last executing test programs:

3.130815002s ago: executing program 4 (id=15585):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x7ffe}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="a27a7300a4fd9f14594112d3957494fac475a1de92196afdc7dc760095ab8e037792b3413b1a670c2853a34899da568788cad53c87e7b4e339e10d387b81d36f07ad8d9895e1012d36e3619492fb4f0b61a5735ef40bdc84e576fec8a36cd983ef1006bd7625b649c4dcef300dccb4bda8912f22de92e1177d425f22e9ee2b", 0x7f}, {0x0}], 0x2, &(0x7f0000004340)=ANY=[@ANYBLOB="b800000000000000120100000900000085045fd26bfa44395c6da6d5ac326931f343ca2d00591f969ba56ead3dcc58336e9670ca5fc945e7f831f058adb258629f54fe7819259c010431013415a285678152a2841a523b39242f6afe556cb01f00072f4e96f4cc34fe1abe4e3d4a599dce7624eeafb94ab084245449626f7168353840d65c7c96d9ce0c35292f949cdd532b20bd982ab2b6fe2032b2cbe1f7ac20de0e189f8c9f073442f2cd1eb3990afd410000000000007800000000000000130100000000000020c3fe9a0d281cbdd415601042ad8131784e44c3e0e7877a648aaa9bc8ee370e8ef84195fd4aa9152f2780b90124892273e48048750aecda7fd41ae29b290bbc991cf746fda18a2126054511db3f0989a8b563bc16895e0d7b0b19a4a0387bb8463b44353b43000010100000000000001501000000000000d95657807b2b44b2c1d1bbc8910613a95173465e9e84edd0889eb5bd9ff1edb036fab852ee300c83b326ffba33a5bfae6e1aeb215cd622deb1164bd7111e826e99d1dc5d16c38fa377133afc5548320ce0857f8b40f8edab2a6522d710d81fc7f602efac243a96c63e0e8a6e1660a665aef2184f6b7e0461263cdb4c2539fffd8458c894dea7988ce43dde2bc10bee89e58067a923c39d95cb49370f043dec1b9b001182f8aaa38b1b336198d7642f8735c1c06fb6679c5097888e7bc21914a5a7460e431f307237eb94efe927e03336ff08bc0b7e7a608aeba884baa759b89f9855973e4b3d34405e4d59c7b92fd3b0191a6a11848bd0be1fa99cfbfbb06a22ec9cb41742023bea12ebe0909dae29f179704e3bacb81cc7f7cf72d5b7de72ad0721dbc7532b90e4567a91d5c39629a70d1f79f16985d9ed81a8283e57a26dda937bbc7126bba88ed8f650a744b7f32fa10202cfa0e1f190fc97a9d5a1c4f56fd938b8ed22b1c24c756f4d1b080131cc7a4f648f0023b3b0ecda0f8ea01795bb0833599aa10d031eb46275ff7b8f38556a3577c99c0df52f80b172dc46805a2cd43f1e361f47b24d4f15f9bc3358874f8b0c6846ba39800008b10d30a40c8d5f1cd19e149ad725357b4a3f8c9bf5cbdf869ef22e222e4911c38b9b242c19ad51e99912b94dfe4492172cde000f28c0d86297efa46668fb0955bf5d9c743a614cff5edd4bf80b053548ca4564ea32bff81b2e31b261eb176b1192a4e2b427d19cd6f9b9c44598929b9b11b10dffc39b0cc9fe67d969dd4db7e99b8b6c15cc1fd15c70db907ac89355f99b4cc977d35ab416d8b1f8b44a98050de3b09738d74ecd85f8837efbe494b361b8603bdcb56d47e31f97577110814beb2b2dec0cf5b167c733a153c00da666d6eb95433460c503d6f355b570c4ecb435ff39861efefed12647928e8d2cb16d43bbadc824788d3ab153cb5e2e0df3dcb271ec0a9553207e517bb88d8051ffbe0e932023904b723c5135200a929f384b71569665c69af34f384f32d1d6babb2e4fa1b65d301aa393d25142367dea940fdb4f3ce23efc445bd97319e84f09f3163db7573500a4c2960dbfcd93b3955b9dbed645087dfed7663f297251e2d42303ff017cccc2e85ed0a49205383ea6237e4320cc5867b7623461613cb2169d1dac044362449ce87c38ebc7815f1b4b86b3fe9596477ae1f64751caeff3faef35aaf0ed734e4661c8c73dd4342f3617ac8b82d38e17194f637468bfe6ea8302f5d7c67c00f082359dbf8640240bd899fa280eff29ede5a23a597e93647b701952c4aa85a77e3e112da0d4291733707ebcad04ed914e8c19e866736a41ee0ff15a694cff8df50bc6209acdb60ab9b03301eb991e22c13b25077a70abcfc21895beecade75612f5fef05d85b018cfdeccea3cdfc17dfddd8a4677d3f087627d3038e325d50c6f3bc64bd06741bad421cf0afcc84ae7fc428e04df68acd3686ad8cad6e7fd63e1fd48de5e053158947f2ce6e68e9a26a8e56f394769b74b523682383bab2221db812890c5cb5106a31b11a7736b62dfd77ffd347b96c8127a6b2180cf7e44f9807a3ada1175827c51df125b473d95cf287518fe9ec1f6987ac7c9b2479d34e18ddab55b2d73cf984fc8d0b9de7351e916bca107f92f62d09ed36ceef3c35bc9a0c040565031308b19c6091e60a85a1ddf558cdeb39857a7121804311d6664286d04f960cc850bc2b3ff913d459479ec9aeabd2de7ce6f09cac6579ad8d72e6156210029dd6ec56140870449f3ece76d7411f3cf16a5173fa6fb8f392df78c8aa2756ac5f8cb9e4fb66f700cea5511e0a1c35c449d4b20cf3a25218e198fe96e7848b4ca561589b66607a3243c2d7e622a7cf09817ad38022f4f3a5a358845f757c389030c98acedc93dcb92148ae7055fd8c6836938e53955ac0f28e42bc397e07c4294423b635cc50fc6be3fa6c44c777f52a0193be8d45f2602155a49b9619110d4e9a230c62ed720ea47f568698d49443de9bc8eb082aeede67cbe22d69685fe39daf2c1b1c1ecea591fed895aa34482b787a81b21238509fbb30f4e1ca963411e531c87cd86de29c490b4f1f47c42bc676ec88b6cf645b6f46903c295696ed0887db328f27ae264c17fa9d8001c47f95b5aa870d241d159dac9f3789366ab863e93a440bc4baf24b73d3e1a88db16bb5ed039630d8d5ea7c9d958eae207ec67e4f6125355d97f6e270d2737b2aaa99e502f3a01e44ccffbc58fd223839157286c4e1dc7c607e1fb39763af70642d5e20901d6fc200e6bf975afb7e9975740262396ebabf2ba5b25b70bf12f12c0d96e8022fdee0fccc69ed99da63c09a54abf5eb0a64b947c538b0ce9a4f5706147014a1b525a7c18655a5826f21889450f72d402b50d94539dc0955ae82002ae158333b471bad32b2c0d6b289e3283db1d7e5cc9fd2a977302986443f0a51e441f7b3fbd14130f474ea7db0c2de8d38157f71795e19823bcbf156fd3dc54abab2610d781ac15f8914e4e53b54304a2a1dc8850ac8bd8fcec07db783a714e9573bb3864f12cfbe7cf63b355d5a3a343f6e0101c2a564525c08cf0e50f6ed2d67cf2aa95cbc4825d209fd60800e4559909cbaac72e9d006224d3d345b97bb991f8a24bf883f435066c037134676ec681a8b83fa702cd754bd67ddb065f04c9c9391a9c6bc1e10b7a2ddf7db3d09bda9e8a088e39d73786a575d36ac215ca249e34213b58755ede4ec3cb8ee64171e9edc724d10556b4ff48465630ec6cb1d91de91dd6f63d3b9b46ea00ace87a85abb8e22a581775f0d516993bf3ccaace627efa5a6f1f7604e5fef69905adbf8ca906b055f365e2eedb42f66739eed17496761dc694e1d323911ad2aaa5922df5b3ea30a95feac9425ed7e57ba86e403e9da7e624940ff8c7adfc82f5038e87898df8f9b4da8b8179f981c6f828430ac7982085b2487ee5b5c33c6a778059e8d2033c454d7a2749f4b7fd3f846056b2d9e572e1022704709e7041347ead9c38310f1f3c7ee1de9cc3b080b591baae7382f7a298641610e165da02aa7e47b55f4ae7d0b6a0fe937d1537e4fa9c078bda074d84472958bd74d91bd3747099f994384eb6f55c8d8a753c25e52fbe05052039772cc2a92ed2dc52d40db340cbdfa45648305e0f416ce1e92e55a20fb7b8daa9976b9151ab7a1564ffa1dd37159172e6d807c8bab820c5c198625282a5ee52b5fd0b4eb29f0fb73d6bf4a751c05fe0e9fddc868f9a9797e1b8e5b8923fff7a4ef86100b4dd145c84168a04f2e6d00c72c179c565815d0d235f20ff1a59477f2ca7d21775f497a0949841cf6dd43471f39a19777dcadd607dd97ffb80e653363c7dae625524fcd45fec484b8dd8159ab67b874e6952d490489b5c490ff6e80e87c782db75e2d30b97ab80e469e7905216c5ed82a8804166268a9b8e9a635723312164c26036ca5800725884d0a5087030a15650f2f0865b743b40a648b653754eca46594155107eab4391e8a0f36c73e6ba20e40251309f519eab8a8f462be46e20814bfb7a024eed635b351fc28753b44722741f8a83b19b09747447fa2a5b97840c2904122d7fa3105c2de168e7603ba2c42f1fb7f6c3b785b14ad83d2d10ba07e6f95c85d8d23227a3e5647bb9842606db8c59cb5204319bb0c5f8bf909f6ff1bcd43584f761f32256ba04c818d4283358270bdad6857bd78fa9085ba5a80869b8df0c5e9e01f298ab29a0131449e927ae58c140ed3e3236d1c3f3fc1854375e62abe3794a9b3e451d514c9e7e729b7fc137b500644c051971780cadf157ea374aa0ca2665f62a62f5120ef44b29276d66b13d877fbe0ffdb1dde52757e155a2825878f76025cbb670be54e4ee85846e06c43a20f1d42f2cf923a34f66ee6b895284fb1232957a534929d244a576cb3fd622498ff81886d25df83daa9d8fa1398f4bcdddfe5ccd6f7ee50e418e63aa4e7a69b68e886aa4893f1a33e68820d768656d5ef1934998c438f115b8e28359ea65f63bc867c10087cab29c1c55631c92982c38d4e1b604d278e7da8932777876ba778d554ab9fa5574d85ff31acdd134820ac71a9213f0707ee069683c8fa6e4ef487aa3f57fb9d7503d69a08e63414b286235d59c7155bc3bc4aac4088b16b123c82d40866efb5e4438ab931dab196e97362b4da1f9e547e9de4c411ee4f203aec76aa887e3cfa95e76f9622b88a7d6cfbcd5395bdeab58493fb5fac10e5dddf1ebab4c87a9c128ff80b43df2764c074a7ca70d2b897faf10620a34a27db3580cfb043c79592016e2e38c2968d7973002365914e7f88ade572e9e451acd30f789823c543873980e15c69b61b6dd2df1a7bbbec70c34ad3671e00e9f5a6fdbf84c67bf8e91e4e7434fc838419c50a3da3661703e1755255cbce97524700aaa3f06b8b7bb857dc07947c0e105e5c9fb859fbe8abbd5edc957825641475356709564a1c1bddd4999a2ba571e9678f7968dde4bcd537527a75dbcb5b92225b4691cd7822e88dace0c058233833a64777dd285594c24a2799051194800c36746de7196a21101d31dd075f0f23af2e9274dabe3ba2609a9797b7bd3fe8a0eab15b0552e91fcc3788e157d1b3c3bcd4ff96cc089d464f6e8c5eede794c1f32af8ef50e3eff7c0c5931a3f0271d10fb8c8cb4fdf9d7226a33a3bc1628f1d8d8538f45fde13fbed8d3f7f53cbb3c56f5277070b35002799d7a042a08cc6aab8ae63b4b34b5e1dcb09b3c60a6591530758ec5f92d7c487af2240c38306d210cddb768907afd80f068569d288354f99412b311433a8bd395b61753ec3f5f550270698f1876ef564d132579770972b63cc9672bbed603c2935506760dd193d010011ad1e2fc831914351575af711058d20f85414601490f560f3fdea085ed5dbcb5b2ddee374912af97de9cce052a793c1a91387b617c5dbca415c48d4f55595a7781900b3df35e5e1b886350ccb93c9f1871ed60d9b864679935cd4b5042c601445965aa9088b614eb64e324331624e03ddec9fd8d44694d1e053e788ccf745e2fdf7f9063c5637fa94e034d1a8d22530360fa6615bab7781ab77e4f3e7b70371703854d619efb4e01463b2c2a8981a89d01334295b05def07391aeb71096349d2f3411d05298184f44b44221a14f94b75b54e9992b05694d760e07c7fb1f23faee0e409cdbcc727ce2aaf610205fbb7b84e9780bf32ad1e5a47d3afe8ea8055963942230b3ec250253aeeb95d9acb12ac51bdac185df3572c8b3ad26c5a857d421930814db901cadc8dff58e746ce62a17fad638ef6d4cd8485a8f4515b6bc08f7002cedf023d1a9aedae6647a774f0d36f171de989c1b1d3432fc00c81725ec4cdda0a385be7ed416741d3cd83c50166bbd73830e9d5dbb664f5353e7c17e84884bd3b932f566b203bd6b3687f0a6648562d2a741eeb6c2822ca7e20191730fe18115094a6b67bf0a8ccfb6b7bb63e86117045d73603f237c7351aa676a9b4572cf64181952d694839dd0b138f1a5fd65fa73f16dc4becb797075b4b0bedd19f05fb4c7bd26f2f67ce551c37bc07e8661f519759cf3665a2d254b82e6cb0859df499cc36a10e5eba96a87a09fe1bf5e35c32709f53b8b47431731e267ea6a9c915e237aa984d5cadc9b3bd2665ef9831545d6b0c204fb7e22f793eb73d483fcc31982452e544e7f3fdfcb26607983528bb2fd8d2a196932110fb80fa18b7750aa55114a0039ef7c649f3a0d0655381e40614dc5348b1f72c2008c758000000000000000101000002000000986cb95333fa5fb7b8327a80ff1eb7f1ebfa81e5c82509c2da81e8d8626b1dd27c07f58b7396375cb92fa1ec79ea08f90e50b0bef31d3d317cfb98ebbc00ce8d4bee560000000000f80000000000000018010000800200004c6e87b26adb87ee4a3e55ef0b047a5cf43abbe422e86d5ff032996b1006334b8ae6e51e9498a8f31feceb6db236551e37abddff7f41af144e86d1372f7d93901698d48119846c48eee82579389a21d7ac00b9538d3320ca1c5f18af75e8012c25bc8e46336f19a59d78155d2a27d4481de291917b44b2f4018d63b2575700039e2ec6ade59de65d2f6f6ade3a1794f2bbce0fca581ac52a64c7c8526971945aca82011b5ffb55e2959b1487619655128d842c78ef0d8f8de2fb61a6380556101cf162478556cb7748a27d4fde20f50b86e8304b10cc7eb3adf000f64bf4de83504a24000000000000010000000000000e01000000800000e650b8f291c1a10332e2b66f24eceaa36802534c502ae548b49f6a4f5cbdb3dc560487453b1be9e5ee36a06c7f6329f0e784170439043cff9e5e0944ea00b7bdae3c32b3e1890f4fe77a305c3144e93a4856fee1f8a6f6ea636c7b7d12b8c5aafcd95075e094a99ecb1e4d90659015e50d8f4408149e9920f269225a642a47583094f412ab7eef77020bbdc9adb7fa5d39eaf03649bfe8f53792f5272fe8f8665ebd34d641b6e3b8dc418ba2db7e8dd04966ec412ef0d7c16ff47aa900fc02bff0089436bf42c5eaee13e9f87f9482e50df5bcfd6b2f2d56cf59139386f91d493d041aed14ae8cee009f03d2562180b6d0000000000000001401000009000000534214964e93d54a9a3dc51be56b2b9f84105849f9f6e71270c0b952ebe17fe626607ea62f821022568647b0e19d7a2f206a6d14ae9fd7d7e9506a45ddc367d60f02d79c36a6f7dd108a9b7161f52e404a822ef3f9c50e5efa26d11fbb8c4a7f66ec5dffd134289f71ea4a29714dd1f58ea50199a3a9f76b6002dfbb1c97e80a733c9c6a0b71da484a292bfc0cf81125038d6b6b5d93e2177a12a64326e296eef72a7ce40c1995e5c8f0b68b6efd44be632c57ac7c897df692b5f0c5222c00001010"], 0x2470}, 0x4c000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept(r1, &(0x7f0000000340)=@generic, &(0x7f00000003c0)=0x80)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000057c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff, '\x00', 0x0, 0x0}, 0x50)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@local}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000180)={@mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xac72, 0x8d, 0x7f, 0x500, 0x7, 0x1280000, r8})
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)

3.002140612s ago: executing program 4 (id=15588):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x2, 'veth1_to_bridge\x00'})

2.908150946s ago: executing program 4 (id=15590):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x24040804)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0xffffffff, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c)
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa004ac2411e47060aefadfa617ac60000000000"], 0x28}}, 0x0)

2.176190553s ago: executing program 3 (id=15609):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000080)=0xcd, 0x4) (async)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f00000002c0)=0x8c3, 0x4) (async)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000580)=""/225, &(0x7f0000000680)=0xe1) (async)
write(r2, &(0x7f0000000140)="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", 0xfc) (async)
recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/40, 0x28}}], 0x1, 0x45833af92e4b39ff, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x25, &(0x7f0000000040)={0xfffffffd, 0x0, 0xffffffff}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x78}}, 0x4000080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="17003300d0000000080211000000080211000000fffffffffffff00f0402080000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1f8, r10, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eba693d7942e2e2a20267848ce"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f87f8d093c"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "3df8a0268c5b8342eb19"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d57843aa06"}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c6a311be40"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c3def5c749053713da002c8946"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @key_params=[@NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xe, 0x4, "8be6d9e7cba0928dc6a2"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "548133faac2e213aabf70b2917"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0c86deca46"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1aa3e6229e"}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "a2fc9c5624df0ae83d225a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "8df23216a89796b6425f4004"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) (async)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

2.068621327s ago: executing program 4 (id=15610):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x4, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000001, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x8, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x0, 0x8, 0x8, 0x10}, {0x5, 0x0, 0x9071, 0xff, 0x100, 0x3}, 0x4, 0x5, 0xa65}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.030739679s ago: executing program 3 (id=15611):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x571f68543cec8180)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}})
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0xffffff24, 0xb3, 0x1000}, 0xc)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000b700000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000003c0)={<r4=>r3, &(0x7f00000006c0)='%+\x00\x17\xd0\x1d\xb05\x1a\xf3+\xad\xeau\x1e\xb9\xfb\x03P\xef\xf4\xb5l \xf0\xe0\xadW\xd0\x96-?\x8f~\x8aA3\xa7\x89^5$nDD\xfc\x7f\x16Q\x93V\xd6\xc9\xc3\xc7D\x15 \x1eB\xe3\xce@\xbe\x95{\xc4V\x84\xdd\xe9\xc1\x19\xb1\a2\xaa\xaf\x87={\x99\x81\x12l\"\xe2\xc4Rqi\xf6[\x16!\x1a%\x838M\x118T\xa9D\xc7o\x114my)\xb0\xeeSl\x11H\xdb9\xe4\xc9\xd77\xffv\x92\xb6TH\x92\x9a\x16\xa5\xa8\x82 B\xd5D\x7fG\xb6\xe47A\xc8\x96\xa5L\x18\x7f\xe0.\x1a\xf7\t6\xe9YG\xbd\xe2\xa70\x83C\x9e\x9c\x13yg \xf9\xab\xf0-\xf0\n\xb9)\xb5\xf6\x97/8\xd5 \xbf\xb6\xc7\x178g\xc8G\xe2z\x9b~\xde\xfb', 0x214000, &(0x7f00000002c0)={@_ha_fsid={[0x1, 0x10000]}, {0xd9, 0x3, 0x80000ff, 0xfffc}}, 0x68, &(0x7f0000000280), &(0x7f0000000340)=0x8815})
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x5, 0x8}, 0xc)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000680)={0x4, &(0x7f0000000640)=[{0x4, 0x7, 0x6c, 0x7}, {0x7, 0x38, 0x4, 0x1ff}, {0xfffe, 0x1, 0x2, 0x7d2}, {0x8, 0x8, 0xff, 0x2}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="185080000100e5000000000000000000a4533dd8551d0958bab493413e1efd1d3a91bfc82d3f0145e3e534194fee27f3335ff72a2933529998bb3bce1eef3c1eb7df6beb284708901d890c45addb9aafbb0000000000000001d4cd711f61ee630a7638bf299bfb175b0f98ecdd21d5d8989745c876755b3d7f03b7c74fb842426c9cfaa9e68940e3e9"], &(0x7f0000000040)='GPL\x00', 0x401, 0x10, &(0x7f0000000080)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r4, r5], &(0x7f0000000480)=[{0x1, 0x3, 0x3, 0x8}, {0x2, 0x1, 0x0, 0x8}, {0x2, 0x1, 0x8}], 0x10, 0xd}, 0x94)

1.91254904s ago: executing program 3 (id=15612):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0xc00}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x2, 'pim6reg1\x00', {0x1}, 0x3})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r0, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10ab6a, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x27}, @generic={0xd, 0xa, 0xf, 0xfff8, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

1.911714474s ago: executing program 2 (id=15613):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="606f3af9", 0x4}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x40, @loopback, 0xa7}]}, &(0x7f0000000500)=0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0xc040480)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000d480)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffd, '\x00', 0x0, r1, 0x1, 0x2}, 0x50)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)

1.911295044s ago: executing program 3 (id=15614):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000300000000000000d17e00008500000020000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r2 = socket(0x10, 0x6, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$nfc_llcp(r3, 0x118, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.856622931s ago: executing program 2 (id=15615):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x3, 0xd6, 0x9, 0x1050a, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x2}, 0xc)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001114210600002907ffdbdf2508004b"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x4000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbfe, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x800b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private1, @local, {[@routing={0x2b, 0x0, 0x0, 0x1}]}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xc, 0x6, 0x2, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0xb, 0x6, 0x1, 0xffffffffffffffe0, 0xffffffffffffffff}, @cb_func={0x18, 0xff36794e7d91642, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x9f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x12e27060305517ef}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)

1.768179301s ago: executing program 2 (id=15617):
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x24, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000894)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async, rerun: 64)
r3 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64)
sendto$l2tp6(r3, &(0x7f0000000340)="61e5dff9a9a83575c6b0669e4cbfd53197323ba8bac4208902473a085375428bd7ed1b0a2da01036d55a459ccbc50b57a5e2786506aed2c78f6b897aa1a7126f072f007b2a311f4506c3d298cd74069ad99fc83db3e3105cfc5bed41903e8032a52a204e04d06e598ca061de960ed63d62908ff05e6477f6a6184652a7364b55b23f7eb7b3556c3207b0a8592158e32970c9aa1ff4d52d99a44aafc613f80e11966d21ace715b00aa1eb1595896096ca6be7f43513d3adf5dcda9a6529bd9e0856bd677a722a00061670ffe727176e61e99f6e509161840a7c80d38d2aa896a2b6bf043c7ecfe8780f", 0xe9, 0x2400c8c5, &(0x7f0000000440)={0xa, 0x0, 0x100000, @mcast2, 0x1}, 0x20) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@deltaction={0x58, 0x31, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x136}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x200, 0x70bda9, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xb}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x9, 0x800, 0x0, 0x80, 0xe11, 0x10000, 0x80000001, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 64)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$sock(r9, &(0x7f00000021c0)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x3, 0x8000}, 0x80, 0x0}}], 0x1, 0x20008000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94) (async, rerun: 64)
r10 = socket(0x10, 0x803, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x5385c2b8, 0x4, 0x3, 0x0, 0xfffffff8, 0x8, 0x2, 0xfd, 0xd54c, 0x81, 0x2, 0x9, 0x7, 0x4, 0x74000000, 0x2, 0xffffffff, 0xa7, 0xc6b, 0x8, 0x4d}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket(0x10, 0x803, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900020073797a3200000000080041007278650014003300766c616e300000000000000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
socket$unix(0x1, 0x1, 0x0)

1.762183945s ago: executing program 1 (id=15618):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="d7d0c3610f0d82b7a159aa11c1f9ee8df35849e3116fab80e71b1b07a6a3157c1bace42baa609e79d4dacf10fc6b4c3add0682e1a0c6f9c0fd900295acfd61374abed5b3bc76602d421ca9de29999e5fc42aaaad40437f7314640d1c2132a6a57d0a0024f09be5a50547b2f94b0e870aac47174c2d4bb640cd570ac196564a96a3eea75f2382d5ef8e95b1ca925b5e3abd5838da3c4abb365cafc13ff6948afe39df239a41ac6d7424fa4a001780e047725c854cd5a5859baefe4fff566974b37e3ec4", 0xc3}, {&(0x7f0000000240)}], 0x2, &(0x7f00000002c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x23, 0xbf, [@broadcast, @remote, @remote, @broadcast, @remote, @broadcast, @empty, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x1c, [@local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}], 0xd0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x800, 0x1ff, 0x1, 0x6b09, 0x4, 0xa00, 0x7, 0x40, <r1=>0x0}, &(0x7f0000000040)=0x20)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r1, 0x7fff}, 0x8)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_CORR={0x10, 0x1, {0x7fffffff, 0x5, 0x9}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x78}}, 0x4000080)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0xb526, 0x1, 0x4})

1.681084108s ago: executing program 4 (id=15619):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x800)
unshare(0x22020400)
r2 = socket$tipc(0x1e, 0x2, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x40b942b37d0000)
recvmmsg(r2, 0x0, 0x0, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x400, 0x4}, 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
r4 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x4)

1.656498834s ago: executing program 2 (id=15620):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r4, &(0x7f00000054c0), 0x3e, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x24, r5, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0x0, 0x99, {0x5, 0x1e}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2)
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'erspan0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r11, 0x80, 0x22}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x0)

1.580104419s ago: executing program 4 (id=15621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x88}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
r5 = socket(0x1e, 0x4, 0x0)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r6, 0x0, 0x0)
r7 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000040), 0x2)
sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x50, 0x30, 0x1, 0x70bd26, 0x3, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x7, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x2000000}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x50}}, 0x20000085)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='ip6tnl0\x00', 0x10)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4000)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000080)={'gretap0\x00', 0x800})

1.57853793s ago: executing program 1 (id=15622):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x10c94dafdf414d8f, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='vcan0\x00', 0x9, 0x9, 0x4}) (async, rerun: 32)
r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r5 = accept4(r4, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="60b80000", @ANYBLOB="a6b68e7253e15f7df6f12de559f8856618afbe2ec1bb920fe3", @ANYBLOB="050427bd70", @ANYBLOB="b52f9b3f120d7d02a0a13dcf83e3f92154ac3e27308c3171d0cc0218b5254c6c788d46c3914fa0a837de9f682ceec8d7d856da86e678024c5aed555770f1edc02a7ae4e50fab07190dcd439cd11323a7b91a2c988e03fc058ab423d55a08480ce066a8d4b61e2a4387fc3c2cb0eed7399333801559eeec62765a3af38bdc92f258fef98304bd71fe8dccfef5ccc73970edb910fd3afe0f6454f74c462bac17a1dd1da0b9f83e39f117566fd0145b1588143892f0d511cf2248e829", @ANYBLOB="440002883a000100240001006d6f6465000000000000000000000000000000000000eeffffffffffffff00000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) (async, rerun: 32)
listen(0xffffffffffffffff, 0x0) (async, rerun: 32)
r7 = socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async, rerun: 32)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) (async, rerun: 32)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
connect$unix(r7, &(0x7f0000000200)=@file={0x1}, 0x6e) (async)
connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(0x3)

1.025742758s ago: executing program 1 (id=15625):
socket$pppoe(0x18, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x24, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x29, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x44}}, "200022ebffff0000"}}}}}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x3}, {0x4}, 0x70bd25, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) (async)
unshare(0x6a040000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@getlink={0x4c, 0x12, 0x35216c00a4afb67, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x82, 0x80270}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_IFALIASn={0x4}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_VFINFO_LIST={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000)

1.025029519s ago: executing program 2 (id=15626):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000240)={{&(0x7f0000000000)=[{0x7, 0x2, 0x40, {0x7, 0xe}, 0x1de, 0x2, 0x3}, {0x9, 0x800, 0x6, {0x5, 0x5}, 0xffffffff, 0x38, 0x1000}, {0x101, 0x2, 0x4696, {0x6, 0xa}, 0x3, 0x1ff, 0xd3}, {0x9, 0x5, 0x7ff, {0x4, 0xe4}, 0x0, 0xd0, 0xffff}], 0x4, 0x40, 0x3, 0x500000}, {&(0x7f0000000100)=[{0x5, 0x3}, {0x0, 0x2}, {0xd, 0x9}, {0x80, 0x7}], 0x4, 0x10, 0x7ff, 0x4b}, {&(0x7f0000000140)=[0x9, 0x9, 0xa, 0x968b], 0x4, 0x8, 0xfff7, 0x8}, {&(0x7f0000000180)=[{0x10000, 0x332, 0x800, 0x1, 0xffffffc9}, {0x3, 0x1, 0x9, 0x8, 0x3}, {0x7fffffff, 0x8f7, 0x1, 0x9, 0xfffffff6}], 0x3, 0x28, 0xfff, 0x6}, {&(0x7f0000000200)=[0x1], 0x1, 0x8, 0x0, 0x10000000000000}})
bind$802154_dgram(r0, &(0x7f0000000800)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14)

1.000013008s ago: executing program 2 (id=15627):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0c0006000200000002000000080003000000000000000000000000000000965f595c0a27c1877db797228f663028c604a1277bf1d5549a97fb71f4674070ef9209944076e4ccecf3f2e8beccff79206262c5b477e0cf0e71a626a0b781339d4f52c199718991eeba4e972a234cb2303bfa5ad7f4deae9b442cb527e2acc9d75725e0a97fcb0b4d025d3e6e2e6ef8a62b300ce7e99d00"/162, @ANYRES32=r5, @ANYBLOB="0c00060003000000030000000c00060003000000030000000c002d800800020001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008015}, 0x2000c0d1) (async)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) (async)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0011023) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340900003896c2bdf361fdaaf288aab4da26b70be26eb18b65485461a0920b6529ec12d71d09bdbfedfbd026377ba12c155b6fb026a0d5e29ffec624225731eb0391df9293a51fb2da99798dd2a41189dfe92554bbe7a88e", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf250600000008000e008000000008000e005000000008000d00f000000008000100", @ANYRES32=r11, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
pselect6(0x40, &(0x7f0000000440)={0xb, 0x0, 0x7, 0x7, 0x7fffffff, 0x9, 0x8000, 0xfffffffffffffffa}, &(0x7f0000000480)={0x4, 0xec0, 0x0, 0xfffffffffffffffe, 0x1, 0x1000, 0xa, 0x6}, &(0x7f0000000680)={0x5, 0x3e, 0x9029, 0x2, 0x6, 0x6, 0x8000000000000001, 0x7fffffff}, &(0x7f00000006c0)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x7]}, 0x8}) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) (async)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async)
r12 = socket$kcm(0x2a, 0x0, 0x0)
sendmsg$kcm(r12, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r12, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async)
r13 = socket$kcm(0x2a, 0x2, 0x0)
getpeername(r12, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, 0x0) (async)
sendmsg$kcm(r13, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021001e0000080500010004"], 0x4c}}, 0x0)

998.873088ms ago: executing program 3 (id=15628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000040)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004e9d0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

954.928288ms ago: executing program 1 (id=15630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

848.138211ms ago: executing program 0 (id=15631):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async)
close(r2) (async)
write(r0, 0x0, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]})
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000100)=0xe) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000000000482e4c61e000000000000000000b7d7c0ab7348b4a56e487b3f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x59, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0)

847.62672ms ago: executing program 1 (id=15632):
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000310000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000bc7d6bef5c00"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000084492000010000008520000004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000400)={<r3=>0x0, "71dfc237e5b289937b7c021e7d7dc6d5"})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001400)={r3, "7e148b2c1e40af520d3da0f71a9426e4"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)

810.667535ms ago: executing program 0 (id=15633):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="e6", 0x1}], 0x1, 0x0, 0x0, 0x20020090}, 0x10044001) (async)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12) (async)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80}, 0x2100)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', <r2=>0x0, 0x7, 0x8, 0x6, 0xfffffffb, {{0x2d, 0x4, 0x2, 0x1d, 0xb4, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x2, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "0da6557ecc5cb5aabf9f40d0"}, @timestamp_addr={0x44, 0xc, 0xab, 0x1, 0xb, [{@multicast2, 0x3}]}, @end, @lsrr={0x83, 0x27, 0x73, [@rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @multicast1]}, @lsrr={0x83, 0x13, 0xe0, [@multicast2, @empty, @broadcast, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x84, 0x3, 0x0, [{@remote, 0x3}, {@private=0xa010100, 0x80000001}, {@multicast1, 0x5}, {@multicast2, 0x80}, {@loopback, 0xd}, {@broadcast, 0x3}, {@broadcast, 0x4}, {@loopback, 0x9}]}]}}}}}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x20, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) (async)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0xfcb, 0x4e21, 0x3, 0xa, 0x20, 0x80, 0x1, r2, r4}, {0x5, 0x2, 0xfffffffffffffffb, 0x2, 0x9, 0x3, 0x0, 0x8b7}, {0x40, 0x9, 0x3, 0x101}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x32}, 0x2, @in=@loopback, 0x0, 0x3, 0x2, 0x5, 0x2, 0xfffffffa, 0x2}}, 0xe8)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x228}, 0x1, 0x0, 0x0, 0xb1}, 0x20008890)

711.492505ms ago: executing program 1 (id=15634):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010700000018000000006700000008003e"], 0x1c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

552.014758ms ago: executing program 3 (id=15635):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008f40000000000000000e6ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r6, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0xec}, 0x1, 0x0, 0x0, 0x2400c021}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x200000000000000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

526.478601ms ago: executing program 0 (id=15636):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10)
close(0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, r6, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e25, @remote}, 0x63)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=@deltaction={0x1f4, 0x31, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'skbmod\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0xfffffffffffffdb8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fc0}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd665}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x200040e5}, 0x4890)

440.151535ms ago: executing program 0 (id=15637):
unshare(0x6a040000) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8)
write$cgroup_devices(r2, &(0x7f0000000800)=ANY=[], 0xffdd) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) (async)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
r6 = socket$kcm(0xa, 0x2, 0x0)
pread64(r2, &(0x7f0000000600)=""/125, 0x7d, 0x0) (async)
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) (async)
recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160) (async)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
recvmsg(r7, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000300)=""/215, 0xd7}], 0x5, &(0x7f0000000480)=""/129, 0x81}, 0x12003)

234.334µs ago: executing program 0 (id=15638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x21, 0x10d, 0x0, 0x0, @binary="a36901b80d95b85ba8200000ea000000000000000000000062668bdbd9"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000041d000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94)

0s ago: executing program 0 (id=15639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x118, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0xea, 0x2, 0x0, 0x1, [@generic="6a9193ed319b6abf59972198ffcffca9e0bcbef105e95ca944fd52bfcf0780253c931ca070ede9b77d9c6950a1f768097d668f8e10286116e9b008221f569d4a1ccf8d32513d7f610fda0018f74d27bb30ddc7db4f3d938d8458d73563b2b0d9438c291d3924429b8afaa0d3bb6d57a079f651e4f7fc9cd3baef3042123468a3940c2dcb36b76c96a26f1c375dbaa3f8b2ce777debd802b51195232bee9cc546dea32abe1e0089d48f9140574e07f64923b62ca391d3a1c149d755cc663550909915427ac26bb2e24ddd4df6d80299480de95e9a5253633a981293af04ac7a0ba1ad", @typed={0x4, 0xba, 0x0, 0x0, @binary}]}]}, 0x118}}, 0xc000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000001dcef0dc431ea0f90000000a0000050400018004000380300002802c00cc0c23cf899d268f4bb3018014000300ff01000000000000000000000000000114000400fe8800000000fe1429dc703bd8f6d478fb4da99c13b9d982d41d10fbcf3e39bc2651c83a2da83ed4451969ffbb96df8513a916d2ecfb3a56427398aad19fd6a2a2a8f430cbdbf7bed1a78851c1c2290a210362d52ea0be63a28e3eb21f6624e7c1082ca68e2c360d552920bde207c5f57f8c354bf8bf13a6b927d0b98a820be9825f007334cd9960d39f9fc30003821f66e6159c4dd0d0e7829694bd52d566b9059fe480bef281a6060b0ee504139293370b0f3ab9baeae950891adf3449d8ede7de34e9fd057d24312ee0ae22b91cf8adb28142"], 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd26, 0x4000, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x80)
socket$can_j1939(0x1d, 0x2, 0x7)

kernel console output (not intermixed with test programs):

11: entered promiscuous mode
[ 1123.080259][T28418] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1123.191026][T28433] netlink: 'syz.0.14350': attribute type 3 has an invalid length.
[ 1123.277074][T28435] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[ 1123.449540][T28469] batadv0: Caught tx_queue_len zero misconfig
[ 1123.463698][T28470] __nla_validate_parse: 34 callbacks suppressed
[ 1123.463710][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.480784][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.492611][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.508518][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.518447][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.523498][T28472] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14360'.
[ 1123.539436][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.549442][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.566727][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.577576][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14359'.
[ 1123.614820][T28474] bridge0: port 1(macvlan2) entered disabled state
[ 1123.693551][T28474] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1123.729749][T28474] bond5: left promiscuous mode
[ 1123.734615][T28474] bridge3: left promiscuous mode
[ 1123.741615][T28474] macvtap1: left allmulticast mode
[ 1123.747085][T28474] macvtap2: left allmulticast mode
[ 1123.753896][T28474] bond6: left promiscuous mode
[ 1123.759212][T28474] veth0_to_bond: left promiscuous mode
[ 1123.764833][T28474] bond6: left allmulticast mode
[ 1123.769979][T28474] veth0_to_bond: left allmulticast mode
[ 1123.786115][ T5980] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1123.796031][ T5980] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.804990][ T5980] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1123.817207][ T5980] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.828831][ T5980] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1123.838137][ T5980] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.847391][ T5980] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1123.856738][ T5980] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1124.029973][T28494] ip6erspan0: entered allmulticast mode
[ 1124.196848][T28522] netlink: 'syz.0.14372': attribute type 1 has an invalid length.
[ 1124.240735][T28522] bond11: entered promiscuous mode
[ 1124.248758][T28522] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1124.277868][T28530] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1124.487611][ T8297] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1124.503251][T28549] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1124.535603][ T8297] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1124.571975][T28542] bond5: (slave bridge0): Releasing active interface
[ 1124.601285][T28542] bridge0: left promiscuous mode
[ 1124.603872][ T8297] IPVS: starting estimator thread 0...
[ 1124.606397][    C1] net_ratelimit: 52 callbacks suppressed
[ 1124.606411][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1124.612931][T28546] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1124.634709][T28542] bridge0: left allmulticast mode
[ 1124.656926][T28542] bond6: (slave bridge2): Releasing backup interface
[ 1124.663697][T28542] bridge2: left promiscuous mode
[ 1124.679266][T28551] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[ 1124.709785][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1124.725571][T28556] IPVS: using max 52 ests per chain, 124800 per kthread
[ 1124.808933][T28572] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1124.845409][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1124.859786][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1124.871287][T17814] bond11: (slave bridge6): failed to get link speed/duplex
[ 1125.006292][T17813] bond11: (slave bridge6): failed to get link speed/duplex
[ 1125.151305][T28584] syzkaller0: entered promiscuous mode
[ 1125.160212][T28584] syzkaller0: entered allmulticast mode
[ 1125.226951][T28604] gre3: entered allmulticast mode
[ 1125.261633][T17814] bond11: (slave bridge6): failed to get link speed/duplex
[ 1125.375616][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1125.386952][T28618] rdma_rxe: rxe_newlink: failed to add lo
[ 1125.454747][T28623] netlink: 'syz.2.14396': attribute type 1 has an invalid length.
[ 1125.519283][T28628] veth1_to_hsr: Caught tx_queue_len zero misconfig
[ 1125.543014][T28628] netlink: 'syz.0.14397': attribute type 1 has an invalid length.
[ 1125.563713][T28640] mac80211_hwsim hwsim189 syzkaller1: entered promiscuous mode
[ 1125.574021][T28640] mac80211_hwsim hwsim189 syzkaller1: entered allmulticast mode
[ 1125.683868][T28651] syzkaller0: entered promiscuous mode
[ 1125.690496][T28651] syzkaller0: entered allmulticast mode
[ 1125.704590][T28650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1125.742061][T28656] bond0: (slave team0): Releasing backup interface
[ 1125.752908][T28656] team_slave_0: left promiscuous mode
[ 1125.763731][T28656] team0 (unregistering): Port device team_slave_0 removed
[ 1125.771662][T28656] team_slave_1: left promiscuous mode
[ 1125.780248][T28656] team0 (unregistering): Port device team_slave_1 removed
[ 1125.797252][T28653] tipc: Resetting bearer <eth:syzkaller0>
[ 1125.808388][T28653] tipc: Disabling bearer <eth:syzkaller0>
[ 1125.837626][T28661] syzkaller1: entered promiscuous mode
[ 1125.843233][T28661] syzkaller1: entered allmulticast mode
[ 1126.147504][T28688] gretap0: left allmulticast mode
[ 1126.172266][T28688] syz_tun: left allmulticast mode
[ 1126.215493][T17806] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1126.239733][T17806] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.260835][T17806] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1126.273835][T17806] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.283262][T28696] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1126.291529][T28696] pim6reg0: linktype set to 805
[ 1126.308505][T28699] netlink: 'syz.1.14414': attribute type 3 has an invalid length.
[ 1126.309310][T17806] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1126.330643][T17806] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.340564][T17806] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1126.352602][T17806] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.390141][T28714] netlink: 'syz.3.14418': attribute type 21 has an invalid length.
[ 1126.398395][T28714] netlink: 'syz.3.14418': attribute type 21 has an invalid length.
[ 1126.438673][T28717] mac80211_hwsim hwsim189 syzkaller1: left promiscuous mode
[ 1126.446302][T28717] mac80211_hwsim hwsim189 syzkaller1: left allmulticast mode
[ 1126.508829][T28723] syzkaller0: entered promiscuous mode
[ 1126.519103][T28723] syzkaller0: entered allmulticast mode
[ 1126.723653][T28747] syzkaller1: entered promiscuous mode
[ 1126.736217][T28747] syzkaller1: entered allmulticast mode
[ 1126.883209][T28761] netlink: 'syz.4.14424': attribute type 46 has an invalid length.
[ 1127.268162][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.274992][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.281791][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.288579][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.295370][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.302145][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.308942][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.315727][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.322519][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.329313][T28788] tc action pedit offset must be on 32 bit boundaries
[ 1127.539188][T28818] sctp: [Deprecated]: syz.0.14440 (pid 28818) Use of int in maxseg socket option.
[ 1127.539188][T28818] Use struct sctp_assoc_value instead
[ 1127.571269][T28818] vlan0: left promiscuous mode
[ 1127.637981][T28823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[ 1127.850709][T28836] netlink: 'syz.3.14445': attribute type 1 has an invalid length.
[ 1128.290987][T28852] ip6gre4: entered promiscuous mode
[ 1128.296362][T28852] ip6gre4: entered allmulticast mode
[ 1128.305091][T28852] netlink: 'syz.2.14448': attribute type 6 has an invalid length.
[ 1128.367024][T28853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1128.378081][T28853] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1128.511011][T28855] __nla_validate_parse: 115 callbacks suppressed
[ 1128.511023][T28855] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14449'.
[ 1128.689268][T28856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14449'.
[ 1129.705493][T17817] net_ratelimit: 57 callbacks suppressed
[ 1129.705513][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1129.805333][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1129.825416][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1129.935362][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1130.025361][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1130.039771][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1130.054212][T17812] bond11: (slave bridge6): failed to get link speed/duplex
[ 1130.165537][T17812] bond11: (slave bridge6): failed to get link speed/duplex
[ 1130.275471][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1130.385268][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1130.849999][T28836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1131.017568][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.064713][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.094083][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.114855][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.139235][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.162525][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.183594][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.204167][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14453'.
[ 1131.284955][T28872] lo speed is unknown, defaulting to 1000
[ 1131.532318][T28872] lo speed is unknown, defaulting to 1000
[ 1131.897470][T28912] syzkaller0: entered promiscuous mode
[ 1131.902960][T28920] netlink: 'syz.4.14465': attribute type 13 has an invalid length.
[ 1131.919054][T28923] sctp: [Deprecated]: syz.3.14466 (pid 28923) Use of int in maxseg socket option.
[ 1131.919054][T28923] Use struct sctp_assoc_value instead
[ 1131.919813][T28912] syzkaller0: entered allmulticast mode
[ 1132.043795][T28925] ip6gre1: entered promiscuous mode
[ 1132.050296][T28925] ip6gre1: entered allmulticast mode
[ 1132.057643][T28927] syzkaller1: entered promiscuous mode
[ 1132.063330][T28927] syzkaller1: entered allmulticast mode
[ 1132.358181][T28936] sctp: [Deprecated]: syz.0.14469 (pid 28936) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1132.358181][T28936] Use struct sctp_sack_info instead
[ 1132.433221][T28940] netlink: 'syz.4.14471': attribute type 1 has an invalid length.
[ 1132.447433][T28940] gretap2: entered allmulticast mode
[ 1132.494927][ T5747] lo speed is unknown, defaulting to 1000
[ 1132.509166][ T5747] syz2: Port: 1 Link DOWN
[ 1132.703965][   T29] audit: type=1804 audit(1782034691.572:65): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14476" name="/newroot/452/cgroup.controllers" dev="tmpfs" ino=2319 res=1 errno=0
[ 1132.773995][   T29] audit: type=1800 audit(1782034691.572:66): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14476" name="cgroup.controllers" dev="tmpfs" ino=2319 res=0 errno=0
[ 1132.857099][T28969] x_tables: unsorted entry at hook 3
[ 1133.042242][T28990] xt_NFQUEUE: number of total queues is 0
[ 1133.128382][T28995] netlink: 'syz.3.14488': attribute type 1 has an invalid length.
[ 1133.301235][T29007] geneve0: entered promiscuous mode
[ 1133.534592][T29015] __nla_validate_parse: 47 callbacks suppressed
[ 1133.534609][T29015] netlink: 276 bytes leftover after parsing attributes in process `syz.4.14493'.
[ 1133.557922][T29017] syzkaller0: entered promiscuous mode
[ 1133.563450][T29017] syzkaller0: entered allmulticast mode
[ 1133.588983][T29017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14494'.
[ 1133.675761][T29019] dummy0: Caught tx_queue_len zero misconfig
[ 1133.807287][T29037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14500'.
[ 1134.141266][T29065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14508'.
[ 1134.223058][T29071] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1134.273244][   T29] audit: type=1804 audit(1782034693.142:67): pid=29074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.14511" name="/newroot/415/cgroup.controllers" dev="tmpfs" ino=2151 res=1 errno=0
[ 1134.348495][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14510'.
[ 1134.361335][   T29] audit: type=1800 audit(1782034693.142:68): pid=29074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14511" name="cgroup.controllers" dev="tmpfs" ino=2151 res=0 errno=0
[ 1134.433474][   T29] audit: type=1800 audit(1782034693.152:69): pid=29074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14511" name="cgroup.controllers" dev="tmpfs" ino=2151 res=0 errno=0
[ 1134.579406][T29085] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14513'.
[ 1134.591502][T29085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14513'.
[ 1134.603127][T29085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14513'.
[ 1134.627750][T29087] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14515'.
[ 1134.640830][T29087] syzkaller0: entered promiscuous mode
[ 1134.651999][T29087] syzkaller0: entered allmulticast mode
[ 1134.660246][T29091] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004
[ 1134.662608][T29087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1134.683657][T29087] tipc: Resetting bearer <eth:syzkaller0>
[ 1134.693261][T29086] tipc: Resetting bearer <eth:syzkaller0>
[ 1134.707709][T29086] tipc: Disabling bearer <eth:syzkaller0>
[ 1134.725626][T17806] net_ratelimit: 52 callbacks suppressed
[ 1134.725640][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1134.749956][T29095] netlink: 'syz.2.14518': attribute type 5 has an invalid length.
[ 1134.760568][T29095] netlink: 'syz.2.14518': attribute type 11 has an invalid length.
[ 1134.803543][T29098] netlink: 'syz.4.14519': attribute type 3 has an invalid length.
[ 1134.820743][T29100] netlink: 324 bytes leftover after parsing attributes in process `syz.2.14520'.
[ 1134.845316][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1134.965561][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1134.976932][T29114] netlink: 'syz.2.14524': attribute type 11 has an invalid length.
[ 1135.001125][T29114] netlink: 'syz.2.14524': attribute type 11 has an invalid length.
[ 1135.005280][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1135.030589][T29114] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1135.075579][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1135.093433][T29123] netlink: 'syz.2.14528': attribute type 7 has an invalid length.
[ 1135.103745][T29123] netlink: 'syz.2.14528': attribute type 8 has an invalid length.
[ 1135.155512][ T5980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1135.169969][ T5980] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1135.185886][T17813] bond11: (slave bridge6): failed to get link speed/duplex
[ 1135.275538][T29131] syzkaller0: entered promiscuous mode
[ 1135.281140][T29131] syzkaller0: entered allmulticast mode
[ 1135.316156][ T5980] bond11: (slave bridge6): failed to get link speed/duplex
[ 1135.565418][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1135.941125][T29173] x_tables: duplicate underflow at hook 1
[ 1136.012763][T29176] netlink: 'syz.1.14541': attribute type 10 has an invalid length.
[ 1136.035630][T29176] bond6: (slave veth0_to_bond): Releasing backup interface
[ 1136.632036][T29227] bond12 (unregistering): Released all slaves
[ 1136.698359][T29230] xfrm0: entered allmulticast mode
[ 1136.953283][T29253] netlink: 'syz.3.14562': attribute type 21 has an invalid length.
[ 1137.022770][T29264] tipc: Failed to remove unknown binding: 66,0,0/2806074265:2409262894/2409262896
[ 1137.053652][T29267] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1137.055851][T29264] tipc: Failed to remove unknown binding: 66,0,0/2806074265:2409262894/2409262895
[ 1137.112465][T29271] tunl0: entered promiscuous mode
[ 1137.177972][T29278] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1137.192636][T29270] tunl0: left promiscuous mode
[ 1137.433589][T29315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1137.497273][T29320] veth13: entered promiscuous mode
[ 1137.505111][T29320] veth13: entered allmulticast mode
[ 1137.603853][T29335] syzkaller1: entered promiscuous mode
[ 1137.615006][T29335] syzkaller1: entered allmulticast mode
[ 1137.622525][T29332] xt_CT: No such helper "syz0"
[ 1137.661621][T17813] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1137.670417][T29335] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1137.728190][T29350] netlink: 'syz.0.14589': attribute type 1 has an invalid length.
[ 1137.740289][T29350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1137.749502][T29350] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1137.822276][T29360] netlink: 'syz.1.14593': attribute type 8 has an invalid length.
[ 1137.832051][T29362] netlink: 'syz.1.14593': attribute type 8 has an invalid length.
[ 1137.942497][T29373] veth0_to_bond: entered promiscuous mode
[ 1137.963197][T29373] veth0_to_bond: entered allmulticast mode
[ 1138.213590][T29407] bond9: Unable to set up delay as MII monitoring is disabled
[ 1138.224552][T29407] bond9 (unregistering): Released all slaves
[ 1138.244025][T29411] netlink: 'syz.4.14609': attribute type 3 has an invalid length.
[ 1138.307562][T29415] mac80211_hwsim hwsim189 syzkaller1: entered promiscuous mode
[ 1138.315356][T29415] mac80211_hwsim hwsim189 syzkaller1: entered allmulticast mode
[ 1138.373184][T29420] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1138.452639][T29425] sit0: Caught tx_queue_len zero misconfig
[ 1138.732404][T29442] __nla_validate_parse: 33 callbacks suppressed
[ 1138.732421][T29442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14621'.
[ 1138.818012][T29451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14624'.
[ 1138.849172][T29456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14626'.
[ 1138.851540][T29457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14625'.
[ 1138.930668][T29463] mac80211_hwsim hwsim189 syzkaller1: left promiscuous mode
[ 1138.951230][T29463] mac80211_hwsim hwsim189 syzkaller1: left allmulticast mode
[ 1139.010391][T29475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14632'.
[ 1139.027442][T29475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14632'.
[ 1139.080549][T29482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14633'.
[ 1139.090562][T29482] netlink: 'syz.1.14633': attribute type 1 has an invalid length.
[ 1139.110701][T29482] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1139.127646][T29482] bond8: (slave geneve3): making interface the new active one
[ 1139.136884][T29482] bond8: (slave geneve3): Enslaving as an active interface with an up link
[ 1139.145749][T17806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.154676][T17806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.164910][T29482] netlink: 'syz.1.14633': attribute type 8 has an invalid length.
[ 1139.173211][T29482] sch_fq: defrate 0 ignored.
[ 1139.179228][T17806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.188301][T17806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1139.188478][T29482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14633'.
[ 1139.396258][T29497] xt_l2tp: v2 tid > 0xffff: 37482740
[ 1139.428761][T29500] ip6_vti0: entered allmulticast mode
[ 1139.461761][T29506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14639'.
[ 1139.740373][T29526] netlink: 9 bytes leftover after parsing attributes in process `syz.0.14643'.
[ 1139.752523][T29526] gretap0: entered promiscuous mode
[ 1139.775527][T17814] net_ratelimit: 57 callbacks suppressed
[ 1139.775542][T17814] bond11: (slave bridge6): failed to get link speed/duplex
[ 1139.815452][T17814] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1139.829822][T17814] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1139.863509][T29541] xt_hashlimit: size too large, truncated to 1048576
[ 1139.915426][T17814] bond11: (slave bridge6): failed to get link speed/duplex
[ 1139.924639][T29544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.934759][T29544] bridge_slave_0 (unregistering): left allmulticast mode
[ 1139.943595][T29544] bridge_slave_0 (unregistering): left promiscuous mode
[ 1139.950740][T29544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.025568][T17814] bond11: (slave bridge6): failed to get link speed/duplex
[ 1140.138617][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1140.205270][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1140.255583][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1140.365550][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1140.367263][T17817] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1141.326135][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1142.463148][T29506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1142.967368][T29577] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.997472][T29577] dummy0: left promiscuous mode
[ 1143.036592][T29577] veth1_to_hsr: left promiscuous mode
[ 1143.056801][T29577] tipc: Resetting bearer <eth:ipvlan1>
[ 1143.073780][T29577] mac80211_hwsim hwsim188 wlan0: left promiscuous mode
[ 1143.081316][T29577] mac80211_hwsim hwsim188 wlan0: left allmulticast mode
[ 1143.104298][T29577] geneve3: left promiscuous mode
[ 1143.109434][T29577] geneve3: left allmulticast mode
[ 1143.130841][T29577] vlan2: left promiscuous mode
[ 1143.140290][T29577] vlan3: left promiscuous mode
[ 1143.145117][T29577] bridge0: left promiscuous mode
[ 1143.150529][T29577] gre3: left allmulticast mode
[ 1143.175529][T13938] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1143.185101][T13938] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.193916][T13938] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1143.202866][T13938] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.214520][T13938] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1143.239189][T13938] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.248027][T13938] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1143.257333][T13938] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.391632][T29650] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1143.520444][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1143.530029][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1143.537451][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1143.545019][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1143.555095][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1143.654615][T29678] x_tables: duplicate underflow at hook 1
[ 1143.663950][T29678] netlink: 'syz.2.14671': attribute type 1 has an invalid length.
[ 1143.706918][T29668] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1143.730165][T29682] xt_hashlimit: overflow, try lower: 6/0
[ 1143.771890][T29682] __nla_validate_parse: 5 callbacks suppressed
[ 1143.771905][T29682] netlink: 175008 bytes leftover after parsing attributes in process `syz.3.14673'.
[ 1143.873358][T29689] dvmrp0: entered allmulticast mode
[ 1143.928534][T29667] lo speed is unknown, defaulting to 1000
[ 1143.984708][T29700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14680'.
[ 1144.018990][T29700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14680'.
[ 1144.023907][T29703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14681'.
[ 1144.071340][T29667] lo speed is unknown, defaulting to 1000
[ 1144.247889][T29714] bond9: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1144.259703][T29714] bond9 (unregistering): Released all slaves
[ 1144.447594][T29725] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[ 1144.560961][T29667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.586304][T29667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.610250][T29667] bridge_slave_0: entered allmulticast mode
[ 1144.616781][T29741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14684'.
[ 1144.635095][T29667] bridge_slave_0: entered promiscuous mode
[ 1144.655823][T29667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.679279][T29667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.693210][T29667] bridge_slave_1: entered allmulticast mode
[ 1144.709228][T29667] bridge_slave_1: entered promiscuous mode
[ 1144.742932][T29667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1144.755075][T29667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.778398][T29746] netlink: 'syz.2.14689': attribute type 14 has an invalid length.
[ 1144.800461][T29667] team0: Port device team_slave_0 added
[ 1144.811259][T29667] team0: Port device team_slave_1 added
[ 1144.833613][T29667] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1144.841068][T29667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.868220][T29667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1144.880551][T29667] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1144.887612][T29667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1144.913901][T29667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1144.941478][T29667] hsr_slave_0: entered promiscuous mode
[ 1144.947817][T29667] hsr_slave_1: entered promiscuous mode
[ 1144.975563][T13938] net_ratelimit: 53 callbacks suppressed
[ 1144.975603][T13938] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1144.995780][T13938] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1145.010577][T25495] bond11: (slave bridge6): failed to get link speed/duplex
[ 1145.019584][T29667] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1145.067861][T29667] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1145.108624][T29667] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1145.135901][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1145.157951][T29667] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1145.246111][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1145.355608][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1145.405255][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1145.465536][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1145.525431][T17817] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1145.539977][T17817] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1145.645308][ T5623] Bluetooth: hci0: command tx timeout
[ 1147.362525][T29720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1147.374184][T29667] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1147.414727][T29667] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1147.428293][T29756] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14693'.
[ 1147.439615][T29667] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1147.458598][T29667] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1147.473011][T29667] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1147.492890][T29667] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1147.514356][T29667] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1147.525062][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14696'.
[ 1147.544465][T29667] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1147.636869][T29789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14699'.
[ 1147.714315][T29667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1147.728913][ T5629] Bluetooth: hci0: command tx timeout
[ 1147.773896][T29667] 8021q: adding VLAN 0 to HW filter on device team0
[ 1147.817163][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1147.824298][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1147.883755][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1147.890896][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1148.010777][T29667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1148.153393][T29833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14708'.
[ 1148.183419][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14708'.
[ 1148.213425][T29833] bond0: Unable to set down delay as MII monitoring is disabled
[ 1148.431657][T29853] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1148.592879][T29667] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1148.655022][T29667] veth0_vlan: entered promiscuous mode
[ 1148.683869][T29667] veth1_vlan: entered promiscuous mode
[ 1148.710765][T29667] veth0_macvtap: entered promiscuous mode
[ 1148.720452][T29667] veth1_macvtap: entered promiscuous mode
[ 1148.743347][T29667] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1148.759256][T29667] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1148.779798][T25495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.789180][T25495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.817574][T25495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.835922][T25495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1149.005681][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1149.073130][T17806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1149.106457][T17806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1149.147061][T29909] syzkaller0: entered promiscuous mode
[ 1149.152793][T29909] syzkaller0: entered allmulticast mode
[ 1149.186563][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1149.194775][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1149.250761][T29920] __nla_validate_parse: 7 callbacks suppressed
[ 1149.250779][T29920] netlink: 27 bytes leftover after parsing attributes in process `syz.0.14665'.
[ 1149.304765][T29922] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1149.336849][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14732'.
[ 1149.460384][T29935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14736'.
[ 1149.631702][T29949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14742'.
[ 1149.805640][ T5623] Bluetooth: hci0: command tx timeout
[ 1149.837929][T29965] C: renamed from veth1_to_team (while UP)
[ 1149.884753][T29965] netlink: 'syz.0.14744': attribute type 8 has an invalid length.
[ 1150.045389][T13938] net_ratelimit: 56 callbacks suppressed
[ 1150.045408][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1150.145374][T25495] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1150.159757][T25495] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1150.194256][T29972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14746'.
[ 1150.225433][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1150.356785][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1150.411377][T29981] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14749'.
[ 1150.428243][T29981] netlink: 43 bytes leftover after parsing attributes in process `syz.3.14749'.
[ 1150.447827][T29981] netlink: 'syz.3.14749': attribute type 6 has an invalid length.
[ 1150.466617][T29981] netlink: 'syz.3.14749': attribute type 5 has an invalid length.
[ 1150.475533][   T48] bond11: (slave bridge6): failed to get link speed/duplex
[ 1150.493323][T29981] netlink: 43 bytes leftover after parsing attributes in process `syz.3.14749'.
[ 1150.510572][T29987] vlan5: entered promiscuous mode
[ 1150.522233][T29987] ip6gretap0: entered promiscuous mode
[ 1150.559658][T29957] Bluetooth: hci0: Opcode 0x0401 failed: -4
[ 1150.585282][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1150.605393][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1150.688935][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1150.704077][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1150.734238][T30006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14756'.
[ 1150.796763][T30006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14756'.
[ 1150.885743][T30000] syzkaller1: entered promiscuous mode
[ 1150.895426][T30000] syzkaller1: entered allmulticast mode
[ 1150.909286][T29985] netlink: 'syz.1.14751': attribute type 1 has an invalid length.
[ 1150.941912][   T29] audit: type=1804 audit(1782034709.812:70): pid=30019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14759" name="/newroot/516/memory.events" dev="tmpfs" ino=2655 res=1 errno=0
[ 1151.083864][T30034] netlink: 'syz.3.14764': attribute type 1 has an invalid length.
[ 1151.092792][T30035] lo speed is unknown, defaulting to 1000
[ 1151.155961][T30038] netlink: 'syz.1.14766': attribute type 13 has an invalid length.
[ 1151.165573][T30038] netlink: 'syz.1.14766': attribute type 17 has an invalid length.
[ 1151.241792][T30034] bond9: (slave ip6gretap3): Enslaving as a backup interface with an up link
[ 1151.251087][   T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.288485][T30038] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1151.319590][T30038] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1151.353127][T30038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1151.365048][T30038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1151.381844][T30038] veth1_vlan: left promiscuous mode
[ 1151.388251][T30038] veth0_vlan: left promiscuous mode
[ 1151.394085][T30038] veth0_vlan: entered promiscuous mode
[ 1151.403089][T30038] veth1_vlan: entered promiscuous mode
[ 1151.412428][T30038] veth1_macvtap: left promiscuous mode
[ 1151.420521][T30038] veth0_macvtap: left promiscuous mode
[ 1151.427615][T30038] veth0_macvtap: entered promiscuous mode
[ 1151.434382][T30038] veth1_macvtap: entered promiscuous mode
[ 1151.456423][T30038] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1151.473215][T30038] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1151.482773][T30038] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1151.491414][T30038] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1151.502737][T30038] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1151.510680][T30038] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1151.520449][T30038] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1151.542386][T30038] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1151.552406][T30038] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1151.560480][T30038] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1151.572472][T30038] 8021q: adding VLAN 0 to HW filter on device macvtap2
[ 1151.587352][T30038] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1151.616204][T30038] bridge0: port 1(macvlan2) entered blocking state
[ 1151.622763][T30038] bridge0: port 1(macvlan2) entered forwarding state
[ 1151.634691][T30038] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1151.656723][T30038] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1151.667546][T30038] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1151.688153][T30044] veth15: entered promiscuous mode
[ 1151.695088][T30044] bond9: (slave veth15): Enslaving as a backup interface with a down link
[ 1151.704024][T30035] lo speed is unknown, defaulting to 1000
[ 1151.704793][T30049] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1151.717189][   T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1151.729554][ T8276] bridge3: entered promiscuous mode
[ 1151.785095][   T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1151.806650][   T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1151.823399][   T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1151.833151][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.854452][T30074] netlink: 'syz.3.14774': attribute type 58 has an invalid length.
[ 1151.867277][T30072] veth0: entered promiscuous mode
[ 1151.885586][ T5623] Bluetooth: hci0: command 0x0419 tx timeout
[ 1151.893116][T30071] veth0: left promiscuous mode
[ 1152.026155][T30083] tap0: tun_chr_ioctl cmd 1075343107
[ 1152.097085][T30098] netlink: 'syz.3.14782': attribute type 1 has an invalid length.
[ 1152.101199][   T29] audit: type=1800 audit(1782034710.972:71): pid=30099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14780" name="memory.events" dev="tmpfs" ino=2899 res=0 errno=0
[ 1152.130861][   T29] audit: type=1804 audit(1782034711.002:72): pid=30099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.14780" name="/newroot/562/memory.events" dev="tmpfs" ino=2899 res=1 errno=0
[ 1152.510220][T30139] netlink: 'syz.2.14789': attribute type 2 has an invalid length.
[ 1152.819533][T30167] bond13: entered promiscuous mode
[ 1152.831762][T30167] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1152.839369][T30169] tipc: New replicast peer: 255.255.255.255
[ 1152.855027][T30169] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1152.866729][ T8276] IPVS: starting estimator thread 0...
[ 1152.956062][T30172] IPVS: using max 46 ests per chain, 110400 per kthread
[ 1153.011056][T30186] sctp: [Deprecated]: syz.2.14800 (pid 30186) Use of int in max_burst socket option.
[ 1153.011056][T30186] Use struct sctp_assoc_value instead
[ 1153.286655][T30213] syzkaller0: entered promiscuous mode
[ 1153.292257][T30213] syzkaller0: entered allmulticast mode
[ 1153.313329][T30215] vxcan1: tx drop: invalid sa for name 0x0000400000000000
[ 1153.965486][ T5623] Bluetooth: hci0: command 0x0419 tx timeout
[ 1154.655440][T30264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1155.048285][T30326] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[ 1155.065519][   T48] net_ratelimit: 404 callbacks suppressed
[ 1155.065534][   T48] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.108084][T30332] __nla_validate_parse: 19 callbacks suppressed
[ 1155.108100][T30332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14843'.
[ 1155.196154][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.284793][T30348] validate_nla: 11 callbacks suppressed
[ 1155.284810][T30348] netlink: 'syz.2.14847': attribute type 33 has an invalid length.
[ 1155.305745][   T48] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.315936][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1155.330444][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1155.350850][T30353] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14851'.
[ 1155.377577][T30353] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14851'.
[ 1155.445333][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.566169][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.612080][T30367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14855'.
[ 1155.686071][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.805299][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1155.805596][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1155.894021][T30393] netlink: 'syz.2.14860': attribute type 2 has an invalid length.
[ 1155.916090][T30395] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[ 1155.917650][T30393] netlink: 'syz.2.14860': attribute type 8 has an invalid length.
[ 1155.950483][T30396] netlink: 'syz.2.14860': attribute type 2 has an invalid length.
[ 1155.959785][T30393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14860'.
[ 1155.963306][T30396] netlink: 'syz.2.14860': attribute type 8 has an invalid length.
[ 1156.000307][T30396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14860'.
[ 1156.225365][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14863'.
[ 1156.706107][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1156.744690][T30426] bridge11: entered promiscuous mode
[ 1156.767302][T30426] bridge11: entered allmulticast mode
[ 1156.806486][T30426] team0: Port device bridge11 added
[ 1157.091222][T30426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14871'.
[ 1157.329339][T30454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14880'.
[ 1157.347679][T30454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14880'.
[ 1157.828627][T30516] netlink: 'syz.1.14897': attribute type 4 has an invalid length.
[ 1157.853634][T30516] netlink: 'syz.1.14897': attribute type 3 has an invalid length.
[ 1157.864910][T30516] netlink: 'syz.1.14897': attribute type 1 has an invalid length.
[ 1157.935095][T30530] netlink: 'syz.1.14900': attribute type 1 has an invalid length.
[ 1157.935095][T30531] netlink: 'syz.1.14900': attribute type 1 has an invalid length.
[ 1157.955875][   T29] audit: type=1800 audit(1782034716.822:73): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14902" name="memory.events" dev="tmpfs" ino=2685 res=0 errno=0
[ 1157.975959][T30530] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1158.013737][T30537] bond9: (slave geneve4): making interface the new active one
[ 1158.022979][T30537] bond9: (slave geneve4): Enslaving as an active interface with an up link
[ 1158.088495][T30544] xt_CT: No such helper "syz0"
[ 1158.302589][T30566] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001
[ 1159.018003][T30577] xt_CT: No such helper "netbios-ns"
[ 1159.129451][T20399] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1159.140719][T20399] CPU: 1 UID: 0 PID: 20399 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1159.140741][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1159.140751][T20399] Call Trace:
[ 1159.140758][T20399]  <TASK>
[ 1159.140765][T20399]  dump_stack_lvl+0xe8/0x150
[ 1159.140786][T20399]  dump_header+0xd3/0x4b0
[ 1159.140809][T20399]  oom_kill_process+0x3ab/0x970
[ 1159.140830][T20399]  out_of_memory+0x1064/0x1480
[ 1159.140847][T20399]  ? try_charge_memcg+0xbca/0x1590
[ 1159.140872][T20399]  ? __pfx_out_of_memory+0x10/0x10
[ 1159.140889][T20399]  ? do_raw_spin_unlock+0xf5/0x210
[ 1159.140913][T20399]  try_charge_memcg+0xc74/0x1590
[ 1159.140933][T20399]  ? fs_reclaim_acquire+0x7c/0x100
[ 1159.140958][T20399]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1159.140980][T20399]  ? lock_release+0x4b/0x3c0
[ 1159.140999][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141016][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141031][T20399]  ? lock_release+0x4b/0x3c0
[ 1159.141050][T20399]  ? percpu_ref_tryget+0xfd/0x180
[ 1159.141073][T20399]  charge_memcg+0x19c/0x2b0
[ 1159.141093][T20399]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[ 1159.141112][T20399]  mem_cgroup_swapin_charge_folio+0x262/0x390
[ 1159.141134][T20399]  __swap_cache_prepare_and_add+0xdd/0x700
[ 1159.141154][T20399]  ? page_rmappable_folio+0x9a/0x170
[ 1159.141179][T20399]  swap_cache_alloc_folio+0xf1/0x240
[ 1159.141197][T20399]  swap_cluster_readahead+0x355/0x670
[ 1159.141217][T20399]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1159.141237][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141252][T20399]  ? trace_hrtimer_start+0x82/0x200
[ 1159.141272][T20399]  ? get_vma_policy+0x27b/0x3c0
[ 1159.141293][T20399]  swapin_readahead+0x196/0xc50
[ 1159.141309][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141326][T20399]  ? swap_table_get+0x1e/0x260
[ 1159.141341][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141357][T20399]  ? __pfx_swapin_readahead+0x10/0x10
[ 1159.141374][T20399]  ? lock_release+0x4b/0x3c0
[ 1159.141393][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141407][T20399]  ? get_swap_device_info+0x1c/0x2b0
[ 1159.141425][T20399]  ? swap_table_get+0x1e/0x260
[ 1159.141441][T20399]  ? swap_table_get+0x1e/0x260
[ 1159.141456][T20399]  ? swap_table_get+0x216/0x260
[ 1159.141473][T20399]  ? swap_cache_get_folio+0x2ea/0x2f0
[ 1159.141492][T20399]  do_swap_page+0x545/0x5340
[ 1159.141511][T20399]  ? __pte_offset_map+0x29/0x240
[ 1159.141528][T20399]  ? lock_acquire+0x5f/0x350
[ 1159.141547][T20399]  ? __pfx___schedule+0x10/0x10
[ 1159.141572][T20399]  ? schedule+0x90/0x360
[ 1159.141590][T20399]  ? do_swap_page+0x128/0x5340
[ 1159.141606][T20399]  ? __pfx_do_swap_page+0x10/0x10
[ 1159.141621][T20399]  ? __pte_offset_map+0x45/0x240
[ 1159.141636][T20399]  ? __pte_offset_map+0x1ae/0x240
[ 1159.141653][T20399]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 1159.141672][T20399]  handle_mm_fault+0x124c/0x3080
[ 1159.141696][T20399]  ? handle_mm_fault+0xec/0x3080
[ 1159.141716][T20399]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1159.141733][T20399]  ? lock_vma_under_rcu+0x45a/0x500
[ 1159.141759][T20399]  ? rcu_is_watching+0x15/0xb0
[ 1159.141777][T20399]  do_user_addr_fault+0xa4d/0x1340
[ 1159.141798][T20399]  ? trace_page_fault_user+0x84/0x1e0
[ 1159.141818][T20399]  exc_page_fault+0x6a/0xc0
[ 1159.141837][T20399]  asm_exc_page_fault+0x26/0x30
[ 1159.141852][T20399] RIP: 0033:0x7f2c55b5d68e
[ 1159.141867][T20399] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1159.141880][T20399] RSP: 002b:00007ffcb96b6828 EFLAGS: 00010246
[ 1159.141895][T20399] RAX: 0000000000000000 RBX: 000055558e51d500 RCX: 00007f2c55b5d68e
[ 1159.141906][T20399] RDX: 00007ffcb96b6880 RSI: 0000000000000000 RDI: 0000000000000000
[ 1159.141916][T20399] RBP: 00007ffcb96b68ec R08: 0000000000000000 R09: 0000000000000000
[ 1159.141926][T20399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1159.141935][T20399] R13: 00000000000927c0 R14: 000000000011ac12 R15: 00007ffcb96b6940
[ 1159.141954][T20399]  </TASK>
[ 1159.141969][T20399] memory: usage 305120kB, limit 307200kB, failcnt 1035
[ 1159.537421][T20399] memory+swap: usage 233244kB, limit 9007199254740988kB, failcnt 0
[ 1159.550963][T20399] kmem: usage 232184kB, limit 9007199254740988kB, failcnt 0
[ 1159.575223][T20399] Memory cgroup stats for /syz2:
[ 1159.575333][T20399] cache 0
[ 1159.587796][T20399] rss 0
[ 1159.596796][T20399] rss_huge 0
[ 1159.610843][T20399] shmem 0
[ 1159.620364][T20399] mapped_file 0
[ 1159.625817][T20399] dirty 0
[ 1159.654258][T20399] writeback 0
[ 1159.661388][T30611] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1159.666266][T20399] workingset_refault_anon 34
[ 1159.682817][T20399] workingset_refault_file 274
[ 1159.688143][T20399] swap 147456
[ 1159.691558][T20399] swapcached 380928
[ 1159.696249][T20399] pgpgin 465348
[ 1159.700721][T20399] pgpgout 465348
[ 1159.714710][T20399] pgfault 756685
[ 1159.733114][T20399] pgmajfault 30
[ 1159.743077][T20399] inactive_anon 0
[ 1159.751906][T20399] active_anon 0
[ 1159.766056][T20399] inactive_file 0
[ 1159.777560][T20399] active_file 0
[ 1159.781636][T30624] xt_TCPMSS: Only works on TCP SYN packets
[ 1159.799142][T20399] unevictable 0
[ 1159.805045][T30624] IPv6: Can't replace route, no match found
[ 1159.816016][T20399] hierarchical_memory_limit 314572800
[ 1159.823242][T30624] IPv6: Can't replace route, no match found
[ 1159.829652][T30624] IPv6: Can't replace route, no match found
[ 1159.834671][T20399] hierarchical_memsw_limit 9223372036854771712
[ 1159.850803][T30624] IPv6: Can't replace route, no match found
[ 1159.853638][T20399] total_cache 0
[ 1159.867819][T30624] IPv6: Can't replace route, no match found
[ 1159.870562][T20399] total_rss 0
[ 1159.881876][T20399] total_rss_huge 0
[ 1159.882010][T30624] IPv6: Can't replace route, no match found
[ 1159.890748][T20399] total_shmem 0
[ 1159.900876][T30624] IPv6: Can't replace route, no match found
[ 1159.907045][T30624] IPv6: Can't replace route, no match found
[ 1159.913893][T30624] IPv6: Can't replace route, no match found
[ 1159.921275][T30624] IPv6: Can't replace route, no match found
[ 1159.927971][T30624] IPv6: Can't replace route, no match found
[ 1159.934789][T30624] IPv6: Can't replace route, no match found
[ 1159.945412][T20399] total_mapped_file 0
[ 1159.952099][T30624] IPv6: Can't replace route, no match found
[ 1159.954760][T20399] total_dirty 0
[ 1159.964877][T30624] IPv6: Can't replace route, no match found
[ 1159.972362][T20399] total_writeback 0
[ 1159.986851][T20399] total_workingset_refault_anon 34
[ 1159.990086][T30624] IPv6: Can't replace route, no match found
[ 1159.998386][T20399] total_workingset_refault_file 274
[ 1160.002166][T30624] IPv6: Can't replace route, no match found
[ 1160.014908][T30624] IPv6: Can't replace route, no match found
[ 1160.023011][T30624] IPv6: Can't replace route, no match found
[ 1160.029372][T30624] IPv6: Can't replace route, no match found
[ 1160.038164][T20399] total_swap 147456
[ 1160.055162][T20399] total_swapcached 380928
[ 1160.055885][T30624] IPv6: Can't replace route, no match found
[ 1160.072386][T20399] total_pgpgin 465823
[ 1160.079549][T30624] IPv6: Can't replace route, no match found
[ 1160.089932][T20399] total_pgpgout 465823
[ 1160.091519][T30624] IPv6: Can't replace route, no match found
[ 1160.095424][T13943] net_ratelimit: 63 callbacks suppressed
[ 1160.095437][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.103448][T30624] IPv6: Can't replace route, no match found
[ 1160.119637][T20399] total_pgfault 757161
[ 1160.137202][T20399] total_pgmajfault 30
[ 1160.149968][T20399] total_inactive_anon 0
[ 1160.153360][T30624] IPv6: Can't replace route, no match found
[ 1160.161102][T30624] IPv6: Can't replace route, no match found
[ 1160.168285][T30624] IPv6: Can't replace route, no match found
[ 1160.182655][T20399] total_active_anon 0
[ 1160.187092][T30624] IPv6: Can't replace route, no match found
[ 1160.193140][T30624] IPv6: Can't replace route, no match found
[ 1160.200908][T30624] IPv6: Can't replace route, no match found
[ 1160.213316][T30624] IPv6: Can't replace route, no match found
[ 1160.214370][T20399] total_inactive_file 0
[ 1160.219451][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.228369][T30624] IPv6: Can't replace route, no match found
[ 1160.238746][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1160.265675][T30624] IPv6: Can't replace route, no match found
[ 1160.271702][T30624] IPv6: Can't replace route, no match found
[ 1160.287885][T30624] IPv6: Can't replace route, no match found
[ 1160.292924][T20399] total_active_file 0
[ 1160.305962][T30624] IPv6: Can't replace route, no match found
[ 1160.325934][T30624] IPv6: Can't replace route, no match found
[ 1160.329189][T20399] total_unevictable 0
[ 1160.340409][T30624] IPv6: Can't replace route, no match found
[ 1160.347373][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.350841][T30624] IPv6: Can't replace route, no match found
[ 1160.366714][T20399] anon_cost 0
[ 1160.374435][T20399] file_cost 0
[ 1160.382463][T20399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.14906,pid=30551,uid=0
[ 1160.388155][T30624] IPv6: Can't replace route, no match found
[ 1160.415526][T20399] Memory cgroup out of memory: Killed process 30552 (syz.2.14906) total-vm:98788kB, anon-rss:1240kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[ 1160.421739][T30624] IPv6: Can't replace route, no match found
[ 1160.453846][T30624] IPv6: Can't replace route, no match found
[ 1160.462179][T30624] IPv6: Can't replace route, no match found
[ 1160.469666][   T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1160.470298][T13943] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.484013][   T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1160.491971][T30624] IPv6: Can't replace route, no match found
[ 1160.515683][T30624] IPv6: Can't replace route, no match found
[ 1160.540093][T30624] IPv6: Can't replace route, no match found
[ 1160.560475][T30624] IPv6: Can't replace route, no match found
[ 1160.578386][T30624] IPv6: Can't replace route, no match found
[ 1160.585466][T30674] xt_CT: No such helper "snmp_trap"
[ 1160.645697][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.646829][T30672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.693329][T30679] bridge11: left promiscuous mode
[ 1160.706211][T30679] bridge11: left allmulticast mode
[ 1160.755374][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1160.814455][T30687] __nla_validate_parse: 200 callbacks suppressed
[ 1160.814473][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14944'.
[ 1160.831409][T30686] ip6gre2: entered promiscuous mode
[ 1160.837016][T30686] ip6gre2: entered allmulticast mode
[ 1160.844494][T30686] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1160.870138][T30687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14944'.
[ 1161.091651][T30716] validate_nla: 2 callbacks suppressed
[ 1161.091667][T30716] netlink: 'syz.4.14952': attribute type 1 has an invalid length.
[ 1161.138362][T30718] sctp: [Deprecated]: syz.1.14953 (pid 30718) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1161.138362][T30718] Use struct sctp_sack_info instead
[ 1161.140455][T30722] bond7: option mode: unable to set because the bond device has slaves
[ 1161.156582][T30721] netlink: 488 bytes leftover after parsing attributes in process `syz.3.14954'.
[ 1161.171719][T30722] netlink: 'syz.4.14955': attribute type 4 has an invalid length.
[ 1161.182418][T30722] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14955'.
[ 1161.185417][T30721] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.14954'.
[ 1161.239712][T30725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14956'.
[ 1161.279699][T30725] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 1161.369721][T30725] bridge0: port 1(macvlan2) entered disabled state
[ 1161.431202][T30725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14956'.
[ 1161.647509][T17806] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1161.657452][T17806] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1161.676443][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1161.886065][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1161.958321][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1161.967513][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1161.974709][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1161.982698][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1161.990641][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1162.270591][T30770] lo speed is unknown, defaulting to 1000
[ 1162.442598][T30770] lo speed is unknown, defaulting to 1000
[ 1162.526904][ T5711] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1162.591869][T30806] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14975'.
[ 1162.613601][T30806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14975'.
[ 1162.733842][T30770] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1162.743115][T30770] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1162.750405][T30770] bridge_slave_0: entered allmulticast mode
[ 1162.758803][T30770] bridge_slave_0: entered promiscuous mode
[ 1162.766916][T30770] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1162.774109][T30770] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1162.781916][T30770] bridge_slave_1: entered allmulticast mode
[ 1162.800251][T30770] bridge_slave_1: entered promiscuous mode
[ 1162.838469][T30770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1162.850073][T30770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1162.917412][T30770] team0: Port device team_slave_0 added
[ 1162.944931][T30770] team0: Port device team_slave_1 added
[ 1162.978258][T30770] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1162.988003][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1163.018400][T30770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1163.059462][T30770] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1163.079779][T30770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1163.152370][T30770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1163.222654][T30770] hsr_slave_0: entered promiscuous mode
[ 1163.237677][T30770] hsr_slave_1: entered promiscuous mode
[ 1163.264601][T30770] debugfs: 'hsr0' already exists in 'hsr'
[ 1163.282997][T30770] Cannot create hsr debugfs directory
[ 1163.725713][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1163.956782][T30770] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1163.978256][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1163.996118][T30770] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1164.008083][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1164.038217][T30770] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1164.045316][ T5629] Bluetooth: hci5: command tx timeout
[ 1164.069589][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1164.122771][T30770] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1164.158374][T30770] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1164.238459][T30870] netlink: 34 bytes leftover after parsing attributes in process `syz.2.14991'.
[ 1164.272720][T30870] netlink: 'syz.2.14991': attribute type 1 has an invalid length.
[ 1164.326654][T30770] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1164.378227][T30770] 8021q: adding VLAN 0 to HW filter on device team0
[ 1164.409194][T25490] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1164.416326][T25490] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1164.446100][T17806] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1164.453233][T17806] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1164.869588][T30904] syzkaller1: entered promiscuous mode
[ 1164.878982][T30901] Bluetooth: MGMT ver 1.23
[ 1164.887331][T30904] syzkaller1: entered allmulticast mode
[ 1164.901422][T30905] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1164.911407][T30901] --map-set only usable from mangle table
[ 1165.006493][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1165.078084][T30770] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1165.127315][T30922] syzkaller0: entered promiscuous mode
[ 1165.138195][T30922] syzkaller0: entered allmulticast mode
[ 1165.155639][   T48] net_ratelimit: 59 callbacks suppressed
[ 1165.155653][   T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1165.175766][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1165.182738][   T48] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1165.197834][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1165.209542][T30921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1165.295291][T30930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1165.326386][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1165.446983][T30770] veth0_vlan: entered promiscuous mode
[ 1165.460526][T30770] veth1_vlan: entered promiscuous mode
[ 1165.500369][T30770] veth0_macvtap: entered promiscuous mode
[ 1165.509766][T30770] veth1_macvtap: entered promiscuous mode
[ 1165.532829][T30770] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1165.547291][T30921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1165.555495][   T48] bond11: (slave bridge6): failed to get link speed/duplex
[ 1165.568008][T30770] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1165.598204][T25490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.607472][T25490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.618081][T25490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.633200][T25490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1165.728306][   T48] bond11: (slave bridge6): failed to get link speed/duplex
[ 1165.750093][T13943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1165.773155][T13943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1165.808594][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1165.824252][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1165.837225][T30973] __nla_validate_parse: 4 callbacks suppressed
[ 1165.837239][T30973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15019'.
[ 1165.885356][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1165.958755][T30983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14968'.
[ 1166.015800][T30983] netlink: 64 bytes leftover after parsing attributes in process `syz.4.14968'.
[ 1166.125797][ T5629] Bluetooth: hci5: command tx timeout
[ 1166.133088][T31003] mac80211_hwsim hwsim195 wlan0: entered promiscuous mode
[ 1166.145671][T31003] mac80211_hwsim hwsim195 wlan0: entered allmulticast mode
[ 1166.156407][T31006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1166.194522][T31006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15029'.
[ 1166.268057][T31020] batadv_slave_1: entered promiscuous mode
[ 1166.304494][T31016] batadv_slave_1: left promiscuous mode
[ 1166.351377][T31025] netlink: 'syz.3.15035': attribute type 29 has an invalid length.
[ 1166.400865][T31025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15035'.
[ 1166.414885][T31033] netlink: 7 bytes leftover after parsing attributes in process `syz.0.15037'.
[ 1166.419718][T31027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1166.436842][T31033] netlink: 7 bytes leftover after parsing attributes in process `syz.0.15037'.
[ 1166.646970][T31052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.693475][T31061] team0: No ports can be present during mode change
[ 1166.737855][T31052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.796346][T31052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.827143][T31067] netlink: 'syz.1.15044': attribute type 10 has an invalid length.
[ 1166.873620][T31052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1166.979180][T31081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15047'.
[ 1166.991558][T17806] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.003978][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15047'.
[ 1167.027674][T31081] vxlan1: entered promiscuous mode
[ 1167.032863][T31081] vxlan1: entered allmulticast mode
[ 1167.046046][T17806] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.064382][T31082] vxlan1: entered promiscuous mode
[ 1167.071089][T31082] vxlan1: entered allmulticast mode
[ 1167.084640][T17806] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.098156][T17806] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.227148][T31096] syzkaller0: entered promiscuous mode
[ 1167.242830][T31096] syzkaller0: entered allmulticast mode
[ 1167.258601][T31100] netlink: 'syz.2.15052': attribute type 15 has an invalid length.
[ 1167.280271][T31096] tipc: Started in network mode
[ 1167.285914][T31096] tipc: Node identity 6edc2377529d, cluster identity 4711
[ 1167.293154][T31096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1167.300269][T31098] lo speed is unknown, defaulting to 1000
[ 1167.335369][T31094] tipc: Resetting bearer <eth:syzkaller0>
[ 1167.357765][T31094] tipc: Disabling bearer <eth:syzkaller0>
[ 1167.559692][T31098] lo speed is unknown, defaulting to 1000
[ 1167.561175][T17817] nci: nci_rx_work: unknown MT 0x4
[ 1167.743374][T31150] netlink: 'syz.0.15060': attribute type 10 has an invalid length.
[ 1167.760238][T31150] team0: Port device dummy0 added
[ 1167.833098][T31156] geneve2: entered promiscuous mode
[ 1167.841604][T17817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.863704][T17817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.880906][T17817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.892874][T17817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.086672][T31167] geneve3: entered promiscuous mode
[ 1168.091968][T31167] geneve3: entered allmulticast mode
[ 1168.099007][T13938] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0
[ 1168.107914][T13938] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0
[ 1168.117549][T13938] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0
[ 1168.126792][T13938] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0
[ 1168.206403][ T5629] Bluetooth: hci5: command tx timeout
[ 1168.295036][T31119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1168.305584][T31149] netlink: 'syz.2.15062': attribute type 1 has an invalid length.
[ 1168.711293][T31213] sctp: [Deprecated]: syz.4.15081 (pid 31213) Use of int in max_burst socket option.
[ 1168.711293][T31213] Use struct sctp_assoc_value instead
[ 1168.898431][T31228] dvmrp1: tun_chr_ioctl cmd 1074025677
[ 1168.907606][T31228] dvmrp1: linktype set to 776
[ 1168.938973][T31234] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003
[ 1169.128363][T31252] sch_tbf: burst 88 is lower than device veth19 mtu (1514) !
[ 1169.412561][T31275] netlink: 'syz.1.15102': attribute type 1 has an invalid length.
[ 1169.433608][T31275] netlink: 'syz.1.15102': attribute type 2 has an invalid length.
[ 1169.443990][T31275] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1169.788471][T31319] netlink: 'syz.2.15114': attribute type 1 has an invalid length.
[ 1169.811777][T31319] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1169.835078][T31319] bond14: (slave veth15): Enslaving as an active interface with a down link
[ 1169.882706][T31319] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 1169.900671][T31319] bond14: (slave batadv2): making interface the new active one
[ 1169.918166][T31319] batadv2: entered promiscuous mode
[ 1169.924211][T31319] bond14: (slave batadv2): Enslaving as an active interface with an up link
[ 1169.958731][T31330] xt_CONNSECMARK: invalid mode: 0
[ 1170.216462][T17817] net_ratelimit: 74 callbacks suppressed
[ 1170.216479][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1170.237890][T17817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1170.262137][T31355] bond1: option ad_actor_sys_prio: invalid value (0)
[ 1170.269278][T31355] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[ 1170.278107][T31355] bond1 (unregistering): Released all slaves
[ 1170.285408][ T5629] Bluetooth: hci5: command tx timeout
[ 1170.336937][T17817] bond11: (slave bridge6): failed to get link speed/duplex
[ 1170.356528][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1170.365292][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 1170.371140][T17806] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1170.451571][T31373] bond1: Unable to set up delay as MII monitoring is disabled
[ 1170.462369][T31373] bond1 (unregistering): Released all slaves
[ 1170.505747][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1170.529733][T31380] netpci0: tun_chr_ioctl cmd 1074025678
[ 1170.542321][T31380] netpci0: group set to 0
[ 1170.547590][T31381] bridge_slave_1: invalid flags given to default FDB implementation
[ 1170.574873][T31384] netlink: 'syz.0.15134': attribute type 83 has an invalid length.
[ 1170.615445][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1170.735533][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1170.807288][T31408] netlink: 'syz.0.15141': attribute type 2 has an invalid length.
[ 1170.855279][T17806] bond11: (slave bridge6): failed to get link speed/duplex
[ 1171.480227][T31452] __nla_validate_parse: 29 callbacks suppressed
[ 1171.480246][T31452] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15153'.
[ 1171.513526][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15154'.
[ 1171.522954][T31448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15153'.
[ 1171.541182][T31448] macsec1: entered promiscuous mode
[ 1171.996980][T31485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15161'.
[ 1172.114371][T31490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15164'.
[ 1172.246960][T31509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15168'.
[ 1172.263789][T31509] ip6gre1: entered promiscuous mode
[ 1172.269491][T31509] ip6gre1: entered allmulticast mode
[ 1172.291172][T31510] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1172.345700][T31512] block nbd3: server does not support multiple connections per device.
[ 1172.376628][T31512] block nbd3: shutting down sockets
[ 1172.422262][T31527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15174'.
[ 1172.467089][T31534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15172'.
[ 1172.500351][T31534] ip6gre1: entered promiscuous mode
[ 1172.512514][T31534] ip6gre1: entered allmulticast mode
[ 1172.610833][T31550] validate_nla: 1 callbacks suppressed
[ 1172.610850][T31550] netlink: 'syz.1.15180': attribute type 4 has an invalid length.
[ 1172.841603][T31565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15184'.
[ 1172.981706][T31586] syzkaller0: entered promiscuous mode
[ 1172.987889][T31586] syzkaller0: entered allmulticast mode
[ 1173.076973][T31592] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15192'.
[ 1173.175875][T13938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1173.183631][T13938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1173.205486][ T8276] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1173.499744][T31632] netlink: 'syz.4.15204': attribute type 25 has an invalid length.
[ 1173.518332][T31632] netlink: 'syz.4.15204': attribute type 3 has an invalid length.
[ 1173.538118][T31632] vlan2: entered allmulticast mode
[ 1173.543339][T31632] bond0: entered allmulticast mode
[ 1173.548624][T31632] bond_slave_0: entered allmulticast mode
[ 1173.554430][T31632] bond_slave_1: entered allmulticast mode
[ 1173.606625][T31636] nbd3: detected capacity change from 0 to 1
[ 1173.623582][T30663] buffer_io_error: 48 callbacks suppressed
[ 1173.623597][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.646665][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.660639][ T5623] block nbd3: Receive control failed (result -32)
[ 1173.680040][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.688627][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.696532][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.704318][T30663] ldm_validate_partition_table(): Disk read failed.
[ 1173.711097][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.724422][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.743483][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.764663][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.784790][T30663] Dev nbd3: unable to read RDB block 0
[ 1173.790895][T30663] Buffer I/O error on dev nbd3, logical block 0, async page read
[ 1173.793844][T31658] netlink: 'syz.1.15211': attribute type 21 has an invalid length.
[ 1173.799235][T30663]  nbd3: unable to read partition table
[ 1173.813141][T30663] nbd3: partition table beyond EOD, truncated
[ 1173.850151][T31658] netlink: 'syz.1.15211': attribute type 1 has an invalid length.
[ 1173.879880][T31664] syz.3.15212 (31664) used obsolete PPPIOCDETACH ioctl
[ 1173.896350][ T5746] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1174.125878][  T345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1174.210233][T31689] netlink: 'syz.4.15216': attribute type 1 has an invalid length.
[ 1174.225166][T31689] bond1: entered promiscuous mode
[ 1174.230493][T31689] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1174.605561][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1174.807351][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1174.814862][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1174.822401][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1174.829815][T31671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1174.841407][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1174.850024][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1174.972114][T31708] netlink: 'syz.2.15221': attribute type 1 has an invalid length.
[ 1174.985793][T31708] netlink: 'syz.2.15221': attribute type 2 has an invalid length.
[ 1175.032596][T31712] syzkaller0: entered promiscuous mode
[ 1175.040503][T31703] netlink: 'syz.2.15221': attribute type 1 has an invalid length.
[ 1175.045518][T31712] syzkaller0: entered allmulticast mode
[ 1175.053158][T31703] netlink: 'syz.2.15221': attribute type 2 has an invalid length.
[ 1175.159431][T31723] tunl0: entered allmulticast mode
[ 1175.198646][T31725] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1175.325032][T31699] lo speed is unknown, defaulting to 1000
[ 1175.331090][T17819] net_ratelimit: 75 callbacks suppressed
[ 1175.331106][T17819] bond11: (slave bridge6): failed to get link speed/duplex
[ 1175.464378][T31699] lo speed is unknown, defaulting to 1000
[ 1175.471254][T17819] bond11: (slave bridge6): failed to get link speed/duplex
[ 1175.505488][T25492] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1175.520101][T25492] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1175.536657][T31749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1175.566492][T31749] syzkaller0: entered promiscuous mode
[ 1175.576454][T31749] syzkaller0: entered allmulticast mode
[ 1175.740325][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1175.789062][T31768] 0·: renamed from hsr0 (while UP)
[ 1175.796593][T13936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1175.814513][T31768] 0·: entered allmulticast mode
[ 1175.822122][T31768] hsr_slave_0: entered allmulticast mode
[ 1175.828698][T31768] hsr_slave_1: entered allmulticast mode
[ 1175.834799][T31768] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[ 1175.939168][T31699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.946948][T31699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.954458][T31699] bridge_slave_0: entered allmulticast mode
[ 1175.962165][T31699] bridge_slave_0: entered promiscuous mode
[ 1175.977942][T31699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.987407][T31699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.994664][T31699] bridge_slave_1: entered allmulticast mode
[ 1176.001932][T31699] bridge_slave_1: entered promiscuous mode
[ 1176.027427][T31699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1176.040055][T31699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1176.064939][T31699] team0: Port device team_slave_0 added
[ 1176.072911][T31699] team0: Port device team_slave_1 added
[ 1176.075412][T13936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1176.093068][T13936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1176.093396][T31699] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1176.136043][T31699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1176.162747][T31699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1176.176628][T31699] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1176.183586][T31699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1176.214335][T31699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1176.310244][T31699] hsr_slave_0: entered promiscuous mode
[ 1176.318307][T31699] hsr_slave_1: entered promiscuous mode
[ 1176.360200][T31807] xt_l2tp: v2 sid > 0xffff: 262144
[ 1176.383242][T31805] vlan2: entered allmulticast mode
[ 1176.401110][T31805] bond0: entered allmulticast mode
[ 1176.413737][T31805] bond_slave_0: entered allmulticast mode
[ 1176.423986][T31805] bond_slave_1: entered allmulticast mode
[ 1176.686162][T31805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.693603][T31805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.767990][T31805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1176.780634][T31805] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1176.891516][T25492] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.925315][ T5623] Bluetooth: hci3: command tx timeout
[ 1176.934497][T25492] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.978620][T25492] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.015026][T25492] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.037730][T31699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.057106][T31699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[ 1177.116611][T31699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.141166][T31699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[ 1177.209622][T31699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.224080][T31699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[ 1177.324043][T31699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1177.341770][T31699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0
[ 1177.382027][T31878] dvmrp0: left allmulticast mode
[ 1177.441895][T31875] C: renamed from veth1_to_team (while UP)
[ 1177.471463][T31875] __nla_validate_parse: 20 callbacks suppressed
[ 1177.471479][T31875] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15270'.
[ 1177.535070][T31699] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1177.548240][T31699] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1177.557479][T31699] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1177.575557][T31699] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1177.587348][T31699] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1177.598327][T31699] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1177.609202][T31699] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1177.622258][T31699] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1177.717072][T31699] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.734973][T31699] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.755005][T25492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.759824][T31905] validate_nla: 1 callbacks suppressed
[ 1177.759838][T31905] netlink: 'syz.4.15275': attribute type 1 has an invalid length.
[ 1177.762114][T25492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1177.799376][T31904] veth3: entered allmulticast mode
[ 1177.825716][T31905] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1177.839730][T13936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.846871][T13936] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1177.901384][T31113] IPVS: starting estimator thread 0...
[ 1177.997393][T31919] IPVS: using max 49 ests per chain, 117600 per kthread
[ 1178.016240][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15280'.
[ 1178.104418][T31938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15284'.
[ 1178.120419][T31938] ipvlan2: entered allmulticast mode
[ 1178.126498][T31938] batadv0: entered allmulticast mode
[ 1178.132767][T31938] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1178.452604][T31699] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1178.461072][T31966] netlink: 'syz.2.15291': attribute type 1 has an invalid length.
[ 1178.478149][T31966] netlink: 'syz.2.15291': attribute type 1 has an invalid length.
[ 1178.502593][T31966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15291'.
[ 1178.521984][T31966] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15291'.
[ 1178.533316][T31699] veth0_vlan: entered promiscuous mode
[ 1178.547147][T31699] veth1_vlan: entered promiscuous mode
[ 1178.609774][T31699] veth0_macvtap: entered promiscuous mode
[ 1178.627852][T31699] veth1_macvtap: entered promiscuous mode
[ 1178.670273][T31699] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1178.692828][T31699] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1178.722819][T13938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.743798][T13938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.758828][T13938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.791121][T13938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1178.951665][T25492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1178.986849][T25492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.005709][ T5623] Bluetooth: hci3: command tx timeout
[ 1179.063998][T17819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.097675][T17819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.431401][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1179.439525][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1179.447184][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1179.454754][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1179.459916][T32027] netlink: 244 bytes leftover after parsing attributes in process `syz.0.15307'.
[ 1179.482291][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1179.734764][   T46] bridge0: entered promiscuous mode
[ 1179.832008][T32023] lo speed is unknown, defaulting to 1000
[ 1179.925697][T32061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15318'.
[ 1179.943200][T32061] netlink: 'syz.4.15318': attribute type 1 has an invalid length.
[ 1179.960707][T32023] lo speed is unknown, defaulting to 1000
[ 1179.991486][T32067] team0: Port device veth3 added
[ 1180.094315][T32080] netlink: 'syz.3.15322': attribute type 1 has an invalid length.
[ 1180.103927][T32080] netlink: 'syz.3.15322': attribute type 2 has an invalid length.
[ 1180.112133][T32080] netlink: 'syz.3.15322': attribute type 2 has an invalid length.
[ 1180.120920][T32080] netlink: 'syz.3.15322': attribute type 2 has an invalid length.
[ 1180.245112][T32091] tipc: Enabled bearer <eth:macvlan1>, priority 10
[ 1180.282075][T32095] macsec1: entered promiscuous mode
[ 1180.289989][T32095] bridge0: entered promiscuous mode
[ 1180.324192][T32107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1180.392578][T32023] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.398836][T32115] netlink: 'syz.4.15331': attribute type 13 has an invalid length.
[ 1180.401487][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15329'.
[ 1180.407844][T32023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.425050][T32023] bridge_slave_0: entered allmulticast mode
[ 1180.432163][T32023] bridge_slave_0: entered promiscuous mode
[ 1180.441258][T32118] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1180.445437][ T1158] net_ratelimit: 51 callbacks suppressed
[ 1180.445451][ T1158] bond11: (slave bridge6): failed to get link speed/duplex
[ 1180.562234][T32023] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.574521][T32023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.584624][T32023] bridge_slave_1: entered allmulticast mode
[ 1180.598757][T32023] bridge_slave_1: entered promiscuous mode
[ 1180.621598][T32123] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1180.650697][T32123] syzkaller0: entered promiscuous mode
[ 1180.656612][T32123] syzkaller0: entered allmulticast mode
[ 1180.689277][T32023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1180.718563][T32023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1180.751807][T32023] team0: Port device team_slave_0 added
[ 1180.759745][T32023] team0: Port device team_slave_1 added
[ 1180.796860][T32023] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1180.803947][T32023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1180.808981][T32152] netlink: 'syz.1.15342': attribute type 1 has an invalid length.
[ 1180.831639][T32023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1180.850431][T17804] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1180.851338][T32023] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1180.865586][T17804] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1180.874751][T32152] netlink: 13 bytes leftover after parsing attributes in process `syz.1.15342'.
[ 1180.896610][T32023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1180.954594][T32023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1181.038221][T32023] hsr_slave_0: entered promiscuous mode
[ 1181.044729][T32023] hsr_slave_1: entered promiscuous mode
[ 1181.051524][T32023] debugfs: 'hsr0' already exists in 'hsr'
[ 1181.058072][T32023] Cannot create hsr debugfs directory
[ 1181.085355][ T5629] Bluetooth: hci3: command tx timeout
[ 1181.094236][T32174] syzkaller1: entered promiscuous mode
[ 1181.100808][T32174] syzkaller1: entered allmulticast mode
[ 1181.193014][T32023] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1181.236329][T13936] bond11: (slave bridge6): failed to get link speed/duplex
[ 1181.295695][ T1158] batadv2: left promiscuous mode
[ 1181.308644][T32023] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1181.346287][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1181.357221][ T5719] tipc: Node number set to 1010901879
[ 1181.368930][T32023] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1181.406460][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1181.418214][T13936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1181.432581][T13936] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1181.466066][T32199] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1181.473997][T32023] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1181.493130][T32199] bond1: option lp_interval: invalid value (18446744073709551607)
[ 1181.503146][T32199] bond1: option lp_interval: allowed values 1 - 2147483647
[ 1181.515976][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1181.528182][T32202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15351'.
[ 1181.549114][T32202] gretap0: entered promiscuous mode
[ 1181.558504][T32202] macsec3: entered allmulticast mode
[ 1181.564240][T32202] gretap0: entered allmulticast mode
[ 1181.569703][ T5629] Bluetooth: hci2: command tx timeout
[ 1181.579517][T32202] gretap0: left allmulticast mode
[ 1181.584638][T32202] gretap0: left promiscuous mode
[ 1181.596783][T32204] syzkaller1: entered promiscuous mode
[ 1181.602276][T32204] syzkaller1: entered allmulticast mode
[ 1181.625750][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1181.956569][T32233] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 1181.968475][T32233] bond3 (unregistering): Released all slaves
[ 1183.165407][ T5629] Bluetooth: hci3: command tx timeout
[ 1183.645703][ T5629] Bluetooth: hci2: command tx timeout
[ 1183.948642][T32160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1183.960158][T32023] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1183.998674][T32023] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1184.006035][T32237] validate_nla: 1 callbacks suppressed
[ 1184.006048][T32237] netlink: 'syz.1.15360': attribute type 1 has an invalid length.
[ 1184.015858][T32023] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1184.030280][T32023] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1184.064662][T32023] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1184.083069][T32023] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1184.099349][T32242] ipip0: entered promiscuous mode
[ 1184.104447][T32242] ipip0: entered allmulticast mode
[ 1184.113044][T32023] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1184.121726][T32023] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1184.142895][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15360'.
[ 1184.277764][T32023] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1184.306555][T32023] 8021q: adding VLAN 0 to HW filter on device team0
[ 1184.330191][T17804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.337325][T17804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1184.381876][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.389010][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1184.506115][T32272] netlink: 'syz.3.15369': attribute type 1 has an invalid length.
[ 1184.556918][T32272] ipvlan2: entered allmulticast mode
[ 1184.575386][T32272] veth0_vlan: entered allmulticast mode
[ 1184.621576][T32281] ipvlan3: entered allmulticast mode
[ 1184.621654][T32283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15372'.
[ 1184.736926][T32292] syzkaller1: entered promiscuous mode
[ 1184.750781][T32292] syzkaller1: entered allmulticast mode
[ 1184.930618][T32313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15379'.
[ 1184.947874][T32315] pimreg: entered allmulticast mode
[ 1184.954126][T32315] pimreg: left allmulticast mode
[ 1185.008125][T32023] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1185.076842][T32023] veth0_vlan: entered promiscuous mode
[ 1185.088390][T32023] veth1_vlan: entered promiscuous mode
[ 1185.120542][T32023] veth0_macvtap: entered promiscuous mode
[ 1185.142048][T32023] veth1_macvtap: entered promiscuous mode
[ 1185.183146][T32023] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1185.198056][T32023] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1185.209573][T13938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.219771][T13938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.229718][T13938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.240689][T32324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1185.250732][T13938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1185.337996][T13938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.352138][T13938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.403775][T13938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1185.422776][T13938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1185.486407][ T1158] net_ratelimit: 52 callbacks suppressed
[ 1185.486422][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1185.511352][T13938] bond11: (slave bridge6): failed to get link speed/duplex
[ 1185.525457][T25492] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1185.539955][T25492] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1185.580322][T32341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15306'.
[ 1185.665139][T32347] nbd: nbd0 already in use
[ 1185.667923][T32352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15390'.
[ 1185.679538][ T1158] bond11: (slave bridge6): failed to get link speed/duplex
[ 1185.728114][ T5629] Bluetooth: hci2: command tx timeout
[ 1185.777336][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1185.909357][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1186.095418][T12617] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1186.110493][T12617] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1186.227746][T32378] lo speed is unknown, defaulting to 1000
[ 1186.235333][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1186.359253][T32386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15398'.
[ 1186.371221][T32378] lo speed is unknown, defaulting to 1000
[ 1186.469762][T32396] netlink: 'syz.1.15400': attribute type 1 has an invalid length.
[ 1186.762389][T32427] netlink: 74 bytes leftover after parsing attributes in process `syz.1.15408'.
[ 1186.829893][T32433] xt_hashlimit: size too large, truncated to 1048576
[ 1186.881776][T32440] netlink: 'syz.1.15408': attribute type 1 has an invalid length.
[ 1186.901731][T32440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15408'.
[ 1187.035865][T32444] Bluetooth: MGMT ver 1.23
[ 1187.338980][T32459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15418'.
[ 1187.464687][T32477] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1187.552484][T32489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15428'.
[ 1187.571053][T17819] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1187.616093][T32493] bridge_slave_0: left allmulticast mode
[ 1187.631912][T32493] bridge_slave_0: left promiscuous mode
[ 1187.642147][T32493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.672861][T32493] bridge_slave_1: left allmulticast mode
[ 1187.692311][T32493] bridge_slave_1: left promiscuous mode
[ 1187.704228][T32493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.719601][T32493] bond0: (slave bond_slave_0): Releasing backup interface
[ 1187.737074][T32493] bond0: (slave bond_slave_1): Releasing backup interface
[ 1187.750735][T32493] team0: Port device team_slave_0 removed
[ 1187.760637][T32493] team0: Port device team_slave_1 removed
[ 1187.768028][T32493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1187.775821][T32493] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1187.784186][T32493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1187.792600][T32493] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1187.804144][T17819] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1187.813382][ T5629] Bluetooth: hci2: command tx timeout
[ 1187.824304][T17819] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1187.840711][T17819] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1187.922000][T32514] netlink: 'syz.3.15434': attribute type 1 has an invalid length.
[ 1187.943044][T32514] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1187.956187][ T5711] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1187.982766][T32514] bond1: (slave veth7): Enslaving as an active interface with a down link
[ 1188.013755][T32524] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1188.022724][T32524] bond1: (slave batadv1): making interface the new active one
[ 1188.031428][T32524] batadv1: entered promiscuous mode
[ 1188.037183][T32524] bond1: (slave batadv1): Enslaving as an active interface with an up link
[ 1188.122250][T32530] mac80211_hwsim hwsim230 wlan0: entered promiscuous mode
[ 1188.131759][T32530] mac80211_hwsim hwsim230 wlan0: entered allmulticast mode
[ 1188.146083][ T5711] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1188.354092][T32555] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[ 1188.381927][T32554] syzkaller1: entered promiscuous mode
[ 1188.389688][T32554] syzkaller1: entered allmulticast mode
[ 1188.396481][T32555] netlink: 'syz.4.15446': attribute type 1 has an invalid length.
[ 1188.410011][T32555] netlink: 'syz.4.15446': attribute type 3 has an invalid length.
[ 1188.577275][T32572] tipc: Started in network mode
[ 1188.582674][T32572] tipc: Node identity e24358b5da5c, cluster identity 4711
[ 1188.590287][T32572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1188.601904][T32573] block nbd13: Unsupported socket: should be TCP or UNIX.
[ 1188.614184][T32572] syzkaller0: entered promiscuous mode
[ 1188.632107][T32572] syzkaller0: entered allmulticast mode
[ 1188.658502][T32572] tipc: Resetting bearer <eth:syzkaller0>
[ 1188.759974][T32571] tipc: Resetting bearer <eth:syzkaller0>
[ 1188.780114][T32571] tipc: Disabling bearer <eth:syzkaller0>
[ 1188.845457][T17819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1188.921116][T32577] syzkaller0: entered promiscuous mode
[ 1188.933823][T32577] syzkaller0: entered allmulticast mode
[ 1188.992768][T32580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.067700][T32580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.134971][T32580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.185748][T32602] __nla_validate_parse: 11 callbacks suppressed
[ 1189.185764][T32602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15461'.
[ 1189.212152][T32604] syzkaller0: entered promiscuous mode
[ 1189.217765][T32604] syzkaller0: entered allmulticast mode
[ 1189.268500][T32609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15461'.
[ 1189.292269][T32609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15461'.
[ 1189.303929][T32609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15461'.
[ 1189.468955][T32622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15464'.
[ 1189.830972][T32633] bond1: Removing last ns target with arp_interval on
[ 1189.886267][T17819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1189.904132][T17819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1190.502320][T32660] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 1190.502761][T32659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15474'.
[ 1190.546782][T32658] syzkaller0: entered promiscuous mode
[ 1190.558876][T32658] syzkaller0: entered allmulticast mode
[ 1190.568675][T32664] net_ratelimit: 57 callbacks suppressed
[ 1190.568690][T32664] sock: sock_set_timeout: `syz.1.15479' (pid 32664) tries to set negative timeout
[ 1190.581088][T32668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15480'.
[ 1190.588156][T32659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15474'.
[ 1190.592652][ T1158] bond11: (slave bridge6): failed to get link speed/duplex
[ 1190.608781][T32659] netlink: 31 bytes leftover after parsing attributes in process `syz.4.15474'.
[ 1190.608798][T32659] netlink: 'syz.4.15474': attribute type 3 has an invalid length.
[ 1190.608810][T32659] netlink: 'syz.4.15474': attribute type 2 has an invalid length.
[ 1190.608821][T32659] netlink: 31 bytes leftover after parsing attributes in process `syz.4.15474'.
[ 1190.608835][T32659] netlink: 'syz.4.15474': attribute type 2 has an invalid length.
[ 1190.760766][T13938] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1190.776013][T13938] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1190.776542][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1190.845606][   T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1190.980543][T17819] bond11: (slave bridge6): failed to get link speed/duplex
[ 1191.124876][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1191.139840][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1191.147524][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1191.155109][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1191.162633][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1191.165423][T25492] bond11: (slave bridge6): failed to get link speed/duplex
[ 1191.256943][T17819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1191.266133][T25492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1191.385370][T17819] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1191.702053][T32716] veth1_to_bond: entered allmulticast mode
[ 1191.709374][T32712] tipc: Failed to remove unknown binding: 66,1,1/0:1537438403/1537438405
[ 1191.710478][T32716] veth1_to_bond: entered promiscuous mode
[ 1191.725017][T32708] syzkaller1: entered promiscuous mode
[ 1191.730734][T32712] tipc: Failed to remove unknown binding: 66,1,1/0:1537438403/1537438405
[ 1191.740418][T32708] syzkaller1: entered allmulticast mode
[ 1191.749501][T32716] veth1_to_bond (unregistering): left allmulticast mode
[ 1191.756688][T32716] veth1_to_bond (unregistering): left promiscuous mode
[ 1191.769191][T32716] bond0: (slave bond_slave_1): Releasing backup interface
[ 1191.778492][T32716] bond_slave_1 (unregistering): left allmulticast mode
[ 1191.871887][T32687] lo speed is unknown, defaulting to 1000
[ 1191.886011][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1192.002576][T32687] lo speed is unknown, defaulting to 1000
[ 1192.061523][T32759] syzkaller0: entered promiscuous mode
[ 1192.072118][T32759] syzkaller0: entered allmulticast mode
[ 1192.259195][  T308] tipc: Failed to remove unknown binding: 66,0,0/0:2917568750/2917568752
[ 1192.269403][  T308] tipc: Failed to remove unknown binding: 66,0,0/0:2917568750/2917568751
[ 1192.285165][  T308] tipc: Failed to remove unknown binding: 66,0,0/0:2917568750/2917568752
[ 1192.307686][T32687] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1192.313966][  T308] tipc: Failed to remove unknown binding: 66,0,0/0:2917568750/2917568751
[ 1192.314826][T32687] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.330665][T32687] bridge_slave_0: entered allmulticast mode
[ 1192.337936][T32687] bridge_slave_0: entered promiscuous mode
[ 1192.346060][T32687] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1192.353204][T32687] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.360870][T32687] bridge_slave_1: entered allmulticast mode
[ 1192.376242][T32687] bridge_slave_1: entered promiscuous mode
[ 1192.409880][T32687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1192.422850][T32687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1192.452427][T32687] team0: Port device team_slave_0 added
[ 1192.460415][T32687] team0: Port device team_slave_1 added
[ 1192.485801][T32687] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1192.496535][T32687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1192.524918][  T326] sctp: [Deprecated]: syz.4.15508 (pid 326) Use of int in max_burst socket option deprecated.
[ 1192.524918][  T326] Use struct sctp_assoc_value instead
[ 1192.545711][T32687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1192.557784][T32687] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1192.564767][T32687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1192.591191][T32687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1192.608110][  T319] lo speed is unknown, defaulting to 1000
[ 1192.674029][T32687] hsr_slave_0: entered promiscuous mode
[ 1192.681592][T32687] hsr_slave_1: entered promiscuous mode
[ 1192.689632][T32687] debugfs: 'hsr0' already exists in 'hsr'
[ 1192.699337][T32687] Cannot create hsr debugfs directory
[ 1192.711927][  T335] x_tables: duplicate underflow at hook 2
[ 1192.804083][  T319] lo speed is unknown, defaulting to 1000
[ 1192.932663][  T342] netlink: 'syz.3.15512': attribute type 1 has an invalid length.
[ 1192.948216][  T342] netlink: 'syz.3.15512': attribute type 4 has an invalid length.
[ 1192.976689][  T342] netlink: 'syz.3.15512': attribute type 1 has an invalid length.
[ 1192.993539][  T342] netlink: 'syz.3.15512': attribute type 4 has an invalid length.
[ 1193.246198][ T5629] Bluetooth: hci4: command tx timeout
[ 1193.885768][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1195.335588][ T5629] Bluetooth: hci4: command tx timeout
[ 1195.726065][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1195.811498][T32687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1195.822171][T32687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.854755][  T388] __nla_validate_parse: 16 callbacks suppressed
[ 1195.854770][  T388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15520'.
[ 1195.887540][T17807] net_ratelimit: 34 callbacks suppressed
[ 1195.887554][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1195.955335][T32687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1195.969786][T32687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.985908][T17807] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1196.000314][T17807] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1196.035673][T32718] bond11: (slave bridge6): failed to get link speed/duplex
[ 1196.069085][T32687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1196.080079][T32687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.135571][T32687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1196.150497][T32687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.215321][T32718] bond11: (slave bridge6): failed to get link speed/duplex
[ 1196.364625][T32687] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1196.377229][T32718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1196.459996][T32687] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1196.484555][T32687] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1196.500312][T32687] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1196.519262][T32687] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1196.526524][T17807] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1196.540949][T17807] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1196.558581][T32687] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1196.573540][  T441] netlink: 'syz.4.15529': attribute type 2 has an invalid length.
[ 1196.574039][T32687] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1196.590657][  T441] netlink: 'syz.4.15529': attribute type 1 has an invalid length.
[ 1196.604097][  T445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1196.608253][  T441] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15529'.
[ 1196.624263][T32687] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1196.706244][T17807] bond11: (slave bridge6): failed to get link speed/duplex
[ 1196.747046][  T462] syzkaller1: entered promiscuous mode
[ 1196.753171][  T462] syzkaller1: entered allmulticast mode
[ 1196.769607][T32687] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1196.772349][  T467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[ 1196.790621][  T469] netlink: 'syz.0.15537': attribute type 10 has an invalid length.
[ 1196.802629][  T469] veth0_to_bond: entered allmulticast mode
[ 1196.809279][  T469] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1196.847771][T32687] 8021q: adding VLAN 0 to HW filter on device team0
[ 1196.858664][T25495] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1196.865764][T25495] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1196.905172][T12617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1196.912338][T12617] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1197.028687][  T476] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1197.042256][  T476] batman_adv: batadv0: Adding interface: gretap1
[ 1197.048971][  T476] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1197.076435][  T476] batman_adv: batadv0: Interface activated: gretap1
[ 1197.406174][ T5629] Bluetooth: hci4: command tx timeout
[ 1197.419957][  T525] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.15549'.
[ 1197.456125][  T527] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.15548'.
[ 1197.499845][  T530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15550'.
[ 1197.602560][T32687] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1197.676739][T32687] veth0_vlan: entered promiscuous mode
[ 1197.687649][T32687] veth1_vlan: entered promiscuous mode
[ 1197.712207][T32687] veth0_macvtap: entered promiscuous mode
[ 1197.729520][T32687] veth1_macvtap: entered promiscuous mode
[ 1197.745000][T32687] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1197.768545][T32687] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1197.783159][T13941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.799535][  T545] netlink: 'syz.0.15554': attribute type 2 has an invalid length.
[ 1197.802500][T13941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.840773][T13941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.864049][T13941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1197.901006][T17807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.920491][T17807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1197.952988][T32718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.961139][T32718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1197.975957][  T552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15556'.
[ 1197.998055][  T552] bridge2: port 1(dummy0) entered blocking state
[ 1198.004561][  T552] bridge2: port 1(dummy0) entered disabled state
[ 1198.012283][  T552] dummy0: entered allmulticast mode
[ 1198.019713][  T552] dummy0: entered promiscuous mode
[ 1198.043666][  T552] netlink: 'syz.4.15556': attribute type 4 has an invalid length.
[ 1198.055760][  T554] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15557'.
[ 1198.082522][  T552] netlink: 'syz.4.15556': attribute type 10 has an invalid length.
[ 1198.098066][  T552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15556'.
[ 1198.113711][  T552] bridge2: port 1(dummy0) entered blocking state
[ 1198.120179][  T552] bridge2: port 1(dummy0) entered forwarding state
[ 1198.128273][  T552] dummy0: left allmulticast mode
[ 1198.133417][  T552] bridge2: port 1(dummy0) entered disabled state
[ 1198.155695][  T567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15561'.
[ 1198.283296][  T582] netlink: 'syz.2.15566': attribute type 1 has an invalid length.
[ 1198.308503][  T577] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15565'.
[ 1198.362551][  T593] sctp: [Deprecated]: syz.1.15569 (pid 593) Use of int in max_burst socket option deprecated.
[ 1198.362551][  T593] Use struct sctp_assoc_value instead
[ 1198.424675][  T599] vlan2: entered allmulticast mode
[ 1198.443727][  T599] bond0: entered allmulticast mode
[ 1198.457895][  T599] bond_slave_0: entered allmulticast mode
[ 1198.463769][  T599] bond_slave_1: entered allmulticast mode
[ 1198.507990][  T598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1198.532606][  T598] bond_slave_0: left allmulticast mode
[ 1198.565071][  T598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1198.578169][  T598] bond_slave_1: left allmulticast mode
[ 1198.586156][  T598] bond0 (unregistering): Released all slaves
[ 1198.597054][  T607] syzkaller0: entered promiscuous mode
[ 1198.603150][  T607] syzkaller0: entered allmulticast mode
[ 1198.751801][  T628] netlink: 'syz.2.15578': attribute type 1 has an invalid length.
[ 1198.792573][  T628] netlink: 'syz.2.15578': attribute type 2 has an invalid length.
[ 1198.837466][  T640] xt_hashlimit: size too large, truncated to 1048576
[ 1199.066242][  T650] syzkaller0: entered promiscuous mode
[ 1199.072745][  T650] syzkaller0: entered allmulticast mode
[ 1199.220332][  T664] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1199.296317][  T673] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1199.377059][T32718] batadv1: left promiscuous mode
[ 1199.486411][ T5629] Bluetooth: hci4: command tx timeout
[ 1199.500366][  T691] netlink: 'syz.2.15594': attribute type 2 has an invalid length.
[ 1199.575047][  T698] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1199.817671][  T722] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1199.855121][  T725] bond3: entered promiscuous mode
[ 1199.861138][  T725] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1199.874684][  T725] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1199.882956][  T725] bond3: (slave sit1): The slave device specified does not support setting the MAC address
[ 1199.894091][  T725] bond3: (slave sit1): Error -95 calling set_mac_address
[ 1200.168584][  T741] team_slave_1: Caught tx_queue_len zero misconfig
[ 1200.773137][  T791] lo speed is unknown, defaulting to 1000
[ 1201.160025][  T791] lo speed is unknown, defaulting to 1000
[ 1201.167774][T17807] net_ratelimit: 54 callbacks suppressed
[ 1201.167791][T17807] bond11: (slave bridge6): failed to get link speed/duplex
[ 1201.183664][T13941] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1201.198119][T13941] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1201.307069][T13941] bond11: (slave bridge6): failed to get link speed/duplex
[ 1201.329711][  T802] __nla_validate_parse: 20 callbacks suppressed
[ 1201.329729][  T802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.345809][  T802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.354935][  T802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.434327][T12617] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.443389][  T802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.467073][T12617] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.478032][  T802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.487882][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1201.504073][T12617] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.521227][  T802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15628'.
[ 1201.554824][  T825] syzkaller1: entered promiscuous mode
[ 1201.569310][  T825] syzkaller1: entered allmulticast mode
[ 1201.580129][T12617] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1201.596918][T32733] bond11: (slave bridge6): failed to get link speed/duplex
[ 1201.604462][  T833] validate_nla: 2 callbacks suppressed
[ 1201.604476][  T833] netlink: 'syz.1.15634': attribute type 10 has an invalid length.
[ 1201.620631][  T833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15634'.
[ 1201.641697][  T833] dummy0: entered promiscuous mode
[ 1201.647595][  T833] dummy0: entered allmulticast mode
[ 1201.653273][  T833] bridge0: port 3(dummy0) entered blocking state
[ 1201.659828][  T833] bridge0: port 3(dummy0) entered disabled state
[ 1201.667411][  T833] bridge0: port 3(dummy0) entered blocking state
[ 1201.673780][  T833] bridge0: port 3(dummy0) entered forwarding state
[ 1201.715427][T25495] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[ 1201.730508][T32718] bond11: (slave bridge6): failed to get link speed/duplex
[ 1201.738276][T25495] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[ 1201.796065][  T842] lo speed is unknown, defaulting to 1000
[ 1201.836271][T17821] bond11: (slave bridge6): failed to get link speed/duplex
[ 1201.897544][  T842] lo speed is unknown, defaulting to 1000
[ 1202.125382][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1202.232302][T25495] ------------[ cut here ]------------
[ 1202.237807][T25495] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band
[ 1202.251562][T25495] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:43/25495
[ 1202.262538][T25495] Modules linked in:
[ 1202.266444][T25495] CPU: 1 UID: 0 PID: 25495 Comm: kworker/u8:43 Not tainted syzkaller #0 PREEMPT(full) 
[ 1202.276092][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1202.286160][T25495] Workqueue: events_unbound cfg80211_wiphy_work
[ 1202.292406][T25495] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760
[ 1202.298839][T25495] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48
[ 1202.318469][T25495] RSP: 0018:ffffc9000dcd74a0 EFLAGS: 00010293
[ 1202.324523][T25495] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005
[ 1202.332512][T25495] RDX: ffff8880822620c4 RSI: ffff888074925998 RDI: ffffffff90430cd0
[ 1202.340527][T25495] RBP: ffffc9000dcd7610 R08: ffff888088ad2abf R09: 1ffff1101115a557
[ 1202.348511][T25495] R10: dffffc0000000000 R11: ffffed101115a558 R12: ffff8880822620c4
[ 1202.356496][T25495] R13: 0000000000000001 R14: ffff888074925998 R15: dffffc0000000000
[ 1202.364450][T25495] FS:  0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[ 1202.373388][T25495] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1202.379988][T25495] CR2: 00007f4a7bc92a10 CR3: 000000001f3f6000 CR4: 00000000003526f0
[ 1202.387983][T25495] Call Trace:
[ 1202.391261][T25495]  <TASK>
[ 1202.394187][T25495]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1202.400274][T25495]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[ 1202.406451][T25495]  invoke_tx_handlers_late+0xb5/0x1830
[ 1202.411905][T25495]  ? sta_info_get+0x2ec/0x300
[ 1202.416602][T25495]  ? invoke_tx_handlers_early+0xa30/0x1cf0
[ 1202.422415][T25495]  ieee80211_tx+0x2d7/0x4b0
[ 1202.426934][T25495]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1202.431961][T25495]  ? ieee80211_set_qos_hdr+0x1d8/0x530
[ 1202.437436][T25495]  ? ieee80211_xmit+0x2e5/0x3c0
[ 1202.442291][T25495]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 1202.448289][T25495]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 1202.454098][T25495]  ? ieee80211_scan_state_send_probe+0x4e6/0xa00
[ 1202.460442][T25495]  ieee80211_scan_state_send_probe+0x5b3/0xa00
[ 1202.466621][T25495]  ieee80211_scan_work+0x488/0x1ab0
[ 1202.471810][T25495]  cfg80211_wiphy_work+0x29e/0x420
[ 1202.476936][T25495]  ? process_scheduled_works+0xa20/0x14e0
[ 1202.482659][T25495]  process_scheduled_works+0xa8e/0x14e0
[ 1202.488231][T25495]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1202.494207][T25495]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1202.499253][T25495]  ? assign_work+0x3cf/0x5d0
[ 1202.503844][T25495]  worker_thread+0xa47/0xfb0
[ 1202.508458][T25495]  kthread+0x388/0x470
[ 1202.512521][T25495]  ? __pfx_worker_thread+0x10/0x10
[ 1202.517649][T25495]  ? __pfx_kthread+0x10/0x10
[ 1202.522234][T25495]  ret_from_fork+0x514/0xb70
[ 1202.526833][T25495]  ? __pfx_ret_from_fork+0x10/0x10
[ 1202.531948][T25495]  ? __switch_to+0xc89/0x1420
[ 1202.536642][T25495]  ? __pfx_kthread+0x10/0x10
[ 1202.541229][T25495]  ret_from_fork_asm+0x1a/0x30
[ 1202.546037][T25495]  </TASK>
[ 1202.549063][T25495] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1202.556323][T25495] CPU: 1 UID: 0 PID: 25495 Comm: kworker/u8:43 Not tainted syzkaller #0 PREEMPT(full) 
[ 1202.565934][T25495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1202.575976][T25495] Workqueue: events_unbound cfg80211_wiphy_work
[ 1202.582206][T25495] Call Trace:
[ 1202.585469][T25495]  <TASK>
[ 1202.588383][T25495]  vpanic+0x56c/0xa60
[ 1202.592348][T25495]  ? __pfx__printk+0x10/0x10
[ 1202.596922][T25495]  ? __pfx_vpanic+0x10/0x10
[ 1202.601410][T25495]  ? is_bpf_text_address+0x292/0x2b0
[ 1202.606684][T25495]  ? is_bpf_text_address+0x26/0x2b0
[ 1202.611890][T25495]  panic+0xc5/0xd0
[ 1202.615599][T25495]  ? __pfx_panic+0x10/0x10
[ 1202.620003][T25495]  ? ret_from_fork_asm+0x1a/0x30
[ 1202.624927][T25495]  __warn+0x315/0x4c0
[ 1202.628894][T25495]  ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760
[ 1202.634690][T25495]  ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760
[ 1202.640482][T25495]  __report_bug+0x331/0x530
[ 1202.644971][T25495]  ? arch_stack_walk+0x11b/0x150
[ 1202.649892][T25495]  ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760
[ 1202.655688][T25495]  ? __pfx___report_bug+0x10/0x10
[ 1202.660713][T25495]  ? stack_depot_save_flags+0x33/0x800
[ 1202.666157][T25495]  report_bug_entry+0x19a/0x290
[ 1202.670993][T25495]  ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760
[ 1202.676782][T25495]  ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760
[ 1202.682575][T25495]  handle_bug+0xce/0x200
[ 1202.686807][T25495]  exc_invalid_op+0x1a/0x50
[ 1202.691297][T25495]  asm_exc_invalid_op+0x1a/0x20
[ 1202.696141][T25495] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760
[ 1202.702545][T25495] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48
[ 1202.722140][T25495] RSP: 0018:ffffc9000dcd74a0 EFLAGS: 00010293
[ 1202.728284][T25495] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005
[ 1202.736238][T25495] RDX: ffff8880822620c4 RSI: ffff888074925998 RDI: ffffffff90430cd0
[ 1202.744194][T25495] RBP: ffffc9000dcd7610 R08: ffff888088ad2abf R09: 1ffff1101115a557
[ 1202.752152][T25495] R10: dffffc0000000000 R11: ffffed101115a558 R12: ffff8880822620c4
[ 1202.760106][T25495] R13: 0000000000000001 R14: ffff888074925998 R15: dffffc0000000000
[ 1202.768067][T25495]  ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760
[ 1202.773877][T25495]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1202.779933][T25495]  ? ieee80211_is_bufferable_mmpdu+0x103/0x200
[ 1202.786092][T25495]  invoke_tx_handlers_late+0xb5/0x1830
[ 1202.791541][T25495]  ? sta_info_get+0x2ec/0x300
[ 1202.796212][T25495]  ? invoke_tx_handlers_early+0xa30/0x1cf0
[ 1202.802010][T25495]  ieee80211_tx+0x2d7/0x4b0
[ 1202.806499][T25495]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1202.811517][T25495]  ? ieee80211_set_qos_hdr+0x1d8/0x530
[ 1202.816963][T25495]  ? ieee80211_xmit+0x2e5/0x3c0
[ 1202.821799][T25495]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[ 1202.827769][T25495]  __ieee80211_tx_skb_tid_band+0x50f/0x680
[ 1202.833563][T25495]  ? ieee80211_scan_state_send_probe+0x4e6/0xa00
[ 1202.839877][T25495]  ieee80211_scan_state_send_probe+0x5b3/0xa00
[ 1202.846025][T25495]  ieee80211_scan_work+0x488/0x1ab0
[ 1202.851214][T25495]  cfg80211_wiphy_work+0x29e/0x420
[ 1202.856312][T25495]  ? process_scheduled_works+0xa20/0x14e0
[ 1202.862024][T25495]  process_scheduled_works+0xa8e/0x14e0
[ 1202.867570][T25495]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1202.873532][T25495]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1202.878544][T25495]  ? assign_work+0x3cf/0x5d0
[ 1202.883122][T25495]  worker_thread+0xa47/0xfb0
[ 1202.887708][T25495]  kthread+0x388/0x470
[ 1202.891763][T25495]  ? __pfx_worker_thread+0x10/0x10
[ 1202.896857][T25495]  ? __pfx_kthread+0x10/0x10
[ 1202.901430][T25495]  ret_from_fork+0x514/0xb70
[ 1202.906006][T25495]  ? __pfx_ret_from_fork+0x10/0x10
[ 1202.911103][T25495]  ? __switch_to+0xc89/0x1420
[ 1202.915768][T25495]  ? __pfx_kthread+0x10/0x10
[ 1202.920341][T25495]  ret_from_fork_asm+0x1a/0x30
[ 1202.925094][T25495]  </TASK>
[ 1202.928295][T25495] Kernel Offset: disabled
[ 1202.932639][T25495] Rebooting in 86400 seconds..