last executing test programs:

2.834978417s ago: executing program 4 (id=4115):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x30, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0xb7, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r4=>r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000aa08000a00", @ANYRES16=r4], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$sock_attach_bpf(r5, 0x111, 0x87, &(0x7f0000000000), 0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x40, 0x101, 0x8002, 0x3, 0x2, 0x8a, 0x8d71, 0xaff5, <r6=>0x0}, &(0x7f0000000140)=0x20)
r7 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000000240))
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r6, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}}, 0x84)

2.585428942s ago: executing program 2 (id=4120):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x13}}, 0x14}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d428d493b54539b9", "62714b65e42465c5518ccb9d7c403972", "2cbdb9e9"}, 0x28)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e26, @broadcast}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000002c0)={&(0x7f0000000840)=""/4096, 0x1000, 0x1, 0x5})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000440ea5372109a9b173797a31000000000500040001000000140007800500150020000000080012400000009b050005000a000000050001000600000015000300686173683a69f02c706f72742c697000"], 0x60}}, 0x0)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.379046472s ago: executing program 4 (id=4122):
r0 = socket$inet(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)) (async)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @remote, 0x4001, "43045553e8378e722b7c8c306c74eef33a9732c5b10fc016c5803a7e9283cecc", 0x5, 0xfffffe01, 0x8, 0x1}, 0x3c) (async)
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r6, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) (async, rerun: 32)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (rerun: 32)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001a00020001000000000000000a1400000003000000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="0600150000000000cbed4b07c11c98c3733a2b959102835d11f60a8d97fe52e0f13a989e0aa73fa20780029afa134c9bfe515a628d4b9e203111069c58218ec810167bf4e730ea0a4a9f10a5677a7435e13217e65c0ee62ab286a101ec002be0c1d86c7892"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) (async, rerun: 32)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async, rerun: 32)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x32}, {0x7fffffff, 0x4, 0x5, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0xcd17}, 0x9, 0x40000000, 0x0, 0x1, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c20000000180c1fff500080045000018000000007800000000"], 0x0) (async)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) (async, rerun: 64)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @broadcast}}, 0x24) (async, rerun: 64)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
sendfile(r1, r0, &(0x7f0000000300)=0xfffffffffffffff7, 0x8) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r11, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)

2.222130814s ago: executing program 1 (id=4124):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000cb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

2.003019053s ago: executing program 3 (id=4127):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000ce26d88979b7ef8278bcfc6f785d0bb052f15264c2589b3fe67fa84ff7bd1423b13b6b78f1b5425dbea6e3a210d58d51c174872b9b33ec2275f21be396d063211156e702790cc27c67ed305dfbcd4529f51f143d381c2ee860ead544", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001740)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b50200000000000085000000830000004ce300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.877353493s ago: executing program 4 (id=4128):
unshare(0x8040600)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000007ffe6a1a2b00"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64)
bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0xb, 0x2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
unshare(0x600)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="17980e7ac2c6be8828b5ad2d31080480d3"], 0x3c}}, 0x4014)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10050280}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x5c, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x58bd, 0x64}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44881}, 0x20004050) (async)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c5610a600000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) (async)
r8 = socket(0x10, 0x803, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x7, 0x0, 0x3d3f, 0xd831, 0xfff, 0x3, 0x58f}}]}}]}, 0x44}}, 0x24040084)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00'})

1.874088115s ago: executing program 1 (id=4129):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (rerun: 32)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) (async)
sendmmsg$alg(r3, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) (async)
syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000a40)='syzkaller\x00'}, 0x94) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x20700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32)

1.818341746s ago: executing program 3 (id=4131):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000019000100040000000000000080200009000400050000000008000300038e"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x20, 0x80, 0x9, 0x2, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv4_newrule={0x7c, 0x20, 0x0, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x20, 0x81, 0x2, 0x0, 0x0, 0x4, 0x10012}, [@FRA_FLOW={0x8, 0xb, 0xffffffff}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x7fffffff}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x81}, @FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'caif0\x00'}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x4040)

1.670154911s ago: executing program 2 (id=4133):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.592776258s ago: executing program 4 (id=4134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200120019001c0012800afff9006d616373655400000c00ac02e9e0b95f7188c47d"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000002880), r2)

1.527395875s ago: executing program 2 (id=4135):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
socket$inet6(0xa, 0x80003, 0xff)
close(0x3)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x4, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x6}}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$batadv(0x0, r3)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c", @ANYRES8=r2], 0xfdef)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58d80d4ddc8f56c4ddd820200000", @ANYRES16=r6, @ANYBLOB="0d0304000000fdffffff130000000c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)
sendmmsg$inet(r4, &(0x7f00000060c0), 0x0, 0x4000000)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r8, 0x0, 0xf3a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300001000010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23)
tee(r7, r11, 0x8f5, 0x0)
write(r9, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.385448995s ago: executing program 3 (id=4136):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x18c, 0x65, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x154, 0x2, [@TCA_BASIC_ACT={0x150, 0x3, [@m_skbmod={0x14c, 0x18, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa5, 0x8e, 0x8, 0x795a, 0x80000001}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7164}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x47, 0x5, 0x5, 0x3, 0x36e02f08}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fb77bb14dfdc"}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x7ff, 0x6, 0xfffffff8, 0x6}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="383ce4fcf765"}]}, {0x6d, 0x6, "e01f8830c936128dcc5aa84b532a9773b913b135689e405c0ce38b7d60a30ea12bc7693e62a8a2119ee0a35570149336bca2041f8799213d2654b5ddc0449dedf1d3be5c49698824a822e354dc325cf6c153cbd5998230c31b464c2d47a57d77fa067fea8eb5d3b35b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000a80)=@hci={0x1f, 0x500, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="62031400d755af176510122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000069006b882abd7000d2a07581c46de9"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000854)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x1, 0x80000, @empty, 0xfffffffb}, 0x18, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000002900000008c600007f00000000000000"], 0x10}, 0x40800)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8)
r8 = accept4(r2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r8)

1.171092047s ago: executing program 0 (id=4137):
unshare(0x22020400)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000f3f3fb2eee12c55fef21b36c0a65a0b600"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)=0x60)

1.139869641s ago: executing program 3 (id=4138):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000072013100000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), 0x0}, 0x20) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2458, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2430, 0x4, 0x0, 0x1, [{0x242c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x241c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_XOR={0x194, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "d370c86b6e1ecaf1b21a3a27bcebb1c520971bad777614beb25f618c966a64ab689e490c09a89116768f68e833050662d7dfc8e84f5a099c1002179ea76eb8521636c3467ccae4c60256a80fadfae824c3fa5eb5f32ac5c5fe5363235a623e9ab45ed1ca64b87d4afdf2a46e22e389cdbfb526ad61c5d225e3d8fd8f0a196cb2efbfd4ae18dab0b317f276506ef3947fac553fa4b5d84dd763802bd006aaf23d4d7782d94fc0ac70ec55459794d1b77430bd7cf59055d2ff72e85ec3"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7f, 0x1, "9962a02142bae6dd265681d10c44971547246f64a51c92ba67542f9cdf0da7a3572fc71cdf515eb9418cae12e7079e499cbbb030890ac25f00a23f91d7feac8f4defcb60ba7562fdf07bae03f2ba94188efc10009ac178071511f08b479d81e8a8d4d0bad6dff2b8a238a511223dd512947b58be10a77b5594431f"}]}, @NFTA_BITWISE_MASK={0x74, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_XOR={0x21f8, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "a7fed6c572644adbd08dbcd4523d2f53da62de3fcc00baa2dcdc56e2c44596a7d307b83ad3b40ea9e5b3fd920440e71e76d5c71b285a48d7e4e85a6229f634693b14aa3304e2590b31b811a593bfb6d7763dc590a2a5e1c6650e074cb3000000001515e1b3b486b5f968cc8550550737d502cabd5d3af31097f5b54318074145776c3859693054b830d99f0c629099ce1cf445f22c82f8cbe252fe6fe65937c7857fcf28d4eb2c33be79751692fbd566ae913aec00731eddc198d26870c22948e65c8447d8f6aaf98934db24bc6a1a2acc1446961885840c7988205396aa60dc47dc927fa136cb6281f7ffffffffffffff777dea5210"}, @NFTA_DATA_VALUE={0x3b, 0x1, "bbb68e30f0e1f79f261419f370974603a1126bb65559989629a740d3306105e1e3f38aa1432803b194438197d1d3289978097595e4e427"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x691a11710045f171}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x24cc}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r5, 0x25, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[], 0x0)

973.63066ms ago: executing program 0 (id=4139):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000100)=""/211, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10) (async)
close(0x3) (async)
listen(r1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000b0000000000000000000000180100005e6c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) (async)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000100)=""/211, 0x40f00, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)

973.260685ms ago: executing program 3 (id=4140):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r1) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) (async)

867.496466ms ago: executing program 1 (id=4141):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4a, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}})
bind$802154_raw(r0, &(0x7f0000000240)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)

843.363291ms ago: executing program 0 (id=4142):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0xb0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfe88}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x39, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x14}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000801)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x884)

656.965199ms ago: executing program 4 (id=4143):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x10)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000100)={0x2, 0x8, 0x8})
syz_emit_ethernet(0x105, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x6001, "e9c1bef584f449bdac8d52181b4effa020b38d67cc5da05613f695e043568a52d3c0f0d9aebc07d4bfb016d4b5b04d23f344a1979e601ea3a8a23d514aeed9b4d76aed128f29331ce61154e9cefbc5a32ca6acc304834e65799984c630441330107dc8941dbd39cfa1adb86b66d12509fc9b9c6c925fb0f197ffc4c4bf856f825237f3c40e504f67c5879604a5fb7204f22e37a816b04409bb01c531cdc0fb082c44767b21c236b2fe675a473fb4754b8b50e690c84983eda034fe522a725391762d1c4d40ff782b7dbfa19ea761e60b462bebe3a11dca63f0da9fa2f6b2649a6d7b08ae87627607773f82c0c630252fec0a694b8f3d5b"}}}, &(0x7f00000002c0)={0x1, 0x4, [0xd77, 0x478, 0xd7d, 0x370]})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f00000003c0)={0x10f8, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x18}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "23e4ee"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "0c3ec1019514356dbb318618ece051e7f22868a46fc53a222d2eaad920b1a2a5e8789f719f10fc00fb6b860a286158b4cdd454d9cd6d02e74bbf438ff50055316a69f29d45b2a04b6aff5f29d485c1a2958d210534b4551d7f6723cd811a36e438e28cc2ccdc3af22af6551dd2178c6906809045ff364b3f09d1f4c64c8443c764d246ded9b622966efea425d6d4b2b3ce6a06c92ef3fa2ede96a431a755ec9e8f70728e81b5ca7d7309ad092028cd2bec45f424b93fe44243e23a0c9f4999f6926f39972f27dc6158380557845c05ef551473ee"}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001580)={'sit0\x00', &(0x7f0000001540)={@mcast1, @multicast1, 0x13, 0x16}})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r1)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x41)
r4 = socket(0x10, 0x5, 0xfffffffe)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001700), &(0x7f0000001740)=0xc)
r5 = socket(0x8, 0x1, 0x3)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001780)={{r2}, "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"})
bind$inet6(r1, &(0x7f0000002780)={0xa, 0x4e20, 0x6, @mcast1, 0x10000}, 0x1c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002a80)={&(0x7f00000027c0)="193794ae09f992a376c3e9ddb78cb63b0fc89b61655a2a09b9d4eb7bebe99c48d8409f0240f03ab5ec8297b1f234910192bf08d31e7b57c3f8e769a6334c8502970c8686bc16615b4b9377e50be4aee41f083830aded84324e36fd58b784c196438f6fd5cb6e47815d066cca9789e8063cfc46900f4a4e32f6c38c864d02712505fdf26e0d747c", &(0x7f0000002880)=""/19, &(0x7f00000028c0)="8543cc16d1595714ac3de5feaca2cfe840dab1f05282d3ec39299e431fb023b80dccc5435621b1d8a4e3b9058166f0430cfa3e238e4f3272a67978cc6f87da389bffc651dde227b9d1a1325d4972dd3f5551f82b89efff986b826a245de290ac014729f37ba3a06631543d42585584247354bafb0e97b51581fd5b39bd17ac3b1073b614d13a67a677484358e48742864c4e970c42ea321d8865a182a9fbda59abce673b4ce634c3ab04bc271ed75f073756ab5edd97f56d5c6a2c0be8155d2f2ad53a5f0b5201bad79bbcf5c5152e4360796185eb28841c58c19665ef26e9", &(0x7f00000029c0)="397c7536a28e2a9ac4ab129dc1bad19b3563ce08e71b57d2d60e136aadb60053350e7ff4443f2e3a0a97678b0279b40d4706369a299e8af8af7736f3ac9efd107e3ffc714b04ea85bff9017136be343d59181aab2e10a0af8fac647987c853fa895d49b619417a47243d1af474ff6573bf401c269e5536dc80eac865f041ab5bc594d4d214d2071e474f0853314f80d32f21c8466b0bcb96c9da4d305d7bd212708491bda1fbc7df782d01", 0x9, r1, 0x4}, 0x38)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x14, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000002dc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002c00)={0x160, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x27, 0x8, "5339ebc68a3a78ff8650b8c48dbed8583852ecd4fa4231899199743b4a921cda2c8d98"}, @NFTA_OBJ_USERDATA={0x102, 0x8, "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"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x90)
r6 = socket$netlink(0x10, 0x3, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000002f80)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e80)={0x94, r7, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf32, 0x4fa9, 0xde, 0x9, 0x2, 0x1000, 0x0, 0x3]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0x7, 0x2, 0x0, 0xe, 0x100, 0xfffe]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x872, 0x7, 0x91e, 0x1, 0x100, 0x8b48, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x10, 0xb, 0x4, 0x7, 0xfffb, 0x3, 0x81]}}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000000)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000002fc0)={0x6, 0x8000, 0x3})
openat$nci(0xffffffffffffff9c, &(0x7f0000003000), 0x2, 0x0)
bind$rds(r5, &(0x7f0000003040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$sock(r0, &(0x7f0000003740)={&(0x7f0000003080)=@llc={0x1a, 0x7, 0x9, 0x1, 0x2, 0xfd, @broadcast}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003100)="e5778b9e64dbd3f9a531717b7cdc7aac508076fd84bb6ccbdf955e6bf90876d954c9c5305c23b1542cbf45b344b5e6f7fd9a1bbc9c529914414c533baa14b0efa4c134661b314730ed60ed9c7a2e70072caae52eb8bb516f193e2703a3ff351e741e90528c5130afc7e301552e6d428df3a6952417382aa7334d4a9e7d37bd93c65a61d1937ee067da4f0a8faf620bd45b0e769168f2022a2097f44f55d29eb7b2de6b7b00890e537b4c54fa16ff8001cb5807", 0xb3}, {&(0x7f00000031c0)="1a72c2f25c5830e070f77b2dde8385022c7c495cc43b5b6746e873d5317785f0ad3a282776e760c5cd7f9d7ac82f2bcd4e47b68f3118608eff3d39775c3424841947a1476903fe60324c373cecf6f4cc0fa79630f79954dc561ece84ed6d8f782ba7ac7fcb4e0b112bd6bc382aa7794b43133254d070991f0de5f4188722797a9c713d826f344451b9f0d45d8a9cb528e682c681b159dd75160313166252982299a94219a1a780a3764c5e8764d94d8b69da412328abaddd2e", 0xb9}, {&(0x7f0000003280)="91ec336b1cf961e4682e45c8eb90f473b3f05ea45a5f81ab75be77b3b948bbcef92d3c2a5d7610266ad0aca678c156603f5787f96df9f4dd73e1393e65038a1dc9f5ce41c973d93b82cf75da8368d29b0bb7a18db4a8909e5dced28114b93813891121514033fd76617c747423f086cf53e3fd3bb213fc06f189c79845ac2650758ad980d91ce4c49f860ac8dc91688e0d4c4b0906166ecab93304e0d09c444d100d6709000e73e66e489706f4d9a9006f60cb8d05032ac49695d72e3de950ad84fc5e23c78520a1c1518893b9cab6", 0xcf}, {&(0x7f0000003380)="18a982dcf3d33280f618ee91f0b9dfa434b74522378c148175c228fb7b9fb5c72d6c1c3fdab4951e84fa4fc6cdd585e895ba57486f9f8e22b423b68213d6ffed0fe5bf48b9a698ade32cbfe92b102f5043f8b89babd5e720d228a25d09f035155f845a4bd7fdc2e5fe1caea46c3c8ef713d86986371be117e16e5dda211a6f5647fef19057da90b13cb767", 0x8b}, {&(0x7f0000003440)="bf23f0cc35e8f5da3cda059015db139ae51d9001b91b83070611df7f487efffd60bbd50065d2aaf155465c654ff78b91cb7613e7d3546839bfb6868bc9a7ea6f0c7e05667bc909ca23e91474d74cca22d0960f9485496b3721cab0ddee68afda77f45079c72d2aa0", 0x68}, {&(0x7f00000034c0)="a5adda6419ddafc9ad6a7e1451ba21e087d0f24213d6491032f023245dd631e0296425cddcafd370445edb532e26695ecbe0f780690c453f5914c9bfa602a02fafd00cfef77cff34d8cd899d400f2741c108aa9a9bf87968ab57fd", 0x5b}, {&(0x7f0000003540)="dcff9d1c9446b5ace578297a7e1c5d2ec495e82bb6746c42cd38f92d9d6479a5428874690d2cd015db837cb3aaa960c78ef40fb96ea9b207a2c163f85275bf08d67928485ceac2581ec74b2bb7936b98b38dbfd8d0aa0dc82247ed78ca41edd8b2b757419fdf3f54e7b542f959af1ed38f85c168d914548799b7dd5aad90ea08349009f39c43f627ae0cba0e0c676698f66b292e10605434f2e74fc883c0cdb4953ed3ce753702bd7530038cc4331c2a728fa052d42bd9a4b62fa3c94f42b4d7c4eabc183981505f225216485eeedd90db11b1c5a973dee917dc71", 0xdb}], 0x7, &(0x7f00000036c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}], 0x78}, 0x40)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000037c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x34, r9, 0x10f, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}]}, 0x34}}, 0x40840)
ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000038c0)={0x3, 0xf20})

585.825602ms ago: executing program 1 (id=4144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040092)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0xfd4badcd6aaa7a73)
sendmmsg$inet(r3, &(0x7f0000006300)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="65f64c", 0x3}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001740)="ef37", 0x2}], 0x1}}], 0x2, 0x4040)

533.573019ms ago: executing program 2 (id=4145):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x3) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>r0}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

485.849772ms ago: executing program 3 (id=4146):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x4e21, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e3de3d7b07a37df3513bfc4cd07ec3ee777de774fc"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x24004004)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmsg$unix(r10, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f0000000300)=""/17, 0x11}], 0x5, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x12100)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r14 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r14, 0x29, 0x18, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="050000000000000000000000f365063cf37bddf9c2ceb5a341e3c928ee370253", @ANYRES32, @ANYRES64=0x0], 0x10)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000200)=r12, 0x4)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0504000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r15}, 0x38)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20)

446.465635ms ago: executing program 2 (id=4147):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x1e, 0x44, 0x67, 0x0, 0x8, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x1c, 0xc, 0x1, 0x7, [{@broadcast, 0x5}, {@loopback}, {@multicast1, 0xd1}]}]}}, {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8000, 0x0, 0xfffe}}}}}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlinkprop={0x34, 0x6c, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x12)

443.238555ms ago: executing program 4 (id=4148):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x218, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2)
bind$inet(r4, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4)
connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r8=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r0, @ANYBLOB="48297893e42909b5bf2a313e0aa20f2a3e12b204d2a97fdc63216ce3819bc2aff831a2f0d368ed9720f13f965c6e3cc55ba730e661a354ddf5b8af60a1c60e7eb8a3d8267039b1b8d1c301fe76d9e1570d00006cb3e372814778708ac169fd39575f3f28985a9f653fbe2640a1ad72eb6412ca298d14d7a9b1", @ANYBLOB="030328bd7000000000e00900000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', r8, 0xf, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000a00)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000301207f2ab716b08590b1af877ebfb8c7b633d09d2000000000000", @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x60}}, 0x8000)
ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000680))
sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0)

379.053167ms ago: executing program 1 (id=4149):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x5, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@setneightbl={0x1c, 0x43, 0x100, 0x70bd27, 0x25dfdbfd, {0x7}, [@NDTA_THRESH3={0x8, 0x4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x1)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)

317.954942ms ago: executing program 0 (id=4150):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa00}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={<r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000)
close(r1)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001000))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000400)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0xf, 0x73, 0xfffffffc, 0xbc, 0x1, 0x7a52, 0x2, 0x3b65, 0xc04, 0x5e50, 0x0, 0x8, 0x200, 0x6, 0x100, 0x8, 0x7f, 0x9, 0x7f2, 0x101, 0x2, 0xd, 0x4, 0x8, 0xc8, 0x0, 0x9, 0xd, 0xffffffff, 0x7fff, 0x3, 0xf49, 0x5, 0x9, 0x9, 0x5, 0xffff0001, 0x889, 0x7, 0x8000, 0x4, 0x7, 0xfffffffe, 0x7ff, 0x7f, 0xffffffff, 0x9, 0x7c1e, 0x9, 0x9d49, 0x81, 0x3, 0x200, 0x2, 0x7, 0x2, 0xfffffff8, 0xc945, 0xf80, 0x4a, 0x5, 0x1, 0x4, 0x7e, 0x7c, 0x6, 0xa, 0x7b, 0x81, 0x400, 0x99f, 0x9, 0x8, 0x2a, 0xb8, 0xfffffffe, 0xc, 0x5, 0x401, 0x1, 0x1, 0x100, 0x7, 0xa1, 0x1000, 0x10001, 0xffffffff, 0x7, 0x8, 0x1, 0xfffffff7, 0x1, 0x4, 0x2, 0x9, 0x8001, 0x5, 0x1, 0x7, 0x9, 0x4961, 0x85b1, 0x2, 0x2, 0x4, 0x7, 0xa, 0x9, 0x5c, 0x5, 0x4, 0x10, 0xf, 0x1, 0x8f3e, 0xdcd, 0xc, 0x5, 0x4, 0x0, 0x0, 0x7, 0xe, 0x4, 0x40, 0x4, 0x101], "2fce29c4f831f0facca3e79e4fdc0f0dcc4782be125f7e0a4fd460ddc4678b75123ec2b4dcf1e4db6776394f6159c38d52242f238874e209cf74338f6ad7ef550b69b4304c824fb3324302a7fcc771ee33e949fa256ac38522ee613ecdcdcdc63a5087c9261d4e3b99a9f2843db587eaee3eb4b95e9a9e366b84272a2c733964f0ac761226d2e099934d3458283fdb86b65e262c4153f3a5f02e"}})
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

190.42148ms ago: executing program 0 (id=4151):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000003"], 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x10)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000006c0)=0x1, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050224, r5})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0}) (async)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r12], 0x40}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r10, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r12}, 0x20)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a"], 0x1c}}, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r14=>0x0})
r15 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r15, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(r15, 0x29, 0x1b, &(0x7f0000000080)={@remote, r14}, 0x14)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r16 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fa0000000000000009000000181100009deb66cc2d0e4e58c17617dd7d54b037329c75323fcaaa585a6352ac1643917c33fed67df0017b89d09f0f0bc4f8667a638c799389c491ab3900b2c6cd10cc2dee32dbe5058bdc0a63f17139c7e9ac43fef739ddc9f1b871ad984392bc7bdc6c79d2132c7777a3cac16060feb16e76b91f742661b52fbcf9f3eae62c659be6ff74f33e87b5bdcc6453da1b7a9e406900246f3b25c0865367c15b8a2848c568bc0c740c3e94efb1207d2931cc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000562f4ff000000008520000005000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0xc3, &(0x7f0000000240)=""/195, 0x41100, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xa, 0x2, 0x50}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r16, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x4, 0x7, 0x2}, {0x0, 0x1, 0x10, 0xa}, {0x5, 0x3, 0xd, 0x4}, {0x5, 0x5, 0x3, 0x5}, {0x0, 0x3, 0x9, 0x9}, {0x1, 0x1, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x2}, {0x1, 0x1, 0xb, 0x6}, {0x1, 0x3, 0x9, 0x6}], 0x10, 0x4}, 0x94)

170.186552ms ago: executing program 1 (id=4152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
r6 = accept4$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x800)
connect$bt_l2cap(r6, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe)
sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="c563b447ec09d11b72a354cedc8bfc27cb0c9371d200c99ffb9b99386c80b0c5f36cbb723332fa635c1fc2ab3323d671c5d0b98407b9f80130da0057c24cad648682db0dd5acd26720e94cb5e70d0c", 0x4f}, {&(0x7f00000008c0)="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", 0x1ff}, {&(0x7f00000003c0)="cf0307e07f5fa4a4f344f7430d56031edfc92260d13155143e4c5a686d68fd72e2c4e961df8ac18da034d931038e030a6c0272417b1c7ecb20d12d61b11e242babefb58e70ca185089ace3af66368cf28ec4be", 0x53}], 0x3}}], 0x2, 0x4880)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x4}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="e0", 0x1}, {&(0x7f0000000ac0)="559592b8af3796d344d2d0c1ea89ee047a3e1a9f67cd5a9158be096f8fd936addcccbbaf14dc33c50d047d9495756903269771ddcffa4f1bb458b804ee3ae82918542fdb505a8aeac10702e7aa571668569643366fa19fe7b6f1ab0d8864834dffa0fd182fa869c15912e0a8a4961219baf6053c0bc784258b604e72146e94a82167de902ce70068f9dc99a29b14cf14bc0bceeed51effbdc3fdd0e05ea4cd2cf597077490ec52d421359f46df76b96beadbf826d86af200d022871296b1040c629e8a58454b0c653df5ae55845e4dffa360b1271542b9398fe5dc7e3b2322818a80ba04fd2373687734e820d304742d0cfdbe971f5a7960be6884c5a11f762e02395391a7187171ac1c0a8333789d216edd9261a13527dc291ad1252180c8755c218ee0ac453d8bf4c073d953f2a1596ca8ec56f5abd1b34fa66a7c838971482dd9a806a56ea26b57c75a1045fe57c4edd391233b5fe5999a966008549fd817f01522b2217352faffb55f302da5867c63190dfd91ed74f1e226dd9f5168377e7b48be88fd700f7cb4981256c5b28bbac120b20caae90d37d4f3127fc3984e7935a13d1b4860644160b8b824f6a82afa2207931ca8d742ddccf7ea7de299e6cb44da9beb915a31191986be77fc55daa39382a1ba6bc79ff3fa463019808c20251beea108f88aed6659b5c6e4a14cd3dc543f1e42c8072ed61b4a9e79ad8435bdc68864d66b571a29103d337a6054798caab348f5bd9e3cc3d5353d78e5f9179be1e4763f257cb33dbe84f8019e429e4f2f99114d16ecb82f3e975c7a62160015975dcd683863ff2a8c46d045f5554ab4616ea6490336a12be97ac83a233f40ad597f8c415ad1332a6b6b584b9242a452550bb48a807b04aab90925ee09645363481ec822d9c5b281f65fbb7214bb6b5e16ec258e834c8cc4d46c9d0191addba30ff0fc036634d3ce3ed7dabcd6da01a50f78d8acbce7481b330bc6408879f62a9b201fc2c412999befaca08e13f4b2a1c14917a7b21680bc7967f9d3e691fefb0a7213cea26c3099cf93e9cc2d4fa1dc30eadc7627f848b063299625886e79c9735cb4af2f1adc4f0cbb907ef066f01f99bfaf3d415d58eb4c984fca2c6461dc2a350b8d40c90379b8838bc1d632f9bafc930c8c82deb542239a033324c1c329cfe99e0e708a542f6326b8307fd6440c1255f5ecc3b1c4be93100b72646c844dedb5004e6275a74e48f4fdfcb3c161af8aebe12d7681ae5d443d907acc5ab70074e4eb61cfbd06f96b2ce379e1aabdbf0b3575bdcdab79022860dc3efc85039838bff3cbfc25b8e48b2e7ce3ffe872c977a11437634ccd6e659ee02e5caff1f2ba322bf9200ee248d1923bf3e60ff55943a91eb1b038047bc2cc4bf2f64b732de980d21418c29234558bbdbf85724bbf1cbd7fbdb7afa3058ce212ac657bc8d77e6d0524d78b39a9691b4e8ccdb3689bd007785c8671f7a847f6397217d63134f934aa4097727671720a104c1f0608f55eccef7754e0bdfdc0e99c0b4ef75814a89d9b05176f440ff8e97fa47ff89d1868ee2c66169e60707a02a065b4b4940a95772c6044dddbd5fbc68b6bc7def82f0035aabeec9e387d83856ce2f6ca5c4393012b06a92abf6ce13c3e2fbd6aaae69a8532024e87ed4590c8a7458fe2c0551cd99ead21cdd60548f9a5d294473a6507df08f6019e50a15e5469a0234095cb4903e26e09967639d9bee97271000147fd6fbcab7524b99b51f781455739723e770bcbf87663bafadb7d3f60ae61a9891a0f0e5560a48667a1f38c4e6d61155bb018c1e6f18a7de1dc679ee9866720d84f571ac10c1fa76cb42f5cd705c3dd03bcefca3d6f200de754e7844c67ca77f37d10db5c56172ff0d86bddf6dd1e021367729a91e3857a8d90a9b6c95aefd388fe8414c2fd5f20a8388e0f0713f8c111741c9d5b80f2ee6c2c0a8191cca4d42dca44b46dbe9cc9276d4b90b7d028ba23640cc3eb88ef18f1000f474315ef8459d69f8daee55f6ce207e56f63f180947ad03894a28ca2b7506c49f8261cd3efd3ab11c6615fe68b6916536b0a3e1894281a072d6b6ba9ec98955b511c6284ef20b72a3159f0b7f4ba766a38b6cc2800752ce9d08c697c1d24c8347063f015f87d73ecc998a3ef66e35bb7bc3ce6b1fae2490eda0b7a188812951ed68c37df2a8dfcc4502432bff8e380bc96fb987859db0a7b503ad0ee6778fff02343e6fa1c21addaa07b76739bd0b4a0da7b97daf861734f25f41fe94c857c962a636929dd1ed1e6305240878a076fa3561c4523c752f604a9eb4e370889c4871adcba7b949218ed7924cd789b3563657d9867fed9cd6274854ce0350e3b327d97b0bed81d19ef538318cb45edd8da9d1a953a6d032df671a5a41d2a6e64cc868aef5b8e98fc68fd9eaa41ed1331530daeacdab0de844ad7720a3f3abb8630a2be32e83747955ec5c51a0aa426701e023e47e6bec78321e231db83af23d5f7b59af521770f9afb5eeb1e1356c1aeec707a0045b06b1557129aeb6579f5aedc01895083211701c15104dba9cbbae667febff9cdccaa7490de3359bba8f9d2a16a2e07fb9ac0574ac726c65f898ab96f80367a7c5838942c78d217df306e764ef30188dd4164137081a58698a550ed7809e497c47e848e3692cc22dcbe68676e0e8cdd8366fb16a910c5b50bf5a4bdb8215e20a0987f5082e32ae844db5fef1de8b2e463dff157de3ed1dc640f25e6a6107475cec0ec858b8ae5679d46d37e82916775850ef602b10b34a2043ed2a7f2db8e9de71da00d1906591f9d2f5a3f3cd49e7a51afdea9c8ff4530a7086228d1c15a8f5aa35baba121b04d0a2295277f654553366b179d23af91163aef922abb67188b76b5f1e0d28f0178c1cba72ef8e49696d4348316271d73f9d1f0e20b01480bc86818493208efbd708596645042b81b217dbdec629fc1382310af62703dda20fb30fb0fec411a5390427dae53ede0e4269075d6ac81f61075074514c92e0a30e839d724ad214a8d209f21b8e60c4f951b77ef0c805386b6fee2d5a2e92305092555dd410691fa4b95a4736ea3aedc64441abdb92c2b235ea05cdfac1390f7634abf5c4164a70432f0c5b095a17cd173dd9facdebd6bbcdc26ee284d4221d8adad994c60ec065bf682da0cc7962e0db849187bafb9fa922a27973864bda5ba6d06792b7c401d4e4b2665b54395a66971186878bc4aff25397c93f7fb6fc49afb7fc13a980e0ec854af40a8545fb14556741a0fb159dd713a4266d4fcfb3ba7917147b3b9ceee9a27b3348c7713adc07af4ffb0ada7f7ce09c714ab068252800002df44400e45d09cbcd334855a25d7d041723f960b4a2c3967e6042c9bc368e029d7fb8a2dbe1be176eefcf3f0cbb75bb30951d8e5ff262637ec59081fe5cb4863e821639c5f87e072a7dba84353520d05bf15348bceb8c0ab1f2f2cde24e457e09c5351e6a4fe3a3dd1ca56fa07927f408c236fb1e64c8acb96159e0daa6169385c233b154f38deb9e5578fbc51aeb53013956309fdcb1102777eca80b78c2d58e198cc329c257b6e03f62881a6579fd1e66a825b7eee2aaf368a9beaa51bde40d954fd48d5e48cd7c266757e002c10818db73c4a19426b58ed1350473b3fe23e91ba1ccb5f3791d771c01439cfda21e320265c82cd34cacebb97b448d40750d5985a5b4fc9a71c13e9a9d286e897d4376df7e163bdd6e7d7ac665f40c13e6246f6631f699a4ba5fa328e3324805affb45e5b12b24a3215b267d108f538d77fc4cb5283e1d5bc96abcd50aa4ad800ecc620d584035e98aaf021094ce51d734d3d01ce0275a621480229ce821abe090ae75573ffd3dcb5734182e5948405377ab917b0d190fb736d29ec4efbaa5c407de02769a48f9c0637c08e8740b3c25bd30b0d549bf5034961b576e622785c1bd048169ac5f855fbc6d84eaf0ab87909a15e2d27ce2a5fb1dfef60cb2c18bb19f87dedb8126905b10a7b0010a99756aed9a9cdeda443a510c44565b5a97e54f388fbba4173165e8a5e280fd67ebaf33de09b0e9d6779d0195a3083ff2c5bb14520b84e55a55a740324b00be5199720e41695710606f02b1285287f00c5108618b27c55a8bdfddad48e0bcf2f896ecb12cc47681829004c71e5493edee4b6b6b3cc7f7479f97bb0de83ab56d4d3fccbd902cc0b60e3c9d3fb547e25a66472bdeeb5c07c97da4ca2e0882f07556946829f33e2e3e0a0beeebe2c623d76d6603c61ea830af096d0b622aa5983f46ee076a5a365028b0503167c78de9c37ca9405cf60922142e069adc4f481e4a3c4475cb3fc6d9b68816af68f3997a3a5aa114af84a2e829cd8b477ea7c7505fed9d67a245155a128cd61a1e36aefd28fcdfb450cdeed3e31f7a10fb6133cc43035610b824c69948773103cdaf8621f37582412920ec70591f9e568fac891ba1fe9d2769086f90d4b9d7a3f01dae71780631ac43165a44dae501f33976a723bcf4701506957443772731d346bacffcce4685849edf5ec6dc49af7341740a0e1f326b8be068964dad0c9c222cdf16d54295abc949f1070c4edc3a19fbbd200e485e726b01f35ab249c00749848dabbbd3a7aeaa18153913df593eaf004719334466b0f37bb25b6d58ed16b8c4dce78a92d3f46e1636cc33b868e649bc16d99e8e81ce808530c616123b8878bf6c71d5067bd8350679b52e09b3b5e206ad1bc7d372aaf49c4b162de532dd428e41368c401a93617f70479be45b76967d9a4f97613428f561818ec42da26fbeb706c8923e7a8927ddbca6304597fc90b02b2471129f0d12eb3f03beed3bb599647ea295ce738a4eb6f0e73b21fb4a32c497ddaf7c117bac89eda3392f1f1f630f8dcd028e54e9cf5d8641186aa88d1a79394bbd64a9e5b962a88038ad43e6a108f47c3a00e4ed8fedebfd7b97f2b3ec5477dfc526ec17ba0ab358176caddefb425e35200aa966e3e639c8a54e199db492653aaea46a946fc6dc8bca967f6df5cd64eaf7119fc22c2033a9a30cf09814a10f8244c7d290b20e42f77231f4f625ff03f92404c5ad9d6bd1389f93b705b671426ce73b9ad402284497e33815a2a1c4ccc0f32539866103448bc527523e4f7d33d965d32e220dbba5d0605c449cee6dfb8413041a8485eb7aa392e2244d4bfdff2502ce72e0446794966cb85c47558459955ecbb3b3bca78e273d8c788324313bdf02736beb2c93dc4af9c7f8056879639506ac4bc5dc7a78b1964899300ad4335a0005e46591f4142f998fabbc4ab9ff5b3f22e6eb0eea4f18e9483baa664d92002e389e0c46984d8cc2257fa6a3fa02e957db58985ac064f8330c7e910861e981f2248ace6d795a7d3fcc7fece47f5261f8f539ff234f15a3680445e2af69c772fa398d1ba294c68156afa922c4e3c7d4d4ea639beab3054f464e7c1ef1d31f0241828730bf90b693725fab008a342cfe308eea44ec276168674c66c4a2e8ddf01559e63cf2136ea1d4b23e0b031c54be7c39d79c383487d988d9328e58f5379a02a4c29b09b6a190b5de7aad0cb86fd42b7ea6a7f6ce1cc2a0206e3e4df2a01178d166b84ff7cdac0c6059cb116567b81f1d16cd5aacdb683f553e9e82f2b8faf63ad531375df93cdf48b847e7119cc5887a9f0c335e9a4465318c3c7c75ee707dde3009c64dee0e06250dd51ee4f027de91b2ecc3377f88aebd7fa26b3bc7b2556957051238739e17521bd190963efc00470e4a1be3ca72d7e8599a562dcb1fc6a2dae351cbdf5e40abeae6f", 0x1000}, {&(0x7f00000004c0)="173df171d099e823229595385873cc39cfbc0f21da69e0b2cbbe42d775150183f0cfae96b16e9696bd19bfd5f92ff7edba2ab134a0bb8b32c0ed6aa6c8207c3d501a51c026d35cd01bec54a52bc02aea9764eda899a8b3bfa0b7ddf687d5cfe6", 0x60}], 0x3, &(0x7f0000000580)="006eaff31247cd4212e4f15471fc652a8d03b560ffab5c300030ac39346b257d7cb848382d35", 0x26, 0x8002}, 0x800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20)
splice(r7, &(0x7f0000000000)=0x4, r1, &(0x7f0000000080)=0x2, 0x2000000000009, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev(r11, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2)
pwrite64(r11, &(0x7f0000000180)="80446f843e", 0x5, 0xda)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r2, @ANYBLOB="010900000000fddbdf250700000008000300", @ANYRES32=r2, @ANYRESHEX=r12], 0x4c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x24044804)

53.346334ms ago: executing program 2 (id=4153):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r3 = socket(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xe, 0x1, 0x0, 0xc, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x0, 0x9, 0x401, 0x2]}}]}]}, 0x60}}, 0x0) (async)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x80805, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r8}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r9, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r3, 0x1}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x200, 0x4) (async)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000004c0)="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", 0x10d}], 0x3}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40f0}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)

0s ago: executing program 0 (id=4154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="150a00000000000061118c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

kernel console output (not intermixed with test programs):

amily 0 port 6081 - 0
[  450.375370][T18127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.675346][T18127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.429495][T17033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.444059][T10380] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.458969][T17609] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.473087][T17609] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.702308][T17033] net_ratelimit: 21 callbacks suppressed
[  451.702328][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.822364][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  451.932342][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.042252][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.162260][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.272341][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.382438][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.492320][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.602277][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  452.712319][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  454.972368][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'.
[  454.981373][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3058'.
[  455.010933][T18149] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3058'.
[  455.145307][T18158] netlink: 'syz.0.3061': attribute type 1 has an invalid length.
[  455.354820][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  455.364094][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  455.371716][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  455.381981][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  455.389727][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  455.528359][T18169] lo speed is unknown, defaulting to 1000
[  455.653024][T18183] netlink: 'syz.0.3066': attribute type 12 has an invalid length.
[  455.660938][T18183] netlink: 'syz.0.3066': attribute type 29 has an invalid length.
[  455.675873][T18183] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3066'.
[  455.687214][T18183] netlink: 'syz.0.3066': attribute type 2 has an invalid length.
[  455.710462][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'.
[  455.719562][T18183] netlink: 'syz.0.3066': attribute type 3 has an invalid length.
[  455.727524][T18188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3066'.
[  455.737678][T18183] netlink: 'syz.0.3066': attribute type 1 has an invalid length.
[  455.947087][T17037] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.022424][T18203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'.
[  456.185319][T17037] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.409400][T17037] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.437779][T18169] chnl_net:caif_netlink_parms(): no params data found
[  456.514269][T17037] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.798333][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3085'.
[  456.855600][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'.
[  456.893504][T18260] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3084'.
[  456.917632][T18169] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.926193][T18169] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.933916][T18169] bridge_slave_0: entered allmulticast mode
[  456.951668][T18169] bridge_slave_0: entered promiscuous mode
[  457.030634][T18169] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.050829][T18169] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.068723][T18169] bridge_slave_1: entered allmulticast mode
[  457.103957][T18169] bridge_slave_1: entered promiscuous mode
[  457.210119][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.263481][T10373] net_ratelimit: 32 callbacks suppressed
[  457.263498][T10373] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  457.282762][T18289] netlink: 'syz.0.3092': attribute type 4 has an invalid length.
[  457.294709][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.345102][T17037] bridge_slave_1: left allmulticast mode
[  457.372726][T17037] bridge_slave_1: left promiscuous mode
[  457.378838][T17037] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.425205][ T5833] Bluetooth: hci0: command tx timeout
[  457.455994][T17037] bridge_slave_0: left promiscuous mode
[  457.461748][T17037] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.506058][T17037] erspan0: left allmulticast mode
[  457.511162][T17037] erspan0: left promiscuous mode
[  457.517753][T17037] bridge5: port 1(erspan0) entered disabled state
[  457.589420][T17037] tipc: Disabling bearer <eth:ip6gre0>
[  457.850085][T17037] bond6 (unregistering): (slave gretap2): Releasing active interface
[  458.196284][T17037] bond3 (unregistering): (slave bridge6): Releasing active interface
[  458.426025][T17037] bond1 (unregistering): Released all slaves
[  458.438234][T17037] bond2 (unregistering): Released all slaves
[  458.455285][T17037] bond0 (unregistering): (slave batadv1): Releasing active interface
[  458.465925][T17037] bond0 (unregistering): Released all slaves
[  458.478583][T17037] bond3 (unregistering): Released all slaves
[  458.491108][T17037] bond4 (unregistering): (slave veth11): Releasing active interface
[  458.501486][T17037] bond4 (unregistering): Released all slaves
[  458.513992][T17037] bond5 (unregistering): Released all slaves
[  458.526565][T17037] bond6 (unregistering): Released all slaves
[  458.539816][T17037] bond7 (unregistering): Released all slaves
[  458.555176][T17037] bond8 (unregistering): Released all slaves
[  458.612452][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  458.698216][T18169] team0: Port device team_slave_0 added
[  458.729820][T18169] team0: Port device team_slave_1 added
[  458.736071][T10373] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.755076][T10373] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.799888][T17037] tipc: Disabling bearer <eth:syzkaller0>
[  458.806191][T17037] tipc: Disabling bearer <udp:syz1>
[  458.811977][T17037] tipc: Left network mode
[  458.852005][T10373] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.863436][T17037] IPVS: stopping backup sync thread 12697 ...
[  458.864195][T10373] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.885257][T18333] sit1: entered promiscuous mode
[  458.929897][T18306] lo speed is unknown, defaulting to 1000
[  458.940803][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.948485][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  458.977386][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.988815][T10373] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  459.057677][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.072116][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.107639][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.286198][T18358] netlink: 'syz.2.3107': attribute type 1 has an invalid length.
[  459.362143][T18169] hsr_slave_0: entered promiscuous mode
[  459.374683][T18169] hsr_slave_1: entered promiscuous mode
[  459.383234][T18169] debugfs: 'hsr0' already exists in 'hsr'
[  459.388971][T18169] Cannot create hsr debugfs directory
[  459.506388][ T5833] Bluetooth: hci0: command tx timeout
[  459.698682][T18365] lo speed is unknown, defaulting to 1000
[  459.732372][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.022894][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.173219][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.302881][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.422618][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.448243][T18407] lo speed is unknown, defaulting to 1000
[  460.473062][T18413] sctp: [Deprecated]: syz.4.3115 (pid 18413) Use of struct sctp_assoc_value in delayed_ack socket option.
[  460.473062][T18413] Use struct sctp_sack_info instead
[  460.542403][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.680168][T18420] __nla_validate_parse: 3 callbacks suppressed
[  460.680187][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3118'.
[  460.844045][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  460.916000][T17037] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.961366][T17037] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.961786][T18427] IPVS: Scheduler module ip_vs_sip not found
[  461.033951][T17037] batman_adv: batadv0: Removing interface: dummy0
[  461.145289][T17037] team0 (unregistering): Port device veth9 removed
[  461.206694][T17037] team0 (unregistering): Port device veth5 removed
[  461.479003][T17037] team0 (unregistering): Port device team_slave_1 removed
[  461.517067][T17037] team0 (unregistering): Port device C removed
[  461.585645][ T5833] Bluetooth: hci0: command tx timeout
[  461.711019][T18444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3122'.
[  461.720603][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'.
[  461.892434][T18453] lo speed is unknown, defaulting to 1000
[  461.973491][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  461.991213][T18477] sctp: [Deprecated]: syz.1.3131 (pid 18477) Use of int in max_burst socket option.
[  461.991213][T18477] Use struct sctp_assoc_value instead
[  462.016815][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.073355][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.119298][T18169] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  462.133848][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.151900][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.166589][T18169] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  462.175352][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.189323][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  462.264498][T18169] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  462.286807][T18169] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  462.312301][   T13] net_ratelimit: 3 callbacks suppressed
[  462.312317][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  462.427220][T17037] IPVS: stop unused estimator thread 0...
[  462.433072][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  462.440534][T18500] xt_ecn: cannot match TCP bits for non-tcp packets
[  462.584600][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  462.874863][T18515] vlan2: entered allmulticast mode
[  462.914365][T18515] bridge8: entered allmulticast mode
[  462.937832][T18518] bridge8: port 1(erspan0) entered blocking state
[  462.980224][T18518] bridge8: port 1(erspan0) entered disabled state
[  463.012481][T18518] erspan0: entered allmulticast mode
[  463.024821][T18518] erspan0: entered promiscuous mode
[  463.251678][T18169] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.508891][T18169] 8021q: adding VLAN 0 to HW filter on device team0
[  463.548604][T17033] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.555769][T17033] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.613870][T17033] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.621018][T17033] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.665035][ T5833] Bluetooth: hci0: command tx timeout
[  463.670849][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  463.782798][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  463.902571][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  464.015760][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  464.144833][T18169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.173782][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  464.215017][T18598] netlink: 'syz.0.3154': attribute type 13 has an invalid length.
[  464.315412][T18169] veth0_vlan: entered promiscuous mode
[  464.346346][T18169] veth1_vlan: entered promiscuous mode
[  464.403026][T18169] veth0_macvtap: entered promiscuous mode
[  464.483092][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  464.515513][T18609] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  464.564181][T18169] veth1_macvtap: entered promiscuous mode
[  464.623703][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  464.657151][T18169] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.677769][T18169] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.711799][T17609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.736266][T17609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.816451][T17609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.838419][T17609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.066494][T17609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.093520][T17609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.161935][T18663] x_tables: duplicate underflow at hook 1
[  465.176144][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.208911][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.517576][T18682] netlink: 'syz.4.3170': attribute type 1 has an invalid length.
[  465.676561][T18682] bond1: entered promiscuous mode
[  465.728999][T18682] bond1: entered allmulticast mode
[  465.744391][T18682] 8021q: adding VLAN 0 to HW filter on device bond1
[  465.994459][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  466.003478][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  466.014928][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  466.032759][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  466.040316][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  466.089663][T18699] lo speed is unknown, defaulting to 1000
[  466.253099][T18699] chnl_net:caif_netlink_parms(): no params data found
[  466.319618][T18699] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.326844][T18699] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.334909][T18699] bridge_slave_0: entered allmulticast mode
[  466.341690][T18699] bridge_slave_0: entered promiscuous mode
[  466.349359][T18699] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.356578][T18699] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.363956][T18699] bridge_slave_1: entered allmulticast mode
[  466.370758][T18699] bridge_slave_1: entered promiscuous mode
[  466.403531][T18699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.414785][T18699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.440673][T18699] team0: Port device team_slave_0 added
[  466.448053][T18699] team0: Port device team_slave_1 added
[  466.470591][T18699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.477749][T18699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.504810][T18699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.518876][T18699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.526024][T18699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.553957][T18699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.593706][T18699] hsr_slave_0: entered promiscuous mode
[  466.599858][T18699] hsr_slave_1: entered promiscuous mode
[  466.606132][T18699] debugfs: 'hsr0' already exists in 'hsr'
[  466.611849][T18699] Cannot create hsr debugfs directory
[  466.886301][T18699] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  466.903266][T18699] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  466.912437][T18699] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  466.922366][T18699] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  466.945770][T18699] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.952862][T18699] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.960243][T18699] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.967382][T18699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.013283][T18699] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.029254][T17037] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.037325][T17037] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.048916][T18699] 8021q: adding VLAN 0 to HW filter on device team0
[  467.060363][T10380] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.067442][T10380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.080765][T17037] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.087850][T17037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.230576][T18699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.267257][T18699] veth0_vlan: entered promiscuous mode
[  467.277125][T18699] veth1_vlan: entered promiscuous mode
[  467.301423][T18699] veth0_macvtap: entered promiscuous mode
[  467.312014][T18699] veth1_macvtap: entered promiscuous mode
[  467.329506][T18699] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.343930][T18699] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.357603][T17609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.367149][T17609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.377895][T17609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.387530][T17609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.424910][T10380] net_ratelimit: 14 callbacks suppressed
[  467.424926][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  467.464050][T10380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.472370][T10380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.499373][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.508946][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.563885][T18718] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  467.579073][T18718] bond1: (slave lo): Enslaving as an active interface with an up link
[  467.589423][T18718] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  467.612732][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  467.733115][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  467.842318][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  467.953623][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  468.062640][ T5833] Bluetooth: hci1: command tx timeout
[  468.082244][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  468.192294][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  468.312856][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  468.422392][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  470.142448][ T5833] Bluetooth: hci1: command tx timeout
[  472.223441][ T5833] Bluetooth: hci1: command tx timeout
[  472.512306][T10377] net_ratelimit: 36 callbacks suppressed
[  472.512328][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  472.642313][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  472.752446][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  472.862910][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  472.972370][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  473.082683][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  473.193150][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  473.302314][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  473.412303][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  473.522312][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  474.302363][ T5833] Bluetooth: hci1: command tx timeout
[  474.629452][T18740] __nla_validate_parse: 35 callbacks suppressed
[  474.629472][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3176'.
[  474.650042][T18740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3176'.
[  474.653249][T18745] netlink: 'syz.0.3173': attribute type 2 has an invalid length.
[  474.686856][T18745] !: entered promiscuous mode
[  474.695805][T18747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3174'.
[  474.709798][T18747] netlink: 'syz.1.3174': attribute type 6 has an invalid length.
[  474.721316][T18747] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3174'.
[  474.721812][T18745] netlink: 'syz.0.3173': attribute type 2 has an invalid length.
[  474.761644][T18749] bridge_slave_0: left allmulticast mode
[  474.808720][T18757] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3173'.
[  474.819565][T18749] bridge_slave_0: left promiscuous mode
[  474.819963][T18757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3173'.
[  474.828301][T18749] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.858407][T18749] bridge_slave_1: left allmulticast mode
[  474.866787][T18749] bridge_slave_1: left promiscuous mode
[  474.875790][T18749] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.893302][T18749] bond0: (slave bond_slave_0): Releasing backup interface
[  474.906402][T18749] bond0: (slave bond_slave_1): Releasing backup interface
[  474.921862][T18749] team0: Port device team_slave_0 removed
[  474.931072][T18749] team0: Port device team_slave_1 removed
[  474.940155][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.948030][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.958780][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.984423][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.027390][T18756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.045226][T18756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.083902][T18755] lo speed is unknown, defaulting to 1000
[  475.153123][T18759] lo speed is unknown, defaulting to 1000
[  475.309834][T18767] lo speed is unknown, defaulting to 1000
[  475.483736][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'.
[  475.512739][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'.
[  475.714186][T18784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3184'.
[  475.794356][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3187'.
[  477.537106][   T29] audit: type=1800 audit(1773451676.955:6): pid=18818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3194" name="blkio.bfq.time_recursive" dev="tmpfs" ino=53 res=0 errno=0
[  477.603622][T10377] net_ratelimit: 16 callbacks suppressed
[  477.603641][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  477.645692][T18815] geneve0: entered promiscuous mode
[  477.781300][T18820] lo speed is unknown, defaulting to 1000
[  477.813981][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  478.173919][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  478.184488][T18848] netlink: 'syz.3.3200': attribute type 4 has an invalid length.
[  478.243610][T18847] bridge1: entered promiscuous mode
[  478.250020][T18847] bridge1: entered allmulticast mode
[  478.342684][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  478.493182][T18873] syzkaller1: entered promiscuous mode
[  478.498746][T18873] syzkaller1: entered allmulticast mode
[  478.514897][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  478.700530][T18890] netlink: 'syz.3.3209': attribute type 10 has an invalid length.
[  478.779748][T18890] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  478.832311][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  478.944765][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  479.254884][T18915] syzkaller0: entered promiscuous mode
[  479.260385][T18915] syzkaller0: entered allmulticast mode
[  479.267647][T18914] lo speed is unknown, defaulting to 1000
[  479.286077][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  479.377580][T18929] lo speed is unknown, defaulting to 1000
[  480.732444][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  480.757552][T18942] bridge1: entered promiscuous mode
[  480.942554][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  480.984091][T17609] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  481.129706][T18963] syzkaller0: entered promiscuous mode
[  481.148918][T18963] syzkaller0: entered allmulticast mode
[  481.159144][T18972] netlink: 'syz.2.3225': attribute type 83 has an invalid length.
[  481.518917][T18990] __nla_validate_parse: 6 callbacks suppressed
[  481.518937][T18990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'.
[  481.589763][T18990] 8021q: adding VLAN 0 to HW filter on device bond2
[  481.597468][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'.
[  481.610742][T18992] lo speed is unknown, defaulting to 1000
[  481.611130][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3230'.
[  481.641978][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'.
[  481.672437][T18986] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  482.682316][T17033] net_ratelimit: 12 callbacks suppressed
[  482.682338][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  482.804215][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  482.924122][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.043128][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.153230][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.264129][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.307223][T18984] Set syz1 is full, maxelem 65536 reached
[  483.372460][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.482348][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  483.592267][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  487.783252][T10380] net_ratelimit: 37 callbacks suppressed
[  487.783273][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  487.902399][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.012256][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.122256][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.232311][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.342328][T17033] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.452248][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.562250][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.672263][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  488.782323][T10380] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  489.486642][T19039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3234'.
[  489.487305][T19034] netlink: 'syz.2.3233': attribute type 6 has an invalid length.
[  489.809073][T19054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3239'.
[  490.164205][T19077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3244'.
[  490.203543][T19075] gretap0: entered promiscuous mode
[  490.216154][T19075] macsec1: entered allmulticast mode
[  490.238351][T19075] gretap0: entered allmulticast mode
[  490.272037][T19075] gretap0: left allmulticast mode
[  490.283094][T19075] gretap0: left promiscuous mode
[  490.399838][T19088] veth0: entered promiscuous mode
[  490.408148][T19087] veth0: left promiscuous mode
[  490.465916][T19081] lo speed is unknown, defaulting to 1000
[  490.537077][T19092] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3250'.
[  490.631764][T19096] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3252'.
[  490.707198][T19105] netlink: 'syz.3.3254': attribute type 5 has an invalid length.
[  490.730457][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'.
[  490.766240][T19107] netlink: 'syz.4.3257': attribute type 9 has an invalid length.
[  490.804942][T19112] netlink: 'syz.4.3257': attribute type 9 has an invalid length.
[  490.946219][T19125] hsr0: entered promiscuous mode
[  490.951737][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'.
[  491.010377][T19127] ip6gre1: entered promiscuous mode
[  491.018130][T19127] ip6gre1: entered allmulticast mode
[  491.042237][T19126] hsr_slave_0: left promiscuous mode
[  491.059425][T19126] hsr_slave_1: left promiscuous mode
[  491.116106][T19126] hsr0 (unregistering): left promiscuous mode
[  491.225005][  T797] IPVS: starting estimator thread 0...
[  491.226224][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'.
[  491.236691][T19129] lo speed is unknown, defaulting to 1000
[  491.322384][T19145] IPVS: using max 27 ests per chain, 64800 per kthread
[  491.389188][T19153] pim6reg: entered allmulticast mode
[  491.405050][T19153] pim6reg: left allmulticast mode
[  492.034102][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3277'.
[  492.286385][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'.
[  492.904783][T19215] geneve2: entered promiscuous mode
[  492.910741][T19215] geneve2: entered allmulticast mode
[  492.936848][T19209] team_slave_0: entered promiscuous mode
[  492.942872][T19209] team_slave_1: entered promiscuous mode
[  492.974347][T19209] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  492.990323][T19216] ip6gretap1: entered promiscuous mode
[  493.003022][T19216] ip6gretap1: entered allmulticast mode
[  493.037077][T17609] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  493.074964][T17609] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  493.132329][T10377] net_ratelimit: 20 callbacks suppressed
[  493.132348][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.143928][T17609] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  493.168198][T17609] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  493.255542][T10377] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.390842][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.533126][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.672241][T17037] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.792506][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  493.890408][T19287] syzkaller0: entered promiscuous mode
[  493.898052][T19287] syzkaller0: entered allmulticast mode
[  493.953742][T19287] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  494.066139][T10373] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  494.182292][T10373] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  494.221015][T19306] netlink: 'syz.1.3302': attribute type 1 has an invalid length.
[  494.243602][T19309] netlink: 'syz.3.3303': attribute type 29 has an invalid length.
[  494.292745][T10373] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  494.428745][T19315] lo speed is unknown, defaulting to 1000
[  494.442366][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  494.724938][T19340] __nla_validate_parse: 6 callbacks suppressed
[  494.724958][T19340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3311'.
[  494.931655][T19351] lo speed is unknown, defaulting to 1000
[  494.950074][T19349] lo speed is unknown, defaulting to 1000
[  495.666240][T19397] syzkaller0: entered promiscuous mode
[  495.672538][T19397] syzkaller0: entered allmulticast mode
[  495.772085][T19387] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3323'.
[  495.814833][T19387] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3323'.
[  495.839742][T19387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3323'.
[  496.095955][T19427] lo speed is unknown, defaulting to 1000
[  496.148912][T19437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3338'.
[  496.227060][T19432] lo speed is unknown, defaulting to 1000
[  496.251238][T19440] xt_policy: too many policy elements
[  496.639544][T19427] lo speed is unknown, defaulting to 1000
[  496.736848][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3341'.
[  497.128539][T19466] netlink: 'syz.2.3346': attribute type 1 has an invalid length.
[  497.140520][T19466] netlink: 'syz.2.3346': attribute type 2 has an invalid length.
[  497.213577][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3347'.
[  497.262049][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3347'.
[  497.276798][T19477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3350'.
[  497.652292][T19477] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3350'.
[  497.661417][T19473] lo speed is unknown, defaulting to 1000
[  498.223626][   T13] net_ratelimit: 25 callbacks suppressed
[  498.223655][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.343356][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.452376][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.563180][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.672295][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.782671][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  498.893067][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  499.013363][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  499.123252][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  499.232322][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.312329][   T13] net_ratelimit: 36 callbacks suppressed
[  503.312350][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.432279][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.554180][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.662593][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.783209][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  503.895014][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  504.012384][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  504.122425][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  504.232436][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  504.342381][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.342348][T10381] net_ratelimit: 35 callbacks suppressed
[  508.342369][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.462339][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.572289][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.682282][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.802227][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  508.912782][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  509.022466][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  509.132254][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  509.242235][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  509.352253][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.432631][T10381] net_ratelimit: 36 callbacks suppressed
[  513.432651][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.552281][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.662327][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.772283][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.882222][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  513.992236][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  514.102303][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  514.212254][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  514.322257][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  514.432219][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  518.544109][T10381] net_ratelimit: 36 callbacks suppressed
[  518.544130][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  518.662250][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  518.773086][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  518.882304][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  518.993374][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  519.102318][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  519.212369][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  519.322252][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  519.433237][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  519.542271][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  523.652675][   T13] net_ratelimit: 36 callbacks suppressed
[  523.652696][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  523.772234][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  523.882765][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  523.992246][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.103182][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.212270][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.322356][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.433129][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.542342][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  524.652668][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  528.752272][ T3571] net_ratelimit: 36 callbacks suppressed
[  528.752298][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  528.872261][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  528.982959][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.092241][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.202252][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.322248][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.433619][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.542312][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.652220][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  529.762845][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  530.477680][T19626] netlink: 488 bytes leftover after parsing attributes in process `syz.2.3367'.
[  530.487073][T19626] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3367'.
[  530.669246][T19634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3369'.
[  531.044936][T19658] syzkaller0: entered promiscuous mode
[  531.050436][T19658] syzkaller0: entered allmulticast mode
[  531.074054][T19657] tcf_pedit_act: 7 callbacks suppressed
[  531.074145][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.087027][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.093999][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.100933][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.107901][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.114883][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.120015][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3379'.
[  531.121808][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.137726][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.144698][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.151622][T19657] tc action pedit 'at' offset -2147483647 out of bounds
[  531.648036][T19699] netlink: 'syz.1.3387': attribute type 10 has an invalid length.
[  531.675962][T19699] team0: Device veth1_macvtap failed to register rx_handler
[  532.170533][T19722] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3392'.
[  532.222558][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  532.255314][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  532.285201][T19731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3395'.
[  532.303183][T19731] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3395'.
[  532.317668][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  532.352396][T19731] vlan3: entered promiscuous mode
[  532.367667][T19731] geneve1: entered promiscuous mode
[  532.391257][T19731] vlan3: entered allmulticast mode
[  532.412188][T19731] geneve1: entered allmulticast mode
[  532.848807][T19755] lo speed is unknown, defaulting to 1000
[  532.905835][T19759] syzkaller0: entered promiscuous mode
[  532.911465][T19759] syzkaller0: entered allmulticast mode
[  532.949000][T19759] tipc: Started in network mode
[  532.954770][T19759] tipc: Node identity 0e15969e7519, cluster identity 4711
[  532.963085][T19759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.989332][T19765] netlink: 'syz.4.3406': attribute type 16 has an invalid length.
[  532.997396][T19765] netlink: 'syz.4.3406': attribute type 17 has an invalid length.
[  533.027239][T19758] tipc: Resetting bearer <eth:syzkaller0>
[  533.048903][T19758] tipc: Disabling bearer <eth:syzkaller0>
[  533.213392][T19769] netlink: 'syz.2.3407': attribute type 8 has an invalid length.
[  533.613337][T19797] netlink: 'syz.0.3413': attribute type 2 has an invalid length.
[  533.768892][T19797] IPVS: Scheduler module ip_vs_sip not found
[  533.777604][T19480] net_ratelimit: 30 callbacks suppressed
[  533.777620][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  533.892719][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  534.005069][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  534.031891][T19825] syzkaller0: entered promiscuous mode
[  534.037674][T19825] syzkaller0: entered allmulticast mode
[  534.808326][T19841] netlink: 'syz.1.3422': attribute type 1 has an invalid length.
[  534.835041][T19842] ip6t_srh: unknown srh match flags  4000
[  535.038593][T19854] FAULT_INJECTION: forcing a failure.
[  535.038593][T19854] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.051830][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.0.3426 Not tainted syzkaller #0 PREEMPT(full) 
[  535.051852][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  535.051867][T19854] Call Trace:
[  535.051944][T19854]  <TASK>
[  535.051983][T19854]  dump_stack_lvl+0xe8/0x150
[  535.052099][T19854]  should_fail_ex+0x412/0x560
[  535.052209][T19854]  _copy_from_user+0x2d/0xb0
[  535.052328][T19854]  __sys_connect+0x156/0x450
[  535.052454][T19854]  ? __pfx___sys_connect+0x10/0x10
[  535.052496][T19854]  ? __pfx_ksys_write+0x10/0x10
[  535.052550][T19854]  __x64_sys_connect+0x7a/0x90
[  535.052575][T19854]  do_syscall_64+0x14d/0xf80
[  535.052650][T19854]  ? trace_irq_disable+0x3b/0x150
[  535.052693][T19854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.052729][T19854]  ? clear_bhb_loop+0x40/0x90
[  535.052751][T19854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.052772][T19854] RIP: 0033:0x7f960ef9c799
[  535.052826][T19854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.052841][T19854] RSP: 002b:00007f960fdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  535.052866][T19854] RAX: ffffffffffffffda RBX: 00007f960f215fa0 RCX: 00007f960ef9c799
[  535.052879][T19854] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000003
[  535.052890][T19854] RBP: 00007f960fdd4090 R08: 0000000000000000 R09: 0000000000000000
[  535.052901][T19854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.052911][T19854] R13: 00007f960f216038 R14: 00007f960f215fa0 R15: 00007fffaaa54418
[  535.052940][T19854]  </TASK>
[  535.229555][T19839] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  535.290410][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  535.317656][T19841] bond3: entered promiscuous mode
[  535.323124][T19841] 8021q: adding VLAN 0 to HW filter on device bond3
[  535.357975][T19845] 8021q: adding VLAN 0 to HW filter on device bond3
[  535.367966][T19845] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  535.378688][T19845] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  535.395160][T19845] bond3: (slave wireguard0): making interface the new active one
[  535.406093][T19845] wireguard0: entered promiscuous mode
[  535.413241][T19845] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  535.508702][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  535.652363][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  535.685385][T19877] __nla_validate_parse: 2 callbacks suppressed
[  535.685402][T19877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3431'.
[  535.763209][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  535.885451][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3434'.
[  535.886578][T19877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.912765][T10229] IPVS: starting estimator thread 0...
[  535.952327][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  535.985098][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'.
[  536.000671][T19895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.011736][T19873] netlink: 'syz.0.3430': attribute type 1 has an invalid length.
[  536.023253][T19891] IPVS: using max 30 ests per chain, 72000 per kthread
[  536.035443][T19873] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3430'.
[  536.051523][T19895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.165646][T19877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.260071][T19899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3436'.
[  536.267426][T19883] lo speed is unknown, defaulting to 1000
[  536.269595][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  536.388593][T19877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.487306][T19877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.571785][T10381] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.590287][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.610028][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.675756][T10375] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.812275][ T3571] net_ratelimit: 20 callbacks suppressed
[  538.812291][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  538.932214][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.042270][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.152216][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.182512][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  539.272317][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.382273][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.492237][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.602355][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.712255][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  539.822490][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  543.832300][T19480] net_ratelimit: 35 callbacks suppressed
[  543.832321][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  543.952276][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  544.016696][T19933] FAULT_INJECTION: forcing a failure.
[  544.016696][T19933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.042393][T19933] CPU: 1 UID: 0 PID: 19933 Comm: syz.1.3438 Not tainted syzkaller #0 PREEMPT(full) 
[  544.042417][T19933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  544.042428][T19933] Call Trace:
[  544.042435][T19933]  <TASK>
[  544.042443][T19933]  dump_stack_lvl+0xe8/0x150
[  544.042472][T19933]  should_fail_ex+0x412/0x560
[  544.042501][T19933]  _copy_to_user+0x31/0xb0
[  544.042520][T19933]  simple_read_from_buffer+0xe1/0x170
[  544.042587][T19933]  proc_fail_nth_read+0x1bb/0x230
[  544.042629][T19933]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.042656][T19933]  ? rw_verify_area+0x2a6/0x4d0
[  544.042674][T19933]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.042700][T19933]  vfs_read+0x20c/0xa70
[  544.042717][T19933]  ? fdget_pos+0x246/0x320
[  544.042740][T19933]  ? __pfx_aa_sk_perm+0x10/0x10
[  544.042841][T19933]  ? __pfx___mutex_lock+0x10/0x10
[  544.042894][T19933]  ? __pfx_vfs_read+0x10/0x10
[  544.042921][T19933]  ? __fget_files+0x2a/0x420
[  544.042950][T19933]  ? __fget_files+0x3a0/0x420
[  544.042973][T19933]  ? __fget_files+0x2a/0x420
[  544.043006][T19933]  ksys_read+0x150/0x270
[  544.043026][T19933]  ? __pfx_ksys_read+0x10/0x10
[  544.043053][T19933]  do_syscall_64+0x14d/0xf80
[  544.043069][T19933]  ? trace_irq_disable+0x3b/0x150
[  544.043092][T19933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.043109][T19933]  ? clear_bhb_loop+0x40/0x90
[  544.043130][T19933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.043147][T19933] RIP: 0033:0x7f8a7a75cfce
[  544.043164][T19933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  544.043179][T19933] RSP: 002b:00007f8a7b5aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  544.043198][T19933] RAX: ffffffffffffffda RBX: 00007f8a7b5af6c0 RCX: 00007f8a7a75cfce
[  544.043211][T19933] RDX: 000000000000000f RSI: 00007f8a7b5af0a0 RDI: 0000000000000004
[  544.043221][T19933] RBP: 00007f8a7b5af090 R08: 0000000000000000 R09: 0000000000000000
[  544.043232][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.043242][T19933] R13: 00007f8a7aa16038 R14: 00007f8a7aa15fa0 R15: 00007ffe45af54c8
[  544.043272][T19933]  </TASK>
[  544.272460][T19940] netlink: 'syz.3.3440': attribute type 1 has an invalid length.
[  544.297317][T19934] netlink: 'syz.3.3440': attribute type 8 has an invalid length.
[  544.353781][T19940] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3440'.
[  544.416798][T19932] syzkaller0: entered promiscuous mode
[  544.441373][T19932] syzkaller0: entered allmulticast mode
[  544.452579][T19940] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  544.502096][T19932] syzkaller1: entered promiscuous mode
[  544.527334][T19932] syzkaller1: entered allmulticast mode
[  544.573606][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  544.655863][T19956] netlink: 'syz.1.3445': attribute type 1 has an invalid length.
[  544.757743][T19939] tipc: Started in network mode
[  544.766940][T19939] tipc: Node identity ce5ac2dec321, cluster identity 4711
[  544.775489][T19939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.797945][T19958] bond4: (slave geneve2): making interface the new active one
[  544.806741][T19958] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  544.850168][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  544.858833][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  544.875870][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  544.886935][T19962] syzkaller0: entered promiscuous mode
[  544.892580][T19962] syzkaller0: entered allmulticast mode
[  544.914478][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  544.923807][T19931] tipc: Resetting bearer <eth:syzkaller0>
[  544.952788][T19931] tipc: Disabling bearer <eth:syzkaller0>
[  544.992499][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.066071][T19969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3449'.
[  545.112464][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.234149][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.305861][T19969] tipc: Started in network mode
[  545.310761][T19969] tipc: Node identity ac14140f, cluster identity 4711
[  545.318393][T19969] tipc: Enabled bearer <udp:syz2>, priority 10
[  545.343180][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.465939][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.508245][T19991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3454'.
[  545.583918][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  545.617657][T19999] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002
[  545.639669][T19995] lo speed is unknown, defaulting to 1000
[  548.615006][T20020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  548.628281][T20023] syzkaller0: entered promiscuous mode
[  548.637542][T20023] syzkaller0: entered allmulticast mode
[  548.901190][T10218] tipc: Node number set to 2886997007
[  548.912882][T20057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3462'.
[  548.947876][T20039] tipc: Resetting bearer <eth:syzkaller0>
[  548.968705][T20039] tipc: Disabling bearer <eth:syzkaller0>
[  548.988792][T20048] syzkaller0: entered promiscuous mode
[  548.994429][T20048] syzkaller0: entered allmulticast mode
[  549.130104][T20060] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3463'.
[  549.142637][T10375] net_ratelimit: 1 callbacks suppressed
[  549.142652][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.262429][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.312231][T20081] tap0: tun_chr_ioctl cmd 35111
[  549.372680][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.494383][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.560183][T10381] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  549.578195][T10381] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  549.587708][T10381] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  549.596748][T10381] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  549.622574][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.752451][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.905031][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  549.921399][T20117] dummy0: entered allmulticast mode
[  549.951564][T20116] dummy0: left allmulticast mode
[  550.023504][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  550.095422][T20134] netlink: 'syz.1.3483': attribute type 3 has an invalid length.
[  550.142434][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  550.205009][T20143] netlink: 'syz.1.3487': attribute type 4 has an invalid length.
[  550.274396][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  550.847238][T20184] syzkaller0: entered promiscuous mode
[  550.855553][T20184] syzkaller0: entered allmulticast mode
[  550.884185][T20184] erspan1: entered promiscuous mode
[  550.963965][T20191] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3498'.
[  550.973276][T20195] syzkaller1: entered promiscuous mode
[  550.973297][T20195] syzkaller1: entered allmulticast mode
[  551.038371][T20191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3498'.
[  551.250090][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3506'.
[  551.421509][T20236] netlink: 'syz.4.3509': attribute type 10 has an invalid length.
[  551.464513][T20236] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.473560][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'.
[  551.497860][T20236] team0: Port device bond0 added
[  551.669936][T20246] syzkaller1: entered promiscuous mode
[  551.690294][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'.
[  551.691965][T20246] syzkaller1: entered allmulticast mode
[  551.775294][T20250] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.782981][T20250] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.813766][T20250] team_slave_0: left promiscuous mode
[  551.819664][T20250] team_slave_1: left promiscuous mode
[  551.829054][T20258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3514'.
[  551.850174][T20258] SET target dimension over the limit!
[  552.058972][T20250] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.125977][T20250] bond3: left promiscuous mode
[  552.130752][T20250] wireguard0: left promiscuous mode
[  552.178314][  T147] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  552.209037][  T147] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  552.235522][  T147] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  552.249742][  T147] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  552.259201][  T147] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  552.282234][  T147] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  552.321120][  T147] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  552.358890][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'.
[  552.363070][  T147] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  552.715075][T20295] tipc: Started in network mode
[  552.732237][T20295] tipc: Node identity 5a758824270f, cluster identity 4711
[  552.754435][T20300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3524'.
[  552.770080][T20295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.822532][T20302] syzkaller0: entered promiscuous mode
[  552.840375][T20302] syzkaller0: entered allmulticast mode
[  552.918155][T20295] tipc: Resetting bearer <eth:syzkaller0>
[  552.977818][T20294] tipc: Resetting bearer <eth:syzkaller0>
[  553.092865][T20294] tipc: Disabling bearer <eth:syzkaller0>
[  553.115375][T20323] netlink: 'syz.4.3527': attribute type 1 has an invalid length.
[  553.135136][T20323] netlink: 'syz.4.3527': attribute type 2 has an invalid length.
[  553.162766][T20323] netlink: 'syz.4.3527': attribute type 1 has an invalid length.
[  553.202282][T20323] netlink: 'syz.4.3527': attribute type 3 has an invalid length.
[  553.210022][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'.
[  553.260619][T20328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3527'.
[  554.044532][T20372] xt_CT: You must specify a L4 protocol and not use inversions on it
[  554.193966][   T13] net_ratelimit: 20 callbacks suppressed
[  554.193985][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  554.390026][T20385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.418031][T20385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.542226][T20360] Bluetooth: hci2: command 0x0406 tx timeout
[  554.634442][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  554.789920][T20385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.818142][T20385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.820322][T20411] netlink: 'syz.1.3544': attribute type 1 has an invalid length.
[  554.852868][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  554.891649][T20385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.903384][T20385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.982339][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.013518][T20385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.025680][T20385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.096084][  T147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  555.104897][  T147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.113169][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.130179][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  555.138489][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.152873][T10375] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  555.161165][T10375] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.176225][T10375] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  555.184618][T10375] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.233156][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.342523][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.452235][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.562252][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  555.672205][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.202233][T10375] net_ratelimit: 31 callbacks suppressed
[  559.202255][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.322204][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.432261][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.542321][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.652277][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.762268][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.882215][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  559.992286][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  560.102263][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  560.212282][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  560.723818][T20444] bond0: Caught tx_queue_len zero misconfig
[  560.863239][T20455] netlink: 'syz.0.3550': attribute type 10 has an invalid length.
[  560.866943][T20457] __nla_validate_parse: 6 callbacks suppressed
[  560.866960][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'.
[  560.881988][T20455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.916759][T20458] x_tables: duplicate underflow at hook 1
[  560.940019][T20455] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  560.962061][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3552'.
[  561.191892][T20476] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  561.589725][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3567'.
[  561.642818][T20506] syzkaller0: entered promiscuous mode
[  561.648494][T20506] syzkaller0: entered allmulticast mode
[  561.651206][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3566'.
[  561.700561][T20508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3566'.
[  561.722412][T20506] netlink: 'syz.2.3568': attribute type 61 has an invalid length.
[  562.034855][T20528] ip6tnl1: entered allmulticast mode
[  562.040506][T20528] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3572'.
[  562.052825][T20528] netlink: 'syz.2.3572': attribute type 1 has an invalid length.
[  562.060569][T20528] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3572'.
[  562.348465][T20552] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3578'.
[  562.351539][T20550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  562.367920][T20551] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3578'.
[  562.382177][   T29] audit: type=1800 audit(1773451761.795:7): pid=20519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3569" name="memory.events" dev="tmpfs" ino=547 res=0 errno=0
[  562.862778][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3581'.
[  562.908124][T20575] x_tables: duplicate underflow at hook 1
[  564.229059][  T147] net_ratelimit: 24 callbacks suppressed
[  564.229079][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  564.273577][T20617] bridge_slave_0: left allmulticast mode
[  564.303005][T20617] bridge_slave_0: left promiscuous mode
[  564.308863][T20617] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.365347][T20617] bridge_slave_1: left allmulticast mode
[  564.379077][T20617] bridge_slave_1: left promiscuous mode
[  564.410604][T20617] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.426927][T20617] bond0: (slave bond_slave_0): Releasing backup interface
[  564.469731][T20617] bond0: (slave bond_slave_1): Releasing backup interface
[  564.541769][T20617] team0: Port device team_slave_0 removed
[  564.568401][T20617] team0: Port device team_slave_1 removed
[  564.589164][T20617] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.615165][T20617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.633673][T20617] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.641171][T20617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.651891][T20617] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  564.752278][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  564.785323][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  564.882201][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  564.969532][T20661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.992227][T10381] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  565.135584][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  565.232656][T20670] lo speed is unknown, defaulting to 1000
[  565.422568][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  565.544714][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  565.794425][T20693] lo speed is unknown, defaulting to 1000
[  565.803338][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  565.971238][T20712] __nla_validate_parse: 4 callbacks suppressed
[  565.971257][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3604'.
[  566.058938][T20722] netlink: 'syz.3.3606': attribute type 1 has an invalid length.
[  566.316197][T20722] 8021q: adding VLAN 0 to HW filter on device bond1
[  566.345937][T20726] bond1: entered allmulticast mode
[  566.405526][T20728] bond1: (slave ip6gretap1): making interface the new active one
[  566.414435][T20728] ip6gretap1: entered allmulticast mode
[  566.421252][T20728] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  567.180056][T20781] netlink: 'syz.3.3614': attribute type 21 has an invalid length.
[  567.235218][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'.
[  567.262040][  T147] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.278663][  T147] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.297321][  T147] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  567.307273][  T147] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.317378][  T147] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.328681][  T147] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  567.339818][T20781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3614'.
[  567.398685][  T147] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.417855][  T147] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.465471][T20793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3615'.
[  567.465775][  T147] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  567.512598][  T147] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.531698][  T147] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.548966][  T147] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  567.593614][T20796] syzkaller0: entered promiscuous mode
[  567.599638][T20796] syzkaller0: entered allmulticast mode
[  567.627412][T20796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.668844][T20795] tipc: Resetting bearer <eth:syzkaller0>
[  567.692571][T20795] tipc: Disabling bearer <eth:syzkaller0>
[  567.734167][T20800] lo speed is unknown, defaulting to 1000
[  569.282224][T10375] net_ratelimit: 18 callbacks suppressed
[  569.282246][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  569.402288][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  569.512289][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  569.623921][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  569.677073][T20838] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3624'.
[  569.699201][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'.
[  569.788239][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'.
[  569.788239][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'.
[  570.051354][T20855] Bluetooth: MGMT ver 1.23
[  570.560031][T20844] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  570.561022][T20845] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  570.612263][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  570.643877][T20860] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3630'.
[  570.681792][T20860] netlink: 'syz.4.3630': attribute type 1 has an invalid length.
[  570.722567][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  570.827989][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'.
[  570.862222][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  570.895495][T20866] hsr_slave_1 (unregistering): left promiscuous mode
[  570.939794][T20861] delete_channel: no stack
[  570.993432][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  571.160098][T20879] syzkaller0: entered promiscuous mode
[  571.196880][T20879] syzkaller0: entered allmulticast mode
[  571.232212][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  571.255921][T20892] syzkaller0: entered promiscuous mode
[  571.270253][T20892] syzkaller0: entered allmulticast mode
[  572.635728][T20892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.644958][T20917] netlink: 'syz.4.3641': attribute type 1 has an invalid length.
[  572.652287][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  572.678128][T20917] __nla_validate_parse: 2 callbacks suppressed
[  572.678144][T20917] netlink: 174 bytes leftover after parsing attributes in process `syz.4.3641'.
[  572.724906][T20917] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR
[  572.735251][T20882] tipc: Resetting bearer <eth:syzkaller0>
[  572.763721][T20882] tipc: Disabling bearer <eth:syzkaller0>
[  574.342234][T10375] net_ratelimit: 14 callbacks suppressed
[  574.342254][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  574.462400][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  574.572247][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  574.682202][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  574.792291][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  574.902328][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  575.012238][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  575.122259][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  575.232225][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  575.342285][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  579.452308][T10367] net_ratelimit: 36 callbacks suppressed
[  579.452330][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  579.572624][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  579.682320][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  579.792290][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  579.903023][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  580.022345][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  580.132228][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  580.242249][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  580.352239][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  580.462383][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  584.542368][T10367] net_ratelimit: 36 callbacks suppressed
[  584.542392][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  584.662291][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  584.756192][T20955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3643'.
[  584.773854][T20951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3644'.
[  584.775554][T20956] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3645'.
[  584.814910][T20956] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3645'.
[  584.836141][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  584.918222][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3644'.
[  585.032860][T20965] ip6tnl0: Caught tx_queue_len zero misconfig
[  585.069936][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  585.235464][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3652'.
[  585.282968][T20981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3653'.
[  585.420130][T20989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3655'.
[  585.435246][T20989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3655'.
[  585.529227][T19480] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.538506][T19480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.547833][T19480] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.557448][T19480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.568294][T19480] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.580841][T19480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.591190][T19480] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.601269][T19480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.622288][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  585.663106][T20995] syzkaller0: entered promiscuous mode
[  585.668854][T20995] syzkaller0: entered allmulticast mode
[  585.832762][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  585.873709][T21007] team0: No ports can be present during mode change
[  585.956146][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  585.993175][T21011] netlink: 'syz.1.3661': attribute type 13 has an invalid length.
[  586.001167][T21011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3661'.
[  586.082424][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  586.192367][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  586.312282][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  586.584903][T21043] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  586.613049][T21038] lo speed is unknown, defaulting to 1000
[  586.890544][T21051] lo speed is unknown, defaulting to 1000
[  587.045532][T21067] syzkaller0: entered promiscuous mode
[  587.051032][T21067] syzkaller0: entered allmulticast mode
[  587.168774][T21076] lo speed is unknown, defaulting to 1000
[  587.726054][T21109] bridge1: entered allmulticast mode
[  587.774768][T21109] bridge2: entered allmulticast mode
[  588.159814][T21140] lo speed is unknown, defaulting to 1000
[  588.405531][T21152] syzkaller0: entered promiscuous mode
[  588.415883][T21152] syzkaller0: entered allmulticast mode
[  588.699723][T21166] macsec2: entered promiscuous mode
[  588.712779][T21166] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  588.754191][T21167] syzkaller0: entered promiscuous mode
[  588.759744][T21167] syzkaller0: entered allmulticast mode
[  588.849132][T21167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  588.866645][T21165] tipc: Resetting bearer <eth:syzkaller0>
[  588.981175][T21165] tipc: Disabling bearer <eth:syzkaller0>
[  589.198597][T21192] xt_CT: You must specify a L4 protocol and not use inversions on it
[  589.643251][T10367] net_ratelimit: 18 callbacks suppressed
[  589.643271][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  589.774926][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  589.852527][T21215] netlink: 'syz.3.3714': attribute type 1 has an invalid length.
[  589.950463][T21215] bond2: entered promiscuous mode
[  589.978769][T21215] 8021q: adding VLAN 0 to HW filter on device bond2
[  590.046277][T21223] 8021q: adding VLAN 0 to HW filter on device bond2
[  590.053661][T21223] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  590.102749][T21223] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  590.126492][T21223] bond2: (slave wireguard0): making interface the new active one
[  590.136670][T21223] wireguard0: entered promiscuous mode
[  590.155590][T21223] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  590.194444][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.322749][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.432372][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.542930][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.652702][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.762624][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.872420][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.982815][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  594.743043][T10367] net_ratelimit: 33 callbacks suppressed
[  594.743062][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  594.862933][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  594.972534][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.082530][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.192516][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.302687][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.412549][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.533889][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.577209][T21257] __nla_validate_parse: 4 callbacks suppressed
[  595.577230][T21257] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3719'.
[  595.609527][T21264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3721'.
[  595.642425][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.772786][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.797725][T21276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3725'.
[  595.816566][T21279] mac80211_hwsim hwsim51 ªªªªª;: renamed from wlan0 (while UP)
[  595.818951][T21276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3725'.
[  595.856797][T21277] syzkaller0: entered promiscuous mode
[  595.912665][T21277] syzkaller0: entered allmulticast mode
[  595.928611][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'.
[  596.065137][T21277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.082566][T21275] tipc: Resetting bearer <eth:syzkaller0>
[  596.127038][T21275] tipc: Disabling bearer <eth:syzkaller0>
[  596.172938][T10229] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  596.293982][T21300] lo speed is unknown, defaulting to 1000
[  596.338205][T21309] xt_hashlimit: max too large, truncated to 1048576
[  596.434367][T21307] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  596.483671][T21323] xt_TCPMSS: Only works on TCP SYN packets
[  596.723270][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3739'.
[  596.747423][T21335] pim6reg0: tun_chr_ioctl cmd 1074025675
[  596.780232][T21335] pim6reg0: persist disabled
[  596.793512][T21334] pim6reg0: tun_chr_ioctl cmd 1074025673
[  596.810963][T21330] lo speed is unknown, defaulting to 1000
[  596.823146][T10229] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  596.848218][T21331] can: request_module (can-proto-0) failed.
[  596.903986][T21344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'.
[  597.114976][T21354] IPv6: sit2: Disabled Multicast RS
[  597.619055][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.650504][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.724630][T21374] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  597.758383][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.765315][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.771346][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.777531][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.786427][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.792531][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.812964][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.833128][T21375] xt_TCPMSS: Only works on TCP SYN packets
[  597.913429][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.942432][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.213960][T21409] pim6reg: entered allmulticast mode
[  598.246435][T21411] Bluetooth: MGMT ver 1.23
[  598.355871][T21418] ±ÿ: renamed from lo
[  598.454512][T21427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'.
[  598.564276][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'.
[  598.588576][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'.
[  598.975795][T21453] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  599.150979][T21473] ip6erspan0: entered promiscuous mode
[  599.191333][T21475] netlink: 'syz.4.3781': attribute type 1 has an invalid length.
[  599.210200][T21475] netlink: 'syz.4.3781': attribute type 1 has an invalid length.
[  599.498125][T21494] netlink: 'syz.4.3786': attribute type 10 has an invalid length.
[  599.517717][T21494] team0: Device vxcan1 is of different type
[  599.565883][T21502] netlink: 'syz.0.3788': attribute type 3 has an invalid length.
[  599.741318][T21509] bond3 (unregistering): Released all slaves
[  599.816494][T21506] bond2: option packets_per_slave: invalid value (1048582)
[  599.835719][T21506] bond2: option packets_per_slave: allowed values 0 - 65535
[  599.864440][T21506] bond2 (unregistering): Released all slaves
[  599.943896][   T13] net_ratelimit: 23 callbacks suppressed
[  599.943914][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.072780][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.212728][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.413251][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.488452][T21539] netlink: 'syz.1.3799': attribute type 39 has an invalid length.
[  600.523166][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.567248][T21542] pim6reg1: entered promiscuous mode
[  600.573110][T21542] pim6reg1: entered allmulticast mode
[  600.633103][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.679617][T21547] tap0: tun_chr_ioctl cmd 2147767521
[  600.743111][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.873038][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.983209][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  601.098594][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  601.193555][T21566] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  601.534472][T21567] __nla_validate_parse: 8 callbacks suppressed
[  601.534491][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  601.564406][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'.
[  601.620857][T21567] lo speed is unknown, defaulting to 1000
[  601.933517][T21584] netlink: 'syz.3.3811': attribute type 29 has an invalid length.
[  601.950707][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'.
[  601.998575][T21587] netlink: 'syz.3.3811': attribute type 29 has an invalid length.
[  602.013082][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3811'.
[  602.106963][T21591] xt_hashlimit: size too large, truncated to 1048576
[  602.171291][T21588] erspan0: entered promiscuous mode
[  602.284562][T21588] 8021q: adding VLAN 0 to HW filter on device bond0
[  602.316884][T21588] 8021q: adding VLAN 0 to HW filter on device team0
[  605.012513][T10367] net_ratelimit: 29 callbacks suppressed
[  605.012532][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.132482][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.242448][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.352502][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.462274][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.572502][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.682475][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.792846][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  605.902803][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  606.012469][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  608.305208][T21630] netlink: 'syz.4.3818': attribute type 2 has an invalid length.
[  608.328673][T21630] tipc: Cannot configure node identity twice
[  608.359033][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'.
[  608.377395][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'.
[  608.397842][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'.
[  608.410250][T21641] dvmrp0: entered allmulticast mode
[  608.537763][T21647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3820'.
[  608.788456][T21668] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3823'.
[  608.804675][T21670] pim6reg1: entered promiscuous mode
[  608.814582][T21670] pim6reg1: entered allmulticast mode
[  608.957748][T21684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'.
[  608.979379][T21684] sctp: [Deprecated]: syz.4.3829 (pid 21684) Use of int in max_burst socket option.
[  608.979379][T21684] Use struct sctp_assoc_value instead
[  609.004781][T21684] sctp: [Deprecated]: syz.4.3829 (pid 21684) Use of int in max_burst socket option.
[  609.004781][T21684] Use struct sctp_assoc_value instead
[  609.246836][T21702] lo speed is unknown, defaulting to 1000
[  609.490836][T21723] netlink: 'syz.2.3838': attribute type 3 has an invalid length.
[  609.545700][T21720] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) !
[  609.594172][T21715] syzkaller0: entered promiscuous mode
[  609.624110][T21715] syzkaller0: entered allmulticast mode
[  610.044235][T21749] net_ratelimit: 29 callbacks suppressed
[  610.044254][T21749] openvswitch: netlink: IP tunnel dst address not specified
[  610.083680][T21720] lo speed is unknown, defaulting to 1000
[  610.192461][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  610.325804][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  610.492910][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3851'.
[  610.532200][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  610.533559][T21773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3851'.
[  610.697370][T21784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  610.707267][T21784] syzkaller0: entered promiscuous mode
[  610.713220][T21784] syzkaller0: entered allmulticast mode
[  610.729820][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  610.739898][T21784] tipc: Resetting bearer <eth:syzkaller0>
[  610.753041][T21783] tipc: Resetting bearer <eth:syzkaller0>
[  610.811832][T21783] tipc: Disabling bearer <eth:syzkaller0>
[  610.873054][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  610.893122][ T5833] Bluetooth: hci1: link tx timeout
[  610.898500][ T5833] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  610.913387][T21791] siw: device registration error -23
[  611.014698][T21798] netlink: 'syz.1.3858': attribute type 1 has an invalid length.
[  611.041253][T21798] bond5: entered promiscuous mode
[  611.047790][T21798] 8021q: adding VLAN 0 to HW filter on device bond5
[  611.107482][T21799] 8021q: adding VLAN 0 to HW filter on device bond5
[  611.142057][T21799] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  611.175339][T21799] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  611.196929][T21799] bond5: (slave vti0): making interface the new active one
[  611.215148][T21799] vti0: entered promiscuous mode
[  611.289796][T21799] bond5: (slave vti0): Enslaving as an active interface with an up link
[  611.343162][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  611.462259][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  611.572260][T10367] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  611.701167][T21817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3864'.
[  611.712206][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  612.062920][T21835] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  612.076250][T21839] lo speed is unknown, defaulting to 1000
[  612.115918][T21845] syzkaller0: entered promiscuous mode
[  612.121406][T21845] syzkaller0: entered allmulticast mode
[  612.178531][T21853] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3871'.
[  612.213475][T21845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.240487][T21843] tipc: Resetting bearer <eth:syzkaller0>
[  612.266797][T21843] tipc: Disabling bearer <eth:syzkaller0>
[  612.494367][T21870] lo speed is unknown, defaulting to 1000
[  612.521596][T21875] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  612.677153][T21886] bond3: entered allmulticast mode
[  612.683317][T21886] 8021q: adding VLAN 0 to HW filter on device bond3
[  612.785508][T21893] xt_hashlimit: size too large, truncated to 1048576
[  612.946355][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  612.987719][T21911] macsec0: entered promiscuous mode
[  613.126520][T21911] macsec0: left promiscuous mode
[  613.189667][T21917] 8021q: adding VLAN 0 to HW filter on device bond0
[  613.207212][T21917] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  613.229322][T21917] bond0: (slave sit0): Error -95 calling set_mac_address
[  613.327171][T21932] netlink: 'syz.1.3892': attribute type 1 has an invalid length.
[  613.348003][T21928] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  613.369096][T21928] bond3 (unregistering): Released all slaves
[  613.590064][T21941] FAULT_INJECTION: forcing a failure.
[  613.590064][T21941] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.604068][T21941] CPU: 0 UID: 0 PID: 21941 Comm: syz.0.3894 Not tainted syzkaller #0 PREEMPT(full) 
[  613.604092][T21941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  613.604103][T21941] Call Trace:
[  613.604111][T21941]  <TASK>
[  613.604119][T21941]  dump_stack_lvl+0xe8/0x150
[  613.604153][T21941]  should_fail_ex+0x412/0x560
[  613.604183][T21941]  _copy_from_user+0x2d/0xb0
[  613.604211][T21941]  __sys_sendto+0x2b0/0x710
[  613.604250][T21941]  ? __pfx___sys_sendto+0x10/0x10
[  613.604273][T21941]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  613.604305][T21941]  ? __fget_files+0x3a0/0x420
[  613.604341][T21941]  ? ksys_write+0x242/0x270
[  613.604364][T21941]  ? __pfx_ksys_write+0x10/0x10
[  613.604388][T21941]  __x64_sys_sendto+0xde/0x100
[  613.604417][T21941]  do_syscall_64+0x14d/0xf80
[  613.604433][T21941]  ? trace_irq_disable+0x3b/0x150
[  613.604459][T21941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.604478][T21941]  ? clear_bhb_loop+0x40/0x90
[  613.604500][T21941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.604517][T21941] RIP: 0033:0x7f960ef9c799
[  613.604535][T21941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.604550][T21941] RSP: 002b:00007f960fdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  613.604570][T21941] RAX: ffffffffffffffda RBX: 00007f960f215fa0 RCX: 00007f960ef9c799
[  613.604584][T21941] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  613.604595][T21941] RBP: 00007f960fdd4090 R08: 000020000005ffe4 R09: 000000000000001c
[  613.604607][T21941] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000000000000001
[  613.604618][T21941] R13: 00007f960f216038 R14: 00007f960f215fa0 R15: 00007fffaaa54418
[  613.604647][T21941]  </TASK>
[  613.799568][T21943] netlink: 'syz.2.3896': attribute type 1 has an invalid length.
[  613.855384][T21943] bond3: entered promiscuous mode
[  613.865060][T21943] 8021q: adding VLAN 0 to HW filter on device bond3
[  613.921133][T21943] netlink: 'syz.2.3896': attribute type 30 has an invalid length.
[  614.019617][T21943] bond3: (slave bridge7): making interface the new active one
[  614.030468][T21943] bridge7: entered promiscuous mode
[  614.037609][T21943] bond3: (slave bridge7): Enslaving as an active interface with an up link
[  614.156847][T21977] macsec1: entered promiscuous mode
[  614.165882][T21977] macsec1: entered allmulticast mode
[  614.176716][T21973] __nla_validate_parse: 3 callbacks suppressed
[  614.176731][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'.
[  614.196413][T21973] netlink: 121 bytes leftover after parsing attributes in process `syz.1.3904'.
[  614.223486][T21974] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3905'.
[  614.235828][T21979] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3908'.
[  614.388476][T21988] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  614.453633][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'.
[  614.470343][T21999] netlink: 'syz.1.3915': attribute type 9 has an invalid length.
[  614.546700][T22004] netlink: 'syz.4.3916': attribute type 1 has an invalid length.
[  614.554796][T22004] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3916'.
[  614.565820][T22004] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3916'.
[  614.577702][T22004] netlink: 'syz.4.3916': attribute type 1 has an invalid length.
[  614.607822][T22004] vxcan5: entered promiscuous mode
[  614.683861][T22009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.710091][T22009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  614.809480][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'.
[  614.828105][T22014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'.
[  614.898044][T22019] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3921'.
[  615.132971][T10375] net_ratelimit: 21 callbacks suppressed
[  615.132992][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  615.387046][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  615.423164][T22031] syzkaller1: entered promiscuous mode
[  615.428644][T22031] syzkaller1: entered allmulticast mode
[  615.542236][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  615.673249][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  615.700247][T22063] bond4: Invalid ad_actor_system MAC address.
[  615.713235][T22063] bond4: option ad_actor_system: invalid value (7)
[  615.731351][T22063] bond4 (unregistering): Released all slaves
[  615.802212][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  615.905679][T22082] syzkaller0: entered promiscuous mode
[  615.911174][T22082] syzkaller0: entered allmulticast mode
[  615.985329][T22082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.004695][T22081] tipc: Resetting bearer <eth:syzkaller0>
[  616.043934][T22081] tipc: Disabling bearer <eth:syzkaller0>
[  616.102203][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  616.164620][T22095] lo speed is unknown, defaulting to 1000
[  616.311221][T22102] vcan0: tx drop: invalid sa for name 0x0000000000000004
[  616.318761][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  616.504521][T22116] SET target dimension over the limit!
[  616.638647][T22102] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.646374][T22102] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.928207][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  616.977484][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.119072][T22132] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20002
[  617.312659][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  617.333080][T19480] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.341452][T19480] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.381863][T19480] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.470290][T22135] pim6reg: entered allmulticast mode
[  617.501777][T19480] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.516085][T22137] pim6reg: left allmulticast mode
[  617.582433][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  617.601541][T22147] syzkaller0: entered promiscuous mode
[  617.641111][T22147] syzkaller0: entered allmulticast mode
[  617.714104][T22147] tipc: Started in network mode
[  617.718998][T22147] tipc: Node identity a68f9e973b2d, cluster identity 4711
[  617.729074][T22148] netlink: 'syz.2.3952': attribute type 1 has an invalid length.
[  617.734715][T22147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.769780][T22142] tipc: Resetting bearer <eth:syzkaller0>
[  617.823695][T22142] tipc: Disabling bearer <eth:syzkaller0>
[  617.912343][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  618.020077][T22177] netlink: 'syz.3.3959': attribute type 9 has an invalid length.
[  618.203890][T22182] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  618.279746][T22193] x_tables: duplicate underflow at hook 2
[  618.339010][T22197] syzkaller0: entered promiscuous mode
[  618.348949][T22197] syzkaller0: entered allmulticast mode
[  618.391858][T22197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.404483][T22196] tipc: Resetting bearer <eth:syzkaller0>
[  618.429569][T22196] tipc: Disabling bearer <eth:syzkaller0>
[  618.559608][T22212] netlink: 'syz.2.3975': attribute type 4 has an invalid length.
[  618.560264][T22205] lo speed is unknown, defaulting to 1000
[  618.611033][T22213] netlink: 'syz.2.3975': attribute type 4 has an invalid length.
[  619.507463][T22264] __nla_validate_parse: 15 callbacks suppressed
[  619.507482][T22264] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3982'.
[  619.547306][T22264] 8021q: VLANs not supported on ip_vti0
[  619.554233][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'.
[  619.767954][T22263] bond4: entered promiscuous mode
[  619.791111][T22263] 8021q: adding VLAN 0 to HW filter on device bond4
[  619.827176][T22282] ip6tnl2: entered allmulticast mode
[  619.836110][T22277] syzkaller0: entered promiscuous mode
[  619.841593][T22277] syzkaller0: entered allmulticast mode
[  619.869930][T22283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3987'.
[  619.946359][T22277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.992974][T22274] tipc: Resetting bearer <eth:syzkaller0>
[  620.011684][T22274] tipc: Disabling bearer <eth:syzkaller0>
[  620.192205][T19480] net_ratelimit: 15 callbacks suppressed
[  620.192227][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.312922][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.422558][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.532546][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.642582][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.752378][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.862644][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  620.972522][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  621.082582][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  621.192520][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.272487][ T3571] net_ratelimit: 36 callbacks suppressed
[  625.272510][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.402478][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.512858][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.634295][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.752499][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.862254][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  625.972564][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  626.082526][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  626.192527][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  626.302823][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  628.253627][T22307] pim6reg1: entered promiscuous mode
[  628.259042][T22307] pim6reg1: entered allmulticast mode
[  628.284884][T22311] FAULT_INJECTION: forcing a failure.
[  628.284884][T22311] name failslab, interval 1, probability 0, space 0, times 0
[  628.313183][T22311] CPU: 0 UID: 0 PID: 22311 Comm: syz.3.3992 Not tainted syzkaller #0 PREEMPT(full) 
[  628.313207][T22311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  628.313218][T22311] Call Trace:
[  628.313225][T22311]  <TASK>
[  628.313233][T22311]  dump_stack_lvl+0xe8/0x150
[  628.313263][T22311]  should_fail_ex+0x412/0x560
[  628.313291][T22311]  should_failslab+0xa8/0x100
[  628.313351][T22311]  __kmalloc_cache_noprof+0x88/0x660
[  628.313378][T22311]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  628.313480][T22311]  ? __genradix_ptr+0x1e1/0x220
[  628.313503][T22311]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  628.313534][T22311]  sctp_association_new+0x15d3/0x25e0
[  628.313625][T22311]  sctp_connect_new_asoc+0x2e4/0x6b0
[  628.313701][T22311]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  628.313733][T22311]  ? __local_bh_enable_ip+0xd0/0x130
[  628.313771][T22311]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  628.313806][T22311]  ? security_sctp_bind_connect+0x7e/0x2c0
[  628.313885][T22311]  sctp_sendmsg+0x1528/0x2c10
[  628.313934][T22311]  ? __pfx_sctp_sendmsg+0x10/0x10
[  628.313958][T22311]  ? aa_sk_perm+0x6d5/0x900
[  628.313988][T22311]  ? __pfx_aa_sk_perm+0x10/0x10
[  628.314012][T22311]  ? sock_rps_record_flow+0x19/0x350
[  628.314077][T22311]  ? __pfx_inet_sendmsg+0x10/0x10
[  628.314095][T22311]  ? inet_sendmsg+0x2f4/0x370
[  628.314112][T22311]  ? __pfx_inet_sendmsg+0x10/0x10
[  628.314130][T22311]  __sys_sendto+0x5de/0x710
[  628.314157][T22311]  ? __pfx___sys_sendto+0x10/0x10
[  628.314179][T22311]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  628.314209][T22311]  ? __fget_files+0x3a0/0x420
[  628.314242][T22311]  ? ksys_write+0x242/0x270
[  628.314258][T22311]  ? __pfx_ksys_write+0x10/0x10
[  628.314271][T22311]  __x64_sys_sendto+0xde/0x100
[  628.314287][T22311]  do_syscall_64+0x14d/0xf80
[  628.314297][T22311]  ? trace_irq_disable+0x3b/0x150
[  628.314311][T22311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.314321][T22311]  ? clear_bhb_loop+0x40/0x90
[  628.314333][T22311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.314342][T22311] RIP: 0033:0x7faaa479c799
[  628.314353][T22311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.314362][T22311] RSP: 002b:00007faaa5611028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  628.314374][T22311] RAX: ffffffffffffffda RBX: 00007faaa4a15fa0 RCX: 00007faaa479c799
[  628.314381][T22311] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  628.314388][T22311] RBP: 00007faaa5611090 R08: 000020000005ffe4 R09: 000000000000001c
[  628.314394][T22311] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000000000000001
[  628.314400][T22311] R13: 00007faaa4a16038 R14: 00007faaa4a15fa0 R15: 00007ffc87fb9bd8
[  628.314416][T22311]  </TASK>
[  628.314591][T22314] batadv_slave_1: entered promiscuous mode
[  628.612961][T22309] nbd4: detected capacity change from 0 to 63
[  628.619493][T22318] block nbd4: NBD_DISCONNECT
[  628.663110][T22318] block nbd4: Disconnected due to user request.
[  628.675295][T22317] batadv_slave_1: left promiscuous mode
[  628.681215][T22318] block nbd4: shutting down sockets
[  628.690969][    C1] blk_print_req_error: 138 callbacks suppressed
[  628.690985][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.706772][    C1] buffer_io_error: 138 callbacks suppressed
[  628.706786][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  628.721996][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.731531][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  628.739362][    C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.748894][    C1] Buffer I/O error on dev nbd4, logical block 2, async page read
[  628.756709][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.766220][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  628.790839][T22326] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.803172][T22326] Buffer I/O error on dev nbd4, logical block 0, async page read
[  628.804133][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3995'.
[  628.810945][T22326] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.829468][T22326] Buffer I/O error on dev nbd4, logical block 1, async page read
[  628.837296][T22326] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.847480][T22326] Buffer I/O error on dev nbd4, logical block 2, async page read
[  628.855924][T22326] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.873434][T22326] Buffer I/O error on dev nbd4, logical block 3, async page read
[  628.880721][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3995'.
[  628.881206][T22326] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.900304][T22326] Buffer I/O error on dev nbd4, logical block 0, async page read
[  628.908119][T22326] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  628.918016][T22326] Buffer I/O error on dev nbd4, logical block 1, async page read
[  628.926409][T22326] ldm_validate_partition_table(): Disk read failed.
[  628.937551][T22326] Dev nbd4: unable to read RDB block 0
[  628.944161][T22326]  nbd4: unable to read partition table
[  628.959272][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'.
[  628.960574][T22326] ldm_validate_partition_table(): Disk read failed.
[  628.978551][T22326] Dev nbd4: unable to read RDB block 0
[  628.984640][T22326]  nbd4: unable to read partition table
[  629.018039][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3997'.
[  629.150748][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'.
[  629.160804][T22343] netlink: 'syz.4.4000': attribute type 13 has an invalid length.
[  629.185408][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'.
[  629.226370][T22351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4002'.
[  629.294514][T22345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.346340][T22345] syzkaller0: entered promiscuous mode
[  629.384789][T22345] syzkaller0: entered allmulticast mode
[  629.427486][T22355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4003'.
[  629.475354][T22345] tipc: Resetting bearer <eth:syzkaller0>
[  629.513475][T22344] tipc: Resetting bearer <eth:syzkaller0>
[  629.536898][T22358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4006'.
[  629.573414][T22344] tipc: Disabling bearer <eth:syzkaller0>
[  629.597256][T22361] netlink: 'syz.0.4005': attribute type 1 has an invalid length.
[  629.615753][T22361] netlink: 15270 bytes leftover after parsing attributes in process `syz.0.4005'.
[  629.644907][T22358] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  629.646049][T22359] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  629.679038][T22359] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  629.695585][T22359] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  629.785619][T22374] x_tables: unsorted entry at hook 2
[  629.861970][T22375] lo speed is unknown, defaulting to 1000
[  630.219512][T22403] syzkaller0: entered promiscuous mode
[  630.236395][T22403] syzkaller0: entered allmulticast mode
[  630.412426][T19480] net_ratelimit: 28 callbacks suppressed
[  630.412446][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  630.546302][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  630.667546][T22421] netlink: 'syz.1.4024': attribute type 9 has an invalid length.
[  630.675967][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  630.822999][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  630.831010][T22427] pimreg: tun_chr_ioctl cmd 35108
[  630.951701][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  630.962378][T22434] netlink: 'syz.3.4030': attribute type 11 has an invalid length.
[  630.973437][T22434] netlink: 'syz.3.4030': attribute type 23 has an invalid length.
[  631.073328][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  631.182950][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  631.225561][T22449] netlink: 'syz.1.4037': attribute type 2 has an invalid length.
[  631.237676][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.246652][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.260701][T22449] Bluetooth: MGMT ver 1.23
[  631.293294][T10375] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  631.353218][T22461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.402303][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  631.876723][T22499] syzkaller0: entered promiscuous mode
[  631.882554][T22499] syzkaller0: entered allmulticast mode
[  632.009701][T22503] netlink: 'syz.3.4050': attribute type 66 has an invalid length.
[  632.042697][T22509] netlink: 'syz.0.4052': attribute type 2 has an invalid length.
[  632.165124][T22520] sock: sock_timestamping_bind_phc: sock not bind to device
[  632.214407][T22514] tap0: tun_chr_ioctl cmd 1074025681
[  632.870233][T22550] netlink: 'syz.4.4063': attribute type 1 has an invalid length.
[  632.916710][T22550] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  633.688631][   T13] wlan1: Trigger new scan to find an IBSS to join
[  633.756503][T22602] lo speed is unknown, defaulting to 1000
[  633.830529][T22611] netlink: 'syz.4.4080': attribute type 1 has an invalid length.
[  633.886035][T22611] 8021q: adding VLAN 0 to HW filter on device bond3
[  633.955806][T22615] lo: Caught tx_queue_len zero misconfig
[  633.962639][T22615] __nla_validate_parse: 17 callbacks suppressed
[  633.962692][T22615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4081'.
[  634.011272][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'.
[  634.021039][T22617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'.
[  634.066750][T22619] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4083'.
[  634.076560][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4083'.
[  634.215479][T22631] bridge: RTM_NEWNEIGH with invalid ether address
[  634.223444][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'.
[  634.347412][T22594] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  634.407980][T22634] lo speed is unknown, defaulting to 1000
[  634.477996][T22646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4091'.
[  634.704867][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'.
[  635.030794][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'.
[  635.134340][T22686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4102'.
[  635.223532][T22682] bond2: (slave vcan1): refused to change device type
[  635.592632][ T3571] net_ratelimit: 30 callbacks suppressed
[  635.592651][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  635.759999][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  635.787046][T22733] gtp1: entered promiscuous mode
[  635.803903][T22733] gtp1: entered allmulticast mode
[  635.807129][T22732] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  635.882202][T19480] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  635.934035][T22732] bond4: entered promiscuous mode
[  635.939424][T22732] 8021q: adding VLAN 0 to HW filter on device bond4
[  636.034004][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  636.202733][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  636.295889][T22770] netlink: 'syz.4.4122': attribute type 4 has an invalid length.
[  636.313085][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  636.325285][T22770] netlink: 'syz.4.4122': attribute type 4 has an invalid length.
[  636.349174][T22761] lo speed is unknown, defaulting to 1000
[  636.356116][T22770] netlink: 'syz.4.4122': attribute type 4 has an invalid length.
[  636.372001][T22769] netlink: 'syz.4.4122': attribute type 4 has an invalid length.
[  636.682700][  T131] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  636.812305][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  636.908058][T22797] bond7: entered promiscuous mode
[  636.932653][T22797] 8021q: adding VLAN 0 to HW filter on device bond7
[  637.020238][T22797] bond8: entered promiscuous mode
[  637.029036][T22797] 8021q: adding VLAN 0 to HW filter on device bond8
[  637.182034][T22797] bond10: entered promiscuous mode
[  637.188334][T22797] 8021q: adding VLAN 0 to HW filter on device bond10
[  637.210067][T22797] bond11: entered promiscuous mode
[  637.233473][T22797] 8021q: adding VLAN 0 to HW filter on device bond11
[  637.403954][T22797] bond14: entered promiscuous mode
[  637.443747][T22797] 8021q: adding VLAN 0 to HW filter on device bond14
[  637.512993][T22797] bond15: entered promiscuous mode
[  637.524545][T22797] 8021q: adding VLAN 0 to HW filter on device bond15
[  637.607520][T22797] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  637.612873][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  637.761917][T22868] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  637.783759][T22868] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  637.896359][T22877] macvlan2: entered promiscuous mode
[  637.943608][T22877] macvlan2: entered allmulticast mode
[  637.975432][T22877] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  638.305104][T22911] lo speed is unknown, defaulting to 1000
[  638.313910][T22904] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  638.390962][T22912] lo speed is unknown, defaulting to 1000
[  639.017221][T22960] FAULT_INJECTION: forcing a failure.
[  639.017221][T22960] name failslab, interval 1, probability 0, space 0, times 0
[  639.048276][T22960] CPU: 1 UID: 0 PID: 22960 Comm: syz.0.4160 Not tainted syzkaller #0 PREEMPT(full) 
[  639.048302][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  639.048313][T22960] Call Trace:
[  639.048321][T22960]  <TASK>
[  639.048335][T22960]  dump_stack_lvl+0xe8/0x150
[  639.048367][T22960]  should_fail_ex+0x412/0x560
[  639.048397][T22960]  should_failslab+0xa8/0x100
[  639.048422][T22960]  __kmalloc_cache_noprof+0x88/0x660
[  639.048443][T22960]  ? sctp_add_bind_addr+0x8c/0x370
[  639.048471][T22960]  sctp_add_bind_addr+0x8c/0x370
[  639.048497][T22960]  sctp_copy_local_addr_list+0x314/0x4f0
[  639.048523][T22960]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  639.048546][T22960]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  639.048571][T22960]  ? sctp_v6_is_any+0x64/0x80
[  639.048696][T22960]  ? sctp_copy_one_addr+0x93/0x360
[  639.048721][T22960]  sctp_bind_addr_copy+0xb3/0x3c0
[  639.048745][T22960]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  639.048768][T22960]  sctp_connect_new_asoc+0x2ff/0x6b0
[  639.048797][T22960]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  639.048829][T22960]  ? __local_bh_enable_ip+0xd0/0x130
[  639.048851][T22960]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  639.048872][T22960]  ? security_sctp_bind_connect+0x7e/0x2c0
[  639.048896][T22960]  sctp_sendmsg+0x1528/0x2c10
[  639.048937][T22960]  ? __pfx_sctp_sendmsg+0x10/0x10
[  639.048966][T22960]  ? aa_sk_perm+0x6d5/0x900
[  639.048996][T22960]  ? __pfx_aa_sk_perm+0x10/0x10
[  639.049021][T22960]  ? sock_rps_record_flow+0x19/0x350
[  639.049039][T22960]  ? __pfx_inet_sendmsg+0x10/0x10
[  639.049058][T22960]  ? inet_sendmsg+0x2f4/0x370
[  639.049076][T22960]  ? __pfx_inet_sendmsg+0x10/0x10
[  639.049095][T22960]  __sys_sendto+0x5de/0x710
[  639.049124][T22960]  ? __pfx___sys_sendto+0x10/0x10
[  639.049147][T22960]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  639.049180][T22960]  ? __fget_files+0x3a0/0x420
[  639.049216][T22960]  ? ksys_write+0x242/0x270
[  639.049238][T22960]  ? __pfx_ksys_write+0x10/0x10
[  639.049262][T22960]  __x64_sys_sendto+0xde/0x100
[  639.049291][T22960]  do_syscall_64+0x14d/0xf80
[  639.049307][T22960]  ? trace_irq_disable+0x3b/0x150
[  639.049338][T22960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.049356][T22960]  ? clear_bhb_loop+0x40/0x90
[  639.049379][T22960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.049396][T22960] RIP: 0033:0x7f960ef9c799
[  639.049414][T22960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.049429][T22960] RSP: 002b:00007f960fdd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  639.049450][T22960] RAX: ffffffffffffffda RBX: 00007f960f215fa0 RCX: 00007f960ef9c799
[  639.049464][T22960] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003
[  639.049475][T22960] RBP: 00007f960fdd4090 R08: 000020000005ffe4 R09: 000000000000001c
[  639.049487][T22960] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000000000000002
[  639.049498][T22960] R13: 00007f960f216038 R14: 00007f960f215fa0 R15: 00007fffaaa54418
[  639.049528][T22960]  </TASK>
[  639.403307][T22970] __nla_validate_parse: 18 callbacks suppressed
[  639.403326][T22970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4164'.
[  639.445704][T22972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4162'.
Stopping sshd: stopped /usr/sbin/sshd (pid 5580)
OK
Stopping crond: [  640.602350][ T3571] net_ratelimit: 21 callbacks suppressed
[  640.602370][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
stopped /usr/sbin/crond (pid 5563)
OK
[  640.722749][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 5488)
[  640.833168][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
Stopping network: [  640.953711][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  641.062726][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  641.172311][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
OK
[  641.283082][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex
Stopping iptables: OK[  641.393155][  T147] bond2: (slave ip6gretap1): failed to get link speed/duplex

Stopping system message bus: [  641.504080][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  641.614977][ T3571] bond2: (slave ip6gretap1): failed to get link speed/duplex
done
Stopping klogd: OK
Stopping acpid: OK
Stopping syslogd: stopped /sbin/syslogd (pid 5176)
OK
umount: can't remount debugfs read-only
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  645.320603][T20555] ==================================================================
[  645.328764][T20555] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  645.335931][T20555] Read of size 8 at addr ffff88808c5a00a8 by task khidpd_00065505/20555
[  645.344276][T20555] 
[  645.346585][T20555] CPU: 1 UID: 0 PID: 20555 Comm: khidpd_00065505 Not tainted syzkaller #0 PREEMPT(full) 
[  645.346599][T20555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  645.346606][T20555] Call Trace:
[  645.346611][T20555]  <TASK>
[  645.346615][T20555]  dump_stack_lvl+0xe8/0x150
[  645.346633][T20555]  print_report+0xba/0x230
[  645.346658][T20555]  ? __mutex_lock+0x812/0x1300
[  645.346669][T20555]  kasan_report+0x117/0x150
[  645.346682][T20555]  ? __mutex_lock+0x812/0x1300
[  645.346693][T20555]  __mutex_lock+0x812/0x1300
[  645.346703][T20555]  ? __mutex_lock+0x5ac/0x1300
[  645.346713][T20555]  ? l2cap_unregister_user+0x6a/0x1b0
[  645.346798][T20555]  ? __pfx___mutex_lock+0x10/0x10
[  645.346810][T20555]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  645.346849][T20555]  ? lockdep_hardirqs_on+0x7a/0x110
[  645.346859][T20555]  l2cap_unregister_user+0x6a/0x1b0
[  645.346875][T20555]  hidp_session_thread+0x3cb/0x440
[  645.346911][T20555]  ? __pfx_hidp_session_thread+0x10/0x10
[  645.346921][T20555]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  645.346933][T20555]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  645.346944][T20555]  ? __kthread_parkme+0x7a/0x1f0
[  645.346968][T20555]  ? __kthread_parkme+0x19c/0x1f0
[  645.346981][T20555]  kthread+0x388/0x470
[  645.346990][T20555]  ? __pfx_hidp_session_thread+0x10/0x10
[  645.347000][T20555]  ? __pfx_kthread+0x10/0x10
[  645.347009][T20555]  ret_from_fork+0x51e/0xb90
[  645.347030][T20555]  ? __pfx_ret_from_fork+0x10/0x10
[  645.347041][T20555]  ? __switch_to+0xc7d/0x1450
[  645.347059][T20555]  ? __pfx_kthread+0x10/0x10
[  645.347067][T20555]  ret_from_fork_asm+0x1a/0x30
[  645.347084][T20555]  </TASK>
[  645.347088][T20555] 
[  645.507633][T20555] The buggy address belongs to the physical page:
[  645.514033][T20555] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88808c5a3740 pfn:0x8c5a0
[  645.524074][T20555] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  645.531196][T20555] raw: 00fff00000000000 ffffea00024fd808 ffff8880b8640c40 0000000000000000
[  645.539771][T20555] raw: ffff88808c5a3740 0000000000000000 00000000ffffffff 0000000000000000
[  645.548328][T20555] page dumped because: kasan: bad access detected
[  645.554731][T20555] page_owner tracks the page as freed
[  645.560074][T20555] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 18699, tgid 18699 (syz-executor), ts 465973304764, free_ts 645315450654
[  645.578282][T20555]  post_alloc_hook+0x231/0x280
[  645.583055][T20555]  get_page_from_freelist+0x24dc/0x2580
[  645.588581][T20555]  __alloc_frozen_pages_noprof+0x18d/0x380
[  645.594366][T20555]  alloc_pages_mpol+0x232/0x4a0
[  645.599197][T20555]  ___kmalloc_large_node+0x4e/0x150
[  645.604372][T20555]  __kmalloc_large_node_noprof+0x18/0x90
[  645.609982][T20555]  __kmalloc_noprof+0x3e8/0x760
[  645.614810][T20555]  hci_alloc_dev_priv+0x28/0x2060
[  645.619882][T20555]  vhci_create_device+0x120/0x650
[  645.624959][T20555]  vhci_write+0x3ce/0x4a0
[  645.629267][T20555]  vfs_write+0x61d/0xb90
[  645.633486][T20555]  ksys_write+0x150/0x270
[  645.637794][T20555]  do_syscall_64+0x14d/0xf80
[  645.642360][T20555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.648241][T20555] page last free pid 18699 tgid 18699 stack trace:
[  645.654713][T20555]  __free_frozen_pages+0xc2b/0xdb0
[  645.659803][T20555]  bt_host_release+0x82/0x90
[  645.664374][T20555]  device_release+0x9e/0x1d0
[  645.669009][T20555]  kobject_put+0x228/0x560
[  645.673431][T20555]  vhci_release+0x15a/0x1a0
[  645.677917][T20555]  __fput+0x44f/0xa70
[  645.681875][T20555]  task_work_run+0x1d9/0x270
[  645.686439][T20555]  do_exit+0x70f/0x23c0
[  645.690606][T20555]  do_group_exit+0x21b/0x2d0
[  645.695173][T20555]  get_signal+0x1284/0x1330
[  645.699657][T20555]  arch_do_signal_or_restart+0xbc/0x830
[  645.705177][T20555]  exit_to_user_mode_loop+0x86/0x480
[  645.710452][T20555]  do_syscall_64+0x32d/0xf80
[  645.715014][T20555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  645.720883][T20555] 
[  645.723183][T20555] Memory state around the buggy address:
[  645.728785][T20555]  ffff88808c59ff80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  645.736829][T20555]  ffff88808c5a0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  645.744875][T20555] >ffff88808c5a0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  645.752922][T20555]                                   ^
[  645.758274][T20555]  ffff88808c5a0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  645.766314][T20555]  ffff88808c5a0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  645.774349][T20555] ==================================================================
[  645.783311][T20555] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  645.790520][T20555] CPU: 1 UID: 0 PID: 20555 Comm: khidpd_00065505 Not tainted syzkaller #0 PREEMPT(full) 
Sent SIGKILL to all processes
[  645.803095][T20555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  645.813137][T20555] Call Trace:
[  645.816403][T20555]  <TASK>
[  645.819317][T20555]  vpanic+0x56c/0xa60
[  645.823295][T20555]  ? __pfx_vpanic+0x10/0x10
[  645.827792][T20555]  panic+0xc5/0xd0
[  645.831502][T20555]  ? __pfx_panic+0x10/0x10
[  645.835908][T20555]  ? __mutex_lock+0x812/0x1300
[  645.840666][T20555]  ? __mutex_lock+0x812/0x1300
[  645.845416][T20555]  check_panic_on_warn+0x89/0xb0
[  645.850351][T20555]  ? __mutex_lock+0x812/0x1300
[  645.855110][T20555]  end_report+0x73/0x180
[  645.859346][T20555]  ? __mutex_lock+0x812/0x1300
[  645.864096][T20555]  kasan_report+0x128/0x150
[  645.868595][T20555]  ? __mutex_lock+0x812/0x1300
[  645.873362][T20555]  __mutex_lock+0x812/0x1300
[  645.877944][T20555]  ? __mutex_lock+0x5ac/0x1300
[  645.882700][T20555]  ? l2cap_unregister_user+0x6a/0x1b0
[  645.888077][T20555]  ? __pfx___mutex_lock+0x10/0x10
[  645.893092][T20555]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  645.898891][T20555]  ? lockdep_hardirqs_on+0x7a/0x110
[  645.904075][T20555]  l2cap_unregister_user+0x6a/0x1b0
[  645.909272][T20555]  hidp_session_thread+0x3cb/0x440
[  645.914373][T20555]  ? __pfx_hidp_session_thread+0x10/0x10
[  645.919991][T20555]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  645.926220][T20555]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  645.932454][T20555]  ? __kthread_parkme+0x7a/0x1f0
[  645.937391][T20555]  ? __kthread_parkme+0x19c/0x1f0
[  645.942413][T20555]  kthread+0x388/0x470
[  645.946479][T20555]  ? __pfx_hidp_session_thread+0x10/0x10
[  645.952101][T20555]  ? __pfx_kthread+0x10/0x10
[  645.956681][T20555]  ret_from_fork+0x51e/0xb90
[  645.961261][T20555]  ? __pfx_ret_from_fork+0x10/0x10
[  645.966358][T20555]  ? __switch_to+0xc7d/0x1450
[  645.971023][T20555]  ? __pfx_kthread+0x10/0x10
[  645.975599][T20555]  ret_from_fork_asm+0x1a/0x30
[  645.980359][T20555]  </TASK>
[  645.983606][T20555] Kernel Offset: disabled
[  645.987913][T20555] Rebooting in 86400 seconds..