last executing test programs:

2m10.375029653s ago: executing program 32 (id=1157):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x6, [@datasec={0x4, 0x1, 0x0, 0xf, 0x2, [{0x0, 0xe1, 0x1000e0}], "f188"}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x61, 0x61, 0x30]}}, 0x0, 0x46, 0x0, 0x1, 0x100}, 0x28)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000140)=0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x9, '\x00', r6, r5, 0x5, 0x4, 0x4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket(0x10, 0x2, 0x0)
sendto$inet6(r7, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20000400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='thermal_power_allocator\x00', 0xffffffffffffffff, 0x0, 0x4}, 0xfffffffffffffe4d)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20000000)

2m9.962875204s ago: executing program 33 (id=1159):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3], 0x0, 0x0, 0x1e01}, &(0x7f0000000340)=0x78)

1m59.591507144s ago: executing program 6 (id=1220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet(0x10, 0x3, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000240)={'dummy0\x00', @local})
ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES16, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000010000816ce000015000000000000000000000000000000000000003d72d500c6cd75f96fb300561dce93521417326b9dd09dc8b0e596fa5f57fe03121492c6d036f78a2c3eb1c828f027917a4734d555d4c4a83a454328ed0b127b8032bbeae42f575d31d685bcf8371bab16d64e800ac0dbb13a4877c938b5326d1bf4278ad8450a53d335a4cb5191"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x4}, 0x94)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x15, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x7, 0x8, 0x7, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5b5, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x54, &(0x7f0000000540)=""/84, 0x41100, 0x8, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x6, 0x3, 0x3}, 0x10, 0xb31, r6, 0x6, &(0x7f00000009c0)=[r7, r6], &(0x7f0000000a00)=[{0x5, 0x2, 0x2, 0xa}, {0x4, 0x1, 0xc, 0x8}, {0x4, 0x1, 0x3, 0x9}, {0x1, 0x2, 0x10}, {0x2, 0x8185}, {0x4, 0x1, 0x8}], 0x10, 0x557}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xe7, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1m59.447748866s ago: executing program 6 (id=1244):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x178, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
socket$inet6(0xa, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f04080500000026bd7000ffdbdf25030007006c60000002004e22e00000010000000000000000f84c025c5491dbd09f75e94826d82aeb2c28e8e9a019475d639d0237e7a5306d992505cfad4f9e2299ee413c93f129e7688e0042f3b8d144a8a0120467bc981237"], 0x28}}, 0x4000000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)

1m49.002936071s ago: executing program 34 (id=1242):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7030000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x14}, 0x94)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000000000008001e00ff0f000004000880"], 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050)
unshare(0x68040200)
write(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, 0x0, 0x0)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x80065c9}, 0xc)
getsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, &(0x7f00000001c0))
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$llc(r1, &(0x7f0000000140)={0x1a, 0xf, 0x9, 0x67, 0xe3, 0x2, @random="002e00008000"}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1\x00'})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001740)=ANY=[@ANYRES16, @ANYRES64=r7, @ANYRES8=r2, @ANYRESDEC, @ANYRESDEC, @ANYRES64=r7, @ANYRES16, @ANYRESOCT=r5, @ANYRESOCT=r5], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x44000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x56, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r4, @ANYRES8=r6], 0x28}}, 0x4000000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

1m48.956277837s ago: executing program 35 (id=1243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05ebffff03000000ff0f000005"], 0x48)
socket$tipc(0x1e, 0x2, 0x0)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0xef2a, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
mmap(&(0x7f0000062000/0x2000)=nil, 0x2000, 0x1d, 0x10010, r2, 0x3c62000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @cgroup_skb}, 0x94)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
close(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x2, 0x1, 0x1, 0x3}}, 0x26)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000800)={0x3, 0x8f, "0b30ae66052c43c1dd54652d5c6693fae6e6dc68dc9ec37c2b776f6cbe18a0d4b6abedd8819c80e97e6f44058925df569937f9ecb05198585ae7fc8a5b46adcc75b0b16d31d90570202b057fae85953abd300fee59b613a4a0c5031b8efa6815401f847d6fe362fba42b81d41b136c1459d23698c59c14947e6f8783898b206e171cd36ebe42b60c5ce650502ac67e"})

1m44.157641495s ago: executing program 36 (id=1244):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x178, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
socket$inet6(0xa, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f04080500000026bd7000ffdbdf25030007006c60000002004e22e00000010000000000000000f84c025c5491dbd09f75e94826d82aeb2c28e8e9a019475d639d0237e7a5306d992505cfad4f9e2299ee413c93f129e7688e0042f3b8d144a8a0120467bc981237"], 0x28}}, 0x4000000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)

1m33.334593461s ago: executing program 7 (id=1322):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='irq_handler_entry\x00', 0xffffffffffffffff, 0x0, 0x300000000}, 0x9f9a6f51aa9d9e09)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100))

1m32.018519962s ago: executing program 7 (id=1323):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
shutdown(r1, 0x0)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})

1m32.015337009s ago: executing program 9 (id=1285):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x0, 0xa64, 0x857, 0xcb4]})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03050000000f00000500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x0, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x2, 0x95}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0x8, 0x1}, 0x10, 0x161d2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r2, r2, r6, r2, r2, r2, r7], &(0x7f0000000840), 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r8, &(0x7f0000007940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x36b, @remote, 0xfffffff4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000400"], 0x66}}], 0x1, 0x800)
accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000280)=@null)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r10, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @multicast})

1m31.80799702s ago: executing program 7 (id=1327):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000034fcffff33000000030000000000000000000003000000000500000003000000e2cc0000000000000000000105000000080000020100000000"], 0x0, 0x4f}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r3)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_WEIGHT={0x8, 0xf, 0xc}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000040)

1m31.56535718s ago: executing program 9 (id=1328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x6, 0x2201b4afa364ae56, @val=0x80}}}}}, 0x36)

1m31.431993914s ago: executing program 7 (id=1330):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000005d0900000000767328ee6c22cb8b"], 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100", @ANYRESDEC=r3], 0x30}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0)

1m31.174117281s ago: executing program 7 (id=1331):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x9, 0x20}, 0xc)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000100008800c00078008000600cd000000"], 0x38}}, 0x0)

1m30.954054609s ago: executing program 9 (id=1332):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x0, 0xa64, 0x857, 0xcb4]})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03050000000f00000500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x0, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x2, 0x95}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0x8, 0x1}, 0x10, 0x161d2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r2, r2, r6, r2, r2, r2, r7], &(0x7f0000000840), 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r8, &(0x7f0000007940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x36b, @remote, 0xfffffff4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000400"], 0x66}}], 0x1, 0x800)
accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000280)=@null)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r10, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @multicast})

1m30.79166815s ago: executing program 7 (id=1334):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x6e5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='btrfs_handle_em_exist\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="adc9f6090000000001000000cb1d2afea5755a0f", @ANYRES32=0x0, @ANYBLOB="40180000000000001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24044000)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="68e635ec32a33dfa4900d8c3cb7cc5296bb82b7526531da70464746f8e263a6a990f1946e47711641790e256e4d9e7af69ba90395ca45b035240c01a3a31341a6ad1562f001a86b88daaa67c259ddbcadc0afa98900b83e3d160b0085a7062af9cef6afefabfdabc", @ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x6f, &(0x7f00000004c0)='\xcf\xea\x1b\xef\xf0j\xe6l\x7f \xb5\xdd\x95\x9bTK\x89\xcf\x8e\xca\xb9\xa5\xd10\xad]\nw\xbc\x06h\xdc\xe9\x13\xf1\xed\xdd\x1c\xa6\xba\x8e\x18\x15u\xf8\xbf\x13N9\xb0XP\xfd\xf9\xa2u\'~\xa4\xb5%X\xf0sa]<\xcd\xf3\xcbe!\x8f#\xcfK\xff%qG\x1f\x95#\x8d[H\xe6_\xd6B\xb6\xa4\xd7\x97\a\xab\x19B\x0f\xf5vm\xdc\x8e\x03rY\xf5\x99;\xe5'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000400)="6459c99ec89f0d488828823646d20ce3deaf419deb68fc00"/35, &(0x7f0000000040)=""/44, &(0x7f0000000080)="110b686ac95767f72276cea8074f92ba7ab643f9f5f62f2882919148557b4adc09548284e4c059ddb6c149926314df3c47473291928f24d23195793d096162392637d55d34c2e264c9994e709cb3ea3b93f8fe28a281d83af3eb6ec8a407331dbc9ef4a35117c0fab6b67c0b92a89d24aaa4ec57381b1f479bf44fa6e44e5b48906f75224267f14b11080e8b30f81d3c949442b912a65515b30c6eff2bea53e7d3b479e083fb413c65a5b023", &(0x7f0000001ac0)="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", 0xffff, r9}, 0x38)

1m30.234673823s ago: executing program 9 (id=1336):
r0 = socket$unix(0x1, 0x1, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bdf000fbdbdf2501000000080002000200000008000100faffffff24000480050003000200"], 0x48}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd29, 0xa5dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) (async)
connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = socket$tipc(0x1e, 0x5, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400128009000100626f6e6400000000", @ANYRES32=0x0, @ANYBLOB='\b\x00(\x00\x00\x00@'], 0x44}}, 0x0)
r9 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x2000}, 0x4) (async)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0148000000006d6163766c616e000cea005f1b434160dc14d6a32b000800050000000000000000000000000000000000000000000000000000000000000064923cb97d2cf942d671cb1a775de8", @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x40000) (async)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e)

1m29.968004075s ago: executing program 9 (id=1338):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x40840, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
poll(&(0x7f00000003c0)=[{r0, 0x7004}], 0x1, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1c, "79d595fa773e78e7df8bfb38b5f646cc3a957d04227fa96a0080b2a2"}, &(0x7f00000004c0)=0xfc99)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x20000800)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x48395, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0xa05, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x198, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPRESSIONS={0x148, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x358, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x304, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xda}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5}]}}}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "76428684807da6bc440bb4497fb6611fc3438db82c"}, @NFTA_DATA_VALUE={0xd7, 0x1, "fa7b28056e9f565d86a4af0499b898a7f9b2d7797de33f03469a1ee01a0e93e84b06adde78c5f3524bbf789d2237c7acab0b991ccba9dce774b1e1489459d16d2f25a272379acda8cff6b9fbc418f8409539bfc8a28f97a51a36340ea0917cb5207eade5f607ae97033d89a2a1d4f2b3a75e1779ea07db417543e9b361bc05afdb34479f3079d9405f33c1589a562ba454de24f430cdd3f4e21e8ebaf78a8fdd00dddc02234dd3a4c7169b1fc262b19d365a51073bc67bb63004b8e796c2454d18d0d94a9ea341f1a70aa533adba5b3ca27ab6"}, @NFTA_DATA_VALUE={0xf6, 0x1, "5333685a327740a23e839decab3659fc964f8e798380c186e1b4e28566a786af384c204d0c2656927be4e22ac52f66b0afa40a85d0687ae27909302b2a3c3da1eba52d9207d1a07e5e17d3bd7fa29ae36f3ab0ea314842b2968b386754c26b1ee1c994f45d1aaab95fac22449f0e91da6914a1ded8b3b4000678b93849cfa1ab99684c52038bfc39640fb17d1311e32e884a5a14be1b04b3c91589e98633aca0f4f5bf353b71f9466826631b0f3a110d32fbf5d1ca8c12497e6e915dfc0d8688a336a0451c3c6ef3024a0c06c7876ee1f7546ff8108a7070ebe572cfe4023ed1af73c4cf69cf48612556413f317b5ff273f0"}, @NFTA_DATA_VALUE={0x58, 0x1, "9a0322900287f3ecf09b6fe2a0aec9d29e306c60ae4c72c71268155eb5b19064107da15fcbb0620daaf1fcabfa2a7950c054de9950d8cd6158d76171898c58eb5217d3129d81bb619fa2c9c3d7b7e75324877a03"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x54c}}, 0x20008844)

1m29.840035433s ago: executing program 5 (id=1340):
accept$netrom(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff91, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1m29.688001919s ago: executing program 5 (id=1342):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x40000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x7dc, 0x0, @gue={{0x2, 0x1, 0x1, 0x6, 0x2201b4afa364ae56, @val=0x80}, "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"}}}}, 0x802)

1m29.206739838s ago: executing program 5 (id=1344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00'})
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000440)=""/272, 0x110}, {0x0}, {&(0x7f0000000d00)=""/241, 0xf1}], 0x4}}, {{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x2020, 0x0)

1m29.106764544s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m28.674058759s ago: executing program 5 (id=1346):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x0, 0xa64, 0x857, 0xcb4]})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03050000000f00000500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x0, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x2, 0x95}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0x8, 0x1}, 0x10, 0x161d2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r2, r2, r6, r2, r2, r2, r7], &(0x7f0000000840), 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r8, &(0x7f0000007940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x36b, @remote, 0xfffffff4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000400"], 0x66}}], 0x1, 0x800)
accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000280)=@null)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r10, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @multicast})

1m28.345352387s ago: executing program 5 (id=1347):
sendmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001e00)="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", 0x973}], 0x1}}], 0x1, 0x20000084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (fail_nth: 39)

1m27.71147853s ago: executing program 5 (id=1348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x40}}, 0x40080)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
syz_open_procfs$namespace(0x0, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

1m22.534293702s ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

1m21.654893685s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m15.787865714s ago: executing program 37 (id=1334):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x6e5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='btrfs_handle_em_exist\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="adc9f6090000000001000000cb1d2afea5755a0f", @ANYRES32=0x0, @ANYBLOB="40180000000000001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180))
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x24044000)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="68e635ec32a33dfa4900d8c3cb7cc5296bb82b7526531da70464746f8e263a6a990f1946e47711641790e256e4d9e7af69ba90395ca45b035240c01a3a31341a6ad1562f001a86b88daaa67c259ddbcadc0afa98900b83e3d160b0085a7062af9cef6afefabfdabc", @ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x6f, &(0x7f00000004c0)='\xcf\xea\x1b\xef\xf0j\xe6l\x7f \xb5\xdd\x95\x9bTK\x89\xcf\x8e\xca\xb9\xa5\xd10\xad]\nw\xbc\x06h\xdc\xe9\x13\xf1\xed\xdd\x1c\xa6\xba\x8e\x18\x15u\xf8\xbf\x13N9\xb0XP\xfd\xf9\xa2u\'~\xa4\xb5%X\xf0sa]<\xcd\xf3\xcbe!\x8f#\xcfK\xff%qG\x1f\x95#\x8d[H\xe6_\xd6B\xb6\xa4\xd7\x97\a\xab\x19B\x0f\xf5vm\xdc\x8e\x03rY\xf5\x99;\xe5'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000400)="6459c99ec89f0d488828823646d20ce3deaf419deb68fc00"/35, &(0x7f0000000040)=""/44, &(0x7f0000000080)="110b686ac95767f72276cea8074f92ba7ab643f9f5f62f2882919148557b4adc09548284e4c059ddb6c149926314df3c47473291928f24d23195793d096162392637d55d34c2e264c9994e709cb3ea3b93f8fe28a281d83af3eb6ec8a407331dbc9ef4a35117c0fab6b67c0b92a89d24aaa4ec57381b1f479bf44fa6e44e5b48906f75224267f14b11080e8b30f81d3c949442b912a65515b30c6eff2bea53e7d3b479e083fb413c65a5b023", &(0x7f0000001ac0)="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", 0xffff, r9}, 0x38)

1m15.269740517s ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

1m13.687528679s ago: executing program 38 (id=1338):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x40840, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
poll(&(0x7f00000003c0)=[{r0, 0x7004}], 0x1, 0x80)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1c, "79d595fa773e78e7df8bfb38b5f646cc3a957d04227fa96a0080b2a2"}, &(0x7f00000004c0)=0xfc99)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0)
ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x20000800)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x48395, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0xa05, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x198, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPRESSIONS={0x148, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x358, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x304, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xda}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5}]}}}]}]}, {0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "76428684807da6bc440bb4497fb6611fc3438db82c"}, @NFTA_DATA_VALUE={0xd7, 0x1, "fa7b28056e9f565d86a4af0499b898a7f9b2d7797de33f03469a1ee01a0e93e84b06adde78c5f3524bbf789d2237c7acab0b991ccba9dce774b1e1489459d16d2f25a272379acda8cff6b9fbc418f8409539bfc8a28f97a51a36340ea0917cb5207eade5f607ae97033d89a2a1d4f2b3a75e1779ea07db417543e9b361bc05afdb34479f3079d9405f33c1589a562ba454de24f430cdd3f4e21e8ebaf78a8fdd00dddc02234dd3a4c7169b1fc262b19d365a51073bc67bb63004b8e796c2454d18d0d94a9ea341f1a70aa533adba5b3ca27ab6"}, @NFTA_DATA_VALUE={0xf6, 0x1, "5333685a327740a23e839decab3659fc964f8e798380c186e1b4e28566a786af384c204d0c2656927be4e22ac52f66b0afa40a85d0687ae27909302b2a3c3da1eba52d9207d1a07e5e17d3bd7fa29ae36f3ab0ea314842b2968b386754c26b1ee1c994f45d1aaab95fac22449f0e91da6914a1ded8b3b4000678b93849cfa1ab99684c52038bfc39640fb17d1311e32e884a5a14be1b04b3c91589e98633aca0f4f5bf353b71f9466826631b0f3a110d32fbf5d1ca8c12497e6e915dfc0d8688a336a0451c3c6ef3024a0c06c7876ee1f7546ff8108a7070ebe572cfe4023ed1af73c4cf69cf48612556413f317b5ff273f0"}, @NFTA_DATA_VALUE={0x58, 0x1, "9a0322900287f3ecf09b6fe2a0aec9d29e306c60ae4c72c71268155eb5b19064107da15fcbb0620daaf1fcabfa2a7950c054de9950d8cd6158d76171898c58eb5217d3129d81bb619fa2c9c3d7b7e75324877a03"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x54c}}, 0x20008844)

1m13.672988726s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m11.915894051s ago: executing program 39 (id=1348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x40}}, 0x40080)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
syz_open_procfs$namespace(0x0, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

56.97879328s ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

54.029311969s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

52.454776334s ago: executing program 1 (id=1370):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r5, 0x2, {0x2}}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x4008001}, 0x10)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="fb12ca2f33d63308000000000000000079100c00a70000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
write(r7, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x48, &(0x7f0000000380)={0x88, 0x1, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x7, 0xfe}}]}, 0x18)
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000)
close(r6)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
sendmmsg$inet6(r0, &(0x7f0000003a00), 0x2, 0xc0c0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fcdbdf25010005000000000007410000004c00180000000762726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
sendfile(r9, 0xffffffffffffffff, &(0x7f0000000000), 0x8000000000000000)
r12 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(0x3)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newchain={0x34, 0x64, 0x0, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0x8}, {0xc, 0xf}, {0xc, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9d}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048841}, 0x48040)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)

52.016042604s ago: executing program 1 (id=1372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00'})
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {0x0}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000d00)=""/241, 0xf1}], 0x4}}, {{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x2020, 0x0)

51.676367502s ago: executing program 1 (id=1375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000000000000020000000400000002000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r0, &(0x7f00000004c0)="ee963c649e5910dbab9743b389c52a5f4c9e62fb2001c919c1f0dbe8bc1c63de8fc58db849cd5d856c39fc167a0303", &(0x7f0000000680)=""/20}, 0x20)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18)
r4 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000400)={0x6, 'nicvf0\x00', {0x4}, 0x2})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1f000000000000004000000000800000000000009c986766b932649191db7fdbb646423cc5b638111e20d295935116c3cbcae5958ea8ccf4912b82e3baf527d10accc415e5566a33bb32d88fd01d402ef46a9742983887a3d5c1c3ebab35f8ee105ee5ae8bb2cbbc4f39d9ecd324e9aeb12fd2febbafb8069373e4f1b9558f23102407a03bb1e046e06d01d97d078daab87a60e8762324fc4b4d7c5b29296b8f63b0d9e448983be116a81881e7c2566833e30826b341d90737e216ba723254e347cf4c97031d4547c7384071f61f75a244ce3871c2156d308aff46996f05488282b64cf86a060a8cf45635b92e746e4a3a4c04229f54615352", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000018c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000f00)={0x1, &(0x7f0000000e40)=[{@none}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00}, 0x94)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000a00)={0x0, 0x6, 0x1, [0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x5], [0xffffffff00000000, 0x7, 0x4, 0x1, 0xe7, 0xffffffffffffffb1, 0x2, 0x1, 0x6, 0x2, 0x1000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xd, 0x5, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x91, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x637, 0x2, 0x101, 0x7, 0x6, 0x7fffffff, 0x5, 0x80000000, 0x5, 0x1ff, 0x9, 0x0, 0x4, 0x100, 0x9fc9, 0x5, 0x1, 0x5, 0x8, 0x9, 0x80d, 0x81, 0x5, 0xc16, 0x7fffffff, 0x2, 0x9, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xcd1d, 0xfffffffffffffc01, 0x8, 0xb4fda58, 0x7ff, 0x8b7a, 0x0, 0x2da5, 0x3, 0x8000000000000000, 0xd, 0xf6, 0x200, 0x5, 0x5, 0x7, 0x13, 0x101, 0xa, 0x7fff, 0x5, 0xff, 0x100, 0x6, 0xd1, 0x7, 0x1c000000, 0x1000, 0x4, 0x401, 0x1, 0x20080000000000, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8, 0xd9f6, 0x0, 0x7, 0x7, 0x81, 0x4, 0x81, 0x0, 0x4, 0x4, 0xffffffff80000001, 0xfffffffffffffffa, 0x80000001, 0x6, 0xfff, 0x6, 0x2, 0x2, 0x3, 0xde2, 0x916, 0x3]})
recvmsg(r5, &(0x7f00000002c0)={&(0x7f0000000440)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/226, 0xcd}, 0x102)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e0000000400000004000000f8ffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x50, r10, 0xe7baa000)

50.660209488s ago: executing program 1 (id=1380):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100764d7000fbdbdf7e010000005c00018014000300fe8000000000000000009ab6000000bb060001"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (fail_nth: 7)

50.162223509s ago: executing program 1 (id=1382):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0xa, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r1}, 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
accept4(r0, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@remote, @default, @remote, @null, @default, @rose, @netrom, @rose]}, 0x0, 0x80000)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)

49.855997415s ago: executing program 1 (id=1384):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3], 0x0, 0x0, 0x600000000000000}, &(0x7f0000000340)=0x78)

39.269660181s ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

37.829531904s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

34.412488s ago: executing program 40 (id=1384):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3], 0x0, 0x0, 0x600000000000000}, &(0x7f0000000340)=0x78)

19.224423815s ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

13.84320233s ago: executing program 8 (id=1345):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, 0x0, 0x4, 0xd3, &(0x7f0000000540)=""/211, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x1, 0x8, 0x3}], 0x10, 0x8}, 0x94)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r5}, 0x38)
openat$cgroup_subtree(r4, &(0x7f0000000480), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1f, 0x80002})
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.092100884s ago: executing program 0 (id=1549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e50200000ffe0000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

3.893688016s ago: executing program 0 (id=1551):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x11, 0x0, 0x0, 0x24000801}, 0x4c000)

3.519876309s ago: executing program 0 (id=1552):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e2d, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400b3a4beab292851d30003000000000000000000000000300b22b159aff8b6391c1d87e09d6726f6a4e45ab7539f1eccb015384669392123aba4105b5b7b700e9041e655a0362fa29eaf10d7f66746a3a7bf368e5088399ff9918d3d36a3035670dbe28fbf5ae36eb85604e96df126ce2bcdcf76c79d78bc9cb07dfd66f20a5d8d6c019529df0e905b127bcf40c6598d308994b419112c0cafde4e8be087efd24d9a78f2c30c34a568686a694c232a908d890b7d429f01fe3fb23aeb79c50112e32e4b6d5a2112b989994368abf86dcf11ec3f6b77fd3f85427ce149ff762f77effe925c"], 0x18}, 0x20040081)
shutdown(r1, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r3, 0x0, 0xffffffff000)
recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0x1ff}, {0x16}]}, 0x10)
sendmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
socket$packet(0x11, 0xa, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
connect$vsock_stream(r8, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x4, 0xb1, 0x9, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8000, 0x7, 0x2, 0x2}})
socket$inet6_udp(0xa, 0x2, 0x0)

2.371856183s ago: executing program 2 (id=1555):
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x57c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x540, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xb8, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_ACT={0x470, 0x1, [@m_ct={0x9c, 0x4, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_PARMS={0x18, 0x1, {0xf275, 0x9, 0x20000000, 0x5, 0x6}}, @TCA_CT_MARK={0x8, 0x5, 0x401}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x5}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_ACTION={0x6, 0x3, 0x5}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x13}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0x13c, 0xa, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0xffff8000, 0x7, 0xfff, 0x8000}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x531b62ffe2de50cf, 0x6, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x433f, 0x8, 0x2, 0x1, 0xfffffff9}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0xe9, 0x8, 0x8, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x0, 0x80000000, 0x401}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x2, 0x7, 0x4}, 0xb590}}]}, {0x61, 0x6, "55dfaba1400693f529d6afa25b8eb7d54bed2219557eb279b5e086635faf86a5dc7976c30161450eedae7553b4b65af5720b2fda3b8e15951fd7daf40e37b5e0a4b000dab68ce7fb11f95b4f7ac9159c30ce151c2657ddcb721c37f706"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x114, 0x4, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x4, 0x9, 0xf406}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x83b7, 0x8, 0x4, 0x10000, 0x9}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x8d, 0x6, "f81e0830424e609cbf9a2859465f8e8929071bdffd6a3315fd9d40dedafd84a79203569f233cba1bf74c9a79d7e3c92b5b779bcb6b0d1cefd7c86bb5f3c794847464cbf5e94cb251bd8421204c94effc48c4cab2d4023116a2effd33e9f1c4c84b29ddd6885d7017c746bb4d3a15a23c87f18ff019c86276086e304bc68908638aabce6cd242cd6ba6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x3, 0x8, 0x7fffffff}, @multicast1, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0xffffffffffffffff, 0x2, 0x5}, @local, @dev={0xac, 0x14, 0x14, 0x14}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x5, 0x5, 0x1}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10000000, 0x6, 0x7}, @multicast2, @empty, 0xff000000, 0x1}}]}, {0x5, 0x6, 'V'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xb0, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x85, 0x6, "e2072d360906629d431bb36bbbccaac1511d90b9eb55ba7bf8d07d865b94eb303e61fc30a599179bba3fae4101695086f60087547248bc91099294dbc3461b27e2101850438d3f20b452fa85be972c0437ad11ef8ab78e6f05fa6c04da68324d12ddb9f8d8afe532746999e1ff0363ca399fdb2be7a0ad91cae1c2bc2aeea087b4"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x57c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000300)=0x8000, 0x8)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.371605852s ago: executing program 4 (id=1556):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x4, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x2, 0x12)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)

1.931743902s ago: executing program 4 (id=1557):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x8800000000000000}, {0x0, 0x100000000000000}]}, 0x68)

1.855025223s ago: executing program 2 (id=1558):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xe, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x4, 0xa, 0x40}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r8, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="84", 0x1}, {&(0x7f0000000240)="7300007e2fdf00", 0x7}, {&(0x7f0000000440)="d99f8e1375e1059e690b7fbbe52179934a04ffcecf00d34ae1122f814ea816ddeea3e9f092cdde2b2b06c8187d8140bcaad436e26b75acf39849b92292e0d93b1e223dfe1b09f1c8d2a25c804a0c52e8ffcff510589d8a3bf4", 0x59}, {&(0x7f0000000280)="613cf2512217e3cfd3a17b65a9", 0xd}], 0x4}}], 0x1, 0x4400c800)
sendto$inet6(r8, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd)
r9 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3e8, 0x100, 0x0, 0x1f0, 0x300, 0x300, 0x300, 0x4, &(0x7f00000003c0), {[{{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cdb590495f73071c8bf01a55bd4b1816c0deec6c7c8138c9f4cca2846f45"}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 0x2, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0xff, 0x7, 0x3, 0x2, 0x8, 'erspan0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x190}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6592fbaf, 0x4, 0x7610}}}, {{@arp={@private=0x10001, @multicast1, 0x0, 0xffffff00, 0x3, 0x8, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x1, 0xf, 0x2, 0x6, 0x8, 'gretap0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x98}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @multicast2, @rand_addr=0x64010100, 0x3, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='hsr0\x00', 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @local}}, [0x7, 0x5, 0x8, 0x8000000000000001, 0x75c1, 0x7fff, 0x5, 0x5, 0x2, 0xffffffff, 0x2, 0x1, 0xc3, 0x5, 0x9]}, &(0x7f0000000540)=0x100)
read$alg(r7, &(0x7f0000000cc0)=""/4084, 0x835)

1.715232297s ago: executing program 4 (id=1559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000000201040000e300000000000a0000003c00018005000280052f0100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0xc8}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x803, 0x8)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x5}, 0x1c)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
accept4$x25(r2, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x0)
recvfrom$unix(r4, &(0x7f0000000040)=""/35, 0x23, 0x10142, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @rand_addr=0x64010101}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x1c, {0x2, 0x0, @multicast1}, 'vlan1\x00'})

1.713929823s ago: executing program 0 (id=1560):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@remote, @local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x0, 0xa64, 0x857, 0xcb4]})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x5, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x45, &(0x7f0000000600)=""/69, 0x0, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x2, 0x95}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x0, 0x8, 0x1}, 0x10, 0x161d2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r2, r2, r6, r2, r2, r2, r7], &(0x7f0000000840), 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r8, &(0x7f0000007940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x36b, @remote, 0xfffffff4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000400"], 0x66}}], 0x1, 0x800)
accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000280)=@null)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r10, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)=@dellinkprop={0x38, 0x6d, 0x511, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2, 0x440c0}, [@IFLA_IFNAME={0x14, 0x3, 'gre0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'veth1_to_hsr\x00', @multicast})

1.412017006s ago: executing program 2 (id=1561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000780900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970258adf2e3000000000000000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 12)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)

1.410772245s ago: executing program 4 (id=1562):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x28, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000140)=0x7ff, 0x12)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x10, r2}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000340)="b9ff03316844268cb89614f086ddf2658844a2fd7648728441118a26ee8efb6e3d1940c43439651322aad75001265d17a869b0268ab3", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r7}, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="a8180872d4399d4b364dc08085be39be0455d83e", 0x14}, {&(0x7f0000000140)="f3abe9b7fc3fc3316f1f321ede251bbfa2f7a9513ec2acc63fff70e60cebb7b16c5ef1b6c7642de31592decd1e6f782ba52b560dcefb153b939ed16f519dd7e5e8459682d0009efca6fe2391c574d1f4c16eff13d86f8f29231ce284ec09ed15283325849206339ae1079238b81b84232091111109c0", 0x76}, {&(0x7f0000000200)}, {&(0x7f0000000300)="557c7d4d3a9cbcf90d3d7f3648c97e3d3fa39c16b654ad28901cb762bcca2c0487c388b81587bf480eca5a533c562c3fcdbb9dd491f119466f9bdf612fe3acb72a8fa6ee64f27336c1f820819da30386792046fe0c7e520d9e4f9103e8bde9ee6ccce8bd5923666c1120c68653be6d4e7553352cc181e0ed60efa212047caad58aebe55ee15ac293e933b590", 0x8c}], 0x5, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}, 0x4094)

869.55012ms ago: executing program 2 (id=1563):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async)

660.853655ms ago: executing program 0 (id=1564):
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0)

568.081146ms ago: executing program 2 (id=1565):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x4, 0x8201, 0x0, 0x0, 0x2, 0x2fd, 0x10a1ff}})

552.647279ms ago: executing program 4 (id=1566):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0xc040814}, 0x55)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
unshare(0x24060400)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2, 0x0, 0x2}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8803, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x68ed0000)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xa03510d1aae47ac3)
r4 = socket$inet6_sctp(0xa, 0x0, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000780), 0x0, 0x801)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000500)={@remote, <r6=>0x0}, &(0x7f0000000540)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@bridge_delneigh={0x2c, 0x1d, 0x400, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, r6, 0x8, 0xb2, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x44, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x40084}, 0x90)
sendmmsg$inet6(r4, &(0x7f0000002800)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="93", 0x1}, {&(0x7f0000000140)="3de1d7b642f7ac356f90c53146f5da25324ba0d5ff63a1f0f333350e7dcc970a9792fbdbcf1c989c1b5d51c69010b1bfc1c4a222314e395df94d842352fc56d0ab56e52283e4f92d84", 0x49}, {&(0x7f0000000000)="2c177c403de9b5e34f61d8025d2148bb8def495a756ce2046cd993853aa4", 0x1e}, {&(0x7f00000001c0)="5e2d0cb9bab995a3f9ce9f2e5b4923c568e73e27481a4d81f9c5ab1756d6a3aa68893ecb5fffb0a99cfe97e96b3feea9e5b6529b3e6c0f91ffa30e0c2a3d8593df9c2c1fd0844fcccb65a5b0274e1af053f8f552c3e9e003e184d596942bc84fad6f9da0e3106beb02cbfc0ffe826dc101e73ad5387be438943f05c74a71763f7d2b33f82d6588632f9d49fddd80b985158e7084d09c418aa29faed6e60b08555b9374683f2b9ea1fef9963b08c4ca2ad749b7095be16266ca119227ed63b0600862b968680e8ae0a8ac553136426632867ac0db328a6e692eeab1752f2e10e52f11a2", 0xe3}], 0x4}}], 0x1, 0x24044854)
shutdown(r4, 0x1)
sendmsg$nl_route(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@getaddr={0x14, 0x16, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x80)
getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

205.254612ms ago: executing program 2 (id=1567):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x15}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7717c894498ad8feac1af393dcab2d9b8817935187ba8e5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x4004080)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
getpeername$ax25(r4, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000380)=@netrom={'nr', 0x0}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x4)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, 0x8)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, &(0x7f0000000480))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
accept4(r6, &(0x7f0000000080)=@qipcrtr, 0x0, 0x80000)

87.914477ms ago: executing program 0 (id=1568):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0xb)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

55.785488ms ago: executing program 3 (id=1090):
socket$nl_route(0x10, 0x3, 0x0) (async)
unshare(0x6a040000) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) (async, rerun: 32)
r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async, rerun: 32)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="418870e496b17d3f9870d7c3b1a4e7334aed8e9297d53fe3cacde857be6586af725bac6f14a466a589ea3b1a49e359bbd45408d5bccd9428a53c3122472879ae2a00e887e7d4d2e1baf56e38ab3917995adcbf781406dac67fd4c13f9a713f18940ea2e4624ef69fff24c9271ce157e86fa944585b10f2b13d7e4b0736d1856cb996d34288", 0x85}, {&(0x7f0000000400)="2f93a4b07fc287328d490758435a07427129cb092b23d0522ccac2fcc7b23124572047187f683ba8a343a8309ec9ddf086a950139682efea6c356003d16d073d31bac701a786c75ccf99f3c02c34c7ea4ffae6f766b7952c86fbf9f4e69e0ac4d1ca8b6e60447c1033", 0x69}, {&(0x7f0000000140)="3742b9c98dc106701049805464e952953cceab4241c8c3a27fd715edd786920ffa1f5efd6f5f2d7171a7ad624602ad67689bd9b6ab43a1e0f3c4a5", 0x3b}, {&(0x7f0000000480)="818cb6e2552541bccf2d886691f65235f5ba131b", 0x14}], 0x4}, 0xc4) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) (async)
sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000) (async, rerun: 32)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c) (rerun: 32)
sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28)

0s ago: executing program 4 (id=1569):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

? lockdep_hardirqs_on+0x9c/0x150
[  315.670486][T10524]  ? __local_bh_enable_ip+0x12d/0x1c0
[  315.670517][T10524]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  315.670553][T10524]  ? __dev_queue_xmit+0x27e/0x3a70
[  315.670635][T10524]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  315.670659][T10524]  rtnetlink_rcv_msg+0x7cc/0xb70
[  315.670688][T10524]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  315.670712][T10524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  315.670735][T10524]  ? ref_tracker_free+0x63a/0x7d0
[  315.670766][T10524]  ? __copy_skb_header+0xa7/0x550
[  315.670798][T10524]  ? __pfx_ref_tracker_free+0x10/0x10
[  315.670825][T10524]  ? __skb_clone+0x63/0x7a0
[  315.670863][T10524]  netlink_rcv_skb+0x208/0x470
[  315.670889][T10524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  315.670918][T10524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  315.670961][T10524]  ? netlink_deliver_tap+0x2e/0x1b0
[  315.670986][T10524]  ? netlink_deliver_tap+0x2e/0x1b0
[  315.671020][T10524]  netlink_unicast+0x75b/0x8d0
[  315.671055][T10524]  netlink_sendmsg+0x805/0xb30
[  315.671097][T10524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  315.671129][T10524]  ? aa_sock_msg_perm+0x94/0x160
[  315.671159][T10524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  315.671186][T10524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  315.671214][T10524]  __sock_sendmsg+0x219/0x270
[  315.671240][T10524]  ____sys_sendmsg+0x505/0x830
[  315.671277][T10524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  315.671321][T10524]  ? import_iovec+0x74/0xa0
[  315.671344][T10524]  ___sys_sendmsg+0x21f/0x2a0
[  315.671378][T10524]  ? __pfx____sys_sendmsg+0x10/0x10
[  315.671449][T10524]  ? __fget_files+0x2a/0x420
[  315.671472][T10524]  ? __fget_files+0x3a0/0x420
[  315.671507][T10524]  __x64_sys_sendmsg+0x19b/0x260
[  315.671542][T10524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  315.671583][T10524]  ? __pfx_ksys_write+0x10/0x10
[  315.671613][T10524]  ? rcu_is_watching+0x15/0xb0
[  315.671652][T10524]  ? do_syscall_64+0xbe/0x3b0
[  315.671682][T10524]  do_syscall_64+0xfa/0x3b0
[  315.671706][T10524]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.671730][T10524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.671751][T10524]  ? clear_bhb_loop+0x60/0xb0
[  315.671778][T10524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.671799][T10524] RIP: 0033:0x7f922038e929
[  315.671819][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.671838][T10524] RSP: 002b:00007f92211c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  315.671861][T10524] RAX: ffffffffffffffda RBX: 00007f92205b5fa0 RCX: 00007f922038e929
[  315.671877][T10524] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000005
[  315.671891][T10524] RBP: 00007f92211c1090 R08: 0000000000000000 R09: 0000000000000000
[  315.671904][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.671916][T10524] R13: 0000000000000000 R14: 00007f92205b5fa0 R15: 00007ffefe238c78
[  315.671961][T10524]  </TASK>
[  316.270680][ T5841] Bluetooth: hci9: command tx timeout
[  316.651742][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.659626][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.723377][T10535] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1315'.
[  316.839499][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.840156][T10387] veth0_vlan: entered promiscuous mode
[  316.864500][T10387] veth1_vlan: entered promiscuous mode
[  316.882984][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.936784][T10540] syzkaller1: entered promiscuous mode
[  316.948588][T10540] syzkaller1: entered allmulticast mode
[  317.078219][T10387] veth0_macvtap: entered promiscuous mode
[  317.114027][T10387] veth1_macvtap: entered promiscuous mode
[  317.165380][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.238056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.383402][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.478168][ T2114] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.513078][ T2114] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.629900][ T2114] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.676839][ T2114] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.021454][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.029346][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.117597][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.139995][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.533693][T10574] syzkaller1: entered promiscuous mode
[  319.550445][T10574] syzkaller1: entered allmulticast mode
[  319.575738][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1330'.
[  320.139774][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.177584][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.194475][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.281659][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.295488][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.518528][T10594] vxcan1 speed is unknown, defaulting to 1000
[  320.789632][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1336'.
[  321.301652][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1338'.
[  321.320837][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1338'.
[  321.363955][T10588] vxcan1 speed is unknown, defaulting to 1000
[  321.376640][T10620] syzkaller1: entered promiscuous mode
[  321.409602][T10620] syzkaller1: entered allmulticast mode
[  321.873954][T10616] vxcan1 speed is unknown, defaulting to 1000
[  322.432409][ T5842] Bluetooth: hci2: command tx timeout
[  322.630943][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.636594][T10588] chnl_net:caif_netlink_parms(): no params data found
[  322.641820][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.668960][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.679263][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.687385][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.694175][T10635] FAULT_INJECTION: forcing a failure.
[  322.694175][T10635] name failslab, interval 1, probability 0, space 0, times 0
[  322.740518][T10635] CPU: 1 UID: 0 PID: 10635 Comm: syz.5.1347 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  322.740550][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  322.740565][T10635] Call Trace:
[  322.740573][T10635]  <TASK>
[  322.740582][T10635]  dump_stack_lvl+0x189/0x250
[  322.740621][T10635]  ? __pfx____ratelimit+0x10/0x10
[  322.740646][T10635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.740680][T10635]  ? __pfx__printk+0x10/0x10
[  322.740711][T10635]  ? __pfx___might_resched+0x10/0x10
[  322.740751][T10635]  should_fail_ex+0x414/0x560
[  322.740790][T10635]  should_failslab+0xa8/0x100
[  322.740815][T10635]  __kmalloc_cache_noprof+0x70/0x3d0
[  322.740835][T10635]  ? ovs_ct_limit_cmd_set+0x2f7/0xb00
[  322.740874][T10635]  ovs_ct_limit_cmd_set+0x2f7/0xb00
[  322.740926][T10635]  genl_family_rcv_msg_doit+0x212/0x300
[  322.740970][T10635]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  322.741021][T10635]  ? bpf_lsm_capable+0x9/0x20
[  322.741040][T10635]  ? security_capable+0x7e/0x2e0
[  322.741075][T10635]  genl_rcv_msg+0x60e/0x790
[  322.741117][T10635]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.741147][T10635]  ? ref_tracker_free+0x63a/0x7d0
[  322.741173][T10635]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  322.741207][T10635]  ? __pfx_ref_tracker_free+0x10/0x10
[  322.741250][T10635]  netlink_rcv_skb+0x208/0x470
[  322.741277][T10635]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.741316][T10635]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  322.741368][T10635]  ? down_read+0x1ad/0x2e0
[  322.741399][T10635]  genl_rcv+0x28/0x40
[  322.741427][T10635]  netlink_unicast+0x75b/0x8d0
[  322.741465][T10635]  netlink_sendmsg+0x805/0xb30
[  322.741504][T10635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.741536][T10635]  ? aa_sock_msg_perm+0x94/0x160
[  322.741565][T10635]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  322.741591][T10635]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.741619][T10635]  __sock_sendmsg+0x219/0x270
[  322.741646][T10635]  ____sys_sendmsg+0x505/0x830
[  322.741685][T10635]  ? __pfx_____sys_sendmsg+0x10/0x10
[  322.741728][T10635]  ? import_iovec+0x74/0xa0
[  322.741753][T10635]  ___sys_sendmsg+0x21f/0x2a0
[  322.741788][T10635]  ? __pfx____sys_sendmsg+0x10/0x10
[  322.741865][T10635]  ? __fget_files+0x2a/0x420
[  322.741887][T10635]  ? __fget_files+0x3a0/0x420
[  322.741924][T10635]  __x64_sys_sendmsg+0x19b/0x260
[  322.741960][T10635]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  322.742004][T10635]  ? __pfx_ksys_write+0x10/0x10
[  322.742034][T10635]  ? rcu_is_watching+0x15/0xb0
[  322.742074][T10635]  ? do_syscall_64+0xbe/0x3b0
[  322.742105][T10635]  do_syscall_64+0xfa/0x3b0
[  322.742128][T10635]  ? lockdep_hardirqs_on+0x9c/0x150
[  322.742152][T10635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.742174][T10635]  ? clear_bhb_loop+0x60/0xb0
[  322.742201][T10635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.742222][T10635] RIP: 0033:0x7f2b3018e929
[  322.742241][T10635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.742260][T10635] RSP: 002b:00007f2b310c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.742283][T10635] RAX: ffffffffffffffda RBX: 00007f2b303b5fa0 RCX: 00007f2b3018e929
[  322.742299][T10635] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003
[  322.742313][T10635] RBP: 00007f2b310c6090 R08: 0000000000000000 R09: 0000000000000000
[  322.742326][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  322.742344][T10635] R13: 0000000000000000 R14: 00007f2b303b5fa0 R15: 00007fff5b3daee8
[  322.742380][T10635]  </TASK>
[  323.333449][T10588] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.340676][T10588] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.348119][T10588] bridge_slave_0: entered allmulticast mode
[  323.356315][T10588] bridge_slave_0: entered promiscuous mode
[  323.366174][T10632] vxcan1 speed is unknown, defaulting to 1000
[  323.366466][T10588] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.380943][T10588] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.388469][T10588] bridge_slave_1: entered allmulticast mode
[  323.396308][T10588] bridge_slave_1: entered promiscuous mode
[  323.518258][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.578474][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  323.765129][T10588] team0: Port device team_slave_0 added
[  323.812105][T10642] vxcan1 speed is unknown, defaulting to 1000
[  323.824678][T10588] team0: Port device team_slave_1 added
[  324.044598][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  324.052195][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.079970][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.112188][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.124122][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.161882][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  324.336931][T10588] hsr_slave_0: entered promiscuous mode
[  324.345820][T10588] hsr_slave_1: entered promiscuous mode
[  324.353023][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.360617][T10588] Cannot create hsr debugfs directory
[  324.512171][ T5841] Bluetooth: hci2: command tx timeout
[  324.644949][T10632] chnl_net:caif_netlink_parms(): no params data found
[  324.752359][ T5841] Bluetooth: hci7: command tx timeout
[  324.825969][T10632] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.833579][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.841468][T10632] bridge_slave_0: entered allmulticast mode
[  324.850455][T10632] bridge_slave_0: entered promiscuous mode
[  324.860142][T10632] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.867597][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.875185][T10632] bridge_slave_1: entered allmulticast mode
[  324.884690][T10632] bridge_slave_1: entered promiscuous mode
[  324.946647][T10588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.994695][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.009475][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.057377][T10588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.098251][T10632] team0: Port device team_slave_0 added
[  325.108899][T10632] team0: Port device team_slave_1 added
[  325.168742][T10588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.210598][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.219631][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.253291][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.278531][T10588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.306050][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.314847][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.343480][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.456360][T10632] hsr_slave_0: entered promiscuous mode
[  325.463230][T10632] hsr_slave_1: entered promiscuous mode
[  325.469454][T10632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.477560][T10632] Cannot create hsr debugfs directory
[  325.667581][T10588] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  325.680628][T10588] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  325.714845][T10588] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  325.745872][T10588] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  325.818177][T10632] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.905860][T10632] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.974239][T10632] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.012628][T10588] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.044375][T10588] 8021q: adding VLAN 0 to HW filter on device team0
[  326.069623][T10632] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.096705][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.103902][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.119654][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.126935][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.314071][T10632] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  326.337352][T10632] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  326.354561][T10632] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  326.393299][T10632] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  326.592451][ T5841] Bluetooth: hci2: command tx timeout
[  326.613733][T10632] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.637128][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.660798][T10632] 8021q: adding VLAN 0 to HW filter on device team0
[  326.693760][  T176] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.700947][  T176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.723697][  T176] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.730861][  T176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.805177][T10588] veth0_vlan: entered promiscuous mode
[  326.845652][ T5841] Bluetooth: hci7: command tx timeout
[  326.876933][T10588] veth1_vlan: entered promiscuous mode
[  326.973972][T10588] veth0_macvtap: entered promiscuous mode
[  327.002344][T10588] veth1_macvtap: entered promiscuous mode
[  327.050821][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.096482][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.109900][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.134380][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.185576][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.196021][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.277622][T10632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.359027][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.382870][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.446186][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.456776][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.773255][T10632] veth0_vlan: entered promiscuous mode
[  327.791213][T10632] veth1_vlan: entered promiscuous mode
[  327.838468][T10632] veth0_macvtap: entered promiscuous mode
[  327.849967][T10632] veth1_macvtap: entered promiscuous mode
[  327.886724][T10632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.907824][T10632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.926421][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.936307][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.952562][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.970538][   T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.065752][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.073740][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.144694][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.153913][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.598921][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  329.611925][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  329.622760][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  329.632740][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  329.640552][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  329.744564][T10677] vxcan1 speed is unknown, defaulting to 1000
[  329.767863][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  329.778313][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  329.786682][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  329.803002][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  329.812289][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  330.052067][T10679] vxcan1 speed is unknown, defaulting to 1000
[  330.316384][T10677] chnl_net:caif_netlink_parms(): no params data found
[  330.526553][T10677] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.535997][T10677] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.548318][T10677] bridge_slave_0: entered allmulticast mode
[  330.558366][T10677] bridge_slave_0: entered promiscuous mode
[  330.568973][T10677] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.576746][T10677] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.584580][T10677] bridge_slave_1: entered allmulticast mode
[  330.592807][T10677] bridge_slave_1: entered promiscuous mode
[  330.690723][T10677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.732427][T10677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.809321][T10677] team0: Port device team_slave_0 added
[  330.826415][T10677] team0: Port device team_slave_1 added
[  330.905977][T10677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.914368][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.943919][T10677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.967648][T10677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.974771][T10677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.005391][T10677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.017383][T10679] chnl_net:caif_netlink_parms(): no params data found
[  331.128519][T10677] hsr_slave_0: entered promiscuous mode
[  331.136012][T10677] hsr_slave_1: entered promiscuous mode
[  331.143092][T10677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.150684][T10677] Cannot create hsr debugfs directory
[  331.296036][T10679] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.303917][T10679] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.311209][T10679] bridge_slave_0: entered allmulticast mode
[  331.326517][T10679] bridge_slave_0: entered promiscuous mode
[  331.339429][T10679] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.347998][T10679] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.355924][T10679] bridge_slave_1: entered allmulticast mode
[  331.369099][T10679] bridge_slave_1: entered promiscuous mode
[  331.430313][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.443686][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.528828][T10679] team0: Port device team_slave_0 added
[  331.575627][T10679] team0: Port device team_slave_1 added
[  331.623144][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.630138][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.657276][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.680605][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.690889][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.718874][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.723182][ T5841] Bluetooth: hci2: command tx timeout
[  331.800489][T10677] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.843059][T10679] hsr_slave_0: entered promiscuous mode
[  331.849704][T10679] hsr_slave_1: entered promiscuous mode
[  331.856348][T10679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  331.868337][T10679] Cannot create hsr debugfs directory
[  331.878326][ T5841] Bluetooth: hci7: command tx timeout
[  331.931857][T10677] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.027839][T10677] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.105345][T10677] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.251148][T10679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.333347][T10679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.396649][T10679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.471554][T10679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.620150][T10677] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  332.653916][T10677] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  332.692170][T10677] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  332.739779][T10677] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  332.880766][T10679] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  332.909998][T10679] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  332.943563][T10679] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  332.967767][T10679] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.182921][T10677] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.247865][T10679] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.274146][T10679] 8021q: adding VLAN 0 to HW filter on device team0
[  333.299473][T10677] 8021q: adding VLAN 0 to HW filter on device team0
[  333.317755][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.324991][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.335097][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.342300][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.368181][  T176] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.375407][  T176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.407539][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.414742][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.792516][ T5841] Bluetooth: hci2: command tx timeout
[  333.842094][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.943928][T10679] veth0_vlan: entered promiscuous mode
[  333.961258][ T5841] Bluetooth: hci7: command tx timeout
[  333.969880][T10679] veth1_vlan: entered promiscuous mode
[  333.984916][T10677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.045812][T10679] veth0_macvtap: entered promiscuous mode
[  334.068714][T10679] veth1_macvtap: entered promiscuous mode
[  334.109692][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.138410][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.162387][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.171238][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.202966][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.213124][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.380033][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.404454][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.468800][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.478275][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.664130][T10677] veth0_vlan: entered promiscuous mode
[  334.685500][T10677] veth1_vlan: entered promiscuous mode
[  334.723475][T10677] veth0_macvtap: entered promiscuous mode
[  334.735570][T10677] veth1_macvtap: entered promiscuous mode
[  334.778875][T10677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.808722][T10677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.824072][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.841751][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.863903][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.876204][   T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.969499][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.989961][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.035229][  T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.043961][  T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.481240][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  335.490794][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  335.499797][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  335.510245][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  335.524171][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  335.582359][T10721] vxcan1 speed is unknown, defaulting to 1000
[  336.308068][T10721] chnl_net:caif_netlink_parms(): no params data found
[  336.447420][T10721] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.455969][T10721] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.463721][T10721] bridge_slave_0: entered allmulticast mode
[  336.471831][T10721] bridge_slave_0: entered promiscuous mode
[  336.489044][T10721] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.496351][T10721] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.504049][T10721] bridge_slave_1: entered allmulticast mode
[  336.511850][T10721] bridge_slave_1: entered promiscuous mode
[  336.561108][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.576170][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.630124][T10721] team0: Port device team_slave_0 added
[  336.639155][T10721] team0: Port device team_slave_1 added
[  336.684533][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.694684][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.721874][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.735445][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.742994][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.770654][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.838285][T10721] hsr_slave_0: entered promiscuous mode
[  336.845563][T10721] hsr_slave_1: entered promiscuous mode
[  336.853004][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.860597][T10721] Cannot create hsr debugfs directory
[  337.055050][T10721] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.065785][T10721] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  337.173102][T10721] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.192259][T10721] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  337.473630][T10721] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.521439][T10721] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  337.552301][ T5842] Bluetooth: hci2: command tx timeout
[  337.785808][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  337.795548][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  337.821664][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  337.830849][T10721] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.851653][T10721] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  337.862207][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  337.871065][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.974830][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  337.989017][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  337.996651][T10732] vxcan1 speed is unknown, defaulting to 1000
[  338.003465][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  338.043153][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  338.054252][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  338.203433][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  338.214645][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  338.230228][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  338.240220][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  338.249390][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  338.279407][T10721] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  338.295776][T10721] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  338.362545][T10721] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  338.405128][T10721] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  338.517019][T10734] vxcan1 speed is unknown, defaulting to 1000
[  338.878221][T10736] vxcan1 speed is unknown, defaulting to 1000
[  339.057808][T10721] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.171972][T10732] chnl_net:caif_netlink_parms(): no params data found
[  339.342588][T10721] 8021q: adding VLAN 0 to HW filter on device team0
[  339.455528][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.462791][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.535993][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.543241][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.572643][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  339.582180][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  339.590294][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  339.599001][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  339.607123][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  339.639610][ T5841] Bluetooth: hci2: command tx timeout
[  339.703055][T10732] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.710449][T10732] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.720752][T10732] bridge_slave_0: entered allmulticast mode
[  339.733197][T10732] bridge_slave_0: entered promiscuous mode
[  339.742170][T10732] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.749338][T10732] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.757473][T10732] bridge_slave_1: entered allmulticast mode
[  339.771186][T10732] bridge_slave_1: entered promiscuous mode
[  339.908432][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.921021][T10752] vxcan1 speed is unknown, defaulting to 1000
[  339.951681][ T5841] Bluetooth: hci7: command tx timeout
[  339.992893][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.112591][ T5841] Bluetooth: hci10: command tx timeout
[  340.247148][T10732] team0: Port device team_slave_0 added
[  340.275518][ T5841] Bluetooth: hci11: command tx timeout
[  340.336945][T10732] team0: Port device team_slave_1 added
[  340.456216][T10734] chnl_net:caif_netlink_parms(): no params data found
[  340.525969][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.534269][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.560923][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.574789][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.587449][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.616106][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.930491][T10732] hsr_slave_0: entered promiscuous mode
[  340.953847][T10732] hsr_slave_1: entered promiscuous mode
[  340.960456][T10732] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.980525][T10732] Cannot create hsr debugfs directory
[  341.001124][T10736] chnl_net:caif_netlink_parms(): no params data found
[  341.104700][T10734] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.112475][T10734] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.119828][T10734] bridge_slave_0: entered allmulticast mode
[  341.128111][T10734] bridge_slave_0: entered promiscuous mode
[  341.209542][T10734] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.218991][T10734] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.226942][T10734] bridge_slave_1: entered allmulticast mode
[  341.238455][T10734] bridge_slave_1: entered promiscuous mode
[  341.339820][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.477095][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.550186][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.631823][ T5841] Bluetooth: hci12: command tx timeout
[  341.723144][ T5841] Bluetooth: hci2: command tx timeout
[  341.730709][T10736] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.753989][T10736] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.772615][T10736] bridge_slave_0: entered allmulticast mode
[  341.793246][T10736] bridge_slave_0: entered promiscuous mode
[  341.830049][T10734] team0: Port device team_slave_0 added
[  341.838776][T10736] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.846554][T10736] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.854248][T10736] bridge_slave_1: entered allmulticast mode
[  341.862579][T10736] bridge_slave_1: entered promiscuous mode
[  341.967789][T10752] chnl_net:caif_netlink_parms(): no params data found
[  341.985742][T10734] team0: Port device team_slave_1 added
[  342.032256][ T5841] Bluetooth: hci7: command tx timeout
[  342.112466][T10736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  342.165127][T10736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.176074][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.184373][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.213044][ T5841] Bluetooth: hci10: command tx timeout
[  342.228513][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.296213][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.306106][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.338201][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.364751][ T5841] Bluetooth: hci11: command tx timeout
[  342.415946][T10736] team0: Port device team_slave_0 added
[  342.488131][T10732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.510092][T10736] team0: Port device team_slave_1 added
[  342.594157][T10752] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.611624][T10752] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.619132][T10752] bridge_slave_0: entered allmulticast mode
[  342.633225][T10752] bridge_slave_0: entered promiscuous mode
[  342.703169][T10732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.724042][T10752] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.738102][T10752] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.746125][T10752] bridge_slave_1: entered allmulticast mode
[  342.756794][T10752] bridge_slave_1: entered promiscuous mode
[  342.777308][T10734] hsr_slave_0: entered promiscuous mode
[  342.784591][T10734] hsr_slave_1: entered promiscuous mode
[  342.791115][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.798965][T10734] Cannot create hsr debugfs directory
[  342.895552][T10736] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.903887][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.941273][T10736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.976033][T10736] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.983603][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.010436][T10736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.047551][T10732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.111743][T10732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.179310][T10752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.256614][T10752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.306439][T10736] hsr_slave_0: entered promiscuous mode
[  343.333289][T10736] hsr_slave_1: entered promiscuous mode
[  343.339852][T10736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.359147][T10736] Cannot create hsr debugfs directory
[  343.460288][T10752] team0: Port device team_slave_0 added
[  343.468900][T10721] veth0_vlan: entered promiscuous mode
[  343.500927][T10752] team0: Port device team_slave_1 added
[  343.592170][T10721] veth1_vlan: entered promiscuous mode
[  343.675156][T10752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.691658][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.718837][ T5841] Bluetooth: hci12: command tx timeout
[  343.720737][T10752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.740551][T10752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.748024][T10752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.780697][T10752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.791969][ T5841] Bluetooth: hci2: command tx timeout
[  343.974157][T10732] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  343.986813][T10732] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  344.080379][T10732] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  344.159288][ T5842] Bluetooth: hci7: command tx timeout
[  344.186315][T10752] hsr_slave_0: entered promiscuous mode
[  344.194071][T10752] hsr_slave_1: entered promiscuous mode
[  344.200555][T10752] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.208205][T10752] Cannot create hsr debugfs directory
[  344.235811][T10732] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  344.272404][ T5841] Bluetooth: hci10: command tx timeout
[  344.299715][T10721] veth0_macvtap: entered promiscuous mode
[  344.375087][T10721] veth1_macvtap: entered promiscuous mode
[  344.432417][ T5841] Bluetooth: hci11: command tx timeout
[  344.496805][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.556630][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.610049][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.621003][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.669850][T10736] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.718701][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.729190][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.786145][T10736] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.891187][T10736] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.972452][T10736] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.020347][T10732] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.049582][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.067594][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.127746][T10732] 8021q: adding VLAN 0 to HW filter on device team0
[  345.167014][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.174260][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.235437][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.242652][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.272262][  T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.297163][  T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.388849][T10734] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  345.477233][T10734] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  345.509997][T10752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  345.543037][T10752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  345.666688][T10734] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  345.694835][T10734] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  345.749268][T10752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  345.765944][T10752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  345.793908][ T5841] Bluetooth: hci12: command tx timeout
[  345.835231][T10752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  345.864196][T10752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  346.018345][T10752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  346.063836][T10752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  346.192707][ T5841] Bluetooth: hci7: command tx timeout
[  346.225341][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.324436][T10812] syzkaller1: entered promiscuous mode
[  346.330137][T10812] syzkaller1: entered allmulticast mode
[  346.352441][ T5841] Bluetooth: hci10: command tx timeout
[  346.430338][T10734] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.505918][T10734] 8021q: adding VLAN 0 to HW filter on device team0
[  346.513335][ T5841] Bluetooth: hci11: command tx timeout
[  346.529726][T10752] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  346.588180][T10752] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  346.656762][T10752] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  346.703774][T10752] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  346.728354][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.735584][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.751949][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.759140][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.792848][T10732] veth0_vlan: entered promiscuous mode
[  346.903120][T10816] syzkaller0: entered promiscuous mode
[  346.908774][T10816] syzkaller0: entered allmulticast mode
[  347.036978][T10732] veth1_vlan: entered promiscuous mode
[  347.873915][ T5841] Bluetooth: hci12: command tx timeout
[  349.019437][T10736] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  349.047729][T10736] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  349.059698][T10736] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  349.087640][T10736] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  349.194563][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  349.444100][T10732] veth0_macvtap: entered promiscuous mode
[  349.484930][T10732] veth1_macvtap: entered promiscuous mode
[  349.603988][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.669708][T10752] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.722069][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.764893][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.828975][  T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.853270][  T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.863402][  T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.924256][  T176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.947582][T10752] 8021q: adding VLAN 0 to HW filter on device team0
[  349.972158][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.979340][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.064384][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.071646][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.157819][T10839] syzkaller0: entered promiscuous mode
[  350.163853][T10839] syzkaller0: entered allmulticast mode
[  350.208818][T10736] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.214161][T10736] 8021q: adding VLAN 0 to HW filter on device team0
[  352.228951][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.262496][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.329100][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.336977][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.374561][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.381862][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.417303][T10846] xt_hashlimit: size too large, truncated to 1048576
[  352.425165][T10846] xt_hashlimit: max too large, truncated to 1048576
[  352.438654][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'.
[  352.487734][T10846] hsr_slave_0: left promiscuous mode
[  352.496468][T10846] hsr_slave_1: left promiscuous mode
[  352.735476][  T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.743746][T10734] veth0_vlan: entered promiscuous mode
[  352.768998][  T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.901137][T10734] veth1_vlan: entered promiscuous mode
[  352.955630][T10736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.164131][T10734] veth0_macvtap: entered promiscuous mode
[  353.206927][T10734] veth1_macvtap: entered promiscuous mode
[  353.247766][T10752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.268545][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.316814][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.373934][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.411853][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.534974][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.556942][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.886858][T10736] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.098638][T10752] veth0_vlan: entered promiscuous mode
[  354.203347][T10752] veth1_vlan: entered promiscuous mode
[  354.216783][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.257466][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.498931][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.554046][T10752] veth0_macvtap: entered promiscuous mode
[  354.571872][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.605859][T10752] veth1_macvtap: entered promiscuous mode
[  354.696180][T10752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.769535][T10752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.835666][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.851572][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.886547][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.911394][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.144959][T10788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.181723][T10788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.279659][T10736] veth0_vlan: entered promiscuous mode
[  355.295919][ T2114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.340248][ T2114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.357204][T10736] veth1_vlan: entered promiscuous mode
[  355.440089][T10736] veth0_macvtap: entered promiscuous mode
[  355.480384][T10736] veth1_macvtap: entered promiscuous mode
[  355.513809][T10736] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.539450][T10736] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.559220][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.568761][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.579715][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.592671][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.719721][T10788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.729595][T10788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.886226][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'.
[  355.920174][ T2114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.934481][T10872] bond_slave_0: entered promiscuous mode
[  355.940267][T10872] bond_slave_1: entered promiscuous mode
[  355.969273][T10872] macsec1: entered allmulticast mode
[  355.971851][ T2114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.005383][T10872] bond0: entered allmulticast mode
[  356.012210][T10872] bond_slave_0: entered allmulticast mode
[  356.028219][T10872] bond_slave_1: entered allmulticast mode
[  356.048731][T10872] bond0: left allmulticast mode
[  356.069002][T10872] bond_slave_0: left allmulticast mode
[  356.074972][T10872] bond_slave_1: left allmulticast mode
[  356.092375][T10872] bond_slave_0: left promiscuous mode
[  356.097881][T10872] bond_slave_1: left promiscuous mode
[  356.258957][T10882] netlink: 724 bytes leftover after parsing attributes in process `syz.0.1362'.
[  356.291251][T10882] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1362'.
[  356.382424][T10880] veth0: entered promiscuous mode
[  356.411903][T10880] vlan2: entered promiscuous mode
[  356.544129][T10886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.691112][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'.
[  356.709370][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  356.719187][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  356.742446][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  356.763708][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  356.794265][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  356.946004][T10890] vxcan1 speed is unknown, defaulting to 1000
[  357.843329][T10890] chnl_net:caif_netlink_parms(): no params data found
[  358.008305][T10890] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.015884][T10890] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.024024][T10890] bridge_slave_0: entered allmulticast mode
[  358.040122][T10890] bridge_slave_0: entered promiscuous mode
[  358.075019][T10890] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.082967][T10905] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1368'.
[  358.119054][T10890] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.130536][T10890] bridge_slave_1: entered allmulticast mode
[  358.139348][T10890] bridge_slave_1: entered promiscuous mode
[  358.288552][T10911] netlink: 'syz.0.1369': attribute type 10 has an invalid length.
[  358.304495][T10890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.325824][T10913] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 1, id = 0
[  358.335344][T10890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.413443][T10911] veth0_vlan: left promiscuous mode
[  358.435542][T10911] veth0_vlan: entered promiscuous mode
[  358.476850][T10911] team0: Device veth0_vlan failed to register rx_handler
[  358.731044][T10890] team0: Port device team_slave_0 added
[  358.759542][T10890] team0: Port device team_slave_1 added
[  358.838216][ T5841] Bluetooth: hci7: command tx timeout
[  358.929714][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  358.943239][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  358.953719][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  358.963374][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  358.973877][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  359.033790][T10890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.040796][T10890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.123893][T10890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.188566][T10890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.254999][T10890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.334352][T10890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.603706][T10924] vxcan1 speed is unknown, defaulting to 1000
[  359.617680][T10890] hsr_slave_0: entered promiscuous mode
[  359.647345][T10890] hsr_slave_1: entered promiscuous mode
[  359.664553][T10890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.704828][T10890] Cannot create hsr debugfs directory
[  360.146224][T10950] syzkaller1: entered promiscuous mode
[  360.160835][T10950] syzkaller1: entered allmulticast mode
[  360.276744][T10960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1380'.
[  360.301850][T10960] FAULT_INJECTION: forcing a failure.
[  360.301850][T10960] name failslab, interval 1, probability 0, space 0, times 0
[  360.347105][T10960] CPU: 0 UID: 0 PID: 10960 Comm: syz.1.1380 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  360.347137][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  360.347150][T10960] Call Trace:
[  360.347158][T10960]  <TASK>
[  360.347168][T10960]  dump_stack_lvl+0x189/0x250
[  360.347206][T10960]  ? __pfx____ratelimit+0x10/0x10
[  360.347231][T10960]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.347263][T10960]  ? __pfx__printk+0x10/0x10
[  360.347292][T10960]  ? __pfx___might_resched+0x10/0x10
[  360.347324][T10960]  ? fs_reclaim_acquire+0x7d/0x100
[  360.347354][T10960]  should_fail_ex+0x414/0x560
[  360.347386][T10960]  should_failslab+0xa8/0x100
[  360.347410][T10960]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  360.347444][T10960]  ? __alloc_skb+0x112/0x2d0
[  360.347476][T10960]  __alloc_skb+0x112/0x2d0
[  360.347507][T10960]  netlink_ack+0x146/0xa50
[  360.347529][T10960]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.347557][T10960]  ? ref_tracker_free+0x63a/0x7d0
[  360.347595][T10960]  ? __pfx_ref_tracker_free+0x10/0x10
[  360.347635][T10960]  netlink_rcv_skb+0x28c/0x470
[  360.347662][T10960]  ? __pfx_genl_rcv_msg+0x10/0x10
[  360.347713][T10960]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  360.347761][T10960]  ? down_read+0x1ad/0x2e0
[  360.347793][T10960]  genl_rcv+0x28/0x40
[  360.347823][T10960]  netlink_unicast+0x75b/0x8d0
[  360.347860][T10960]  netlink_sendmsg+0x805/0xb30
[  360.347899][T10960]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.347930][T10960]  ? aa_sock_msg_perm+0x94/0x160
[  360.347959][T10960]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  360.347985][T10960]  ? __pfx_netlink_sendmsg+0x10/0x10
[  360.348013][T10960]  __sock_sendmsg+0x219/0x270
[  360.348040][T10960]  ____sys_sendmsg+0x505/0x830
[  360.348080][T10960]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.348123][T10960]  ? import_iovec+0x74/0xa0
[  360.348148][T10960]  ___sys_sendmsg+0x21f/0x2a0
[  360.348194][T10960]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.348269][T10960]  ? __fget_files+0x2a/0x420
[  360.348291][T10960]  ? __fget_files+0x3a0/0x420
[  360.348327][T10960]  __x64_sys_sendmsg+0x19b/0x260
[  360.348361][T10960]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  360.348403][T10960]  ? __pfx_ksys_write+0x10/0x10
[  360.348432][T10960]  ? rcu_is_watching+0x15/0xb0
[  360.348471][T10960]  ? do_syscall_64+0xbe/0x3b0
[  360.348500][T10960]  do_syscall_64+0xfa/0x3b0
[  360.348523][T10960]  ? lockdep_hardirqs_on+0x9c/0x150
[  360.348545][T10960]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.348576][T10960]  ? clear_bhb_loop+0x60/0xb0
[  360.348602][T10960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.348623][T10960] RIP: 0033:0x7f8c5fb8e929
[  360.348642][T10960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.348661][T10960] RSP: 002b:00007f8c60935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.348683][T10960] RAX: ffffffffffffffda RBX: 00007f8c5fdb5fa0 RCX: 00007f8c5fb8e929
[  360.348699][T10960] RDX: 0000000020008800 RSI: 0000200000001100 RDI: 0000000000000003
[  360.348713][T10960] RBP: 00007f8c60935090 R08: 0000000000000000 R09: 0000000000000000
[  360.348726][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.348739][T10960] R13: 0000000000000000 R14: 00007f8c5fdb5fa0 R15: 00007ffd03a0e168
[  360.348774][T10960]  </TASK>
[  360.922506][ T5841] Bluetooth: hci7: command tx timeout
[  361.072350][ T5841] Bluetooth: hci11: command tx timeout
[  361.176348][T10966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.351233][T10966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.557884][T10890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.632362][T10966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.670540][T10970] vxcan1 speed is unknown, defaulting to 1000
[  361.796593][T10890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.132029][T10966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.267099][T10890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.543730][T10890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.618066][T10924] chnl_net:caif_netlink_parms(): no params data found
[  362.764997][ T2114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.992240][ T5841] Bluetooth: hci7: command tx timeout
[  363.002136][ T2114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.038263][ T2114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.149476][T10788] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.153468][ T5841] Bluetooth: hci11: command tx timeout
[  363.190914][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'.
[  363.279243][T10924] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.302521][T10924] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.351425][T10924] bridge_slave_0: entered allmulticast mode
[  363.374313][T10924] bridge_slave_0: entered promiscuous mode
[  363.434807][T10924] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.458150][T10924] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.473279][T10924] bridge_slave_1: entered allmulticast mode
[  363.483170][T10924] bridge_slave_1: entered promiscuous mode
[  363.565490][T11012] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  363.589401][T11012] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  363.626828][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  363.686312][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.713924][T10890] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  363.762631][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.815077][T10890] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  363.859999][T10890] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  364.341392][T10890] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  364.383138][T10924] team0: Port device team_slave_0 added
[  364.418393][T10924] team0: Port device team_slave_1 added
[  364.634737][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'.
[  364.672831][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.679832][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.774416][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.801860][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.819092][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.882096][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.072623][ T5841] Bluetooth: hci7: command tx timeout
[  365.252969][ T5841] Bluetooth: hci11: command tx timeout
[  365.324214][T10924] hsr_slave_0: entered promiscuous mode
[  365.331169][T10924] hsr_slave_1: entered promiscuous mode
[  365.385647][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  365.440225][T10924] Cannot create hsr debugfs directory
[  365.505679][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'.
[  366.129211][T10924] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.198806][T10890] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.288262][T10924] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.343420][T10890] 8021q: adding VLAN 0 to HW filter on device team0
[  366.414609][T10924] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.466508][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.473690][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.574179][T10924] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.626175][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.633430][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.652046][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1402'.
[  367.170149][T10924] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  367.218746][T10924] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  367.322546][ T5841] Bluetooth: hci11: command tx timeout
[  367.960988][T10924] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  368.153447][T10924] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  368.428137][T10890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.728541][T10924] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.769978][T10890] veth0_vlan: entered promiscuous mode
[  368.818422][T10924] 8021q: adding VLAN 0 to HW filter on device team0
[  368.839227][T10890] veth1_vlan: entered promiscuous mode
[  368.860424][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.867634][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.974254][  T176] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.981506][  T176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.180309][T10890] veth0_macvtap: entered promiscuous mode
[  369.273407][T10890] veth1_macvtap: entered promiscuous mode
[  369.340080][T10890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.422804][T10890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.448788][ T2114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.486731][ T2114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.498805][ T2114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.530180][ T2114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.792096][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.800072][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.896466][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.928419][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.989858][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.133812][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'.
[  370.861282][T10924] veth0_vlan: entered promiscuous mode
[  370.925356][T10924] veth1_vlan: entered promiscuous mode
[  371.066798][T10924] veth0_macvtap: entered promiscuous mode
[  371.091077][T10924] veth1_macvtap: entered promiscuous mode
[  371.168379][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.219462][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.278708][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.315908][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.423679][T11153] netlink: 'syz.0.1419': attribute type 1 has an invalid length.
[  371.540415][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.640101][T11153] 8021q: adding VLAN 0 to HW filter on device bond1
[  371.760797][T11157] bond1: (slave veth3): Enslaving as an active interface with a down link
[  371.803289][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.850735][T11160] 8021q: adding VLAN 0 to HW filter on device batadv1
[  371.875685][T11160] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  371.970189][T11161] bridge_slave_0: left allmulticast mode
[  371.976187][T11161] bridge_slave_0: left promiscuous mode
[  371.983627][T11161] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.999632][T11161] bridge_slave_1: left allmulticast mode
[  372.007507][T11161] bridge_slave_1: left promiscuous mode
[  372.019050][T11161] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.066332][T11161] bond0: (slave bond_slave_0): Releasing backup interface
[  372.128808][T11161] bond0: (slave bond_slave_1): Releasing backup interface
[  372.156365][T11161] team0: Port device team_slave_0 removed
[  372.169250][T11161] team0: Port device team_slave_1 removed
[  372.176878][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.185810][T11161] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.196796][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.204982][T11161] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.462184][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.470066][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.508135][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.518848][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.179347][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'.
[  373.197220][T11167] macsec1: entered allmulticast mode
[  373.221405][T11167] bond0: entered allmulticast mode
[  373.266460][T11167] bond0: left allmulticast mode
[  373.749619][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.772852][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.781951][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.794710][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.803027][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.868724][T11170] vxcan1 speed is unknown, defaulting to 1000
[  374.319940][T11178] netlink: 'syz.4.1423': attribute type 10 has an invalid length.
[  374.431581][T11175] netlink: 'syz.4.1423': attribute type 10 has an invalid length.
[  374.506179][T11178] team0: Port device dummy0 added
[  374.604626][T11175] team0: Port device dummy0 removed
[  374.648110][T11175] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  374.872258][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  374.908773][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  374.918159][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  374.928606][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  374.939933][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  375.046930][T11170] chnl_net:caif_netlink_parms(): no params data found
[  375.095432][T11190] vxcan1 speed is unknown, defaulting to 1000
[  375.097850][T11197] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1429'.
[  375.256234][T11197] bridge_slave_0: left allmulticast mode
[  375.277279][T11197] bridge_slave_0: left promiscuous mode
[  375.303017][T11197] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.332641][T11197] bridge_slave_1: left allmulticast mode
[  375.338350][T11197] bridge_slave_1: left promiscuous mode
[  375.352206][T11197] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.367747][T11197] bond0: (slave bond_slave_0): Releasing backup interface
[  375.384586][T11197] bond0: (slave bond_slave_1): Releasing backup interface
[  375.417000][T11197] team0: Port device team_slave_0 removed
[  375.430008][T11197] team0: Port device team_slave_1 removed
[  375.437762][T11197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.445561][T11197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.464017][T11197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.474604][T11197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.509607][T11197] bond1: (slave veth3): Releasing active interface
[  375.690196][T11170] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.697753][T11170] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.717228][T11170] bridge_slave_0: entered allmulticast mode
[  375.725704][T11170] bridge_slave_0: entered promiscuous mode
[  375.759625][T11170] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.769312][T11170] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.777371][T11170] bridge_slave_1: entered allmulticast mode
[  375.791899][T11170] bridge_slave_1: entered promiscuous mode
[  375.883423][ T5841] Bluetooth: hci7: command tx timeout
[  376.823754][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.872171][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.996654][ T5841] Bluetooth: hci11: command 0x0409 tx timeout
[  377.115088][T11170] team0: Port device team_slave_0 added
[  377.126362][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'.
[  377.129397][T11170] team0: Port device team_slave_1 added
[  377.204585][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  377.224725][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  377.235655][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  377.252006][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  377.263195][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  377.309056][T11217] dummy0: entered promiscuous mode
[  377.317319][T11217] macsec1: entered allmulticast mode
[  377.323587][T11217] bond0: entered allmulticast mode
[  377.328816][T11217] dummy0: entered allmulticast mode
[  377.345705][T11217] bond0: left allmulticast mode
[  377.350695][T11217] dummy0: left allmulticast mode
[  377.356601][T11217] dummy0: left promiscuous mode
[  377.385542][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.399175][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.427646][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.477765][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.485495][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.512405][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.785798][T11170] hsr_slave_0: entered promiscuous mode
[  377.813349][T11170] hsr_slave_1: entered promiscuous mode
[  377.820096][T11170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  377.840864][T11170] Cannot create hsr debugfs directory
[  377.884121][T11218] vxcan1 speed is unknown, defaulting to 1000
[  377.947099][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'.
[  377.964504][ T5841] Bluetooth: hci7: command tx timeout
[  378.317519][T11190] chnl_net:caif_netlink_parms(): no params data found
[  378.637069][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1441'.
[  378.650762][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  378.695058][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  379.091424][ T5841] Bluetooth: hci11: command 0x0409 tx timeout
[  379.327194][ T5841] Bluetooth: hci13: command tx timeout
[  379.637598][T11252] FAULT_INJECTION: forcing a failure.
[  379.637598][T11252] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  379.652228][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.4.1443 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  379.652259][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  379.652272][T11252] Call Trace:
[  379.652280][T11252]  <TASK>
[  379.652298][T11252]  dump_stack_lvl+0x189/0x250
[  379.652337][T11252]  ? __pfx____ratelimit+0x10/0x10
[  379.652360][T11252]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.652393][T11252]  ? __pfx__printk+0x10/0x10
[  379.652437][T11252]  ? fs_reclaim_acquire+0x7d/0x100
[  379.652472][T11252]  should_fail_ex+0x414/0x560
[  379.652504][T11252]  prepare_alloc_pages+0x213/0x610
[  379.652538][T11252]  __alloc_frozen_pages_noprof+0x123/0x370
[  379.652571][T11252]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  379.652619][T11252]  alloc_pages_bulk_noprof+0x560/0x710
[  379.652653][T11252]  ? alloc_pages_noprof+0xbe/0x190
[  379.652680][T11252]  kasan_populate_vmalloc+0xba/0x1a0
[  379.652718][T11252]  alloc_vmap_area+0xd51/0x1490
[  379.652758][T11252]  ? __pfx_alloc_vmap_area+0x10/0x10
[  379.652778][T11252]  ? __kasan_kmalloc+0x93/0xb0
[  379.652799][T11252]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  379.652820][T11252]  ? stack_depot_save_flags+0x40/0x900
[  379.652844][T11252]  ? __get_vm_area_node+0x13f/0x300
[  379.652864][T11252]  ? array_map_alloc+0x276/0x6f0
[  379.652895][T11252]  __get_vm_area_node+0x1f8/0x300
[  379.652924][T11252]  __vmalloc_node_range_noprof+0x301/0x12f0
[  379.652948][T11252]  ? array_map_alloc+0x276/0x6f0
[  379.652981][T11252]  ? __lock_acquire+0xab9/0xd20
[  379.653016][T11252]  ? aa_get_newest_label+0xf7/0x5d0
[  379.653061][T11252]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  379.653084][T11252]  ? apparmor_capable+0x137/0x1b0
[  379.653119][T11252]  ? bpf_lsm_capable+0x9/0x20
[  379.653138][T11252]  ? security_capable+0x7e/0x2e0
[  379.653167][T11252]  bpf_map_area_alloc+0x12d/0x180
[  379.653198][T11252]  ? array_map_alloc+0x276/0x6f0
[  379.653231][T11252]  array_map_alloc+0x276/0x6f0
[  379.653270][T11252]  prog_array_map_alloc+0x17a/0x200
[  379.653310][T11252]  map_create+0x900/0x1150
[  379.653343][T11252]  ? security_bpf+0x7e/0x300
[  379.653370][T11252]  __sys_bpf+0x67e/0x860
[  379.653400][T11252]  ? __pfx___sys_bpf+0x10/0x10
[  379.653443][T11252]  ? ksys_write+0x22a/0x250
[  379.653478][T11252]  ? __pfx_ksys_write+0x10/0x10
[  379.653520][T11252]  __x64_sys_bpf+0x7c/0x90
[  379.653547][T11252]  do_syscall_64+0xfa/0x3b0
[  379.653571][T11252]  ? lockdep_hardirqs_on+0x9c/0x150
[  379.653594][T11252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.653615][T11252]  ? clear_bhb_loop+0x60/0xb0
[  379.653641][T11252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.653661][T11252] RIP: 0033:0x7f483998e929
[  379.653679][T11252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.653698][T11252] RSP: 002b:00007f483a858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  379.653721][T11252] RAX: ffffffffffffffda RBX: 00007f4839bb5fa0 RCX: 00007f483998e929
[  379.653736][T11252] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000
[  379.653750][T11252] RBP: 00007f483a858090 R08: 0000000000000000 R09: 0000000000000000
[  379.653764][T11252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  379.653776][T11252] R13: 0000000000000001 R14: 00007f4839bb5fa0 R15: 00007fffab7a51f8
[  379.653809][T11252]  </TASK>
[  380.042791][ T5842] Bluetooth: hci7: command tx timeout
[  380.239246][T11190] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.252755][T11190] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.260228][T11190] bridge_slave_0: entered allmulticast mode
[  380.268984][T11190] bridge_slave_0: entered promiscuous mode
[  380.293220][T11190] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.300408][T11190] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.321838][T11190] bridge_slave_1: entered allmulticast mode
[  380.330150][T11190] bridge_slave_1: entered promiscuous mode
[  380.841949][T11170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.916708][T11190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.038550][T11190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  381.126655][T11170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.151804][ T5842] Bluetooth: hci11: command 0x0409 tx timeout
[  381.386922][T11170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.397359][ T5842] Bluetooth: hci13: command tx timeout
[  381.500013][T11190] team0: Port device team_slave_0 added
[  381.584098][T11170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.638372][T11190] team0: Port device team_slave_1 added
[  381.864442][T11218] chnl_net:caif_netlink_parms(): no params data found
[  382.074168][T11190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.081154][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.123538][ T5842] Bluetooth: hci7: command tx timeout
[  382.150628][T11190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.328348][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'.
[  382.337672][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'.
[  382.342956][T11190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.365348][T11190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.392469][T11190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.482014][T11282] netlink: 'syz.4.1450': attribute type 1 has an invalid length.
[  382.492317][T11282] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1450'.
[  382.753534][T11218] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.760854][T11218] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.773894][T11286] netlink: 'syz.4.1451': attribute type 4 has an invalid length.
[  382.799925][T11218] bridge_slave_0: entered allmulticast mode
[  382.813658][T11218] bridge_slave_0: entered promiscuous mode
[  382.837243][T11218] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.848163][T11218] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.856250][T11218] bridge_slave_1: entered allmulticast mode
[  382.867449][T11218] bridge_slave_1: entered promiscuous mode
[  383.476124][ T5842] Bluetooth: hci13: command tx timeout
[  383.510236][T11289] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  383.849806][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.870922][T11170] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  383.958676][T11190] hsr_slave_0: entered promiscuous mode
[  383.983350][T11190] hsr_slave_1: entered promiscuous mode
[  383.990000][T11190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  384.019869][T11190] Cannot create hsr debugfs directory
[  384.077017][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.104811][T11170] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  384.120775][T11170] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  384.161122][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'.
[  384.170751][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1457'.
[  384.253697][T11170] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  384.357377][T11218] team0: Port device team_slave_0 added
[  384.436680][T11218] team0: Port device team_slave_1 added
[  384.555396][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.583055][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.651883][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.665230][T11317] netlink: 'syz.0.1460': attribute type 1 has an invalid length.
[  384.678379][T11317] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1460'.
[  384.770396][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.791389][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.853294][T11321] netlink: 'syz.0.1461': attribute type 303 has an invalid length.
[  384.861678][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.898492][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'.
[  385.236112][T11218] hsr_slave_0: entered promiscuous mode
[  385.250594][T11218] hsr_slave_1: entered promiscuous mode
[  385.258591][T11218] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  385.266467][T11218] Cannot create hsr debugfs directory
[  385.551626][ T5842] Bluetooth: hci13: command tx timeout
[  385.579594][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'.
[  385.596419][T11328] dummy0: entered promiscuous mode
[  385.602130][T11328] macsec1: entered allmulticast mode
[  385.607470][T11328] bond0: entered allmulticast mode
[  385.613061][T11328] dummy0: entered allmulticast mode
[  385.623852][T11328] bond0: left allmulticast mode
[  385.628771][T11328] dummy0: left allmulticast mode
[  385.644455][T11328] dummy0: left promiscuous mode
[  385.980142][T11190] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.059132][T11333] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  386.075962][T11333] netlink: 'syz.0.1464': attribute type 2 has an invalid length.
[  386.084115][T11333] netlink: 'syz.0.1464': attribute type 1 has an invalid length.
[  386.092392][T11333] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1464'.
[  386.226775][T11190] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.435902][T11190] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.494783][T11341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1468'.
[  386.573802][T11190] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.580516][T11344] netlink: 'syz.0.1468': attribute type 1 has an invalid length.
[  386.819233][T11170] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.044448][T11170] 8021q: adding VLAN 0 to HW filter on device team0
[  387.078672][T11350] netlink: 'syz.0.1470': attribute type 1 has an invalid length.
[  387.114539][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.121818][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.202985][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.210178][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.256227][T11190] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  387.325198][T11218] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.346667][T11190] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  387.368179][T11190] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  387.397331][T11190] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  387.426999][T11218] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.590243][T11218] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.610688][T11364] FAULT_INJECTION: forcing a failure.
[  387.610688][T11364] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  387.635125][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.4.1474 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  387.635158][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  387.635172][T11364] Call Trace:
[  387.635180][T11364]  <TASK>
[  387.635190][T11364]  dump_stack_lvl+0x189/0x250
[  387.635229][T11364]  ? __pfx____ratelimit+0x10/0x10
[  387.635253][T11364]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.635286][T11364]  ? __pfx__printk+0x10/0x10
[  387.635311][T11364]  ? fs_reclaim_acquire+0x7d/0x100
[  387.635347][T11364]  should_fail_ex+0x414/0x560
[  387.635379][T11364]  prepare_alloc_pages+0x213/0x610
[  387.635414][T11364]  __alloc_frozen_pages_noprof+0x123/0x370
[  387.635446][T11364]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  387.635491][T11364]  ? policy_nodemask+0x27c/0x720
[  387.635511][T11364]  ? __pfx__copy_from_iter+0x10/0x10
[  387.635545][T11364]  alloc_pages_mpol+0x232/0x4a0
[  387.635574][T11364]  alloc_pages_noprof+0xa9/0x190
[  387.635598][T11364]  af_alg_sendmsg+0x133a/0x22e0
[  387.635623][T11364]  ? __pfx___might_resched+0x10/0x10
[  387.635684][T11364]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  387.635709][T11364]  ? __pfx_aa_sk_perm+0x10/0x10
[  387.635730][T11364]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  387.635776][T11364]  ? aa_sock_msg_perm+0x94/0x160
[  387.635804][T11364]  ? skcipher_sendmsg+0x26/0xf0
[  387.635829][T11364]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  387.635858][T11364]  __sock_sendmsg+0x219/0x270
[  387.635886][T11364]  ____sys_sendmsg+0x52d/0x830
[  387.635923][T11364]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.635966][T11364]  ? import_iovec+0x74/0xa0
[  387.635990][T11364]  ___sys_sendmsg+0x21f/0x2a0
[  387.636023][T11364]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.636098][T11364]  ? __fget_files+0x2a/0x420
[  387.636120][T11364]  ? __fget_files+0x3a0/0x420
[  387.636156][T11364]  __sys_sendmmsg+0x227/0x430
[  387.636194][T11364]  ? __pfx___sys_sendmmsg+0x10/0x10
[  387.636222][T11364]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  387.636281][T11364]  ? ksys_write+0x22a/0x250
[  387.636317][T11364]  ? __pfx_ksys_write+0x10/0x10
[  387.636346][T11364]  ? rcu_is_watching+0x15/0xb0
[  387.636387][T11364]  __x64_sys_sendmmsg+0xa0/0xc0
[  387.636420][T11364]  do_syscall_64+0xfa/0x3b0
[  387.636444][T11364]  ? lockdep_hardirqs_on+0x9c/0x150
[  387.636467][T11364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.636488][T11364]  ? clear_bhb_loop+0x60/0xb0
[  387.636515][T11364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.636536][T11364] RIP: 0033:0x7f483998e929
[  387.636555][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.636574][T11364] RSP: 002b:00007f483a858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  387.636598][T11364] RAX: ffffffffffffffda RBX: 00007f4839bb5fa0 RCX: 00007f483998e929
[  387.636613][T11364] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004
[  387.636626][T11364] RBP: 00007f483a858090 R08: 0000000000000000 R09: 0000000000000000
[  387.636639][T11364] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000002
[  387.636652][T11364] R13: 0000000000000000 R14: 00007f4839bb5fa0 R15: 00007fffab7a51f8
[  387.636687][T11364]  </TASK>
[  388.104853][T11367] netlink: 'syz.4.1475': attribute type 10 has an invalid length.
[  388.128635][T11218] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.256806][T11370] netlink: 'syz.0.1477': attribute type 23 has an invalid length.
[  388.859829][T11190] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.953207][T11218] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  389.021003][T11218] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  389.042298][T11218] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  389.069684][T11218] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  389.203554][T11190] 8021q: adding VLAN 0 to HW filter on device team0
[  389.308586][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.315822][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.391223][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.447656][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.454936][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.754577][T11170] veth0_vlan: entered promiscuous mode
[  389.816836][T11170] veth1_vlan: entered promiscuous mode
[  389.827645][T11398] netlink: 'syz.0.1482': attribute type 1 has an invalid length.
[  389.850791][T11398] __nla_validate_parse: 2 callbacks suppressed
[  389.850812][T11398] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1482'.
[  389.997466][T11170] veth0_macvtap: entered promiscuous mode
[  390.065418][T11218] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.109375][T11170] veth1_macvtap: entered promiscuous mode
[  390.157366][T11218] 8021q: adding VLAN 0 to HW filter on device team0
[  390.223005][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'.
[  390.224777][  T176] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.239317][  T176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.293423][T11404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1483'.
[  390.307947][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.315161][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.387192][T11170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.429620][T11170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.482430][T11190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.521823][ T2114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.558274][ T2114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.581582][ T2114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.615473][ T2114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.879417][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.920664][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.053948][  T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.101468][  T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.429865][T11190] veth0_vlan: entered promiscuous mode
[  391.544344][T11190] veth1_vlan: entered promiscuous mode
[  391.582609][T11425] tipc: Started in network mode
[  391.587671][T11425] tipc: Node identity a6b47c4befcd, cluster identity 4711
[  391.598633][T11425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.823738][T11424] syzkaller0: entered promiscuous mode
[  391.840892][T11424] syzkaller0: entered allmulticast mode
[  391.853575][T11424] tipc: Resetting bearer <eth:syzkaller0>
[  391.884388][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.994724][T11423] tipc: Resetting bearer <eth:syzkaller0>
[  392.711921][ T8119] tipc: Node number set to 1232698443
[  393.869878][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  393.880662][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  393.899162][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  393.916992][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  393.937739][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  395.106950][T11423] tipc: Disabling bearer <eth:syzkaller0>
[  395.278379][T11439] vxcan1 speed is unknown, defaulting to 1000
[  395.385544][T11190] veth0_macvtap: entered promiscuous mode
[  395.386730][T11442] netlink: 'syz.4.1490': attribute type 11 has an invalid length.
[  395.416477][T11218] veth0_vlan: entered promiscuous mode
[  395.456387][T11190] veth1_macvtap: entered promiscuous mode
[  395.496403][T11218] veth1_vlan: entered promiscuous mode
[  395.555352][T11190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.622982][T11190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.699486][T11448] netlink: 'syz.4.1492': attribute type 1 has an invalid length.
[  395.718720][   T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.723073][T11448] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1492'.
[  395.776526][   T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.804614][   T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.856946][T11218] veth0_macvtap: entered promiscuous mode
[  395.891834][   T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.939525][T11218] veth1_macvtap: entered promiscuous mode
[  396.032234][ T5841] Bluetooth: hci7: command tx timeout
[  396.169975][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0
[  396.237948][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.253304][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.255003][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1
[  396.539814][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.549665][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.582473][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.587580][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.614560][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.633820][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  396.843043][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.850925][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.101698][T10788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.146062][T10788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.296245][T11439] chnl_net:caif_netlink_parms(): no params data found
[  397.592031][T11439] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.599381][T11439] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.608080][T11439] bridge_slave_0: entered allmulticast mode
[  397.629488][T11439] bridge_slave_0: entered promiscuous mode
[  397.639167][T11439] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.647123][T11439] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.654599][T11439] bridge_slave_1: entered allmulticast mode
[  397.662714][T11439] bridge_slave_1: entered promiscuous mode
[  397.753132][T11439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  397.767301][T11439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.830069][T11439] team0: Port device team_slave_0 added
[  397.842105][T11439] team0: Port device team_slave_1 added
[  397.889796][T11439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.897265][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.933137][T11439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.948362][T11439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.956652][T11439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.983138][T11439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.069993][T11439] hsr_slave_0: entered promiscuous mode
[  398.077295][T11439] hsr_slave_1: entered promiscuous mode
[  398.086556][T11439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.094271][T11439] Cannot create hsr debugfs directory
[  398.112126][ T5841] Bluetooth: hci7: command tx timeout
[  398.972278][T11493] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  399.001904][T11493] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1502'.
[  399.225116][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  399.313930][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  399.340376][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  399.353145][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  399.372081][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  399.534224][T11439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.728264][T11496] vxcan1 speed is unknown, defaulting to 1000
[  399.953819][T11439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.172502][T11439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.195141][ T5842] Bluetooth: hci7: command tx timeout
[  400.359994][T11439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.515746][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'.
[  400.591356][T11512] erspan0: entered promiscuous mode
[  400.598701][T11512] macvtap1: entered promiscuous mode
[  400.604743][T11512] macvtap1: entered allmulticast mode
[  400.610250][T11512] erspan0: entered allmulticast mode
[  400.902075][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'.
[  400.907320][T11520] netlink: 'syz.4.1509': attribute type 4 has an invalid length.
[  400.924798][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1509'.
[  400.990441][T11439] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  401.009303][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'.
[  401.036247][T11439] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  401.115318][T11524] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1510'.
[  401.137310][T11520] 8021q: VLANs not supported on nlmon0
[  401.143771][T11439] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  401.345118][T11439] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  401.474421][ T5842] Bluetooth: hci11: command tx timeout
[  401.590538][T11496] chnl_net:caif_netlink_parms(): no params data found
[  401.674990][T11540] netlink: 'syz.2.1513': attribute type 1 has an invalid length.
[  401.682992][T11540] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1513'.
[  402.291634][ T5842] Bluetooth: hci7: command tx timeout
[  402.361959][T11496] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.369161][T11496] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.377833][T11496] bridge_slave_0: entered allmulticast mode
[  402.386238][T11496] bridge_slave_0: entered promiscuous mode
[  402.396159][T11496] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.412089][T11496] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.419538][T11496] bridge_slave_1: entered allmulticast mode
[  402.433710][T11496] bridge_slave_1: entered promiscuous mode
[  402.622560][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.856305][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.935552][T11439] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.104813][T11496] team0: Port device team_slave_0 added
[  403.178143][T11496] team0: Port device team_slave_1 added
[  403.319968][T11439] 8021q: adding VLAN 0 to HW filter on device team0
[  403.384570][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.395659][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.450497][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.505354][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.521511][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.581777][ T5842] Bluetooth: hci11: command tx timeout
[  403.601844][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.619006][T10788] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.626229][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.999416][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.006701][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.095109][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'.
[  404.158179][T11496] hsr_slave_0: entered promiscuous mode
[  404.166325][T11496] hsr_slave_1: entered promiscuous mode
[  404.199154][T11580] netlink: 'syz.4.1525': attribute type 1 has an invalid length.
[  404.199878][T11496] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  404.226109][T11580] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1525'.
[  404.259108][T11496] Cannot create hsr debugfs directory
[  405.148217][T11598] ipt_rpfilter: unknown options
[  405.368958][T11496] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.641508][ T5845] Bluetooth: hci11: command tx timeout
[  405.729846][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  405.860721][T11496] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.890032][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1538'.
[  405.945763][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'.
[  405.970602][T11439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.077611][T11496] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.110317][T11627] netlink: 'syz.0.1542': attribute type 1 has an invalid length.
[  406.110653][   T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  406.137503][T11627] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1542'.
[  406.185673][   T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  406.352346][ T5845] Bluetooth: hci5: command 0x0406 tx timeout
[  406.358540][ T5845] Bluetooth: hci6: command 0x0406 tx timeout
[  406.384037][T11496] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.433935][   T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  406.442441][   T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  406.475124][T11635] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.490503][T11635] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  406.607295][T11635] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.673254][T11635] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  406.823787][T11635] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.883507][T11635] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  406.909902][T11439] veth0_vlan: entered promiscuous mode
[  407.026775][T11635] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.079831][T11635] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  407.149995][T11657] netlink: 'syz.2.1550': attribute type 10 has an invalid length.
[  407.217788][T11657] veth0_vlan: left promiscuous mode
[  407.228845][T11657] veth0_vlan: entered promiscuous mode
[  407.263549][T11657] team0: Device veth0_vlan failed to register rx_handler
[  407.287612][T11439] veth1_vlan: entered promiscuous mode
[  407.384194][T11496] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  407.416207][T11496] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  407.473343][T11496] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  407.529724][T11496] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  407.597017][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  407.605631][   T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  407.712009][ T5841] Bluetooth: hci11: command tx timeout
[  407.722510][T11439] veth0_macvtap: entered promiscuous mode
[  407.734206][T11439] veth1_macvtap: entered promiscuous mode
[  408.002813][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  408.011151][   T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  408.093989][T11499] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  408.110422][T11499] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  408.254962][   T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  408.311046][T11679] FAULT_INJECTION: forcing a failure.
[  408.311046][T11679] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  408.311713][   T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  408.331568][T11679] CPU: 0 UID: 0 PID: 11679 Comm: syz.2.1554 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  408.331606][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.331622][T11679] Call Trace:
[  408.331640][T11679]  <TASK>
[  408.331651][T11679]  dump_stack_lvl+0x189/0x250
[  408.331698][T11679]  ? __pfx____ratelimit+0x10/0x10
[  408.331727][T11679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.331769][T11679]  ? __pfx__printk+0x10/0x10
[  408.331797][T11679]  ? fs_reclaim_acquire+0x7d/0x100
[  408.331836][T11679]  should_fail_ex+0x414/0x560
[  408.331873][T11679]  prepare_alloc_pages+0x213/0x610
[  408.331910][T11679]  __alloc_frozen_pages_noprof+0x123/0x370
[  408.331946][T11679]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  408.332000][T11679]  alloc_pages_bulk_noprof+0x560/0x710
[  408.332038][T11679]  ? alloc_pages_noprof+0xbe/0x190
[  408.332068][T11679]  kasan_populate_vmalloc+0xba/0x1a0
[  408.332111][T11679]  alloc_vmap_area+0xd51/0x1490
[  408.332156][T11679]  ? __pfx_alloc_vmap_area+0x10/0x10
[  408.332179][T11679]  ? __kasan_kmalloc+0x93/0xb0
[  408.332203][T11679]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  408.332227][T11679]  ? stack_depot_save_flags+0x40/0x900
[  408.332255][T11679]  ? __get_vm_area_node+0x13f/0x300
[  408.332278][T11679]  ? array_map_alloc+0x276/0x6f0
[  408.332313][T11679]  __get_vm_area_node+0x1f8/0x300
[  408.332346][T11679]  __vmalloc_node_range_noprof+0x301/0x12f0
[  408.332374][T11679]  ? array_map_alloc+0x276/0x6f0
[  408.332409][T11679]  ? __lock_acquire+0xab9/0xd20
[  408.332449][T11679]  ? aa_get_newest_label+0xf7/0x5d0
[  408.332499][T11679]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  408.332526][T11679]  ? apparmor_capable+0x137/0x1b0
[  408.332564][T11679]  ? bpf_lsm_capable+0x9/0x20
[  408.332585][T11679]  ? security_capable+0x7e/0x2e0
[  408.332618][T11679]  bpf_map_area_alloc+0x12d/0x180
[  408.332662][T11679]  ? array_map_alloc+0x276/0x6f0
[  408.332700][T11679]  array_map_alloc+0x276/0x6f0
[  408.332744][T11679]  prog_array_map_alloc+0x17a/0x200
[  408.332783][T11679]  map_create+0x900/0x1150
[  408.332815][T11679]  ? security_bpf+0x7e/0x300
[  408.332841][T11679]  __sys_bpf+0x67e/0x860
[  408.332870][T11679]  ? __pfx___sys_bpf+0x10/0x10
[  408.332912][T11679]  ? ksys_write+0x22a/0x250
[  408.332947][T11679]  ? __pfx_ksys_write+0x10/0x10
[  408.332987][T11679]  __x64_sys_bpf+0x7c/0x90
[  408.333013][T11679]  do_syscall_64+0xfa/0x3b0
[  408.333037][T11679]  ? lockdep_hardirqs_on+0x9c/0x150
[  408.333060][T11679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.333081][T11679]  ? clear_bhb_loop+0x60/0xb0
[  408.333106][T11679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.333129][T11679] RIP: 0033:0x7f6a4038e929
[  408.333151][T11679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.333174][T11679] RSP: 002b:00007f6a412bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  408.333203][T11679] RAX: ffffffffffffffda RBX: 00007f6a405b5fa0 RCX: 00007f6a4038e929
[  408.333222][T11679] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000
[  408.333237][T11679] RBP: 00007f6a412bb090 R08: 0000000000000000 R09: 0000000000000000
[  408.333253][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  408.333268][T11679] R13: 0000000000000001 R14: 00007f6a405b5fa0 R15: 00007ffd50736788
[  408.333305][T11679]  </TASK>
[  408.723060][T11439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.803416][T11681] vlan2: entered promiscuous mode
[  408.817389][T11681] team0: entered promiscuous mode
[  408.946218][T11439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  409.045417][ T2114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.092131][ T2114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.100912][ T2114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.245591][ T2114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.581154][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.622363][T11695] FAULT_INJECTION: forcing a failure.
[  409.622363][T11695] name failslab, interval 1, probability 0, space 0, times 0
[  409.631824][T11693] blkio.reset_stats is deprecated
[  409.636091][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.673727][T11695] CPU: 1 UID: 0 PID: 11695 Comm: syz.2.1561 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  409.673760][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.673773][T11695] Call Trace:
[  409.673782][T11695]  <TASK>
[  409.673791][T11695]  dump_stack_lvl+0x189/0x250
[  409.673831][T11695]  ? __pfx____ratelimit+0x10/0x10
[  409.673855][T11695]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.673888][T11695]  ? __pfx__printk+0x10/0x10
[  409.673918][T11695]  ? __pfx___might_resched+0x10/0x10
[  409.673948][T11695]  ? fs_reclaim_acquire+0x7d/0x100
[  409.673978][T11695]  should_fail_ex+0x414/0x560
[  409.674010][T11695]  should_failslab+0xa8/0x100
[  409.674033][T11695]  __kmalloc_cache_noprof+0x70/0x3d0
[  409.674050][T11695]  ? nf_tables_newchain+0xfeb/0x2900
[  409.674082][T11695]  nf_tables_newchain+0xfeb/0x2900
[  409.674129][T11695]  ? __pfx_nf_tables_newchain+0x10/0x10
[  409.674195][T11695]  ? nfnl_pernet+0x23/0x240
[  409.674235][T11695]  ? __nla_parse+0x40/0x60
[  409.674269][T11695]  nfnetlink_rcv+0x1132/0x2520
[  409.674339][T11695]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  409.674440][T11695]  ? netlink_deliver_tap+0x2e/0x1b0
[  409.674477][T11695]  netlink_unicast+0x75b/0x8d0
[  409.674513][T11695]  netlink_sendmsg+0x805/0xb30
[  409.674552][T11695]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.674590][T11695]  ? aa_sock_msg_perm+0x94/0x160
[  409.674618][T11695]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  409.674645][T11695]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.674673][T11695]  __sock_sendmsg+0x219/0x270
[  409.674700][T11695]  ____sys_sendmsg+0x505/0x830
[  409.674737][T11695]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.674777][T11695]  ? import_iovec+0x74/0xa0
[  409.674800][T11695]  ___sys_sendmsg+0x21f/0x2a0
[  409.674820][T11693] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1562'.
[  409.674834][T11695]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.674900][T11695]  ? __fget_files+0x2a/0x420
[  409.674924][T11695]  ? __fget_files+0x3a0/0x420
[  409.674966][T11695]  __x64_sys_sendmsg+0x19b/0x260
[  409.675007][T11695]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  409.675055][T11695]  ? __pfx_ksys_write+0x10/0x10
[  409.675091][T11695]  ? rcu_is_watching+0x15/0xb0
[  409.675136][T11695]  ? do_syscall_64+0xbe/0x3b0
[  409.675171][T11695]  do_syscall_64+0xfa/0x3b0
[  409.675198][T11695]  ? lockdep_hardirqs_on+0x9c/0x150
[  409.675224][T11695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.675249][T11695]  ? clear_bhb_loop+0x60/0xb0
[  409.675279][T11695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.675303][T11695] RIP: 0033:0x7f6a4038e929
[  409.675326][T11695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.675347][T11695] RSP: 002b:00007f6a412bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.675373][T11695] RAX: ffffffffffffffda RBX: 00007f6a405b5fa0 RCX: 00007f6a4038e929
[  409.675391][T11695] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  409.675406][T11695] RBP: 00007f6a412bb090 R08: 0000000000000000 R09: 0000000000000000
[  409.675422][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  409.675437][T11695] R13: 0000000000000000 R14: 00007f6a405b5fa0 R15: 00007ffd50736788
[  409.675476][T11695]  </TASK>
[  409.779550][T11698] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'.
[  409.954472][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.054693][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.097160][T11496] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.153906][T11496] 8021q: adding VLAN 0 to HW filter on device team0
[  410.174877][T11499] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.182134][T11499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.238874][T11499] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.246122][T11499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.437463][T11710] bridge0: port 3(gretap0) entered blocking state
[  410.471069][T11710] bridge0: port 3(gretap0) entered disabled state
[  410.493521][T11710] gretap0: entered allmulticast mode
[  410.513029][T11710] gretap0: entered promiscuous mode
[  410.532572][T11710] bridge0: port 3(gretap0) entered blocking state
[  410.539227][T11710] bridge0: port 3(gretap0) entered forwarding state
[  411.222484][T11496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.697100][T11496] veth0_vlan: entered promiscuous mode
[  411.714064][T11496] veth1_vlan: entered promiscuous mode
[  411.767554][T11496] veth0_macvtap: entered promiscuous mode
[  411.780143][T11496] veth1_macvtap: entered promiscuous mode
[  411.821176][T11496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.839440][T11496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.867233][  T176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.878279][  T176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.888012][  T176] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.899550][  T176] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.037697][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.048367][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.117690][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.128157][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.597422][   T31] INFO: task syz.4.1157:9726 blocked for more than 143 seconds.
[  412.605754][   T31]       Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0
[  412.613810][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  412.623331][   T31] task:syz.4.1157      state:D stack:23592 pid:9726  tgid:9705  ppid:5828   task_flags:0x400140 flags:0x00004006
[  412.635746][   T31] Call Trace:
[  412.639062][   T31]  <TASK>
[  412.642168][   T31]  __schedule+0x16f5/0x4d00
[  412.646734][   T31]  ? schedule+0x165/0x360
[  412.651721][   T31]  ? __lock_acquire+0xab9/0xd20
[  412.656625][   T31]  ? __pfx___schedule+0x10/0x10
[  412.661637][   T31]  ? schedule+0x91/0x360
[  412.665909][   T31]  schedule+0x165/0x360
[  412.679897][   T31]  schedule_timeout+0x9a/0x270
[  412.685045][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  412.690500][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.696135][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.703180][   T31]  ? wait_for_completion+0x267/0x5d0
[  412.708557][   T31]  wait_for_completion+0x2bf/0x5d0
[  412.713900][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  412.719583][   T31]  ? remove_client_context+0x19c/0x1e0
[  412.725385][   T31]  disable_device+0x1c6/0x320
[  412.730136][   T31]  ? __pfx_disable_device+0x10/0x10
[  412.736516][   T31]  __ib_unregister_device+0x2cb/0x3f0
SYZFAIL: failed to send rpc
fd=3 want=110440 sent=0 n=-1 (errno 32: Broken pipe)
[  412.742448][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  412.808159][   T31]  ib_unregister_device_and_put+0xb8/0xf0
[  412.845405][   T31]  nldev_dellink+0x2d1/0x320
[  412.850094][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  412.921697][   T31]  ? rcu_is_watching+0x15/0xb0
[  412.926570][   T31]  ? apparmor_capable+0x137/0x1b0
[  412.961381][   T31]  ? bpf_lsm_capable+0x9/0x20
[  412.966136][   T31]  ? security_capable+0x7e/0x2e0
[  412.971134][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[  413.031375][   T31]  rdma_nl_rcv+0x6ae/0x980
[  413.035897][   T31]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  413.040878][   T31]  ? __lock_acquire+0xab9/0xd20
[  413.075480][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  413.121537][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[  413.126849][   T31]  netlink_unicast+0x75b/0x8d0
[  413.161598][   T31]  netlink_sendmsg+0x805/0xb30
[  413.166475][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.204513][   T31]  ? aa_sock_msg_perm+0x94/0x160
[  413.209548][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  413.247569][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  413.253044][   T31]  __sock_sendmsg+0x219/0x270
[  413.257769][   T31]  ____sys_sendmsg+0x505/0x830
[  413.294149][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.299548][   T31]  ? import_iovec+0x74/0xa0
[  413.341547][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  413.346322][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.369901][   T31]  ? __fget_files+0x2a/0x420
[  413.375142][   T31]  ? __fget_files+0x3a0/0x420
[  413.379901][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  413.441614][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.447179][   T31]  ? rcu_is_watching+0x15/0xb0
[  413.472498][   T31]  ? do_syscall_64+0xbe/0x3b0
[  413.477284][   T31]  do_syscall_64+0xfa/0x3b0
[  413.521654][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.526955][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.571395][   T31]  ? clear_bhb_loop+0x60/0xb0
[  413.576177][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.631696][   T31] RIP: 0033:0x7f7d5758e929
[  413.636196][   T31] RSP: 002b:00007f7d583fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.661581][   T31] RAX: ffffffffffffffda RBX: 00007f7d577b6160 RCX: 00007f7d5758e929
[  413.669634][   T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009
[  413.688312][   T31] RBP: 00007f7d57610b39 R08: 0000000000000000 R09: 0000000000000000
[  413.706895][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.715706][   T31] R13: 0000000000000000 R14: 00007f7d577b6160 R15: 00007ffea36aa948
[  413.724414][   T31]  </TASK>
[  413.727710][   T31] 
[  413.727710][   T31] Showing all locks held in the system:
[  413.736928][   T31] 1 lock held by khungtaskd/31:
[  413.742166][   T31]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  413.761765][   T31] 3 locks held by kworker/0:2/978:
[  413.766929][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  413.807246][   T31]  #1: ffffc900038d7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  413.825032][   T31]  #2: ffff888026d02240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  413.835351][   T31] 4 locks held by kworker/u8:7/4509:
[  413.840660][   T31]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  413.852097][   T31]  #1: ffffc9000e087bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  413.863791][   T31]  #2: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  413.877915][   T31]  #3: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  413.890222][   T31] 2 locks held by getty/5586:
[  413.895186][   T31]  #0: ffff88814caa60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  413.917048][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  413.928376][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  413.939605][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  413.947815][   T31] 3 locks held by kworker/u9:3/5841:
[  413.954055][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  413.962116][   T31]  #0: ffff888035a4a948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  413.974922][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  413.982549][   T31]  #1: ffffc9000413fbc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  413.996658][   T31]  #2: ffff8880564fcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680
[  414.016101][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  414.024340][   T31] 2 locks held by kworker/1:15/8113:
[  414.030053][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  414.081374][   T31]  #1: ffffc9001c6ffbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  414.092028][   T31] 2 locks held by syz.4.1157/9706:
[  414.096859][T11738] vxcan1 speed is unknown, defaulting to 1000
[  414.097170][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.122602][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.134194][   T31] 2 locks held by syz.4.1157/9726:
[  414.139344][   T31]  #0: ffffffff99e49cf8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[  414.149493][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  414.161209][   T31] 2 locks held by syz.1.1159/9713:
[  414.166408][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.176155][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.187547][   T31] 2 locks held by syz.0.1242/10148:
[  414.193704][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.213590][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.225014][   T31] 2 locks held by syz.2.1243/10151:
[  414.230237][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.239957][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.251661][   T31] 2 locks held by syz.6.1244/10205:
[  414.256887][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.266431][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.278043][   T31] 2 locks held by syz.7.1334/10594:
[  414.283317][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.293054][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.304435][   T31] 2 locks held by syz.9.1338/10616:
[  414.323653][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.333325][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.344875][   T31] 2 locks held by syz.5.1348/10642:
[  414.350101][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.366547][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.401653][   T31] 5 locks held by syz-executor/10752:
[  414.407097][   T31]  #0: ffff888034494dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  414.434265][   T31]  #1: ffff8880344940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  414.444619][   T31]  #2: ffffffff8f6795a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  414.454876][   T31]  #3: ffff88803af1b338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  414.464491][   T31]  #4: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  414.475599][   T31] 2 locks held by syz.1.1384/10970:
[  414.480823][   T31]  #0: ffffffff8f505b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  414.566014][   T31]  #1: ffff8880242e86d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  414.591013][   T31] 1 lock held by syz-executor/11218:
[  414.597675][   T31]  #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  414.610082][   T31] 5 locks held by syz-executor/11738:
[  414.631747][   T31] 
[  414.634144][   T31] =============================================
[  414.634144][   T31] 
[  414.642792][   T31] NMI backtrace for cpu 0
[  414.642813][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  414.642838][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  414.642850][   T31] Call Trace:
[  414.642859][   T31]  <TASK>
[  414.642867][   T31]  dump_stack_lvl+0x189/0x250
[  414.642903][   T31]  ? __wake_up_klogd+0xd9/0x110
[  414.642930][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.642962][   T31]  ? __pfx__printk+0x10/0x10
[  414.643000][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  414.643037][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  414.643067][   T31]  ? _printk+0xcf/0x120
[  414.643095][   T31]  ? __pfx__printk+0x10/0x10
[  414.643121][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  414.643153][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  414.643189][   T31]  watchdog+0xfee/0x1030
[  414.643221][   T31]  ? watchdog+0x1de/0x1030
[  414.643259][   T31]  kthread+0x70e/0x8a0
[  414.643288][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.643315][   T31]  ? __pfx_kthread+0x10/0x10
[  414.643342][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.643363][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.643384][   T31]  ? __pfx_kthread+0x10/0x10
[  414.643409][   T31]  ret_from_fork+0x3fc/0x770
[  414.643443][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  414.643480][   T31]  ? __switch_to_asm+0x39/0x70
[  414.643501][   T31]  ? __switch_to_asm+0x33/0x70
[  414.643521][   T31]  ? __pfx_kthread+0x10/0x10
[  414.643546][   T31]  ret_from_fork_asm+0x1a/0x30
[  414.643586][   T31]  </TASK>
[  414.643600][   T31] Sending NMI from CPU 0 to CPUs 1:
[  414.816986][    C1] NMI backtrace for cpu 1
[  414.817006][    C1] CPU: 1 UID: 0 PID: 11499 Comm: kworker/u8:10 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  414.817028][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  414.817041][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  414.817069][    C1] RIP: 0010:rcu_is_watching+0x26/0xb0
[  414.817106][    C1] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 00 6d f6 10 e8 6b de c0 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df <4c> 8d 34 dd 60 bc ba 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08
[  414.817123][    C1] RSP: 0018:ffffc9000bcb7880 EFLAGS: 00000297
[  414.817139][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 6778a56955943400
[  414.817154][    C1] RDX: ffff88808a809e00 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0
[  414.817169][    C1] RBP: ffffc9000bcb79d0 R08: 0000000000000000 R09: ffffffff8b308fe8
[  414.817183][    C1] R10: dffffc0000000000 R11: ffffed100957d717 R12: dffffc0000000000
[  414.817199][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000
[  414.817214][    C1] FS:  0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000
[  414.817228][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.817241][    C1] CR2: 00007fa78b5da190 CR3: 00000000535fa000 CR4: 00000000003526f0
[  414.817260][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  414.817272][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  414.817285][    C1] Call Trace:
[  414.817292][    C1]  <TASK>
[  414.817304][    C1]  batadv_iv_ogm_schedule+0x648/0xea0
[  414.817335][    C1]  ? batadv_iv_ogm_schedule+0x3f8/0xea0
[  414.817355][    C1]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  414.817378][    C1]  ? batadv_send_skb_packet+0x45d/0x6d0
[  414.817412][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0
[  414.817441][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  414.817474][    C1]  process_scheduled_works+0xae1/0x17b0
[  414.817526][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  414.817569][    C1]  worker_thread+0x8a0/0xda0
[  414.817601][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  414.817628][    C1]  ? __kthread_parkme+0x7b/0x200
[  414.817655][    C1]  kthread+0x70e/0x8a0
[  414.817678][    C1]  ? __pfx_worker_thread+0x10/0x10
[  414.817708][    C1]  ? __pfx_kthread+0x10/0x10
[  414.817732][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.817752][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.817890][    C1]  ? __pfx_kthread+0x10/0x10
[  414.817926][    C1]  ret_from_fork+0x3fc/0x770
[  414.817960][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  414.818018][    C1]  ? __switch_to_asm+0x39/0x70
[  414.818042][    C1]  ? __switch_to_asm+0x33/0x70
[  414.818064][    C1]  ? __pfx_kthread+0x10/0x10
[  414.818089][    C1]  ret_from_fork_asm+0x1a/0x30
[  414.818124][    C1]  </TASK>
[  414.833993][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  414.834025][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) 
[  414.834062][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  414.834080][   T31] Call Trace:
[  414.834092][   T31]  <TASK>
[  414.834108][   T31]  dump_stack_lvl+0x99/0x250
[  414.834158][   T31]  ? __asan_memcpy+0x40/0x70
[  414.834201][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.834247][   T31]  ? __pfx__printk+0x10/0x10
[  414.834297][   T31]  panic+0x2db/0x790
[  414.834347][   T31]  ? __pfx_panic+0x10/0x10
[  414.834388][   T31]  ? __pfx_delay_tsc+0x10/0x10
[  414.834428][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  414.834479][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  414.834517][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  414.834572][   T31]  watchdog+0x102d/0x1030
[  414.834613][   T31]  ? watchdog+0x1de/0x1030
[  414.834664][   T31]  kthread+0x70e/0x8a0
[  414.834701][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.834746][   T31]  ? __pfx_kthread+0x10/0x10
[  414.834782][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.834811][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.834838][   T31]  ? __pfx_kthread+0x10/0x10
[  414.834873][   T31]  ret_from_fork+0x3fc/0x770
[  414.834916][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  414.834965][   T31]  ? __switch_to_asm+0x39/0x70
[  414.834993][   T31]  ? __switch_to_asm+0x33/0x70
[  414.835021][   T31]  ? __pfx_kthread+0x10/0x10
[  414.835056][   T31]  ret_from_fork_asm+0x1a/0x30
[  414.835108][   T31]  </TASK>
[  415.247790][   T31] Kernel Offset: disabled
[  415.252119][   T31] Rebooting in 86400 seconds..