last executing test programs:

2.075987118s ago: executing program 2 (id=4391):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100}}}}}}}, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.840023374s ago: executing program 4 (id=4395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400003005f73b43300"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000300ac1414bb08000200ffffffff"], 0x40}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), &(0x7f00000003c0)=0x14)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000009}, 0x0)

1.839034084s ago: executing program 3 (id=4396):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000538c8000000000000000000054ae91be29229a137a455c3623289365cbbf41a0379be755200a870266fe20fcee7fd35fa18310f9438f52ebabdb738482b6223f5e94efdbbda2da5e8e20636d91b2349b39979f063989ea3f16113ad8500884d9239742e2f5126dc486c57ea7208b29cfa151c5802f654cf9f1bc2666736056e6b2810b91dcda0f841698daf6e74b17ed7693f998f4d3a27eb111c31016386285a7c95d403b569deb628468e9ce3b2bb78e71f0672c08515b6bee5188aea1de25893dd7bda9353572ad8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001000180c20000010000"], 0x48}}, 0x0)

1.838002883s ago: executing program 2 (id=4397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000000)='@&Y$\x00', 0x24240, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x1]}, {0x6, 0x4, 0x2, 0xd}}, 0x80000001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xe})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f00000002c0)="baffa480c25e22985b654339d893712ed2400bdeb832e502f5e2eded801474608c88c45f76a316a4cfd13cb882deeb07e663bdddd62d6335df17d8826627779a78007122f20728792300a484f829ded176739c1cb1a10ae893c552719df42c44bed01c88aeb59fd7370d762c85ba91b89be9", &(0x7f0000000340)=""/120}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000070000000807000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010004a10190e1fdd0b5f00f40600000a1400000002ea00"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)

1.542766051s ago: executing program 2 (id=4401):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newtfilter={0x3dc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3ac, 0x2, [@TCA_FLOWER_ACT={0x3a8, 0x3, [@m_connmark={0x60, 0x4, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}}}]}, {0x13, 0x6, "283035f9a58cfe201e2ce6e66cba94"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x114, 0x13, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x9, 0x6, 0xf82b, 0x7f}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x3, 0x9, 0x9}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xf, 0x20000000, 0x81, 0x8}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd89, 0x2, 0x65}, 0x1, r4}}]}, {0x65, 0x6, "211762a69b7075c8e9d7f847641266333cc43e32b47ab2b1490c766033f3740e3a7db7f3e9a9532c340ecf719d8f2ccab7295770a2b5ef7a8f794413f89c119eb9e52fd10307231fb54a8cc689910465d848faef4ab82cb9eaa469cbfda3d4639e"}, {0xc}, {0xc}}}, @m_ife={0x114, 0x14, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @random="e0309580cac5"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8001}]}, {0xab, 0x6, "f066fc929d45be1556c828fa294ce05b7531e9df9ea6e2f262c2abf89114d5d913c59da544c5ca2edcf0647e7dc37b337a18248a04e636484382a94c5ed105777d2eec3bfa4d260c73401335680c27e5b14b65440533b95b1837563e6b7a053a97693569cb38d599df98307931f420adb3d48f06013eb94165db851f3ce2c55d7298f2a29fb216a71889c1a1e646aaaa1ffc8df783a32cf88c9343a99b3b7b66bab2790f2ec00e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x11c, 0x8, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x3, 0x5, 0x0, 0x1}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x0, 0x800, 0xffff8970}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x400, 0x3, 0x6, 0xec}, 0x4, r3}}]}, {0x90, 0x6, "33776ef082ea12ef2299207395be6290452efa68f270ab602a1dbb3bbd31d65d7934cd91b9900c50ea33bc483840bb18650e200ccb375f3393f419f4e1648b8b0eada2afa27ef1acc3a973c0f9e2959b8a3482fbaf9e6d8590631218209c7d2677d0cfdbc075e980f2a8822aebebb210aba5f96e1f921b86944ec8dec0c763231d5129f9ed1ed5f43146d902"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20000004}, 0x44040)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000a800000004000000000a0078484173f129d228f068738e5f0f74f2d5b54da1c634d1c4f7a86550b2d642f0d14c52f31c3da623ecf48bd2b943a33d093eb46d500056d9c2c4b621e105e473d4991b54140be1fe96df2a73", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x1138}}, 0xc000)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.530794196s ago: executing program 4 (id=4402):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x988f88a430b857da, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180))
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240))

1.506029516s ago: executing program 3 (id=4403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x133}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x621}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x4048080)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000080)={0x1, 0xfffffffffffffffa})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.4606588s ago: executing program 1 (id=4404):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
close(r0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

1.360722052s ago: executing program 1 (id=4406):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@ipv4={""/10, ""/2, @dev}, <r1=>0x0}, &(0x7f0000000080)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000002000000000b7040000080000008500c949b13000ffffffffffffff7f00"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x28, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, r3}, 0x94)

1.289876632s ago: executing program 2 (id=4407):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)

1.287235436s ago: executing program 4 (id=4408):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000180)={0x22, 0x2009, 0x9, 0x9, 0x1, 0x81})
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0)

1.232558168s ago: executing program 1 (id=4409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xff00}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101640, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\r', 0x1}], 0x1}, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$inet_icmp_ICMP_FILTER(r10, 0x1, 0x3c, &(0x7f0000000100), 0x4)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0)

1.124534438s ago: executing program 3 (id=4410):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x6, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000)

1.117702163s ago: executing program 0 (id=4411):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "60ec6972"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

1.116980589s ago: executing program 4 (id=4412):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0) (async)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"})
ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x6e881, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x43)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (async)
sendmmsg(r9, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880) (async)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x117}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FITHAW(r10, 0xc0045878)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40020d0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)

1.009046038s ago: executing program 0 (id=4413):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x40}}, 0x0)

826.269933ms ago: executing program 0 (id=4414):
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0)
r1 = epoll_create(0x9)
ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x8, 0x3, 0x6, 0x6})

825.433078ms ago: executing program 0 (id=4415):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x5ac, @local, 0x9}, 0x1c) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

769.457355ms ago: executing program 4 (id=4416):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0)
pwrite64(r0, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) (async)
pwrite64(r0, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xffffffff, @loopback, 0x2}, @in6={0xa, 0x4e22, 0x2, @local, 0x4}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x5}, @in={0x2, 0x4e22, @private=0xa010100}], 0x74)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630000dd000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x148}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c048) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x148}, 0x1, 0x0, 0x0, 0x8010}, 0x2000c048)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b)
sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4)

700.681719ms ago: executing program 0 (id=4417):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0}) (async)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r1}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0)

683.645038ms ago: executing program 1 (id=4418):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x20000000000001c0, &(0x7f0000000440)=ANY=[@ANYBLOB="28b5721cc45c784040000000000000e402000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfea1}}, 0x800)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
ppoll(&(0x7f0000000300)=[{r6, 0x8102}], 0x1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000200)={r10}, &(0x7f0000000340)=0x8)
recvmsg$unix(r7, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/216, 0xd8}], 0x1}, 0x2)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0)={0xff, 0x1, 0x5, 0xff}, 0x8)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20020}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000240))

664.598056ms ago: executing program 3 (id=4419):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffffe8, 0x24, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x80003}, @enum={0x10}, @enum64={0xf, 0x0, 0x0, 0x13, 0x1, 0x3, [{0xb, 0x2, 0x6}]}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x40, 0x0, 0x0, 0xffffffff}, 0x28)
r1 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32=r3, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
recvmsg(r8, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000c14010029bd7000fbdbdf2508123d000000000034090000001300000800030001000000"], 0x28}}, 0x840)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000000000feff00476f0a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000400"/28], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50)
r10 = socket$netlink(0x10, 0x3, 0x13)
ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000240)='bond_slave_0\x00')
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00031408002abd7000fddbdf25000000"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x5, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xaf80, 0x6c}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd14}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048899}, 0x20000000)

528.06248ms ago: executing program 4 (id=4420):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024c2b00000000f8fffffff808e3bf32577b37d69939ed5114001800000000"], 0x50)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000040)=0x1000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000400)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "45b8ab632c55e11ef507b0e9637481bbdcabbf83377540e837eb80365989538a6b88f008c1d6b5f5fbb966edf5628991370c1b724199ba37e0addc5637e0fe6a"}, 0x48}}, 0x840)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8)
r4 = socket$kcm(0x23, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0xa, 0x922000000003, 0x11)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x7fffdfff}, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
listen(r4, 0x800)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, 0x8)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r8, &(0x7f0000000980), 0xe)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000600)=0xa00, &(0x7f0000000640)}, 0x1c)

425.060609ms ago: executing program 0 (id=4421):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000180))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async)
r5 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$nfc_llcp(r4, &(0x7f0000000e00)={&(0x7f0000000400)={0x27, 0x0, 0x0, 0x2, 0x2, 0x9, "36eb9a55d9c4afb947a89d4ea9671a2def044386977ca27945620c14427a34e468ddf3d9a8013cb7bc8711934d26d5b00b0d82b77904db55f04472e32470b9", 0x3d}, 0x60, 0x0, 0x0, &(0x7f0000000d40)={0x98, 0x0, 0x9, "332e029ac3c436f46085e2d125e02bbf4216ceb9f6c83a7b8bd8a4166d53cb138e9c4970e1bca628060537249caf65f60b679978c75ad58181bbdf532cffff02e3811b5fa9da00d5f82f515d98867212b102fabb431146e89ae16598f16f4e8e30a4f5123fa3a892805db7c8d120630093f02b4f7cb98f1ccec8be34d3a339a4b4a74603ccf7"}, 0x98, 0x404c000}, 0x4000000) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x31, 0x0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x4040) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r9, &(0x7f0000000500)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x400000000010, 0x3, 0x0) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r11, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r10, 0x1, 0x8, 0x6, @remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) (async)
socket(0x10, 0x3, 0x0) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0)

411.41652ms ago: executing program 1 (id=4422):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000000140)=0x53)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000)

311.671642ms ago: executing program 2 (id=4423):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0xb, &(0x7f0000000100)={0x0, 0x0, <r2=>0x0, 0x0}}, 0x49)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r4=>r0, 0x34bf, 0xa, 0x496f})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000140)={"31ee393a5fc6e85fb1df959f867f4a54", 0x0, <r5=>0x0, {0x9, 0xc000}, {0x1, 0xa2d}, 0x9, [0x1, 0x0, 0x73ed, 0x0, 0x400, 0x2d, 0x100000000, 0x5, 0x8001, 0xfffffffffffffff8, 0x4, 0x0, 0x3ff, 0x4, 0x26d, 0x7]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"89ea2359c0ff345480603bd1733f2f14", <r6=>0x0, 0x0, {0x4, 0x3ff}, {0x73, 0xd21}, 0x5, [0x9630, 0xc528, 0x2, 0xa1c, 0xdbf, 0xff, 0x1, 0x1, 0x10000000000, 0x4, 0x7, 0xe, 0x3, 0xdc8b, 0x5, 0x1]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000004c0)={"e9d438f19ffb31dba9fd91908edefa3c", r5, r6, {0x2, 0x8}, {0x8}, 0x9, [0x8, 0x7, 0x4, 0x8, 0x400, 0x7f, 0x21e5, 0x4, 0xf, 0x0, 0x8, 0x8000000000000001, 0x1, 0xf, 0xfff, 0x1000]})
openat$cgroup_ro(r4, &(0x7f00000005c0)='freezer.self_freezing\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0xff2e)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
recvfrom$l2tp(r0, &(0x7f0000000280)=""/113, 0x71, 0x143, 0x0, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000001080)=0x8)
r11 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r11, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r11, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000400)=""/235, 0xeb}}], 0x1, 0x10000, 0x0)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
write(r12, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={r10, 0x808000}, 0x8)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000600)=0x40)
setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r10, 0x81}, 0x8)

306.006302ms ago: executing program 3 (id=4424):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x16c, 0x19, 0x1, 0x0, 0xfffffff9, {{@in6=@private2, @in=@remote, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000000000}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0xb4, 0x12, {{'authenc(sha224-arm64-neon,ecb-serpent-avx)\x00'}, 0x340, 0xa0, "f65a8f28be29da8668f4490611d1d5a0d52239a990ba83a0dc59f313fb56342f6262fb9e12572f2d11723a0b6c33a49a58e4b15b2809a0010b3848793abf731857a1cbdcb5d99ee815b2001fbb5bbd4f8f8db6e4da915c2877480288b486f12895df14875becb481"}}]}, 0x16c}}, 0x0)
r1 = socket$inet(0x2, 0x800, 0xfffffffd)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26)
ioctl$PPPIOCSFLAGS(r6, 0x40047459, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="f097d7b531ac274065464b8d6d4d516c090846ad0f614cca276311caa3f89e6da8a2256c53a64345e787c7b44931eb8fa4e8243e1d903df166e2e2ec3f56cbeaebeeb1bc68cc29480921e5007366c3d2089169a31a1cf1ca9856177fcde784cc4fb7cdc5b6d1623a6de3049277cd751015bdfc142fbbce1756dd1a078a6fa37622ba75a17422b4985e5c13302a28e8f036729cd3d308f767f7d18e67b7ce87e967992bb392f73b63912c2621f2d64b71283307f7cb4c6569570e3ae6609e88750f28a5a9ede406720934c6b3c1102eb7e2f334c342f34f4e3f2d603d65d48dbbe6b9566e4331f1984c7df50348e9e3310a0ac414", 0xf4)

175.125523ms ago: executing program 3 (id=4425):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xd1, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800)
shutdown(r2, 0x1)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8)
ppoll(&(0x7f0000000380)=[{r3, 0x8001}, {r0, 0x202}, {r2, 0x20}, {r2, 0x400}, {r2, 0xc001}], 0x5, &(0x7f00000003c0), &(0x7f0000000400), 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@delqdisc={0x60, 0x25, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xffff}, {0x10, 0x10}, {0xfff2, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff0}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x3, 0x0, 0x2, 0xec2d, 0x6, 0x4}}, {0xc, 0x2, [0x5, 0x1, 0x0, 0x0]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000600)={'pimreg0\x00', @ifru_data=&(0x7f00000005c0)="0fbebac9cdd29add0bfd66c054d2aa0568ee8aff1c95318ae5156defc6b451ab"})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x15)
splice(r6, &(0x7f0000000640)=0x80000001, r7, &(0x7f0000000680)=0x5, 0x7, 0x5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'})
poll(&(0x7f0000000700)=[{0xffffffffffffffff, 0x480}, {r0, 0x708}, {r0, 0x600}, {r7, 0x40}], 0x4, 0x8000)
getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14)
ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000000b40)={{'\x00', 0x2}, {0xfff}, 0x18, 0x0, 0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)="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", 0x1fa, 0x0, &(0x7f0000000a40)={0x2, 0xc1, {0x0, 0xc, 0x5f, "85306881492843e98b63c85b60ed96b37026137c4778721f3909c9c3133ebbd0993e76eb45a49c5ab83b9614067dab542dc88e34681608cc95d2d9dd7adacdeaa2c6f964393240bdb617b2521b1506a3918d613d9fade014297053ea110517", 0x55, "54f2e3a5c585d12de5d6f41ab83d4d5ea378ac644eae3b1205de2a92d84dd4e174eb3e5222899239d880bb61cfc1660cc3c56fdcd7b84ced75c809481a487e47f66968f2cf76c97ec10c04197bc1e666bfd57032e4"}, 0xc, "8060f30f8be426b714ea51f8"}, 0xd9})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000000bc0)={0x665, 0x2, 0x2})
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r2)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x150, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x244, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x44040}, 0x44)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2)
sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x71}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000fc0))
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001040)=@add_del={0x2, &(0x7f0000001000)='virt_wifi0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r7)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000010c0)={@remote, r8}, 0x14)
sendfile(r0, r2, &(0x7f0000001100)=0x4, 0x9)
ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000001140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$sock_netdev_private(r7, 0x89f7, &(0x7f0000001380)="49c71422d304fba78c1d6082ae7b7092cf5841487578c177c961a4fa7958663748f77e54b9a5f0ab02a267fdc0780f0b572fc73b9d21215b50e1a4a607756a5d6434f22e6382392cd40917653a53f209c80d2ada64b141a7cccccc6a76865f141531f59de15ade0dc0e8d7319024beca")
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x13c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x62}, @NFCTH_TUPLE={0xd4, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)

62.497181ms ago: executing program 1 (id=4426):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x4004080, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket(0x5e96f78390cc866b, 0x80813, 0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r9, 0x2799f5eec7981083, 0x70bd28, 0x259fdbbc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000480)={r10, 0x4}, &(0x7f0000000700)=0x8)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000540)={{r6}, "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"})
r11 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x80800)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, 0x0, 0x0)

0s ago: executing program 2 (id=4427):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bridge_slave_1\x00'})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10)
sendto(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

NUD_PERMANENT
[  404.561007][T17119] __nla_validate_parse: 5 callbacks suppressed
[  404.561026][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'.
[  404.606057][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'.
[  404.627515][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'.
[  404.663323][T17124] net_ratelimit: 28 callbacks suppressed
[  404.663969][T17124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.758086][ T6362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.788099][ T6362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  404.813025][ T6362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.833725][ T6362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  404.862572][T17091] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  404.877881][ T9574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  404.902933][ T9574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  404.910802][  T992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  405.016553][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'.
[  405.027849][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'.
[  405.041721][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'.
[  405.050857][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  405.066032][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3123'.
[  405.085999][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'.
[  405.150424][ T6362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.165309][ T6362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.177314][ T6362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.200889][ T6362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  405.229630][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'.
[  405.256239][ T9571] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  405.265918][T17072] lo speed is unknown, defaulting to 1000
[  405.271877][ T9571] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  405.293247][T17146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'.
[  405.345393][T17138] netlink: 'syz.1.3127': attribute type 10 has an invalid length.
[  405.395259][ T6362] bond0: (slave netdevsim1): Releasing backup interface
[  405.425105][ T6362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.439925][ T6362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0
[  405.451161][ T6362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.461575][ T6362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  405.506372][T17144] 8021q: adding VLAN 0 to HW filter on device bond1
[  405.525156][ T9571] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  405.573826][T17146] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.602877][T17146] bond1: (slave bond0): making interface the new active one
[  405.614810][ T4943] Bluetooth: hci1: command tx timeout
[  405.630989][T17146] bond1: (slave bond0): Enslaving as an active interface with an up link
[  405.686369][  T992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  405.711289][T17148] 8021q: adding VLAN 0 to HW filter on device batadv1
[  405.737647][T17148] team0: Port device batadv1 added
[  405.749835][T17138] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.757095][T17138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.764664][T17138] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.771949][T17138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.831214][T17138] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  405.875051][T17150] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  405.918035][T17150] team1: entered promiscuous mode
[  405.924560][T17150] team1: entered allmulticast mode
[  405.932069][T17031] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  405.940854][ T9571] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.967211][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  406.080704][T17172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  406.090682][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  406.142733][ T6362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.311536][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  406.475706][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  406.547948][T17195] netlink: 'syz.1.3139': attribute type 3 has an invalid length.
[  406.564840][T17192] block nbd3: Unsupported socket: should be TCP or UNIX.
[  406.606729][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  406.625658][T17195] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  406.790553][ T9576] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.924402][ T9576] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.950164][T17214] bridge0: port 1(gretap0) entered blocking state
[  406.957509][T17214] bridge0: port 1(gretap0) entered disabled state
[  406.969534][T17214] gretap0: entered allmulticast mode
[  406.991699][T17214] gretap0: entered promiscuous mode
[  407.016831][T17214] bridge0: port 1(gretap0) entered blocking state
[  407.023465][T17214] bridge0: port 1(gretap0) entered listening state
[  407.199168][ T9576] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.302030][ T6367] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  407.470973][ T6362] team0: left allmulticast mode
[  407.487226][ T6362] team_slave_0: left allmulticast mode
[  407.494821][ T6362] team_slave_1: left allmulticast mode
[  407.506341][ T6362] team0: left promiscuous mode
[  407.511313][ T6362] team_slave_0: left promiscuous mode
[  407.520227][ T6362] team_slave_1: left promiscuous mode
[  407.529562][ T6362] bridge0: port 3(team0) entered disabled state
[  407.557260][ T6362] bridge_slave_1: left allmulticast mode
[  407.563405][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.685004][ T6362] pimreg3: left allmulticast mode
[  407.690916][ T4943] Bluetooth: hci1: command tx timeout
[  407.967480][ T6362] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  408.032216][T17261] atomic_op ffff888097c14998 conn xmit_atomic 0000000000000000
[  408.078232][ T6362] erspan0 (unregistering): left promiscuous mode
[  408.223252][ T6362] bond4 (unregistering): (slave geneve3): Releasing active interface
[  408.574393][ T6362] team0: Port device bridge7 removed
[  408.622415][ T6362] bond7 (unregistering): (slave bridge8): Releasing backup interface
[  408.630826][ T6362] bridge8 (unregistering): left promiscuous mode
[  408.824653][ T6362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.837603][ T6362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  408.850788][ T6362] bond0 (unregistering): Released all slaves
[  408.863665][ T6362] bond1 (unregistering): (slave lo): Releasing backup interface
[  408.874854][ T6362] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  408.888435][ T6362] bond1 (unregistering): Released all slaves
[  408.907556][ T6362] bond2 (unregistering): Released all slaves
[  408.923502][ T6362] bond3 (unregistering): Released all slaves
[  408.943514][ T6362] bond4 (unregistering): Released all slaves
[  408.959873][ T6362] bond5 (unregistering): Released all slaves
[  408.975620][ T6362] bond6 (unregistering): Released all slaves
[  408.976565][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  409.007332][ T6362] bond7 (unregistering): Released all slaves
[  409.026006][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  409.197077][ T6362] tipc: Disabling bearer <eth:ipvlan0>
[  409.220395][ T6362] tipc: Left network mode
[  409.419399][ T6362] IPVS: stopping backup sync thread 10718 ...
[  409.444398][T17276] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.520287][T17285] netlink: 'syz.1.3156': attribute type 3 has an invalid length.
[  409.595330][T17285] netlink: 'syz.1.3156': attribute type 3 has an invalid length.
[  409.686801][T17285] __nla_validate_parse: 10 callbacks suppressed
[  409.686823][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3156'.
[  409.707485][T17291] Cannot find set identified by id 0 to match
[  409.754075][T17072] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.765202][T17072] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.772752][ T4943] Bluetooth: hci1: command tx timeout
[  409.788340][T17072] bridge_slave_0: entered allmulticast mode
[  409.807896][T17072] bridge_slave_0: entered promiscuous mode
[  409.858726][T17072] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.894869][T17072] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.915202][T17072] bridge_slave_1: entered allmulticast mode
[  409.930405][T17072] bridge_slave_1: entered promiscuous mode
[  410.211688][T17072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.387275][T17309] ip6gre1: entered promiscuous mode
[  410.416663][T17309] ip6gre1: entered allmulticast mode
[  410.490167][T17072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.687882][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  410.831766][T17295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3159'.
[  410.880974][T17072] team0: Port device team_slave_0 added
[  410.975393][T17072] team0: Port device team_slave_1 added
[  411.044719][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  411.129636][ T6362] hsr_slave_0: left promiscuous mode
[  411.140006][ T6362] hsr_slave_1: left promiscuous mode
[  411.159182][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.181618][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.217392][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.249012][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.280297][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  411.341544][ T6362] veth0_macvtap: left allmulticast mode
[  411.356109][ T6362] veth1_macvtap: left promiscuous mode
[  411.372320][ T6362] veth1_vlan: left promiscuous mode
[  411.382511][ T6362] veth0_vlan: left promiscuous mode
[  411.395288][T17338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'.
[  411.814213][ T6362] team0 (unregistering): Port device team_slave_1 removed
[  411.842211][ T6362] team0 (unregistering): Port device team_slave_0 removed
[  411.857322][ T4943] Bluetooth: hci1: command tx timeout
[  412.001670][T17072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.009052][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.036586][T17072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.070958][T17358] syz_tun: entered allmulticast mode
[  412.092521][T17365] tipc: Enabled bearer <eth:macvlan1>, priority 14
[  412.124664][T17072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.155020][T17072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  412.206278][T17072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.317829][T17367] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3172'.
[  412.350067][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'.
[  412.381966][T17072] hsr_slave_0: entered promiscuous mode
[  412.399949][T17371] netlink: 'syz.2.3173': attribute type 11 has an invalid length.
[  412.403732][T17072] hsr_slave_1: entered promiscuous mode
[  412.424465][T17370] xt_hashlimit: max too large, truncated to 1048576
[  412.439627][T17371] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3173'.
[  412.443355][T17370] xt_hashlimit: overflow, try lower: 3/0
[  412.566930][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  412.968714][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  412.979298][T17392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3180'.
[  413.091568][T17397] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  413.129485][ T6362] IPVS: stop unused estimator thread 0...
[  413.150906][T17392] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  413.195939][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  413.394726][T17072] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.536017][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  413.603122][T17072] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.743596][T17072] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.754349][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3186'.
[  413.878258][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  414.081067][T17438] sock: sock_timestamping_bind_phc: sock not bind to device
[  414.201198][T17072] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.297653][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  414.448545][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  414.605937][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  414.742995][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'.
[  414.774922][T17470] netlink: 'syz.1.3198': attribute type 1 has an invalid length.
[  414.795891][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  414.903544][T17470] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  414.918342][T17470] bond2 (unregistering): Released all slaves
[  415.015884][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  415.048941][T17072] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  415.104149][T17072] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  415.143137][T17072] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  415.189516][T17072] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  415.211445][T17072] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  415.225162][T17072] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  415.251848][T17492] pim6reg: entered allmulticast mode
[  415.269348][T17072] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  415.465529][T17072] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  415.501753][T17492] pim6reg: left allmulticast mode
[  415.805292][T17515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3205'.
[  415.883766][T17072] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.928536][ T9568] net_ratelimit: 1 callbacks suppressed
[  415.928555][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  415.985188][T17072] 8021q: adding VLAN 0 to HW filter on device team0
[  416.000637][T17520] netlink: 'syz.3.3206': attribute type 1 has an invalid length.
[  416.026086][T17520] netlink: 'syz.3.3206': attribute type 3 has an invalid length.
[  416.046466][ T9576] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.053671][ T9576] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.085666][T17520] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3206'.
[  416.118138][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  416.168463][ T9576] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.175681][ T9576] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.300187][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  416.340875][T17531] netlink: 'syz.4.3209': attribute type 7 has an invalid length.
[  416.440554][T17531] netlink: 'syz.4.3209': attribute type 7 has an invalid length.
[  416.456199][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  416.484183][ T9568] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  416.534241][ T9568] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  416.583996][ T9568] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  416.622651][T17547] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002
[  416.630661][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  416.648040][ T9568] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  416.662557][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3214'.
[  416.698761][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'.
[  416.765970][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  416.897123][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  417.035975][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  417.045995][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  417.168028][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  417.356131][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  417.442779][T17584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3222'.
[  417.895374][T17072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.050096][T17072] veth0_vlan: entered promiscuous mode
[  418.099544][T17072] veth1_vlan: entered promiscuous mode
[  418.205515][T17072] veth0_macvtap: entered promiscuous mode
[  418.244278][T17072] veth1_macvtap: entered promiscuous mode
[  418.302066][T17072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.345300][T17072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.399227][ T6362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.440083][ T6362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.459337][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3231'.
[  418.473859][ T6362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.516107][ T6362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.537905][T17620] tipc: Failed to remove unknown binding: 66,1,1/2027386187:2234041137/2234041139
[  418.730922][T17615] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  418.754346][T17615] bond8: (slave lo): Enslaving as an active interface with an up link
[  418.779148][T17621] netlink: 'syz.4.3231': attribute type 7 has an invalid length.
[  418.963065][ T6364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.984408][ T6364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.044212][ T6362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.074828][ T6362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.842361][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3245'.
[  419.904702][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'.
[  419.978287][T17655] syzkaller0: entered promiscuous mode
[  419.995981][T17655] syzkaller0: entered allmulticast mode
[  420.171141][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  420.183409][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  420.196813][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  420.209687][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  420.218288][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  420.684415][T17693] FAULT_INJECTION: forcing a failure.
[  420.684415][T17693] name failslab, interval 1, probability 0, space 0, times 0
[  420.699402][T17693] CPU: 0 UID: 0 PID: 17693 Comm: syz.2.3250 Not tainted syzkaller #0 PREEMPT(full) 
[  420.699428][T17693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  420.699439][T17693] Call Trace:
[  420.699446][T17693]  <TASK>
[  420.699454][T17693]  dump_stack_lvl+0xe8/0x150
[  420.699479][T17693]  should_fail_ex+0x412/0x560
[  420.699506][T17693]  should_failslab+0xa8/0x100
[  420.699536][T17693]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  420.699561][T17693]  ? __alloc_skb+0x186/0x7d0
[  420.699580][T17693]  ? __alloc_skb+0x1d0/0x7d0
[  420.699608][T17693]  ? __local_bh_enable_ip+0xd0/0x130
[  420.699631][T17693]  __alloc_skb+0x1d0/0x7d0
[  420.699650][T17693]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  420.699681][T17693]  netlink_sendmsg+0x5d4/0xb40
[  420.699711][T17693]  ? __pfx_netlink_sendmsg+0x10/0x10
[  420.699736][T17693]  ? aa_sock_msg_perm+0xf1/0x1b0
[  420.699760][T17693]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  420.699787][T17693]  ____sys_sendmsg+0x972/0x9f0
[  420.699810][T17693]  ? __might_fault+0xaf/0x130
[  420.699838][T17693]  ? __pfx_____sys_sendmsg+0x10/0x10
[  420.699872][T17693]  ? import_iovec+0x73/0xa0
[  420.699900][T17693]  ___sys_sendmsg+0x2a5/0x360
[  420.699922][T17693]  ? __lock_acquire+0x6b5/0x2cf0
[  420.699945][T17693]  ? __pfx____sys_sendmsg+0x10/0x10
[  420.699996][T17693]  ? __fget_files+0x2a/0x420
[  420.700017][T17693]  ? __fget_files+0x3a0/0x420
[  420.700046][T17693]  __x64_sys_sendmsg+0x1bd/0x2a0
[  420.700076][T17693]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  420.700107][T17693]  ? __pfx_ksys_write+0x10/0x10
[  420.700139][T17693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.700158][T17693]  do_syscall_64+0x15f/0xf80
[  420.700177][T17693]  ? trace_irq_disable+0x3b/0x140
[  420.700204][T17693]  ? clear_bhb_loop+0x40/0x90
[  420.700226][T17693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.700244][T17693] RIP: 0033:0x7fca8339cdd9
[  420.700261][T17693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.700276][T17693] RSP: 002b:00007fca841bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.700295][T17693] RAX: ffffffffffffffda RBX: 00007fca83615fa0 RCX: 00007fca8339cdd9
[  420.700308][T17693] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000005
[  420.700319][T17693] RBP: 00007fca841bd090 R08: 0000000000000000 R09: 0000000000000000
[  420.700329][T17693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.700338][T17693] R13: 00007fca83616038 R14: 00007fca83615fa0 R15: 00007fffbbc557b8
[  420.700367][T17693]  </TASK>
[  421.140988][T17706] netlink: 808 bytes leftover after parsing attributes in process `syz.2.3251'.
[  422.169882][    C1] bridge0: port 1(gretap0) entered learning state
[  422.327976][   T50] Bluetooth: hci4: command tx timeout
[  422.840363][ T6362] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.871428][ T6362] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.894301][ T6362] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.910776][T17715] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3253'.
[  422.915322][ T6362] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.976887][ T6362] net_ratelimit: 14 callbacks suppressed
[  422.976907][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  423.086812][T17727] netlink: 'syz.2.3256': attribute type 1 has an invalid length.
[  423.123593][ T5632] IPVS: starting estimator thread 0...
[  423.205902][T17727] 8021q: adding VLAN 0 to HW filter on device bond1
[  423.226237][T17730] IPVS: using max 24 ests per chain, 57600 per kthread
[  423.310024][T17732] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.321509][T17732] bond1: (slave bond2): Enslaving as an active interface with a down link
[  423.344734][T17731] bond1: (slave veth0_to_bond): making interface the new active one
[  423.355460][T17731] veth0_to_bond: entered promiscuous mode
[  423.362289][T17731] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  423.497303][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  423.666118][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  423.678278][T17688] lo speed is unknown, defaulting to 1000
[  423.773983][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3263'.
[  423.803392][T17759] netlink: 'syz.1.3263': attribute type 1 has an invalid length.
[  423.871099][T17759] 8021q: adding VLAN 0 to HW filter on device bond2
[  423.886095][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  424.026320][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  424.409478][   T50] Bluetooth: hci4: command tx timeout
[  424.438377][T17785] netlink: 173828 bytes leftover after parsing attributes in process `syz.0.3270'.
[  426.246296][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  426.346387][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'.
[  426.437083][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  426.485930][   T50] Bluetooth: hci4: command tx timeout
[  426.517967][T17688] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.526772][T17688] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.534128][T17688] bridge_slave_0: entered allmulticast mode
[  426.544957][T17688] bridge_slave_0: entered promiscuous mode
[  426.605287][T17823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3280'.
[  426.618861][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3280'.
[  426.638168][T17688] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.645423][T17688] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.654255][T17688] bridge_slave_1: entered allmulticast mode
[  426.663298][T17688] bridge_slave_1: entered promiscuous mode
[  426.858405][T17688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.904687][T17688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.034160][T17688] team0: Port device team_slave_0 added
[  427.048165][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  427.062562][T17688] team0: Port device team_slave_1 added
[  427.125459][T17842] FAULT_INJECTION: forcing a failure.
[  427.125459][T17842] name failslab, interval 1, probability 0, space 0, times 0
[  427.145223][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.0.3288 Not tainted syzkaller #0 PREEMPT(full) 
[  427.145244][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  427.145254][T17842] Call Trace:
[  427.145259][T17842]  <TASK>
[  427.145266][T17842]  dump_stack_lvl+0xe8/0x150
[  427.145288][T17842]  should_fail_ex+0x412/0x560
[  427.145311][T17842]  should_failslab+0xa8/0x100
[  427.145335][T17842]  __kmalloc_cache_noprof+0x88/0x660
[  427.145355][T17842]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  427.145374][T17842]  ? sctp_add_bind_addr+0x8c/0x370
[  427.145396][T17842]  sctp_add_bind_addr+0x8c/0x370
[  427.145423][T17842]  sctp_copy_local_addr_list+0x314/0x4f0
[  427.145444][T17842]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  427.145462][T17842]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  427.145479][T17842]  ? sctp_association_new+0x1894/0x25e0
[  427.145503][T17842]  ? sctp_v6_is_any+0x64/0x80
[  427.145523][T17842]  ? sctp_copy_one_addr+0x93/0x360
[  427.145543][T17842]  sctp_bind_addr_copy+0xb3/0x3c0
[  427.145562][T17842]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  427.145590][T17842]  sctp_connect_new_asoc+0x2ff/0x6b0
[  427.145615][T17842]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  427.145643][T17842]  ? __local_bh_enable_ip+0xd0/0x130
[  427.145658][T17842]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  427.145681][T17842]  ? security_sctp_bind_connect+0x7e/0x2c0
[  427.145700][T17842]  sctp_sendmsg+0x1528/0x2c10
[  427.145769][T17842]  ? __pfx_sctp_sendmsg+0x10/0x10
[  427.145805][T17842]  ? aa_sk_perm+0x6d5/0x900
[  427.145829][T17842]  ? __might_fault+0xaf/0x130
[  427.145863][T17842]  ? __pfx_aa_sk_perm+0x10/0x10
[  427.145893][T17842]  ? sock_rps_record_flow+0x19/0x350
[  427.145922][T17842]  ? __pfx_inet_sendmsg+0x10/0x10
[  427.145952][T17842]  ? inet_sendmsg+0x2f4/0x370
[  427.145982][T17842]  ? __pfx_inet_sendmsg+0x10/0x10
[  427.146013][T17842]  __sys_sendto+0x5de/0x710
[  427.146041][T17842]  ? __pfx___sys_sendto+0x10/0x10
[  427.146064][T17842]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  427.146145][T17842]  ? __fget_files+0x3a0/0x420
[  427.146184][T17842]  ? ksys_write+0x242/0x270
[  427.146219][T17842]  ? __pfx_ksys_write+0x10/0x10
[  427.146256][T17842]  __x64_sys_sendto+0xde/0x100
[  427.146283][T17842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.146307][T17842]  do_syscall_64+0x15f/0xf80
[  427.146331][T17842]  ? trace_irq_disable+0x3b/0x140
[  427.146375][T17842]  ? clear_bhb_loop+0x40/0x90
[  427.146402][T17842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.146429][T17842] RIP: 0033:0x7fdd04d9cdd9
[  427.146449][T17842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.146468][T17842] RSP: 002b:00007fdd05d16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  427.146491][T17842] RAX: ffffffffffffffda RBX: 00007fdd05015fa0 RCX: 00007fdd04d9cdd9
[  427.146506][T17842] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003
[  427.146520][T17842] RBP: 00007fdd05d16090 R08: 0000200000000040 R09: 000000000000001c
[  427.146534][T17842] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002
[  427.146547][T17842] R13: 00007fdd05016038 R14: 00007fdd05015fa0 R15: 00007ffeb267b6a8
[  427.146582][T17842]  </TASK>
[  427.485936][T17688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.496232][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.523217][T17688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.555191][T17688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.563546][T17688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.591590][T17688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.659615][T17688] hsr_slave_0: entered promiscuous mode
[  427.666586][T17688] hsr_slave_1: entered promiscuous mode
[  427.673146][T17688] debugfs: 'hsr0' already exists in 'hsr'
[  427.680149][T17688] Cannot create hsr debugfs directory
[  427.737072][T17848] Cannot find set identified by id 65534 to match
[  427.915293][T17856] tipc: Failed to obtain node identity
[  427.922148][T17856] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  427.996090][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  428.222113][T17688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.253804][T17688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.275693][T17688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  428.335918][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  428.478388][T17871] netlink: 'syz.2.3297': attribute type 10 has an invalid length.
[  428.521823][T17871] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3297'.
[  428.538646][T17688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  428.563738][T17688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.580971][   T50] Bluetooth: hci4: command tx timeout
[  428.594607][T17688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  428.696726][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  428.820142][T17851] wireguard0: entered promiscuous mode
[  428.836101][T17851] wireguard0: entered allmulticast mode
[  429.019688][T17688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.054764][T17688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.086128][T17688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  429.182540][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  429.349835][T17881] syzkaller0: entered promiscuous mode
[  429.361175][T17881] syzkaller0: entered allmulticast mode
[  429.418578][T17688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.456224][T17688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.487656][T17688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  431.781104][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  431.906644][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  432.094568][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3308'.
[  432.150195][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3313'.
[  432.194067][T17930] gretap1: entered promiscuous mode
[  432.201071][T17930] batman_adv: batadv0: Adding interface: gretap1
[  432.208914][T17930] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  432.229601][T17930] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  432.288501][T17920] Cannot find add_set index 3 as target
[  432.298019][T17688] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  432.334617][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  432.362656][T17688] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  432.420753][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  432.455029][T17688] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  432.480546][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  432.522658][T17688] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  432.540798][T17949] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3317'.
[  432.560817][T17688] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.592634][T17945] netlink: 'syz.4.3317': attribute type 1 has an invalid length.
[  432.765388][T17945] 8021q: adding VLAN 0 to HW filter on device bond9
[  432.799735][T17949] bond3: (slave veth0_to_bond): Releasing active interface
[  432.827851][T17949] bond9: (slave veth0_to_bond): making interface the new active one
[  432.838886][T17949] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  432.869596][T17951] macvlan5: entered promiscuous mode
[  432.888250][T17951] macvlan5: entered allmulticast mode
[  432.894716][T17951] bond9: entered promiscuous mode
[  432.901208][T17951] veth0_to_bond: entered promiscuous mode
[  432.908481][T17951] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  432.916687][T17951] bond9: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  432.942776][T17951] bond9: left promiscuous mode
[  432.947891][T17951] veth0_to_bond: left promiscuous mode
[  432.954571][T17967] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3319'.
[  433.046514][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  433.181450][T17972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'.
[  433.234141][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'.
[  435.769612][T17973] lo speed is unknown, defaulting to 1000
[  435.976981][T17988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3325'.
[  436.007292][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  436.017369][T17987] xt_CONNSECMARK: invalid mode: 0
[  436.134662][T17688] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.189117][T17688] 8021q: adding VLAN 0 to HW filter on device team0
[  436.215493][T18002] netlink: 'syz.1.3329': attribute type 9 has an invalid length.
[  436.243328][ T6372] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.250597][ T6372] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.306054][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.313297][ T9570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.375981][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  436.397821][ T6372] veth0_to_bond: left promiscuous mode
[  436.416882][T18008] netlink: 'syz.4.3331': attribute type 1 has an invalid length.
[  436.447219][T18008] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3331'.
[  436.464970][T18008] netlink: 'syz.4.3331': attribute type 1 has an invalid length.
[  436.489722][T18008] netlink: 'syz.4.3331': attribute type 8 has an invalid length.
[  436.514280][T18008] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3331'.
[  436.579214][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  436.749816][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  436.855626][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3337'.
[  436.895990][T18034] netlink: 'syz.2.3337': attribute type 3 has an invalid length.
[  436.896569][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  436.915127][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  436.940331][T18034] netlink: 'syz.2.3337': attribute type 2 has an invalid length.
[  437.042106][T18045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.087494][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  437.189521][T18056] netlink: 'syz.0.3343': attribute type 3 has an invalid length.
[  437.217018][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  437.268503][T18056] netlink: 'syz.0.3343': attribute type 1 has an invalid length.
[  437.351846][T18071] siw: device registration error -23
[  437.481097][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  437.526171][    C1] bridge0: port 1(gretap0) entered forwarding state
[  437.532866][    C1] bridge0: topology change detected, propagating
[  437.676644][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  437.719587][T18086] __nla_validate_parse: 4 callbacks suppressed
[  437.719603][T18086] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3348'.
[  437.953778][T17688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.067262][T17688] veth0_vlan: entered promiscuous mode
[  438.113681][T17688] veth1_vlan: entered promiscuous mode
[  438.205690][T17688] veth0_macvtap: entered promiscuous mode
[  438.241391][T17688] veth1_macvtap: entered promiscuous mode
[  438.259336][T18112] tipc: Started in network mode
[  438.264605][T18112] tipc: Node identity 76156d479871, cluster identity 4711
[  438.273538][T18112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.341779][T18110] syzkaller0: entered promiscuous mode
[  438.347395][T18110] syzkaller0: entered allmulticast mode
[  438.353558][T18110] tipc: Resetting bearer <eth:syzkaller0>
[  438.371248][T18114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3356'.
[  438.393749][T18118] syzkaller0: entered promiscuous mode
[  438.406080][T18118] syzkaller0: entered allmulticast mode
[  438.422681][T18110] tipc: Resetting bearer <eth:syzkaller0>
[  440.161431][T18110] tipc: Disabling bearer <eth:syzkaller0>
[  440.195361][   T43] tipc: Node number set to 3999558983
[  440.219512][T17688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.294155][T17688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.337659][T18125] netlink: 'syz.0.3359': attribute type 21 has an invalid length.
[  440.362055][ T6364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.374962][ T6364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.402971][ T6364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.422512][ T6364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.499449][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'.
[  440.543471][T18125] bond2: option packets_per_slave: invalid value (18446744073709551615)
[  440.558189][T18125] bond2: option packets_per_slave: allowed values 0 - 65535
[  440.572032][T18125] bond2 (unregistering): Released all slaves
[  440.614577][T18140] ipt_REJECT: TCP_RESET invalid for non-tcp
[  440.915208][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'.
[  440.958354][ T9570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.995184][ T9570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.064546][ T9570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.074561][ T9570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.086016][ T6362] net_ratelimit: 8 callbacks suppressed
[  441.086036][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  441.236961][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  441.382542][T18171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3371'.
[  441.398450][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  441.431489][T18174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'.
[  441.528809][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  441.639044][T18183] xfrm0: entered allmulticast mode
[  441.666808][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  441.754542][T18193] netlink: 'syz.2.3375': attribute type 2 has an invalid length.
[  441.815130][T18193] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3375'.
[  441.826444][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  441.964171][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3381'.
[  441.970686][T18198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3380'.
[  441.986863][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  442.086938][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  442.097477][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  442.105420][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  442.116642][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  442.125145][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  442.186734][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  442.348202][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  442.490140][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  442.704705][T18226] netlink: 'syz.2.3387': attribute type 1 has an invalid length.
[  442.727695][ T5628] syz_tun (unregistering): left allmulticast mode
[  442.865402][T18226] 8021q: adding VLAN 0 to HW filter on device bond3
[  442.922715][T18225] 8021q: adding VLAN 0 to HW filter on device bond3
[  442.932718][T18225] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  442.961138][T18225] bond3: (slave vcan1): Error -95 calling set_mac_address
[  442.977817][T18244] netlink: 'syz.1.3391': attribute type 1 has an invalid length.
[  443.087078][T18244] 8021q: adding VLAN 0 to HW filter on device bond4
[  443.242158][ T9569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.260503][ T9569] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.392101][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.410575][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.428003][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.470376][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.552881][ T9569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.575432][ T9569] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.655514][T18204] lo speed is unknown, defaulting to 1000
[  443.655614][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.670173][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.681261][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.696763][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.729221][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.753591][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.777977][T18257] netlink: 'syz.0.3393': attribute type 3 has an invalid length.
[  443.795324][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  443.874376][T18278] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3400'.
[  443.901669][ T9569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.920794][ T9569] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.938258][T18280] netlink: 'syz.1.3398': attribute type 1 has an invalid length.
[  444.035422][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  444.059023][T18280] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  444.060831][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  444.166740][   T50] Bluetooth: hci2: command tx timeout
[  444.207696][ T9569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.222482][ T9569] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.252394][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3393'.
[  444.303153][T18287] sctp: [Deprecated]: syz.3.3403 (pid 18287) Use of int in maxseg socket option.
[  444.303153][T18287] Use struct sctp_assoc_value instead
[  444.620940][ T9576] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.719982][ T9570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.899034][ T9570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.004625][ T9570] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  445.027174][T18328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  445.071802][T18328] xt_hashlimit: size too large, truncated to 1048576
[  445.164152][ T9569] pimreg: left allmulticast mode
[  445.620401][ T9569] tipc: Disabling bearer <eth:xfrm0>
[  445.684950][ T9569] bond1 (unregistering): (slave gretap1): Releasing active interface
[  445.725142][T18347] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[  445.733469][T17030] IPVS: starting estimator thread 0...
[  445.743844][T18347] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000
[  445.826685][T18348] IPVS: using max 38 ests per chain, 91200 per kthread
[  445.981799][ T9569] bond5 (unregistering): (slave bridge3): Releasing backup interface
[  446.163222][ T9569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  446.179135][ T9569] bond0 (unregistering): Released all slaves
[  446.190504][ T9569] bond1 (unregistering): Released all slaves
[  446.208684][ T9569] bond2 (unregistering): Released all slaves
[  446.225447][ T9569] bond3 (unregistering): Released all slaves
[  446.246178][   T50] Bluetooth: hci2: command tx timeout
[  446.251448][ T9569] bond4 (unregistering): Released all slaves
[  446.270473][ T9569] bond5 (unregistering): Released all slaves
[  446.292993][ T9569] bond6 (unregistering): (slave vxcan1): Releasing backup interface
[  446.304223][ T9569] bond6 (unregistering): (slave vxcan3): Releasing backup interface
[  446.314937][ T9569] bond6 (unregistering): Released all slaves
[  446.336970][ T9569] bond7 (unregistering): Released all slaves
[  446.356926][ T9569] bond8 (unregistering): (slave lo): Releasing backup interface
[  446.365056][ T9569] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  446.383002][ T9569] bond8 (unregistering): Released all slaves
[  446.402020][ T9569] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface
[  446.418442][ T9569] bond9 (unregistering): Released all slaves
[  446.439978][T18329] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  446.454776][T18329] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  446.463071][T18329] gretap2: entered promiscuous mode
[  446.468655][T18329] gretap2: entered allmulticast mode
[  446.577186][ T9574] net_ratelimit: 4 callbacks suppressed
[  446.577207][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  446.759791][ T9569] tipc: Disabling bearer <eth:macvlan1>
[  446.815994][ T9569] tipc: Left network mode
[  446.838534][T18355] validate_nla: 3 callbacks suppressed
[  446.838552][T18355] netlink: 'syz.2.3420': attribute type 3 has an invalid length.
[  447.151111][T18204] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.185206][T18204] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.208176][T18204] bridge_slave_0: entered allmulticast mode
[  447.234907][T18204] bridge_slave_0: entered promiscuous mode
[  447.264733][T18204] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.309276][T18204] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.320538][T18204] bridge_slave_1: entered allmulticast mode
[  447.342490][T18204] bridge_slave_1: entered promiscuous mode
[  447.621642][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.718193][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.164022][T18204] team0: Port device team_slave_0 added
[  448.210707][T18204] team0: Port device team_slave_1 added
[  448.284674][T18413] tipc: Started in network mode
[  448.313638][T18413] tipc: Node identity 8a26cfa88589, cluster identity 4711
[  448.326338][   T50] Bluetooth: hci2: command tx timeout
[  448.357635][T18413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.478325][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1
[  448.498591][T18411] syzkaller0: entered promiscuous mode
[  448.511077][T18411] syzkaller0: entered allmulticast mode
[  448.555042][T18413] tipc: Resetting bearer <eth:syzkaller0>
[  448.608825][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.623864][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.672965][T18441] IPv6: NLM_F_CREATE should be specified when creating new route
[  448.692515][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.723888][T18410] tipc: Resetting bearer <eth:syzkaller0>
[  448.750378][T18410] tipc: Disabling bearer <eth:syzkaller0>
[  448.759346][T18443] __nla_validate_parse: 4 callbacks suppressed
[  448.759367][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'.
[  448.785028][T18443] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3433'.
[  448.808686][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.827361][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.855001][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.103688][T18204] hsr_slave_0: entered promiscuous mode
[  449.122635][T18204] hsr_slave_1: entered promiscuous mode
[  449.139452][T18204] debugfs: 'hsr0' already exists in 'hsr'
[  449.155558][T18204] Cannot create hsr debugfs directory
[  449.217353][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'.
[  449.264029][T18466] Bluetooth: MGMT ver 1.23
[  449.466679][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  449.622948][T18474] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3440'.
[  449.835322][ T9569] hsr_slave_1: left promiscuous mode
[  449.881853][ T9569] veth0_macvtap: left promiscuous mode
[  449.912505][ T9569] veth1_vlan: left promiscuous mode
[  449.968714][T18491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3443'.
[  450.080786][ T9569] team0 (unregistering): Port device batadv1 removed
[  450.350932][ T9569] team0 (unregistering): Port device team_slave_1 removed
[  450.373735][ T9569] team0 (unregistering): Port device team_slave_0 removed
[  450.406022][   T50] Bluetooth: hci2: command tx timeout
[  450.603558][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2
[  450.677720][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  450.824048][T18204] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.868595][T18509] netlink: 'syz.0.3448': attribute type 1 has an invalid length.
[  450.889023][T18509] netlink: 'syz.0.3448': attribute type 2 has an invalid length.
[  451.006014][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  451.150275][T18204] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.227981][T18517] sit1: entered promiscuous mode
[  451.233171][T18517] sit1: entered allmulticast mode
[  451.253265][T18506] syzkaller0: entered promiscuous mode
[  451.275674][T18506] syzkaller0: entered allmulticast mode
[  451.326053][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  451.439927][T18204] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.676499][T18204] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.778802][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  451.786182][T18547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3457'.
[  451.811017][ T9569] IPVS: stop unused estimator thread 0...
[  451.906560][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  452.061712][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  452.094091][T18557] netlink: 'syz.0.3458': attribute type 14 has an invalid length.
[  452.153738][T18564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3459'.
[  452.328445][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3459'.
[  452.350341][T18571] netlink: zone id is out of range
[  452.366093][T18571] netlink: zone id is out of range
[  452.366233][ T6362] bond1: (slave bridge5): failed to get link speed/duplex
[  452.371752][T18571] netlink: zone id is out of range
[  452.402809][T18571] netlink: zone id is out of range
[  452.417099][T18571] netlink: zone id is out of range
[  452.428157][T18571] netlink: zone id is out of range
[  452.540372][T18204] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  452.559868][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  452.582338][T18204] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  452.620543][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.654324][T18204] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  452.715533][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.744797][T18204] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  452.753659][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'.
[  452.764923][T18581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3465'.
[  452.781793][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  452.990129][T18204] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.060322][T18204] 8021q: adding VLAN 0 to HW filter on device team0
[  453.108519][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.117189][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.155318][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.162599][ T9570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.209964][T18596] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  453.236263][T18596] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.244035][T18596] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.477492][T18204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.921994][T18637] __nla_validate_parse: 2 callbacks suppressed
[  453.922015][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3474'.
[  453.988128][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'.
[  454.242136][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3477'.
[  454.291836][T18650] netlink: 'syz.1.3478': attribute type 178 has an invalid length.
[  454.438787][T18660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3479'.
[  454.556664][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'.
[  454.635682][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'.
[  455.138548][T18683] netlink: 'syz.0.3483': attribute type 1 has an invalid length.
[  455.229431][T18683] bond2: entered promiscuous mode
[  455.247558][T18683] 8021q: adding VLAN 0 to HW filter on device bond2
[  455.327513][T18687] bond2: (slave bridge1): making interface the new active one
[  455.353336][T18687] bridge1: entered promiscuous mode
[  455.386614][T18687] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  455.402366][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'.
[  455.440285][T18688] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  455.472197][T18688] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  455.558452][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.841089][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'.
[  455.894832][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'.
[  455.964879][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'.
[  456.256433][T18717] netlink: 'syz.0.3488': attribute type 1 has an invalid length.
[  456.764152][T18204] veth0_vlan: entered promiscuous mode
[  456.808946][ T9570] net_ratelimit: 33 callbacks suppressed
[  456.808965][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  456.901811][T18204] veth1_vlan: entered promiscuous mode
[  456.909335][T18742] netlink: 'syz.1.3493': attribute type 1 has an invalid length.
[  456.974433][T18747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.067735][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  457.145405][T18204] veth0_macvtap: entered promiscuous mode
[  457.203533][T18204] veth1_macvtap: entered promiscuous mode
[  457.275529][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.402872][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.466108][ T9568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.489692][ T9568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.529150][ T9570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.555167][ T9570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.729539][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  457.842318][ T9574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.869803][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  457.885913][ T9574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.010289][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  458.042409][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.060920][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.137284][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  458.287139][ T9574] bond1: (slave bridge5): failed to get link speed/duplex
[  458.422746][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  458.769862][T18803] syzkaller0: entered promiscuous mode
[  458.786393][T18803] syzkaller0: entered allmulticast mode
[  458.821065][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  459.306584][T18850] __nla_validate_parse: 6 callbacks suppressed
[  459.306604][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'.
[  459.411982][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3520'.
[  459.850163][T18875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'.
[  461.763889][T18894] IPVS: Scheduler module ip_vs_sip not found
[  461.918543][ T9568] net_ratelimit: 2 callbacks suppressed
[  461.918565][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  461.998384][T18912] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3532'.
[  462.323596][ T6364] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  462.360959][ T6364] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  462.427147][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  462.556095][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  462.675917][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  462.804968][T18954] netlink: 'syz.2.3547': attribute type 3 has an invalid length.
[  462.810348][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  462.834445][T18953] netlink: 'syz.0.3545': attribute type 21 has an invalid length.
[  462.852464][T18953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3545'.
[  462.874919][T18954] netlink: 'syz.2.3547': attribute type 1 has an invalid length.
[  462.913969][T18954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3547'.
[  462.956134][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  463.002903][T18969] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3549'.
[  463.086030][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  463.198407][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  463.326924][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  463.447843][ T9570] bond1: (slave bridge5): failed to get link speed/duplex
[  463.499437][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'.
[  463.941904][T19004] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3560'.
[  464.254940][T19009] syzkaller0: entered promiscuous mode
[  464.284026][T19009] syzkaller0: entered allmulticast mode
[  464.408951][T19021] netlink: 'syz.0.3565': attribute type 58 has an invalid length.
[  464.419049][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  464.453738][T19021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3565'.
[  464.617538][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3568'.
[  465.692411][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  466.719377][T19038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3570'.
[  466.760401][T19038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3570'.
[  466.927713][ T6380] net_ratelimit: 10 callbacks suppressed
[  466.927736][ T6380] bond1: (slave bridge5): failed to get link speed/duplex
[  467.069175][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  467.138140][T19073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3579'.
[  467.162080][T19075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3581'.
[  467.232853][T19075] vlan2: entered allmulticast mode
[  467.241750][T19075] bridge3: entered allmulticast mode
[  467.288264][T19075] bridge3: port 1(bond1) entered blocking state
[  467.296862][T19075] bridge3: port 1(bond1) entered disabled state
[  467.310024][T19075] bond1: entered allmulticast mode
[  467.325595][T19075] bond1: entered promiscuous mode
[  467.385933][ T6380] bond1: (slave bridge5): failed to get link speed/duplex
[  467.546906][ T9577] bond1: (slave bridge5): failed to get link speed/duplex
[  467.665947][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  467.792044][T19114] netlink: 'syz.0.3591': attribute type 11 has an invalid length.
[  467.803472][ T9577] bond1: (slave bridge5): failed to get link speed/duplex
[  467.826684][T19114] netlink: 'syz.0.3591': attribute type 11 has an invalid length.
[  467.869990][T19114] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3591'.
[  467.968975][T19127] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  467.997046][T19127] bond0: (slave lo): Error: Device can not be enslaved while up
[  468.048250][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  468.165516][T19131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3595'.
[  468.179178][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  468.199822][T19134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3597'.
[  468.232546][T19137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3597'.
[  468.279684][T19134] netlink: 'syz.2.3597': attribute type 29 has an invalid length.
[  468.307222][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  468.367612][T19131] xt_bpf: check failed: parse error
[  468.422419][T19131] openvswitch: netlink: IP tunnel dst address not specified
[  468.754461][T19164] netlink: 'syz.2.3605': attribute type 1 has an invalid length.
[  468.796050][T19163] veth0_to_bond: entered promiscuous mode
[  468.845106][T19163] veth0_to_bond: left promiscuous mode
[  468.940099][T19162] syzkaller0: entered promiscuous mode
[  468.982241][T19162] syzkaller0: entered allmulticast mode
[  469.564044][T19200] __nla_validate_parse: 1 callbacks suppressed
[  469.564063][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3612'.
[  469.623847][T19208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3616'.
[  469.638833][T19208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3616'.
[  469.663053][T19210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3614'.
[  469.685156][T19205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.714312][T19204] tipc: Disabling bearer <eth:syzkaller0>
[  470.312538][T19239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  470.471768][ T6380] tipc: Subscription rejected, illegal request
[  470.537477][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3629'.
[  470.556649][T19250] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3629'.
[  470.677118][T19261] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3630'.
[  470.704654][T19262] netlink: 'syz.1.3632': attribute type 1 has an invalid length.
[  470.934316][T19262] 8021q: adding VLAN 0 to HW filter on device bond5
[  470.953824][T19271] netlink: 'syz.3.3634': attribute type 23 has an invalid length.
[  471.003621][T19269] bond5: (slave veth0_to_bond): making interface the new active one
[  471.060667][T19269] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  471.080838][T19274] macvlan3: entered promiscuous mode
[  471.088710][T19274] macvlan3: entered allmulticast mode
[  471.097724][T19274] bond5: (slave macvlan3): Error -98 calling set_mac_address
[  471.338184][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3638'.
[  471.354041][T19291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3638'.
[  471.576728][T19298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  471.585433][T19298] tipc: Started in network mode
[  471.591940][T19298] tipc: Node identity 5acb4054829c, cluster identity 4711
[  471.601431][T19298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.618073][T19298] syzkaller0: entered promiscuous mode
[  471.626788][T19298] syzkaller0: entered allmulticast mode
[  471.645422][T19298] tipc: Resetting bearer <eth:syzkaller0>
[  471.655600][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'.
[  471.689203][T19298] bond0: entered allmulticast mode
[  471.702691][T19298] bond_slave_0: entered allmulticast mode
[  471.717473][T19298] bond_slave_1: entered allmulticast mode
[  471.743985][T19297] tipc: Resetting bearer <eth:syzkaller0>
[  471.856232][T19297] tipc: Disabling bearer <eth:syzkaller0>
[  471.951896][T19308] : entered promiscuous mode
[  472.121470][T19315] syzkaller0: entered promiscuous mode
[  472.128854][T19315] syzkaller0: entered allmulticast mode
[  472.155147][T19328] netlink: 'syz.0.3650': attribute type 4 has an invalid length.
[  472.168337][T19325] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  472.176002][T19325] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  474.266043][ T6380] net_ratelimit: 21 callbacks suppressed
[  474.266066][ T6380] bond1: (slave bridge5): failed to get link speed/duplex
[  474.406428][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  474.525939][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  474.636437][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  474.766533][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  474.875908][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  474.986346][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  475.017134][T19318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  475.096227][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  475.226531][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  475.259083][T19371] __nla_validate_parse: 6 callbacks suppressed
[  475.259102][T19371] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3660'.
[  475.320761][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'.
[  475.337868][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'.
[  475.390745][T19383] netlink: 'syz.0.3664': attribute type 1 has an invalid length.
[  475.417171][T19382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3665'.
[  475.426836][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  475.599955][T19392] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3669'.
[  475.623589][T19395] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  475.623589][T19395] Please contact the netfilter-devel mailing list or update your nftables rules.
[  475.732551][T19395] bridge4: entered promiscuous mode
[  475.748197][T19395] bridge4: entered allmulticast mode
[  476.304409][ T6367] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  476.337549][ T6367] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  476.375094][ T6367] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  476.415526][ T6367] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  476.695029][T19460] netlink: 'syz.4.3683': attribute type 1 has an invalid length.
[  477.101652][T19485] syzkaller0: entered promiscuous mode
[  477.108185][T19485] syzkaller0: entered allmulticast mode
[  477.320724][T19495] xt_recent: Unsupported userspace flags (000000b1)
[  477.332482][T19495] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3691'.
[  477.505431][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'.
[  477.665472][T19514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3698'.
[  477.679018][T19512] netlink: 'syz.2.3697': attribute type 1 has an invalid length.
[  477.877257][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'.
[  477.898677][T19520] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.929544][T19520] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.955610][T19525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3700'.
[  478.282782][T19538] IPv6: NLM_F_CREATE should be specified when creating new route
[  478.564039][T19543] lo speed is unknown, defaulting to 1000
[  478.768086][T19558] ip6t_rpfilter: unknown options
[  479.074842][T19561] ip6erspan0: entered allmulticast mode
[  479.132316][T19578] xt_hashlimit: max too large, truncated to 1048576
[  479.189229][T19583] xt_ipcomp: unknown flags 1D
[  479.397909][ T6372] net_ratelimit: 25 callbacks suppressed
[  479.397930][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  479.585982][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  479.710528][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  479.825620][T19612] netlink: 'syz.3.3725': attribute type 1 has an invalid length.
[  479.844784][T19612] netlink: 'syz.3.3725': attribute type 1 has an invalid length.
[  479.858033][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  479.987100][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  480.108272][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  480.236983][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  480.388191][T19626] __nla_validate_parse: 7 callbacks suppressed
[  480.388213][T19626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3730'.
[  480.436086][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  480.566190][ T6371] bond1: (slave bridge5): failed to get link speed/duplex
[  480.671022][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'.
[  480.686964][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  480.748166][T19636] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  481.026801][T19658] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  481.213268][T19666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'.
[  481.630077][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'.
[  481.665585][T19677] syzkaller0: entered promiscuous mode
[  481.673846][T19677] syzkaller0: entered allmulticast mode
[  481.690616][T19691] netlink: 'syz.3.3749': attribute type 4 has an invalid length.
[  481.732706][T19697] Cannot find set identified by id 0 to match
[  482.083865][T19718] netlink: 'syz.2.3760': attribute type 1 has an invalid length.
[  482.111489][T19718] netlink: 'syz.2.3760': attribute type 3 has an invalid length.
[  482.123157][T19718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3760'.
[  483.953230][T19710] kthread_run failed with err -4
[  484.052831][ T9568] gretap0: left allmulticast mode
[  484.064678][ T9568] gretap0: left promiscuous mode
[  484.084654][ T9568] bridge0: port 1(gretap0) entered disabled state
[  484.692296][ T9568] bond2 (unregistering): (slave bridge4): Releasing backup interface
[  484.743379][ T9568] team0: Port device bridge0 removed
[  484.941672][ T9568] bond1 (unregistering): Released all slaves
[  484.961396][ T9568] bond2 (unregistering): Released all slaves
[  484.987765][ T9568] bond0 (unregistering): Released all slaves
[  485.014669][ T9568] bond3 (unregistering): Released all slaves
[  485.032451][ T9568] bond4 (unregistering): Released all slaves
[  485.050060][ T9568] bond5 (unregistering): Released all slaves
[  485.118084][ T6367] net_ratelimit: 6 callbacks suppressed
[  485.118105][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  485.448725][ T9568] tipc: Left network mode
[  485.475598][T19751] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3767'.
[  485.555963][ T6364] bond1: (slave bridge5): failed to get link speed/duplex
[  485.790527][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  485.798260][T19771] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3772'.
[  485.997840][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  485.997873][T19779] netlink: 'syz.4.3776': attribute type 1 has an invalid length.
[  486.042948][T19779] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  486.056343][T19781] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3775'.
[  486.119131][T19781] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3775'.
[  486.147775][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  486.166020][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  486.266335][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  486.373378][T19791] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  486.394333][T19787] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  486.451441][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'.
[  486.512874][T19790] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3779'.
[  486.571225][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  486.603767][T19790] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3779'.
[  486.632868][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'.
[  486.875836][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  486.909181][ T9568] hsr_slave_0: left promiscuous mode
[  486.923360][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.980886][ T9568] veth1_macvtap: left promiscuous mode
[  486.989007][ T9568] veth0_macvtap: left promiscuous mode
[  487.042024][T19816] sctp: [Deprecated]: syz.2.3787 (pid 19816) Use of struct sctp_assoc_value in delayed_ack socket option.
[  487.042024][T19816] Use struct sctp_sack_info instead
[  487.186524][T19823] openvswitch: netlink: Message has 4 unknown bytes.
[  487.217191][T19824] openvswitch: netlink: Message has 4 unknown bytes.
[  487.290335][T19828] ip6t_srh: unknown srh match flags  5F28
[  487.298612][T19828] rdma_op ffff88807e2ee1f0 conn xmit_rdma 0000000000000000
[  487.443387][ T9568] team0 (unregistering): Port device team_slave_1 removed
[  487.489087][ T9568] team0 (unregistering): Port device team_slave_0 removed
[  487.731784][ T9568] team0 (unregistering): Port device dummy0 removed
[  487.790832][T19817] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  487.811531][T19817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  487.853125][T19817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  487.964314][T19842] netlink: 'syz.2.3795': attribute type 3 has an invalid length.
[  487.994558][T19842] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3795'.
[  488.250572][ T9568] IPVS: stop unused estimator thread 0...
[  488.254143][T19856] syzkaller0: entered promiscuous mode
[  488.271594][T19856] syzkaller0: entered allmulticast mode
[  488.343151][T19859] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3799'.
[  488.867463][T19901] netlink: 'syz.1.3806': attribute type 1 has an invalid length.
[  488.934329][T19904] netlink: 'syz.1.3808': attribute type 1 has an invalid length.
[  488.964191][T19904] 8021q: adding VLAN 0 to HW filter on device bond6
[  489.117201][T19913] bond0: Device is already in use.
[  490.167007][ T9568] net_ratelimit: 20 callbacks suppressed
[  490.167030][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  490.296295][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  490.417744][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  490.535879][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  490.650039][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  490.766297][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  490.877034][ T6367] bond1: (slave bridge5): failed to get link speed/duplex
[  491.007629][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  491.116818][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  491.227058][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  491.298578][T19859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.531162][T19954] __nla_validate_parse: 2 callbacks suppressed
[  491.531180][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3815'.
[  491.578131][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3815'.
[  491.612676][T19953] bond3: entered promiscuous mode
[  491.623805][T19953] bond3: entered allmulticast mode
[  491.643494][T19953] 8021q: adding VLAN 0 to HW filter on device bond3
[  491.714722][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3814'.
[  491.724240][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3814'.
[  492.014579][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'.
[  492.105112][T19976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  492.222906][T19976] syzkaller0: entered promiscuous mode
[  492.237956][T19976] syzkaller0: entered allmulticast mode
[  492.257017][T19976] tipc: Resetting bearer <eth:syzkaller0>
[  492.375172][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3824'.
[  492.392901][T19975] tipc: Resetting bearer <eth:syzkaller0>
[  492.523211][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'.
[  492.834136][T20003] ipt_ECN: cannot use operation on non-tcp rule
[  494.913618][T19975] tipc: Disabling bearer <eth:syzkaller0>
[  494.950545][ T5751] tipc: Node number set to 3629596756
[  495.237078][ T9577] net_ratelimit: 10 callbacks suppressed
[  495.237099][ T9577] bond1: (slave bridge5): failed to get link speed/duplex
[  495.366694][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  495.515878][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  495.639917][T20048] netlink: 'syz.3.3843': attribute type 29 has an invalid length.
[  495.686527][ T9577] bond1: (slave bridge5): failed to get link speed/duplex
[  495.762900][T20061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3844'.
[  495.807259][ T9569] bond1: (slave bridge5): failed to get link speed/duplex
[  495.882117][T20065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3848'.
[  495.935965][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  495.998805][T20064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.056552][ T9568] bond1: (slave bridge5): failed to get link speed/duplex
[  496.161177][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'.
[  496.177115][ T9577] bond1: (slave bridge5): failed to get link speed/duplex
[  496.276659][T20092] vlan3: entered allmulticast mode
[  496.289982][T20092] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  496.328421][ T9579] bond1: (slave bridge5): failed to get link speed/duplex
[  496.552237][T20105] vlan1: entered allmulticast mode
[  496.576776][T20105] veth0_vlan: entered allmulticast mode
[  496.741553][T20117] __nla_validate_parse: 1 callbacks suppressed
[  496.741573][T20117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3864'.
[  496.802855][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'.
[  496.857230][T20121] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3865'.
[  496.895383][T20115] netlink: 'syz.4.3865': attribute type 2 has an invalid length.
[  497.128748][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3869'.
[  497.353287][T20140] batadv_slave_1: entered promiscuous mode
[  497.507169][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3873'.
[  497.526709][T20143] gtp0: entered promiscuous mode
[  497.535112][T20143] gtp0: entered allmulticast mode
[  497.562325][T20137] batadv_slave_1: left promiscuous mode
[  497.600705][T20145] ipvlan2: entered promiscuous mode
[  498.128173][T20162] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3880'.
[  498.145387][T20168] netlink: 'syz.0.3881': attribute type 1 has an invalid length.
[  498.185045][T20166] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3880'.
[  498.204437][T20168] netlink: 476 bytes leftover after parsing attributes in process `syz.0.3881'.
[  498.230278][T20168] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3881'.
[  498.699309][T20193] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  499.225552][T20224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3898'.
[  499.350376][T20228] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  499.372911][T20228] bond2 (unregistering): Released all slaves
[  499.772981][T20253] netlink: 'syz.3.3901': attribute type 2 has an invalid length.
[  500.175326][T20259] netlink: 'syz.2.3902': attribute type 28 has an invalid length.
[  500.269307][ T9564] net_ratelimit: 30 callbacks suppressed
[  500.269328][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  500.293591][T20284] netlink: 'syz.4.3906': attribute type 3 has an invalid length.
[  500.322855][T20284] tipc: Started in network mode
[  500.338631][T20284] tipc: Node identity 3282b5b560ee, cluster identity 4711
[  500.387616][T20284] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  500.411796][T20287] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  500.438013][T20291] netlink: 'syz.3.3908': attribute type 1 has an invalid length.
[  500.446775][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  500.520848][T20291] bond2: entered promiscuous mode
[  500.527883][T20291] 8021q: adding VLAN 0 to HW filter on device bond2
[  500.590029][T20299] bond2: (slave bridge5): making interface the new active one
[  500.600208][T20299] bridge5: entered promiscuous mode
[  500.608619][T20299] bond2: (slave bridge5): Enslaving as an active interface with an up link
[  500.757403][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  500.890025][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  501.000950][T20323] team_slave_0: entered promiscuous mode
[  501.039634][T20323] team_slave_0: left promiscuous mode
[  501.151211][T20328] team_slave_0: entered promiscuous mode
[  501.163342][T20328] team_slave_0: left promiscuous mode
[  501.247504][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  501.376452][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  501.506329][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  501.553420][ T5632] tipc: Node number set to 1382856117
[  501.655891][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  502.198121][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  502.251156][T20385] __nla_validate_parse: 10 callbacks suppressed
[  502.251176][T20385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3928'.
[  502.344222][T20389] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3929'.
[  502.353554][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  502.675504][T20405] netlink: 'syz.3.3936': attribute type 10 has an invalid length.
[  502.736561][T20411] netlink: 'syz.0.3937': attribute type 32 has an invalid length.
[  502.768039][T20412] netlink: 'syz.0.3937': attribute type 39 has an invalid length.
[  502.794719][T20405] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  502.807602][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3937'.
[  502.852182][T20405] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  502.951600][T20411] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  503.224851][T20436] ipvlan2: entered promiscuous mode
[  503.391250][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'.
[  503.528185][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3944'.
[  503.609568][ T4943] Bluetooth: hci5: command 0x0406 tx timeout
[  503.670325][T20448] netlink: 'syz.1.3945': attribute type 1 has an invalid length.
[  503.688484][T20448] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3945'.
[  503.885461][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3947'.
[  503.962437][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3947'.
[  503.990939][T20464] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3947'.
[  504.258585][T20480] sctp: [Deprecated]: syz.4.3952 (pid 20480) Use of struct sctp_assoc_value in delayed_ack socket option.
[  504.258585][T20480] Use struct sctp_sack_info instead
[  504.399921][T20485] netlink: 'syz.0.3954': attribute type 1 has an invalid length.
[  504.420578][T20483] netlink: 'syz.2.3955': attribute type 11 has an invalid length.
[  504.430864][T20483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3955'.
[  504.514055][T20489] bond4: (slave gretap3): making interface the new active one
[  504.523396][T20489] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  504.533569][T20490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.597670][T20490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  505.113577][T20529] vcan1: entered promiscuous mode
[  505.142881][T20529] vcan1: entered allmulticast mode
[  505.276235][ T9564] net_ratelimit: 20 callbacks suppressed
[  505.278029][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  505.456597][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  505.478589][T20537] syzkaller1: entered promiscuous mode
[  505.496249][T20537] syzkaller1: entered allmulticast mode
[  505.585898][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  505.696480][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  505.806248][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  505.917694][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  505.936478][   T50] Bluetooth: hci2: command tx timeout
[  506.035913][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  506.155922][ T1177] bond1: (slave bridge5): failed to get link speed/duplex
[  506.265897][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  506.376372][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  507.754466][T20503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  508.057467][T20572] __nla_validate_parse: 5 callbacks suppressed
[  508.057487][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'.
[  508.112884][T20572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3971'.
[  508.136885][T20572] tc_dump_action: action bad kind
[  508.158560][T20583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3971'.
[  508.294089][T20588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3977'.
[  508.318285][T20588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3977'.
[  508.774925][T20607] ipt_REJECT: TCP_RESET invalid for non-tcp
[  509.709573][T20639] bridge_slave_0 (unregistering): left allmulticast mode
[  509.725916][T20639] bridge_slave_0 (unregistering): left promiscuous mode
[  509.734243][T20639] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.336864][   T13] net_ratelimit: 35 callbacks suppressed
[  510.336887][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  510.455914][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  510.566822][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  510.686114][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  510.795868][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  510.905944][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  511.016121][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  511.126994][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  511.236195][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  511.345860][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  511.648072][T20606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  512.234858][T20681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4004'.
[  513.846066][ T4943] Bluetooth: hci0: command 0x0406 tx timeout
[  515.446151][ T9567] net_ratelimit: 35 callbacks suppressed
[  515.446173][ T9567] bond1: (slave bridge5): failed to get link speed/duplex
[  515.465100][T20694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.568365][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  515.642361][T20720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  515.649667][T20720] IPv6: NLM_F_CREATE should be set when creating new route
[  515.657016][T20720] IPv6: NLM_F_CREATE should be set when creating new route
[  515.664290][T20720] IPv6: NLM_F_CREATE should be set when creating new route
[  515.698600][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  515.709988][T20720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  515.773772][ T6359] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  515.782728][ T6359] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  515.803492][ T6359] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  515.833755][ T6359] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  515.872556][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  516.018372][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  516.135931][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  516.147398][T20749] IPv6: addrconf: prefix option has invalid lifetime
[  516.194004][T20749] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4023'.
[  516.221766][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4024'.
[  516.231492][T20755] netlink: 'syz.2.4024': attribute type 8 has an invalid length.
[  516.276133][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  516.386532][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  516.495870][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  516.924094][T20778] netlink: 'syz.3.4027': attribute type 1 has an invalid length.
[  516.982675][T20778] 8021q: adding VLAN 0 to HW filter on device bond3
[  517.011701][T20778] bond3: (slave veth0_to_bond): making interface the new active one
[  517.022492][T20778] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  517.057428][T20778] bond3: entered promiscuous mode
[  517.062874][T20778] veth0_to_bond: entered promiscuous mode
[  517.070917][T20778] bond3: entered allmulticast mode
[  517.076797][T20778] veth0_to_bond: entered allmulticast mode
[  517.271256][T20782] netlink: 'syz.3.4028': attribute type 10 has an invalid length.
[  517.283923][T20782] team0: Device veth1_virt_wifi failed to register rx_handler
[  519.069335][T20746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  519.223864][T20784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4029'.
[  519.423639][T20796] bond0: entered promiscuous mode
[  519.430559][T20796] bond_slave_0: entered promiscuous mode
[  519.445391][T20796] bond_slave_1: entered promiscuous mode
[  519.506981][T20796] batadv0: entered promiscuous mode
[  519.530813][T20796] 8021q: adding VLAN 0 to HW filter on device hsr1
[  519.543041][T20796] bond0: left promiscuous mode
[  519.549069][T20796] bond_slave_0: left promiscuous mode
[  519.554818][T20796] bond_slave_1: left promiscuous mode
[  519.563474][T20796] batadv0: left promiscuous mode
[  519.580187][T20805] netlink: 'syz.2.4035': attribute type 4 has an invalid length.
[  519.743406][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  519.764710][T20813] netlink: 'syz.4.4036': attribute type 23 has an invalid length.
[  519.777063][T20816] netlink: 'syz.3.4039': attribute type 4 has an invalid length.
[  519.947597][T20829] sctp: [Deprecated]: syz.4.4043 (pid 20829) Use of int in max_burst socket option deprecated.
[  519.947597][T20829] Use struct sctp_assoc_value instead
[  520.242159][T20844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4047'.
[  520.343199][T20848] sctp: [Deprecated]: syz.3.4048 (pid 20848) Use of int in max_burst socket option.
[  520.343199][T20848] Use struct sctp_assoc_value instead
[  520.415645][T20850] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4049'.
[  520.496590][   T13] net_ratelimit: 33 callbacks suppressed
[  520.496613][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  520.615902][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  520.727279][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  520.836360][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  520.945857][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  521.065868][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  521.186098][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  521.295865][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  521.406432][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  521.515995][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  522.878823][T20820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  523.109314][T20862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4053'.
[  523.142841][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4054'.
[  523.175370][T20863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4052'.
[  523.273919][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'.
[  523.319061][T20873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4057'.
[  523.337673][T20866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4052'.
[  523.388764][T20866] nbd: device at index 64 is going down
[  523.634821][T20892] netlink: 'syz.3.4060': attribute type 3 has an invalid length.
[  523.685425][T18150] udevd[18150]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  523.798299][T20897] syzkaller0: entered promiscuous mode
[  523.803865][T20897] syzkaller0: entered allmulticast mode
[  524.449685][T20936] syzkaller1: entered promiscuous mode
[  524.456113][T20936] syzkaller1: entered allmulticast mode
[  524.472981][T20936] gretap1: entered promiscuous mode
[  524.480830][T20936] batman_adv: batadv0: Adding interface: gretap1
[  524.494709][T20936] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.535810][T20936] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  525.597464][   T48] net_ratelimit: 34 callbacks suppressed
[  525.597488][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  525.715851][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  525.826077][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  525.935851][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  526.055918][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  526.165954][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  526.276122][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  526.385877][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  526.496014][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  526.616293][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  526.859255][T20904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  527.126495][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  527.174278][T20956] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4077'.
[  527.320600][T20959] netlink: 'syz.3.4075': attribute type 39 has an invalid length.
[  527.445365][T20968] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4080'.
[  527.507197][T20973] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4083'.
[  527.743651][T20978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4084'.
[  527.928480][T21001] netlink: 'syz.3.4089': attribute type 10 has an invalid length.
[  527.938829][T21001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.947028][T21001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.994245][T21001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.003805][T21001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  529.205932][ T4943] Bluetooth: hci1: command 0x0406 tx timeout
[  530.682248][T20982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  530.692606][ T9560] net_ratelimit: 33 callbacks suppressed
[  530.692627][ T9560] bond1: (slave bridge5): failed to get link speed/duplex
[  530.837877][ T9560] bond1: (slave bridge5): failed to get link speed/duplex
[  530.930435][T21011] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4093'.
[  530.976444][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  531.106304][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  531.237592][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  531.366443][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  531.409086][T21038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4103'.
[  531.438268][T21038] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  531.497722][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  531.616792][   T48] bond1: (slave bridge5): failed to get link speed/duplex
[  531.776035][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  531.886701][ T9564] bond1: (slave bridge5): failed to get link speed/duplex
[  534.357990][T21039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  534.585518][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.623364][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.673004][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.891914][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.907312][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.928961][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.939099][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  534.950496][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4114'.
[  535.344460][T21131] raw_sendmsg: syz.4.4124 forgot to set AF_INET. Fix it!
[  535.499947][T21137] syzkaller1: entered promiscuous mode
[  535.518377][T21137] syzkaller1: entered allmulticast mode
[  535.567897][T21135] netlink: 'syz.2.4127': attribute type 10 has an invalid length.
[  535.597568][T21135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.611426][T21143] netlink: 'syz.3.4129': attribute type 16 has an invalid length.
[  535.632238][T21135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.653337][T21135] batman_adv: batadv0: Removing interface: gretap1
[  535.745901][   T13] net_ratelimit: 32 callbacks suppressed
[  535.745922][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  535.947148][T21156] __nla_validate_parse: 29 callbacks suppressed
[  535.947170][T21156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4131'.
[  535.984703][T21152] vlan2: entered allmulticast mode
[  535.998345][T21152] bond0: entered allmulticast mode
[  536.008372][T21152] bond_slave_0: entered allmulticast mode
[  536.014478][T21152] bond_slave_1: entered allmulticast mode
[  536.020962][T21152] bridge0: entered allmulticast mode
[  536.055388][T21156] bond1: (slave bond0): Releasing active interface
[  536.080298][T21156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.098905][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4132'.
[  536.113127][T21156] bond_slave_0: left allmulticast mode
[  536.124048][T21156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.135002][T21156] bond_slave_1: left allmulticast mode
[  536.148151][T21156] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  536.158252][T21156] bridge0: left allmulticast mode
[  536.164517][T21166] sctp: [Deprecated]: syz.3.4132 (pid 21166) Use of int in maxseg socket option.
[  536.164517][T21166] Use struct sctp_assoc_value instead
[  536.181451][T21156] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.188916][T21156] bridge0: port 1(
0¾x9ÿ) entered disabled state
[  536.203174][T21156] bond0 (unregistering): Released all slaves
[  536.304642][T21161] vlan2: entered promiscuous mode
[  536.330413][T21161] bridge0: entered promiscuous mode
[  536.394236][ T6361] bond5: (slave veth0_to_bond): link status definitely down, disabling slave
[  536.444989][ T6361] bond5: now running without any active interface!
[  536.484163][T21172] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4135'.
[  536.499131][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  536.627153][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  536.760642][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  536.820800][T21180] pimreg: entered allmulticast mode
[  536.896213][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  536.928468][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4139'.
[  537.130235][ T6359] bond1: (slave bridge5): failed to get link speed/duplex
[  537.256176][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  537.272615][T21199] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4142'.
[  537.287535][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'.
[  537.297057][T21200] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4142'.
[  537.306590][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4142'.
[  537.339920][T21198] bridge5: entered promiscuous mode
[  537.352290][T21198] bridge5: entered allmulticast mode
[  537.376486][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  537.471540][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4146'.
[  537.486940][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  537.513766][T21207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4144'.
[  537.545789][T21175] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  537.587185][T21207] gtp0: entered promiscuous mode
[  537.621661][T21207] gtp0: entered allmulticast mode
[  537.635902][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  538.588035][T21275] tipc: Enabling <eth:lo> not permitted
[  538.605523][T21275] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  538.726843][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  538.838320][T21286] netlink: 'syz.0.4168': attribute type 1 has an invalid length.
[  538.916716][T21294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.934069][T21293] netlink: 'syz.3.4172': attribute type 1 has an invalid length.
[  538.948454][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.974346][T21294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.994828][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.144677][T21293] 8021q: adding VLAN 0 to HW filter on device bond4
[  539.267387][T21295] bond4: (slave gretap1): making interface the new active one
[  539.304955][T21295] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  539.594789][T21323] netlink: 'syz.4.4176': attribute type 3 has an invalid length.
[  539.627535][T21323] netlink: 'syz.4.4176': attribute type 1 has an invalid length.
[  540.471361][T21360] syzkaller0: entered promiscuous mode
[  540.490507][T21360] syzkaller0: entered allmulticast mode
[  540.638758][T21360] pimreg3: entered allmulticast mode
[  540.805321][ T6361] net_ratelimit: 21 callbacks suppressed
[  540.805343][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  540.966821][ T6361] bond1: (slave bridge5): failed to get link speed/duplex
[  541.040572][T21381] __nla_validate_parse: 7 callbacks suppressed
[  541.040590][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'.
[  541.086090][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  541.096560][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'.
[  541.115323][T21384] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.138625][T21384] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.179871][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.207070][ T9563] bond1: (slave bridge5): failed to get link speed/duplex
[  541.238613][T21384] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.284541][T21384] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.324554][T21384] netlink: 'syz.3.4192': attribute type 5 has an invalid length.
[  541.336195][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  541.354175][T21384] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4192'.
[  541.598528][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  541.612681][T21402] netlink: 'syz.3.4195': attribute type 1 has an invalid length.
[  541.634209][T21402] netlink: 'syz.3.4195': attribute type 83 has an invalid length.
[  541.668181][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'.
[  541.738469][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  541.866662][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  541.996289][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  542.128253][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  542.164949][T21416] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.4201'.
[  542.280939][T21420] ip6erspan0: entered promiscuous mode
[  542.903947][T21443] team0: Port device gretap1 added
[  543.180319][T21460] netlink: 'syz.4.4211': attribute type 61 has an invalid length.
[  544.363354][T21526] bridge_slave_1: left allmulticast mode
[  544.399739][T21526] bridge_slave_1: left promiscuous mode
[  544.425551][T21526] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.464988][T21526] ¾x9ÿ: left allmulticast mode
[  544.470666][T21526] ¾x9ÿ: left promiscuous mode
[  544.476209][T21526] bridge0: port 1(
0¾x9ÿ) entered disabled state
[  544.798921][T21543] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004
[  544.831074][T21545] syzkaller0: entered promiscuous mode
[  544.859080][T21545] syzkaller0: entered allmulticast mode
[  545.906260][ T9571] net_ratelimit: 30 callbacks suppressed
[  545.906281][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  546.056141][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  546.132686][T21606] syzkaller1: entered promiscuous mode
[  546.152328][T21606] syzkaller1: entered allmulticast mode
[  546.241523][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  546.274372][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  546.388916][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  546.399151][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  546.414608][T21389] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  546.566555][T21634] netlink: 'syz.4.4254': attribute type 1 has an invalid length.
[  546.580090][T21633] __nla_validate_parse: 16 callbacks suppressed
[  546.580111][T21633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4255'.
[  546.709432][T21634] 8021q: adding VLAN 0 to HW filter on device bond2
[  546.746778][T21633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4255'.
[  546.790980][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'.
[  546.800285][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  546.936833][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  546.964358][T21661] can: request_module (can-proto-5) failed.
[  547.055972][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  547.073157][T21670] xt_hashlimit: size too large, truncated to 1048576
[  547.175918][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  547.290468][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  547.415939][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  547.527274][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  547.922983][T21691] xt_cgroup: path and classid specified
[  549.712043][T21646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  549.970213][T21705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4268'.
[  549.997354][T21708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4271'.
[  550.105207][T21716] IPVS: ip_vs_edit_dest(): server weight less than zero
[  550.315580][T21723] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  550.966404][T21389] net_ratelimit: 30 callbacks suppressed
[  550.966458][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  551.085853][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  551.195844][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  551.306325][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  551.415884][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  551.526286][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  551.635835][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  551.745814][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  551.856470][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  551.965896][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  552.919160][T21699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  553.069354][T21733] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.077310][T21733] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.269221][T21744] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.313792][T21744] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.453775][T21754] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4283'.
[  554.153334][T21791] netlink: 'syz.2.4293': attribute type 10 has an invalid length.
[  554.312631][T21800] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4294'.
[  554.453534][T21809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4300'.
[  554.463827][T21809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4300'.
[  554.592185][T21814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4302'.
[  554.811606][   T50] Bluetooth: hci4: command 0x0406 tx timeout
[  554.973898][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4307'.
[  555.105130][T21844] 8021q: adding VLAN 0 to HW filter on device bond5
[  555.127140][T21853] macvlan2: entered promiscuous mode
[  555.132695][T21853] macvlan2: entered allmulticast mode
[  555.142464][T21853] bond5: (slave macvlan2): Opening slave failed
[  555.144821][T21812] nbd3: detected capacity change from 0 to 63
[  555.211349][T21856] syzkaller1: entered promiscuous mode
[  555.227095][T21856] syzkaller1: entered allmulticast mode
[  555.359771][T21863] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4310'.
[  555.415595][T21865] bond1: option mode: unable to set because the bond device is up
[  555.530832][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4312'.
[  555.548124][T21863] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  555.619541][T21863] 8021q: adding VLAN 0 to HW filter on device bond1
[  555.681173][T21863] bond1: (slave lo): making interface the new active one
[  555.698825][T21863] bond1: (slave lo): Enslaving as an active interface with an up link
[  555.831078][   T50] block nbd3: Receive control failed (result -104)
[  555.831643][ T4943] block nbd3: Receive control failed (result -32)
[  555.996776][   T13] net_ratelimit: 30 callbacks suppressed
[  555.996797][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  556.164569][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4319'.
[  556.166173][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  556.347112][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  556.361884][T21911] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  556.377134][T21915] netlink: 'syz.1.4322': attribute type 18 has an invalid length.
[  556.486888][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  556.618628][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  556.754607][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  556.896534][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  557.006840][T21943] lo speed is unknown, defaulting to 1000
[  557.126800][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  557.257745][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  557.387144][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  557.653667][T21962] xfrm1: entered allmulticast mode
[  557.829624][T21979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'.
[  557.987294][T21979] geneve2: entered promiscuous mode
[  557.998472][T21979] geneve2: entered allmulticast mode
[  558.449848][T22017] sctp: [Deprecated]: syz.0.4349 (pid 22017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.449848][T22017] Use struct sctp_sack_info instead
[  558.499444][T22015] __nla_validate_parse: 6 callbacks suppressed
[  558.499467][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'.
[  558.726335][T22029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4355'.
[  559.011849][T22040] batadv_slave_1: entered promiscuous mode
[  559.028336][T22039] batadv_slave_1: left promiscuous mode
[  559.284521][T22048] netlink: 'syz.4.4362': attribute type 1 has an invalid length.
[  559.312826][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4362'.
[  559.748771][T22084] netlink: 'syz.0.4371': attribute type 8 has an invalid length.
[  559.757910][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'.
[  559.759944][T22085] netlink: 'syz.0.4371': attribute type 8 has an invalid length.
[  559.792241][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'.
[  559.866786][T22084] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.874645][T22084] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.029094][T22093] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  560.057528][T22093] bond6 (unregistering): Released all slaves
[  560.123530][T22098] bridge0: port 3(ipvlan3) entered blocking state
[  560.130581][T22098] bridge0: port 3(ipvlan3) entered disabled state
[  560.137766][T22098] ipvlan3: entered allmulticast mode
[  560.143304][T22098] bridge0: entered allmulticast mode
[  560.152072][T22098] ipvlan3: left allmulticast mode
[  560.158077][T22098] bridge0: left allmulticast mode
[  560.441462][T22116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4380'.
[  560.955442][T22126] netlink: 'syz.0.4383': attribute type 12 has an invalid length.
[  561.106094][   T13] net_ratelimit: 29 callbacks suppressed
[  561.106118][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  561.235807][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  561.346132][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  561.451963][T22137] netlink: 'syz.0.4387': attribute type 4 has an invalid length.
[  561.456187][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  561.464728][T22137] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4387'.
[  561.481776][T22137] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4387'.
[  561.575896][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  561.687705][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  561.796385][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  561.906104][T21389] bond1: (slave bridge5): failed to get link speed/duplex
[  562.016241][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  562.126151][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  562.311054][T22055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.344765][T22119] netlink: 'syz.2.4380': attribute type 1 has an invalid length.
[  562.360705][T22119] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4380'.
[  562.398067][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'.
[  562.880885][T22163] netlink: 'syz.3.4396': attribute type 1 has an invalid length.
[  562.991849][T22163] 8021q: adding VLAN 0 to HW filter on device bond6
[  563.320251][T22188] netlink: 'syz.0.4405': attribute type 2 has an invalid length.
[  563.946589][T22224] __nla_validate_parse: 5 callbacks suppressed
[  563.946609][T22224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4416'.
[  564.095544][T22234] Cannot find add_set index 46338 as target
[  564.112307][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4419'.
[  564.338225][T22246] netlink: 'syz.0.4421': attribute type 16 has an invalid length.
[  564.370819][T22246] netlink: 'syz.0.4421': attribute type 17 has an invalid length.
[  564.392293][T22251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'.
[  564.428088][T22244] netlink: 'syz.1.4422': attribute type 4 has an invalid length.
[  564.497154][T22246] bond0: left allmulticast mode
[  564.502117][T22246] bond_slave_0: left allmulticast mode
[  564.510029][T22246] bond_slave_1: left allmulticast mode
[  564.539631][T22246] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.546897][T22246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.574348][T22246] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.581624][T22246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.679231][T22246] gretap1: left promiscuous mode
[  564.684624][T22246] batman_adv: batadv0: Interface activated: gretap1
[  564.696163][T22246] 8021q: adding VLAN 0 to HW filter on device bond1
[  564.714093][T22246] gretap2: left promiscuous mode
[  564.720865][T22246] gretap2: left allmulticast mode
[  564.733223][T22246] bond2: left promiscuous mode
[  564.739226][T22246] bridge1: left promiscuous mode
[  564.751687][T21388] 
[  564.754162][T21388] ======================================================
[  564.761219][T21388] WARNING: possible circular locking dependency detected
[  564.768275][T21388] syzkaller #0 Not tainted
[  564.772719][T21388] ------------------------------------------------------
[  564.779764][T21388] kworker/u8:4/21388 is trying to acquire lock:
[  564.786030][T21388] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  564.791281][T22246] bond3: left promiscuous mode
[  564.795911][T21388] 
[  564.795911][T21388] but task is already holding lock:
[  564.795923][T21388] ffff88805d640260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  564.812704][T22246] bond3: left allmulticast mode
[  564.817755][T21388] 
[  564.817755][T21388] which lock already depends on the new lock.
[  564.817755][T21388] 
[  564.817766][T21388] 
[  564.817766][T21388] the existing dependency chain (in reverse order) is:
[  564.817774][T21388] 
[  564.817774][T21388] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  564.817809][T21388]        lock_sock_nested+0x41/0x100
[  564.846543][T22246] 8021q: adding VLAN 0 to HW filter on device bond4
[  564.850064][T21388]        mptcp_listen+0x230/0x610
[  564.867005][T21388]        __x64_sys_listen+0x1c7/0x240
[  564.872502][T21388]        do_syscall_64+0x15f/0xf80
[  564.872519][T22246] vlan2: left promiscuous mode
[  564.872537][T22246] bridge0: left promiscuous mode
[  564.877651][T21388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.877674][T21388] 
[  564.877674][T21388] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  564.877709][T21388]        lock_sock_nested+0x41/0x100
[  564.906847][T21388]        inet_shutdown+0x6a/0x390
[  564.911922][T21388]        nbd_mark_nsock_dead+0x2e9/0x560
[  564.917576][T21388]        recv_work+0x1c2e/0x1d40
[  564.922553][T21388]        process_scheduled_works+0xb5d/0x1860
[  564.928647][T21388]        worker_thread+0xa53/0xfc0
[  564.933785][T21388]        kthread+0x388/0x470
[  564.938388][T21388]        ret_from_fork+0x514/0xb70
[  564.943544][T21388]        ret_from_fork_asm+0x1a/0x30
[  564.948859][T21388] 
[  564.948859][T21388] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  564.956601][T21388]        __mutex_lock+0x1a3/0x1550
[  564.961853][T21388]        nbd_queue_rq+0x37b/0x1100
[  564.966968][T21388]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  564.973065][T21388]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  564.979931][T21388]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  564.986454][T21388]        blk_mq_run_hw_queue+0x348/0x4f0
[  564.992127][T21388]        blk_mq_dispatch_list+0xd16/0xe10
[  564.997859][T21388]        blk_mq_flush_plug_list+0x48d/0x570
[  565.003771][T21388]        __blk_flush_plug+0x3ed/0x4d0
[  565.009161][T21388]        __submit_bio+0x28d/0x580
[  565.014251][T21388]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  565.020453][T21388]        block_read_full_folio+0x599/0x830
[  565.026277][T21388]        filemap_read_folio+0x137/0x3b0
[  565.031840][T21388]        do_read_cache_folio+0x358/0x590
[  565.037483][T21388]        read_part_sector+0xb6/0x2b0
[  565.042802][T21388]        adfspart_check_ICS+0xb1/0x960
[  565.048317][T21388]        bdev_disk_changed+0x817/0x1770
[  565.053877][T21388]        blkdev_get_whole+0x380/0x510
[  565.059266][T21388]        bdev_open+0x31e/0xd30
[  565.064112][T21388]        blkdev_open+0x470/0x610
[  565.069065][T21388]        do_dentry_open+0x785/0x14e0
[  565.074381][T21388]        vfs_open+0x3b/0x340
[  565.078998][T21388]        path_openat+0x2e08/0x3860
[  565.084127][T21388]        do_file_open+0x23e/0x4a0
[  565.089172][T21388]        do_sys_openat2+0x113/0x200
[  565.094391][T21388]        __x64_sys_openat+0x138/0x170
[  565.099768][T21388]        do_syscall_64+0x15f/0xf80
[  565.104894][T21388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.111311][T21388] 
[  565.111311][T21388] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  565.118541][T21388]        __mutex_lock+0x1a3/0x1550
[  565.123687][T21388]        nbd_queue_rq+0xc6/0x1100
[  565.128745][T21388]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  565.134853][T21388]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  565.141832][T21388]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  565.148371][T21388]        blk_mq_run_hw_queue+0x348/0x4f0
[  565.154056][T21388]        blk_mq_dispatch_list+0xd16/0xe10
[  565.159820][T21388]        blk_mq_flush_plug_list+0x48d/0x570
[  565.165755][T21388]        __blk_flush_plug+0x3ed/0x4d0
[  565.171169][T21388]        __submit_bio+0x28d/0x580
[  565.176206][T21388]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  565.182376][T21388]        block_read_full_folio+0x599/0x830
[  565.188254][T21388]        filemap_read_folio+0x137/0x3b0
[  565.193844][T21388]        do_read_cache_folio+0x358/0x590
[  565.199491][T21388]        read_part_sector+0xb6/0x2b0
[  565.204911][T21388]        adfspart_check_ICS+0xb1/0x960
[  565.210392][T21388]        bdev_disk_changed+0x817/0x1770
[  565.216063][T21388]        blkdev_get_whole+0x380/0x510
[  565.221469][T21388]        bdev_open+0x31e/0xd30
[  565.226243][T21388]        blkdev_open+0x470/0x610
[  565.231208][T21388]        do_dentry_open+0x785/0x14e0
[  565.236500][T21388]        vfs_open+0x3b/0x340
[  565.241094][T21388]        path_openat+0x2e08/0x3860
[  565.246230][T21388]        do_file_open+0x23e/0x4a0
[  565.251286][T21388]        do_sys_openat2+0x113/0x200
[  565.256522][T21388]        __x64_sys_openat+0x138/0x170
[  565.261943][T21388]        do_syscall_64+0x15f/0xf80
[  565.267087][T21388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.273519][T21388] 
[  565.273519][T21388] -> #3 (set->srcu){.+.+}-{0:0}:
[  565.280702][T21388]        __synchronize_srcu+0xca/0x300
[  565.286202][T21388]        elevator_switch+0x1e8/0x7a0
[  565.291535][T21388]        elevator_change+0x2cc/0x450
[  565.296829][T21388]        elevator_set_default+0x36c/0x430
[  565.302561][T21388]        blk_register_queue+0x3e9/0x4e0
[  565.308128][T21388]        __add_disk+0x677/0xd50
[  565.313018][T21388]        add_disk_fwnode+0xfb/0x480
[  565.318250][T21388]        nbd_dev_add+0x72c/0xb50
[  565.323232][T21388]        nbd_init+0x168/0x1f0
[  565.327932][T21388]        do_one_initcall+0x250/0x870
[  565.333239][T21388]        do_initcall_level+0x104/0x190
[  565.338701][T21388]        do_initcalls+0x59/0xa0
[  565.343592][T21388]        kernel_init_freeable+0x2a6/0x3e0
[  565.349396][T21388]        kernel_init+0x1d/0x1d0
[  565.354288][T21388]        ret_from_fork+0x514/0xb70
[  565.359424][T21388]        ret_from_fork_asm+0x1a/0x30
[  565.364824][T21388] 
[  565.364824][T21388] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  565.372661][T21388]        __mutex_lock+0x1a3/0x1550
[  565.377812][T21388]        elevator_change+0x1b3/0x450
[  565.383130][T21388]        elevator_set_none+0xb5/0x140
[  565.388549][T21388]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  565.395022][T21388]        nbd_start_device+0x17f/0xb10
[  565.400404][T21388]        nbd_genl_connect+0x165b/0x1cf0
[  565.406005][T21388]        genl_family_rcv_msg_doit+0x22a/0x330
[  565.412132][T21388]        genl_rcv_msg+0x61c/0x7a0
[  565.417208][T21388]        netlink_rcv_skb+0x232/0x4b0
[  565.422508][T21388]        genl_rcv+0x28/0x40
[  565.427062][T21388]        netlink_unicast+0x75c/0x8e0
[  565.432357][T21388]        netlink_sendmsg+0x813/0xb40
[  565.437655][T21388]        ____sys_sendmsg+0x972/0x9f0
[  565.442953][T21388]        ___sys_sendmsg+0x2a5/0x360
[  565.448251][T21388]        __x64_sys_sendmsg+0x1bd/0x2a0
[  565.453722][T21388]        do_syscall_64+0x15f/0xf80
[  565.458880][T21388]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.465773][T21388] 
[  565.465773][T21388] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  565.474532][T21388]        blk_alloc_queue+0x546/0x680
[  565.479864][T21388]        __blk_mq_alloc_disk+0x197/0x390
[  565.485543][T21388]        nbd_dev_add+0x499/0xb50
[  565.490538][T21388]        nbd_init+0x168/0x1f0
[  565.495260][T21388]        do_one_initcall+0x250/0x870
[  565.500574][T21388]        do_initcall_level+0x104/0x190
[  565.506057][T21388]        do_initcalls+0x59/0xa0
[  565.510957][T21388]        kernel_init_freeable+0x2a6/0x3e0
[  565.516688][T21388]        kernel_init+0x1d/0x1d0
[  565.521548][T21388]        ret_from_fork+0x514/0xb70
[  565.526672][T21388]        ret_from_fork_asm+0x1a/0x30
[  565.531978][T21388] 
[  565.531978][T21388] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  565.539219][T21388]        __lock_acquire+0x15a5/0x2cf0
[  565.544620][T21388]        lock_acquire+0x106/0x350
[  565.549669][T21388]        fs_reclaim_acquire+0x71/0x100
[  565.555135][T21388]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  565.561472][T21388]        __alloc_skb+0x1d0/0x7d0
[  565.566430][T21388]        tcp_stream_alloc_skb+0x3f/0x580
[  565.572084][T21388]        tcp_connect+0x15a9/0x53a0
[  565.577208][T21388]        tcp_v6_connect+0x128d/0x1b10
[  565.582586][T21388]        __inet_stream_connect+0x25a/0xdd0
[  565.588414][T21388]        inet_stream_connect+0x66/0xa0
[  565.593882][T21388]        kernel_connect+0x141/0x1c0
[  565.599109][T21388]        rds_tcp_conn_path_connect+0x6f6/0x930
[  565.605272][T21388]        rds_connect_worker+0x1d8/0x290
[  565.610843][T21388]        process_scheduled_works+0xb5d/0x1860
[  565.616948][T21388]        worker_thread+0xa53/0xfc0
[  565.622083][T21388]        kthread+0x388/0x470
[  565.626677][T21388]        ret_from_fork+0x514/0xb70
[  565.631790][T21388]        ret_from_fork_asm+0x1a/0x30
[  565.637175][T21388] 
[  565.637175][T21388] other info that might help us debug this:
[  565.637175][T21388] 
[  565.647403][T21388] Chain exists of:
[  565.647403][T21388]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  565.647403][T21388] 
[  565.660356][T21388]  Possible unsafe locking scenario:
[  565.660356][T21388] 
[  565.667806][T21388]        CPU0                    CPU1
[  565.673212][T21388]        ----                    ----
[  565.678599][T21388]   lock(k-sk_lock-AF_INET6);
[  565.683292][T21388]                                lock(sk_lock-AF_INET6);
[  565.690362][T21388]                                lock(k-sk_lock-AF_INET6);
[  565.697614][T21388]   lock(fs_reclaim);
[  565.701602][T21388] 
[  565.701602][T21388]  *** DEADLOCK ***
[  565.701602][T21388] 
[  565.709750][T21388] 4 locks held by kworker/u8:4/21388:
[  565.715131][T21388]  #0: ffff88806c415940 ((wq_completion)krds_cp_wq#17/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  565.726925][T21388]  #1: ffffc900066c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  565.739713][T21388]  #2: ffff88807ff56480 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930
[  565.750766][T21388]  #3: ffff88805d640260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  565.760899][T21388] 
[  565.760899][T21388] stack backtrace:
[  565.766797][T21388] CPU: 0 UID: 0 PID: 21388 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  565.766815][T21388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  565.766827][T21388] Workqueue: krds_cp_wq#17/0 rds_connect_worker
[  565.766851][T21388] Call Trace:
[  565.766858][T21388]  <TASK>
[  565.766866][T21388]  dump_stack_lvl+0xe8/0x150
[  565.766884][T21388]  print_circular_bug+0x2e1/0x300
[  565.766906][T21388]  check_noncircular+0x12e/0x150
[  565.766928][T21388]  __lock_acquire+0x15a5/0x2cf0
[  565.766954][T21388]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  565.766975][T21388]  lock_acquire+0x106/0x350
[  565.766989][T21388]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  565.767037][T21388]  ? ip6_dst_check+0xe2/0x7e0
[  565.767065][T21388]  fs_reclaim_acquire+0x71/0x100
[  565.767094][T21388]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  565.767114][T21388]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  565.767133][T21388]  ? ip6_default_advmss+0x80/0x3b0
[  565.767152][T21388]  ? __alloc_skb+0x1d0/0x7d0
[  565.767170][T21388]  __alloc_skb+0x1d0/0x7d0
[  565.767187][T21388]  tcp_stream_alloc_skb+0x3f/0x580
[  565.767210][T21388]  ? __asan_memset+0x22/0x50
[  565.767229][T21388]  tcp_connect+0x15a9/0x53a0
[  565.767259][T21388]  ? ktime_get_with_offset+0x93/0x2d0
[  565.767283][T21388]  ? __pfx_tcp_connect+0x10/0x10
[  565.767301][T21388]  ? seqcount_lockdep_reader_access+0xea/0x100
[  565.767325][T21388]  ? seqcount_lockdep_reader_access+0xec/0x100
[  565.767351][T21388]  ? __asan_memset+0x22/0x50
[  565.767370][T21388]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  565.767390][T21388]  ? inet6_hash_connect+0xeb/0x170
[  565.767412][T21388]  tcp_v6_connect+0x128d/0x1b10
[  565.767440][T21388]  ? __pfx_tcp_v6_connect+0x10/0x10
[  565.767461][T21388]  ? __local_bh_enable_ip+0xd0/0x130
[  565.767476][T21388]  ? __bfs+0x153/0x290
[  565.767490][T21388]  ? __bfs+0x153/0x290
[  565.767504][T21388]  ? __pfx_hlock_conflict+0x10/0x10
[  565.767524][T21388]  __inet_stream_connect+0x25a/0xdd0
[  565.767547][T21388]  ? do_raw_spin_lock+0x12b/0x2f0
[  565.767566][T21388]  ? lock_sock_nested+0x6a/0x100
[  565.767589][T21388]  ? __pfx___inet_stream_connect+0x10/0x10
[  565.767610][T21388]  ? inet_stream_connect+0x51/0xa0
[  565.767630][T21388]  ? __local_bh_enable_ip+0xd0/0x130
[  565.767646][T21388]  inet_stream_connect+0x66/0xa0
[  565.767666][T21388]  kernel_connect+0x141/0x1c0
[  565.767686][T21388]  ? net_generic+0x1e/0x240
[  565.767707][T21388]  ? __pfx_kernel_connect+0x10/0x10
[  565.767733][T21388]  ? __local_bh_enable_ip+0xd0/0x130
[  565.767750][T21388]  rds_tcp_conn_path_connect+0x6f6/0x930
[  565.767782][T21388]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  565.767799][T21388]  ? process_scheduled_works+0xa70/0x1860
[  565.767818][T21388]  rds_connect_worker+0x1d8/0x290
[  565.767837][T21388]  ? process_scheduled_works+0xa70/0x1860
[  565.767852][T21388]  process_scheduled_works+0xb5d/0x1860
[  565.767879][T21388]  ? __pfx_process_scheduled_works+0x10/0x10
[  565.767896][T21388]  ? assign_work+0x3d5/0x5e0
[  565.767911][T21388]  worker_thread+0xa53/0xfc0
[  565.767937][T21388]  kthread+0x388/0x470
[  565.767956][T21388]  ? __pfx_worker_thread+0x10/0x10
[  565.767970][T21388]  ? __pfx_kthread+0x10/0x10
[  565.767988][T21388]  ret_from_fork+0x514/0xb70
[  565.768005][T21388]  ? __pfx_ret_from_fork+0x10/0x10
[  565.768019][T21388]  ? __switch_to+0xc79/0x1410
[  565.768046][T21388]  ? __pfx_kthread+0x10/0x10
[  565.768064][T21388]  ret_from_fork_asm+0x1a/0x30
[  565.768088][T21388]  </TASK>
[  566.116793][   T13] net_ratelimit: 17 callbacks suppressed
[  566.116812][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  566.286124][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  566.396273][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  566.505822][T21388] bond1: (slave bridge5): failed to get link speed/duplex
[  566.615802][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  566.726383][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  566.835825][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  566.946125][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  567.056484][ T9576] bond1: (slave bridge5): failed to get link speed/duplex
[  567.165850][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  571.166338][ T9571] net_ratelimit: 35 callbacks suppressed
[  571.166361][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  571.288094][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  571.395819][ T9571] bond1: (slave bridge5): failed to get link speed/duplex
[  571.506034][   T13] bond1: (slave bridge5): failed to get link speed/duplex
[  571.615975][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  571.726614][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  571.836053][ T6372] bond1: (slave bridge5): failed to get link speed/duplex
[  571.946091][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  572.056156][ T9578] bond1: (slave bridge5): failed to get link speed/duplex
[  572.165901][T21389] bond1: (slave bridge5): failed to get link speed/duplex