d", 0x5}, {&(0x7f00000002c0)="c2de1fa93ba9a1f5ea91be6396448d8a8ea84ab32a8e08f90d28e700542cea079acfa63feaa5124df838a452c7151a170d387ffffa22c7e684d19ed1f5", 0x3d}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000001a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast2}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x5e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ssrr={0x89, 0xf, 0x76, [@multicast2, @local, @rand_addr=0x64010100]}, @ssrr={0x89, 0x13, 0xd1, [@rand_addr=0x64010100, @local, @multicast1, @broadcast]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x8, [@broadcast, @rand_addr=0x64010100, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ssrr={0x89, 0x7, 0x59, [@multicast1]}, @ssrr={0x89, 0x13, 0x61, [@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp={0x44, 0x8, 0x63, 0x0, 0x4, [0x55]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0xfc}]}}}], 0xb8}}], 0x1, 0xc041)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020e0c5030000000000000000020000040000000009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r12)

8.703128803s ago: executing program 2 (id=2090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', <r4=>0x0, 0x2f, 0x4, 0x7, 0x6, 0x28, @local, @private2, 0x700, 0x7800, 0x4fb, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'erspan0\x00', <r5=>0x0, 0x20, 0x10, 0xf041, 0xc6, {{0xa, 0x4, 0x3, 0x2, 0x28, 0x68, 0x0, 0x6, 0x29, 0x0, @remote, @remote, {[@rr={0x7, 0x13, 0xe5, [@broadcast, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1b}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x8080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.492772903s ago: executing program 2 (id=2093):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x5}]}}}]}, 0x3c}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='*h|N', @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900090000000d0000000a00060008021100000100000a000600ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10)
getsockname(r6, &(0x7f00000003c0)=@ax25={{0x3, @default}, [@default, @null, @remote, @remote, @netrom, @netrom, @netrom, @default]}, &(0x7f0000000440)=0x80)

6.426310104s ago: executing program 2 (id=2099):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
gettid()
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="24002f800c0002000000000007ffffff08000100000000"], 0x40}}, 0x4000040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "09ea050d"}]}], {0x14}}, 0x70}}, 0x40)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000000c0)={r3, 0x4, 0x4, "a00e72f39fa6c3c8a5022f10171aace4415a479fc7053c790ff33904b0938b55d9cc9c15da5d53563985daf9bf65497029cd33486e1d7beb308ace006eed114da0bfb1905c8deba76beaee647283d8a365837a5053ef265939e2922a7742a19499b5d47882c59696af79c4"})
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

5.779846826s ago: executing program 0 (id=2109):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="5bf49350170a1da2a93abeb4bc29f55cdccbc57ad39ddf56a7d4527f1df690d7df576f8e1713f69bf46102a42c2aa4140e362eb3c074e0000348972139f939a9cd4d00da5578fe5adde9d42ce3a8b51e177721048469c49f474dd2809849ad2f2feefbca6c059d842e43b9e93cdbb93cabbdb9a5c98849f113029bbe5f4a06a202b2aebc740850ec11a96475e7449c2da9b325c409e6e3ffa7f3d523ebefcc7a46075d65257c9a6d66ef9bf2891f60f779b616d497f4fe779bfb5b1a9f936d4bf1d7ecb41a08b506b1a5991db640415ea12b830e512e21a14279", 0xfe21, 0x60008010, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c)

4.815023397s ago: executing program 0 (id=2113):
r0 = socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x4000002}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4)
sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x18, 0x1000c005}, 0x24000052) (async)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) (async)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

2.655450895s ago: executing program 3 (id=2115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11e18be7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020e0c5030000000000000000020000040000000009000000"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

2.542439984s ago: executing program 3 (id=2116):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002fc0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003000)={0x20, r1, 0x225, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x34008084}, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x4)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x13, r3, 0x80c3e000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x20c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x32}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfb8}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x8000000)
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x0)
poll(&(0x7f0000000000)=[{r4, 0x9081}], 0x1, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000084060100ec000000000100000d"], &(0x7f0000000f40)=""/4079, 0x3a, 0xfef, 0x6, 0x4}, 0x28)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000903000000797a30000000000900020073797a3200000000430000001c0a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000640), &(0x7f0000000680)=0xe)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x1d, r8}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0200000084010000a791000000070000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0300002001000000020000e02501000006897c5243269a3c4fd178920f1f7fb9609a9b30b4f3765774b1787c2eb25c440aa03882e717f4686920abe9b1ba02e0e444695db0cd5c2e0d3b968cd812030e"], 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0)

2.537974001s ago: executing program 0 (id=2119):
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.939536983s ago: executing program 3 (id=2122):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611100000000000006000000feffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x28)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x28, 0x8, 0x70bd2d, 0x25dfdbfc, {0x11}, [@typed={0x4, 0x9}, @nested={0x20, 0x9b, 0x0, 0x1, [@typed={0x6, 0x4e, 0x0, 0x0, @str=']\x00'}, @nested={0x4, 0x14e}, @nested={0x4, 0x83}, @typed={0xc, 0xba, 0x0, 0x0, @u64=0x9}]}]}, 0x38}}, 0x40000)

1.938997645s ago: executing program 4 (id=2123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x804)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)

1.919157892s ago: executing program 0 (id=2124):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r4 = gettid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000180)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000001c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10814)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@RTM_GETMDB={0x18, 0x56, 0x0, 0x70bd25, 0x25dfdbfc, {0x7, r10}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4020034}, 0x20000000)
connect$nfc_llcp(r2, &(0x7f0000000400)={0x27, r8, 0xffffffffffffffff, 0x5, 0x65, 0x3, "a3543eaae082222c6c5321f3443540586c44bd55673b8f5ff42a55e2a948a44769c803e7d2c3353cf8c76be2752b2b5fc264cc3f7f892d5c5aa5e9681ff80f", 0xe}, 0x60)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_USERDATA={0x76, 0x8, "b1cf25eb47b193476a2a75895cc7acd4febecd47bf4e78dfb1f0dd86f63eb9c809ad3125665f929099c6315a0b71aaf32709d5125252bfad97a37a2c2aef1f57011863ed1ab2522c9b35da72dfc69da0a4d60c7f083f8106c8340108022c13d778ffdc5a2a55d34321e30d1029339ab150c9"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x88c0}, 0x0)
sendmsg$rds(r1, &(0x7f0000000c00)={&(0x7f0000000640)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/253, 0xfd}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/251, 0xfb}], 0x4, &(0x7f0000000b40)=[@fadd={0x58, 0x114, 0x6, {{0x5a, 0x105}, &(0x7f0000000a40), &(0x7f0000000a80)=0x9, 0x7, 0x2, 0xbe, 0x1, 0x8, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x10001, 0x9}, &(0x7f0000000ac0)=0x5, &(0x7f0000000b00), 0x8c95, 0x9, 0xffffffffffffffff, 0x6, 0x10, 0x3}}], 0xb0, 0x8040}, 0x4f49274d12d89294)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000d40)={<r11=>r3, &(0x7f0000000c40)='./cgroup/syz1\x00', 0x4002, &(0x7f0000000c80)={@_ha_fsid={[0x168000, 0x7]}, {0x7b4, 0xcb, 0x8, 0x10c}}, 0xff, &(0x7f0000000cc0), &(0x7f0000000d00)=0x1})
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000d80)={<r12=>0x0, 0x9b6, 0x1, 0x10}, &(0x7f0000000dc0)=0x10)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000e00)={r12, 0x2, 0xd4c, 0x1, 0x800, 0xb}, 0x14)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000e40)={r12, 0x8001}, 0x8)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40005)
sendmsg$802154_dgram(r11, &(0x7f0000001080)={&(0x7f0000000fc0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000001040)={&(0x7f0000001000)="7315ca45934087f2ca42fa45847b7a8596ec677fcf9ca999b2b331d79feafabc3412cd", 0x23}, 0x1, 0x0, 0x0, 0x80}, 0xc3fbb6e4f3c26efd)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r2)
sendmsg$NL80211_CMD_STOP_AP(r14, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r15, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001200)=r12, 0x4)
sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000840)

1.826873346s ago: executing program 2 (id=2125):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fc0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) (async)
r2 = socket(0x21, 0xa, 0xf)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)

1.743331512s ago: executing program 3 (id=2126):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001007c4a8e00000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000054000000060a01040000000000000000010000002c0004802800018008000100666962001c00028008000240000000010800034000000022080001400000000908000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=<r2=>r1], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x1c}}, 0x20000000)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="0a000000010001", 0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a3000000000f4000000030a01010000000000000000010000830900010073797a31000000000900030073797a3000000000c7000c0066af8c7579b479006cdb5ba022d4d04f17625ed56999c07c67b294608b6b8ec8a77ebaca9686cd1f3915bdbb535cca539317fc212792913b15c150e97e70d240d376073097a2236eeb2bf3c502e85fd0ac6c3b8d4588034161817d4e33155610336aae808b531bd9e9f97698b485c9ffbd7a378bc229343f392efbea172da1a3a65886a6284d04f7a9005d5b858726e1905607e8a019490635d737c9345e0f0eecb824f8103091671fecc708c2c8c9bb473a0f4bb491017e7166493a1b9bb682c09b5d778cbcd9f9b92a00d8010000060a010400000000000000000100000008000b4000000000b0010480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000780101800c00010062697477697365006801028008000340000000044401048038000280d2caf4bc458145ded00900020073797a300000000008000180fffffffc080003400020000308000180fffffffb08000180fffffffc08000180fffffffcd0000100fde55ba9871ff76e539971b1f5c76d628ff72e42ef8db75b5df0cf8cd3cec588e8be6a295dd87c88e8f4107c415c2125b07a559b7450b2d6ed5aa8e25b0954babde214c81e8cc5d98f8cbab3609eeb79b4b330160a6fb63175c506f5799271d56b46d539679816659c5d6a75066a77e44d2e5f3c74e5083f200b58ad4c3af8c1f4723286fb81cc255cd20db9f40e186587ee87762e51a1852d34fe19da8fd110790cca0dd1d12e13d2048717615ac539fdbea42f80ece9382a54d8e3c29d747655c7e15d608906e3cefe9dd636000100e2dcaad3ee6607eb695774d5df32cd98860aacfb8966fc026bf9428466471bf044e310a8a230e4b0b2faffe1b352549e83b400000800024000000012080006400000000108000780040001000900010073797a3000000000140000001100010000000000000000000700000aecf4ca96d43d5f8e3e522d0e4a6cf7f0fc41148dd59b8c764de24f3ba863d936a046f9c0cb366fa9d388cb65a09c962ea0c0d4", @ANYBLOB="a5da11e13bdf2a9a24e022dbbed6a6de9f28f772c2234bf8a09ed7bac100a0334d04af4e9a6755710240367f3208e83cef9ea6a48614944d16b46121db7397e7781182eae50212923bcd819ce0efb8c781c0d1031bcb64846373c0ce7f6427534576677b23c7e81713a125dfba7590a8c0c1f5bbebe478ba3a139b42333c331a8193c4283883648e98be51c82c2da532f7fe8592c1", @ANYRES16=r4, @ANYRESOCT=r7, @ANYRES32=r8], 0x314}}, 0x48004)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x86a103, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = socket(0x21, 0x3, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0xc000)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0xe, 0x3}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0)

1.741865535s ago: executing program 4 (id=2127):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1ac, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x44, 0x1, [@m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x10c, 0x1, [@m_ctinfo={0x108, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xd4, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e3"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.683846021s ago: executing program 1 (id=2128):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)

1.526987889s ago: executing program 4 (id=2129):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b50200000008126100c6d6000000"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000000280), 0x0}, 0x20)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r1 = socket$kcm(0x23, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r1, 0x800)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e4f5256b1e4344d50a944ff67347cff6127e6ef12", 0x17}], 0x1}], 0x1, 0x40800)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x14000, 0x0)
writev(r4, &(0x7f0000001400)=[{&(0x7f00000001c0)="c9f86269c44ce8cb08b3fe17d86c382d2e7ba679e159608fd077229c255003218308997cca732799d691a8352f72691fa25758f1adaa7b645ceb89960ba2bf63e1b13b2b2723eb068210209adc1f2a63e308909e865ed773778829555bb723f57010051777b0586f71e111fb3946f2b95fb0a9fa8c70625da0f7b531dc0395859604cf594f94f67477f3edca403087ef04a19d513d0843bc4459813b67007847ee5b48", 0xa3}, {&(0x7f0000001380)="3abc2f49e8e936d24d503952e9b04640d7caf575eaf991af351eccd74a09ba3a2dad5c810d13870f24958aa2281c51267b1fdee3cc36176e0cb38349f4a2222e4315a64a954213c1c3ef8e8f1af06592ec", 0x51}], 0x2)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x40, 0xfffff801, 0x2, {{0x9, 0x4, 0x3, 0x3a, 0x24, 0x68, 0x0, 0x0, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, {[@end, @lsrr={0x83, 0x3, 0xcd}, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x3, [0x2]}, @noop]}}}}})
sendto$inet6(r5, &(0x7f0000000300)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0)
ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1})
ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000080))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x2, 0x10000003, 0x0, @local, @loopback={0x0, 0xffff888101827518}, 0x10, 0x20, 0x40001, 0x100}})
unshare(0x52000080)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000680)={&(0x7f0000000440), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8001, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10)

1.375021548s ago: executing program 0 (id=2130):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
socket(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
write$cgroup_subtree(r0, 0x0, 0x32600)

1.374584031s ago: executing program 3 (id=2131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020e0c5030000000000000000020000040000000009000000"], 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

977.313138ms ago: executing program 3 (id=2132):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000002900)=[{{&(0x7f0000002280)={0xa, 0x4e21, 0x10c8, @remote, 0x16}, 0x1c, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="2400000000000000291b000032000000ff040000000000000000a944f8a90001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x4c030)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
ioctl(r4, 0x8b32, &(0x7f0000000040))
r5 = socket(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a00018c500000e2fadbdf250a000000080100", @ANYRES32, @ANYBLOB], 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r7], 0x7c}}, 0x20000000)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000340))
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x4000000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800a00010071756575650000001400028008000440cef0ad73690585ff000000000900010073797a30000000000900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
unshare(0x20000400)
socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r11, &(0x7f0000000540)}, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r10)
getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

970.569308ms ago: executing program 1 (id=2133):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00'})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, 0x0, 0x4004850)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r2, 0x981, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2008810}, 0x14) (async)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c000cc00400020208000600030001001400030007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)='q', 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20040844)

638.655928ms ago: executing program 4 (id=2134):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x1403, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={<r1=>0x0, 0x81, 0x7}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={<r2=>r1, 0x88, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x8, @local, 0xffff58de}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x1, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000380)=0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r1, 0xa3000000, 0xfdbe, 0x8}, 0x10) (async)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={r2, 0x3, 0x400}, 0x8) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000440)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x2c) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000004c0)={<r4=>r2, 0x702, 0x3, 0xd1c}, &(0x7f0000000500)=0x10) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000540)=@nl, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/97, 0x61}, {&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000740)=""/135, 0x87}], 0x3, &(0x7f0000000840)=""/168, 0xa8}, 0x2000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000940)={<r5=>r2, 0xfff}, &(0x7f0000000980)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000009c0)=@assoc_id=r5, 0x4) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20000081) (async)
getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000c00)={<r9=>r4, 0x1}, &(0x7f0000000c40)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000c80)={r9, 0x1000}, 0x8) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000e40)={&(0x7f0000000cc0), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, r10, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xed5f, 0x43}}}}, [@NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1c}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000e80)=0x220, 0x4) (async)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000ec0)={@remote, @multicast2, 0x0, 0x8, [@dev={0xac, 0x14, 0x14, 0x42}, @remote, @loopback, @multicast1, @remote, @broadcast, @remote, @loopback]}, 0x30)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000f00)={r4, 0x1}, 0x8) (async)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r13, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x4004004)

638.416082ms ago: executing program 1 (id=2135):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
ioctl$FICLONE(r2, 0x40049409, r2)

462.567097ms ago: executing program 4 (id=2136):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7010040000000500000006000100050000000800e8ba1573ff0f00000f12e7ee14a109000200000008000b0000f6fee305ebdc216b63e6e28a5f7b0000000800a80a0000140008006d616373656330000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
listen(r0, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) (async)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x1f8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x84, 0x1, [@m_mirred={0x50, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x118, 0x1, [@m_ctinfo={0x114, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xdd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5f2b}}}]}]}]}}]}, 0x64}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5f2b}}}]}]}]}}]}, 0x64}}, 0x0)
r11 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r11, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r12, 0x6, 0x17, &(0x7f0000000040)=0x7, 0x4)

456.476328ms ago: executing program 1 (id=2137):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x378, 0xffffffff, 0xe8, 0x1d0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff], 'erspan0\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x5, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0x7}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0x0, 0xff000000, 0xffffffff], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@mcast2, @private1, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xff, 0x0, 0xff, 0xff], 'wg2\x00', 'geneve0\x00', {}, {}, 0x67, 0x4, 0x4, 0xc}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xa, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800100006000000010000000300000b0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814)
r6 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@deltclass={0xe4, 0x29, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0xfff3, 0x9}, {0x0, 0x7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xf}}}, @c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xfff3}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x2}}]}}, @c_atm={{0x8}, {0x58, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x42, 0x3, "feae63664e5cd1bbf4e43f7ee1893462f13041f85a9df204f01799dc69f39dcd01294bad4ad369cd76b10fb2537ed236b9c60df10bd7fe092c3cebf4f277"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xb}}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xb}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040010)

420.805727ms ago: executing program 0 (id=2138):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500800000001e12fa43097bd504", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)

211.265525ms ago: executing program 1 (id=2139):
bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r0=>0x0})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019500)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x80867000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x70, '\x00', r0, r1, 0x2, 0x1, 0x5}, 0x50)

163.647772ms ago: executing program 1 (id=2140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44010)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x4, 0x4}]}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x8}, 0x28)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0)

0s ago: executing program 4 (id=2141):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r1=>0x0, @rand_addr, @private}, &(0x7f0000000140)=0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x25, 0xd, @void}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000000)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500000000000000000f4006400010000060202020200020100", @ANYRES64=r2, @ANYRES32=r3], 0x2e)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0)

kernel console output (not intermixed with test programs):

87] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'.
[  143.133944][ T8207] netlink: 'syz.1.575': attribute type 8 has an invalid length.
[  143.141836][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'.
[  143.187239][ T8207] veth1_to_team: entered promiscuous mode
[  143.211683][ T8207] gretap0: entered promiscuous mode
[  143.235299][ T8207] veth1_to_team: left promiscuous mode
[  143.248057][ T8207] gretap0: left promiscuous mode
[  143.288385][ T8214] bond0: Error: Cannot enslave bond to itself.
[  143.477854][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'.
[  143.551699][ T8230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.584'.
[  143.968461][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'.
[  143.981241][ T8239] team0: Device wg2 is up. Set it down before adding it as a team port
[  144.036436][ T8250] netlink: 'syz.4.590': attribute type 4 has an invalid length.
[  144.051411][ T8250] netlink: 'syz.4.590': attribute type 1 has an invalid length.
[  144.074301][ T8250] netlink: 15506 bytes leftover after parsing attributes in process `syz.4.590'.
[  144.316932][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'.
[  144.624798][ T8289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.694410][ T6316] wlan1: Trigger new scan to find an IBSS to join
[  144.876780][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  146.263610][ T8278] kthread_run failed with err -4
[  146.416075][ T8299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.602'.
[  146.434890][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[  146.658420][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.839013][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.849853][ T8311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.932759][ T6309] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.970101][ T6309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.991586][ T6309] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.017899][ T6309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.043309][ T6309] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.063313][ T6309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.073685][ T6309] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  147.084363][ T6309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.413570][ T8350] macsec0: entered allmulticast mode
[  147.481618][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.508172][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.539317][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.591716][ T8351] macsec0: left allmulticast mode
[  147.737386][ T6311] wlan1: Trigger new scan to find an IBSS to join
[  147.742144][ T8361] __nla_validate_parse: 5 callbacks suppressed
[  147.742160][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  147.786918][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'.
[  147.796600][ T8361] netlink: 'syz.0.617': attribute type 18 has an invalid length.
[  147.804800][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  148.093445][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'.
[  148.166470][ T5625] block nbd0: Receive control failed (result -1)
[  148.242126][ T8378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.622'.
[  148.468367][ T8389] netlink: 'syz.4.627': attribute type 1 has an invalid length.
[  148.470041][ T8390] netlink: 'syz.2.625': attribute type 10 has an invalid length.
[  148.484991][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.625'.
[  148.525197][ T8390] dummy0: entered promiscuous mode
[  148.618102][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.642587][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.697940][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.707848][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.722067][ T8389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  148.736249][ T8389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.743521][ T8398] netlink: 'syz.1.629': attribute type 21 has an invalid length.
[  148.751720][ T8389] veth1_macvtap: left promiscuous mode
[  148.754773][ T8398] netlink: 'syz.1.629': attribute type 7 has an invalid length.
[  148.769934][ T8389] veth0_macvtap: left promiscuous mode
[  148.776753][ T8389] veth0_macvtap: entered promiscuous mode
[  148.783253][ T8389] veth1_macvtap: entered promiscuous mode
[  148.794526][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  148.802746][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  148.814407][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  148.828989][ T8389] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  148.838135][ T8389] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  148.845534][ T8389] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  148.852866][ T8389] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  148.884866][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.892054][ T6315] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.922430][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.929626][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.044763][ T6319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.083704][ T6319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.123287][ T6319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.160309][ T6319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.181847][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'.
[  149.208668][ T8414] netlink: 'syz.4.632': attribute type 4 has an invalid length.
[  149.253251][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.634'.
[  149.319207][ T8424] netlink: 1 bytes leftover after parsing attributes in process `syz.3.636'.
[  149.331899][ T8421] bond5: Unable to set down delay as MII monitoring is disabled
[  149.375428][ T8421] bond5 (unregistering): Released all slaves
[  149.419404][ T8424] netlink: 'syz.3.636': attribute type 29 has an invalid length.
[  149.600564][ T8442] xt_l2tp: missing protocol rule (udp|l2tpip)
[  149.665485][ T8448] netlink: 'syz.1.641': attribute type 14 has an invalid length.
[  150.018562][ T8466] netlink: 256 bytes leftover after parsing attributes in process `syz.4.649'.
[  150.437950][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.445503][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.628901][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.659623][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.695894][ T6316] wlan1: Trigger new scan to find an IBSS to join
[  150.860080][ T6316] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.891035][ T6316] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.971451][ T6316] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.007716][ T6316] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.149080][ T8495] xt_limit: Overflow, try lower: 324382443/0
[  151.157767][ T8501] netlink: 'syz.3.656': attribute type 13 has an invalid length.
[  151.165975][ T8501] netlink: 'syz.3.656': attribute type 17 has an invalid length.
[  151.298270][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.315964][ T8501] 8021q: adding VLAN 0 to HW filter on device team0
[  151.339912][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.402761][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.422541][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.456920][ T8501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  151.484055][ T8501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.525870][ T8501] veth1_vlan: left promiscuous mode
[  151.545833][ T8501] veth0_vlan: left promiscuous mode
[  151.551685][ T8501] veth0_vlan: entered promiscuous mode
[  151.561422][ T8501] veth1_vlan: entered promiscuous mode
[  151.575033][ T8501] veth1_macvtap: left promiscuous mode
[  151.582307][ T8501] veth0_macvtap: left promiscuous mode
[  151.588231][ T6315] wlan1: Creating new IBSS network, BSSID 26:85:cb:63:d2:d4
[  151.597759][ T8501] veth0_macvtap: entered promiscuous mode
[  151.620201][ T8501] veth1_macvtap: entered promiscuous mode
[  151.632326][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  151.662292][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  151.675101][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  151.691311][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  151.718388][ T8501] virt_wifi0: entered promiscuous mode
[  151.725009][ T8501] virt_wifi0: entered allmulticast mode
[  151.730920][ T8501] macsec1: left promiscuous mode
[  151.737870][ T8501] macsec1: left allmulticast mode
[  151.742941][ T8501] virt_wifi0: left allmulticast mode
[  151.755593][ T8501] batman_adv: batadv0: Interface activated: ipvlan2
[  151.765848][ T8501] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.780234][ T8501] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.797829][ T8501] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.838308][ T8501] 8021q: adding VLAN 0 to HW filter on device bond4
[  151.858495][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.880576][ T8512] netlink: 'syz.2.658': attribute type 8 has an invalid length.
[  151.908365][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.915596][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.017726][ T6319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.027167][ T6319] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  152.058451][ T8529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.254996][ T8519] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.287303][ T8519] 8021q: adding VLAN 0 to HW filter on device team0
[  152.349900][ T8519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.431687][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.445873][ T8519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.463284][ T8519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  152.474099][ T8519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  152.488179][ T8519] veth1_macvtap: left promiscuous mode
[  152.496541][ T8519] veth0_macvtap: left promiscuous mode
[  152.503976][ T8519] veth0_macvtap: entered promiscuous mode
[  152.510535][ T8519] veth1_macvtap: entered promiscuous mode
[  152.520917][ T8519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  152.528994][ T8519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  152.540772][ T8519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  152.549177][ T8519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  152.557667][ T8519] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  152.580030][ T8525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.606324][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.613464][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.633576][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.640764][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.675982][ T6319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.693114][ T6319] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  152.702518][ T6319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.711516][ T6319] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  152.722298][ T8518] bond0: (slave bond_slave_1): Releasing backup interface
[  152.734951][ T8529] syzkaller0: entered promiscuous mode
[  152.740757][ T8529] syzkaller0: entered allmulticast mode
[  152.883346][ T6319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.911634][ T6319] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  152.921162][ T6319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.947238][ T8555] __nla_validate_parse: 3 callbacks suppressed
[  152.947257][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'.
[  152.996530][ T6319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.020465][ T6319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.060202][ T8576] xt_ecn: cannot match TCP bits for non-tcp packets
[  153.127788][ T8569] bond1: entered promiscuous mode
[  153.146454][ T8569] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.216988][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'.
[  153.228061][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'.
[  153.240334][ T8585] netlink: 48 bytes leftover after parsing attributes in process `syz.1.672'.
[  153.258857][ T6319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.319480][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  153.834305][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'.
[  153.908384][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'.
[  153.923530][ T8626] nbd: nbd64 already in use
[  153.985384][ T8613] tap0: tun_chr_ioctl cmd 1074025677
[  154.017120][ T8613] tap0: linktype set to 778
[  154.240298][ T5627] udevd[5627]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  154.407279][ T8657] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.689'.
[  154.415104][ T8656] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  155.124091][ T8707] sctp: [Deprecated]: syz.0.697 (pid 8707) Use of int in maxseg socket option.
[  155.124091][ T8707] Use struct sctp_assoc_value instead
[  155.300480][ T8717] validate_nla: 8 callbacks suppressed
[  155.300494][ T8717] netlink: 'syz.2.699': attribute type 3 has an invalid length.
[  155.373855][ T8721] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:0
[  155.589644][ T8732] sit1: entered allmulticast mode
[  155.738189][ T8747] netlink: 'syz.3.708': attribute type 3 has an invalid length.
[  156.240166][ T8776] sctp: [Deprecated]: syz.2.717 (pid 8776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.240166][ T8776] Use struct sctp_sack_info instead
[  156.297983][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'.
[  156.395165][ T8785] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.437136][ T8781] bond5 (unregistering): Released all slaves
[  156.655853][ T8795] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  156.678481][ T8795] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  157.232153][ T8804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.724'.
[  157.306086][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'.
[  157.425055][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.570057][ T8829] bond5 (unregistering): Released all slaves
[  157.865027][ T8843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.088606][ T8856] __nla_validate_parse: 1 callbacks suppressed
[  158.088623][ T8856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.741'.
[  158.198724][ T8848] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  158.259437][ T8848] bond2 (unregistering): Released all slaves
[  158.723245][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.746280][ T8876] netlink: 124 bytes leftover after parsing attributes in process `syz.3.750'.
[  158.769127][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.814278][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.823662][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.835422][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.845027][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.855200][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.866155][ T8879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  158.991615][ T8856] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.047037][ T8892] geneve3: entered promiscuous mode
[  159.676572][   T29] audit: type=1804 audit(1778472231.456:10): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.765" name="/newroot/191/memory.events" dev="tmpfs" ino=997 res=1 errno=0
[  159.755208][   T29] audit: type=1800 audit(1778472231.456:11): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.765" name="memory.events" dev="tmpfs" ino=997 res=0 errno=0
[  159.800931][   T29] audit: type=1804 audit(1778472231.456:12): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.765" name="/newroot/191/memory.events" dev="tmpfs" ino=997 res=1 errno=0
[  159.859178][ T8933] netlink: 'syz.2.768': attribute type 7 has an invalid length.
[  160.127047][ T8937] vlan1: entered promiscuous mode
[  160.143183][ T8937] bridge0: entered promiscuous mode
[  160.494376][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.504190][ T8952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.524935][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.535022][ T6323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.967650][ T8957] geneve2: entered promiscuous mode
[  160.993940][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.018647][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.050673][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.075967][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.107170][ T8969] openvswitch: netlink: Missing key (keys=40, expected=100)
[  162.464412][ T9016] syzkaller0: entered promiscuous mode
[  162.512002][ T9016] syzkaller0: entered allmulticast mode
[  163.211673][ T9018] __nla_validate_parse: 33 callbacks suppressed
[  163.211692][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  163.258707][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  163.289313][ T9018] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  163.738146][ T9060] syzkaller0: entered promiscuous mode
[  163.759075][ T9060] syzkaller0: entered allmulticast mode
[  163.764327][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'.
[  163.845259][ T9071] xt_TCPMSS: Only works on TCP SYN packets
[  164.031126][ T9080] netlink: 936 bytes leftover after parsing attributes in process `syz.4.803'.
[  164.374136][ T9095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.806'.
[  165.289300][ T9131] netlink: 'syz.3.818': attribute type 3 has an invalid length.
[  165.308954][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'.
[  165.603291][ T9143] netlink: 'syz.4.819': attribute type 1 has an invalid length.
[  165.657605][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.819'.
[  165.759395][ T9143] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.767539][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  165.779808][ T9145] syzkaller0: entered promiscuous mode
[  165.787060][ T9145] syzkaller0: entered allmulticast mode
[  165.795666][ T9140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.851522][ T9152] syzkaller0: entered promiscuous mode
[  165.873870][ T9152] syzkaller0: entered allmulticast mode
[  165.899781][ T9143] netlink: 'syz.4.819': attribute type 1 has an invalid length.
[  165.977207][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  167.811060][ T9143] bond6: (slave batadv1): Opening slave failed
[  167.831480][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.839908][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.877555][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.912002][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.628727][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.834'.
[  168.742952][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'.
[  168.757221][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'.
[  168.918563][ T9219] netlink: 'syz.2.835': attribute type 14 has an invalid length.
[  168.983177][ T9215] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  169.046296][ T9223] netlink: 284 bytes leftover after parsing attributes in process `syz.0.838'.
[  169.156470][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'.
[  169.942646][ T9255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.846'.
[  170.039644][ T9255] syzkaller0: entered promiscuous mode
[  170.050042][ T9255] syzkaller0: entered allmulticast mode
[  170.058013][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'.
[  170.108688][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.116203][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.122576][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.128966][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.135357][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.141711][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.148087][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.154453][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.160814][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.167200][ T9255] tc action pedit 'at' offset 8666 out of bounds
[  170.173573][ T9255] TC_ACT_REPEAT abuse ?
[  170.194778][ T9269] hsr_slave_1 (unregistering): left promiscuous mode
[  170.675411][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'.
[  171.219710][ T9301] pim6reg1: entered allmulticast mode
[  171.434431][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[  171.516233][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'.
[  171.897174][ T9321] can: request_module (can-proto-3) failed.
[  172.021029][ T9338] xt_hashlimit: size too large, truncated to 1048576
[  172.049683][ T9340] xt_hashlimit: size too large, truncated to 1048576
[  172.846649][ T9376] vxcan2: entered allmulticast mode
[  172.937383][ T9385] netlink: 'syz.3.879': attribute type 28 has an invalid length.
[  172.940097][ T9383] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  172.962465][ T9383] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  173.680026][ T9417] __nla_validate_parse: 8 callbacks suppressed
[  173.680058][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.887'.
[  173.973109][ T9431] netlink: 'syz.2.891': attribute type 13 has an invalid length.
[  174.018886][ T9431] netlink: 'syz.2.891': attribute type 17 has an invalid length.
[  174.038250][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'.
[  174.442952][ T9431] 8021q: adding VLAN 0 to HW filter on device team0
[  174.468188][ T9431] dummy0: left promiscuous mode
[  174.500294][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.579334][ T9431] veth0_to_team: left promiscuous mode
[  174.592813][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.608143][ T9431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.632950][ T9431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.644908][ T9431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.691371][ T9431] veth1_macvtap: left allmulticast mode
[  174.700715][ T9431] veth0_macvtap: left promiscuous mode
[  174.710713][ T9431] veth0_macvtap: entered promiscuous mode
[  174.742703][ T9431] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.758093][ T9431] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.781466][ T9431] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.796676][ T9431] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.811664][ T9431] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  174.828162][ T9431] veth0_to_team: entered promiscuous mode
[  174.842285][ T9431] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.850343][ T9431] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  174.862321][ T9431] bond1: left promiscuous mode
[  174.868050][ T9431] bond1: left allmulticast mode
[  174.873421][ T9431] 8021q: adding VLAN 0 to HW filter on device bond1
[  174.884013][ T9431] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.895873][ T9431] 8021q: adding VLAN 0 to HW filter on device batadv1
[  174.907299][ T9431] geneve2: left promiscuous mode
[  175.011923][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.020060][ T6323] bridge0: port 1(bridge_slave_0) entered listening state
[  175.036439][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.044417][ T6323] bridge0: port 2(bridge_slave_1) entered listening state
[  175.121259][ T9462] pim6reg1: entered promiscuous mode
[  175.146912][ T9462] pim6reg1: entered allmulticast mode
[  175.170928][ T6305] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.198777][ T6305] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.217119][ T6305] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.226358][ T6305] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.489574][ T9482] bond5: Removing last ns target with arp_interval on
[  175.654853][ T6320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  175.814927][ T9489] veth3: entered promiscuous mode
[  177.409011][ T9458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  177.818129][ T9502] bond0: (slave wlan0): Error: Device can not be enslaved while up
[  178.066168][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  178.110958][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.914'.
[  178.395158][ T9537] netlink: 'syz.4.919': attribute type 32 has an invalid length.
[  178.398400][ T5746] IPVS: starting estimator thread 0...
[  178.447731][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'.
[  178.524359][ T9538] IPVS: using max 29 ests per chain, 69600 per kthread
[  178.569748][ T9537] bond7: Setting coupled_control to off (0)
[  178.618781][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'.
[  179.404263][ T9574] sctp: [Deprecated]: syz.1.926 (pid 9574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.404263][ T9574] Use struct sctp_sack_info instead
[  179.494103][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  181.635945][ T9597] veth0_to_batadv: entered allmulticast mode
[  181.659119][ T9597] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  181.682073][ T6306] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.697319][ T8479] IPVS: starting estimator thread 0...
[  181.761663][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.931'.
[  181.815359][ T9604] IPVS: using max 27 ests per chain, 64800 per kthread
[  181.870046][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.931'.
[  181.922926][ T9618] netlink: 'syz.2.935': attribute type 3 has an invalid length.
[  182.336505][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'.
[  182.615769][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  182.714593][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'.
[  182.983687][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[  183.204433][ T9662] netlink: 80 bytes leftover after parsing attributes in process `syz.1.949'.
[  183.229182][ T9662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'.
[  183.352342][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'.
[  183.512615][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  183.576593][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'.
[  184.749226][ T9731] netlink: 'syz.2.966': attribute type 4 has an invalid length.
[  184.805413][ T9731] netlink: 'syz.2.966': attribute type 4 has an invalid length.
[  185.019439][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.026763][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.098031][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.112322][ T9731] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.274023][ T6307] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.328456][ T6307] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.356308][ T6307] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.384097][ T6307] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.415159][ T6307] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.463924][ T6307] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.508727][ T6307] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.552270][ T6307] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.825224][ T9818] __nla_validate_parse: 4 callbacks suppressed
[  186.825257][ T9818] netlink: 27 bytes leftover after parsing attributes in process `syz.2.989'.
[  186.868150][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'.
[  187.396844][ T9844] bond0: left promiscuous mode
[  187.409325][ T9844] bond_slave_0: left promiscuous mode
[  187.423007][ T9844] bond_slave_1: left promiscuous mode
[  187.458681][ T9844] xfrm0: left promiscuous mode
[  187.477704][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.997'.
[  187.497481][ T9844] xfrm0: left allmulticast mode
[  187.508295][ T9851] netlink: 'syz.2.998': attribute type 13 has an invalid length.
[  187.524797][ T9844] bond2: left promiscuous mode
[  187.540945][ T9844] bond3: left promiscuous mode
[  187.617344][ T9855] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  187.659124][ T9855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  188.065789][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'.
[  188.160881][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'.
[  188.261081][ T9873] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  188.301257][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.326883][ T9873] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1004'.
[  188.342195][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  188.372175][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  188.393710][ T9875] syzkaller1: entered promiscuous mode
[  188.402426][ T9875] syzkaller1: entered allmulticast mode
[  188.481421][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'.
[  188.539642][ T9875] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  189.382023][ T9919] netlink: 840 bytes leftover after parsing attributes in process `syz.0.1019'.
[  189.473246][ T9924] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  189.512566][ T9924] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  189.785916][ T9938] netlink: 'syz.2.1026': attribute type 30 has an invalid length.
[  190.452182][ T9970] netlink: 'syz.3.1032': attribute type 13 has an invalid length.
[  190.725517][ T9981] openvswitch: netlink: Missing valid actions attribute.
[  190.757590][ T9981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.360532][T10011] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.026767][ T9985] pim6reg1: entered allmulticast mode
[  193.367806][T10031] netlink: 'syz.4.1042': attribute type 10 has an invalid length.
[  193.418776][T10025] netlink: 'syz.4.1042': attribute type 10 has an invalid length.
[  193.445702][T10031] bond0: (slave dummy0): Releasing backup interface
[  193.479723][T10031] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.490415][T10031] team0: Failed to send options change via netlink (err -105)
[  193.505467][T10031] team0: Port device dummy0 added
[  193.532205][T10036] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  193.552713][T10025] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.590907][T10025] team0: Failed to send options change via netlink (err -105)
[  193.614084][T10025] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  193.635602][T10025] team0: Port device dummy0 removed
[  193.635923][T10048] __nla_validate_parse: 10 callbacks suppressed
[  193.635951][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'.
[  193.666682][T10025] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  193.689523][T10046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1047'.
[  193.731698][ T6308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.743140][T10041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.757944][ T6308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.802409][T10041] d: renamed from syzkaller0
[  193.831232][T10041] tipc: Disabling bearer <eth:syzkaller0>
[  194.147929][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  196.213870][ T5638] Bluetooth: hci3: command 0x0406 tx timeout
[  196.213927][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  196.220551][ T5639] Bluetooth: hci1: command 0x0406 tx timeout
[  196.517363][T10090] xfrm1: entered allmulticast mode
[  196.687838][T10094] : entered promiscuous mode
[  196.819307][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'.
[  196.875743][T10109] netlink: 'syz.2.1061': attribute type 1 has an invalid length.
[  196.902756][T10109] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1061'.
[  197.074746][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'.
[  197.162457][T10119] netlink: 'syz.0.1065': attribute type 1 has an invalid length.
[  197.361099][T10120] bond2: (slave veth7): Enslaving as an active interface with a down link
[  197.364320][T10123] netlink: 'syz.0.1065': attribute type 10 has an invalid length.
[  197.436378][T10123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'.
[  197.469545][T10119] bond2: (slave dummy0): making interface the new active one
[  197.518512][T10119] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  197.574394][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'.
[  197.584879][T10123] dummy0: entered promiscuous mode
[  197.605168][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'.
[  197.625250][T10123] bond2: (slave dummy0): Releasing active interface
[  197.804293][T10126] bond5 (unregistering): Released all slaves
[  198.383004][T10152] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  198.399119][T10152] netlink: 'syz.2.1075': attribute type 39 has an invalid length.
[  198.552841][ T5625] block nbd1: Receive control failed (result -32)
[  198.771532][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'.
[  199.160037][T10176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1080'.
[  199.478479][T10188] ieee802154 phy0 wpan0: encryption failed: -22
[  199.559191][T10181] geneve1: entered promiscuous mode
[  199.796499][T10198] SET target dimension over the limit!
[  200.025917][T10213] netlink: 'syz.4.1091': attribute type 10 has an invalid length.
[  200.054520][T10213] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1091'.
[  200.700582][T10234] xt_hashlimit: size too large, truncated to 1048576
[  200.882012][T10239] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  202.106121][T10259] netlink: 'syz.0.1100': attribute type 14 has an invalid length.
[  202.447970][T10282] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1103'.
[  202.498793][T10285] netlink: 'syz.2.1104': attribute type 3 has an invalid length.
[  202.523938][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'.
[  202.572234][T10285] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1104'.
[  202.907731][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'.
[  202.985100][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'.
[  203.030634][T10317] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1107'.
[  203.289444][T10328] IPVS: set_ctl: invalid protocol: 227 172.20.20.64:20004
[  203.394996][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'.
[  203.469840][T10339] netlink: 'syz.1.1114': attribute type 15 has an invalid length.
[  203.547340][T10335] team0: Port device veth9 added
[  203.730296][T10345] sctp: [Deprecated]: syz.4.1116 (pid 10345) Use of int in max_burst socket option deprecated.
[  203.730296][T10345] Use struct sctp_assoc_value instead
[  203.921235][T10356] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1119'.
[  204.385309][T10368] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  204.431283][T10370] dvmrp0: entered allmulticast mode
[  204.608524][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'.
[  204.615909][T10379] netlink: 'syz.2.1127': attribute type 10 has an invalid length.
[  204.632985][T10379] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.1127'.
[  204.817015][T10385] can: request_module (can-proto-5) failed.
[  205.185477][ T5627] udevd[5627]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  205.417307][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1136'.
[  205.778079][T10440] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1143'.
[  206.001156][T10450] dummy0: Caught tx_queue_len zero misconfig
[  206.027974][T10450] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1144'.
[  206.397504][T10459] syzkaller0: entered promiscuous mode
[  206.410297][T10459] syzkaller0: entered allmulticast mode
[  206.614769][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'.
[  206.816839][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'.
[  207.264922][T10479] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  207.495345][T10487] syzkaller0: entered promiscuous mode
[  207.510569][T10487] syzkaller0: entered allmulticast mode
[  207.903571][T10512] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1159'.
[  208.058649][T10517] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  208.084404][T10508] block nbd2: server does not support multiple connections per device.
[  208.094638][T10508] block nbd2: shutting down sockets
[  208.121748][T10517] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.206469][T10520] bond3: (slave veth3): Enslaving as an active interface with a down link
[  208.318537][T10517] bond3 (unregistering): (slave veth3): Releasing active interface
[  208.347444][T10517] bond3 (unregistering): Released all slaves
[  208.638368][T10542] openvswitch: netlink: Message has 496 unknown bytes.
[  208.658533][T10542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.259910][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'.
[  209.302569][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'.
[  209.324975][T10561] netlink: 'syz.3.1173': attribute type 10 has an invalid length.
[  209.382932][T10561] 8021q: adding VLAN 0 to HW filter on device team0
[  209.442896][T10561] bond0: (slave team0): Enslaving as an active interface with an up link
[  209.778972][T10578] 8021q: VLANs not supported on bond0
[  209.893984][T10580] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1179'.
[  211.073395][T10615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'.
[  211.429911][T10623] veth11: entered allmulticast mode
[  211.587388][T10624] veth11: entered allmulticast mode
[  211.869860][T10633] ip6t_srh: unknown srh match flags  4000
[  212.162185][T10654] netlink: 'syz.1.1198': attribute type 15 has an invalid length.
[  212.264276][T10655] bond3: option ad_user_port_key: invalid value (65535)
[  212.272284][T10655] bond3: option ad_user_port_key: allowed values 0 - 1023
[  212.292463][T10655] bond3 (unregistering): Released all slaves
[  213.500488][T10669] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.763299][T10669] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.768437][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1208'.
[  213.820953][T10694] netlink: 'syz.1.1209': attribute type 29 has an invalid length.
[  213.840209][T10698] netlink: 'syz.1.1209': attribute type 29 has an invalid length.
[  213.887916][T10694] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1209'.
[  213.984476][T10669] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.209865][T10669] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.405216][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1217'.
[  214.638815][T10724] syzkaller1: entered promiscuous mode
[  214.663848][T10724] syzkaller1: entered allmulticast mode
[  214.678724][T10734] netlink: 'syz.4.1218': attribute type 3 has an invalid length.
[  214.687284][T10734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.857246][T10737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1219'.
[  214.901604][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1221'.
[  214.976500][T10743] bond0: entered promiscuous mode
[  214.985683][T10743] bond_slave_0: entered promiscuous mode
[  214.994523][T10743] team0: entered promiscuous mode
[  215.001300][T10743] team_slave_0: entered promiscuous mode
[  215.010159][T10743] team_slave_1: entered promiscuous mode
[  215.026454][T10743] dummy0: entered promiscuous mode
[  215.049518][T10743] bond0: left promiscuous mode
[  215.055213][T10743] bond_slave_0: left promiscuous mode
[  215.061612][T10743] team0: left promiscuous mode
[  215.067443][T10743] team_slave_0: left promiscuous mode
[  215.075205][T10743] team_slave_1: left promiscuous mode
[  215.086253][T10743] dummy0: left promiscuous mode
[  215.141367][ T6323] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.243159][ T6323] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.283617][T10767] syzkaller0: entered promiscuous mode
[  215.324646][T10767] syzkaller0: entered allmulticast mode
[  215.332970][T10769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1222'.
[  215.363604][T10769] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1222'.
[  215.395443][ T6306] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.502928][ T6306] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.609225][T10779] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1228'.
[  215.839929][T10747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.901448][T10778] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  215.938212][T10778] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  216.086876][T10797] netlink: 'syz.2.1232': attribute type 2 has an invalid length.
[  216.100753][T10797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1232'.
[  216.534449][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.760066][T10819] netlink: 'syz.1.1237': attribute type 10 has an invalid length.
[  216.888218][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'.
[  217.101228][T10819] dummy0: entered promiscuous mode
[  217.116855][T10819] team0: Failed to send options change via netlink (err -105)
[  217.134500][T10819] team0: Port device dummy0 added
[  217.779316][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'.
[  219.153666][T10844] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  219.312993][T10854] netlink: 'syz.3.1244': attribute type 3 has an invalid length.
[  219.404653][T10854] block nbd3: NBD_DISCONNECT
[  219.409488][T10862] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.446772][T10862] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.486969][T10856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.548279][T10854] netlink: 'syz.3.1244': attribute type 1 has an invalid length.
[  220.332633][T10914] hmac(sha2: entered promiscuous mode
[  220.453359][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'.
[  220.467869][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'.
[  220.498707][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'.
[  220.556372][T10927] bond0: (slave wlan0): Enslaving as an active interface with an up link
[  220.755793][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'.
[  220.778788][T10928] 8021q: adding VLAN 0 to HW filter on device team0
[  220.877207][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.032584][T10928] veth0_to_team: left promiscuous mode
[  221.079232][T10928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.114504][T10928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.131242][T10928] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  221.206225][T10935] batadv0: entered promiscuous mode
[  221.220346][T10935] batadv0: entered allmulticast mode
[  221.250384][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.258410][ T6323] bridge0: port 1(bridge_slave_0) entered listening state
[  221.279809][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.287781][ T6323] bridge0: port 2(bridge_slave_1) entered listening state
[  221.614547][T10952] syzkaller0: entered promiscuous mode
[  221.622687][T10952] syzkaller0: entered allmulticast mode
[  221.722343][T10969] xt_hashlimit: size too large, truncated to 1048576
[  222.269779][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'.
[  222.617954][T11009] netlink: 'syz.4.1285': attribute type 1 has an invalid length.
[  222.628866][T11009] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1285'.
[  224.357717][T11012] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1286'.
[  224.376201][T11018] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  224.376201][T11018] Please contact the netfilter-devel mailing list or update your nftables rules.
[  224.706480][T11033] ipt_REJECT: TCP_RESET invalid for non-tcp
[  224.814197][T11042] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1294'.
[  225.105601][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'.
[  225.137636][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[  225.167244][T11053] netlink: 'syz.1.1298': attribute type 18 has an invalid length.
[  225.312613][T11060] netlink: 'syz.2.1299': attribute type 8 has an invalid length.
[  225.587108][T11071] netlink: 'syz.3.1305': attribute type 4 has an invalid length.
[  225.617945][T11071] __nla_validate_parse: 1 callbacks suppressed
[  225.617963][T11071] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1305'.
[  225.658670][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1304'.
[  225.757580][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'.
[  226.473376][T11101] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  226.594694][T11101] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.775799][T11199] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1338'.
[  228.792831][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  229.292235][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'.
[  229.342112][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'.
[  229.725336][T11251] netlink: 'syz.3.1357': attribute type 9 has an invalid length.
[  229.745974][T11251] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1357'.
[  229.941673][T11246] veth1_macvtap: left promiscuous mode
[  229.956598][T11246] veth0_macvtap: left promiscuous mode
[  229.965933][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1358'.
[  229.967028][T11246] veth0_macvtap: entered promiscuous mode
[  229.989393][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1358'.
[  230.084847][T11246] veth1_macvtap: entered promiscuous mode
[  230.099178][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  230.118101][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  230.135578][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  230.151055][T11246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  230.166908][T11246] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  230.183125][T11246] veth0_to_team: entered promiscuous mode
[  230.196654][T11246] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.205182][T11246] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  230.216986][T11246] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.226689][T11246] 8021q: adding VLAN 0 to HW filter on device bond2
[  230.270907][T11246] 8021q: adding VLAN 0 to HW filter on device batadv1
[  230.435121][ T6306] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  230.466747][ T6306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.495005][ T6306] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  230.505374][ T6306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.575084][ T6308] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  230.712384][ T6306] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  230.745506][ T6306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.756904][ T6306] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  230.774345][ T6306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.937900][T11283] netlink: 'syz.3.1365': attribute type 1 has an invalid length.
[  231.005162][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'.
[  231.015981][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'.
[  231.030498][T11283] bond5: entered promiscuous mode
[  231.037251][T11283] 8021q: adding VLAN 0 to HW filter on device bond5
[  231.220297][T11283] bond5: (slave bridge3): making interface the new active one
[  231.228877][T11283] bridge3: entered promiscuous mode
[  231.247392][T11283] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  231.529175][T11311] gtp0: entered promiscuous mode
[  231.539790][T11311] gtp0: entered allmulticast mode
[  233.566497][T11326] syzkaller0: entered promiscuous mode
[  233.586216][T11326] syzkaller0: entered allmulticast mode
[  234.048725][T11352] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.069726][T11360] netlink: 'syz.4.1383': attribute type 1 has an invalid length.
[  234.089902][T11359] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  234.154984][ T6306] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.293975][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  234.305131][ T6308] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.383721][T11378] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1386'.
[  234.394753][T11378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1386'.
[  234.495014][T11385] netlink: 'syz.3.1388': attribute type 1 has an invalid length.
[  234.548181][T11385] 8021q: adding VLAN 0 to HW filter on device bond6
[  234.560999][T11388] gre0: Master is either lo or non-ether device
[  234.591012][T11385] vlan3: entered allmulticast mode
[  234.596525][T11385] bond6: entered allmulticast mode
[  235.133332][T11390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.161621][T11404] xt_hashlimit: invalid rate
[  235.433350][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1395'.
[  235.811630][T11422] netlink: 'syz.2.1398': attribute type 13 has an invalid length.
[  235.821650][T11422] netlink: 'syz.2.1398': attribute type 17 has an invalid length.
[  237.982648][T11418] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.989917][T11418] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.100438][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.108871][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'.
[  238.120279][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.641671][T11422] 8021q: adding VLAN 0 to HW filter on device team0
[  238.664469][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.694374][T11422] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.701995][T11422] bridge0: port 1(bridge_slave_0) entered listening state
[  238.714591][T11422] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.722208][T11422] bridge0: port 2(bridge_slave_1) entered listening state
[  238.741471][T11422] veth0_to_team: left promiscuous mode
[  238.762763][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.777244][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.806985][T11422] veth1_macvtap: left promiscuous mode
[  238.814653][T11422] veth0_macvtap: left promiscuous mode
[  238.822143][T11422] veth0_macvtap: entered promiscuous mode
[  238.837912][T11422] veth1_macvtap: entered promiscuous mode
[  238.852435][T11422] geneve1: left promiscuous mode
[  238.860553][T11422] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  238.879776][T11422] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  238.911409][T11422] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  238.933263][T11422] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  238.969348][T11422] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  238.994310][T11422] veth0_to_team: entered promiscuous mode
[  239.007507][T11422] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.018815][T11422] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  239.032064][T11422] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.041114][T11422] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.079047][T11422] 8021q: adding VLAN 0 to HW filter on device batadv1
[  239.123346][T11422] xfrm1: left allmulticast mode
[  239.139580][T11422] 8021q: adding VLAN 0 to HW filter on device bond3
[  239.282522][ T6306] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  239.735743][T11488] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1409'.
[  239.956837][T11488] gretap0: entered promiscuous mode
[  239.998814][T11488] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1409'.
[  240.129303][T11488] 0ªî{X¹¦: renamed from gretap0
[  240.139062][T11488] 0ªî{X¹¦: left promiscuous mode
[  240.145626][T11488] 0ªî{X¹¦: entered allmulticast mode
[  240.163583][T11488] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  240.798150][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1415'.
[  240.816736][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'.
[  242.510487][T11524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.681639][T11532] vlan0: entered promiscuous mode
[  242.693864][T11532] gretap0: entered promiscuous mode
[  242.799757][T11535] lo: entered allmulticast mode
[  242.854801][T11537] lo: left allmulticast mode
[  242.870788][T11524] tipc: Disabling bearer <eth:syzkaller0>
[  243.285314][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1422'.
[  243.338665][T11557] netlink: 'syz.4.1424': attribute type 4 has an invalid length.
[  243.409657][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'.
[  243.504670][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  243.522169][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1426'.
[  244.127151][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1429'.
[  246.090833][T11582] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  246.143907][T11582] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  246.378206][T11597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1434'.
[  246.547880][T11616] netlink: 'syz.1.1438': attribute type 1 has an invalid length.
[  246.668318][T11616] 8021q: adding VLAN 0 to HW filter on device bond7
[  246.711450][T11617] bond7: (slave gretap1): making interface the new active one
[  246.732091][T11617] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  247.209542][T11631] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1442'.
[  247.473449][T11629] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  247.515793][T11640] tap0: tun_chr_ioctl cmd 1074025681
[  247.538623][T11642] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.546821][T11642] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.996842][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'.
[  248.009470][T11651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'.
[  248.264991][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'.
[  248.323477][T11669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1451'.
[  248.472593][T11676] tipc: Started in network mode
[  248.486969][T11676] tipc: Node identity 080211000001, cluster identity 4711
[  248.539722][T11676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.586404][T11679] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  248.602422][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'.
[  248.602439][T11683] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1458'.
[  248.613989][T11679] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  248.634447][T11683] openvswitch: netlink: EtherType 0 is less than min 600
[  248.688002][T11683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.726873][T11679] syzkaller0: mtu less than device minimum
[  248.760784][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1455'.
[  248.801402][T11676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1455'.
[  248.961865][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'.
[  249.115235][T11709] netlink: 'syz.3.1463': attribute type 2 has an invalid length.
[  249.176800][T11713] x_tables: duplicate underflow at hook 1
[  249.208745][T11709] netlink: 'syz.3.1463': attribute type 2 has an invalid length.
[  249.217343][T11700] 8021q: adding VLAN 0 to HW filter on device bond9
[  249.257572][T11701] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  249.285552][T11701] netlink: 'syz.1.1462': attribute type 2 has an invalid length.
[  249.317554][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'.
[  249.430108][T11703] macsec2: entered promiscuous mode
[  249.589739][ T8477] tipc: Node number set to 134418688
[  249.698864][T11728] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1470'.
[  250.207899][T11747] netlink: 'syz.1.1476': attribute type 1 has an invalid length.
[  250.221108][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1475'.
[  250.234065][T11747] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1476'.
[  250.262208][T11747] netlink: 'syz.1.1476': attribute type 1 has an invalid length.
[  250.295381][T11747] netlink: 'syz.1.1476': attribute type 8 has an invalid length.
[  250.316296][T11745] netlink: 'syz.4.1475': attribute type 4 has an invalid length.
[  251.338992][T11786] openvswitch: netlink: Key type 142 is out of range max 32
[  251.361101][T11786] ieee802154 phy0 wpan0: encryption failed: -22
[  251.373384][T11786] sch_tbf: burst 0 is lower than device lo mtu (1294) !
[  251.423908][T11790] netlink: 'syz.3.1489': attribute type 2 has an invalid length.
[  251.745292][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  252.030853][T11810] vlan4: entered promiscuous mode
[  252.052864][T11810] bridge0: entered promiscuous mode
[  252.152489][T11809] tipc: Resetting bearer <eth:syzkaller0>
[  252.534037][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  252.588733][T11820] bond8: (slave bridge1): Enslaving as an active interface with an up link
[  253.523131][T11860] pim6reg1: entered promiscuous mode
[  253.532919][T11857] __nla_validate_parse: 7 callbacks suppressed
[  253.532935][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  253.551780][T11860] pim6reg1: entered allmulticast mode
[  253.875624][T11871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1511'.
[  253.999003][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'.
[  254.148876][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  254.169740][T11883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1513'.
[  254.594513][T11902] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1517'.
[  254.727308][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'.
[  255.090063][T11925] tipc: Resetting bearer <eth:syzkaller0>
[  255.442809][T11935] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  255.475711][T11935] bond10 (unregistering): Released all slaves
[  255.500714][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'.
[  255.581021][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  255.613115][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'.
[  255.667654][T11941] veth9: entered allmulticast mode
[  255.684883][T11941] bond3: (slave veth9): Enslaving as an active interface with an up link
[  255.755966][T11945] bond3 (unregistering): (slave veth9): Releasing backup interface
[  255.788844][T11945] bond3 (unregistering): Released all slaves
[  256.087270][T11960] x_tables: unsorted underflow at hook 2
[  256.195742][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1534'.
[  257.134437][T12006] 
: renamed from bond0 (while UP)
[  257.868459][T12043] xt_TPROXY: Can be used only with -p tcp or -p udp
[  258.042456][T12042] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.084839][T12042] 8021q: adding VLAN 0 to HW filter on device team0
[  258.141186][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.340152][T12042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.393432][T12042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.461828][T12042] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  258.519418][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.527395][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.588038][T12066] vlan5: entered promiscuous mode
[  258.791189][T12079] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  258.819391][T12083] __nla_validate_parse: 7 callbacks suppressed
[  258.819408][T12083] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1567'.
[  258.825978][T12079] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1565'.
[  258.859399][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1566'.
[  259.041832][T12091] x_tables: unsorted entry at hook 3
[  259.042836][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'.
[  259.443985][T12122] netlink: 'syz.1.1577': attribute type 11 has an invalid length.
[  259.674888][T12129] netlink: 'syz.1.1579': attribute type 1 has an invalid length.
[  259.792832][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1581'.
[  259.883142][T12133] bond9: (slave geneve2): making interface the new active one
[  259.898739][T12133] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  259.925250][T12141] bridge_slave_0: left allmulticast mode
[  259.944223][T12141] bridge_slave_0: left promiscuous mode
[  259.952872][T12141] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.994888][T12141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  260.049348][ T6308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  260.093531][ T6308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  260.150007][ T6308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  260.192927][ T6308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  261.470205][T12193] syzkaller0: entered promiscuous mode
[  261.500797][T12193] syzkaller0: entered allmulticast mode
[  261.580288][T12201] Bluetooth: MGMT ver 1.23
[  261.612223][T12202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1598'.
[  262.192694][T12215] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1602'.
[  262.266538][T12222] ieee802154 phy0 wpan0: encryption failed: -22
[  262.837319][T12244] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  262.855601][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'.
[  262.883695][T12243] netlink: 'syz.4.1611': attribute type 29 has an invalid length.
[  262.901021][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'.
[  263.200897][T12255] syzkaller0: entered promiscuous mode
[  263.221793][T12255] syzkaller0: entered allmulticast mode
[  263.520414][T12258] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.547285][T12268] batadv0: mtu less than device minimum
[  263.939427][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'.
[  264.130338][T12287] pim6reg: entered allmulticast mode
[  264.160698][T12291] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  264.185695][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'.
[  264.347093][T12284] gretap1: entered allmulticast mode
[  264.369134][T12284] bond3: (slave gretap1): making interface the new active one
[  264.383158][T12284] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  264.435408][T12285] pim6reg: left allmulticast mode
[  264.756047][T12316] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1628'.
[  264.896694][T12307] syzkaller0: entered promiscuous mode
[  264.915057][T12307] syzkaller0: entered allmulticast mode
[  266.027403][T12330] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  266.037004][T12330] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  266.158979][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1637'.
[  267.842260][T12347] syzkaller0: entered promiscuous mode
[  267.864104][T12347] syzkaller0: entered allmulticast mode
[  267.905466][T12360] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1639'.
[  268.110369][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'.
[  268.264635][T12369] bond10: entered promiscuous mode
[  268.272926][T12369] 8021q: adding VLAN 0 to HW filter on device bond10
[  268.400195][T12369] 8021q: adding VLAN 0 to HW filter on device bond10
[  268.438513][T12369] bond10: (slave sit1): The slave device specified does not support setting the MAC address
[  268.451451][T12369] bond10: (slave sit1): Error -95 calling set_mac_address
[  268.492574][T12385] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1645'.
[  268.504174][T12385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1645'.
[  268.681009][T12392] ip6gre2: entered promiscuous mode
[  268.686718][T12392] ip6gre2: entered allmulticast mode
[  269.025166][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  269.036895][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  269.775378][T12421] 0ªî{X¹¦: left allmulticast mode
[  269.874752][T12425] netlink: 'syz.4.1657': attribute type 1 has an invalid length.
[  269.923406][T12421] veth0_to_batadv: left allmulticast mode
[  269.977217][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.131127][T12421] geneve3: left promiscuous mode
[  270.165236][T12421] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  270.184112][T12421] bond5: left promiscuous mode
[  270.189748][T12421] bridge3: left promiscuous mode
[  270.209673][T12443] netlink: 'syz.1.1658': attribute type 10 has an invalid length.
[  270.220358][T12421] gtp0: left promiscuous mode
[  270.226598][T12421] gtp0: left allmulticast mode
[  270.232981][T12421] vlan3: left allmulticast mode
[  270.238074][T12421] bond6: left allmulticast mode
[  270.244968][T12421] vlan4: left promiscuous mode
[  270.251916][T12421] vlan5: left promiscuous mode
[  270.257434][T12421] bridge0: left promiscuous mode
[  270.267811][T12421] ip6gre2: left promiscuous mode
[  270.274535][T12421] ip6gre2: left allmulticast mode
[  270.281283][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.288478][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.370345][T12435] lo speed is unknown, defaulting to 1000
[  270.379674][T12443] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  270.470352][T12435] lo speed is unknown, defaulting to 1000
[  270.538834][T12435] lo speed is unknown, defaulting to 1000
[  270.577439][T12447] netlink: 'syz.4.1662': attribute type 10 has an invalid length.
[  270.601781][T12447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1662'.
[  270.653193][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.677562][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.687497][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.809560][T12457] bond10: entered promiscuous mode
[  270.825951][T12457] 8021q: adding VLAN 0 to HW filter on device bond10
[  270.834725][T12457] bridge0: port 1(bond10) entered blocking state
[  270.841393][T12457] bridge0: port 1(bond10) entered disabled state
[  270.850411][T12457] bond10: entered allmulticast mode
[  270.877866][T12457] bridge0: port 1(bond10) entered blocking state
[  270.885177][T12457] bridge0: port 1(bond10) entered forwarding state
[  270.935118][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.979906][ T7763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.006437][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.031736][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.040555][ T7754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.077984][   T48] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  271.105340][   T48] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  271.113109][ T7763] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  271.170302][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.285450][ T6322] bridge0: port 1(bond10) entered disabled state
[  271.415627][T12435] infiniband sqz0: set active
[  271.422208][ T7763] lo speed is unknown, defaulting to 1000
[  271.431932][T12435] infiniband sqz0: added lo
[  271.464097][T12435] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  271.480028][T12435] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  271.504354][T12435] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  271.557067][T12435] RDS/IB: sqz0: added
[  271.587970][T12435] smc: adding ib device sqz0 with port count 1
[  271.595532][T12435] smc:    ib device sqz0 port 1 has no pnetid
[  271.616614][ T8477] lo speed is unknown, defaulting to 1000
[  271.648071][T12435] lo speed is unknown, defaulting to 1000
[  271.695621][ T7763] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  271.828202][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'.
[  272.056538][ T7763] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  272.098500][T12496] netlink: 'syz.1.1673': attribute type 13 has an invalid length.
[  272.209952][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'.
[  272.233290][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'.
[  272.388928][T12435] lo speed is unknown, defaulting to 1000
[  272.406410][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  272.817459][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  272.828598][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  272.840562][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  272.859075][T12499] sch_tbf: burst 6 is lower than device gretap0 mtu (143) !
[  272.912461][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'.
[  272.997813][T12435] lo speed is unknown, defaulting to 1000
[  273.046789][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  273.747588][T12435] lo speed is unknown, defaulting to 1000
[  273.931216][T12541] bond11: entered promiscuous mode
[  273.938199][T12541] 8021q: adding VLAN 0 to HW filter on device bond11
[  273.947297][T12548] tipc: Invalid UDP bearer configuration
[  273.947572][T12548] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  274.005324][T12544] 8021q: adding VLAN 0 to HW filter on device bond11
[  274.043126][T12544] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  274.059566][T12544] bond11: (slave ip6gre1): Error -95 calling set_mac_address
[  274.609208][T12578] pim6reg1: entered promiscuous mode
[  274.622333][T12578] pim6reg1: entered allmulticast mode
[  274.639840][T12435] lo speed is unknown, defaulting to 1000
[  274.889571][T12578] tipc: Trying to set illegal importance in message
[  274.983899][ T6306] net_ratelimit: 40 callbacks suppressed
[  274.983944][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  275.094429][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.102990][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  275.111796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  275.133963][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  275.276349][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  275.416553][ T6310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.426345][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.437642][   T48] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  275.494469][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.510007][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.547399][T12597] SET target dimension over the limit!
[  275.803248][T12613] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  275.826355][T12615] __nla_validate_parse: 9 callbacks suppressed
[  275.826400][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'.
[  275.842792][T12613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1708'.
[  276.089194][T12631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1709'.
[  276.141087][T12611] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.352601][ T5746] lo speed is unknown, defaulting to 1000
[  276.367578][ T5746] sqz0: Port: 1 Link DOWN
[  276.416266][T12638] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  276.451849][ T6323] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.473027][ T6323] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.500572][ T6323] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.513399][ T5746] lo speed is unknown, defaulting to 1000
[  276.521885][ T6323] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.553088][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1713'.
[  276.761975][T12645] lo speed is unknown, defaulting to 1000
[  276.805931][T12657] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1718'.
[  277.145368][T12673] batadv_slave_0: entered promiscuous mode
[  277.202162][T12673] batadv_slave_0: left promiscuous mode
[  277.449672][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'.
[  277.477486][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'.
[  277.560240][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'.
[  277.567366][T12670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.582140][T12670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.674094][T12649] lo speed is unknown, defaulting to 1000
[  277.783538][T12670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.794024][T12670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.959750][T12670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  277.990135][T12670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.110745][T12706] bond12 (unregistering): Released all slaves
[  278.321074][T12670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  278.343920][T12670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.643467][ T6306] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.652035][ T6306] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.735934][ T6323] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.763466][ T6323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.839906][ T6306] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.859460][ T6306] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.939079][ T6306] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.952384][ T6306] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.062396][T12725] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.465920][T12747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1738'.
[  279.497264][T12752] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1740'.
[  280.024696][ T6322] net_ratelimit: 27 callbacks suppressed
[  280.024713][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.079879][T12789] nbd: must specify a size in bytes for the device
[  280.173872][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.335740][T12796] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  280.461139][T12796] bond12 (unregistering): Released all slaves
[  280.502018][   T48] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.534803][T12813] pimreg0: tun_chr_ioctl cmd 1074025681
[  280.544464][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.552843][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.643837][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.745998][T12821] ip6tnl0: Caught tx_queue_len zero misconfig
[  280.793965][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.913853][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  280.934568][T12834] __nla_validate_parse: 3 callbacks suppressed
[  280.934587][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1766'.
[  280.953034][T12831] netlink: 'syz.3.1763': attribute type 1 has an invalid length.
[  281.051777][T12831] 8021q: adding VLAN 0 to HW filter on device bond7
[  281.111497][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'.
[  281.129774][T12848] lo speed is unknown, defaulting to 1000
[  281.187907][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'.
[  281.315249][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  281.435416][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  281.726232][T12872] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1774'.
[  281.882070][T12879] tipc: Started in network mode
[  281.887252][T12879] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711
[  281.907271][T12879] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  282.031479][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.285987][T12888] 8021q: adding VLAN 0 to HW filter on device bond11
[  282.297100][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.370330][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.387657][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.405932][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.428516][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.468174][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.504527][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.513020][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1780'.
[  282.545252][T12888] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  282.583905][T12902] can: request_module (can-proto-0) failed.
[  283.026671][T12930] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1787'.
[  283.119573][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1790'.
[  283.281607][T12941] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.1791'.
[  283.284659][T12930] lo speed is unknown, defaulting to 1000
[  283.327685][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'.
[  283.650618][T12965] macsec2: entered promiscuous mode
[  283.743648][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  284.518296][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'.
[  284.583170][T12990] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  284.594423][T12982] lo speed is unknown, defaulting to 1000
[  284.873466][T12994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.925700][T12994] bond0 (unregistering): (slave team0): Releasing backup interface
[  284.958418][T12994] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  284.981065][T12994] bond0 (unregistering): Released all slaves
[  285.060741][    C1] net_ratelimit: 32 callbacks suppressed
[  285.060761][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.086692][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.116121][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.120265][T13001] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check.
[  285.126600][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.141889][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  285.164509][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  285.177966][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.184355][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  285.268477][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.295323][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  285.454855][    T9] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  285.833009][T13044] dummy0: left promiscuous mode
[  285.880241][T13044] team0: Port device dummy0 removed
[  285.911862][T13044] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  286.161879][T13052] __nla_validate_parse: 7 callbacks suppressed
[  286.161898][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  286.193259][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  286.216288][T13052] validate_nla: 35 callbacks suppressed
[  286.216306][T13052] netlink: 'syz.1.1817': attribute type 9 has an invalid length.
[  286.232679][T13051] netlink: 'syz.1.1817': attribute type 9 has an invalid length.
[  286.322957][T13056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1819'.
[  286.588518][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'.
[  286.609125][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'.
[  286.634544][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'.
[  286.655474][T13070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1824'.
[  286.663097][T13067] netlink: 'syz.0.1823': attribute type 1 has an invalid length.
[  286.674685][T13068] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1822'.
[  286.692968][T13067] netlink: 'syz.0.1823': attribute type 2 has an invalid length.
[  286.700683][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'.
[  286.740942][T13070] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1824'.
[  287.390001][T13103] x_tables: duplicate underflow at hook 3
[  287.474937][T13108] syzkaller0: entered promiscuous mode
[  287.480447][T13108] syzkaller0: entered allmulticast mode
[  287.505573][T13109] netlink: 'syz.2.1831': attribute type 10 has an invalid length.
[  287.622090][T13111] netlink: 'syz.1.1834': attribute type 3 has an invalid length.
[  287.872944][T13126] netlink: 'syz.1.1838': attribute type 62 has an invalid length.
[  287.872944][T13125] netlink: 'syz.1.1838': attribute type 62 has an invalid length.
[  288.509278][T13157] vlan6: entered promiscuous mode
[  288.514942][T13157] bond0: entered promiscuous mode
[  288.520065][T13157] bond_slave_0: entered promiscuous mode
[  288.526260][T13157] bond_slave_1: entered promiscuous mode
[  288.532125][T13157] team0: entered promiscuous mode
[  288.537616][T13157] team_slave_0: entered promiscuous mode
[  288.543912][T13157] team_slave_1: entered promiscuous mode
[  288.550027][T13157] veth9: entered promiscuous mode
[  288.566410][T13165] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  288.673457][T13165] bond0: entered promiscuous mode
[  288.679218][T13165] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.829336][T13149] bond0: (slave bridge6): making interface the new active one
[  288.842620][T13149] bridge6: entered promiscuous mode
[  288.859716][T13149] bridge6: left promiscuous mode
[  288.998314][T13174] tipc: Resetting bearer <eth:syzkaller0>
[  289.030100][T13171] lo speed is unknown, defaulting to 1000
[  289.232860][T13191] netlink: 'syz.3.1854': attribute type 1 has an invalid length.
[  289.309371][T13193] raw_sendmsg: syz.2.1855 forgot to set AF_INET. Fix it!
[  289.406439][T13197] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  289.651109][T13197] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.658691][T13197] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.908714][T13197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.931864][T13197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.211132][T13197] batman_adv: batadv0: Interface deactivated: ipvlan2
[  290.334115][T13202] 
: (slave lo): Releasing backup interface
[  290.344485][T13202] 
: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  290.369747][T13202] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  290.388230][T13202] net_ratelimit: 38 callbacks suppressed
[  290.388241][T13202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.409613][T13204] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  290.419705][T13204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.437792][ T6310] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.457234][ T6310] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.478858][ T6310] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.488086][ T6310] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.505943][ T6310] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.516909][ T6310] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.551889][ T6310] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.585852][ T6310] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.693979][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  290.893957][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.016357][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.133967][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.227421][T13250] __nla_validate_parse: 186 callbacks suppressed
[  291.227439][T13250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'.
[  291.256367][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.375354][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.438700][T13265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1877'.
[  291.544583][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.586287][   T29] audit: type=1804 audit(1778472363.366:13): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1882" name="/newroot/411/memory.events" dev="tmpfs" ino=2127 res=1 errno=0
[  291.625626][   T29] audit: type=1800 audit(1778472363.386:14): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1882" name="memory.events" dev="tmpfs" ino=2127 res=0 errno=0
[  291.655251][T13279] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  291.672248][T13279] bond12 (unregistering): Released all slaves
[  291.804347][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  291.883647][T13291] FAULT_INJECTION: forcing a failure.
[  291.883647][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  291.943164][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.4.1887 Not tainted syzkaller #0 PREEMPT(full) 
[  291.943190][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  291.943207][T13291] Call Trace:
[  291.943218][T13291]  <TASK>
[  291.943225][T13291]  dump_stack_lvl+0xe8/0x150
[  291.943257][T13291]  should_fail_ex+0x412/0x560
[  291.943285][T13291]  _copy_from_user+0x2d/0xb0
[  291.943310][T13291]  ___sys_sendmsg+0x1c6/0x360
[  291.943333][T13291]  ? __lock_acquire+0x6b5/0x2cf0
[  291.943355][T13291]  ? __pfx____sys_sendmsg+0x10/0x10
[  291.943410][T13291]  ? __fget_files+0x2a/0x420
[  291.943431][T13291]  ? __fget_files+0x3a0/0x420
[  291.943461][T13291]  __x64_sys_sendmsg+0x1bd/0x2a0
[  291.943489][T13291]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  291.943521][T13291]  ? rcu_is_watching+0x15/0xb0
[  291.943555][T13291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.943573][T13291]  do_syscall_64+0x15f/0xf80
[  291.943590][T13291]  ? trace_irq_disable+0x3b/0x140
[  291.943616][T13291]  ? clear_bhb_loop+0x40/0x90
[  291.943637][T13291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.943653][T13291] RIP: 0033:0x7f357639cdd9
[  291.943674][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.943688][T13291] RSP: 002b:00007f3577202028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.943713][T13291] RAX: ffffffffffffffda RBX: 00007f3576615fa0 RCX: 00007f357639cdd9
[  291.943724][T13291] RDX: 0000000020040814 RSI: 00002000000003c0 RDI: 0000000000000006
[  291.943738][T13291] RBP: 00007f3577202090 R08: 0000000000000000 R09: 0000000000000000
[  291.943748][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.943757][T13291] R13: 00007f3576616038 R14: 00007f3576615fa0 R15: 00007ffd596193c8
[  291.943785][T13291]  </TASK>
[  292.386091][T13318] §: renamed from sit0
[  292.446246][T13320] syzkaller1: entered promiscuous mode
[  292.466878][T13320] syzkaller1: entered allmulticast mode
[  292.530853][T13326] syzkaller1: tun_chr_ioctl cmd 1074025677
[  292.549500][T13326] syzkaller1: linktype set to 258
[  292.916930][T13345] FAULT_INJECTION: forcing a failure.
[  292.916930][T13345] name failslab, interval 1, probability 0, space 0, times 1
[  292.947757][T13345] CPU: 1 UID: 0 PID: 13345 Comm: syz.4.1904 Not tainted syzkaller #0 PREEMPT(full) 
[  292.947783][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  292.947794][T13345] Call Trace:
[  292.947801][T13345]  <TASK>
[  292.947812][T13345]  dump_stack_lvl+0xe8/0x150
[  292.947839][T13345]  should_fail_ex+0x412/0x560
[  292.947866][T13345]  should_failslab+0xa8/0x100
[  292.947892][T13345]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  292.947916][T13345]  ? __alloc_skb+0x186/0x7d0
[  292.947938][T13345]  ? __alloc_skb+0x1d0/0x7d0
[  292.947959][T13345]  ? __local_bh_enable_ip+0xd0/0x130
[  292.947981][T13345]  __alloc_skb+0x1d0/0x7d0
[  292.948008][T13345]  netlink_sendmsg+0x5d4/0xb40
[  292.948042][T13345]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.948071][T13345]  ? aa_sock_msg_perm+0xf1/0x1b0
[  292.948096][T13345]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.948123][T13345]  ____sys_sendmsg+0x972/0x9f0
[  292.948149][T13345]  ? __might_fault+0xaf/0x130
[  292.948177][T13345]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.948210][T13345]  ? import_iovec+0x73/0xa0
[  292.948237][T13345]  ___sys_sendmsg+0x2a5/0x360
[  292.948260][T13345]  ? __lock_acquire+0x6b5/0x2cf0
[  292.948283][T13345]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.948340][T13345]  ? __fget_files+0x2a/0x420
[  292.948361][T13345]  ? __fget_files+0x3a0/0x420
[  292.948389][T13345]  __x64_sys_sendmsg+0x1bd/0x2a0
[  292.948417][T13345]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.948449][T13345]  ? __pfx_ksys_write+0x10/0x10
[  292.948478][T13345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.948497][T13345]  do_syscall_64+0x15f/0xf80
[  292.948514][T13345]  ? trace_irq_disable+0x3b/0x140
[  292.948539][T13345]  ? clear_bhb_loop+0x40/0x90
[  292.948561][T13345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.948579][T13345] RIP: 0033:0x7f357639cdd9
[  292.948597][T13345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.948612][T13345] RSP: 002b:00007f3577202028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.948630][T13345] RAX: ffffffffffffffda RBX: 00007f3576615fa0 RCX: 00007f357639cdd9
[  292.948643][T13345] RDX: 0000000020040814 RSI: 00002000000003c0 RDI: 0000000000000006
[  292.948655][T13345] RBP: 00007f3577202090 R08: 0000000000000000 R09: 0000000000000000
[  292.948665][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.948676][T13345] R13: 00007f3576616038 R14: 00007f3576615fa0 R15: 00007ffd596193c8
[  292.948703][T13345]  </TASK>
[  293.025882][T13346] syzkaller0: entered promiscuous mode
[  293.232625][T13346] syzkaller0: entered allmulticast mode
[  293.478516][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'.
[  293.517386][T13359] netlink: 'syz.2.1910': attribute type 1 has an invalid length.
[  293.539471][T13358] rdma_rxe: rxe_newlink: failed to add lo
[  293.605816][T13359] 8021q: adding VLAN 0 to HW filter on device bond4
[  294.399017][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'.
[  294.413615][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'.
[  294.653708][T13397] geneve3: entered promiscuous mode
[  294.665176][ T6308] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  294.698456][ T6308] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  294.749729][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'.
[  294.772614][ T6308] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  294.775358][T13404] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1922'.
[  294.809671][ T6308] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  294.834840][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'.
[  294.835163][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'.
[  294.849901][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  294.883405][T13404] xt_TCPMSS: Only works on TCP SYN packets
[  295.006901][T13404] bridge_slave_1: left allmulticast mode
[  295.027915][T13404] bridge_slave_1: left promiscuous mode
[  295.042512][T13404] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.062711][T13418] netlink: 'syz.1.1929': attribute type 33 has an invalid length.
[  295.135028][T13418] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  295.357468][T13432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.373040][T13432] syzkaller0: entered promiscuous mode
[  295.379743][T13432] syzkaller0: entered allmulticast mode
[  295.438673][T13432] tipc: Resetting bearer <eth:syzkaller0>
[  295.467016][ T6306] net_ratelimit: 22 callbacks suppressed
[  295.467034][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  295.511414][T13432] tipc: Resetting bearer <eth:syzkaller0>
[  295.585878][T13432] tipc: Disabling bearer <eth:syzkaller0>
[  295.624002][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  295.784251][T13457] bond12: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  295.799277][T13467] ieee802154 phy0 wpan0: encryption failed: -22
[  295.820371][T13457] bond12 (unregistering): Released all slaves
[  295.852364][T13469] netlink: 'syz.0.1944': attribute type 1 has an invalid length.
[  295.856410][T13472] netlink: 'syz.2.1943': attribute type 7 has an invalid length.
[  295.877982][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.013858][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.049640][T13485] netlink: 'syz.2.1946': attribute type 6 has an invalid length.
[  296.123871][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.233885][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.337656][T13492] lo speed is unknown, defaulting to 1000
[  296.343904][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.389284][T13495] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma?
[  296.426893][T13495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.436762][T13495] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  296.436900][T13497] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  296.463990][T13497] __nla_validate_parse: 9 callbacks suppressed
[  296.464005][T13497] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.479910][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.490583][T13497] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  296.498758][T13497] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.507960][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.515981][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.525726][T13497] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  296.533568][T13497] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.543924][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.552999][T13497] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  296.561260][T13497] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.570671][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.580067][T13497] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  296.588322][T13497] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.598797][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  296.623921][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.763912][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  296.803618][T13504] ip6t_srh: unknown srh invflags BA61
[  297.077802][T13513] ip6gretap0: entered promiscuous mode
[  297.087320][T13512] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  297.375174][T13534] IPVS: persistence engine module ip_vs_pe_… not found
[  297.640056][T13541] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  297.654077][T13541] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  297.680922][T13541] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  298.317211][T13584] team0: Port device dummy0 added
[  298.369398][T13584] team0: Port device dummy0 removed
[  299.056881][T13622] IPVS: length: 35 != 24
[  299.094194][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  299.096424][T13599] ipvlan0: entered promiscuous mode
[  299.222200][T13628] syzkaller1: entered promiscuous mode
[  299.234624][T13628] syzkaller1: entered allmulticast mode
[  299.272227][T13633] FAULT_INJECTION: forcing a failure.
[  299.272227][T13633] name failslab, interval 1, probability 0, space 0, times 0
[  299.293887][T13633] CPU: 0 UID: 0 PID: 13633 Comm: syz.4.1985 Not tainted syzkaller #0 PREEMPT(full) 
[  299.293912][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  299.293923][T13633] Call Trace:
[  299.293930][T13633]  <TASK>
[  299.293938][T13633]  dump_stack_lvl+0xe8/0x150
[  299.293964][T13633]  should_fail_ex+0x412/0x560
[  299.293994][T13633]  should_failslab+0xa8/0x100
[  299.294019][T13633]  ? skb_clone+0x212/0x3a0
[  299.294037][T13633]  kmem_cache_alloc_noprof+0x87/0x650
[  299.294070][T13633]  skb_clone+0x212/0x3a0
[  299.294092][T13633]  __netlink_deliver_tap+0x404/0x850
[  299.294131][T13633]  ? netlink_deliver_tap+0x2e/0x1b0
[  299.294162][T13633]  netlink_deliver_tap+0x19c/0x1b0
[  299.294189][T13633]  __netlink_sendskb+0x47/0x90
[  299.294212][T13633]  netlink_dump+0xa0f/0xe10
[  299.294247][T13633]  ? __pfx_netlink_dump+0x10/0x10
[  299.294292][T13633]  ? genl_start+0x499/0x6c0
[  299.294318][T13633]  __netlink_dump_start+0x5cb/0x7e0
[  299.294351][T13633]  genl_family_rcv_msg_dumpit+0x213/0x310
[  299.294376][T13633]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  299.294395][T13633]  ? genl_get_cmd+0x82e/0x960
[  299.294416][T13633]  ? __pfx___mutex_lock+0x10/0x10
[  299.294435][T13633]  ? __pfx_genl_start+0x10/0x10
[  299.294452][T13633]  ? __pfx_genl_dumpit+0x10/0x10
[  299.294469][T13633]  ? __pfx_genl_done+0x10/0x10
[  299.294502][T13633]  genl_rcv_msg+0x5e8/0x7a0
[  299.294530][T13633]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.294549][T13633]  ? __pfx_tipc_nl_node_dump+0x10/0x10
[  299.294570][T13633]  ? __pfx_ref_tracker_free+0x10/0x10
[  299.294605][T13633]  netlink_rcv_skb+0x232/0x4b0
[  299.294630][T13633]  ? __pfx_genl_rcv_msg+0x10/0x10
[  299.294651][T13633]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  299.294692][T13633]  ? down_read+0x270/0x2e0
[  299.294708][T13633]  ? genl_rcv+0xd/0x40
[  299.294728][T13633]  genl_rcv+0x28/0x40
[  299.294755][T13633]  netlink_unicast+0x75c/0x8e0
[  299.294788][T13633]  netlink_sendmsg+0x813/0xb40
[  299.294821][T13633]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.294848][T13633]  ? aa_sock_msg_perm+0xf1/0x1b0
[  299.294874][T13633]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.294901][T13633]  ____sys_sendmsg+0x972/0x9f0
[  299.294928][T13633]  ? __might_fault+0xaf/0x130
[  299.294958][T13633]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.294994][T13633]  ? import_iovec+0x73/0xa0
[  299.295021][T13633]  ___sys_sendmsg+0x2a5/0x360
[  299.295046][T13633]  ? __lock_acquire+0x6b5/0x2cf0
[  299.295070][T13633]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.295134][T13633]  ? __fget_files+0x2a/0x420
[  299.295158][T13633]  ? __fget_files+0x3a0/0x420
[  299.295191][T13633]  __x64_sys_sendmsg+0x1bd/0x2a0
[  299.295219][T13633]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.295264][T13633]  ? __pfx_ksys_write+0x10/0x10
[  299.295298][T13633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.295318][T13633]  do_syscall_64+0x15f/0xf80
[  299.295334][T13633]  ? trace_irq_disable+0x3b/0x140
[  299.295360][T13633]  ? clear_bhb_loop+0x40/0x90
[  299.295381][T13633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.295399][T13633] RIP: 0033:0x7f357639cdd9
[  299.295415][T13633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.295430][T13633] RSP: 002b:00007f3577202028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.295449][T13633] RAX: ffffffffffffffda RBX: 00007f3576615fa0 RCX: 00007f357639cdd9
[  299.295462][T13633] RDX: 0000000020040814 RSI: 00002000000003c0 RDI: 0000000000000006
[  299.295474][T13633] RBP: 00007f3577202090 R08: 0000000000000000 R09: 0000000000000000
[  299.295485][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.295495][T13633] R13: 00007f3576616038 R14: 00007f3576615fa0 R15: 00007ffd596193c8
[  299.295526][T13633]  </TASK>
[  300.143493][T13669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  300.482543][T13694] FAULT_INJECTION: forcing a failure.
[  300.482543][T13694] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.513904][T13694] CPU: 0 UID: 0 PID: 13694 Comm: syz.0.1999 Not tainted syzkaller #0 PREEMPT(full) 
[  300.513928][T13694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  300.513939][T13694] Call Trace:
[  300.513946][T13694]  <TASK>
[  300.513953][T13694]  dump_stack_lvl+0xe8/0x150
[  300.513979][T13694]  should_fail_ex+0x412/0x560
[  300.514008][T13694]  _copy_from_user+0x2d/0xb0
[  300.514035][T13694]  kstrtouint_from_user+0xd6/0x180
[  300.514060][T13694]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  300.514100][T13694]  proc_fail_nth_write+0x8e/0x210
[  300.514130][T13694]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  300.514158][T13694]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  300.514181][T13694]  vfs_write+0x29a/0xb90
[  300.514213][T13694]  ? __pfx_vfs_write+0x10/0x10
[  300.514240][T13694]  ? __fget_files+0x2a/0x420
[  300.514266][T13694]  ? __fget_files+0x3a0/0x420
[  300.514286][T13694]  ? __fget_files+0x2a/0x420
[  300.514317][T13694]  ksys_write+0x150/0x270
[  300.514343][T13694]  ? __pfx_ksys_write+0x10/0x10
[  300.514377][T13694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.514398][T13694]  do_syscall_64+0x15f/0xf80
[  300.514415][T13694]  ? trace_irq_disable+0x3b/0x140
[  300.514441][T13694]  ? clear_bhb_loop+0x40/0x90
[  300.514464][T13694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.514482][T13694] RIP: 0033:0x7fbc55d5d60e
[  300.514500][T13694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  300.514515][T13694] RSP: 002b:00007fbc56bc9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  300.514535][T13694] RAX: ffffffffffffffda RBX: 00007fbc56bca6c0 RCX: 00007fbc55d5d60e
[  300.514548][T13694] RDX: 0000000000000001 RSI: 00007fbc56bca0a0 RDI: 0000000000000007
[  300.514559][T13694] RBP: 00007fbc56bca090 R08: 0000000000000000 R09: 0000000000000000
[  300.514570][T13694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.514580][T13694] R13: 00007fbc56016038 R14: 00007fbc56015fa0 R15: 00007ffff26c58e8
[  300.514612][T13694]  </TASK>
[  301.083900][ T6322] net_ratelimit: 18 callbacks suppressed
[  301.083918][ T6322] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  301.204212][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  301.354457][T13718] pim6reg99999991: entered allmulticast mode
[  301.368986][T13722] syzkaller1: entered promiscuous mode
[  301.402326][T13722] syzkaller1: entered allmulticast mode
[  301.418548][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  301.628696][T13734] validate_nla: 62 callbacks suppressed
[  301.628714][T13734] netlink: 'syz.2.2009': attribute type 2 has an invalid length.
[  301.631691][T13713] lo speed is unknown, defaulting to 1000
[  301.649832][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  301.669687][T13722] __nla_validate_parse: 136 callbacks suppressed
[  301.669705][T13722] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2004'.
[  301.688100][ T5627] udevd[5627]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  301.814905][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  301.861358][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'.
[  302.069117][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  302.221342][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  302.243213][T13759] netlink: 'syz.1.2015': attribute type 1 has an invalid length.
[  302.343858][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  302.415390][T13770] xt_l2tp: missing protocol rule (udp|l2tpip)
[  302.528027][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2020'.
[  302.944271][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  303.072320][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'.
[  303.128152][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  303.283944][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  303.520306][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2026'.
[  303.612455][T13802] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2026'.
[  303.710775][T13810] syzkaller0: entered promiscuous mode
[  303.727544][T13810] syzkaller0: entered allmulticast mode
[  303.836509][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  303.875005][T13814] hsr_slave_0: left promiscuous mode
[  303.892005][T13814] hsr_slave_1: left promiscuous mode
[  303.967288][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'.
[  303.990955][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'.
[  303.993038][T13823] xt_hashlimit: size too large, truncated to 1048576
[  304.047673][T13825] netlink: 'syz.2.2034': attribute type 4 has an invalid length.
[  304.300924][T13841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2040'.
[  304.398582][T13846] netlink: 'syz.2.2042': attribute type 2 has an invalid length.
[  304.438425][T13850] netlink: 'syz.1.2040': attribute type 13 has an invalid length.
[  304.446478][T13850] netlink: 'syz.1.2040': attribute type 11 has an invalid length.
[  304.481720][T13850] gtp3: entered promiscuous mode
[  304.494277][T13850] gtp3: entered allmulticast mode
[  304.841072][T13870] netlink: 'syz.4.2047': attribute type 3 has an invalid length.
[  305.167633][T13882] netlink: 'syz.3.2051': attribute type 15 has an invalid length.
[  305.183325][T13885] netlink: 'syz.4.2052': attribute type 4 has an invalid length.
[  305.372374][T13896] netlink: 'syz.3.2055': attribute type 13 has an invalid length.
[  305.956764][T13896] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.977881][T13896] 8021q: adding VLAN 0 to HW filter on device team0
[  306.012237][T13896] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.057583][T13896] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.077151][T13896] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.087658][T13896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.100775][T13896] net_ratelimit: 30 callbacks suppressed
[  306.100787][T13896] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  306.125152][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.132308][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.161540][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.168738][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.193088][T13900] batadv_slave_0: entered promiscuous mode
[  306.245293][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  306.259830][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  306.286155][T13902] batadv_slave_0: left promiscuous mode
[  306.365778][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  306.435944][T13939] lo speed is unknown, defaulting to 1000
[  306.592549][T13936] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  306.654070][ T6307] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  306.677862][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.689315][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.710924][ T8475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.783706][T13951] __nla_validate_parse: 12 callbacks suppressed
[  306.783725][T13951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'.
[  306.803992][ T6323] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  307.088181][T13936] syzkaller0: entered promiscuous mode
[  307.093672][T13936] syzkaller0: entered allmulticast mode
[  309.405233][T14011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2083'.
[  309.431210][T14000] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  309.459151][T14000] tipc: Resetting bearer <eth:syzkaller0>
[  309.546026][T14008] ip6tnl3: entered allmulticast mode
[  310.021140][T14024] syzkaller0: entered promiscuous mode
[  310.029993][T14024] syzkaller0: entered allmulticast mode
[  310.048630][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'.
[  310.098320][T14038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2091'.
[  310.319663][T14051] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004
[  311.260489][   T57] net_ratelimit: 14 callbacks suppressed
[  311.260509][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.276237][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.498922][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.894490][ T6308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.902843][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.091572][T14044] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  312.093922][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  312.117652][T14065] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.124900][T14065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.132441][T14065] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.139652][T14065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.149473][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.224360][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  312.317609][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'.
[  312.357936][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2099'.
[  312.372421][T14077] lo speed is unknown, defaulting to 1000
[  312.413894][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  312.533904][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.588830][T14093] tipc: Resetting bearer <eth:syzkaller0>
[  312.604881][T14095] sock: sock_timestamping_bind_phc: sock not bind to device
[  312.634619][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'.
[  312.662076][T14095] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2106'.
[  312.679975][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'.
[  312.812109][   T29] audit: type=1804 audit(1778472384.586:15): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2102" name="/newroot/410/memory.events" dev="tmpfs" ino=2116 res=1 errno=0
[  312.858351][   T29] audit: type=1800 audit(1778472384.616:16): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2102" name="memory.events" dev="tmpfs" ino=2116 res=0 errno=0
[  312.904260][T14106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2108'.
[  313.628677][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2112'.
[  315.842080][T14119] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  315.919943][T14125] bridge5: entered allmulticast mode
[  315.958763][T14129] ªªªªª.: renamed from lo (while UP)
[  316.323979][   T57] net_ratelimit: 11 callbacks suppressed
[  316.323999][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  316.455171][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  316.546649][T14153] x_tables: duplicate underflow at hook 1
[  316.574231][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  316.710509][T14157] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2123'.
[  316.719719][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  316.845087][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  316.986969][T14176] validate_nla: 1 callbacks suppressed
[  316.987007][T14176] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  317.018927][ T6306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.024087][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  317.028238][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.061817][T14177] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  317.255306][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'.
[  317.422007][T14176] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  317.452639][T14177] 8021q: adding VLAN 0 to HW filter on device bond12
[  317.489587][T14185] bond12: (slave gretap3): making interface the new active one
[  317.505553][T14185] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  317.546419][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  317.658661][ T6308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.667078][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.712962][T14208] netlink: 'syz.3.2132': attribute type 10 has an invalid length.
[  317.760939][T14208] dummy0: entered promiscuous mode
[  317.788930][T14208] team0: Port device dummy0 added
[  317.909950][T14208] netlink: 'syz.3.2132': attribute type 1 has an invalid length.
[  317.956729][T14208] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2132'.
[  317.966913][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'.
[  318.075833][T14208] netlink: 'syz.3.2132': attribute type 10 has an invalid length.
[  318.138727][T14208] dummy0: left promiscuous mode
[  318.219063][T14208] team0: Port device dummy0 removed
[  318.251326][T14208] dummy0: entered promiscuous mode
[  318.281671][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'.
[  318.309144][T14208] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  318.395609][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'.
[  318.514789][T14215] nbd2: detected capacity change from 0 to 63
[  318.549279][T14244] 
[  318.551651][T14244] ======================================================
[  318.558666][T14244] WARNING: possible circular locking dependency detected
[  318.565694][T14244] syzkaller #0 Not tainted
[  318.570108][T14244] ------------------------------------------------------
[  318.577125][T14244] syz.1.2140/14244 is trying to acquire lock:
[  318.583193][T14244] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  318.592533][T14244] 
[  318.592533][T14244] but task is already holding lock:
[  318.599893][T14244] ffff88804d3e45e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800
[  318.610621][T14244] 
[  318.610621][T14244] which lock already depends on the new lock.
[  318.610621][T14244] 
[  318.621020][T14244] 
[  318.621020][T14244] the existing dependency chain (in reverse order) is:
[  318.630031][T14244] 
[  318.630031][T14244] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  318.638133][T14244]        lock_sock_nested+0x41/0x100
[  318.643430][T14244]        mptcp_subflow_create_socket+0x142/0x800
[  318.649769][T14244]        __mptcp_nmpc_sk+0x155/0x790
[  318.655065][T14244]        mptcp_connect+0x71/0x830
[  318.660103][T14244]        __inet_stream_connect+0x25a/0xdd0
[  318.665912][T14244]        inet_stream_connect+0x66/0xa0
[  318.671377][T14244]        __sys_connect+0x312/0x450
[  318.676499][T14244]        __x64_sys_connect+0x7a/0x90
[  318.681791][T14244]        do_syscall_64+0x15f/0xf80
[  318.686905][T14244]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.693324][T14244] 
[  318.693324][T14244] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  318.701066][T14244]        lock_sock_nested+0x41/0x100
[  318.706359][T14244]        inet_shutdown+0x6a/0x390
[  318.711385][T14244]        nbd_mark_nsock_dead+0x2e9/0x560
[  318.717020][T14244]        recv_work+0x1c2e/0x1d40
[  318.721960][T14244]        process_scheduled_works+0xb5d/0x1860
[  318.728027][T14244]        worker_thread+0xa53/0xfc0
[  318.733143][T14244]        kthread+0x388/0x470
[  318.737746][T14244]        ret_from_fork+0x514/0xb70
[  318.742857][T14244]        ret_from_fork_asm+0x1a/0x30
[  318.748143][T14244] 
[  318.748143][T14244] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  318.755799][T14244]        __mutex_lock+0x1a3/0x1550
[  318.760912][T14244]        nbd_queue_rq+0x37b/0x1100
[  318.766025][T14244]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  318.772104][T14244]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  318.778966][T14244]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  318.785475][T14244]        blk_mq_run_hw_queue+0x348/0x4f0
[  318.791120][T14244]        blk_mq_dispatch_list+0xd16/0xe10
[  318.796851][T14244]        blk_mq_flush_plug_list+0x48d/0x570
[  318.802752][T14244]        __blk_flush_plug+0x3ed/0x4d0
[  318.808142][T14244]        __submit_bio+0x28d/0x580
[  318.813164][T14244]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  318.819325][T14244]        block_read_full_folio+0x599/0x830
[  318.825135][T14244]        filemap_read_folio+0x137/0x3b0
[  318.830686][T14244]        do_read_cache_folio+0x358/0x590
[  318.836331][T14244]        read_part_sector+0xb6/0x2b0
[  318.841627][T14244]        adfspart_check_ICS+0xb1/0x960
[  318.847097][T14244]        bdev_disk_changed+0x817/0x1770
[  318.852653][T14244]        blkdev_get_whole+0x380/0x510
[  318.858036][T14244]        bdev_open+0x31e/0xd30
[  318.862814][T14244]        blkdev_open+0x470/0x610
[  318.867750][T14244]        do_dentry_open+0x785/0x14e0
[  318.873044][T14244]        vfs_open+0x3b/0x340
[  318.877634][T14244]        path_openat+0x2e08/0x3860
[  318.882754][T14244]        do_file_open+0x23e/0x4a0
[  318.887802][T14244]        do_sys_openat2+0x113/0x200
[  318.893007][T14244]        __x64_sys_openat+0x138/0x170
[  318.898385][T14244]        do_syscall_64+0x15f/0xf80
[  318.903496][T14244]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.909911][T14244] 
[  318.909911][T14244] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  318.917134][T14244]        __mutex_lock+0x1a3/0x1550
[  318.922252][T14244]        nbd_queue_rq+0xc6/0x1100
[  318.927279][T14244]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  318.933355][T14244]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  318.940216][T14244]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  318.946730][T14244]        blk_mq_run_hw_queue+0x348/0x4f0
[  318.952391][T14244]        blk_mq_dispatch_list+0xd16/0xe10
[  318.958120][T14244]        blk_mq_flush_plug_list+0x48d/0x570
[  318.964024][T14244]        __blk_flush_plug+0x3ed/0x4d0
[  318.969403][T14244]        __submit_bio+0x28d/0x580
[  318.974425][T14244]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  318.980590][T14244]        block_read_full_folio+0x599/0x830
[  318.986397][T14244]        filemap_read_folio+0x137/0x3b0
[  318.991954][T14244]        do_read_cache_folio+0x358/0x590
[  318.997600][T14244]        read_part_sector+0xb6/0x2b0
[  319.002891][T14244]        adfspart_check_ICS+0xb1/0x960
[  319.008359][T14244]        bdev_disk_changed+0x817/0x1770
[  319.013921][T14244]        blkdev_get_whole+0x380/0x510
[  319.019308][T14244]        bdev_open+0x31e/0xd30
[  319.024081][T14244]        blkdev_open+0x470/0x610
[  319.029018][T14244]        do_dentry_open+0x785/0x14e0
[  319.034308][T14244]        vfs_open+0x3b/0x340
[  319.038910][T14244]        path_openat+0x2e08/0x3860
[  319.044054][T14244]        do_file_open+0x23e/0x4a0
[  319.049096][T14244]        do_sys_openat2+0x113/0x200
[  319.054284][T14244]        __x64_sys_openat+0x138/0x170
[  319.059655][T14244]        do_syscall_64+0x15f/0xf80
[  319.064744][T14244]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.071139][T14244] 
[  319.071139][T14244] -> #3 (set->srcu){.+.+}-{0:0}:
[  319.078233][T14244]        __synchronize_srcu+0xca/0x300
[  319.083668][T14244]        elevator_switch+0x1e8/0x7a0
[  319.088934][T14244]        elevator_change+0x2cc/0x450
[  319.094200][T14244]        elevator_set_default+0x36c/0x430
[  319.099905][T14244]        blk_register_queue+0x3e9/0x4e0
[  319.105426][T14244]        __add_disk+0x677/0xd50
[  319.110256][T14244]        add_disk_fwnode+0xfb/0x480
[  319.115433][T14244]        nbd_dev_add+0x72c/0xb50
[  319.120344][T14244]        nbd_init+0x168/0x1f0
[  319.125015][T14244]        do_one_initcall+0x250/0x870
[  319.130287][T14244]        do_initcall_level+0x104/0x190
[  319.135731][T14244]        do_initcalls+0x59/0xa0
[  319.140571][T14244]        kernel_init_freeable+0x2a6/0x3e0
[  319.146274][T14244]        kernel_init+0x1d/0x1d0
[  319.151110][T14244]        ret_from_fork+0x514/0xb70
[  319.156199][T14244]        ret_from_fork_asm+0x1a/0x30
[  319.161463][T14244] 
[  319.161463][T14244] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  319.169255][T14244]        __mutex_lock+0x1a3/0x1550
[  319.174344][T14244]        elevator_change+0x1b3/0x450
[  319.179614][T14244]        elevator_set_none+0xb5/0x140
[  319.184967][T14244]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  319.191281][T14244]        nbd_start_device+0x17f/0xb10
[  319.196640][T14244]        nbd_genl_connect+0x165b/0x1cf0
[  319.202169][T14244]        genl_family_rcv_msg_doit+0x22a/0x330
[  319.208220][T14244]        genl_rcv_msg+0x61c/0x7a0
[  319.213226][T14244]        netlink_rcv_skb+0x232/0x4b0
[  319.218496][T14244]        genl_rcv+0x28/0x40
[  319.222997][T14244]        netlink_unicast+0x75c/0x8e0
[  319.228263][T14244]        netlink_sendmsg+0x813/0xb40
[  319.233527][T14244]        ____sys_sendmsg+0x972/0x9f0
[  319.238792][T14244]        ___sys_sendmsg+0x2a5/0x360
[  319.243970][T14244]        __x64_sys_sendmsg+0x1bd/0x2a0
[  319.249410][T14244]        do_syscall_64+0x15f/0xf80
[  319.254501][T14244]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.260898][T14244] 
[  319.260898][T14244] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  319.269478][T14244]        blk_alloc_queue+0x546/0x680
[  319.274746][T14244]        __blk_mq_alloc_disk+0x197/0x390
[  319.280353][T14244]        nbd_dev_add+0x499/0xb50
[  319.285271][T14244]        nbd_init+0x168/0x1f0
[  319.289930][T14244]        do_one_initcall+0x250/0x870
[  319.295216][T14244]        do_initcall_level+0x104/0x190
[  319.300657][T14244]        do_initcalls+0x59/0xa0
[  319.305491][T14244]        kernel_init_freeable+0x2a6/0x3e0
[  319.311193][T14244]        kernel_init+0x1d/0x1d0
[  319.316026][T14244]        ret_from_fork+0x514/0xb70
[  319.321113][T14244]        ret_from_fork_asm+0x1a/0x30
[  319.326377][T14244] 
[  319.326377][T14244] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  319.333561][T14244]        __lock_acquire+0x15a5/0x2cf0
[  319.338914][T14244]        lock_acquire+0x106/0x350
[  319.343917][T14244]        fs_reclaim_acquire+0x71/0x100
[  319.349356][T14244]        __kmalloc_cache_noprof+0x40/0x660
[  319.355148][T14244]        ref_tracker_alloc+0x15a/0x4c0
[  319.360599][T14244]        get_net_track+0x16e/0x230
[  319.365698][T14244]        sk_net_refcnt_upgrade+0xb2/0x130
[  319.371428][T14244]        mptcp_subflow_create_socket+0x32b/0x800
[  319.377747][T14244]        __mptcp_nmpc_sk+0x155/0x790
[  319.383014][T14244]        mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  319.389241][T14244]        genl_family_rcv_msg_doit+0x22a/0x330
[  319.395293][T14244]        genl_rcv_msg+0x61c/0x7a0
[  319.400297][T14244]        netlink_rcv_skb+0x232/0x4b0
[  319.405564][T14244]        genl_rcv+0x28/0x40
[  319.410050][T14244]        netlink_unicast+0x75c/0x8e0
[  319.415315][T14244]        netlink_sendmsg+0x813/0xb40
[  319.420580][T14244]        ____sys_sendmsg+0x972/0x9f0
[  319.425847][T14244]        ___sys_sendmsg+0x2a5/0x360
[  319.431027][T14244]        __x64_sys_sendmsg+0x1bd/0x2a0
[  319.436467][T14244]        do_syscall_64+0x15f/0xf80
[  319.441554][T14244]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.447946][T14244] 
[  319.447946][T14244] other info that might help us debug this:
[  319.447946][T14244] 
[  319.458153][T14244] Chain exists of:
[  319.458153][T14244]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1
[  319.458153][T14244] 
[  319.471250][T14244]  Possible unsafe locking scenario:
[  319.471250][T14244] 
[  319.478673][T14244]        CPU0                    CPU1
[  319.484015][T14244]        ----                    ----
[  319.489354][T14244]   lock(k-sk_lock-AF_INET6/1);
[  319.494189][T14244]                                lock(sk_lock-AF_INET6);
[  319.501190][T14244]                                lock(k-sk_lock-AF_INET6/1);
[  319.508554][T14244]   lock(fs_reclaim);
[  319.512514][T14244] 
[  319.512514][T14244]  *** DEADLOCK ***
[  319.512514][T14244] 
[  319.520631][T14244] 4 locks held by syz.1.2140/14244:
[  319.525798][T14244]  #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  319.533950][T14244]  #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  319.543021][T14244]  #2: ffff888053c6e860 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420
[  319.553798][T14244]  #3: ffff88804d3e45e0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800
[  319.564955][T14244] 
[  319.564955][T14244] stack backtrace:
[  319.570825][T14244] CPU: 1 UID: 0 PID: 14244 Comm: syz.1.2140 Not tainted syzkaller #0 PREEMPT(full) 
[  319.570839][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  319.570854][T14244] Call Trace:
[  319.570860][T14244]  <TASK>
[  319.570865][T14244]  dump_stack_lvl+0xe8/0x150
[  319.570880][T14244]  print_circular_bug+0x2e1/0x300
[  319.570896][T14244]  check_noncircular+0x12e/0x150
[  319.570910][T14244]  __lock_acquire+0x15a5/0x2cf0
[  319.570929][T14244]  ? check_noncircular+0xda/0x150
[  319.570955][T14244]  ? lockdep_unlock+0x5d/0xd0
[  319.570972][T14244]  ? __lock_acquire+0x146e/0x2cf0
[  319.570986][T14244]  ? __kmalloc_cache_noprof+0x40/0x660
[  319.571000][T14244]  lock_acquire+0x106/0x350
[  319.571011][T14244]  ? __kmalloc_cache_noprof+0x40/0x660
[  319.571027][T14244]  fs_reclaim_acquire+0x71/0x100
[  319.571042][T14244]  ? __kmalloc_cache_noprof+0x40/0x660
[  319.571056][T14244]  __kmalloc_cache_noprof+0x40/0x660
[  319.571070][T14244]  ? ref_tracker_alloc+0x15a/0x4c0
[  319.571083][T14244]  ? rcu_is_watching+0x15/0xb0
[  319.571096][T14244]  ref_tracker_alloc+0x15a/0x4c0
[  319.571111][T14244]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  319.571123][T14244]  ? ref_tracker_free+0x522/0x840
[  319.571148][T14244]  ? __pfx_ref_tracker_free+0x10/0x10
[  319.571177][T14244]  ? sk_net_refcnt_upgrade+0x8c/0x130
[  319.571202][T14244]  ? mptcp_subflow_create_socket+0x32b/0x800
[  319.571213][T14244]  ? __mptcp_nmpc_sk+0x155/0x790
[  319.571224][T14244]  ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  319.571238][T14244]  ? genl_family_rcv_msg_doit+0x22a/0x330
[  319.571251][T14244]  ? net_passive_dec+0x177/0x250
[  319.571263][T14244]  ? __pfx_net_passive_dec+0x10/0x10
[  319.571276][T14244]  get_net_track+0x16e/0x230
[  319.571292][T14244]  sk_net_refcnt_upgrade+0xb2/0x130
[  319.571307][T14244]  mptcp_subflow_create_socket+0x32b/0x800
[  319.571318][T14244]  ? irqentry_exit+0x218/0x730
[  319.571329][T14244]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  319.571341][T14244]  ? do_raw_spin_lock+0x12b/0x2f0
[  319.571356][T14244]  __mptcp_nmpc_sk+0x155/0x790
[  319.571368][T14244]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  319.571378][T14244]  ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420
[  319.571393][T14244]  ? preempt_schedule_thunk+0x16/0x30
[  319.571409][T14244]  mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  319.571427][T14244]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  319.571449][T14244]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  319.571461][T14244]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  319.571474][T14244]  genl_family_rcv_msg_doit+0x22a/0x330
[  319.571486][T14244]  ? __asan_memcpy+0x40/0x70
[  319.571499][T14244]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  319.571513][T14244]  ? bpf_lsm_capable+0x9/0x20
[  319.571523][T14244]  ? security_capable+0x7e/0x2c0
[  319.571537][T14244]  genl_rcv_msg+0x61c/0x7a0
[  319.571549][T14244]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.571559][T14244]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  319.571575][T14244]  ? __pfx_ref_tracker_free+0x10/0x10
[  319.571590][T14244]  netlink_rcv_skb+0x232/0x4b0
[  319.571604][T14244]  ? __pfx_genl_rcv_msg+0x10/0x10
[  319.571615][T14244]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  319.571632][T14244]  ? down_read+0x270/0x2e0
[  319.571642][T14244]  ? genl_rcv+0xd/0x40
[  319.571652][T14244]  genl_rcv+0x28/0x40
[  319.571662][T14244]  netlink_unicast+0x75c/0x8e0
[  319.571678][T14244]  netlink_sendmsg+0x813/0xb40
[  319.571699][T14244]  ? __pfx_netlink_sendmsg+0x10/0x10
[  319.571714][T14244]  ? aa_sock_msg_perm+0xf1/0x1b0
[  319.571728][T14244]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  319.571743][T14244]  ____sys_sendmsg+0x972/0x9f0
[  319.571758][T14244]  ? __might_fault+0xaf/0x130
[  319.571772][T14244]  ? __pfx_____sys_sendmsg+0x10/0x10
[  319.571788][T14244]  ? import_iovec+0x73/0xa0
[  319.571804][T14244]  ___sys_sendmsg+0x2a5/0x360
[  319.571819][T14244]  ? __lock_acquire+0x6b5/0x2cf0
[  319.571830][T14244]  ? __pfx____sys_sendmsg+0x10/0x10
[  319.571846][T14244]  ? futex_wait+0x2a2/0x390
[  319.571865][T14244]  ? __fget_files+0x2a/0x420
[  319.571877][T14244]  ? __fget_files+0x3a0/0x420
[  319.571890][T14244]  __x64_sys_sendmsg+0x1bd/0x2a0
[  319.571906][T14244]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  319.571923][T14244]  ? rcu_is_watching+0x15/0xb0
[  319.571936][T14244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.571949][T14244]  do_syscall_64+0x15f/0xf80
[  319.571959][T14244]  ? trace_irq_disable+0x3b/0x140
[  319.571974][T14244]  ? clear_bhb_loop+0x40/0x90
[  319.571985][T14244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.571995][T14244] RIP: 0033:0x7f58adb9cdd9
[  319.572006][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.572020][T14244] RSP: 002b:00007f58ae9df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  319.572040][T14244] RAX: ffffffffffffffda RBX: 00007f58ade15fa0 RCX: 00007f58adb9cdd9
[  319.572055][T14244] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  319.572067][T14244] RBP: 00007f58adc32d69 R08: 0000000000000000 R09: 0000000000000000
[  319.572073][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.572080][T14244] R13: 00007f58ade16038 R14: 00007f58ade15fa0 R15: 00007fff4d4eecc8
[  319.572091][T14244]  </TASK>
[  320.092696][ T5625] block nbd2: Receive control failed (result -104)
[  320.100164][ T5642] block nbd2: Receive control failed (result -32)
[  321.404289][ T6306] net_ratelimit: 20 callbacks suppressed
[  321.404309][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  321.523971][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  321.633967][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  321.743917][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  321.863847][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  321.983853][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  322.093846][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  322.144076][ T6306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.152355][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.203873][ T6306] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  326.443976][ T6308] net_ratelimit: 40 callbacks suppressed
[  326.443996][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  326.563897][   T57] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  326.673830][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  326.783826][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  326.893895][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  327.003835][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  327.113835][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  327.223832][ T6308] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  327.334161][ T6310] bond6: (slave ip6gretap2): failed to get link speed/duplex
[  327.341660][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog