last executing test programs:

2m11.019469675s ago: executing program 4 (id=2633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x6, 0x9}, {0x3, 0x134}]}}) (async)
socket$inet6(0xa, 0x2, 0x19)

2m10.428344635s ago: executing program 4 (id=2637):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9c9c819, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0ae273715d"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d50e19122b26dc48addeec27ab"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x12, 0x4, "7b7269533996a7560d7c52a7813f"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', <r4=>0x0})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001840)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000001880), 0x40000000000009f, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00000015c0)='GPL\x00', 0x4, 0x436, &(0x7f0000001600)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000016c0), 0xfffffffffffffc95}, 0x48)
r8 = socket$kcm(0x29, 0x2, 0x0)
recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0)
sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000017c0)="ee2ab8", 0x3}], 0x1}}], 0x1, 0x80)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001800)={r5, r7})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x40, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x40}}, 0x0)

2m9.394397061s ago: executing program 4 (id=2649):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000a"], 0x30}}, 0x0)

2m9.053566492s ago: executing program 4 (id=2653):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000001000000852000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

2m8.694731064s ago: executing program 4 (id=2656):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)
r1 = socket(0x10, 0x3, 0x7fffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0)
sendmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f00000005c0)={0x133, &(0x7f0000000700)=[{}]}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000c00)={<r5=>0x2, 0x2, 0x0, 0x6, 0x6}, &(0x7f0000000c40)=0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000c80)={0x6, 0x8, 0x1, 0x7, r5}, 0x10)
recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/61, 0x11}}], 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000400000000000000050000007201330000003b3f95"], &(0x7f00000009c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000b40)={'team_slave_0\x00', 0x1})
ioctl$TUNSETLINK(r9, 0x400454cd, 0x306)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000b80)={{0x2, 0x4e24, @local}, {0x306}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 'syzkaller0\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001a80), 0xfffffffffffffde9, 0x10, &(0x7f0000001ac0)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r12, 0x0, 0xe, 0x0, &(0x7f0000001b80)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r13=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34958}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94)
sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r13, @ANYBLOB="0800c300741300000800c400010000000c00c5800800080001000000"], 0x38}}, 0x0)

2m7.781993489s ago: executing program 4 (id=2663):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000800), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000840)='highspeed', 0x9)
recvfrom$inet(r0, &(0x7f0000000c00)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x3083aa9426620cf0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000c40)={0x10000, 0x7f, 0x1, 0x7, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', <r5=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4be4}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4be4, <r6=>0x0}, 0x8)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@arena={0x21, 0x0, 0x0, 0x28, 0x20400, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@arena={0x21, 0x0, 0x0, 0x28, 0x20400, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000800)={0x200, 0x21, 0x7f, 0xb, 0x399f})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000700)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r10], 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r10], 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x20, &(0x7f00000003c0)=@raw=[@exit, @alu={0x4, 0x0, 0x0, 0xb, 0x1, 0x1, 0x4}, @jmp={0x5, 0x0, 0xc, 0xc, 0xa, 0x2, 0x1b}, @call={0x85, 0x0, 0x0, 0x4e}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit, @map_val={0x18, 0xd, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff7}], &(0x7f00000004c0)='syzkaller\x00', 0xe3ae669, 0x0, 0x0, 0x41100, 0x18, '\x00', r5, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x80, 0xffffff81}, 0x10, r6, r7, 0x1, &(0x7f0000000ac0)=[r8, r3, r3, r9, r3, r10, r3], &(0x7f0000000b00)=[{0x1, 0x1, 0xb, 0x3}], 0x10, 0x8001}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1m52.879348394s ago: executing program 32 (id=2663):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000800), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000840)='highspeed', 0x9)
recvfrom$inet(r0, &(0x7f0000000c00)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x3083aa9426620cf0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000c40)={0x10000, 0x7f, 0x1, 0x7, 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', <r5=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4be4}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4be4, <r6=>0x0}, 0x8)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@arena={0x21, 0x0, 0x0, 0x28, 0x20400, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@arena={0x21, 0x0, 0x0, 0x28, 0x20400, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000800)={0x200, 0x21, 0x7f, 0xb, 0x399f})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000700)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r10], 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x11, &(0x7f0000000980)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r10], 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x20, &(0x7f00000003c0)=@raw=[@exit, @alu={0x4, 0x0, 0x0, 0xb, 0x1, 0x1, 0x4}, @jmp={0x5, 0x0, 0xc, 0xc, 0xa, 0x2, 0x1b}, @call={0x85, 0x0, 0x0, 0x4e}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit, @map_val={0x18, 0xd, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffff7}], &(0x7f00000004c0)='syzkaller\x00', 0xe3ae669, 0x0, 0x0, 0x41100, 0x18, '\x00', r5, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x80, 0xffffff81}, 0x10, r6, r7, 0x1, &(0x7f0000000ac0)=[r8, r3, r3, r9, r3, r10, r3], &(0x7f0000000b00)=[{0x1, 0x1, 0xb, 0x3}], 0x10, 0x8001}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

19.720982646s ago: executing program 0 (id=3245):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000003e464357fa2ccf", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="050010000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044851}, 0x20040880)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000180)={0x1, 'veth0_to_team\x00'}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000380)={0x8004800}, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
close(0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r5, 0x301}, 0x14}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa10080045e400b000000000fb019078ac1e0001ac1414aa0301907803240000450040020066ffff0001010100000000e000000286770000000100108475be675de6a70a8525dc91e5c6060a0000000000800000020e7434954373561de584b703c8000900de6c83d500000207cfa11cab1a010e08c82ce8da6ee06cb8dd9452010902270e000042eb071173bc23ff00ffffa30900a301c846000111c8f46976e79ea788f03d9d3205927e86080000002006020070402adba340395665e9753ad9dca21ec7e4822dd6de31446da3d29eac419c1f00087ad16cccadac8d61bedef26f15a84eca5c7f144de9b7"], 0x0)

19.372373015s ago: executing program 0 (id=3247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000a40)={0x3, &(0x7f0000000a80)=[{0x1d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xdc}, {0x6}]}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x51, &(0x7f0000000680)=[{&(0x7f00000006c0)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000900)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x25, &(0x7f0000000240)={<r6=>0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000300)=0x9c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000004c0)={0x401, 0x205, 0x5, 0x3, r6}, &(0x7f0000000500)=0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="08000900000000000800080000000000140001000000000000000000000000000000000014000200000000000000000000000000000000003e000600"/76], 0x64}}, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="010000000200000000000000"], 0x40)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f0000000440)='\x00\x00\x00\x00', &(0x7f0000000480)=@tcp=r9}, 0x20) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000710"], 0x1c}}, 0x0)
setsockopt$sock_int(r10, 0x1, 0x43, &(0x7f0000000000)=0xc, 0x4)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r10)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r12, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000)

19.004012352s ago: executing program 0 (id=3252):
r0 = socket(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb)
writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000700)="390000001300034700bb65e1c3e4ffff01000000010000000000250000001900040004", 0x23}, {&(0x7f0000000740)="6506ac248ff4a1e553ec283566fb5f4135b95e8a23442b5786dadc1513fb5ebb2692a960d3f7cf91fee2c8007d3068ddeb4c6ce7ef63ca07eb90a84b8ceab0bea9d4c3b976e84c2bd38211f0264c09e8ef2ea99af4818dc8f07623e49407c74d9a9e2ad6fad8c52ae5bf7ce2de29c79c606491e2fccdfc7a2a7f9bc5bbc2afdf48e1c64536981caae3a8027bd77634d65b70d13995b218b62a935cce39ee1ff79e565e1293a9c2a54ab28094ade25d56f8a70d232b13425848b46eb9868dccdb3e798937aa93b5848cd3cb465d0e1f47dd3acd559008f64a397d00b48856c4346a290d985124", 0xe6}], 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000005000480540001800a0001006d617463680000004400028008000240000000002c0003005c55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0b000100637075000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a00"/168], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000340)={0x2, {{0xa, 0x4e21, 0x1, @mcast2, 0x1000}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x4, @private1, 0xffffffff}}]}, 0x110)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

18.119379741s ago: executing program 0 (id=3262):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

17.885182987s ago: executing program 0 (id=3264):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(0x3)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4044000)
sendmmsg(r1, &(0x7f0000000180), 0x40000000000009f, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

17.73036356s ago: executing program 0 (id=3266):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000240)={0x1}, 0x8)
sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="895c7ec7", 0x4}], 0x1, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}], 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000f62485d829689ea1b6f44a7ca8a20e4ce97820d660fd75c0cab5db589d5c899b861f93894dc936ca7d02f5c32d10b5e227cd33"], &(0x7f0000000840)='syzkaller\x00'}, 0x90)
write(r3, &(0x7f00000000c0)="09000000010001", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r4, &(0x7f0000000680), 0x0}, 0x20)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, &(0x7f0000000400))
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000a007f7eab755bda5338b5b0c3dbe9fc9617b37c628f67a6dad7119436bc0d82699b749dc09bd5415aadbf6dfdead0966b4588eb0c7601308c41a6e26c1a179c6fdda232d348487a28b731ad7c51fce6112baca895cf738e2449fc1e1b7f04aa3cb8633b70e79f7aecb1eaf8626adc2b1881e042206a33ff86a1a6f28916481daefe11f4c338c5000a0785358ae10d6bdad9b4baa4ebf69618ab2113fcee10caa85d62543a9afbc41a289c34fa193e458596761e2d0a2106ac8230160db6b", @ANYRES16=r2, @ANYBLOB="010009000000ffdbdf25250000070e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x24004814)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)

4.8715697s ago: executing program 2 (id=3326):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x18) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)=[0x9, 0x5, 0x8, 0xffffffffffffffff, 0x5, 0x94, 0x0, 0x0], &(0x7f00000005c0)=[0x4, 0x3], 0x6, 0x8, 0x1}}, 0x40)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x12, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xd, 0xb, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x4, 0xbd, &(0x7f0000000740)=""/189, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x1ff, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r2, r2, r2], &(0x7f0000000880)=[{0x3, 0x4, 0x5, 0x9}, {0x3, 0x1, 0xa, 0x4}, {0x2, 0x5, 0xe, 0x2}, {0x5, 0x4, 0xe}, {0x5, 0x5, 0xa}, {0x1, 0x5, 0x5, 0xb}, {0x4, 0x5, 0x8, 0xa}]}, 0x94) (async)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000001040)=0xfffffffc, 0x4) (async)
sendto$unix(r7, &(0x7f0000001080)="00a8", 0x2, 0xd1, 0x0, 0x0) (async)
recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0xf, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r9, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000cc0)={r3, r4, 0x4, r9}, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r10, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7bc2e08e77fde29202b042813ab8d1de"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9db54eb1780ce51138e2d1a7ea57a58a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d79c8979c37a84749e4c044035ea82ba"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004044}, 0x8040) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000007d00000300000a800000001b0a010100000000000000000a00000a0900010073797a31000021000c00024000000000000000022c0004"], 0xc8}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=<r13=>r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=r13], 0x4c}}, 0x0)

3.520012149s ago: executing program 2 (id=3338):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000000c0), 0x1000, 0x800}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x10, 0x4)
bind$xdp(r1, &(0x7f0000000140)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000004100050101eaffffffffffff02010000000000001c0001000600060086dd0000100007007f0000017f00000111db66021c"], 0x48}, 0x1, 0x0, 0x0, 0x4048841}, 0xc810)

2.711607214s ago: executing program 2 (id=3340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8], 0x4c}}, 0x0)

2.666213115s ago: executing program 5 (id=3342):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'nicvf0\x00', 0x7})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$packet(r3, &(0x7f0000000380)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x9c}}, 0x8000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xb4}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='8\x00', @ANYRES64, @ANYBLOB="010000000000000000003f"], 0x38}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in=@multicast2, @in=@empty, 0x0, 0xfd, 0x2, 0x7f, 0xa, 0x20, 0x10}, {0x8, 0x14, 0x100001002, 0x81, 0xfff, 0xffffffffffffb473, 0xfffffffffffffffb}, {0x1000000000, 0x2000000000000001, 0x2, 0xffffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={0x308, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff7, 0x52}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x74, 0x2a, [@prep={0x83, 0x1f, {{}, 0xdf, 0x7, @broadcast, 0x0, @void, 0x2}}, @tim={0x5, 0x4d, {0x9, 0xb, 0x2, "f0a0a687bd961d5b0f672b0d8b14cfac118d01aa4da2dfcab1b1aa50f6600a5726cd1e7a726101708f14f44a26448abec8e736194cb3b3f18f88be96d1dca8b78adb8fcdac7ade44b9c5"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x9c, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0x9, @device_b, 0x35, @void, 0x6, 0x6, @device_b, 0x2}}, @supported_rates={0x1, 0x8, [{0x16}, {0x3}, {0xb, 0x1}, {0x9}, {0x6}, {0x12, 0x1}, {0x41}, {0x48}]}, @preq={0x82, 0x57, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x4, 0xfa, 0x7, @device_a, 0x1, @value=@broadcast, 0x7ff, 0x1ff, 0x5, [{{0x1, 0x0, 0x1}}, {{0x1}, @device_b, 0x2}, {{0x0, 0x0, 0x1}, @device_b, 0x7fff}, {{}, @device_b, 0x9c1}, {{0x1, 0x0, 0x1}, @broadcast, 0x1ff}]}}, @ssid={0x0, 0x12, @random="15fc42c93fab1bd276c5b0a02fb90f4269b0"}]}, @NL80211_ATTR_IE={0x1ad, 0x2a, [@measure_req={0x26, 0xdf, {0x4, 0x84, 0x9, "f7f8088997b6d4f000262cdd60198000d158b00c4b45632d9016d816dc9197f44f2f5bc5558580dd0f368baa357bd78fad21c26c57f251dbfd812c0677a72bdef607e896aeeb5ebd8e6bcfde3235acaa09951d7dc0b4f8af47a9375866469b1b8117b13974753ee2a1f694a6fcbfb24a437a4af9d6e7485c3e802124bf8daaa9db43d4821f1c63b58ece2078ef9c50a9a02435bb4aaaa057bd87c9a14ea0c98543f67394fe7fc63d5b276235c63f1624511382be02ac44d939ce575473c8d99f4e390a4a1151bf4d39d482ae24973bc68c6397b42e5edcb9f253ca9a"}}, @random_vendor={0xdd, 0x5a, "fc4d44e2dac190906d230fe8b91d7dd3e654c49579e054cd2778eacfbedb123a7d2f9ec9be86348077da18ecbddb0be520b1be790383ffa05d0e1a2b0914dd8c5bbf14a071a8ca640657d53fccec02f5b202e53f6e7cc9ff15ec"}, @random_vendor={0xdd, 0x6a, "ec21b28e6efd0f47289319d9154e4db1448ba8e7357e38ba92391b7b3870c76e82242f2b178fca793c3d9c5d79ac534111d8c90f781dff6fef372b9a790af67e75d1d5afd60730a18fee1a918c6f9b5d3baede429a671d2306bc99a06681b60e3fe54f50a7ae3c743aef"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0x308}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
write(r3, &(0x7f0000000500)="0802110000010802001000000000", 0xe)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40000)

2.615912384s ago: executing program 3 (id=3343):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000c00)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8}}], 0x40000000000026f, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, 0x0, 0x40000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100701a1926bd7000fbdb3098df252e0000", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x8000)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000009c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000a00)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1a, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f0000000b40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r6)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x62, 0x38}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004000)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40805}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="f5af25bd7000000000000e20000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100007de891369f8c66bf00000a20000000000a01080000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a30000000000900010073797a30000000004000000006eb000400000000000000000100030018000480140001800e000100696d6d65646961746500000008000b0f000000030900010073797a30000000001400000011985292add7282c7724cc14e3365752fb9dfd68c21d1baa0001000000bdab9199b6e1957386cc2b62578ba83587f979e64991bad8798e427c02ba4dd16e2dd5"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000000008001e00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000c40)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x12d}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xf5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x6c}}, 0x0)

2.446448606s ago: executing program 2 (id=3344):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)}, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000330600000000fddbdf250a010101200000000000000000000000000040004e248000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe80000000000000000000000000000b230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a000500000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002"], 0x140}}, 0x200080d4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x14)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
socket$nl_crypto(0x10, 0x3, 0x15)

2.340274467s ago: executing program 5 (id=3345):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x29, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x40)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x0, 0x7, "5e078c", 0x2, 0x6})

2.220099946s ago: executing program 1 (id=3346):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0x800e, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)

2.105000125s ago: executing program 3 (id=3347):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0xd3, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x8009, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000)
r2 = socket(0x200000000000011, 0x2, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

2.086838167s ago: executing program 2 (id=3348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r3=>0x0})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x1b44f)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
write(r6, &(0x7f0000000140)="84000000", 0x4)

1.867553258s ago: executing program 1 (id=3349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x214}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x10000014)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000400)={'syztnl2\x00', <r4=>0x0, 0x20, 0x10, 0x6, 0x4f29172e, {{0x6, 0x4, 0x3, 0x37, 0x18, 0x67, 0x0, 0x6, 0x4, 0x0, @loopback, @multicast1, {[@noop]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x3, [@ptr={0x5, 0x0, 0x0, 0x2, 0x5}, @datasec={0xe, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x9, 0x800}, {0x5, 0x6, 0x1}, {0x2, 0x0, 0x8}, {0x2, 0x3, 0x8}, {0x2, 0x40, 0x7}, {0x4, 0xe, 0x7}, {0x5, 0x6, 0x9}], "68f73d"}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/225, 0x8b, 0xe1, 0x0, 0xfea, 0x10000}, 0x28)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xb5, &(0x7f0000000340)=""/181, 0x0, 0xe, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000680)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xf, 0xb8e, 0xe6da}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r6], &(0x7f0000000780)=[{0x2, 0x1, 0x9, 0x4}, {0x2, 0x1, 0x10, 0x3}, {0x3, 0x4, 0x2, 0x2}, {0x0, 0x3, 0x4, 0x5}, {0x4, 0x2, 0x6, 0x2}], 0x10, 0x90f9}, 0x94)
r7 = accept4(r0, 0x0, &(0x7f0000000900), 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000a40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x108, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c01}, 0x4)
r9 = accept4(r0, &(0x7f0000000b80)=@rc={0x1f, @none}, &(0x7f0000000c00)=0x80, 0x800)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r9)
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000011c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001180)={&(0x7f0000000cc0)={0x4b0, r10, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x47, 0x3, "30539191799c2018fd16b30e68680beb22e5266a95bc3d0031268afd1305a4c11c49ad5fdd7a50527725362b7fa4196844a36f21e66a9f67d946c9905e95548a4c2ffc"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "da3c49cac2bd35b489113387ba89b82e40476766ad82"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf9b0}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff3}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2b0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a3e23f026ae3cd9487269b172199c86c5bc0b4e57e9676"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe5100335}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6af0a22b34333c6339b714572526aa904d5e7b51be2dd87a61"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x84, 0x3, "694f4ecd76e0938b38c61292f0b9cc7470d0992ed0bb1bbfc771c061d4ba3e227f3d82eed6f6012370626b83b3e6b716cbf0effb86de5036b886dff9618492489e59a0f1332ff17a12597d3271feadf56abef01b318f156bdd4f6631f607e16536693ee8e8da66394ea988f10b555567e89b8148628156d0e4ba33fd30b34e9c"}, @TIPC_NLA_NODE_ID={0x6e, 0x3, "3e193f6004c06dbdcef74a00e5ef79e59041edc070b05fd7df1aeee6609bcf0a52f9578ab3ee7f999974281887913a043abc2ce6319ebe097a176a89975e04abad177ecf9bea59f9fbfcebc55acfe764d23b5404a08f5da6137e7863a0923d7949def403766ba67e7e48"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff419}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x70}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8d7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x700000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1340}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18b5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ebb539c}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4008044)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x20044040)
ioctl$XFS_IOC_DIOINFO(r6, 0x800c581e, &(0x7f0000001300))
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r11, 0x111, 0x4, 0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001340))
sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000001640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f00000013c0)={0x208, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xba, 0x8, "a31dd7bf87bea28fd561d2d4e2ccafbd4af019dbfa8d6b2d92c38cd0cc4dbef74a31a0ca787337daad0bf945c9b1d605a375fdbb8c1638d02a9f81e9eb04057e365f3b1631ff77fd6ada317f51be1c3914244f6ab7333acc086b740555e8c848d9f91d67c64a86bc7fd2aa04e11814c9f29bdf18f23b3f8bc25588598349bed4b4b5b4b45ad346e93bb33e4bbcffe21afff5df8a1e57699e5d84ca99facf6f3d0005978ac2c3617e1e978dd760eb9808e7354ac61bee"}, @NFTA_OBJ_USERDATA={0xfe, 0x8, "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"}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000001680)={0x1, 'hsr0\x00', {}, 0x7})
sendto$inet(r7, &(0x7f00000016c0)="db670aea555a1f7dbeac3c639d4368aa585e0b806d11d8136699e542bebf1abe7a4856a234d550620616312e8533", 0x2e, 0x8000, &(0x7f0000001700)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(r2, &(0x7f0000001740), &(0x7f0000001780)=0x14)
syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)

1.75153993s ago: executing program 5 (id=3350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}]}]}, 0x30}}, 0x4000)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x32}}}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x4}, {0xff, 0x3}, {0xf2}, {0x5, 0x7}, {0x1e, 0x5}], "eb565e352001e771"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xf9, 0x6}, {0x7, 0x1}, {0xfc, 0x5}, {0x4, 0x1}, {0x3, 0x7}, {0xb1, 0x4}, {0x1}, {0x5, 0x4}, {0xc4, 0x3}, {0xfc}, {0x7, 0x4}], "744d28d376e1583b"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x80, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x6, 0x5}, {0xf4}, {0x6, 0x6}, {0x2, 0x2}, {0x7b, 0x5}, {0x9, 0x4}, {0x99, 0x4}, {0x76, 0x6}, {0x5, 0x7}, {0x7}, {0x0, 0x6}, {0xc, 0x4}], "8b211a45ab3ecdaf"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x9, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x6, 0x6}, {0x88, 0x6}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0xbe, 0x4}, {0x6, 0x1}, {0xfb, 0x3}, {0x5, 0x5}, {0x6, 0x3}], "551ea7d317309e04"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0xc4, 0x2f, 0x20, 0x70bd25, 0x0, {0x4}, [@generic="31cc1c6e18793f3b83dd3d3b6fd36ebd5d8fc269759ba8404ee9713809cc92e1d383f1ed775c62572141e35dbab2e73c1d7bad62a6b69b137ce122482b423ca31b9a141aae9e847a654c529ffce43b10db8f887d6491d955dc85e339a7d4b84fb062c118cbad9dd4466939c90e8135c601cc4cd28d33b72095ff8d44fc67ea4b75de671c868ec57fa1f981f710b7b4940e6c557f747b8f707266fc1f2cd8943534e3beec8596734a9155c06e78e785"]}, 0xc4}, 0x1, 0x0, 0x0, 0x42006}, 0x80000)

1.514264049s ago: executing program 3 (id=3351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x30}}, 0x0)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000000c0)={0x2, 0x1, 0x9, 0x0, 0x60, 0x8}) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001000400000008000400", @ANYRES32=r2], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0)

1.257225551s ago: executing program 1 (id=3352):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="9feb010020000000000000002800000028000000070000000000000001000010"], 0x0, 0x47}, 0x20)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000001480)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f00000014c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}}}, 0x10)
close(r2)
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0x12, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r6, &(0x7f0000000040)={0x10, @short}, 0x2)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x10)
connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
write$6lowpan_enable(r0, &(0x7f00000013c0)='1', 0x1)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x4f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @u32=0xd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40815}, 0xc000)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000300)=<r7=>0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000003c0)={{r4}, r7, 0x6, @inherit={0x70, &(0x7f0000001500)=ANY=[@ANYBLOB="00000000000000000500000000000000aa0700000000000003000000000000002b000000000000000400000000000000f13300000000000006000000000000000080000000000000000000000000000005000000000000000000000000000000485c00000000000002005a0e0d271749000000000000"]}, @name="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"})

1.123405987s ago: executing program 5 (id=3353):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={<r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000079b0900000000000620040000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltclass={0x38, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc46467bbd2b85006, 0xb}, {0x4, 0xffe0}, {0xd, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x24000000)

935.941816ms ago: executing program 3 (id=3354):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x5, 0x0, 0x0, 'urn:nfc:sn:snep\x00', 0xf}, 0x60) (async)
close(0x4) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x53, &(0x7f0000000180)=0x2, 0x4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464650000696d0000000f0002006e657400a0efba5464657673696d30000008008e0002000000a6ff8f0008000000000000000c009000fdffff", @ANYRES16=r2, @ANYBLOB='T\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4)

787.518738ms ago: executing program 2 (id=3355):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0x98, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xff4f}}}, {{@ip={@multicast1, @private=0xa010101, 0xffffffff, 0xffffff00, 'geneve0\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7f, 0x80000000, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711165000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

619.365271ms ago: executing program 3 (id=3356):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00"/36, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

619.024221ms ago: executing program 1 (id=3357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3ec000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x401}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x4000040)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080000000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100000000f2ff010073797a3000000000080005400000000d08000640ffffff00080003405b1d00384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180ffffffff140000001000010000000000000000000084000a"], 0xe0}}, 0x0)

617.299548ms ago: executing program 5 (id=3358):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0x800e, 0x3]}}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x6})
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)

296.692586ms ago: executing program 1 (id=3359):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000000010000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000000000000000002000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000967d8784dd480657000000000055090100ffffffff9500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000562283dd19eda65b4a6f4bd63901302794171ad90e1e71760d6f70aec36c75a2282ad9f1282c7cbb937a1745999227cba1c0790bf3d4a647e544b3794fbd59f4b271a1e20ac3"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0x4e20, 0x9, @loopback, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="6327ec02c4fc1d5d4d5d4f", 0xb}], 0x1, &(0x7f0000000200)=[@rthdrdstopts={{0x110, 0x29, 0x37, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0xa, 0x490, [0xd, 0x1, 0x5, 0x4073717a, 0x6, 0x7, 0x1000, 0x8]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xa1, 0xf, [0x9, 0x2, 0x6, 0x0]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3f, 0x6, [0x8, 0x3, 0x1000000000000, 0x9, 0x4]}}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x6c, 0xa, 0x1, 0x8, 0x0, [@loopback, @local, @local, @empty, @mcast2]}}}], 0x190}, 0x0)

280.926434ms ago: executing program 5 (id=3360):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001180)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async)
recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001180)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) (async)

147.808315ms ago: executing program 3 (id=3361):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x4, 0x0, 0xff, 0x1}, 0x20)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = getuid()
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@private2, <r4=>0x0}, &(0x7f0000000140)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="a80300001d00080025bd7000fedbdf25e4000600ac1414aa000000000000000000000000000000000000000000000000000000004e2308004e21c28b0200a0206c000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000003e000004d533000000000000000000000000000000000000000100000000000000ffffffffffffff7f8a000000000000000100000000000000ff000000000000007d060000000000000800000000000000090d0000000000000000000000000000020000000000000000010000000000000e00000000000000bd000000ff7f0000ffffff7f01000000000000000a000301290000000000000006002500090000000c001c00", @ANYRES32=r5, @ANYBLOB="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"], 0x3a8}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x20048094}, 0x20000000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x97}, 0x20)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x3f9, 0x10, 0x10000, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
r9 = socket$netlink(0x10, 0x3, 0xf)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000009c0))
listen(r0, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r10=>0x0, 0x2f, 0x5, 0x6, 0x100, 0x2, @mcast2, @rand_addr=' \x01\x00', 0x700, 0x7800, 0x20000000, 0x26}})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x3e1280, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x1001})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r12 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETLINK(r11, 0x400454cd, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000000880)='GPL\x00', 0x2, 0xfd90, &(0x7f00000008c0)=""/195}, 0x48)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1})
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x67, r10})

0s ago: executing program 1 (id=3362):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000260001000000000004000000020100800c000100020000000000000014000c01"], 0x114}], 0x1}, 0x0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x8000}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={<r5=>0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000200)={r5, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f00000002c0)=0x84)
getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000680)=""/4057, &(0x7f0000001680)=0xfd9)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)

kernel console output (not intermixed with test programs):

w at hook 1
[  403.035730][T16402] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001
[  403.042314][ T6169] wlan0: Trigger new scan to find an IBSS to join
[  403.415014][   T32] net_ratelimit: 30 callbacks suppressed
[  403.415039][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  403.485654][T16395] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  403.531597][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  403.644110][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  403.762991][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  403.764309][T16411] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  403.766025][T16411] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  403.952060][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  403.974636][T16414] netlink: 'syz.2.2748': attribute type 1 has an invalid length.
[  404.072129][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  404.183718][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  404.292976][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  405.057156][T16444] bond13 (unregistering): Released all slaves
[  405.172603][T16385] wg0 speed is unknown, defaulting to 1000
[  405.877779][T16449] __nla_validate_parse: 6 callbacks suppressed
[  405.877799][T16449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[  405.938755][T16450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'.
[  406.002725][ T1119] wlan0: Trigger new scan to find an IBSS to join
[  406.979386][T16420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.158680][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  408.185358][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  408.187084][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  408.206538][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  408.209167][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  408.471521][ T6181] net_ratelimit: 24 callbacks suppressed
[  408.471543][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  408.581771][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  408.691376][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  408.803912][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  408.915387][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  408.975547][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  408.995118][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  408.997782][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  409.019070][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  409.028432][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  409.041895][ T6181] wlan0: Creating new IBSS network, BSSID 8e:f9:27:7f:8e:e4
[  409.387959][T16498] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  409.387980][T16498] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2766'.
[  409.479847][T16493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2766'.
[  409.481354][T16493] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2766'.
[  409.481376][T16493] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2766'.
[  409.514289][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2767'.
[  409.514916][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  409.965382][T16497] bond10: entered promiscuous mode
[  409.965566][T16497] bond10: entered allmulticast mode
[  410.011685][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  410.221152][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  410.321003][ T5631] Bluetooth: hci5: command tx timeout
[  410.337569][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  410.450422][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  410.618350][T16477] rxe_eth0 speed is unknown, defaulting to 1000
[  411.149958][T16534] FAULT_INJECTION: forcing a failure.
[  411.149958][T16534] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  411.150013][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.0.2775 Not tainted syzkaller #0 PREEMPT(full) 
[  411.150035][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.150050][T16534] Call Trace:
[  411.150061][T16534]  <TASK>
[  411.150070][T16534]  dump_stack_lvl+0xe8/0x150
[  411.150170][T16534]  should_fail_ex+0x410/0x560
[  411.150293][T16534]  prepare_alloc_pages+0x223/0x600
[  411.150346][T16534]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  411.150374][T16534]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  411.150395][T16534]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  411.150420][T16534]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  411.150448][T16534]  ? __pfx_policy_nodemask+0x10/0x10
[  411.150489][T16534]  __alloc_pages_noprof+0x10/0x100
[  411.150513][T16534]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  411.150545][T16534]  ? alloc_pages_noprof+0x140/0x2b0
[  411.150575][T16534]  __kasan_populate_vmalloc+0xb7/0x1c0
[  411.150603][T16534]  alloc_vmap_area+0xd1a/0x1420
[  411.150646][T16534]  ? __pfx_alloc_vmap_area+0x10/0x10
[  411.150671][T16534]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  411.150695][T16534]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  411.150717][T16534]  ? __get_vm_area_node+0x155/0x2f0
[  411.150740][T16534]  __get_vm_area_node+0x200/0x2f0
[  411.150765][T16534]  __vmalloc_node_range_noprof+0x343/0x1540
[  411.150786][T16534]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  411.150825][T16534]  ? __lock_acquire+0x747/0x2de0
[  411.150891][T16534]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  411.150918][T16534]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  411.150937][T16534]  __vmalloc_noprof+0xd2/0x120
[  411.150954][T16534]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  411.150984][T16534]  bpf_prog_alloc_no_stats+0x47/0x560
[  411.151004][T16534]  ? bpf_prog_alloc+0x2a/0x1a0
[  411.151027][T16534]  bpf_prog_alloc+0x3c/0x1a0
[  411.151051][T16534]  bpf_prog_load+0x7f8/0x1c20
[  411.151085][T16534]  ? __pfx_bpf_prog_load+0x10/0x10
[  411.151131][T16534]  __sys_bpf+0xd0d/0xd90
[  411.151159][T16534]  ? __pfx___sys_bpf+0x10/0x10
[  411.151191][T16534]  ? __fget_files+0x2a/0x420
[  411.151240][T16534]  ? ksys_write+0x242/0x270
[  411.151268][T16534]  ? __pfx_ksys_write+0x10/0x10
[  411.151293][T16534]  __x64_sys_bpf+0xba/0xd0
[  411.151316][T16534]  do_syscall_64+0x166/0x520
[  411.151412][T16534]  ? trace_irq_disable+0x3b/0x140
[  411.151439][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.151473][T16534]  ? clear_bhb_loop+0x70/0xc0
[  411.151495][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.151514][T16534] RIP: 0033:0x7f453d99e559
[  411.151532][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.151548][T16534] RSP: 002b:00007f453e8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.151569][T16534] RAX: ffffffffffffffda RBX: 00007f453dc25fa0 RCX: 00007f453d99e559
[  411.151584][T16534] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  411.151596][T16534] RBP: 00007f453e8c9090 R08: 0000000000000000 R09: 0000000000000000
[  411.151607][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.151618][T16534] R13: 00007f453dc26038 R14: 00007f453dc25fa0 R15: 00007ffe5fe54368
[  411.151649][T16534]  </TASK>
[  411.203458][ T5631] Bluetooth: hci6: command tx timeout
[  411.348522][T16534] syz.0.2775: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  411.348599][T16534] CPU: 1 UID: 0 PID: 16534 Comm: syz.0.2775 Not tainted syzkaller #0 PREEMPT(full) 
[  411.348618][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.348629][T16534] Call Trace:
[  411.348636][T16534]  <TASK>
[  411.348644][T16534]  dump_stack_lvl+0xe8/0x150
[  411.348675][T16534]  warn_alloc+0x24d/0x270
[  411.348698][T16534]  ? lockdep_hardirqs_on+0x7b/0x110
[  411.348803][T16534]  ? __pfx_warn_alloc+0x10/0x10
[  411.348822][T16534]  ? kfree+0x1c5/0x650
[  411.348846][T16534]  ? __get_vm_area_node+0x219/0x2f0
[  411.348870][T16534]  __vmalloc_node_range_noprof+0x36b/0x1540
[  411.348890][T16534]  ? __lock_acquire+0x747/0x2de0
[  411.348936][T16534]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  411.348967][T16534]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  411.348989][T16534]  __vmalloc_noprof+0xd2/0x120
[  411.349008][T16534]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  411.349034][T16534]  bpf_prog_alloc_no_stats+0x47/0x560
[  411.349056][T16534]  ? bpf_prog_alloc+0x2a/0x1a0
[  411.349087][T16534]  bpf_prog_alloc+0x3c/0x1a0
[  411.349112][T16534]  bpf_prog_load+0x7f8/0x1c20
[  411.349147][T16534]  ? __pfx_bpf_prog_load+0x10/0x10
[  411.349194][T16534]  __sys_bpf+0xd0d/0xd90
[  411.349224][T16534]  ? __pfx___sys_bpf+0x10/0x10
[  411.349257][T16534]  ? __fget_files+0x2a/0x420
[  411.349291][T16534]  ? ksys_write+0x242/0x270
[  411.349313][T16534]  ? __pfx_ksys_write+0x10/0x10
[  411.349342][T16534]  __x64_sys_bpf+0xba/0xd0
[  411.349366][T16534]  do_syscall_64+0x166/0x520
[  411.349387][T16534]  ? trace_irq_disable+0x3b/0x140
[  411.349407][T16534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.349425][T16534]  ? clear_bhb_loop+0x70/0xc0
[  411.349447][T16534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.349466][T16534] RIP: 0033:0x7f453d99e559
[  411.349483][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.349497][T16534] RSP: 002b:00007f453e8c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  411.349516][T16534] RAX: ffffffffffffffda RBX: 00007f453dc25fa0 RCX: 00007f453d99e559
[  411.349530][T16534] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  411.349542][T16534] RBP: 00007f453e8c9090 R08: 0000000000000000 R09: 0000000000000000
[  411.349553][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.349565][T16534] R13: 00007f453dc26038 R14: 00007f453dc25fa0 R15: 00007ffe5fe54368
[  411.349594][T16534]  </TASK>
[  411.359640][T16534] Mem-Info:
[  411.359653][T16534] active_anon:6173 inactive_anon:4 isolated_anon:0
[  411.359653][T16534]  active_file:384 inactive_file:43193 isolated_file:0
[  411.359653][T16534]  unevictable:0 dirty:36 writeback:0
[  411.359653][T16534]  slab_reclaimable:12212 slab_unreclaimable:119005
[  411.359653][T16534]  mapped:30471 shmem:534 pagetables:5868
[  411.359653][T16534]  sec_pagetables:0 bounce:0
[  411.359653][T16534]  kernel_misc_reclaimable:0
[  411.359653][T16534]  free:1080304 free_pcp:13970 free_cma:0
[  411.359699][T16534] Node 0 active_anon:24688kB inactive_anon:16kB active_file:1536kB inactive_file:172568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113692kB dirty:144kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14764kB pagetables:15120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  411.359747][T16534] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:8352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  411.359796][T16534] Node 0 DMA free:10132kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:124kB free_cma:0kB
[  411.359847][T16534] lowmem_reserve[]: 0 2468 2468 2468 2468
[  411.359879][T16534] Node 0 DMA32 free:434436kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24688kB inactive_anon:16kB active_file:1536kB inactive_file:172568kB unevictable:0kB writepending:144kB zspages:0kB present:3129332kB managed:2527500kB mlocked:0kB bounce:0kB free_pcp:35520kB local_pcp:14712kB free_cma:0kB
[  411.359931][T16534] lowmem_reserve[]: 0 0 0 0 0
[  411.359960][T16534] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  411.360008][T16534] lowmem_reserve[]: 0 0 0 0 0
[  411.360036][T16534] Node 1 Normal free:3876648kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:20204kB local_pcp:8752kB free_cma:0kB
[  411.360093][T16534] lowmem_reserve[]: 0 0 0 0 0
[  411.360123][T16534] Node 0 DMA: 3*4kB (UM) 3*8kB (UM) 1*16kB (M) 1*32kB (U) 1*64kB (M) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10132kB
[  411.360426][T16534] Node 0 DMA32: 2124*4kB (UM) 1985*8kB (UME) 1978*16kB (UM) 1858*32kB (UME) 1465*64kB (UME) 688*128kB (UME) 156*256kB (UME) 30*512kB (UM) 16*1024kB (UM) 6*2048kB (UME) 13*4096kB (U) = 434520kB
[  411.360563][T16534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  411.360647][T16534] Node 1 Normal: 28*4kB 
[  411.361319][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  411.433423][T16534] (UM) 9*8kB (UM) 3*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 2*2048kB (UM) 945*4096kB (M) = 3876648kB
[  411.433541][T16534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  411.433556][T16534] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  411.433569][T16534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  411.433583][T16534] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  411.433597][T16534] 44107 total pagecache pages
[  411.433618][T16534] 0 pages in swap cache
[  411.433624][T16534] Free swap  = 124996kB
[  411.433631][T16534] Total swap = 124996kB
[  411.433638][T16534] 2097051 pages RAM
[  411.433644][T16534] 0 pages HighMem/MovableOnly
[  411.433650][T16534] 433560 pages reserved
[  411.433656][T16534] 0 pages cma reserved
[  412.401782][ T5631] Bluetooth: hci5: command tx timeout
[  412.665667][T16546] x_tables: duplicate underflow at hook 4
[  412.864279][   T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.864313][   T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.096797][   T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.096831][   T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.281991][ T5631] Bluetooth: hci6: command tx timeout
[  413.375500][   T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.375536][   T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.443326][T16489] rxe_eth0 speed is unknown, defaulting to 1000
[  413.487232][ T1119] net_ratelimit: 13 callbacks suppressed
[  413.487252][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  413.768243][   T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  413.768279][   T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.843057][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  413.952059][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  413.998418][T16572] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2783'.
[  414.053930][T16477] wg0 speed is unknown, defaulting to 1000
[  414.200042][T16576] ip_tables: iptables: counters copy to user failed while replacing table
[  414.233212][T16583] ip_tables: iptables: counters copy to user failed while replacing table
[  414.421589][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  414.501126][ T5631] Bluetooth: hci5: command tx timeout
[  414.552210][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  414.782982][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  414.990260][   T32] bridge_slave_1: left promiscuous mode
[  414.993603][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.076967][   T32] bridge_slave_0: left allmulticast mode
[  415.077325][   T32] bridge_slave_0: left promiscuous mode
[  415.078215][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.362219][ T5631] Bluetooth: hci6: command tx timeout
[  415.424778][   T32] dvmrp1: left allmulticast mode
[  415.504571][T16607] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2788'.
[  415.600824][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2789'.
[  416.561311][ T5631] Bluetooth: hci5: command tx timeout
[  417.441367][ T5631] Bluetooth: hci6: command tx timeout
[  417.827324][   T32] bond8 (unregistering): (slave bridge16): Releasing backup interface
[  417.830616][   T32] bridge16 (unregistering): left promiscuous mode
[  417.865306][   T32] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.870029][   T32] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.894367][   T32] .` (unregistering): (slave team0): Releasing backup interface
[  417.959331][   T32] .` (unregistering): Released all slaves
[  417.974777][   T32] bond1 (unregistering): Released all slaves
[  418.005689][   T32] bond2 (unregistering): Released all slaves
[  418.045378][   T32] bond3 (unregistering): Released all slaves
[  418.079493][   T32] bond4 (unregistering): Released all slaves
[  418.116044][   T32] bond5 (unregistering): Released all slaves
[  418.174649][   T32] bond0 (unregistering): Released all slaves
[  418.190044][   T32] bond6 (unregistering): Released all slaves
[  418.203622][   T32] bond7 (unregistering): Released all slaves
[  418.219980][   T32] bond8 (unregistering): Released all slaves
[  418.239384][T16594] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  418.314531][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2
[  418.602289][   T32] : left promiscuous mode
[  418.849594][T16627] bond11: Unable to set down delay as MII monitoring is disabled
[  418.918885][T16627] bond11 (unregistering): Released all slaves
[  418.997663][   T32] tipc: Disabling bearer <eth:ipvlan1>
[  418.999852][   T32] tipc: Left network mode
[  419.210682][T16641] veth5: entered promiscuous mode
[  419.210704][T16641] veth5: entered allmulticast mode
[  419.304518][T16644] syzkaller1: entered promiscuous mode
[  419.304540][T16644] syzkaller1: entered allmulticast mode
[  419.311246][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  419.553682][T16489] wg0 speed is unknown, defaulting to 1000
[  419.573195][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  419.785336][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'.
[  420.293463][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  420.441938][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  420.554291][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  421.051569][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  421.186565][ T5619] syz2: Port: 1 Link ACTIVE
[  421.355871][T16711] netlink: 'syz.3.2805': attribute type 10 has an invalid length.
[  421.438622][T16711] veth1_macvtap: left promiscuous mode
[  421.643131][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3
[  421.791400][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  421.805899][T16477] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.806007][T16477] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.806183][T16477] bridge_slave_0: entered allmulticast mode
[  421.840415][T16720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2807'.
[  421.854298][T16477] bridge_slave_0: entered promiscuous mode
[  421.901235][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  421.981704][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'.
[  421.981740][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'.
[  421.990928][T16477] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.993104][T16477] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.993432][T16477] bridge_slave_1: entered allmulticast mode
[  422.002483][T16477] bridge_slave_1: entered promiscuous mode
[  422.315449][T16736] FAULT_INJECTION: forcing a failure.
[  422.315449][T16736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.315480][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.3.2812 Not tainted syzkaller #0 PREEMPT(full) 
[  422.315500][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  422.315510][T16736] Call Trace:
[  422.315517][T16736]  <TASK>
[  422.315525][T16736]  dump_stack_lvl+0xe8/0x150
[  422.315556][T16736]  should_fail_ex+0x410/0x560
[  422.315586][T16736]  strncpy_from_user+0x36/0x2c0
[  422.315617][T16736]  bpf_prog_load+0xdef/0x1c20
[  422.315651][T16736]  ? __pfx_bpf_prog_load+0x10/0x10
[  422.315698][T16736]  __sys_bpf+0xd0d/0xd90
[  422.315729][T16736]  ? __pfx___sys_bpf+0x10/0x10
[  422.315762][T16736]  ? __fget_files+0x2a/0x420
[  422.315794][T16736]  ? ksys_write+0x242/0x270
[  422.315815][T16736]  ? __pfx_ksys_write+0x10/0x10
[  422.315839][T16736]  __x64_sys_bpf+0xba/0xd0
[  422.315860][T16736]  do_syscall_64+0x166/0x520
[  422.315882][T16736]  ? trace_irq_disable+0x3b/0x140
[  422.315901][T16736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.315920][T16736]  ? clear_bhb_loop+0x70/0xc0
[  422.315943][T16736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.315961][T16736] RIP: 0033:0x7f1df139e559
[  422.315978][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.315993][T16736] RSP: 002b:00007f1df2180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  422.316013][T16736] RAX: ffffffffffffffda RBX: 00007f1df1625fa0 RCX: 00007f1df139e559
[  422.316027][T16736] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  422.316038][T16736] RBP: 00007f1df2180090 R08: 0000000000000000 R09: 0000000000000000
[  422.316050][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.316078][T16736] R13: 00007f1df1626038 R14: 00007f1df1625fa0 R15: 00007ffed7cd6c28
[  422.316107][T16736]  </TASK>
[  422.886713][T16738] syzkaller0: entered promiscuous mode
[  422.886738][T16738] syzkaller0: entered allmulticast mode
[  422.892169][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  422.913128][T16477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.197707][T16477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.484697][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'.
[  426.535821][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4
[  426.568723][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.568777][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.588720][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.588742][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.632341][T16772] ip_tables: iptables: counters copy to user failed while replacing table
[  426.650698][   T32] veth1_vlan: left promiscuous mode
[  427.160747][T16791] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2824'.
[  427.160867][T16791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2824'.
[  427.536518][   T32] team0 (unregistering): Port device team_slave_1 removed
[  427.560594][   T32] team0 (unregistering): Port device team_slave_0 removed
[  427.766436][   T32] team0 (unregistering): Port device dummy0 removed
[  427.824814][T16477] team0: Port device team_slave_0 added
[  427.852763][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  427.948003][T16477] team0: Port device team_slave_1 added
[  428.019122][T16477] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.019139][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.019158][T16477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.022068][T16477] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.022085][T16477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.022118][T16477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.031408][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  428.141436][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  428.225355][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2827'.
[  428.246986][T16477] hsr_slave_0: entered promiscuous mode
[  428.247964][T16477] hsr_slave_1: entered promiscuous mode
[  428.248641][T16477] debugfs: 'hsr0' already exists in 'hsr'
[  428.248659][T16477] Cannot create hsr debugfs directory
[  428.407756][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'.
[  428.407786][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2829'.
[  428.514780][T16817] FAULT_INJECTION: forcing a failure.
[  428.514780][T16817] name failslab, interval 1, probability 0, space 0, times 0
[  428.514813][T16817] CPU: 1 UID: 0 PID: 16817 Comm: syz.3.2831 Not tainted syzkaller #0 PREEMPT(full) 
[  428.514833][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  428.514843][T16817] Call Trace:
[  428.514851][T16817]  <TASK>
[  428.514859][T16817]  dump_stack_lvl+0xe8/0x150
[  428.514891][T16817]  should_fail_ex+0x410/0x560
[  428.514922][T16817]  should_failslab+0xa8/0x100
[  428.514950][T16817]  __kmalloc_cache_node_noprof+0xaa/0x620
[  428.514974][T16817]  ? __css_rstat_updated+0x237/0x540
[  428.515030][T16817]  ? __get_vm_area_node+0x155/0x2f0
[  428.515046][T16817]  ? __get_vm_area_node+0x155/0x2f0
[  428.515070][T16817]  __get_vm_area_node+0x155/0x2f0
[  428.515103][T16817]  __vmalloc_node_range_noprof+0x343/0x1540
[  428.515124][T16817]  ? bpf_check+0x115b/0x2ef0
[  428.515158][T16817]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  428.515177][T16817]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  428.515206][T16817]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  428.515228][T16817]  ? apparmor_capable+0x126/0x170
[  428.515339][T16817]  ? bpf_lsm_capable+0x9/0x20
[  428.515373][T16817]  ? security_capable+0x7e/0x2c0
[  428.515469][T16817]  ? bpf_check+0x115b/0x2ef0
[  428.515487][T16817]  __vmalloc_noprof+0xd2/0x120
[  428.515506][T16817]  ? bpf_check+0x115b/0x2ef0
[  428.515532][T16817]  bpf_check+0x115b/0x2ef0
[  428.515572][T16817]  ? __pfx_bpf_check+0x10/0x10
[  428.515595][T16817]  ? bpf_obj_name_cpy+0x194/0x1e0
[  428.515626][T16817]  bpf_prog_load+0x14d6/0x1c20
[  428.515662][T16817]  ? __pfx_bpf_prog_load+0x10/0x10
[  428.515710][T16817]  __sys_bpf+0xd0d/0xd90
[  428.515742][T16817]  ? __pfx___sys_bpf+0x10/0x10
[  428.515775][T16817]  ? __fget_files+0x2a/0x420
[  428.515811][T16817]  ? ksys_write+0x242/0x270
[  428.515833][T16817]  ? __pfx_ksys_write+0x10/0x10
[  428.515857][T16817]  __x64_sys_bpf+0xba/0xd0
[  428.515881][T16817]  do_syscall_64+0x166/0x520
[  428.515903][T16817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.515923][T16817]  ? clear_bhb_loop+0x70/0xc0
[  428.515946][T16817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.515964][T16817] RIP: 0033:0x7f1df139e559
[  428.515982][T16817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.515997][T16817] RSP: 002b:00007f1df2180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  428.516017][T16817] RAX: ffffffffffffffda RBX: 00007f1df1625fa0 RCX: 00007f1df139e559
[  428.516031][T16817] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  428.516043][T16817] RBP: 00007f1df2180090 R08: 0000000000000000 R09: 0000000000000000
[  428.516054][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  428.516065][T16817] R13: 00007f1df1626038 R14: 00007f1df1625fa0 R15: 00007ffed7cd6c28
[  428.516103][T16817]  </TASK>
[  428.516289][T16817] syz.3.2831: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  428.516341][T16817] CPU: 1 UID: 0 PID: 16817 Comm: syz.3.2831 Not tainted syzkaller #0 PREEMPT(full) 
[  428.516359][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  428.516369][T16817] Call Trace:
[  428.516376][T16817]  <TASK>
[  428.516383][T16817]  dump_stack_lvl+0xe8/0x150
[  428.516411][T16817]  warn_alloc+0x24d/0x270
[  428.516427][T16817]  ? __kasan_kmalloc+0x22/0xb0
[  428.516448][T16817]  ? __pfx_warn_alloc+0x10/0x10
[  428.516462][T16817]  ? __css_rstat_updated+0x237/0x540
[  428.516478][T16817]  ? __get_vm_area_node+0x155/0x2f0
[  428.516499][T16817]  ? __get_vm_area_node+0x2a9/0x2f0
[  428.516520][T16817]  __vmalloc_node_range_noprof+0x36b/0x1540
[  428.516547][T16817]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  428.516564][T16817]  ? lruvec_stat_mod_folio+0x6e/0x3e0
[  428.516589][T16817]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  428.516608][T16817]  ? apparmor_capable+0x126/0x170
[  428.516628][T16817]  ? bpf_lsm_capable+0x9/0x20
[  428.516646][T16817]  ? security_capable+0x7e/0x2c0
[  428.516672][T16817]  ? bpf_check+0x115b/0x2ef0
[  428.516694][T16817]  __vmalloc_noprof+0xd2/0x120
[  428.516713][T16817]  ? bpf_check+0x115b/0x2ef0
[  428.516736][T16817]  bpf_check+0x115b/0x2ef0
[  428.516773][T16817]  ? __pfx_bpf_check+0x10/0x10
[  428.516797][T16817]  ? bpf_obj_name_cpy+0x194/0x1e0
[  428.516827][T16817]  bpf_prog_load+0x14d6/0x1c20
[  428.516861][T16817]  ? __pfx_bpf_prog_load+0x10/0x10
[  428.516907][T16817]  __sys_bpf+0xd0d/0xd90
[  428.516936][T16817]  ? __pfx___sys_bpf+0x10/0x10
[  428.516968][T16817]  ? __fget_files+0x2a/0x420
[  428.517001][T16817]  ? ksys_write+0x242/0x270
[  428.517023][T16817]  ? __pfx_ksys_write+0x10/0x10
[  428.517046][T16817]  __x64_sys_bpf+0xba/0xd0
[  428.517066][T16817]  do_syscall_64+0x166/0x520
[  428.517086][T16817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.517113][T16817]  ? clear_bhb_loop+0x70/0xc0
[  428.517131][T16817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.517146][T16817] RIP: 0033:0x7f1df139e559
[  428.517160][T16817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.517172][T16817] RSP: 002b:00007f1df2180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  428.517188][T16817] RAX: ffffffffffffffda RBX: 00007f1df1625fa0 RCX: 00007f1df139e559
[  428.517198][T16817] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  428.517208][T16817] RBP: 00007f1df2180090 R08: 0000000000000000 R09: 0000000000000000
[  428.517217][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  428.517226][T16817] R13: 00007f1df1626038 R14: 00007f1df1625fa0 R15: 00007ffed7cd6c28
[  428.517251][T16817]  </TASK>
[  428.580258][T16817] Mem-Info:
[  428.580273][T16817] active_anon:6220 inactive_anon:4 isolated_anon:0
[  428.580273][T16817]  active_file:384 inactive_file:43200 isolated_file:0
[  428.580273][T16817]  unevictable:0 dirty:65 writeback:0
[  428.580273][T16817]  slab_reclaimable:12092 slab_unreclaimable:116602
[  428.580273][T16817]  mapped:29440 shmem:537 pagetables:5864
[  428.580273][T16817]  sec_pagetables:0 bounce:0
[  428.580273][T16817]  kernel_misc_reclaimable:0
[  428.580273][T16817]  free:1249526 free_pcp:16635 free_cma:0
[  428.580319][T16817] Node 0 active_anon:24876kB inactive_anon:16kB active_file:1536kB inactive_file:172596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109568kB dirty:260kB writeback:0kB shmem:2148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:15104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  428.580367][T16817] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8192kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:8352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  428.580412][T16817] Node 0 DMA free:15240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.580464][T16817] lowmem_reserve[]: 0 2468 2468 2468 2468
[  428.580495][T16817] Node 0 DMA32 free:1104756kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24876kB inactive_anon:16kB active_file:1536kB inactive_file:172596kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:2527500kB mlocked:0kB bounce:0kB free_pcp:36508kB local_pcp:15708kB free_cma:0kB
[  428.580547][T16817] lowmem_reserve[]: 0 0 0 0 0
[  428.580576][T16817] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.580623][T16817] lowmem_reserve[]: 0 0 0 0 0
[  428.580651][T16817] Node 1 Normal free:3878108kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:30032kB local_pcp:9848kB free_cma:0kB
[  428.580700][T16817] lowmem_reserve[]: 0 0 0 0 0
[  428.580729][T16817] Node 0 DMA: 8*4kB (U) 9*8kB (U) 10*16kB (U) 6*32kB (U) 7*64kB (U) 8*128kB (U) 6*256kB (U) 3*512kB (U) 0*1024kB 1*2048kB (M) 2*4096kB (UM) = 15240kB
[  428.580861][T16817] Node 0 DMA32: 2695*4kB (UM) 3443*8kB (UME) 2560*16kB (UME) 2278*32kB (UM) 2094*64kB (UME) 1379*128kB (UME) 764*256kB (UME) 386*512kB (UM) 131*1024kB (UM) 20*2048kB (UME) 18*4096kB (U) = 1104756kB
[  428.588280][T16817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  428.588367][T16817] Node 1 Normal: 28*4kB (UM) 8*8kB (UM) 2*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 6*256kB (UM) 2*512kB (U) 0*1024kB 2*2048kB (UM) 945*4096kB (M) = 3878160kB
[  428.588497][T16817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.588512][T16817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.588524][T16817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  428.588538][T16817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.588552][T16817] 44117 total pagecache pages
[  428.588559][T16817] 0 pages in swap cache
[  428.588566][T16817] Free swap  = 124996kB
[  428.588572][T16817] Total swap = 124996kB
[  428.588578][T16817] 2097051 pages RAM
[  428.588585][T16817] 0 pages HighMem/MovableOnly
[  428.588591][T16817] 433560 pages reserved
[  428.588597][T16817] 0 pages cma reserved
[  428.651673][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  429.135517][T16827] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2833'.
[  429.266139][T16489] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.266547][T16489] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.266846][T16489] bridge_slave_0: entered allmulticast mode
[  429.302790][T16489] bridge_slave_0: entered promiscuous mode
[  429.321029][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  429.495186][T16489] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.495592][T16489] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.495889][T16489] bridge_slave_1: entered allmulticast mode
[  429.525020][T16489] bridge_slave_1: entered promiscuous mode
[  429.541202][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  429.627220][T16830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  429.867029][T16489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.883751][T16489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.958263][T16489] team0: Port device team_slave_0 added
[  429.968175][T16489] team0: Port device team_slave_1 added
[  430.011680][T16489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.011698][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.011720][T16489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.013923][T16489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.013937][T16489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.013960][T16489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.193214][T16845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2837'.
[  430.193424][T16845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2837'.
[  430.281439][   T32] IPVS: stop unused estimator thread 0...
[  430.332156][T16489] hsr_slave_0: entered promiscuous mode
[  430.333173][T16489] hsr_slave_1: entered promiscuous mode
[  430.334096][T16489] debugfs: 'hsr0' already exists in 'hsr'
[  430.334116][T16489] Cannot create hsr debugfs directory
[  430.780622][T16477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.780658][T16477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  430.780682][T16477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.852687][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  430.989323][T16477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  430.989357][T16477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  430.989381][T16477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.065660][T16873] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2843'.
[  431.435020][T16477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.435057][T16477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  431.435082][T16477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.502563][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5
[  431.600795][T16892] __nla_validate_parse: 1 callbacks suppressed
[  431.600815][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'.
[  431.609058][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  431.755653][T16477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.755688][T16477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  431.755713][T16477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.843320][ T4946] block nbd2: Possible stuck request ffff888028fb7000: control (read@0,4096B). Runtime 150 seconds
[  432.061311][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  432.171410][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  432.236568][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2849'.
[  432.253625][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'.
[  432.256554][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'.
[  432.283121][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  432.452390][T16916] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2852'.
[  432.452505][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2852'.
[  432.545571][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2853'.
[  432.623123][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  432.658199][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2853'.
[  432.689770][T16917] vlan3: entered allmulticast mode
[  432.689790][T16917] bond0: entered allmulticast mode
[  432.689803][T16917] bond_slave_0: entered allmulticast mode
[  432.689819][T16917] bond_slave_1: entered allmulticast mode
[  432.763423][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2853'.
[  432.821714][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  433.084870][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  433.271042][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  433.271314][T16936] syzkaller0: entered promiscuous mode
[  433.271329][T16936] syzkaller0: entered allmulticast mode
[  433.337161][T16477] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  433.437122][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  433.527363][T16948] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2856'.
[  433.651720][T16477] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  433.684853][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  433.685740][T16477] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  433.728067][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  433.749693][T16477] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  433.768408][T16477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.004889][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  434.047501][T16489] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  434.077028][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  434.078247][T16489] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  434.102309][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.106668][T16489] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  434.131731][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.134284][T16489] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  434.161606][T16489] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.306489][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  434.375967][T16477] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.414718][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  434.436406][T16477] 8021q: adding VLAN 0 to HW filter on device team0
[  434.485156][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.485261][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.515918][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.516053][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.778819][T16489] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.903742][T16489] 8021q: adding VLAN 0 to HW filter on device team0
[  434.979437][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.979556][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.074848][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.074984][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.822500][T16477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.184098][ T6163] net_ratelimit: 17 callbacks suppressed
[  437.184118][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  437.187025][ T1179] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  437.321004][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  437.402496][T16489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.484059][T16477] veth0_vlan: entered promiscuous mode
[  437.573757][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  437.585757][T16477] veth1_vlan: entered promiscuous mode
[  437.834113][T16477] veth0_macvtap: entered promiscuous mode
[  437.857750][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  437.882688][T17078] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.883796][T17078] batadv_slave_0: entered promiscuous mode
[  437.965615][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  438.070963][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  438.142940][T16477] veth1_macvtap: entered promiscuous mode
[  438.223873][T16477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.265563][T16477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.312251][ T6163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.312296][ T6163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.381609][ T6179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.381663][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  438.382084][ T6179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.614491][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  438.721880][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  438.898509][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.898536][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.011067][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  439.248128][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.248150][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.405460][T16489] veth0_vlan: entered promiscuous mode
[  439.455107][T16489] veth1_vlan: entered promiscuous mode
[  439.530433][T17103] __nla_validate_parse: 1 callbacks suppressed
[  439.530453][T17103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2884'.
[  439.558191][T16489] veth0_macvtap: entered promiscuous mode
[  439.586896][T16489] veth1_macvtap: entered promiscuous mode
[  439.664858][T16489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.724772][T16489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.812460][ T1119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.812536][ T1119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.812569][ T1119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.812600][ T1119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.166266][ T1314] ieee802154 phy2 wpan0: encryption failed: -22
[  440.278580][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.278602][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.432141][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.432162][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.748336][T17127] veth0: entered promiscuous mode
[  441.076185][T17122] veth0: left promiscuous mode
[  441.481752][T17147] veth1_macvtap: entered promiscuous mode
[  441.505272][T17147] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  441.630358][T17147] 8021q: adding VLAN 0 to HW filter on device bond1
[  441.640824][T17147] 8021q: adding VLAN 0 to HW filter on device bond2
[  441.664590][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  441.667537][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  441.671514][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  441.675600][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  441.679373][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  441.774447][T17147] 8021q: adding VLAN 0 to HW filter on device bond5
[  441.811704][T17147] 8021q: adding VLAN 0 to HW filter on device bond6
[  441.901733][T17147] 8021q: adding VLAN 0 to HW filter on device bond7
[  441.925316][T17147] 8021q: adding VLAN 0 to HW filter on device bond9
[  441.954168][T17147] 8021q: adding VLAN 0 to HW filter on device bond11
[  441.963614][T17147] 8021q: adding VLAN 0 to HW filter on device bond12
[  442.281533][   T32] net_ratelimit: 15 callbacks suppressed
[  442.281554][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  442.447032][ T6169] ip6_tunnel:  xmit: Local address not yet configured!
[  442.572033][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  442.681078][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  442.869464][T17183] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  442.874323][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  442.985714][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.093772][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.224304][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.321396][T17189] netlink: 'syz.3.2899': attribute type 3 has an invalid length.
[  443.333661][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.444233][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.555265][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  443.765379][   T53] Bluetooth: hci1: command tx timeout
[  443.835661][T17159] rxe_eth0 speed is unknown, defaulting to 1000
[  443.906236][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'.
[  443.935919][T17212] ebt_limit: overflow, try lower: 4278190080/255
[  444.393328][T17219] Cannot find add_set index 0 as target
[  444.543928][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.544155][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.544356][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.544543][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.544756][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.544950][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.545178][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.686960][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.687197][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.687410][T17225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2909'.
[  444.948663][T17233] xt_hashlimit: size too large, truncated to 1048576
[  445.842733][T17159] wg0 speed is unknown, defaulting to 1000
[  445.853526][   T53] Bluetooth: hci1: command tx timeout
[  446.031578][T17248] netlink: 'syz.5.2914': attribute type 1 has an invalid length.
[  446.138018][T17254] FAULT_INJECTION: forcing a failure.
[  446.138018][T17254] name failslab, interval 1, probability 0, space 0, times 0
[  446.138051][T17254] CPU: 0 UID: 0 PID: 17254 Comm: syz.1.2915 Not tainted syzkaller #0 PREEMPT(full) 
[  446.138072][T17254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  446.138083][T17254] Call Trace:
[  446.138090][T17254]  <TASK>
[  446.138098][T17254]  dump_stack_lvl+0xe8/0x150
[  446.138130][T17254]  should_fail_ex+0x410/0x560
[  446.138160][T17254]  should_failslab+0xa8/0x100
[  446.138188][T17254]  __kmalloc_cache_noprof+0xa3/0x600
[  446.138209][T17254]  ? __lock_acquire+0x747/0x2de0
[  446.138230][T17254]  ? bpf_add_kfunc_call+0x79c/0xdc0
[  446.138248][T17254]  ? bpf_add_kfunc_call+0x79c/0xdc0
[  446.138273][T17254]  bpf_add_kfunc_call+0x79c/0xdc0
[  446.138292][T17254]  ? kasan_save_track+0x4f/0x80
[  446.138319][T17254]  ? __sys_bpf+0xd0d/0xd90
[  446.138341][T17254]  ? __pfx_bpf_add_kfunc_call+0x10/0x10
[  446.138409][T17254]  ? bpf_prog_calc_tag+0x310/0x370
[  446.138438][T17254]  ? vfree+0x42b/0x490
[  446.138477][T17254]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  446.138503][T17254]  add_kfuncs+0x176/0x2e0
[  446.138530][T17254]  bpf_check+0x191d/0x2ef0
[  446.138570][T17254]  ? __pfx_bpf_check+0x10/0x10
[  446.138594][T17254]  ? bpf_obj_name_cpy+0x194/0x1e0
[  446.138625][T17254]  bpf_prog_load+0x14d6/0x1c20
[  446.138659][T17254]  ? __pfx_bpf_prog_load+0x10/0x10
[  446.138707][T17254]  __sys_bpf+0xd0d/0xd90
[  446.138737][T17254]  ? __pfx___sys_bpf+0x10/0x10
[  446.138770][T17254]  ? __fget_files+0x2a/0x420
[  446.138805][T17254]  ? ksys_write+0x242/0x270
[  446.138827][T17254]  ? __pfx_ksys_write+0x10/0x10
[  446.138851][T17254]  __x64_sys_bpf+0xba/0xd0
[  446.138874][T17254]  do_syscall_64+0x166/0x520
[  446.138896][T17254]  ? trace_irq_disable+0x3b/0x140
[  446.138915][T17254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.138934][T17254]  ? clear_bhb_loop+0x70/0xc0
[  446.138956][T17254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.138975][T17254] RIP: 0033:0x7f7b3d79e559
[  446.138993][T17254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.139008][T17254] RSP: 002b:00007f7b3e5df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  446.139028][T17254] RAX: ffffffffffffffda RBX: 00007f7b3da25fa0 RCX: 00007f7b3d79e559
[  446.139041][T17254] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  446.139054][T17254] RBP: 00007f7b3e5df090 R08: 0000000000000000 R09: 0000000000000000
[  446.139065][T17254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  446.139075][T17254] R13: 00007f7b3da26038 R14: 00007f7b3da25fa0 R15: 00007ffe8858a858
[  446.139105][T17254]  </TASK>
[  446.571793][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  447.339631][T17280] sctp: [Deprecated]: syz.3.2923 (pid 17280) Use of int in max_burst socket option.
[  447.339631][T17280] Use struct sctp_assoc_value instead
[  447.923033][   T53] Bluetooth: hci1: command tx timeout
[  447.946133][  T176] net_ratelimit: 29 callbacks suppressed
[  447.946153][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  448.043926][T17301] ip6erspan0: entered allmulticast mode
[  448.063080][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  448.171217][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  448.294331][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  448.402680][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  448.542656][T17314] netlink: 'syz.5.2929': attribute type 1 has an invalid length.
[  449.068600][T17159] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.073179][T17159] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.073491][T17159] bridge_slave_0: entered allmulticast mode
[  449.078085][T17159] bridge_slave_0: entered promiscuous mode
[  449.091701][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  449.118161][T17159] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.118535][T17159] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.119103][T17159] bridge_slave_1: entered allmulticast mode
[  449.295734][T17159] bridge_slave_1: entered promiscuous mode
[  449.403953][T17339] xt_ipcomp: unknown flags 1D
[  449.500273][T17343] netlink: 'syz.3.2936': attribute type 9 has an invalid length.
[  449.530261][T17159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.607520][T17339] batman_adv: batadv0: Adding interface: syzkaller0
[  449.607537][T17339] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.607563][T17339] batman_adv: batadv0: Interface activated: syzkaller0
[  449.849906][T17159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.954570][T17349] syzkaller0: mtu less than device minimum
[  450.012457][   T53] Bluetooth: hci1: command tx timeout
[  450.121584][T17364] FAULT_INJECTION: forcing a failure.
[  450.121584][T17364] name failslab, interval 1, probability 0, space 0, times 0
[  450.121619][T17364] CPU: 0 UID: 0 PID: 17364 Comm: syz.3.2939 Not tainted syzkaller #0 PREEMPT(full) 
[  450.121641][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  450.121652][T17364] Call Trace:
[  450.121660][T17364]  <TASK>
[  450.121668][T17364]  dump_stack_lvl+0xe8/0x150
[  450.121700][T17364]  should_fail_ex+0x410/0x560
[  450.121732][T17364]  should_failslab+0xa8/0x100
[  450.121759][T17364]  __kvmalloc_node_noprof+0x176/0x820
[  450.121784][T17364]  ? bpf_check_cfg+0x13f/0x3840
[  450.121841][T17364]  ? bpf_check_cfg+0x13f/0x3840
[  450.121867][T17364]  bpf_check_cfg+0x13f/0x3840
[  450.121917][T17364]  ? __pfx_bpf_check_cfg+0x10/0x10
[  450.121936][T17364]  ? bpf_prog_calc_tag+0x310/0x370
[  450.121958][T17364]  ? vfree+0x42b/0x490
[  450.121998][T17364]  ? __pfx_check_and_resolve_insns+0x10/0x10
[  450.122024][T17364]  ? add_kfuncs+0x251/0x2e0
[  450.122050][T17364]  bpf_check+0x25fb/0x2ef0
[  450.122090][T17364]  ? __pfx_bpf_check+0x10/0x10
[  450.122113][T17364]  ? bpf_obj_name_cpy+0x194/0x1e0
[  450.122144][T17364]  bpf_prog_load+0x14d6/0x1c20
[  450.122174][T17364]  ? __pfx_bpf_prog_load+0x10/0x10
[  450.122222][T17364]  __sys_bpf+0xd0d/0xd90
[  450.122253][T17364]  ? __pfx___sys_bpf+0x10/0x10
[  450.122286][T17364]  ? __fget_files+0x2a/0x420
[  450.122321][T17364]  ? ksys_write+0x242/0x270
[  450.122343][T17364]  ? __pfx_ksys_write+0x10/0x10
[  450.122368][T17364]  __x64_sys_bpf+0xba/0xd0
[  450.122392][T17364]  do_syscall_64+0x166/0x520
[  450.122415][T17364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.122434][T17364]  ? clear_bhb_loop+0x70/0xc0
[  450.122464][T17364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.122483][T17364] RIP: 0033:0x7f1df139e559
[  450.122500][T17364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.122513][T17364] RSP: 002b:00007f1df2180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  450.122534][T17364] RAX: ffffffffffffffda RBX: 00007f1df1625fa0 RCX: 00007f1df139e559
[  450.122547][T17364] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  450.122559][T17364] RBP: 00007f1df2180090 R08: 0000000000000000 R09: 0000000000000000
[  450.122571][T17364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  450.122582][T17364] R13: 00007f1df1626038 R14: 00007f1df1625fa0 R15: 00007ffed7cd6c28
[  450.122612][T17364]  </TASK>
[  450.133531][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  450.166082][T17159] team0: Port device team_slave_0 added
[  450.560334][T17367] atomic_op ffff88803d8681e0 conn xmit_atomic 0000000000000000
[  450.666868][T17159] team0: Port device team_slave_1 added
[  450.732526][T17369] IPVS: rr: UDP [fe80::aa]:8080 - no destination available
[  450.734507][T17369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.044762][T17159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.044779][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.044802][T17159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.269710][T17159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.269731][T17159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  451.269755][T17159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.443768][   T53] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  451.443849][   T53] Bluetooth: hci5: Injecting HCI hardware error event
[  451.445760][ T5631] Bluetooth: hci5: hardware error 0x00
[  451.657204][T17393] sch_tbf: burst 0 is lower than device lo mtu (21) !
[  451.819533][T17159] hsr_slave_0: entered promiscuous mode
[  451.841545][T17159] hsr_slave_1: entered promiscuous mode
[  451.842287][T17159] debugfs: 'hsr0' already exists in 'hsr'
[  451.842308][T17159] Cannot create hsr debugfs directory
[  452.638241][T17425] __nla_validate_parse: 58 callbacks suppressed
[  452.638262][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2950'.
[  452.936610][T17430] netlink: 'syz.3.2951': attribute type 3 has an invalid length.
[  453.094063][T17159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.116090][T17159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.401820][ T6169] net_ratelimit: 5 callbacks suppressed
[  453.401842][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  453.512316][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  453.523190][ T5631] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  453.748615][T17159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.748652][T17159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.946906][T17449] netlink: 'syz.0.2958': attribute type 1 has an invalid length.
[  454.310735][T17449] 8021q: adding VLAN 0 to HW filter on device bond11
[  454.349588][T17450] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  454.364005][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  454.516145][T17458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'.
[  454.587063][T17159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.587104][T17159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.645257][T17463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2960'.
[  454.683437][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  454.971282][T17159] netdevsim netdevsim2 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.971316][T17159] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.018583][T17473] netlink: 'syz.1.2964': attribute type 1 has an invalid length.
[  455.058025][T17467] netlink: 'syz.5.2963': attribute type 3 has an invalid length.
[  455.067714][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  455.198590][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  455.370994][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  455.483009][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  455.522478][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  456.057987][T17492] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  456.137813][T17492] bond1 (unregistering): Released all slaves
[  456.231265][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'.
[  456.231287][T17499] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2972'.
[  456.541852][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  456.716118][T17503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2973'.
[  456.716303][T17507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2973'.
[  456.942257][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  456.970393][T17159] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  457.014817][T17159] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  457.105719][T17159] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  457.116179][T17159] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  457.125935][T17159] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  457.198553][T17159] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  457.211777][T17159] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  457.297301][T17159] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.368003][T17532] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2980'.
[  457.712661][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2985'.
[  457.712688][T17552] block nbd3: Unsupported socket: should be TCP or UNIX.
[  457.776356][T17555] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2988'.
[  457.778967][T17555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2988'.
[  457.779005][T17555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2988'.
[  457.882931][T17159] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.981500][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'.
[  458.010002][T17159] 8021q: adding VLAN 0 to HW filter on device team0
[  458.059726][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.059872][ T6169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.089742][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.089854][ T6169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.534045][   T32] net_ratelimit: 5 callbacks suppressed
[  458.534068][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  458.674076][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  458.802341][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  458.818266][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2992'.
[  458.818348][T17578] bridge_slave_1: left allmulticast mode
[  458.818368][T17578] bridge_slave_1: left promiscuous mode
[  458.818584][T17578] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.883837][T17578] bridge_slave_0: left allmulticast mode
[  458.883862][T17578] bridge_slave_0: left promiscuous mode
[  458.884080][T17578] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.101935][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  459.212154][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  459.321821][ T1119] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  459.432835][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  459.479001][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'.
[  459.531524][T17601] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2997'.
[  459.540175][T17601] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  459.567627][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  459.673994][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  460.114654][T17612] syzkaller0: entered promiscuous mode
[  460.114839][T17612] syzkaller0: entered allmulticast mode
[  460.470344][T17638] FAULT_INJECTION: forcing a failure.
[  460.470344][T17638] name failslab, interval 1, probability 0, space 0, times 0
[  460.470376][T17638] CPU: 1 UID: 0 PID: 17638 Comm: syz.5.3006 Not tainted syzkaller #0 PREEMPT(full) 
[  460.470395][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  460.470406][T17638] Call Trace:
[  460.470414][T17638]  <TASK>
[  460.470422][T17638]  dump_stack_lvl+0xe8/0x150
[  460.470451][T17638]  should_fail_ex+0x410/0x560
[  460.470489][T17638]  should_failslab+0xa8/0x100
[  460.470517][T17638]  __kvmalloc_node_noprof+0x176/0x820
[  460.470539][T17638]  ? bpf_compute_postorder+0x87c/0x970
[  460.470561][T17638]  ? bpf_stack_liveness_init+0x29/0x90
[  460.470616][T17638]  ? bpf_stack_liveness_init+0x29/0x90
[  460.470644][T17638]  bpf_stack_liveness_init+0x29/0x90
[  460.470668][T17638]  bpf_check+0x263f/0x2ef0
[  460.470708][T17638]  ? __pfx_bpf_check+0x10/0x10
[  460.470731][T17638]  ? bpf_obj_name_cpy+0x194/0x1e0
[  460.470763][T17638]  bpf_prog_load+0x14d6/0x1c20
[  460.470796][T17638]  ? __pfx_bpf_prog_load+0x10/0x10
[  460.470868][T17638]  __sys_bpf+0xd0d/0xd90
[  460.470896][T17638]  ? __pfx___sys_bpf+0x10/0x10
[  460.470926][T17638]  ? __fget_files+0x2a/0x420
[  460.470961][T17638]  ? ksys_write+0x242/0x270
[  460.470986][T17638]  ? __pfx_ksys_write+0x10/0x10
[  460.471005][T17638]  __x64_sys_bpf+0xba/0xd0
[  460.471029][T17638]  do_syscall_64+0x166/0x520
[  460.471050][T17638]  ? trace_irq_disable+0x3b/0x140
[  460.471070][T17638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.471089][T17638]  ? clear_bhb_loop+0x70/0xc0
[  460.471111][T17638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.471129][T17638] RIP: 0033:0x7fd9d2b9e559
[  460.471147][T17638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.471162][T17638] RSP: 002b:00007fd9d0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  460.471182][T17638] RAX: ffffffffffffffda RBX: 00007fd9d2e25fa0 RCX: 00007fd9d2b9e559
[  460.471195][T17638] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  460.471207][T17638] RBP: 00007fd9d0df6090 R08: 0000000000000000 R09: 0000000000000000
[  460.471218][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  460.471229][T17638] R13: 00007fd9d2e26038 R14: 00007fd9d2e25fa0 R15: 00007ffcd371bd78
[  460.471260][T17638]  </TASK>
[  460.737224][T17620] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  460.737319][T17620] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  460.791161][T17636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3005'.
[  461.176875][T17652] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3008'.
[  461.930426][ T4946] block nbd2: Possible stuck request ffff888028fb7000: control (read@0,4096B). Runtime 180 seconds
[  462.965300][ T4985] udevd[4985]: worker [12199] /devices/virtual/block/nbd2 timeout; kill it
[  462.965395][ T4985] udevd[4985]: seq 15213 '/devices/virtual/block/nbd2' killed
[  464.195266][ T6179] net_ratelimit: 3 callbacks suppressed
[  464.195296][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  464.344380][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  464.489689][T17159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.492773][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  464.612663][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'.
[  464.634896][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  464.790645][T17669] syzkaller1: entered promiscuous mode
[  464.790668][T17669] syzkaller1: entered allmulticast mode
[  464.837340][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  464.875788][T17674] xt_NFQUEUE: number of total queues is 0
[  464.902906][T17670] syzkaller1: left promiscuous mode
[  464.903030][T17670] syzkaller1: left allmulticast mode
[  464.932846][T17159] veth0_vlan: entered promiscuous mode
[  464.949428][T17669] netlink: 'syz.0.3013': attribute type 1 has an invalid length.
[  465.064592][T17685] FAULT_INJECTION: forcing a failure.
[  465.064592][T17685] name failslab, interval 1, probability 0, space 0, times 0
[  465.064625][T17685] CPU: 0 UID: 0 PID: 17685 Comm: syz.3.3016 Not tainted syzkaller #0 PREEMPT(full) 
[  465.064644][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  465.064654][T17685] Call Trace:
[  465.064662][T17685]  <TASK>
[  465.064671][T17685]  dump_stack_lvl+0xe8/0x150
[  465.064701][T17685]  should_fail_ex+0x410/0x560
[  465.064732][T17685]  should_failslab+0xa8/0x100
[  465.064760][T17685]  __kvmalloc_node_noprof+0x176/0x820
[  465.064782][T17685]  ? kasan_save_track+0x3e/0x80
[  465.064804][T17685]  ? __kvmalloc_node_noprof+0x50f/0x820
[  465.064825][T17685]  ? bpf_stack_liveness_init+0x29/0x90
[  465.064846][T17685]  ? bpf_check+0x263f/0x2ef0
[  465.064866][T17685]  ? bpf_compute_const_regs+0x18f/0x3450
[  465.064897][T17685]  ? bpf_compute_const_regs+0x18f/0x3450
[  465.064928][T17685]  bpf_compute_const_regs+0x18f/0x3450
[  465.064970][T17685]  ? __pfx_bpf_compute_const_regs+0x10/0x10
[  465.064992][T17685]  ? check_attach_btf_id+0x325/0x1af0
[  465.065026][T17685]  ? bpf_stack_liveness_init+0x29/0x90
[  465.065046][T17685]  ? trace_kmalloc+0x2a/0xf0
[  465.065066][T17685]  ? __pfx_check_attach_btf_id+0x10/0x10
[  465.065088][T17685]  ? bpf_stack_liveness_init+0x29/0x90
[  465.065110][T17685]  ? __kvmalloc_node_noprof+0x52f/0x820
[  465.065143][T17685]  ? __asan_memset+0x22/0x50
[  465.065165][T17685]  bpf_check+0x26ac/0x2ef0
[  465.065204][T17685]  ? __pfx_bpf_check+0x10/0x10
[  465.065229][T17685]  ? bpf_obj_name_cpy+0x194/0x1e0
[  465.065260][T17685]  bpf_prog_load+0x14d6/0x1c20
[  465.065296][T17685]  ? __pfx_bpf_prog_load+0x10/0x10
[  465.065343][T17685]  __sys_bpf+0xd0d/0xd90
[  465.065374][T17685]  ? __pfx___sys_bpf+0x10/0x10
[  465.065406][T17685]  ? __fget_files+0x2a/0x420
[  465.065441][T17685]  ? ksys_write+0x242/0x270
[  465.065463][T17685]  ? __pfx_ksys_write+0x10/0x10
[  465.065487][T17685]  __x64_sys_bpf+0xba/0xd0
[  465.065510][T17685]  do_syscall_64+0x166/0x520
[  465.065532][T17685]  ? trace_irq_disable+0x3b/0x140
[  465.065551][T17685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.065568][T17685]  ? clear_bhb_loop+0x70/0xc0
[  465.065591][T17685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  465.065609][T17685] RIP: 0033:0x7f1df139e559
[  465.065626][T17685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.065642][T17685] RSP: 002b:00007f1df2180028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  465.065661][T17685] RAX: ffffffffffffffda RBX: 00007f1df1625fa0 RCX: 00007f1df139e559
[  465.065675][T17685] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  465.065687][T17685] RBP: 00007f1df2180090 R08: 0000000000000000 R09: 0000000000000000
[  465.065699][T17685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  465.065710][T17685] R13: 00007f1df1626038 R14: 00007f1df1625fa0 R15: 00007ffed7cd6c28
[  465.065741][T17685]  </TASK>
[  465.163207][T16979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.217686][T17669] 8021q: adding VLAN 0 to HW filter on device bond12
[  465.221601][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  465.411734][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  465.443737][T17686] bond12: (slave geneve3): making interface the new active one
[  465.446833][T17686] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  465.527710][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.545905][T17689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'.
[  465.569617][T17159] veth1_vlan: entered promiscuous mode
[  465.581710][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  465.588670][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'.
[  465.678387][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'.
[  465.977279][T17159] veth0_macvtap: entered promiscuous mode
[  466.149288][T17159] veth1_macvtap: entered promiscuous mode
[  466.287687][T17159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.389815][T17159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.491314][ T6179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.491357][ T6179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.491387][ T6179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.491426][ T6179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.676703][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3029'.
[  466.720444][T17722] netlink: 'syz.5.3029': attribute type 1 has an invalid length.
[  467.242159][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.242180][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.326103][T17743] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3033'.
[  467.873737][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.873770][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.959533][T17768] syzkaller0: entered promiscuous mode
[  467.959557][T17768] syzkaller0: entered allmulticast mode
[  468.125982][  T176] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  468.610002][T17793] netlink: 'syz.5.3039': attribute type 1 has an invalid length.
[  469.114085][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  469.117409][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  469.128336][T17808] nbd3: detected capacity change from 0 to 274877906944
[  469.128987][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  469.155472][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  469.163344][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  469.222222][ T6179] net_ratelimit: 25 callbacks suppressed
[  469.222245][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.341379][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.427705][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3045'.
[  469.473390][T17814] xfrm1: entered promiscuous mode
[  469.473414][T17814] xfrm1: entered allmulticast mode
[  469.496084][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.539123][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'.
[  469.603805][ T1014] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.616198][T17819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'.
[  469.678810][T17802] netlink: 'syz.0.3043': attribute type 7 has an invalid length.
[  469.710988][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.737950][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3047'.
[  469.737987][T17823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3047'.
[  469.824605][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.886326][   T53] block nbd3: Receive control failed (result -104)
[  469.937928][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  469.938676][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.042625][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  470.218071][ T5615] batman_adv: batadv0: Interface deactivated: syz_tun
[  470.386647][ T5615] batman_adv: batadv0: Removing interface: syz_tun
[  470.461145][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  470.526321][T17834] netlink: 'syz.2.3051': attribute type 12 has an invalid length.
[  471.007624][T17807] rxe_eth0 speed is unknown, defaulting to 1000
[  471.024941][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.042706][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.051533][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.052548][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.121303][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.122668][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.126082][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.128140][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  471.281470][   T53] Bluetooth: hci3: command tx timeout
[  471.342318][   T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  471.602475][ T6171] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  471.602765][ T6171] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  471.603001][ T6171] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  471.648680][T17873] netlink: 'syz.1.3059': attribute type 9 has an invalid length.
[  472.611452][T17807] wg0 speed is unknown, defaulting to 1000
[  472.725227][T17915] x_tables: duplicate underflow at hook 3
[  472.801613][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  472.825416][T17921] FAULT_INJECTION: forcing a failure.
[  472.825416][T17921] name failslab, interval 1, probability 0, space 0, times 0
[  472.825448][T17921] CPU: 1 UID: 0 PID: 17921 Comm: syz.1.3069 Not tainted syzkaller #0 PREEMPT(full) 
[  472.825469][T17921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  472.825481][T17921] Call Trace:
[  472.825488][T17921]  <TASK>
[  472.825496][T17921]  dump_stack_lvl+0xe8/0x150
[  472.825528][T17921]  should_fail_ex+0x410/0x560
[  472.825559][T17921]  should_failslab+0xa8/0x100
[  472.825586][T17921]  __kvmalloc_node_noprof+0x176/0x820
[  472.825612][T17921]  ? __kvmalloc_node_noprof+0x345/0x820
[  472.825633][T17921]  ? bpf_compute_scc+0xa26/0xb10
[  472.825651][T17921]  ? bpf_compute_scc+0xa26/0xb10
[  472.825676][T17921]  bpf_compute_scc+0xa26/0xb10
[  472.825713][T17921]  bpf_check+0x271e/0x2ef0
[  472.825751][T17921]  ? __pfx_bpf_check+0x10/0x10
[  472.825780][T17921]  ? bpf_obj_name_cpy+0x194/0x1e0
[  472.825810][T17921]  bpf_prog_load+0x14d6/0x1c20
[  472.825843][T17921]  ? __pfx_bpf_prog_load+0x10/0x10
[  472.825888][T17921]  __sys_bpf+0xd0d/0xd90
[  472.825916][T17921]  ? __pfx___sys_bpf+0x10/0x10
[  472.825950][T17921]  ? __fget_files+0x2a/0x420
[  472.825984][T17921]  ? ksys_write+0x242/0x270
[  472.826004][T17921]  ? __pfx_ksys_write+0x10/0x10
[  472.826026][T17921]  __x64_sys_bpf+0xba/0xd0
[  472.826048][T17921]  do_syscall_64+0x166/0x520
[  472.826069][T17921]  ? trace_irq_disable+0x3b/0x140
[  472.826087][T17921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.826105][T17921]  ? clear_bhb_loop+0x70/0xc0
[  472.826127][T17921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.826162][T17921] RIP: 0033:0x7f7b3d79e559
[  472.826179][T17921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.826192][T17921] RSP: 002b:00007f7b3e5df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  472.826212][T17921] RAX: ffffffffffffffda RBX: 00007f7b3da25fa0 RCX: 00007f7b3d79e559
[  472.826225][T17921] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  472.826236][T17921] RBP: 00007f7b3e5df090 R08: 0000000000000000 R09: 0000000000000000
[  472.826245][T17921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  472.826255][T17921] R13: 00007f7b3da26038 R14: 00007f7b3da25fa0 R15: 00007ffe8858a858
[  472.826285][T17921]  </TASK>
[  473.285543][T17926] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  473.361609][   T53] Bluetooth: hci3: command tx timeout
[  473.426028][T17927] bond1: Unable to set up delay as MII monitoring is disabled
[  473.660286][T17927] bond1 (unregistering): Released all slaves
[  474.144166][   T80] IPVS: starting estimator thread 0...
[  474.233953][T17945] IPVS: using max 28 ests per chain, 67200 per kthread
[  474.281149][   T80] net_ratelimit: 25 callbacks suppressed
[  474.281171][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  474.378926][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.407382][  T834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.482838][T17949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.518033][T17950] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  474.556075][T17958] FAULT_INJECTION: forcing a failure.
[  474.556075][T17958] name failslab, interval 1, probability 0, space 0, times 0
[  474.556106][T17958] CPU: 0 UID: 0 PID: 17958 Comm: syz.2.3079 Not tainted syzkaller #0 PREEMPT(full) 
[  474.556127][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.556137][T17958] Call Trace:
[  474.556146][T17958]  <TASK>
[  474.556154][T17958]  dump_stack_lvl+0xe8/0x150
[  474.556184][T17958]  should_fail_ex+0x410/0x560
[  474.556218][T17958]  should_failslab+0xa8/0x100
[  474.556246][T17958]  __kvmalloc_node_noprof+0x176/0x820
[  474.556271][T17958]  ? __kvmalloc_node_noprof+0x345/0x820
[  474.556293][T17958]  ? bpf_compute_scc+0xd2/0xb10
[  474.556312][T17958]  ? bpf_compute_scc+0xd2/0xb10
[  474.556338][T17958]  bpf_compute_scc+0xd2/0xb10
[  474.556378][T17958]  bpf_check+0x271e/0x2ef0
[  474.556417][T17958]  ? __pfx_bpf_check+0x10/0x10
[  474.556442][T17958]  ? bpf_obj_name_cpy+0x194/0x1e0
[  474.556473][T17958]  bpf_prog_load+0x14d6/0x1c20
[  474.556508][T17958]  ? __pfx_bpf_prog_load+0x10/0x10
[  474.556556][T17958]  __sys_bpf+0xd0d/0xd90
[  474.556586][T17958]  ? __pfx___sys_bpf+0x10/0x10
[  474.556619][T17958]  ? __fget_files+0x2a/0x420
[  474.556654][T17958]  ? ksys_write+0x242/0x270
[  474.556684][T17958]  ? __pfx_ksys_write+0x10/0x10
[  474.556709][T17958]  __x64_sys_bpf+0xba/0xd0
[  474.556732][T17958]  do_syscall_64+0x166/0x520
[  474.556753][T17958]  ? trace_irq_disable+0x3b/0x140
[  474.556773][T17958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.556792][T17958]  ? clear_bhb_loop+0x70/0xc0
[  474.556814][T17958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.556832][T17958] RIP: 0033:0x7f1ea1d9e559
[  474.556849][T17958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.556864][T17958] RSP: 002b:00007f1ea2ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  474.556884][T17958] RAX: ffffffffffffffda RBX: 00007f1ea2025fa0 RCX: 00007f1ea1d9e559
[  474.556897][T17958] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  474.556909][T17958] RBP: 00007f1ea2ba1090 R08: 0000000000000000 R09: 0000000000000000
[  474.556920][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  474.556931][T17958] R13: 00007f1ea2026038 R14: 00007f1ea2025fa0 R15: 00007ffcd9673f18
[  474.556961][T17958]  </TASK>
[  474.559616][T17949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.634637][T17950] bond1 (unregistering): Released all slaves
[  474.832628][T17960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.833355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.858283][T17960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.861364][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.909446][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  474.976077][T17967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  475.014294][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  475.175167][T17972] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  475.441511][   T53] Bluetooth: hci3: command tx timeout
[  475.605622][T17807] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.605799][T17807] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.605922][T17807] bridge_slave_0: entered allmulticast mode
[  475.607717][T17807] bridge_slave_0: entered promiscuous mode
[  475.637389][T17807] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.637589][T17807] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.637719][T17807] bridge_slave_1: entered allmulticast mode
[  475.639535][T17807] bridge_slave_1: entered promiscuous mode
[  475.686602][T17990] netlink: 'syz.0.3090': attribute type 3 has an invalid length.
[  475.728409][T17807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.744620][T17807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.789670][T17807] team0: Port device team_slave_0 added
[  475.802486][T17807] team0: Port device team_slave_1 added
[  475.838308][T17983] xt_addrtype: ipv6 does not support BROADCAST matching
[  475.906316][T17807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.906342][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.906365][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.977586][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.977606][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  475.977631][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.240404][T17999] __nla_validate_parse: 33 callbacks suppressed
[  476.240425][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'.
[  476.288651][T18001] netlink: 'syz.1.3092': attribute type 9 has an invalid length.
[  476.309136][T17807] hsr_slave_0: entered promiscuous mode
[  476.323138][T17807] hsr_slave_1: entered promiscuous mode
[  476.325134][T17807] debugfs: 'hsr0' already exists in 'hsr'
[  476.325154][T17807] Cannot create hsr debugfs directory
[  476.780023][T18018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3095'.
[  477.194067][T18026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3097'.
[  477.478048][T17807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.478084][T17807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.521729][   T53] Bluetooth: hci3: command tx timeout
[  477.805236][T18036] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.805270][T18036] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.917714][T18036] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  477.917749][T18036] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.996806][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'.
[  478.105003][T18060] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3105'.
[  478.107972][T18060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3105'.
[  478.108002][T18060] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3105'.
[  478.152279][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3105'.
[  478.226195][T17807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.226217][T17807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.384114][T18036] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.384149][T18036] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.437373][T18070] netlink: 'syz.1.3108': attribute type 23 has an invalid length.
[  478.567512][T17807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.567547][T17807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.776664][T18036] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.776700][T18036] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.888072][T17807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  478.888108][T17807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.243824][ T6169] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  479.243856][ T6169] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.309795][T18082] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3112'.
[  479.321069][ T6169] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  479.321100][ T6169] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.321134][ T6169] net_ratelimit: 18 callbacks suppressed
[  479.321152][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  479.656913][   T32] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  479.656950][   T32] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.656997][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  479.663761][   T32] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  479.663812][   T32] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.811502][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.897483][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.915516][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.916354][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.923691][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.926598][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.941563][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  479.943838][T18113] bpf: recursion limit reached on datapath, buggy bpf program?
[  482.099804][T17807] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  482.126659][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  482.306008][T17807] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  482.306633][T18113] syz.0.3116 (18113) used greatest stack depth: 13512 bytes left
[  482.339485][T18120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3120'.
[  482.340156][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.361416][T17807] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  482.392579][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.452571][T18122] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3123'.
[  482.502474][T17807] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  482.531882][T17807] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  482.556333][T18122] gretap0: entered promiscuous mode
[  482.900757][T17807] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.174710][T18148] netlink: 'syz.2.3129': attribute type 32 has an invalid length.
[  483.237581][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'.
[  483.371588][T18155] netlink: 'syz.1.3130': attribute type 1 has an invalid length.
[  483.371613][T18155] netlink: 'syz.1.3130': attribute type 2 has an invalid length.
[  483.437406][T18156] netlink: 'syz.1.3130': attribute type 8 has an invalid length.
[  483.437421][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  483.479410][T18150] hsr_slave_1 (unregistering): left promiscuous mode
[  483.507268][T17807] 8021q: adding VLAN 0 to HW filter on device team0
[  483.589433][T18156] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.590026][T18156] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.977195][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.977302][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.990902][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'.
[  483.994945][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'.
[  484.466113][ T6171] net_ratelimit: 1026 callbacks suppressed
[  484.466136][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  484.591508][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  484.654838][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.654932][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.705498][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  484.802173][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.820538][T18202] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  484.870221][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  484.993429][T18209] ip_tables: iptables: counters copy to user failed while replacing table
[  485.102255][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  485.206497][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.334436][T18220] FAULT_INJECTION: forcing a failure.
[  485.334436][T18220] name failslab, interval 1, probability 0, space 0, times 0
[  485.334487][T18220] CPU: 0 UID: 0 PID: 18220 Comm: syz.2.3142 Not tainted syzkaller #0 PREEMPT(full) 
[  485.334509][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.334520][T18220] Call Trace:
[  485.334528][T18220]  <TASK>
[  485.334536][T18220]  dump_stack_lvl+0xe8/0x150
[  485.334567][T18220]  should_fail_ex+0x410/0x560
[  485.334598][T18220]  should_failslab+0xa8/0x100
[  485.334626][T18220]  __kmalloc_cache_noprof+0xa3/0x600
[  485.334652][T18220]  ? __kmalloc_cache_noprof+0x14d/0x600
[  485.334672][T18220]  ? do_check_common+0x348/0x5610
[  485.334696][T18220]  ? do_check_common+0x348/0x5610
[  485.334728][T18220]  do_check_common+0x348/0x5610
[  485.334770][T18220]  ? bpf_compute_live_registers+0x1f40/0x1ff0
[  485.334794][T18220]  ? bpf_insn_def32+0x1ae/0x650
[  485.334823][T18220]  ? mark_fastcall_patterns+0xf32/0xf90
[  485.334849][T18220]  ? __pfx_do_check_common+0x10/0x10
[  485.334888][T18220]  do_check_main+0xa2/0x1f0
[  485.334921][T18220]  bpf_check+0x2775/0x2ef0
[  485.334961][T18220]  ? __pfx_bpf_check+0x10/0x10
[  485.334986][T18220]  ? bpf_obj_name_cpy+0x194/0x1e0
[  485.335017][T18220]  bpf_prog_load+0x14d6/0x1c20
[  485.335052][T18220]  ? __pfx_bpf_prog_load+0x10/0x10
[  485.335100][T18220]  __sys_bpf+0xd0d/0xd90
[  485.335131][T18220]  ? __pfx___sys_bpf+0x10/0x10
[  485.335164][T18220]  ? __fget_files+0x2a/0x420
[  485.335199][T18220]  ? ksys_write+0x242/0x270
[  485.335222][T18220]  ? __pfx_ksys_write+0x10/0x10
[  485.335247][T18220]  __x64_sys_bpf+0xba/0xd0
[  485.335270][T18220]  do_syscall_64+0x166/0x520
[  485.335291][T18220]  ? trace_irq_disable+0x3b/0x140
[  485.335311][T18220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.335330][T18220]  ? clear_bhb_loop+0x70/0xc0
[  485.335352][T18220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.335370][T18220] RIP: 0033:0x7f1ea1d9e559
[  485.335388][T18220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  485.335402][T18220] RSP: 002b:00007f1ea2ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  485.335423][T18220] RAX: ffffffffffffffda RBX: 00007f1ea2025fa0 RCX: 00007f1ea1d9e559
[  485.335436][T18220] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  485.335448][T18220] RBP: 00007f1ea2ba1090 R08: 0000000000000000 R09: 0000000000000000
[  485.335460][T18220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  485.335471][T18220] R13: 00007f1ea2026038 R14: 00007f1ea2025fa0 R15: 00007ffcd9673f18
[  485.335501][T18220]  </TASK>
[  485.995730][T18135] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  485.995755][T18135] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  486.019742][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  486.120826][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'.
[  486.191502][ T1014] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  487.256799][T18135] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  487.256823][T18135] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  487.645291][T18135] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  487.648461][T18135] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  488.678263][T18294] bond1: entered promiscuous mode
[  488.678308][T18294] bond1: entered allmulticast mode
[  488.694496][T18294] 8021q: adding VLAN 0 to HW filter on device bond1
[  489.089852][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.232804][T17807] veth0_vlan: entered promiscuous mode
[  489.257771][T17807] veth1_vlan: entered promiscuous mode
[  489.339944][T17807] veth0_macvtap: entered promiscuous mode
[  489.352486][T17807] veth1_macvtap: entered promiscuous mode
[  489.379990][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.398156][T18327] sch_tbf: peakrate 4 is lower than or equals to rate 24576 !
[  489.415524][   T32] IPVS: starting estimator thread 0...
[  489.420262][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.473867][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'.
[  489.521726][T18333] IPVS: using max 33 ests per chain, 79200 per kthread
[  489.571422][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'.
[  489.571446][T18327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'.
[  489.612017][ T1179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.612070][ T1179] net_ratelimit: 16 callbacks suppressed
[  489.612081][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  489.615521][ T6171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.615566][ T6171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.615609][ T6171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.747054][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  489.913561][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  490.024135][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  490.191617][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  490.301514][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  490.404820][T18360] ip_tables: iptables: counters copy to user failed while replacing table
[  490.612240][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  490.655162][T18370] openvswitch: netlink: EtherType 101 is less than min 600
[  490.868906][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.868929][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.924992][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  491.167727][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'.
[  491.279180][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.279202][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.545345][T18399] syzkaller0: entered promiscuous mode
[  491.545369][T18399] syzkaller0: entered allmulticast mode
[  491.588984][T18393] tipc: Started in network mode
[  491.589015][T18393] tipc: Node identity 1e044d615dae, cluster identity 4711
[  491.589401][T18393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.932888][T18393] tipc: Resetting bearer <eth:syzkaller0>
[  491.959574][T18392] tipc: Resetting bearer <eth:syzkaller0>
[  492.006094][ T4946] block nbd2: Possible stuck request ffff888028fb7000: control (read@0,4096B). Runtime 210 seconds
[  492.053337][T18392] tipc: Disabling bearer <eth:syzkaller0>
[  492.996183][T18437] rxe_eth0 speed is unknown, defaulting to 1000
[  494.592601][T18500] tls_set_device_offload_rx: netdev not found
[  494.665885][T18503] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  494.753473][ T6179] net_ratelimit: 23 callbacks suppressed
[  494.753492][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  494.888096][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  494.991094][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  495.096229][T18519] openvswitch: netlink: Multiple metadata blocks provided
[  495.112009][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  495.244876][T18525] netlink: 'syz.5.3198': attribute type 12 has an invalid length.
[  496.395806][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  496.490081][T18559] netlink: 'syz.2.3205': attribute type 3 has an invalid length.
[  496.490104][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'.
[  496.503692][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  496.633622][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  496.745223][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  496.772513][T18560] netlink: 'syz.2.3205': attribute type 3 has an invalid length.
[  496.772533][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'.
[  496.805512][T18556] xt_CT: No such helper "netbios-ns"
[  496.862567][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  497.477464][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'.
[  497.477490][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'.
[  497.566168][T18607] veth0: entered promiscuous mode
[  497.662183][T18603] veth0: left promiscuous mode
[  498.008666][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'.
[  498.008687][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'.
[  498.045122][T18620] 8021q: adding VLAN 0 to HW filter on device bond13
[  498.487679][T18634] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3221'.
[  498.509722][T18626] netlink: 'syz.5.3218': attribute type 1 has an invalid length.
[  498.567257][T18630] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.855100][T18643] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  498.890046][T18642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3219'.
[  499.023397][T16979] wg0 speed is unknown, defaulting to 1000
[  499.116113][T18627] syzkaller1: entered promiscuous mode
[  499.116139][T18627] syzkaller1: entered allmulticast mode
[  499.179137][T18634] xt_IDLETIMER: timeout value is zero
[  499.694615][ T1977] block nbd3: Possible stuck request ffff888029025080: control (read@0,4096B). Runtime 30 seconds
[  499.781673][   T60] net_ratelimit: 17 callbacks suppressed
[  499.781697][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  499.819185][T18674] syzkaller1: entered promiscuous mode
[  499.819365][T18674] syzkaller1: entered allmulticast mode
[  499.902941][T18686] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  499.918866][T18680] tipc: Resetting bearer <eth:syzkaller0>
[  499.969964][T18680] tipc: Disabling bearer <eth:syzkaller0>
[  500.015374][T18671] bridge_slave_0: left allmulticast mode
[  500.015400][T18671] bridge_slave_0: left promiscuous mode
[  500.015631][T18671] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.050931][T18671] bridge_slave_1: left allmulticast mode
[  500.052801][T18671] bridge_slave_1: left promiscuous mode
[  500.053620][T18671] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.082771][T18671] bond0: (slave bond_slave_0): Releasing backup interface
[  500.089340][T18671] bond0: (slave bond_slave_1): Releasing backup interface
[  500.125256][T18671] team0: Port device team_slave_0 removed
[  500.139978][T18671] team0: Port device team_slave_1 removed
[  500.149569][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.149592][T18671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  500.171559][T18671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.171899][T18671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  500.174631][T18671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  500.218586][T18672] team0: Port device xfrm0 added
[  500.495605][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'.
[  500.551216][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  500.648056][T18702] vlan2: entered promiscuous mode
[  500.648077][T18702] bridge0: entered promiscuous mode
[  500.684409][T18702] vlan2: entered allmulticast mode
[  500.684429][T18702] bridge0: entered allmulticast mode
[  500.686977][T18713] netlink: zone id is out of range
[  500.686992][T18713] netlink: del zone limit has 4 unknown bytes
[  500.688976][T18713] netlink: zone id is out of range
[  500.688990][T18713] netlink: del zone limit has 4 unknown bytes
[  500.837854][T18703] netlink: 'syz.3.3237': attribute type 4 has an invalid length.
[  500.865055][T18711] netlink: 'syz.5.3239': attribute type 1 has an invalid length.
[  500.865076][T18711] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3239'.
[  500.981384][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  501.053999][T18725] netlink: 'syz.0.3243': attribute type 8 has an invalid length.
[  501.098132][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  501.201140][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  501.615482][ T1314] ieee802154 phy2 wpan0: encryption failed: -22
[  501.649163][T18750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  501.720344][T18754] __nla_validate_parse: 1 callbacks suppressed
[  501.720364][T18754] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3250'.
[  501.911413][T18764] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3253'.
[  501.911435][T18764] tc_dump_action: action bad kind
[  501.918243][T18764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'.
[  501.998552][T18759] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3250'.
[  502.205440][T18772] netlink: 'syz.2.3255': attribute type 1 has an invalid length.
[  502.205464][T18772] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3255'.
[  502.205479][T18772] netlink: 'syz.2.3255': attribute type 1 has an invalid length.
[  502.205491][T18772] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.3255'.
[  502.755992][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  502.766807][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  502.782211][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  502.794767][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3261'.
[  503.171914][T18811] netlink: 'syz.5.3267': attribute type 21 has an invalid length.
[  503.813702][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  503.816873][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  503.818608][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  503.866403][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  503.869973][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  504.049656][T18839] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  504.531765][   T32] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.531800][   T32] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.816922][   T32] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  504.816956][   T32] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.862112][ T1179] net_ratelimit: 30 callbacks suppressed
[  504.862134][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.040487][   T32] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.040523][   T32] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.101625][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.238506][   T32] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.238536][   T32] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.291283][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.300127][T18825] rxe_eth0 speed is unknown, defaulting to 1000
[  505.401256][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.511172][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.591955][T18884] netlink: 'syz.5.3287': attribute type 6 has an invalid length.
[  505.591978][T18884] netlink: 'syz.5.3287': attribute type 5 has an invalid length.
[  505.631680][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  505.922282][   T53] Bluetooth: hci2: command tx timeout
[  506.084783][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  506.204943][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  506.353125][ T6171] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  506.887779][ T6169] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  507.150619][   T32] batman_adv: batadv0: Interface deactivated: syzkaller0
[  507.519795][T18917] __nla_validate_parse: 60 callbacks suppressed
[  507.519818][T18917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3296'.
[  508.002726][   T53] Bluetooth: hci2: command tx timeout
[  508.484769][   T32] bond12 (unregistering): (slave geneve3): Releasing active interface
[  508.513748][   T32] bond3 (unregistering): (slave geneve2): Releasing active interface
[  508.609030][   T32] batman_adv: batadv0: Removing interface: syzkaller0
[  508.727695][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.728051][   T32] bond_slave_0: left allmulticast mode
[  508.747457][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.748265][   T32] bond_slave_1: left allmulticast mode
[  508.750219][   T32] bond0 (unregistering): Released all slaves
[  508.784020][   T32] bond1 (unregistering): Released all slaves
[  508.807324][   T32] bond2 (unregistering): Released all slaves
[  508.829808][   T32] bond3 (unregistering): Released all slaves
[  508.867920][   T32] bond4 (unregistering): Released all slaves
[  508.901611][   T32] bond5 (unregistering): Released all slaves
[  508.923490][   T32] bond6 (unregistering): Released all slaves
[  508.948350][   T32] bond7 (unregistering): Released all slaves
[  508.979127][   T32] bond8 (unregistering): Released all slaves
[  509.010927][   T32] bond9 (unregistering): Released all slaves
[  509.031159][   T32] bond10 (unregistering): Released all slaves
[  509.053538][   T32] bond11 (unregistering): (slave veth0_to_bond): Releasing backup interface
[  509.056626][   T32] bond11 (unregistering): Released all slaves
[  509.106002][   T32] bond12 (unregistering): Released all slaves
[  509.135201][   T32] bond13 (unregistering): Released all slaves
[  509.158884][T18917] 8021q: VLANs not supported on gre0
[  509.161761][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  509.234795][T16979] infiniband syz2: ib_query_port failed (-19)
[  509.236364][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6
[  509.238308][ T5758] infiniband syz1: ib_query_port failed (-19)
[  509.238387][  T991] syz0: Port: 1 Link DOWN
[  509.238438][  T834] wg0 speed is unknown, defaulting to 1000
[  509.238458][  T834] syƒ0: Port: 1 Link DOWN
[  509.238760][  T834] wg0 speed is unknown, defaulting to 1000
[  509.678139][ T6163] smbdirect: ib_dev[syz1] removed
[  509.681307][ T1179] smbdirect: ib_dev[syz2] removed
[  510.081185][   T53] Bluetooth: hci2: command tx timeout
[  510.468473][T18966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3305'.
[  512.161477][   T53] Bluetooth: hci2: command tx timeout
[  513.023709][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7
[  513.116913][   T32] tipc: Left network mode
[  513.117001][ T6181] net_ratelimit: 5 callbacks suppressed
[  513.117015][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  513.234202][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  513.349228][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  513.710300][T18996] bond1: option resend_igmp: invalid value (32767)
[  513.710324][T18996] bond1: option resend_igmp: allowed values 0 - 255
[  513.939265][T18996] bond1 (unregistering): Released all slaves
[  514.006150][T19016] netlink: 'syz.3.3314': attribute type 1 has an invalid length.
[  514.006172][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'.
[  514.035315][T19018] netlink: 'syz.3.3314': attribute type 4 has an invalid length.
[  514.426365][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3317'.
[  514.462496][T19029] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3317'.
[  514.531515][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.532414][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.533255][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.571152][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.572016][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.589157][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.590033][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'.
[  514.763697][T19020] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode
[  514.941427][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  514.968517][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8
[  515.061787][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  515.314179][T19050] 0·: renamed from hsr0 (while UP)
[  515.337619][T19050] 0·: entered allmulticast mode
[  515.337644][T19050] hsr_slave_0: entered allmulticast mode
[  515.337660][T19050] hsr_slave_1: entered allmulticast mode
[  515.338144][T19050] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  515.512858][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  515.676018][T19064] netlink: 'syz.1.3323': attribute type 1 has an invalid length.
[  515.756749][   T53] block nbd4: Receive control failed (result -32)
[  516.044799][T19064] 8021q: adding VLAN 0 to HW filter on device bond1
[  516.046919][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  516.136031][T19065] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  516.154175][T19067] bond1: entered promiscuous mode
[  516.154199][T19067] bond1: entered allmulticast mode
[  516.302137][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  516.706958][T18825] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.709213][T18825] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.709383][T18825] bridge_slave_0: entered allmulticast mode
[  516.713769][T19104] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  516.723892][T18825] bridge_slave_0: entered promiscuous mode
[  516.730195][T18825] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.734731][T18825] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.734905][T18825] bridge_slave_1: entered allmulticast mode
[  516.745766][T18825] bridge_slave_1: entered promiscuous mode
[  517.833924][T18825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.874857][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9
[  518.016745][T18825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.272532][  T176] net_ratelimit: 3 callbacks suppressed
[  518.272553][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  518.402715][T18825] team0: Port device team_slave_0 added
[  518.518190][T18825] team0: Port device team_slave_1 added
[  518.795441][T18825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.795459][T18825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.795484][T18825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.820562][T18825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.820580][T18825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  518.820603][T18825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.059706][T19160] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.062106][T19160] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.435877][T19178] __nla_validate_parse: 36 callbacks suppressed
[  519.435900][T19178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3351'.
[  519.472450][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  519.677317][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  519.843006][T19185] block nbd0: reconnected socket
[  519.845517][  T176] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  519.846584][T19185] block nbd0: reconnected socket
[  519.955312][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  519.987782][   T53] block nbd0: Receive control failed (result -32)
[  519.988779][ T5631] block nbd0: Receive control failed (result -32)
[  520.064768][ T1179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  520.173587][   T60] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  520.193995][T19193] xt_NFQUEUE: number of total queues is 0
[  520.230766][T19193] netlink: 'syz.2.3355': attribute type 4 has an invalid length.
[  520.290373][T19197] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3356'.
[  520.311679][T19198] netlink: 'syz.2.3355': attribute type 4 has an invalid length.
[  520.457284][T19199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3357'.
[  520.592962][   T32] hsr_slave_0: left promiscuous mode
[  520.594394][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.594414][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.679389][   T32] veth1_macvtap: left promiscuous mode
[  520.689985][   T32] veth0_macvtap: left promiscuous mode
[  520.690219][   T32] veth1_vlan: left promiscuous mode
[  520.690308][   T32] veth0_vlan: left promiscuous mode
[  520.826659][T19217] netlink: 'syz.1.3362': attribute type 1 has an invalid length.
[  520.826682][T19217] netlink: 'syz.1.3362': attribute type 268 has an invalid length.
[  520.826696][T19217] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3362'.
[  521.279500][   T32] 
[  521.281904][   T32] ======================================================
[  521.288921][   T32] WARNING: possible circular locking dependency detected
[  521.295944][   T32] syzkaller #0 Not tainted
[  521.300355][   T32] ------------------------------------------------------
[  521.307365][   T32] kworker/u8:2/32 is trying to acquire lock:
[  521.313336][   T32] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  521.323228][   T32] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  521.323228][   T32] but task is already holding lock:
[  521.330593][   T32] ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  521.339456][   T32] 
[  521.339456][   T32] which lock already depends on the new lock.
[  521.339456][   T32] 
[  521.349864][   T32] 
[  521.349864][   T32] the existing dependency chain (in reverse order) is:
[  521.358871][   T32] 
[  521.358871][   T32] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  521.366090][   T32]        __mutex_lock+0x19d/0x1550
[  521.371286][   T32]        get_device_parent+0x16f/0x3a0
[  521.376754][   T32]        device_add+0x2d4/0xb80
[  521.381601][   T32]        device_create+0x269/0x300
[  521.386705][   T32]        msr_device_create+0x33/0x50
[  521.392016][   T32]        cpuhp_invoke_callback+0x434/0x810
[  521.397848][   T32]        cpuhp_thread_fun+0x362/0x780
[  521.403224][   T32]        smpboot_thread_fn+0x565/0xa70
[  521.408694][   T32]        kthread+0x38b/0x480
[  521.413280][   T32]        ret_from_fork+0x514/0xb70
[  521.418407][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.423706][   T32] 
[  521.423706][   T32] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  521.431276][   T32]        cpuhp_thread_fun+0x127/0x780
[  521.436648][   T32]        smpboot_thread_fn+0x565/0xa70
[  521.442107][   T32]        kthread+0x38b/0x480
[  521.446708][   T32]        ret_from_fork+0x514/0xb70
[  521.451832][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.457131][   T32] 
[  521.457131][   T32] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  521.464909][   T32]        cpus_read_lock+0x42/0x160
[  521.470024][   T32]        static_key_slow_inc+0x12/0x30
[  521.475479][   T32]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  521.481865][   T32]        nbd_genl_foreach_sock+0x265/0x450
[  521.487660][   T32]        nbd_genl_reconfigure+0xbbb/0x1040
[  521.493458][   T32]        genl_family_rcv_msg_doit+0x233/0x340
[  521.499667][   T32]        genl_rcv_msg+0x614/0x7a0
[  521.504696][   T32]        netlink_rcv_skb+0x226/0x4a0
[  521.509974][   T32]        genl_rcv+0x28/0x40
[  521.514474][   T32]        netlink_unicast+0x8ef/0xa80
[  521.519763][   T32]        netlink_sendmsg+0x813/0xb40
[  521.525056][   T32]        sock_sendmsg_nosec+0x13a/0x180
[  521.530745][   T32]        ____sys_sendmsg+0x54e/0x850
[  521.536021][   T32]        ___sys_sendmsg+0x2a5/0x360
[  521.541218][   T32]        __x64_sys_sendmsg+0x1b1/0x290
[  521.546667][   T32]        do_syscall_64+0x166/0x520
[  521.551810][   T32]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.558230][   T32] 
[  521.558230][   T32] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  521.565880][   T32]        __mutex_lock+0x19d/0x1550
[  521.570994][   T32]        nbd_queue_rq+0x373/0xff0
[  521.576027][   T32]        blk_mq_dispatch_rq_list+0x499/0x1990
[  521.582120][   T32]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  521.589097][   T32]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  521.595602][   T32]        blk_mq_run_work_fn+0x16c/0x300
[  521.601137][   T32]        process_scheduled_works+0xc3d/0x1630
[  521.607210][   T32]        worker_thread+0xa47/0xfb0
[  521.612329][   T32]        kthread+0x38b/0x480
[  521.616907][   T32]        ret_from_fork+0x514/0xb70
[  521.622016][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.627305][   T32] 
[  521.627305][   T32] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  521.634516][   T32]        __mutex_lock+0x19d/0x1550
[  521.639620][   T32]        nbd_queue_rq+0xc1/0xff0
[  521.644552][   T32]        blk_mq_dispatch_rq_list+0x499/0x1990
[  521.650632][   T32]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  521.657487][   T32]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  521.663988][   T32]        blk_mq_run_work_fn+0x16c/0x300
[  521.669547][   T32]        process_scheduled_works+0xc3d/0x1630
[  521.675629][   T32]        worker_thread+0xa47/0xfb0
[  521.680750][   T32]        kthread+0x38b/0x480
[  521.685338][   T32]        ret_from_fork+0x514/0xb70
[  521.690438][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.695714][   T32] 
[  521.695714][   T32] -> #5 (set->srcu){.+.+}-{0:0}:
[  521.702850][   T32]        __synchronize_srcu+0xc9/0x2f0
[  521.708341][   T32]        elevator_switch+0x1e8/0x7b0
[  521.713712][   T32]        elevator_change+0x2fa/0x480
[  521.718999][   T32]        elevator_set_default+0x375/0x440
[  521.724720][   T32]        blk_register_queue+0x3f3/0x4e0
[  521.730260][   T32]        __add_disk+0x6b8/0xdb0
[  521.735100][   T32]        add_disk_fwnode+0x100/0x3a0
[  521.740387][   T32]        nbd_dev_add+0x733/0xb60
[  521.745330][   T32]        nbd_init+0x168/0x1f0
[  521.750140][   T32]        do_one_initcall+0x250/0x870
[  521.755447][   T32]        do_initcall_level+0x10a/0x1a0
[  521.761051][   T32]        do_initcalls+0x59/0xa0
[  521.765916][   T32]        kernel_init_freeable+0x29d/0x3e0
[  521.771645][   T32]        kernel_init+0x22/0x1d0
[  521.776498][   T32]        ret_from_fork+0x514/0xb70
[  521.781651][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.787714][   T32] 
[  521.787714][   T32] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  521.795538][   T32]        __mutex_lock+0x19d/0x1550
[  521.800642][   T32]        elevator_change+0x1af/0x480
[  521.805921][   T32]        elevator_set_none+0xb5/0x140
[  521.811312][   T32]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  521.817638][   T32]        nbd_start_device+0x189/0xb30
[  521.823009][   T32]        nbd_genl_connect+0x167d/0x1cd0
[  521.828563][   T32]        genl_family_rcv_msg_doit+0x233/0x340
[  521.834635][   T32]        genl_rcv_msg+0x614/0x7a0
[  521.839666][   T32]        netlink_rcv_skb+0x226/0x4a0
[  521.844953][   T32]        genl_rcv+0x28/0x40
[  521.849449][   T32]        netlink_unicast+0x8ef/0xa80
[  521.854723][   T32]        netlink_sendmsg+0x813/0xb40
[  521.860012][   T32]        sock_sendmsg_nosec+0x13a/0x180
[  521.865565][   T32]        ____sys_sendmsg+0x54e/0x850
[  521.870837][   T32]        ___sys_sendmsg+0x2a5/0x360
[  521.876029][   T32]        __x64_sys_sendmsg+0x1b1/0x290
[  521.881498][   T32]        do_syscall_64+0x166/0x520
[  521.886617][   T32]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.893060][   T32] 
[  521.893060][   T32] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  521.901658][   T32]        blk_alloc_queue+0x544/0x690
[  521.906947][   T32]        __blk_mq_alloc_disk+0x194/0x390
[  521.912581][   T32]        nbd_dev_add+0x494/0xb60
[  521.917526][   T32]        nbd_init+0x168/0x1f0
[  521.922201][   T32]        do_one_initcall+0x250/0x870
[  521.927488][   T32]        do_initcall_level+0x10a/0x1a0
[  521.932950][   T32]        do_initcalls+0x59/0xa0
[  521.937808][   T32]        kernel_init_freeable+0x29d/0x3e0
[  521.943533][   T32]        kernel_init+0x22/0x1d0
[  521.948377][   T32]        ret_from_fork+0x514/0xb70
[  521.953479][   T32]        ret_from_fork_asm+0x1a/0x30
[  521.958761][   T32] 
[  521.958761][   T32] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  521.965972][   T32]        fs_reclaim_acquire+0x71/0x100
[  521.971426][   T32]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  521.977670][   T32]        alloc_inode+0xb8/0x1b0
[  521.982523][   T32]        iget_locked+0x131/0x6a0
[  521.987449][   T32]        kernfs_get_inode+0x4f/0x770
[  521.992740][   T32]        kernfs_get_tree+0x5cd/0x980
[  521.998024][   T32]        vfs_get_tree+0x92/0x2a0
[  522.002968][   T32]        do_new_mount+0x325/0xb00
[  522.008041][   T32]        __se_sys_mount+0x31d/0x420
[  522.013242][   T32]        do_syscall_64+0x166/0x520
[  522.018342][   T32]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.024752][   T32] 
[  522.024752][   T32] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  522.032749][   T32]        down_write+0x96/0x200
[  522.037515][   T32]        kernfs_remove_by_name_ns+0x4e/0x140
[  522.043493][   T32]        device_links_driver_bound+0x4ab/0x1440
[  522.049745][   T32]        driver_bound+0xd8/0x2e0
[  522.054719][   T32]        really_probe+0x774/0xae0
[  522.059806][   T32]        __driver_probe_device+0x1e8/0x360
[  522.065608][   T32]        driver_probe_device+0x4f/0x240
[  522.071160][   T32]        __device_attach_driver+0x270/0x410
[  522.077049][   T32]        bus_for_each_drv+0x258/0x2f0
[  522.082415][   T32]        __device_attach+0x2c4/0x450
[  522.087715][   T32]        device_initial_probe+0xa1/0xd0
[  522.093272][   T32]        bus_probe_device+0x12a/0x220
[  522.098651][   T32]        device_add+0x7d7/0xb80
[  522.103516][   T32]        faux_device_create_with_groups+0x1a5/0x2b0
[  522.110232][   T32]        regulator_dummy_init+0x19/0x40
[  522.115877][   T32]        regulator_init+0xca/0x110
[  522.120990][   T32]        do_one_initcall+0x250/0x870
[  522.126287][   T32]        do_initcall_level+0x10a/0x1a0
[  522.131757][   T32]        do_initcalls+0x59/0xa0
[  522.136612][   T32]        kernel_init_freeable+0x29d/0x3e0
[  522.142331][   T32]        kernel_init+0x22/0x1d0
[  522.147175][   T32]        ret_from_fork+0x514/0xb70
[  522.152278][   T32]        ret_from_fork_asm+0x1a/0x30
[  522.157561][   T32] 
[  522.157561][   T32] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  522.166166][   T32]        __lock_acquire+0x164c/0x2de0
[  522.171535][   T32]        lock_acquire+0x115/0x350
[  522.176564][   T32]        down_read+0x4a/0x330
[  522.181260][   T32]        kernfs_remove+0x35/0x80
[  522.186191][   T32]        __kobject_del+0xe0/0x310
[  522.191326][   T32]        kobject_del+0x45/0x60
[  522.196096][   T32]        cleanup_glue_dir+0x1a3/0x220
[  522.201471][   T32]        device_del+0x77d/0x8f0
[  522.206315][   T32]        device_destroy+0xb2/0x1a0
[  522.211425][   T32]        macvtap_device_event+0x226/0x400
[  522.217260][   T32]        notifier_call_chain+0x1a5/0x3d0
[  522.222894][   T32]        unregister_netdevice_many_notify+0x17f9/0x2140
[  522.229830][   T32]        default_device_exit_batch+0x6d4/0x760
[  522.235980][   T32]        ops_undo_list+0x4b4/0x8d0
[  522.241192][   T32]        cleanup_net+0x572/0x810
[  522.246135][   T32]        process_scheduled_works+0xc3d/0x1630
[  522.252206][   T32]        worker_thread+0xa47/0xfb0
[  522.257316][   T32]        kthread+0x38b/0x480
[  522.261901][   T32]        ret_from_fork+0x514/0xb70
[  522.267014][   T32]        ret_from_fork_asm+0x1a/0x30
[  522.272297][   T32] 
[  522.272297][   T32] other info that might help us debug this:
[  522.272297][   T32] 
[  522.282513][   T32] Chain exists of:
[  522.282513][   T32]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  522.282513][   T32] 
[  522.295906][   T32]  Possible unsafe locking scenario:
[  522.295906][   T32] 
[  522.303346][   T32]        CPU0                    CPU1
[  522.308712][   T32]        ----                    ----
[  522.314072][   T32]   lock(gdp_mutex);
[  522.317955][   T32]                                lock(cpuhp_state-up);
[  522.324797][   T32]                                lock(gdp_mutex);
[  522.331246][   T32]   rlock(&root->kernfs_supers_rwsem);
[  522.336711][   T32] 
[  522.336711][   T32]  *** DEADLOCK ***
[  522.336711][   T32] 
[  522.344846][   T32] locks held by kworker/u8:2/32: 5, last CPU#0:
[  522.351076][   T32]  #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  522.361996][   T32]  #1: ffffc90000a87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  522.372519][   T32]  #2: ffffffff91247468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  522.381843][   T32]  #3: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760
[  522.391857][   T32]  #4: ffffffff908044c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  522.401016][   T32] 
[  522.401016][   T32] stack backtrace:
[  522.406900][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  522.416195][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  522.426256][   T32] Workqueue: netns cleanup_net
[  522.431017][   T32] Call Trace:
[  522.434288][   T32]  <TASK>
[  522.437219][   T32]  dump_stack_lvl+0xe8/0x150
[  522.441821][   T32]  print_circular_bug+0x2e2/0x300
[  522.446847][   T32]  check_noncircular+0x12f/0x150
[  522.451800][   T32]  __lock_acquire+0x164c/0x2de0
[  522.456648][   T32]  ? lockdep_hardirqs_on+0x7b/0x110
[  522.461843][   T32]  ? __pfx___schedule+0x10/0x10
[  522.466701][   T32]  lock_acquire+0x115/0x350
[  522.471210][   T32]  ? kernfs_remove+0x35/0x80
[  522.475801][   T32]  down_read+0x4a/0x330
[  522.479948][   T32]  ? kernfs_remove+0x35/0x80
[  522.484541][   T32]  kernfs_remove+0x35/0x80
[  522.488971][   T32]  __kobject_del+0xe0/0x310
[  522.493490][   T32]  kobject_del+0x45/0x60
[  522.497725][   T32]  cleanup_glue_dir+0x1a3/0x220
[  522.502575][   T32]  device_del+0x77d/0x8f0
[  522.506917][   T32]  ? __pfx_device_del+0x10/0x10
[  522.511773][   T32]  ? kobject_put+0x50f/0x550
[  522.516367][   T32]  device_destroy+0xb2/0x1a0
[  522.520968][   T32]  ? __pfx_device_destroy+0x10/0x10
[  522.526166][   T32]  ? kernfs_remove_by_name_ns+0x101/0x140
[  522.531895][   T32]  macvtap_device_event+0x226/0x400
[  522.537107][   T32]  ? __pfx_ipvlan_device_event+0x10/0x10
[  522.542847][   T32]  ? __pfx_macvtap_device_event+0x10/0x10
[  522.548587][   T32]  notifier_call_chain+0x1a5/0x3d0
[  522.553708][   T32]  unregister_netdevice_many_notify+0x17f9/0x2140
[  522.560126][   T32]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  522.566894][   T32]  ? unregister_netdevice_queue+0x17d/0x340
[  522.572799][   T32]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  522.579055][   T32]  default_device_exit_batch+0x6d4/0x760
[  522.584716][   T32]  ? __pfx_default_device_exit_batch+0x10/0x10
[  522.590920][   T32]  ? __pfx_default_device_exit_batch+0x10/0x10
[  522.597113][   T32]  ops_undo_list+0x4b4/0x8d0
[  522.601724][   T32]  ? __pfx_ops_undo_list+0x10/0x10
[  522.606848][   T32]  ? idr_destroy+0x218/0x290
[  522.611546][   T32]  ? do_raw_spin_unlock+0xf5/0x200
[  522.616675][   T32]  cleanup_net+0x572/0x810
[  522.621095][   T32]  ? __pfx_cleanup_net+0x10/0x10
[  522.626052][   T32]  ? rcu_is_watching+0x16/0xb0
[  522.630824][   T32]  ? process_scheduled_works+0x97a/0x1630
[  522.636547][   T32]  process_scheduled_works+0xc3d/0x1630
[  522.642118][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  522.648116][   T32]  ? assign_work+0x3cf/0x5d0
[  522.652715][   T32]  worker_thread+0xa47/0xfb0
[  522.657319][   T32]  ? __kthread_parkme+0x71/0x1f0
[  522.662272][   T32]  kthread+0x38b/0x480
[  522.666346][   T32]  ? __pfx_worker_thread+0x10/0x10
[  522.671465][   T32]  ? __pfx_kthread+0x10/0x10
[  522.676062][   T32]  ret_from_fork+0x514/0xb70
[  522.680656][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  522.685771][   T32]  ? __switch_to+0xc89/0x1420
[  522.690459][   T32]  ? __pfx_kthread+0x10/0x10
[  522.695062][   T32]  ret_from_fork_asm+0x1a/0x30
[  522.699838][   T32]  </TASK>
[  522.728344][ T4946] block nbd2: Possible stuck request ffff888028fb7000: control (read@0,4096B). Runtime 240 seconds
[  523.045525][  T176] smc: removing ib device syz0
[  523.137856][   T60] smc: removing ib device syƒ0
[  523.152343][   T60] smbdirect: ib_dev[syƒ0] removed
[  523.400974][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  523.519278][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  523.615497][  T176] smbdirect: ib_dev[syz0] removed
[  523.623617][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  523.735457][ T6181] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  523.842073][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  523.951524][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  524.065496][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  524.831049][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  524.941366][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  525.051076][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  526.136788][   T32] IPVS: stop unused estimator thread 0...
[  526.336791][   T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.388700][   T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.452497][   T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.519663][   T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.618130][   T32] bridge_slave_1: left allmulticast mode
[  526.618154][   T32] bridge_slave_1: left promiscuous mode
[  526.618321][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.640247][   T32] bridge_slave_0: left allmulticast mode
[  526.640271][   T32] bridge_slave_0: left promiscuous mode
[  526.640450][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.735999][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.737745][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.738951][   T32] bond0 (unregistering): Released all slaves
[  527.080005][   T32] hsr_slave_0: left promiscuous mode
[  527.094722][   T32] hsr_slave_1: left promiscuous mode
[  527.096198][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.096336][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.097635][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.097770][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.127258][   T32] veth1_macvtap: left promiscuous mode
[  527.127666][   T32] veth0_macvtap: left promiscuous mode
[  527.128421][   T32] veth1_vlan: left promiscuous mode
[  527.129391][   T32] veth0_vlan: left promiscuous mode
[  527.550688][   T32] team0 (unregistering): Port device team_slave_1 removed
[  527.593759][   T32] team0 (unregistering): Port device team_slave_0 removed
[  528.068374][ T5280] 8021q: adding VLAN 0 to HW filter on device team0
[  528.440966][   T80] net_ratelimit: 23 callbacks suppressed
[  528.440986][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  528.555147][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  528.661239][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  528.775233][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  528.878682][ T5280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.881335][   T80] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  528.995358][ T6179] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  529.101003][ T6163] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  529.212134][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  529.320974][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  529.433871][   T32] bond16: (slave ip6gretap1): failed to get link speed/duplex
[  529.763080][ T1977] block nbd3: Possible stuck request ffff888029025080: control (read@0,4096B). Runtime 60 seconds