last executing test programs:

24.31932918s ago: executing program 1 (id=6211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7090000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002})
socket(0xa, 0x3, 0x87)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0xe, 0x5, 0x7, 0x3b, @mcast1, @mcast2, 0x7, 0x80, 0x0, 0xe0}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000029000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001400128009000100766c616e000000000400028008000500", @ANYRES32=0x0, @ANYBLOB="ecafe2d902f2e24961c73935bb532521f87d30796cbbfaba29c5f5ed23bc4bd7ce7d780f9668d4a78761aadecc052a018c1de698459200072f2140a9dcf2921ed36943a99428965b0d2bcd8c909ef18c36409f66607cdf444978b7769bde5e2556547df941587871baa10dc938ee9c647c275a61fae83a071905bb7fe6d204d4099b246e569ecdf0c090b6d43588703ad5943be4782854b5b28fac121a53e0e1f502b3620b000000000000000015bc2993"], 0x3c}}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1e, 0x4)
bind$inet(r2, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r7)
sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x24060880)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000380))
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000003c0)=<r10=>0x0)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x80, r9, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, 'vlan\xec\x80\xed\x97\xc5\x87K \xdcO:'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x29, 0x14, 'blkio.throttle.io_\xbd\x06\x00\x00iced_recursive\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800)
ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x1, 0xc7})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="00e3449b1136243800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000480)=0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)

21.705734857s ago: executing program 1 (id=6212):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bc", 0x3e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc3239650", 0x7d}], 0x1}}], 0x2, 0x4000900)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

20.774639694s ago: executing program 1 (id=6217):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010740824700000000000000000004000380300002802c00018014000300fe80000000000000000000000000002c1400040000000000000040"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd5}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000bf000000000000000000000000000000efea6bfc49b903879137f099543e09c3c8e76deec92425ee00d4a83d39c995a10331c4a2180d03054c2ccfee6ba6b001275d1967cc95b0f5f47ef4298846cc873a21136759c6a06277a13483dc7bade935a7a2817f41c094ca87c0f269dfadfde15ce82f5f5e98691e97c001b07d8c3e", @ANYRES32=r2, @ANYBLOB="11980400419804001c001280090001007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0x3)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)

17.392237564s ago: executing program 1 (id=6223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3})
ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4048051}, 0x4800)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r12)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r13 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$kcm(r13, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)
r15 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd25, 0x25dfdafd, {0x0, 0x0, 0x0, r16, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, r12, 0x531a1000)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

13.672886792s ago: executing program 1 (id=6236):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @void, @val={0xc, 0x99, {0x0, 0x4e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x24004000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44001)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000240)={0x0, 0x9, [0x5, 0x1, 0x2, 0x15d61c9d, 0x2, 0x200]})
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={<r2=>r0, &(0x7f0000000280)='\x00', 0x12902, &(0x7f00000002c0)={@align, {0x9, 0x8, 0x8fdb, 0x4}}, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4})
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x1402, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000016c0)={{<r4=>r2, &(0x7f00000005c0)='^\x00', 0x400800, &(0x7f0000000600)={@_ha_fsid={[0xedb]}, {0x7, 0x8, 0x800, 0x8}}, 0xffffffff, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x8}, {[0x55f6, 0x35b, 0x5, 0xffffffff]}, 0xf5, 0x1000, &(0x7f00000006c0)=""/4096})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r4)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001740)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x3, @local, 0x7}}, 0x200, 0x3}, &(0x7f0000001800)=0x90)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001840)={r5, 0x8, 0x6, 0x1}, &(0x7f0000001880)=0x10)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f00000018c0)={0x3, 0x4a43, 0x61b, 0xf4, 0x1, 0x23, 0xc, "5d0a2f62e2e160c712bcabb134a289dd3eb1f43c", "ed9454e1f41fa03b8da48231ca6c3bae39d02f75"})
write$tun(r2, &(0x7f0000001900)={@val={0x0, 0x6003}, @void, @eth={@remote, @local, @void, {@x25={0x805, {0x2, 0x4, 0xf, "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"}}}}}, 0x1015)
sendmsg$NFT_BATCH(r2, &(0x7f0000002f40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x1f8, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1d0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x667}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}]}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x11, 0x6, "45b54a6bc0ac7d438ac98bf9c3"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x114, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x12c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff81}]}}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x544}, 0x1, 0x0, 0x0, 0x44000}, 0x40)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002f80)={'tunl0\x00', <r6=>0x0})
socket$nl_rdma(0x10, 0x3, 0x14)
bind$alg(r4, &(0x7f0000002fc0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003100)={'syztnl2\x00', &(0x7f0000003080)={'ip6gre0\x00', <r7=>r3, 0x2f, 0xcd, 0x0, 0xa, 0x2, @local, @local, 0x40, 0x20, 0x8001, 0xc000}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000003240)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003140)={0xa0, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0xa0}}, 0x4000040)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003380)={&(0x7f00000032c0)={0xac, 0x3, 0x7, 0x305, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf56}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10000}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x801)
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x10, 0x3fb, 0x800, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4091)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000003500)={0x1, 0x9f, "4bec2c8276e1970fad38895a02933f938f3d2996c0762ca09e94b531612286d7fe0d22d614f2f8e32a5756d4b552bf8411446df5b74f6aa883072ce0833920a8149e7a0ff01fc9d122ed1e9424222320a2ba1e5c1dac80bdaa6eb4de85ea39045d718a68b7b4cfb1906249853b18d4354dec43f26a2bfbfd12444bc767dceacdf5c410f11735714dd7932d81d51ac0fc2365ae3398f8e8b0fc1efafb26d26e"})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003600), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x2c, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003700)={{{@in=@private, @in=@private}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000003800)=0xe8)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000003840))
r10 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r10, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x10, 0x3e8, 0x4, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x400c89c)

13.529049982s ago: executing program 1 (id=6237):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x6, 0x0)
close(r6)
write(r4, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x5e3b2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x1009, &(0x7f00000012c0)=""/4105, 0x0, 0x58, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x94)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4)
r8 = socket$alg(0x26, 0x5, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
accept4(r10, 0x0, 0x0, 0x800)
r11 = accept(r6, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd700001dcdf250900020073797e3000000000080041007278650014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c000)
bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r12 = accept$alg(r8, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0)
recvmmsg(r12, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000340)=""/127, 0x7f}], 0x3}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}], 0x2, 0x2101, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x80047210, &(0x7f0000000200))
sendmsg$sock(r3, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x51, 0x10a}}], 0x18}, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2001, 0x0)
close(r13)

6.440419007s ago: executing program 0 (id=6275):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4772000) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) (async)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5", 0x6c}, {&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad", 0x59}], 0x2}}], 0x1, 0x0) (async)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$bt_hci(r1, 0x6, 0x2b, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f)

6.288943938s ago: executing program 0 (id=6276):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4)
bind(r0, &(0x7f0000000200)=@l2={0x1f, 0x31, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x800, 0x1}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffff0000000000000000000000000000000000000000004e2107944e230020020000003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000feffffffffffffffff7f0000000000001f00000000000000fe0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20040810)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
poll(&(0x7f0000000180)=[{r1, 0xe203}, {r0, 0x8000}, {r0, 0x2400}, {r0, 0x10100}, {r1, 0xc030}, {r0, 0x23}, {r0, 0x24}, {r0, 0x290}, {r2, 0x40}], 0x9, 0x40)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10)
ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000c40)={{[0x18ab, 0x2, 0xb9, 0x3]}, 0x0, 0x1, 0x55079568, 0x0, &(0x7f0000000b00)=[{{@_ha_fsid={[0xdfc, 0x200]}, {0x4, 0x7, 0xffff69a2, 0x8000000000000000}}, 0x1, 0x0, '802.15.4 MAC\x00'}, {{@_ha_fsid={[0x9, 0xfffffc00]}, {0x9, 0x6, 0x1, 0xe}}, 0x3, 0x0, '\xaa\xaa\xaa\xaa\xaa'}, {{@align=0x23a, {0x3, 0x0, 0x6, 0x8000000000000000}}, 0x5, 0x0, '/dev/ppp\x00'}, {{@align=0x200, {0xffff, 0x8, 0x2, 0x4}}, 0xcc, 0x0, '!{'}, {{@align=0x3, {0x800, 0x9, 0xdf3b, 0x7}}, 0x5, 0x0, '\x00'}, {{@align=0x4, {0x6, 0xffff, 0x6, 0x6}}, 0x7fff, 0x0, '))\xb1(.#\x00'}, {{@_ha_fsid={[0x80, 0x3]}, {0xc, 0x480, 0x3, 0x2}}, 0x5, 0x0, '&$\x00'}]})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r7, &(0x7f0000000ac0)=0x8, r6, 0x0, 0x4, 0xf)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0xc, [{@multicast2}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r8)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r10, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95c5c52c0427a77b}, 0x2400c8c0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0)

6.044717591s ago: executing program 0 (id=6280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000340), &(0x7f0000000540)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e6174001c00028008000240000000f2080001400000000108000340000000030900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
close(0x3)
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x10a}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
sendmmsg$sock(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)=[@mark={{0x14, 0x1, 0x3d, 0x6d}}], 0x18}}], 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
ioctl(r5, 0xe, &(0x7f00000005c0)="b104bd28d3dab3ce79b10270e602687ef33383e2a03bc1a3ebd785319f508a2050050e9faf449cec3ab391d8a6d66c190671168e78aac739a1ab038c0a30683e168a81cbd1af66208ef6fd90e4d5e8248b1628ff3870fda94a5eb71a4fe14a619b364ab5353d22a337e70fa498028a28f59af05ee8762eb4a043bf519718b4b91ca4a630f202deb9d69287f3e5b39325ecab13e7e419096d34427b05c6eecf617f20942094caf44d")
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.305178391s ago: executing program 0 (id=6285):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) (async)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x11700}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=<r11=>0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=<r12=>r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r14, <r15=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r15}, 0x4) (async)
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYRES16=r11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r16, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
write$cgroup_int(r1, &(0x7f00000000c0)=0x6, 0x12) (async)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)

4.528887664s ago: executing program 3 (id=6289):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)

4.419273174s ago: executing program 3 (id=6290):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c95249bd001c52c700"/28], 0x48)
r2 = socket$kcm(0xa, 0x5, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000400)=0x14)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000007c0)={{<r4=>r2, &(0x7f0000000500)='\x00', 0x400, &(0x7f0000000540)={@_ha_fsid={[0xd55, 0x4]}, {0x3, 0x9, 0x8, 0x5}}, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0xc}, {[0x1, 0x10001, 0x80000001, 0x36da]}, 0x2c26, 0xed, &(0x7f00000006c0)=""/237})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000080000007010000f8ffffffb702000008000000b703000004000000850000000600000090247c1c65137c2bfc7955d6463a2a01ce1e04ef54b010f26b047bf20434217388598be9146922c4d453dd0d5f5382bb140872b50b49edd8fb56cc7247ab27adf6da5b975148e9ca250209b8018a42266da60e17df1496f834313861b2930303844a8de38eaeca65c897464578817f8e70503bbc8a3496564a7f4bdb6f9b3645836111086638dac55495a8f27ac0b941cd82d12408fd2682f4c86879b59170b2f9d85ec426060f8923a269373474ed61a5604eb2743d71cd0e96a3db9778c55070d173dba2bed05c067a5bcedde725a5ab8baee6e62e2cb28d7b9f2f8f"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4b, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xf, 0xe92a83f, 0x8}, 0x10, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000840)=[r1, r1], &(0x7f0000000880)=[{0x4, 0x4, 0x2, 0x3}, {0x4, 0x3, 0x3, 0x9}], 0x10, 0x1}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
close(r6)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfdfff010}]})
ioctl$TUNGETVNETLE(r6, 0x40107446, &(0x7f0000000180))
ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f00000000c0)={r1})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000ac0)={0x0, ""/256, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001cc0)={r9, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f00000ecec0)={{<r10=>0x0, 0x400, 0x1, 0x7ff, 0xfffffffffffffff9, 0x8, 0x4, 0x1, 0x6, 0x13, 0xa0, 0x10000, 0x3, 0x3, 0x3}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000eeec0)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000f00c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x8, "337ec8ad00ce6c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000f10c0)={0xf6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r10}, {0x0, r11}, {0x0, r12}], 0x8, "c703f6dbddf106"})
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000))
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x9)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r13, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x50e}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac140045e6000000070000000000000000000000400f24887b2aa3429d951add311e56fb42305bd9e2fe6fa4f4b1aea01a4a0326cf58632bd9f073d93fa5"], 0x38}, 0x200000e0)

4.363275386s ago: executing program 2 (id=6291):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000140)=""/118, &(0x7f00000001c0)=0x76) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r2, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}}, 0x0)

4.244448243s ago: executing program 3 (id=6292):
r0 = socket(0x10, 0x803, 0x0)
socket$igmp(0x2, 0x3, 0x2)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x4f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES16=r3], 0x48}}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r5, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80)
socket$packet(0x11, 0x2, 0x300)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={0x24, r7, 0x62c21a4ade68aba1, 0x0, 0x6, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050)
r8 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

4.243491976s ago: executing program 2 (id=6293):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e, 0x0, 0x8, 0xfffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffff8b}, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket(0x10, 0x3, 0x9)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000440)={r1, &(0x7f00000000c0)='-\x00', 0x0, &(0x7f0000000100)={@align=0x8, {0xd43, 0x5, 0x2, 0x4}}, 0x3, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0xfffffff8})
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0)
r2 = socket$inet(0xa, 0x800, 0x82b6e)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e25, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022affdf25730008000300dfdf0b12cff77f4c8707d696a88883f587099c85bba84a9887ac880b9664ac9c0205e75602d2ef0f6b743ee6d49c0d676ef65e623d1a8353b42453a8c881b4418f36ad470dc7028a56cb628d4e5a80dbc79cc6065422078891c29a492eb9511e277b68016205424b6240c43b86", @ANYRES32=0x0, @ANYBLOB="0c009900400000003c0000000500ee000e000000"], 0x30}}, 0x40)

4.077987418s ago: executing program 0 (id=6295):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814)

3.985604999s ago: executing program 4 (id=6296):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bc", 0x3e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc3239650", 0x7d}], 0x1}}], 0x2, 0x4000900)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.909261381s ago: executing program 0 (id=6297):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="771999b456e2697eab0e4036b03da98d", 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, 0x0, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff92, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r8)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b40)=ANY=[@ANYBLOB="f6d89e44", @ANYRES16=r9, @ANYBLOB="01002bbd7000fddbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000060000b000900000006001600030000000500120001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r10, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r10, 0x1)

3.838644636s ago: executing program 3 (id=6298):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200400095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200400095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0x62, 0x18}, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x1b, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffb29}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @alu={0x4, 0x0, 0x0, 0x4, 0x2, 0x80, 0xffffffffffffffff}, @tail_call, @generic={0x9, 0x9, 0x8, 0x6, 0x80000000}]}, &(0x7f0000000600)='GPL\x00', 0xfffeffff, 0x12, &(0x7f0000000640)=""/18, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xf, 0x4, 0x7fff}, 0x10, 0x0, r0, 0x9, &(0x7f0000000e40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r4], &(0x7f0000000e80)=[{0x1, 0x3, 0x0, 0x8}, {0x4, 0x3}, {0x2, 0x3, 0xd, 0x8}, {0x5, 0x3, 0x3}, {0x0, 0x1, 0xd, 0x1}, {0x0, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x10, 0x7}, {0x3, 0x1, 0x10, 0x6}, {0x4, 0x4, 0xf, 0x2}], 0x10, 0x8001}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xe, 0x1b, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7f}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffb29}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @alu={0x4, 0x0, 0x0, 0x4, 0x2, 0x80, 0xffffffffffffffff}, @tail_call, @generic={0x9, 0x9, 0x8, 0x6, 0x80000000}]}, &(0x7f0000000600)='GPL\x00', 0xfffeffff, 0x12, &(0x7f0000000640)=""/18, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xf, 0x4, 0x7fff}, 0x10, 0x0, r0, 0x9, &(0x7f0000000e40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r4], &(0x7f0000000e80)=[{0x1, 0x3, 0x0, 0x8}, {0x4, 0x3}, {0x2, 0x3, 0xd, 0x8}, {0x5, 0x3, 0x3}, {0x0, 0x1, 0xd, 0x1}, {0x0, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x10, 0x7}, {0x3, 0x1, 0x10, 0x6}, {0x4, 0x4, 0xf, 0x2}], 0x10, 0x8001}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006f00000095"], &(0x7f00000002c0)='GPL\x00', 0x5f, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000004}, 0xfffffffffffffc8e) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006f00000095"], &(0x7f00000002c0)='GPL\x00', 0x5f, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000004}, 0xfffffffffffffc8e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c697000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r11 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$sock_attach_bpf(r6, 0x29, 0x31, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x9a2a, 0x2a54, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x23, 0xd3, [@broadcast, @rand_addr=0x64010101, @multicast1, @empty, @multicast2, @multicast1, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0xd6, [@dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0x68, [@empty]}, @timestamp={0x44, 0x4, 0xbb, 0x0, 0x5}]}}}}})
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.572348633s ago: executing program 3 (id=6299):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x90, r2, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@local, <r3=>0x0}, &(0x7f00000000c0)=0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r6, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000001c0)=r6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000005c0)="05031c", 0x3, 0x24000091, &(0x7f0000000140)={0x11, 0xf5, r9, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@fwd={0xb}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @union={0xc, 0x1, 0x0, 0x5, 0x0, 0x1, [{0xf, 0x3, 0x1}]}, @enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x6, [{0x9, 0x5, 0x6}, {0x10, 0x6, 0x80000000}, {0x7, 0xc615, 0x3}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @const={0xe, 0x0, 0x0, 0xa, 0x2}, @fwd={0xf}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000600)=""/167, 0xb6, 0xa7, 0x0, 0xffff8000, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xe674, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r10, 0x0, 0x5, 0x1}, 0x50)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x4000005, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x24000815)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r13 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_int(r13, 0x29, 0x4a, &(0x7f0000000000)=0x402, 0x4)
sendmmsg$inet6(r13, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0)
recvfrom$inet6(r13, 0x0, 0x0, 0x10000, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=r3, @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40940)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r11, @ANYRES32=0x0, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}}, 0x0)

3.342610173s ago: executing program 2 (id=6300):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@initdev, @private, <r2=>0x0}, &(0x7f00000001c0)=0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x815}, 0x20000001)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x10040)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0)

3.196964277s ago: executing program 2 (id=6301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13d}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x477)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x10, 0x0, 0x1, [@nested={0x10, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13d}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x477) (async)

3.109334124s ago: executing program 4 (id=6302):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000e4008500000082000000850000000e000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

2.984715155s ago: executing program 2 (id=6303):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="7f809a43e36f"}]}, 0x40}}, 0x4080)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40401}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)

2.97264252s ago: executing program 4 (id=6304):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb54}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x56}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11f97319}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x552c1626}]}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x174}, 0x1, 0x0, 0x0, 0x40040}, 0x91)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000033c0)={'icmp6\x00'}, &(0x7f0000003400)=0x1e) (async)
sendmmsg(r0, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200008c1) (async)
close(r1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0)

2.891163794s ago: executing program 4 (id=6305):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000400"], 0x48)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 61)

2.585092553s ago: executing program 4 (id=6306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @empty}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}]}, 0x78}}, 0x4004040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0xffffffff7fffffff, 0x3, 0x3, 0xfffffffffffffff9, 0x6})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x38}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}}, 0x24048040)
sendmmsg$unix(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="24000000000000000100000001"], 0x48}}], 0x2, 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

2.561526239s ago: executing program 4 (id=6307):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000480)=@buf={0x45, &(0x7f0000000400)="012adb9fbf71752f90572846bec621bc51a723db21e853b96dfc482537f609068088088f01a168987f493839c86304adb7dabd10c5490fa11d7cd7659062bd364e4f6982fd"})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
close(0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100)=0x3, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10000}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5f0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x201, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5d8c997a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000002)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61, 0x4}, {0x45}, {0x2}, {0x6}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100080000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x4)

124.483685ms ago: executing program 2 (id=6308):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46ca91f000000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f28bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681000000140000800d000000cfe7336f91087ba18b000000000000"], 0xe0}], 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x4, 0xca0, 0xfffa}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0x202, 0x2, 0x1000}, 0x10)
sendto$inet6(r2, &(0x7f0000000340)="308432d14a24d77dc45b32b9d7ddf5bbdefb36a1f77ee2dd4e7a08642119d4ed9fe74d664f47270a0ec8638b6ecfc240cee2bc6683ad0e5293d54da28dc4ce6b74f701eece28c4", 0x47, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) (async)
r3 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xffffffff}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x6, 0x10000, 0x20000009, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x6, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x5}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x2, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xd, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0x3, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x2000380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)

0s ago: executing program 3 (id=6309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x18, 0x110}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x44}}, 0x24004801)

kernel console output (not intermixed with test programs):


[  873.582184][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  873.582195][T27359] Call Trace:
[  873.582203][T27359]  <TASK>
[  873.582211][T27359]  dump_stack_lvl+0xe8/0x150
[  873.582244][T27359]  should_fail_ex+0x40c/0x560
[  873.582272][T27359]  should_failslab+0xa8/0x100
[  873.582300][T27359]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  873.582322][T27359]  ? local_lock_release+0x9c/0x160
[  873.582341][T27359]  ? __alloc_skb+0x1d7/0x7a0
[  873.582356][T27359]  ? __alloc_skb+0x1d7/0x7a0
[  873.582378][T27359]  __alloc_skb+0x1d7/0x7a0
[  873.582405][T27359]  alloc_skb_with_frags+0xc6/0x760
[  873.582437][T27359]  sock_alloc_send_pskb+0x878/0x990
[  873.582475][T27359]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  873.582496][T27359]  ? kasan_quarantine_put+0xbb/0x1f0
[  873.582518][T27359]  ? lockdep_hardirqs_on+0x7a/0x110
[  873.582544][T27359]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  873.582565][T27359]  ? kmem_cache_free+0x182/0x650
[  873.582588][T27359]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  873.582613][T27359]  unix_dgram_sendmsg+0x4da/0x17b0
[  873.582654][T27359]  ? __lock_acquire+0x683/0x2cf0
[  873.582680][T27359]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  873.582708][T27359]  ? aa_sock_msg_perm+0xda/0x1b0
[  873.582728][T27359]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  873.582753][T27359]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  873.582777][T27359]  sock_sendmsg_nosec+0x13a/0x180
[  873.582806][T27359]  ____sys_sendmsg+0x54e/0x850
[  873.582834][T27359]  ? __pfx_____sys_sendmsg+0x10/0x10
[  873.582864][T27359]  ? import_iovec+0x73/0xa0
[  873.582894][T27359]  ___sys_sendmsg+0x2a5/0x360
[  873.582914][T27359]  ? __lock_acquire+0x683/0x2cf0
[  873.582943][T27359]  ? __pfx____sys_sendmsg+0x10/0x10
[  873.582963][T27359]  ? __lock_acquire+0x683/0x2cf0
[  873.582990][T27359]  ? kstrtouint+0x6e/0xe0
[  873.583049][T27359]  __sys_sendmmsg+0x273/0x4d0
[  873.583076][T27359]  ? __pfx___sys_sendmmsg+0x10/0x10
[  873.583105][T27359]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  873.583142][T27359]  ? ksys_write+0x242/0x270
[  873.583164][T27359]  ? __pfx_ksys_write+0x10/0x10
[  873.583195][T27359]  __x64_sys_sendmmsg+0xa0/0xc0
[  873.583218][T27359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.583238][T27359]  do_syscall_64+0x174/0x580
[  873.583258][T27359]  ? trace_irq_disable+0x3b/0x140
[  873.583282][T27359]  ? clear_bhb_loop+0x40/0x90
[  873.583306][T27359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  873.583324][T27359] RIP: 0033:0x7ff8bd79de99
[  873.583343][T27359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  873.583360][T27359] RSP: 002b:00007ff8be69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  873.583379][T27359] RAX: ffffffffffffffda RBX: 00007ff8bda25fa0 RCX: 00007ff8bd79de99
[  873.583393][T27359] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  873.583413][T27359] RBP: 00007ff8be69a090 R08: 0000000000000000 R09: 0000000000000000
[  873.583424][T27359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  873.583436][T27359] R13: 00007ff8bda26038 R14: 00007ff8bda25fa0 R15: 00007fff5b173348
[  873.583465][T27359]  </TASK>
[  873.586026][T27358] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5463'.
[  873.718498][T27361] lo speed is unknown, defaulting to 1000
[  873.794905][T27364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'.
[  873.845731][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'.
[  873.971209][T27369] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5466'.
[  874.482271][T27361] lo speed is unknown, defaulting to 1000
[  874.500158][T27361] wlan0 speed is unknown, defaulting to 1000
[  874.524125][T27399] xt_ecn: cannot match TCP bits for non-tcp packets
[  874.631583][T14694] net_ratelimit: 32 callbacks suppressed
[  874.631601][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  874.888207][T27418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5479'.
[  874.906610][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  874.915537][T27401] rdma_rxe: rxe_newlink: failed to add bond0
[  875.031136][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  875.151538][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  875.290367][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  875.442901][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  875.580884][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  875.622821][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'.
[  875.721555][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  875.880262][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  876.023713][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  876.575432][T27517] netlink: 364 bytes leftover after parsing attributes in process `syz.3.5502'.
[  877.033289][T27525] netlink: 'syz.0.5505': attribute type 21 has an invalid length.
[  877.041378][T27525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5505'.
[  877.375898][T27532] syz_tun: left allmulticast mode
[  877.383029][T27532] syz_tun: left promiscuous mode
[  877.388289][T27532] bridge0: port 3(syz_tun) entered disabled state
[  877.401965][T27532] bridge_slave_0: left allmulticast mode
[  877.407616][T27532] bridge_slave_0: left promiscuous mode
[  877.415769][T27532] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.432820][T27532] bond7: (slave veth0_to_bond): Releasing active interface
[  877.440858][T27532] veth0_to_bond: left promiscuous mode
[  877.446472][T27532] veth0_to_bond: left allmulticast mode
[  877.458827][T27532] bond0: (slave bond_slave_0): Releasing backup interface
[  877.472068][T27532] bond0: (slave bond_slave_1): Releasing backup interface
[  877.497555][T27532] team0: Port device team_slave_0 removed
[  877.516581][T27532] team0: Port device team_slave_1 removed
[  877.523370][T27532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.531521][T27532] batman_adv: batadv0: Removing interface: batadv_slave_0
[  877.540717][T27532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.548128][T27532] batman_adv: batadv0: Removing interface: batadv_slave_1
[  878.814611][T27468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  878.823823][T27497] netlink: 'syz.2.5496': attribute type 1 has an invalid length.
[  878.845313][T27497] netlink: 'syz.2.5496': attribute type 2 has an invalid length.
[  879.047820][T27556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5513'.
[  879.363007][T27576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.402317][T27576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.433847][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.444994][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.456113][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.464615][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.474571][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.482889][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.492834][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.500916][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.517284][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.535115][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.545948][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.554119][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.578523][T27575] netlink: 'syz.0.5516': attribute type 1 has an invalid length.
[  879.587216][T27575] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5516'.
[  879.709679][T14692] net_ratelimit: 31 callbacks suppressed
[  879.709697][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  879.830729][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  879.960185][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  879.983296][T27606] TCP: TCP_TX_DELAY enabled
[  880.090568][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  880.215651][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  880.350282][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  880.481953][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  880.529642][T27625] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20003
[  880.660062][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  880.735011][T27656] IPVS: Error joining to the multicast group
[  880.757821][T27658] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  880.788558][T27662] tipc: Enabled bearer <eth:team0>, priority 0
[  880.820215][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  880.856661][   T11] block nbd5: Possible stuck request ffff8880274ce000: control (read@0,4096B). Runtime 30 seconds
[  880.943007][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  881.011221][T27668] syzkaller1: entered promiscuous mode
[  881.022077][T27668] syzkaller1: entered allmulticast mode
[  881.034784][T27674] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  881.262948][T27687] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  881.276419][T27687] bond10 (unregistering): Released all slaves
[  881.976325][T27720] veth0_macvtap: left promiscuous mode
[  882.347247][T27739] validate_nla: 59 callbacks suppressed
[  882.347267][T27739] netlink: 'syz.4.5560': attribute type 13 has an invalid length.
[  882.911018][T27753] netlink: 'syz.4.5562': attribute type 27 has an invalid length.
[  883.184124][T27758] x_tables: duplicate entry at hook 1
[  884.138473][T27798] netlink: 'syz.3.5579': attribute type 1 has an invalid length.
[  884.191852][T27803] __nla_validate_parse: 69 callbacks suppressed
[  884.191872][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5579'.
[  884.215165][T27798] 8021q: adding VLAN 0 to HW filter on device bond11
[  884.361860][T27807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5582'.
[  884.593459][T27809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5583'.
[  884.720618][T14693] net_ratelimit: 28 callbacks suppressed
[  884.720637][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  884.882040][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  884.992001][T27834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5588'.
[  885.004301][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5590'.
[  885.069426][T27837] 8021q: adding VLAN 0 to HW filter on device bond10
[  885.077831][T27834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5588'.
[  885.086215][T27838] netlink: 'syz.0.5589': attribute type 11 has an invalid length.
[  885.118569][T27837] macvlan1: entered promiscuous mode
[  885.126050][T27837] macvlan1: entered allmulticast mode
[  885.133288][T27837] bond10: entered promiscuous mode
[  885.140740][T27837] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  885.149370][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5589'.
[  885.159365][T27841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5589'.
[  885.194208][T27837] bond10: left promiscuous mode
[  885.229814][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  885.352010][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  885.418743][T27846] FAULT_INJECTION: forcing a failure.
[  885.418743][T27846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  885.460598][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  885.470204][T27846] CPU: 1 UID: 0 PID: 27846 Comm: syz.4.5592 Not tainted syzkaller #0 PREEMPT(full) 
[  885.470230][T27846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  885.470241][T27846] Call Trace:
[  885.470249][T27846]  <TASK>
[  885.470257][T27846]  dump_stack_lvl+0xe8/0x150
[  885.470289][T27846]  should_fail_ex+0x40c/0x560
[  885.470317][T27846]  _copy_from_user+0x2d/0xb0
[  885.470336][T27846]  do_sock_getsockopt+0x200/0x7e0
[  885.470361][T27846]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  885.470403][T27846]  ? __fget_files+0x3a2/0x420
[  885.470426][T27846]  ? __fget_files+0x2a/0x420
[  885.470459][T27846]  __x64_sys_getsockopt+0x1a4/0x240
[  885.470485][T27846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.470505][T27846]  do_syscall_64+0x174/0x580
[  885.470527][T27846]  ? trace_irq_disable+0x3b/0x140
[  885.470551][T27846]  ? clear_bhb_loop+0x40/0x90
[  885.470577][T27846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.470595][T27846] RIP: 0033:0x7f101759de99
[  885.470612][T27846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  885.470628][T27846] RSP: 002b:00007f1018394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  885.470649][T27846] RAX: ffffffffffffffda RBX: 00007f1017825fa0 RCX: 00007f101759de99
[  885.470663][T27846] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006
[  885.470674][T27846] RBP: 00007f1018394090 R08: 0000200000000440 R09: 0000000000000000
[  885.470686][T27846] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  885.470698][T27846] R13: 00007f1017826038 R14: 00007f1017825fa0 R15: 00007ffff5772618
[  885.470726][T27846]  </TASK>
[  885.580169][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  885.676987][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5593'.
[  885.740269][T27855] erspan2: entered allmulticast mode
[  885.765936][T27855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  885.796893][T27847] IPVS: persistence engine module ip_vs_pe_ not found
[  885.830739][T27853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5594'.
[  885.840770][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  885.931307][T27855] team0: No ports can be present during mode change
[  885.978904][T27864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  886.127223][T27868] netlink: 'syz.3.5597': attribute type 1 has an invalid length.
[  886.182001][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  886.235384][T27868] bond12: entered promiscuous mode
[  886.242559][T27868] 8021q: adding VLAN 0 to HW filter on device bond12
[  886.337334][T27868] bond12: (slave veth7): making interface the new active one
[  886.345536][T27868] veth7: entered promiscuous mode
[  886.354613][T27868] bond12: (slave veth7): Enslaving as an active interface with an up link
[  886.370814][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  886.394398][T27875] syzkaller0: entered promiscuous mode
[  886.406381][T27875] syzkaller0: entered allmulticast mode
[  886.433773][T27868] netlink: 'syz.3.5597': attribute type 32 has an invalid length.
[  886.549236][T27868] bond13: option coupled_control: invalid value (8)
[  886.561267][T27868] bond13 (unregistering): Released all slaves
[  886.756089][T27900] netlink: 'syz.3.5607': attribute type 5 has an invalid length.
[  887.059471][ T3321] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  887.512183][T27939] xt_cgroup: invalid path, errno=-2
[  887.573797][T27941] netlink: 'syz.2.5618': attribute type 13 has an invalid length.
[  887.587865][T27941] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  887.607524][T27941] syzkaller0: entered promiscuous mode
[  887.615345][T27941] syzkaller0: entered allmulticast mode
[  888.079037][T27963] netlink: 'syz.2.5624': attribute type 5 has an invalid length.
[  888.095895][T27963] ip6erspan0: entered allmulticast mode
[  889.810162][   T36] net_ratelimit: 27 callbacks suppressed
[  889.810183][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  889.930439][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  889.994848][T27923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  890.041429][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  890.181020][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  890.300137][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  890.430222][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  890.567234][T28013] syzkaller0: entered promiscuous mode
[  890.594701][T21695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  890.613449][T21695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  890.620370][T28013] syzkaller0: entered allmulticast mode
[  890.627307][T21695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  890.638446][T21695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  890.650392][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  890.657974][T21695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  890.660759][T28018] tipc: Failed to remove unknown binding: 66,0,0/1719593619:1858601656/1858601658
[  890.684408][T28018] tipc: Failed to remove unknown binding: 66,0,0/1719593619:1858601656/1858601657
[  890.697760][T28013] __nla_validate_parse: 8 callbacks suppressed
[  890.697776][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5640'.
[  890.732466][T28018] tipc: Failed to remove unknown binding: 66,0,0/1719593619:1858601656/1858601658
[  890.753185][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5640'.
[  890.768075][T28018] tipc: Failed to remove unknown binding: 66,0,0/1719593619:1858601656/1858601657
[  890.825427][T28013] bond0: entered promiscuous mode
[  890.864483][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  891.000361][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  891.130444][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  891.231259][ T3321] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  891.303628][T28014] lo speed is unknown, defaulting to 1000
[  891.503375][T28014] lo speed is unknown, defaulting to 1000
[  891.511647][T28014] wlan0 speed is unknown, defaulting to 1000
[  891.922370][T28014] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.930340][T28014] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.943871][T28014] bridge_slave_0: entered allmulticast mode
[  891.951762][T28014] bridge_slave_0: entered promiscuous mode
[  891.959432][T28014] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.966766][T28014] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.974542][T28014] bridge_slave_1: entered allmulticast mode
[  891.981880][T28014] bridge_slave_1: entered promiscuous mode
[  892.009086][T28014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.022135][T28014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.062246][T28014] team0: Port device team_slave_0 added
[  892.070266][T28014] team0: Port device team_slave_1 added
[  892.094141][T28014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  892.102226][T28014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  892.128987][T28014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  892.142716][T28014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  892.150412][T28014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  892.176944][T28014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  892.201428][T28065] bond9: option fail_over_mac: invalid value (127)
[  892.213353][T28065] bond9 (unregistering): Released all slaves
[  892.263422][T28014] hsr_slave_0: entered promiscuous mode
[  892.269770][T28014] hsr_slave_1: entered promiscuous mode
[  892.275804][T28014] debugfs: 'hsr0' already exists in 'hsr'
[  892.281611][T28014] Cannot create hsr debugfs directory
[  892.371543][   T25] block nbd2: Possible stuck request ffff888027387000: control (read@0,1024B). Runtime 240 seconds
[  892.456609][T28014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  892.467920][T28014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.478681][T28014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  892.530707][   T25] block nbd2: Possible stuck request ffff888027380000: control (read@1024,1024B). Runtime 240 seconds
[  892.541826][   T25] block nbd2: Possible stuck request ffff8880273801c0: control (read@2048,1024B). Runtime 240 seconds
[  892.570726][   T25] block nbd2: Possible stuck request ffff888027380380: control (read@3072,1024B). Runtime 240 seconds
[  892.584674][T28014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  892.595084][T28014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.605972][T28014] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  892.683839][T28014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  892.695057][T28014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.707213][T28014] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  892.775864][ T5625] Bluetooth: hci2: command tx timeout
[  892.787644][T28014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  892.801738][T28014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  892.812791][T28014] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  894.124141][T28036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  894.159463][T28014] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  894.201410][T28014] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  894.212560][T28014] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  894.250422][T28014] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  894.272693][T28014] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  894.312075][T28014] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  894.323913][T28014] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  894.353846][T28014] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  894.605140][T28014] 8021q: adding VLAN 0 to HW filter on device bond0
[  894.627912][T28014] 8021q: adding VLAN 0 to HW filter on device team0
[  894.645259][T14695] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.652461][T14695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  894.683751][T14694] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.690989][T14694] bridge0: port 2(bridge_slave_1) entered forwarding state
[  894.718267][T28104] netlink: 'syz.3.5657': attribute type 2 has an invalid length.
[  894.797443][T28110] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5657'.
[  894.851730][ T5625] Bluetooth: hci2: command tx timeout
[  894.920271][T14692] net_ratelimit: 25 callbacks suppressed
[  894.920290][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  895.041048][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  895.098444][T28127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5661'.
[  895.118807][T14695] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  895.160951][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  895.298817][T28136] tipc: Resetting bearer <eth:team0>
[  895.308364][T28136] tipc: Resetting bearer <eth:batadv0>
[  895.355797][T28136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  895.401578][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  895.455203][T28014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.510172][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  895.630256][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  895.830348][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  895.861430][T28014] veth0_vlan: entered promiscuous mode
[  895.874597][T28014] veth1_vlan: entered promiscuous mode
[  895.907634][T28014] veth0_macvtap: entered promiscuous mode
[  895.918757][T28014] veth1_macvtap: entered promiscuous mode
[  895.942206][T28014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  895.960918][T28014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  895.973930][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  895.984976][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  895.995435][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.006212][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.040757][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  896.181646][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  896.932328][ T5625] Bluetooth: hci2: command tx timeout
[  897.995493][T28120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  898.133396][  T663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.146812][  T663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.208769][T14695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.219379][T14695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.331234][T28187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5674'.
[  898.676368][T28208] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  898.690484][T28208] bond1 (unregistering): Released all slaves
[  899.006480][T28241] netlink: 'syz.0.5675': attribute type 21 has an invalid length.
[  899.020144][ T5625] Bluetooth: hci2: command tx timeout
[  899.025382][T28241] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5675'.
[  899.035223][T28241] netlink: 'syz.0.5675': attribute type 4 has an invalid length.
[  899.046326][T28241] netlink: 'syz.0.5675': attribute type 3 has an invalid length.
[  899.077403][T28241] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5675'.
[  899.127750][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'.
[  899.138719][T28257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5690'.
[  899.148612][T28257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5690'.
[  899.177808][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'.
[  899.198815][T28261] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 2, id = 0
[  899.217350][T28257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5690'.
[  899.279484][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5692'.
[  899.290627][T28264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5692'.
[  899.377592][T28269] netlink: 'syz.4.5695': attribute type 4 has an invalid length.
[  899.405472][T28269] netlink: 'syz.4.5695': attribute type 4 has an invalid length.
[  899.427806][T28271] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  899.438688][T28271] batman_adv: batadv0: Adding interface: gretap1
[  899.445866][T28271] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.473293][T28271] batman_adv: batadv0: Interface activated: gretap1
[  899.596614][T28280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  899.604575][T28280] syzkaller0: entered promiscuous mode
[  899.611393][T28280] syzkaller0: entered allmulticast mode
[  899.631967][T28280] tipc: Resetting bearer <eth:syzkaller0>
[  899.648037][T28277] tipc: Resetting bearer <eth:syzkaller0>
[  899.673091][T28277] tipc: Disabling bearer <eth:syzkaller0>
[  899.685434][T28279] syzkaller0: entered promiscuous mode
[  899.691247][T28279] syzkaller0: entered allmulticast mode
[  899.858454][T28291] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  899.970158][   T36] net_ratelimit: 29 callbacks suppressed
[  899.970184][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  899.995652][T28294] tipc: Started in network mode
[  900.013817][T28294] tipc: Node identity ac14140f, cluster identity 4711
[  900.043796][T28294] tipc: New replicast peer: 255.255.255.255
[  900.064758][T28294] tipc: Enabled bearer <udp:syz2>, priority 10
[  900.083770][T28303] ip6tnl0: Caught tx_queue_len zero misconfig
[  900.183127][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  900.321727][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  900.431464][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  900.446680][T28323] block nbd7: Unsupported socket: should be TCP or UNIX.
[  900.551942][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  900.680497][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  900.810652][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  900.940429][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  901.059976][T23214] tipc: Node number set to 2886997007
[  901.082486][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  901.210180][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  901.345645][T28362] FAULT_INJECTION: forcing a failure.
[  901.345645][T28362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  901.390956][T28362] CPU: 0 UID: 0 PID: 28362 Comm: syz.1.5721 Not tainted syzkaller #0 PREEMPT(full) 
[  901.390983][T28362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  901.390995][T28362] Call Trace:
[  901.391003][T28362]  <TASK>
[  901.391011][T28362]  dump_stack_lvl+0xe8/0x150
[  901.391045][T28362]  should_fail_ex+0x40c/0x560
[  901.391074][T28362]  _copy_from_iter+0x1d3/0x1660
[  901.391109][T28362]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  901.391142][T28362]  ? __pfx_policy_nodemask+0x10/0x10
[  901.391172][T28362]  ? unwind_next_frame+0x8f/0x2550
[  901.391193][T28362]  ? __pfx__copy_from_iter+0x10/0x10
[  901.391221][T28362]  ? alloc_pages_mpol+0x24a/0x380
[  901.391257][T28362]  copy_page_from_iter+0x219/0x2d0
[  901.391288][T28362]  tun_get_user+0x1bf1/0x4370
[  901.391319][T28362]  ? tun_get_user+0x6e7/0x4370
[  901.391364][T28362]  ? aa_file_perm+0x4ed/0x15f0
[  901.391388][T28362]  ? __pfx_tun_get_user+0x10/0x10
[  901.391417][T28362]  ? __lock_acquire+0x683/0x2cf0
[  901.391459][T28362]  ? ref_tracker_alloc+0x341/0x4b0
[  901.391483][T28362]  ? get_pid_task+0x20/0x1f0
[  901.391511][T28362]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  901.391536][T28362]  ? tun_get+0x1c/0x2f0
[  901.391561][T28362]  ? tun_get+0x1c/0x2f0
[  901.391590][T28362]  ? tun_get+0x1c/0x2f0
[  901.391615][T28362]  ? tun_get+0x1c/0x2f0
[  901.391646][T28362]  tun_chr_write_iter+0x113/0x200
[  901.391676][T28362]  vfs_write+0x612/0xba0
[  901.391703][T28362]  ? __pfx_vfs_write+0x10/0x10
[  901.391732][T28362]  ? __fget_files+0x2a/0x420
[  901.391767][T28362]  ksys_write+0x150/0x270
[  901.391788][T28362]  ? __pfx_ksys_write+0x10/0x10
[  901.391816][T28362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.391837][T28362]  do_syscall_64+0x174/0x580
[  901.391859][T28362]  ? trace_irq_disable+0x3b/0x140
[  901.391883][T28362]  ? clear_bhb_loop+0x40/0x90
[  901.391904][T28362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  901.391921][T28362] RIP: 0033:0x7fb74575e6ce
[  901.391938][T28362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  901.391954][T28362] RSP: 002b:00007fb7439d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  901.391974][T28362] RAX: ffffffffffffffda RBX: 00007fb7439d56c0 RCX: 00007fb74575e6ce
[  901.391987][T28362] RDX: 000000000000004a RSI: 0000200000001100 RDI: 00000000000000c8
[  901.391998][T28362] RBP: 00007fb7439d5090 R08: 0000000000000000 R09: 0000000000000000
[  901.392010][T28362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  901.392021][T28362] R13: 00007fb745a26128 R14: 00007fb745a26090 R15: 00007ffe3e7ca718
[  901.392051][T28362]  </TASK>
[  902.179076][T28370] netlink: 'syz.2.5724': attribute type 2 has an invalid length.
[  902.215395][T28353] veth1_macvtap: left promiscuous mode
[  902.278514][T28353] veth1_macvtap: entered promiscuous mode
[  902.818405][T28394] bond13 (unregistering): Released all slaves
[  903.226919][T28421] lo speed is unknown, defaulting to 1000
[  903.466745][T28440] FAULT_INJECTION: forcing a failure.
[  903.466745][T28440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  903.490578][T28440] CPU: 0 UID: 0 PID: 28440 Comm: syz.2.5735 Not tainted syzkaller #0 PREEMPT(full) 
[  903.490604][T28440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  903.490615][T28440] Call Trace:
[  903.490623][T28440]  <TASK>
[  903.490631][T28440]  dump_stack_lvl+0xe8/0x150
[  903.490664][T28440]  should_fail_ex+0x40c/0x560
[  903.490694][T28440]  _copy_to_user+0x31/0xb0
[  903.490716][T28440]  simple_read_from_buffer+0xe1/0x170
[  903.490748][T28440]  proc_fail_nth_read+0x1bb/0x230
[  903.490776][T28440]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  903.490807][T28440]  ? rw_verify_area+0x24a/0x4c0
[  903.490834][T28440]  ? tun_chr_write_iter+0x18a/0x200
[  903.490862][T28440]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  903.490888][T28440]  vfs_read+0x213/0xa80
[  903.490911][T28440]  ? __pfx___mutex_lock+0x10/0x10
[  903.490936][T28440]  ? __pfx_vfs_read+0x10/0x10
[  903.490956][T28440]  ? __fget_files+0x2a/0x420
[  903.490987][T28440]  ? __fget_files+0x3a2/0x420
[  903.491011][T28440]  ? __fget_files+0x2a/0x420
[  903.491045][T28440]  ksys_read+0x150/0x270
[  903.491070][T28440]  ? __pfx_ksys_read+0x10/0x10
[  903.491097][T28440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.491118][T28440]  do_syscall_64+0x174/0x580
[  903.491140][T28440]  ? trace_irq_disable+0x3b/0x140
[  903.491165][T28440]  ? clear_bhb_loop+0x40/0x90
[  903.491188][T28440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  903.491207][T28440] RIP: 0033:0x7ff8bd75e6ce
[  903.491225][T28440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  903.491241][T28440] RSP: 002b:00007ff8be699fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  903.491261][T28440] RAX: ffffffffffffffda RBX: 00007ff8be69a6c0 RCX: 00007ff8bd75e6ce
[  903.491275][T28440] RDX: 000000000000000f RSI: 00007ff8be69a0a0 RDI: 0000000000000007
[  903.491286][T28440] RBP: 00007ff8be69a090 R08: 0000000000000000 R09: 0000000000000000
[  903.491297][T28440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  903.491307][T28440] R13: 00007ff8bda26038 R14: 00007ff8bda25fa0 R15: 00007fff5b173348
[  903.491345][T28440]  </TASK>
[  904.033907][T28457] __nla_validate_parse: 10 callbacks suppressed
[  904.033925][T28457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5737'.
[  904.436722][T28453] bond9: entered allmulticast mode
[  904.472427][T28457] 8021q: adding VLAN 0 to HW filter on device bond6
[  904.517986][T28421] lo speed is unknown, defaulting to 1000
[  904.547712][T28421] wlan0 speed is unknown, defaulting to 1000
[  904.705422][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5742'.
[  904.761028][T28496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5744'.
[  904.867998][T28496] netlink: 'syz.2.5744': attribute type 1 has an invalid length.
[  905.210312][T28521] 8021q: adding VLAN 0 to HW filter on device bond7
[  905.226619][T28524] netlink: 'syz.4.5746': attribute type 13 has an invalid length.
[  905.234687][T28521] bond6: (slave bond7): making interface the new active one
[  905.235162][T28521] bond6: (slave bond7): Enslaving as an active interface with an up link
[  905.271707][T14694] net_ratelimit: 14 callbacks suppressed
[  905.271726][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  905.358376][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'.
[  905.396827][T28524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5746'.
[  905.400337][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  905.466909][T28529] syzkaller0: entered promiscuous mode
[  905.498626][T28529] syzkaller0: entered allmulticast mode
[  905.520485][ T5283] veth0_vlan: left promiscuous mode
[  905.586327][T10211] veth0_vlan: entered promiscuous mode
[  905.617811][T28529] lo speed is unknown, defaulting to 1000
[  905.628207][T28529] lo speed is unknown, defaulting to 1000
[  905.640181][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  905.735285][T28537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5749'.
[  905.767553][T28529] lo speed is unknown, defaulting to 1000
[  905.790198][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  905.813054][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  905.876475][   T30] audit: type=1107 audit(1784945502.191:33): pid=28544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  905.899649][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  906.019805][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  906.150015][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  906.302852][T28566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'.
[  906.362887][T28529] infiniband syz1: set active
[  906.368183][T28529] infiniband syz1: added lo
[  906.376902][T23214] lo speed is unknown, defaulting to 1000
[  906.380187][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  906.417974][T28529] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  906.458317][T28529] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  906.500800][T28529] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  906.541010][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  906.614408][T28529] RDS/IB: syz1: added
[  906.634235][T28529] smc: adding ib device syz1 with port count 1
[  906.660639][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  906.674552][T28529] smc:    ib device syz1 port 1 has no pnetid
[  906.700187][T10223] lo speed is unknown, defaulting to 1000
[  906.711291][T28529] lo speed is unknown, defaulting to 1000
[  907.094280][T28592] xt_hashlimit: size too large, truncated to 1048576
[  907.249336][T28597] netlink: 'syz.2.5758': attribute type 1 has an invalid length.
[  907.299352][T28597] netlink: 'syz.2.5758': attribute type 2 has an invalid length.
[  907.372343][T28529] lo speed is unknown, defaulting to 1000
[  907.610602][T28610] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  907.886463][T28529] lo speed is unknown, defaulting to 1000
[  907.937213][  T663] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  908.334105][T28529] lo speed is unknown, defaulting to 1000
[  908.660273][T28646] syzkaller0: entered allmulticast mode
[  908.735682][T28529] lo speed is unknown, defaulting to 1000
[  908.976721][T28529] lo speed is unknown, defaulting to 1000
[  909.196738][T28529] lo speed is unknown, defaulting to 1000
[  909.351813][T28529] lo speed is unknown, defaulting to 1000
[  909.595576][T28662] lo speed is unknown, defaulting to 1000
[  909.811244][T28662] lo speed is unknown, defaulting to 1000
[  909.818859][T28662] wlan0 speed is unknown, defaulting to 1000
[  909.831585][T28662] lo speed is unknown, defaulting to 1000
[  910.300543][T14693] net_ratelimit: 30 callbacks suppressed
[  910.300563][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  910.432274][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  910.540324][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  910.650803][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  910.760279][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  910.787733][T28621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  910.870910][T28682] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma?
[  910.940522][   T11] block nbd5: Possible stuck request ffff8880274ce000: control (read@0,4096B). Runtime 60 seconds
[  911.009414][T28692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5780'.
[  911.041738][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  911.247535][T28701] openvswitch: netlink: Message has 8 unknown bytes.
[  911.287511][T28707] bridge5: entered allmulticast mode
[  911.302846][T14694] bond1: (slave dummy0): failed to get link speed/duplex
[  911.431263][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  911.571586][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  911.604273][   T36] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  911.710838][T28716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  911.855063][T28738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5795'.
[  911.943904][T28745] netlink: 51 bytes leftover after parsing attributes in process `syz.4.5796'.
[  911.976712][T28745] macsec1: entered promiscuous mode
[  912.038659][T28749] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5798'.
[  912.148840][T28751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5799'.
[  912.190630][T28753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'.
[  912.297972][T28758] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5800'.
[  912.308278][T28756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5801'.
[  912.335259][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'.
[  912.356000][T28758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'.
[  912.424255][T28767] netlink: 'syz.3.5804': attribute type 2 has an invalid length.
[  912.443568][T28767] : entered promiscuous mode
[  912.510359][T28770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  912.532421][T28770] syzkaller0: entered promiscuous mode
[  912.550766][T28770] syzkaller0: entered allmulticast mode
[  912.565444][T28770] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  912.645055][T14693] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  912.727918][T28779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  912.878069][T28789] tipc: Resetting bearer <eth:syzkaller0>
[  912.904109][T28769] tipc: Resetting bearer <eth:syzkaller0>
[  912.948376][T28769] tipc: Disabling bearer <eth:syzkaller0>
[  912.992580][T28799] Cannot find add_set index 0 as target
[  913.076441][T28801] syzkaller1: entered promiscuous mode
[  913.082874][T28801] syzkaller1: entered allmulticast mode
[  913.117288][T28801] lo speed is unknown, defaulting to 1000
[  913.516198][T28801] lo speed is unknown, defaulting to 1000
[  913.524235][T28801] wlan0 speed is unknown, defaulting to 1000
[  913.533675][T28801] lo speed is unknown, defaulting to 1000
[  913.897748][T28814] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  913.934669][T28814] bond1 (unregistering): Released all slaves
[  914.388257][   T36] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  914.824598][T28855] tap0: tun_chr_ioctl cmd 1074025677
[  914.838842][T28855] tap0: linktype set to 774
[  915.277518][T28870] sock: sock_timestamping_bind_phc: sock not bind to device
[  915.381050][T14695] net_ratelimit: 29 callbacks suppressed
[  915.381071][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  915.510541][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  915.578157][T28888] netlink: 'syz.1.5826': attribute type 1 has an invalid length.
[  915.630139][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  915.739762][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  915.860231][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  915.971144][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  916.080378][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  916.191665][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  916.300890][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  916.410669][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  917.182698][T28835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  917.311573][T28876] netlink: 'syz.0.5817': attribute type 1 has an invalid length.
[  917.346324][T28876] __nla_validate_parse: 7 callbacks suppressed
[  917.346452][T28876] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5817'.
[  917.382672][T28876] netlink: 'syz.0.5817': attribute type 1 has an invalid length.
[  917.391744][T28876] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.5817'.
[  917.622685][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5832'.
[  917.773411][T28944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5839'.
[  917.815622][T28944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  917.856168][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5840'.
[  917.973348][T28954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'.
[  917.988630][T28944] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  918.106943][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5844'.
[  918.623605][T28991] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:5
[  918.728964][T28992] žÿ: renamed from team_slave_1
[  918.895383][T29000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5853'.
[  919.085683][T29010] x_tables: duplicate underflow at hook 1
[  919.280433][T29020] syzkaller0: entered promiscuous mode
[  919.286090][T29020] syzkaller0: entered allmulticast mode
[  919.446128][T29030] netlink: 'syz.3.5861': attribute type 1 has an invalid length.
[  919.617651][T29030] 8021q: adding VLAN 0 to HW filter on device bond13
[  919.691363][T29036] bond13: (slave syz_tun): Enslaving as a backup interface with an up link
[  919.727486][T14693] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  919.800516][T29030] bond9: left promiscuous mode
[  919.834228][T29030] bridge2: left promiscuous mode
[  919.848666][T29030] bridge2: left allmulticast mode
[  919.873447][T29030] bond12: left promiscuous mode
[  919.879002][T29030] veth7: left promiscuous mode
[  920.116357][T14694] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  920.144743][T14694] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  920.169317][T14694] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  920.200950][T14694] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  920.422269][T29083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5868'.
[  920.480179][T14698] net_ratelimit: 26 callbacks suppressed
[  920.480199][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  920.510312][T29087] bond13: (slave syz_tun): Releasing backup interface
[  920.552653][T29087] bond6: (slave team0): Releasing active interface
[  920.569027][T29087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  920.586340][T29090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5869'.
[  920.588086][T29088] team0: Device xfrm0 is of different type
[  920.630255][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  920.740123][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  920.752102][T29099] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.759731][T29099] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.768704][T29099] bridge0: entered allmulticast mode
[  920.850033][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  920.959781][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  921.070153][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  921.185987][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  921.195549][T14698] bridge_slave_1: left allmulticast mode
[  921.201697][T14698] bridge_slave_1: left promiscuous mode
[  921.209197][T14698] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.223208][T14698] bridge_slave_0: left allmulticast mode
[  921.228871][T14698] bridge_slave_0: left promiscuous mode
[  921.236854][T14698] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.265125][T14698] pim6reg: left allmulticast mode
[  921.270709][T14698] dvmrp0: left allmulticast mode
[  921.295631][T14698] bond_slave_0: left promiscuous mode
[  921.302147][T14698] bond_slave_1: left promiscuous mode
[  921.529274][T14698] bond9 (unregistering): (slave geneve5): Releasing active interface
[  921.564731][T14698] geneve0 (unregistering): left promiscuous mode
[  921.601235][T14698] bond0 (unregistering): (slave bridge1): Releasing active interface
[  921.686743][T14698] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  921.701954][T14698] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  921.711724][T14698] .` (unregistering): Released all slaves
[  921.721825][T14698] bond1 (unregistering): Released all slaves
[  921.736339][T14698] bond0 (unregistering): Released all slaves
[  921.754108][T14698] bond2 (unregistering): Released all slaves
[  921.767718][T14698] bond3 (unregistering): Released all slaves
[  921.792950][T14698] bond4 (unregistering): Released all slaves
[  921.808356][T14698] bond5 (unregistering): (slave veth3): Releasing backup interface
[  921.817570][T14698] veth3: left promiscuous mode
[  921.824693][T14698] bond5 (unregistering): Released all slaves
[  921.844923][T14698] bond6 (unregistering): Released all slaves
[  921.859094][T14698] bond7 (unregistering): (slave veth7): Releasing active interface
[  921.869400][T14698] bond7 (unregistering): Released all slaves
[  921.890798][T14698] bond8 (unregistering): Released all slaves
[  921.905007][T14698] bond9 (unregistering): Released all slaves
[  921.922476][T14698] bond10 (unregistering): Released all slaves
[  921.939931][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  922.059008][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  922.066358][T14698] 
: left promiscuous mode
[  922.144125][T14698] ¿: left promiscuous mode
[  922.201701][T14698] : left promiscuous mode
[  922.262398][T14698] tipc: Disabling bearer <eth:syzkaller0>
[  922.277277][T14698] tipc: Left network mode
[  922.320874][T14698] IPVS: stopping backup sync thread 20773 ...
[  922.457573][   T25] block nbd2: Possible stuck request ffff888027387000: control (read@0,1024B). Runtime 270 seconds
[  922.552586][   T25] block nbd2: Possible stuck request ffff888027380000: control (read@1024,1024B). Runtime 270 seconds
[  922.563758][   T25] block nbd2: Possible stuck request ffff8880273801c0: control (read@2048,1024B). Runtime 270 seconds
[  922.590483][   T25] block nbd2: Possible stuck request ffff888027380380: control (read@3072,1024B). Runtime 270 seconds
[  922.631209][T29041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  922.778476][T29115] __nla_validate_parse: 2 callbacks suppressed
[  922.778494][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5875'.
[  922.817563][T29115] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5875'.
[  922.853808][T29115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5875'.
[  922.943158][T29126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5877'.
[  923.287066][T29136] netlink: 'syz.0.5879': attribute type 32 has an invalid length.
[  924.142439][T14698] hsr_slave_0: left promiscuous mode
[  924.170727][T14698] hsr_slave_1: left promiscuous mode
[  924.192791][T14698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  924.218091][T14698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  925.182086][T14698] veth0_macvtap: left promiscuous mode
[  925.519208][T14698] team0 (unregistering): Port device team_slave_1 removed
[  925.543102][T14698] team0 (unregistering): Port device team_slave_0 removed
[  925.801845][T29153] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  925.803176][T29154] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  926.066348][T29166] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  926.120088][ T6478] net_ratelimit: 10 callbacks suppressed
[  926.120106][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  926.450429][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  926.550516][T29193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5891'.
[  926.579690][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  926.713688][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  926.784217][T29205] bridge6: entered promiscuous mode
[  926.789685][T29205] bridge6: entered allmulticast mode
[  926.798221][T29205] team0: Port device bridge6 added
[  926.850107][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  926.989929][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  927.089551][T29224] netlink: 'syz.3.5898': attribute type 1 has an invalid length.
[  927.110777][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  927.119907][T29224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5898'.
[  927.159160][T29222] lo speed is unknown, defaulting to 1000
[  927.167077][T14698] IPVS: stop unused estimator thread 0...
[  927.183859][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5896'.
[  927.204963][T29218] netlink: 'syz.4.5896': attribute type 10 has an invalid length.
[  927.230730][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  927.233598][T29218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5896'.
[  927.294955][T29218] geneve0: entered promiscuous mode
[  927.315154][T29218] geneve0: entered allmulticast mode
[  927.380355][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  927.488910][T14698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  927.519905][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  927.608601][T29222] lo speed is unknown, defaulting to 1000
[  927.623641][T29222] wlan0 speed is unknown, defaulting to 1000
[  927.632102][T29222] lo speed is unknown, defaulting to 1000
[  928.875234][T29283] xt_CT: You must specify a L4 protocol and not use inversions on it
[  929.337231][T29297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5913'.
[  929.716165][T29308] netlink: 'syz.2.5915': attribute type 1 has an invalid length.
[  929.848604][T29316] tunl0: Caught tx_queue_len zero misconfig
[  929.864844][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'.
[  929.967824][T29326] xt_recent: hitcount (4294967290) is larger than allowed maximum (65535)
[  930.064661][T29318] 8021q: adding VLAN 0 to HW filter on device bond10
[  930.073984][T29338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5920'.
[  930.178054][T29330] macvlan2: entered promiscuous mode
[  930.184499][T29330] macvlan2: entered allmulticast mode
[  930.201757][T29330] bond10: entered promiscuous mode
[  930.207804][T29330] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  930.282821][T29330] bond10: left promiscuous mode
[  930.325599][T29318] macvlan2: entered promiscuous mode
[  930.331668][T29318] macvlan2: entered allmulticast mode
[  930.338065][T29318] bond10: entered promiscuous mode
[  930.344781][T29318] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  930.355716][T29318] bond10: left promiscuous mode
[  930.438468][T29336] lo speed is unknown, defaulting to 1000
[  930.796115][T29336] lo speed is unknown, defaulting to 1000
[  930.796132][T29339] lo speed is unknown, defaulting to 1000
[  930.804943][T29336] wlan0 speed is unknown, defaulting to 1000
[  930.842055][T29336] lo speed is unknown, defaulting to 1000
[  931.150464][   T36] net_ratelimit: 27 callbacks suppressed
[  931.150487][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  931.168295][T29339] lo speed is unknown, defaulting to 1000
[  931.179053][T29339] wlan0 speed is unknown, defaulting to 1000
[  931.212524][T29339] lo speed is unknown, defaulting to 1000
[  931.300621][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  931.568351][T29372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5930'.
[  931.608398][T29374] mac80211_hwsim hwsim93 wlan0: entered promiscuous mode
[  931.616064][T29374] mac80211_hwsim hwsim93 wlan0: entered allmulticast mode
[  931.624025][T29374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  931.745037][T29378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5933'.
[  931.770040][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  931.895630][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  932.010439][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  932.140009][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  932.250277][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  932.302613][T29392] FAULT_INJECTION: forcing a failure.
[  932.302613][T29392] name failslab, interval 1, probability 0, space 0, times 0
[  932.322543][T29392] CPU: 0 UID: 0 PID: 29392 Comm: syz.2.5937 Not tainted syzkaller #0 PREEMPT(full) 
[  932.322569][T29392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  932.322580][T29392] Call Trace:
[  932.322588][T29392]  <TASK>
[  932.322596][T29392]  dump_stack_lvl+0xe8/0x150
[  932.322630][T29392]  should_fail_ex+0x40c/0x560
[  932.322659][T29392]  should_failslab+0xa8/0x100
[  932.322689][T29392]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  932.322715][T29392]  ? local_lock_release+0x9c/0x160
[  932.322737][T29392]  ? __alloc_skb+0x1d7/0x7a0
[  932.322754][T29392]  ? __alloc_skb+0x1d7/0x7a0
[  932.322779][T29392]  __alloc_skb+0x1d7/0x7a0
[  932.322802][T29392]  alloc_skb_with_frags+0xc6/0x760
[  932.322835][T29392]  sock_alloc_send_pskb+0x878/0x990
[  932.322876][T29392]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  932.322898][T29392]  ? kasan_quarantine_put+0xbb/0x1f0
[  932.322922][T29392]  ? lockdep_hardirqs_on+0x7a/0x110
[  932.322949][T29392]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  932.322972][T29392]  ? kmem_cache_free+0x182/0x650
[  932.322997][T29392]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  932.323024][T29392]  unix_dgram_sendmsg+0x4da/0x17b0
[  932.323053][T29392]  ? pick_task_fair+0x13d/0x1320
[  932.323082][T29392]  ? sched_clock_cpu+0x74/0x440
[  932.323109][T29392]  ? raw_spin_rq_lock_nested+0x2d/0x160
[  932.323138][T29392]  ? __lock_acquire+0x683/0x2cf0
[  932.323164][T29392]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  932.323196][T29392]  ? aa_sock_msg_perm+0xda/0x1b0
[  932.323218][T29392]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  932.323245][T29392]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  932.323268][T29392]  sock_sendmsg_nosec+0x13a/0x180
[  932.323298][T29392]  ____sys_sendmsg+0x54e/0x850
[  932.323325][T29392]  ? __pfx_____sys_sendmsg+0x10/0x10
[  932.323362][T29392]  ? import_iovec+0x73/0xa0
[  932.323394][T29392]  ___sys_sendmsg+0x2a5/0x360
[  932.323422][T29392]  ? __pfx____sys_sendmsg+0x10/0x10
[  932.323441][T29392]  ? __lock_acquire+0x683/0x2cf0
[  932.323470][T29392]  ? irqentry_exit+0x218/0x8f0
[  932.323491][T29392]  ? trace_irq_disable+0x3b/0x140
[  932.323558][T29392]  __sys_sendmmsg+0x273/0x4d0
[  932.323585][T29392]  ? __pfx___sys_sendmmsg+0x10/0x10
[  932.323617][T29392]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  932.323655][T29392]  ? ksys_write+0x242/0x270
[  932.323677][T29392]  ? __pfx_ksys_write+0x10/0x10
[  932.323702][T29392]  __x64_sys_sendmmsg+0xa0/0xc0
[  932.323724][T29392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.323745][T29392]  do_syscall_64+0x174/0x580
[  932.323766][T29392]  ? trace_irq_disable+0x3b/0x140
[  932.323790][T29392]  ? clear_bhb_loop+0x40/0x90
[  932.323813][T29392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  932.323832][T29392] RIP: 0033:0x7ff8bd79de99
[  932.323850][T29392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  932.323866][T29392] RSP: 002b:00007ff8be69a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  932.323887][T29392] RAX: ffffffffffffffda RBX: 00007ff8bda25fa0 RCX: 00007ff8bd79de99
[  932.323900][T29392] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  932.323912][T29392] RBP: 00007ff8be69a090 R08: 0000000000000000 R09: 0000000000000000
[  932.323924][T29392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  932.323935][T29392] R13: 00007ff8bda26038 R14: 00007ff8bda25fa0 R15: 00007fff5b173348
[  932.323962][T29392]  </TASK>
[  932.660046][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  932.748421][T29398] syzkaller0: entered promiscuous mode
[  932.754043][T29398] syzkaller0: entered allmulticast mode
[  932.772056][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  932.892979][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5938'.
[  933.034040][T29407] pim6reg0: tun_chr_ioctl cmd 35111
[  933.112075][T29407] xt_l2tp: v2 sid > 0xffff: 262144
[  933.563902][T29426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5947'.
[  933.636232][T29426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  933.688448][T29426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  933.719185][T29426] bond0 (unregistering): Released all slaves
[  933.887980][T29432] netlink: 'syz.3.5949': attribute type 1 has an invalid length.
[  933.953710][T29436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5949'.
[  933.967154][T29432] 8021q: adding VLAN 0 to HW filter on device bond15
[  933.998336][T29436] bond15: entered promiscuous mode
[  934.009125][T29436] bond15: entered allmulticast mode
[  934.034674][T29432] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5949'.
[  934.108255][T29432] vlan1: entered allmulticast mode
[  934.127103][T29432] bond0: entered allmulticast mode
[  934.143356][T29446] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.150952][T29446] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.184703][T29446] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.191942][T29446] bridge0: port 2(bridge_slave_1) entered listening state
[  934.199361][T29446] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.206577][T29446] bridge0: port 1(bridge_slave_0) entered listening state
[  934.257526][T29446] team0: Port device bridge0 added
[  934.630244][T29467] syzkaller0: entered promiscuous mode
[  934.667901][T29467] syzkaller0: entered allmulticast mode
[  934.974769][T29486] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5961'.
[  935.189389][T29495] syzkaller0: entered promiscuous mode
[  935.230073][T29495] syzkaller0: entered allmulticast mode
[  935.375475][T29499] bridge0: port 2(bridge_slave_1) entered blocking state
[  935.382731][T29499] bridge0: port 2(bridge_slave_1) entered forwarding state
[  935.390297][T29499] bridge0: port 1(bridge_slave_0) entered blocking state
[  935.397483][T29499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  935.466565][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5963'.
[  935.637375][T29513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5965'.
[  936.176814][T29544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5970'.
[  936.378455][T29536] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.386196][T29536] bridge0: port 1(bridge_slave_0) entered disabled state
[  936.841480][T29548] sctp: [Deprecated]: syz.2.5972 (pid 29548) Use of int in maxseg socket option.
[  936.841480][T29548] Use struct sctp_assoc_value instead
[  936.860756][T29548] netlink: 'syz.2.5972': attribute type 2 has an invalid length.
[  936.901033][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  936.983728][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  937.619847][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'.
[  937.647941][T29542] veth9: entered promiscuous mode
[  937.653711][T29542] veth9: entered allmulticast mode
[  937.691885][T14698] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.702399][T14698] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.717023][T14698] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.726714][T14698] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.755618][  T663] net_ratelimit: 20 callbacks suppressed
[  937.755638][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  937.872350][T29571] lo speed is unknown, defaulting to 1000
[  937.884241][T29573] FAULT_INJECTION: forcing a failure.
[  937.884241][T29573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  937.911173][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  937.928161][T29573] CPU: 1 UID: 0 PID: 29573 Comm: syz.3.5979 Not tainted syzkaller #0 PREEMPT(full) 
[  937.928187][T29573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  937.928197][T29573] Call Trace:
[  937.928204][T29573]  <TASK>
[  937.928211][T29573]  dump_stack_lvl+0xe8/0x150
[  937.928243][T29573]  should_fail_ex+0x40c/0x560
[  937.928271][T29573]  _copy_from_user+0x2d/0xb0
[  937.928291][T29573]  ___sys_sendmsg+0x1c6/0x360
[  937.928313][T29573]  ? __lock_acquire+0x683/0x2cf0
[  937.928341][T29573]  ? __pfx____sys_sendmsg+0x10/0x10
[  937.928360][T29573]  ? __lock_acquire+0x683/0x2cf0
[  937.928389][T29573]  ? kstrtouint+0x6e/0xe0
[  937.928443][T29573]  __sys_sendmmsg+0x273/0x4d0
[  937.928469][T29573]  ? __pfx___sys_sendmmsg+0x10/0x10
[  937.928498][T29573]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  937.928532][T29573]  ? ksys_write+0x242/0x270
[  937.928552][T29573]  ? __pfx_ksys_write+0x10/0x10
[  937.928576][T29573]  __x64_sys_sendmmsg+0xa0/0xc0
[  937.928600][T29573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.928620][T29573]  do_syscall_64+0x174/0x580
[  937.928641][T29573]  ? trace_irq_disable+0x3b/0x140
[  937.928665][T29573]  ? clear_bhb_loop+0x40/0x90
[  937.928689][T29573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.928706][T29573] RIP: 0033:0x7f65ec39de99
[  937.928725][T29573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  937.928740][T29573] RSP: 002b:00007f65ed273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  937.928759][T29573] RAX: ffffffffffffffda RBX: 00007f65ec625fa0 RCX: 00007f65ec39de99
[  937.928773][T29573] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  937.928785][T29573] RBP: 00007f65ed273090 R08: 0000000000000000 R09: 0000000000000000
[  937.928796][T29573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  937.928806][T29573] R13: 00007f65ec626038 R14: 00007f65ec625fa0 R15: 00007ffed0e114b8
[  937.928836][T29573]  </TASK>
[  938.196211][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  938.320374][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  938.382824][T29571] lo speed is unknown, defaulting to 1000
[  938.391077][T29571] wlan0 speed is unknown, defaulting to 1000
[  938.398992][T29571] lo speed is unknown, defaulting to 1000
[  938.432810][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  938.506310][T29593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5984'.
[  938.547566][T29595] dvmrp0: entered allmulticast mode
[  938.560449][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  938.635398][T29597] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5985'.
[  938.670196][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  938.704062][T29599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5986'.
[  938.779846][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  938.890257][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  938.898300][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'.
[  938.917160][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'.
[  939.110278][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  939.345844][T29625] FAULT_INJECTION: forcing a failure.
[  939.345844][T29625] name failslab, interval 1, probability 0, space 0, times 0
[  939.362337][T29625] CPU: 0 UID: 0 PID: 29625 Comm: syz.0.5993 Not tainted syzkaller #0 PREEMPT(full) 
[  939.362364][T29625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  939.362376][T29625] Call Trace:
[  939.362383][T29625]  <TASK>
[  939.362391][T29625]  dump_stack_lvl+0xe8/0x150
[  939.362425][T29625]  should_fail_ex+0x40c/0x560
[  939.362453][T29625]  should_failslab+0xa8/0x100
[  939.362482][T29625]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  939.362506][T29625]  ? local_lock_release+0x9c/0x160
[  939.362526][T29625]  ? __alloc_skb+0x1d7/0x7a0
[  939.362542][T29625]  ? __alloc_skb+0x1d7/0x7a0
[  939.362565][T29625]  __alloc_skb+0x1d7/0x7a0
[  939.362587][T29625]  alloc_skb_with_frags+0xc6/0x760
[  939.362626][T29625]  sock_alloc_send_pskb+0x878/0x990
[  939.362666][T29625]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  939.362686][T29625]  ? kasan_quarantine_put+0xbb/0x1f0
[  939.362709][T29625]  ? lockdep_hardirqs_on+0x7a/0x110
[  939.362731][T29625]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  939.362753][T29625]  ? kmem_cache_free+0x182/0x650
[  939.362779][T29625]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  939.362805][T29625]  unix_dgram_sendmsg+0x4da/0x17b0
[  939.362849][T29625]  ? __lock_acquire+0x683/0x2cf0
[  939.362875][T29625]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  939.362906][T29625]  ? aa_sock_msg_perm+0xda/0x1b0
[  939.362929][T29625]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  939.362956][T29625]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  939.362980][T29625]  sock_sendmsg_nosec+0x13a/0x180
[  939.363010][T29625]  ____sys_sendmsg+0x54e/0x850
[  939.363037][T29625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  939.363068][T29625]  ? import_iovec+0x73/0xa0
[  939.363100][T29625]  ___sys_sendmsg+0x2a5/0x360
[  939.363120][T29625]  ? __lock_acquire+0x683/0x2cf0
[  939.363150][T29625]  ? __pfx____sys_sendmsg+0x10/0x10
[  939.363169][T29625]  ? __lock_acquire+0x683/0x2cf0
[  939.363200][T29625]  ? kstrtouint+0x6e/0xe0
[  939.363263][T29625]  __sys_sendmmsg+0x273/0x4d0
[  939.363290][T29625]  ? __pfx___sys_sendmmsg+0x10/0x10
[  939.363321][T29625]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  939.363358][T29625]  ? ksys_write+0x242/0x270
[  939.363379][T29625]  ? __pfx_ksys_write+0x10/0x10
[  939.363402][T29625]  __x64_sys_sendmmsg+0xa0/0xc0
[  939.363424][T29625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.363445][T29625]  do_syscall_64+0x174/0x580
[  939.363466][T29625]  ? trace_irq_disable+0x3b/0x140
[  939.363490][T29625]  ? clear_bhb_loop+0x40/0x90
[  939.363514][T29625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  939.363533][T29625] RIP: 0033:0x7fe97019de99
[  939.363551][T29625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  939.363567][T29625] RSP: 002b:00007fe971059028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  939.363588][T29625] RAX: ffffffffffffffda RBX: 00007fe970425fa0 RCX: 00007fe97019de99
[  939.363602][T29625] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  939.363623][T29625] RBP: 00007fe971059090 R08: 0000000000000000 R09: 0000000000000000
[  939.363635][T29625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  939.363647][T29625] R13: 00007fe970426038 R14: 00007fe970425fa0 R15: 00007ffeffc12998
[  939.363677][T29625]  </TASK>
[  939.780002][T29632] Cannot find add_set index 0 as target
[  939.890711][T29629] veth0: Caught tx_queue_len zero misconfig
[  940.347171][T29650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6001'.
[  940.372697][T29650] siw: device registration error -23
[  940.396215][T29650] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6001'.
[  940.433065][T29650] ip6tnl0: Caught tx_queue_len zero misconfig
[  940.450879][T29650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6001'.
[  940.512732][T29666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6006'.
[  940.569269][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.595657][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.617034][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.627491][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.638058][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.648997][T29670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'.
[  940.681364][T29676] netlink: 'syz.3.6008': attribute type 1 has an invalid length.
[  940.774042][T29676] bond16: entered promiscuous mode
[  940.780803][T29676] 8021q: adding VLAN 0 to HW filter on device bond16
[  940.808045][T29686] 8021q: adding VLAN 0 to HW filter on device bond16
[  940.821031][T29686] bond16: (slave gre2): The slave device specified does not support setting the MAC address
[  940.831965][T29686] bond16: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  940.857385][T29686] bond16: (slave gre2): making interface the new active one
[  940.866058][T29686] gre2: entered promiscuous mode
[  940.878084][T29686] bond16: (slave gre2): Enslaving as an active interface with an up link
[  940.892592][T29685] veth0: Caught tx_queue_len zero misconfig
[  941.017749][   T11] block nbd5: Possible stuck request ffff8880274ce000: control (read@0,4096B). Runtime 90 seconds
[  941.264500][T29712] syzkaller0: entered promiscuous mode
[  941.274490][T29712] syzkaller0: entered allmulticast mode
[  941.773520][T29743] pimreg: tun_chr_ioctl cmd 3223345255
[  941.793642][T29743] pimreg: tun_chr_ioctl cmd 2147767520
[  942.229170][T29762] netlink: 'syz.4.6027': attribute type 1 has an invalid length.
[  942.327956][   T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  942.363254][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  942.401013][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  942.418565][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  942.535066][T29777] netlink: 'syz.1.6031': attribute type 2 has an invalid length.
[  942.627544][   T36] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  942.774815][T29790] ip6_vti0: Caught tx_queue_len zero misconfig
[  942.839788][T14698] net_ratelimit: 23 callbacks suppressed
[  942.839809][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  942.902692][T29803] FAULT_INJECTION: forcing a failure.
[  942.902692][T29803] name failslab, interval 1, probability 0, space 0, times 0
[  942.916495][T29803] CPU: 1 UID: 0 PID: 29803 Comm: syz.3.6035 Not tainted syzkaller #0 PREEMPT(full) 
[  942.916520][T29803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  942.916531][T29803] Call Trace:
[  942.916539][T29803]  <TASK>
[  942.916547][T29803]  dump_stack_lvl+0xe8/0x150
[  942.916580][T29803]  should_fail_ex+0x40c/0x560
[  942.916608][T29803]  should_failslab+0xa8/0x100
[  942.916639][T29803]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  942.916662][T29803]  ? local_lock_release+0x9c/0x160
[  942.916683][T29803]  ? __alloc_skb+0x1d7/0x7a0
[  942.916704][T29803]  ? __alloc_skb+0x1d7/0x7a0
[  942.916729][T29803]  __alloc_skb+0x1d7/0x7a0
[  942.916752][T29803]  alloc_skb_with_frags+0xc6/0x760
[  942.916784][T29803]  sock_alloc_send_pskb+0x878/0x990
[  942.916826][T29803]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  942.916849][T29803]  ? kasan_quarantine_put+0xbb/0x1f0
[  942.916872][T29803]  ? lockdep_hardirqs_on+0x7a/0x110
[  942.916899][T29803]  ? unix_dgram_sendmsg+0x5d7/0x17b0
[  942.916923][T29803]  ? kmem_cache_free+0x182/0x650
[  942.916949][T29803]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  942.916976][T29803]  unix_dgram_sendmsg+0x4da/0x17b0
[  942.917020][T29803]  ? __lock_acquire+0x683/0x2cf0
[  942.917044][T29803]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  942.917074][T29803]  ? aa_sock_msg_perm+0xda/0x1b0
[  942.917097][T29803]  ? unix_seqpacket_sendmsg+0x111/0x1e0
[  942.917124][T29803]  ? __pfx_unix_seqpacket_sendmsg+0x10/0x10
[  942.917149][T29803]  sock_sendmsg_nosec+0x13a/0x180
[  942.917177][T29803]  ____sys_sendmsg+0x54e/0x850
[  942.917205][T29803]  ? __pfx_____sys_sendmsg+0x10/0x10
[  942.917237][T29803]  ? import_iovec+0x73/0xa0
[  942.917276][T29803]  ___sys_sendmsg+0x2a5/0x360
[  942.917297][T29803]  ? __lock_acquire+0x683/0x2cf0
[  942.917327][T29803]  ? __pfx____sys_sendmsg+0x10/0x10
[  942.917346][T29803]  ? __lock_acquire+0x683/0x2cf0
[  942.917377][T29803]  ? kstrtouint+0x6e/0xe0
[  942.917441][T29803]  __sys_sendmmsg+0x273/0x4d0
[  942.917468][T29803]  ? __pfx___sys_sendmmsg+0x10/0x10
[  942.917500][T29803]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  942.917538][T29803]  ? ksys_write+0x242/0x270
[  942.917560][T29803]  ? __pfx_ksys_write+0x10/0x10
[  942.917585][T29803]  __x64_sys_sendmmsg+0xa0/0xc0
[  942.917607][T29803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.917627][T29803]  do_syscall_64+0x174/0x580
[  942.917649][T29803]  ? trace_irq_disable+0x3b/0x140
[  942.917674][T29803]  ? clear_bhb_loop+0x40/0x90
[  942.917697][T29803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  942.917716][T29803] RIP: 0033:0x7f65ec39de99
[  942.917734][T29803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  942.917750][T29803] RSP: 002b:00007f65ed273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  942.917770][T29803] RAX: ffffffffffffffda RBX: 00007f65ec625fa0 RCX: 00007f65ec39de99
[  942.917784][T29803] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  942.917797][T29803] RBP: 00007f65ed273090 R08: 0000000000000000 R09: 0000000000000000
[  942.917809][T29803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  942.917821][T29803] R13: 00007f65ec626038 R14: 00007f65ec625fa0 R15: 00007ffed0e114b8
[  942.917852][T29803]  </TASK>
[  943.233432][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  943.362361][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  943.480374][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  943.590146][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  943.709892][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  943.820087][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  943.930417][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  944.050243][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  944.137291][T29827] openvswitch: netlink: IP tunnel dst address not specified
[  944.182933][T29829] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  944.226833][T29831] netlink: 'syz.0.6045': attribute type 1 has an invalid length.
[  945.510015][T29773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  945.683044][T29840] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  945.714304][T29840] __nla_validate_parse: 82 callbacks suppressed
[  945.714321][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6046'.
[  945.717487][T29842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'.
[  945.742123][T29840] hsr_slave_0: left promiscuous mode
[  945.751137][T29840] hsr_slave_1: left promiscuous mode
[  945.757233][T29846] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6049'.
[  945.925758][T29857] netlink: 'syz.4.6052': attribute type 1 has an invalid length.
[  946.018585][T29863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  946.095587][T29863] syzkaller0: entered promiscuous mode
[  946.125929][T29863] syzkaller0: entered allmulticast mode
[  946.141564][T29863] tipc: Resetting bearer <eth:syzkaller0>
[  946.208642][T29878] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  946.225284][T29879] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.235345][T29878] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.245175][T29879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.255100][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.265828][T29878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.279021][T29878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'.
[  946.315707][T29862] tipc: Resetting bearer <eth:syzkaller0>
[  946.574370][T29899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6060'.
[  948.756369][T29862] tipc: Disabling bearer <eth:syzkaller0>
[  948.765919][T29892] IPVS: Error connecting to the multicast addr
[  948.780347][T29897] pimreg: entered allmulticast mode
[  948.785759][T29897] pimreg: left allmulticast mode
[  948.825223][T29895] bridge4: entered promiscuous mode
[  948.840132][T29895] bridge4: entered allmulticast mode
[  948.860744][T14692] net_ratelimit: 18 callbacks suppressed
[  948.860761][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  949.029723][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  949.168289][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  949.287665][T29931] netlink: 'syz.1.6070': attribute type 4 has an invalid length.
[  949.319584][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  949.329588][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  949.338652][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  949.404114][T29938] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  949.411861][T29937] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  949.411981][T29938] netlink: 'syz.2.6075': attribute type 1 has an invalid length.
[  949.433124][T29934] bond1: (slave bond_slave_1): Device is not our slave
[  949.443884][T29934] bond1: option active_slave: invalid value (bond_slave_1)
[  949.455636][T29934] bond1 (unregistering): Released all slaves
[  949.512632][T29938] 8021q: adding VLAN 0 to HW filter on device bond8
[  949.534958][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  949.682899][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  949.780696][T21695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  949.811159][T21695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  949.823147][T21695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  949.833575][T21695] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  949.841694][T21695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  949.843441][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  950.044146][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  950.116966][T29965] tap0: tun_chr_ioctl cmd 1074025673
[  950.128537][T29964] tap0: tun_chr_ioctl cmd 1074025677
[  950.142693][T29964] tap0: linktype set to 825
[  950.180360][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  950.349673][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  950.457355][T29988] netlink: 'syz.1.6087': attribute type 4 has an invalid length.
[  950.747032][T29952] lo speed is unknown, defaulting to 1000
[  951.057727][T30014] __nla_validate_parse: 5 callbacks suppressed
[  951.057743][T30014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6098'.
[  951.119083][T29952] lo speed is unknown, defaulting to 1000
[  951.143918][T29952] wlan0 speed is unknown, defaulting to 1000
[  951.161497][T29952] lo speed is unknown, defaulting to 1000
[  951.177516][T30025] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6096'.
[  951.456347][T30028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6100'.
[  951.510735][T30031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6101'.
[  951.886876][T30050] syzkaller0: entered promiscuous mode
[  951.900590][T30050] syzkaller0: entered allmulticast mode
[  951.971090][T21695] Bluetooth: hci5: command tx timeout
[  951.985589][T30058] bond5: (slave bridge0): Releasing backup interface
[  952.056858][T30058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6106'.
[  952.076234][T30063] netlink: 'syz.4.6107': attribute type 1 has an invalid length.
[  952.174059][T29952] bridge0: port 1(bridge_slave_0) entered blocking state
[  952.183305][T29952] bridge0: port 1(bridge_slave_0) entered disabled state
[  952.188618][T30069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6109'.
[  952.190978][T29952] bridge_slave_0: entered allmulticast mode
[  952.192751][T29952] bridge_slave_0: entered promiscuous mode
[  952.202232][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6110'.
[  952.210575][T29952] bridge0: port 2(bridge_slave_1) entered blocking state
[  952.230082][T29952] bridge0: port 2(bridge_slave_1) entered disabled state
[  952.237283][T29952] bridge_slave_1: entered allmulticast mode
[  952.245124][T29952] bridge_slave_1: entered promiscuous mode
[  952.313076][T29952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  952.325220][T29952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  952.368687][T29952] team0: Port device team_slave_0 added
[  952.382363][T29952] team0: Port device team_slave_1 added
[  952.434414][T29952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  952.449533][T29952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.466158][T30079] can: request_module (can-proto-0) failed.
[  952.495428][T29952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  952.561649][   T25] block nbd2: Possible stuck request ffff888027387000: control (read@0,1024B). Runtime 300 seconds
[  952.578252][T29952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  952.585716][T29952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  952.612392][   T30] audit: type=1800 audit(1784945548.911:34): pid=30087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6113" name=B702 dev="tmpfs" ino=3163 res=0 errno=0
[  952.630799][T29952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  952.646876][   T25] block nbd2: Possible stuck request ffff888027380000: control (read@1024,1024B). Runtime 300 seconds
[  952.658278][   T25] block nbd2: Possible stuck request ffff8880273801c0: control (read@2048,1024B). Runtime 300 seconds
[  952.669857][   T25] block nbd2: Possible stuck request ffff888027380380: control (read@3072,1024B). Runtime 300 seconds
[  952.750689][T29952] hsr_slave_0: entered promiscuous mode
[  952.757302][T29952] hsr_slave_1: entered promiscuous mode
[  952.763881][T29952] debugfs: 'hsr0' already exists in 'hsr'
[  952.770555][T29952] Cannot create hsr debugfs directory
[  952.974429][T30111] ip6tnl1: entered allmulticast mode
[  953.092374][T30100] rdma_rxe: rxe_newlink: failed to add bond0
[  953.096560][T29952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  953.131103][T30114] FAULT_INJECTION: forcing a failure.
[  953.131103][T30114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  953.148161][T30114] CPU: 1 UID: 0 PID: 30114 Comm: syz.1.6118 Not tainted syzkaller #0 PREEMPT(full) 
[  953.148187][T30114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  953.148198][T30114] Call Trace:
[  953.148205][T30114]  <TASK>
[  953.148213][T30114]  dump_stack_lvl+0xe8/0x150
[  953.148245][T30114]  should_fail_ex+0x40c/0x560
[  953.148272][T30114]  _copy_from_user+0x2d/0xb0
[  953.148290][T30114]  ___sys_sendmsg+0x1c6/0x360
[  953.148312][T30114]  ? __lock_acquire+0x683/0x2cf0
[  953.148342][T30114]  ? __pfx____sys_sendmsg+0x10/0x10
[  953.148401][T30114]  ? __fget_files+0x2a/0x420
[  953.148426][T30114]  ? __fget_files+0x3a2/0x420
[  953.148460][T30114]  __x64_sys_sendmsg+0x1b1/0x290
[  953.148485][T30114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  953.148526][T30114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.148546][T30114]  do_syscall_64+0x174/0x580
[  953.148569][T30114]  ? trace_irq_disable+0x3b/0x140
[  953.148593][T30114]  ? clear_bhb_loop+0x40/0x90
[  953.148618][T30114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  953.148636][T30114] RIP: 0033:0x7fb74579de99
[  953.148654][T30114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  953.148671][T30114] RSP: 002b:00007fb7439d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  953.148691][T30114] RAX: ffffffffffffffda RBX: 00007fb745a26090 RCX: 00007fb74579de99
[  953.148714][T30114] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  953.148727][T30114] RBP: 00007fb7439d5090 R08: 0000000000000000 R09: 0000000000000000
[  953.148739][T30114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  953.148751][T30114] R13: 00007fb745a26128 R14: 00007fb745a26090 R15: 00007ffe3e7ca718
[  953.148782][T30114]  </TASK>
[  953.382898][T29952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  953.456040][T29952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  953.553754][T29952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  954.050215][T21695] Bluetooth: hci5: command tx timeout
[  955.697557][T30095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  955.915937][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'.
[  956.101458][T29952] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  956.116228][T29952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  956.126694][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'.
[  956.130109][T21695] Bluetooth: hci5: command tx timeout
[  956.136207][T29952] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  956.139812][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'.
[  956.162447][T29952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  956.170882][T29952] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  956.194916][T29952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  956.221177][T14698] net_ratelimit: 11 callbacks suppressed
[  956.221195][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  956.256548][T29952] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  956.293364][T29952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  956.302553][T30146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6127'.
[  956.395120][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  956.527064][T29952] 8021q: adding VLAN 0 to HW filter on device bond0
[  956.560220][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  956.597855][T29952] 8021q: adding VLAN 0 to HW filter on device team0
[  956.628376][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.635605][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  956.668949][T30177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'.
[  956.702089][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  956.716242][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  956.723437][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  956.758390][T30174] wlan0: renamed from sit0 (while UP)
[  956.766530][T30174] wlan0: entered promiscuous mode
[  956.775673][T30174] wlan0: entered allmulticast mode
[  956.824017][T30174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6133'.
[  956.845573][T30174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  956.862883][T30179] syzkaller0: entered promiscuous mode
[  956.877709][T30179] syzkaller0: entered allmulticast mode
[  956.970850][T14695] bond1: (slave dummy0): failed to get link speed/duplex
[  957.090436][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  957.116088][T30191] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000
[  957.126780][T30191] netlink: 'syz.1.6136': attribute type 4 has an invalid length.
[  957.136190][T30191] netlink: 'syz.1.6136': attribute type 8 has an invalid length.
[  957.145931][T30191] netlink: 'syz.1.6136': attribute type 1 has an invalid length.
[  957.155269][T30191] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6136'.
[  957.177596][T30191] NCSI netlink: No device for ifindex 0
[  957.200337][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  957.320198][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  957.430480][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  957.445684][T30210] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6141'.
[  957.527098][T30211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6140'.
[  957.640620][T29952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  957.752103][T29952] veth0_vlan: entered promiscuous mode
[  957.776998][T29952] veth1_vlan: entered promiscuous mode
[  957.851045][T29952] veth0_macvtap: entered promiscuous mode
[  957.876368][T29952] veth1_macvtap: entered promiscuous mode
[  957.925980][T29952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  957.952077][T29952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  957.982888][T14695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  957.992663][T14695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  958.014112][T14695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  958.030861][T14695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  958.210416][T21695] Bluetooth: hci5: command tx timeout
[  958.282759][T30231] geneve2: entered promiscuous mode
[  958.377149][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  958.394026][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  958.440633][ T6478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  958.479224][ T6478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  958.888530][T30263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6155'.
[  959.086320][T30270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  959.106773][T30270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  959.114901][T30270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  959.133810][T30270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  959.144500][T30270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  959.520331][T30285] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  959.570486][T30281] dvmrp0: left allmulticast mode
[  960.095714][T30269] lo speed is unknown, defaulting to 1000
[  960.535672][ T6478] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.593606][T30269] lo speed is unknown, defaulting to 1000
[  960.611956][T30269] wlan0 speed is unknown, defaulting to 1000
[  960.630353][T30269] lo speed is unknown, defaulting to 1000
[  960.888751][ T6478] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  961.054111][ T6478] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  961.145625][T14698] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  961.220423][T14692] pim6reg: left allmulticast mode
[  961.244545][T14692] dvmrp8: left allmulticast mode
[  961.254442][T21695] Bluetooth: hci4: command tx timeout
[  961.832201][T14692] bond16 (unregistering): (slave gre2): Releasing backup interface
[  961.868801][T14692] gre2 (unregistering): left promiscuous mode
[  961.929379][T14692] bond10 (unregistering): (slave geneve2): Releasing active interface
[  962.008981][T14692] team0: Port device bridge2 removed
[  962.071199][T14692] bond0 (unregistering): Released all slaves
[  962.092972][T14692] bond1 (unregistering): (slave veth5): Releasing active interface
[  962.106366][T14692] bond1 (unregistering): Released all slaves
[  962.172796][T14692] bond2 (unregistering): Released all slaves
[  962.228152][T14692] bond3 (unregistering): (slave bond4): Releasing backup interface
[  962.241513][T14692] bond3 (unregistering): Released all slaves
[  962.268454][T14692] bond4 (unregistering): Released all slaves
[  962.288156][T14692] bond5 (unregistering): Released all slaves
[  962.315344][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'.
[  962.329110][T14692] bond6 (unregistering): Released all slaves
[  962.356698][T14692] bond7 (unregistering): Released all slaves
[  962.378367][T14692] bond8 (unregistering): Released all slaves
[  962.393080][T14692] bond9 (unregistering): Released all slaves
[  962.420156][T14692] bond10 (unregistering): Released all slaves
[  962.434597][T14692] bond11 (unregistering): Released all slaves
[  962.449187][T14692] bond12 (unregistering): (slave veth7): Releasing backup interface
[  962.466195][T14692] bond12 (unregistering): Released all slaves
[  962.483829][T14692] bond13 (unregistering): Released all slaves
[  962.498367][T14692] bond14 (unregistering): Released all slaves
[  962.515868][T14692] bond15 (unregistering): Released all slaves
[  962.531536][T14692] bond16 (unregistering): Released all slaves
[  962.562698][T30347] net_ratelimit: 24 callbacks suppressed
[  962.562709][T30347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  962.586605][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  962.615741][T30355] ip6gre2: entered promiscuous mode
[  962.621862][T30355] ip6gre2: entered allmulticast mode
[  962.631014][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  962.843225][T14692] : left promiscuous mode
[  962.896821][T30381] netlink: 'syz.1.6176': attribute type 1 has an invalid length.
[  962.973587][ T6478] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  962.982224][ T6478] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  963.000766][T24335] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  963.024708][T14692] tipc: Left network mode
[  963.030039][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  963.322215][T30392] bridge1: entered promiscuous mode
[  963.330992][T21695] Bluetooth: hci4: command tx timeout
[  963.341015][T30392] bridge1: entered allmulticast mode
[  963.348840][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  963.380345][T24335] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  963.393741][T30392] pim6reg0: tun_chr_ioctl cmd 1074812118
[  963.590074][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  963.766157][T30405] openvswitch: netlink: IP tunnel dst address not specified
[  963.787114][T30408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'.
[  963.810481][  T187] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  963.958492][T30408] 8021q: adding VLAN 0 to HW filter on device bond8
[  964.355803][T30413] veth3: entered allmulticast mode
[  964.383667][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  964.410513][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  964.567134][T30269] bridge0: port 1(bridge_slave_0) entered blocking state
[  964.585217][T30269] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.601726][T30269] bridge_slave_0: entered allmulticast mode
[  964.620063][T30269] bridge_slave_0: entered promiscuous mode
[  964.689576][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  964.696876][    C1] bridge0: topology change detected, propagating
[  964.703619][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  964.710865][    C1] bridge0: topology change detected, propagating
[  964.765378][T30269] bridge0: port 2(bridge_slave_1) entered blocking state
[  964.783794][T30269] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.803944][T30269] bridge_slave_1: entered allmulticast mode
[  964.823069][T30269] bridge_slave_1: entered promiscuous mode
[  964.941571][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  964.959333][T30464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6192'.
[  964.973366][T30462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6192'.
[  965.013764][T30269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.139087][T30269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  965.343292][T30269] team0: Port device team_slave_0 added
[  965.423891][T21695] Bluetooth: hci4: command tx timeout
[  965.614181][T30269] team0: Port device team_slave_1 added
[  965.640150][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  965.809918][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  965.828586][T30269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.839296][T30269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  965.892806][T30269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  965.947984][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  965.973215][T30269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.010040][T30269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.027132][   T36] smbdirect: ib_dev[syz0] removed
[  966.085470][T30269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  966.316072][T30269] hsr_slave_0: entered promiscuous mode
[  966.323378][T30269] hsr_slave_1: entered promiscuous mode
[  966.330310][T30269] debugfs: 'hsr0' already exists in 'hsr'
[  966.336066][T30269] Cannot create hsr debugfs directory
[  967.146485][T30522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6203'.
[  967.220641][T30524] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6203'.
[  967.284935][T30522] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6203'.
[  967.329991][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  967.404892][T30510] lo speed is unknown, defaulting to 1000
[  967.470834][T14692] hsr_slave_0: left promiscuous mode
[  967.495259][T21695] Bluetooth: hci4: command tx timeout
[  968.207835][T30541] netlink: 'syz.2.6204': attribute type 4 has an invalid length.
[  968.226798][ T3321] net_ratelimit: 1 callbacks suppressed
[  968.226815][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  968.268067][T30510] lo speed is unknown, defaulting to 1000
[  968.270393][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  968.282654][T30544] netlink: 'syz.2.6204': attribute type 4 has an invalid length.
[  968.332288][T30510] lo speed is unknown, defaulting to 1000
[  968.356592][T30557] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6206'.
[  968.614567][T30562] netlink: 'syz.1.6209': attribute type 1 has an invalid length.
[  968.663002][T30564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6210'.
[  968.718502][T30269] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  968.862938][T30562] 8021q: adding VLAN 0 to HW filter on device bond9
[  968.896571][T30572] netlink: 'syz.0.6207': attribute type 1 has an invalid length.
[  968.924135][T30565] veth9: entered allmulticast mode
[  968.933105][T30565] bond9: (slave veth9): Enslaving as an active interface with an up link
[  969.017458][T30564] syzkaller0: entered promiscuous mode
[  969.035573][T30564] syzkaller0: entered allmulticast mode
[  969.069434][T14692] IPVS: stop unused estimator thread 0...
[  969.297157][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6211'.
[  971.098571][   T11] block nbd5: Possible stuck request ffff8880274ce000: control (read@0,4096B). Runtime 120 seconds
[  971.561095][T30269] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  971.685029][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  971.890261][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  972.060826][T30269] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.094181][T14698] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  972.120282][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  972.251116][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  972.501426][T30269] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.590905][T14693] bond1: (slave dummy0): failed to get link speed/duplex
[  972.712147][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  972.820725][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  972.926378][T30637] x_tables: unsorted entry at hook 2
[  972.932574][ T3321] bond1: (slave dummy0): failed to get link speed/duplex
[  973.052753][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  973.137537][T30644] syzkaller0: entered promiscuous mode
[  973.143720][T30644] syzkaller0: entered allmulticast mode
[  974.945240][T30612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  975.522844][T30685] IPVS: Scheduler module ip_vs_sip not found
[  975.935150][T30269] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  975.948520][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  975.959142][T30269] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  975.996371][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  976.022019][T30269] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  976.038960][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  976.048189][T30269] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  976.059875][T30694] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6224'.
[  976.076048][T30269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  976.202956][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  976.356681][T30692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6223'.
[  976.388100][T30692] bridge_slave_1: left promiscuous mode
[  976.396942][T30692] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.410649][T30692] bridge_slave_0: left allmulticast mode
[  976.416436][T30692] bridge_slave_0: left promiscuous mode
[  976.431101][T30692] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.515598][T30692] team0: Port device bridge0 removed
[  976.560585][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  976.590866][T30269] 8021q: adding VLAN 0 to HW filter on device bond0
[  976.646648][T30269] 8021q: adding VLAN 0 to HW filter on device team0
[  976.654897][T30725] lo speed is unknown, defaulting to 1000
[  976.667118][T14691] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.674292][T14691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  976.709000][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.716220][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  976.771427][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  976.849835][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  978.462605][T30765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6234'.
[  979.587900][T30725] lo speed is unknown, defaulting to 1000
[  979.607258][T30725] lo speed is unknown, defaulting to 1000
[  979.639650][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  979.780613][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  979.901189][T14698] bond1: (slave dummy0): failed to get link speed/duplex
[  980.020236][T30652] bond1: (slave dummy0): failed to get link speed/duplex
[  980.215548][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  980.340658][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  980.440468][T30269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  980.489949][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  980.568958][ T4988] udevd[4988]: worker [21895] /devices/virtual/block/nbd2 timeout; kill it
[  980.573783][T30269] veth0_vlan: entered promiscuous mode
[  980.593908][ T4988] udevd[4988]: seq 37326 '/devices/virtual/block/nbd2' killed
[  980.595992][T30269] veth1_vlan: entered promiscuous mode
[  980.611838][ T4988] udevd[4988]: worker [22707] /devices/virtual/block/nbd5 is taking a long time
[  980.656947][T30269] veth0_macvtap: entered promiscuous mode
[  980.670433][T30269] veth1_macvtap: entered promiscuous mode
[  980.717654][T30269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  980.795365][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6240'.
[  980.825476][T30269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  980.835548][T30799] netlink: 'syz.4.6240': attribute type 2 has an invalid length.
[  980.862481][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6240'.
[  980.881143][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  980.896576][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  980.907156][T30800] netlink: 'syz.4.6240': attribute type 2 has an invalid length.
[  980.927971][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  980.942180][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  981.140719][T30785] infiniband sy~0: set down
[  981.145304][T30785] infiniband sy~0: added bond0
[  981.152980][T30785] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  981.157383][T30785] infiniband sy~0: Couldn't open port 1
[  981.172469][T30785] smbdirect: ib_dev[sy~0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  981.189003][T30785] smbdirect: ib_dev[sy~0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  981.206912][T30785] smbdirect: ib_dev[sy~0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  981.238711][T30785] RDS/IB: sy~0: added
[  981.244452][T30785] smc: adding ib device sy~0 with port count 1
[  981.250865][T30785] smc:    ib device sy~0 port 1 has no pnetid
[  981.251277][T30652] net_ratelimit: 3 callbacks suppressed
[  981.251293][T30652] bond1: (slave dummy0): failed to get link speed/duplex
[  981.390250][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  981.425612][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  981.488436][T14692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  981.508061][T14692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  981.767159][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  981.844175][T30653] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  981.883947][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  981.995021][T30819] bond1: option updelay: invalid value (18446744073709518847)
[  982.003212][T30819] bond1: option updelay: allowed values 0 - 2147483647
[  982.013988][T30819] bond1 (unregistering): Released all slaves
[  982.059864][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  982.180154][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  982.301092][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  982.411015][T14692] bond1: (slave dummy0): failed to get link speed/duplex
[  982.520158][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  982.610720][   T25] block nbd2: Possible stuck request ffff888027387000: control (read@0,1024B). Runtime 330 seconds
[  982.630761][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  982.660411][   T25] block nbd2: Possible stuck request ffff888027380000: control (read@1024,1024B). Runtime 330 seconds
[  982.690750][   T25] block nbd2: Possible stuck request ffff8880273801c0: control (read@2048,1024B). Runtime 330 seconds
[  982.701915][   T25] block nbd2: Possible stuck request ffff888027380380: control (read@3072,1024B). Runtime 330 seconds
[  982.750037][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  983.233059][T30790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  983.267376][T30270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  983.283245][T30270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  983.312623][T30270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  983.346755][T30270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  983.373544][T30270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  983.585566][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6247'.
[  983.921914][T30841] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6249'.
[  983.946579][T30841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6249'.
[  983.991658][T30860] lo speed is unknown, defaulting to 1000
[  984.012453][T30841] geneve0: entered allmulticast mode
[  984.237889][T30831] lo speed is unknown, defaulting to 1000
[  984.237935][T30860] lo speed is unknown, defaulting to 1000
[  984.251712][T30860] lo speed is unknown, defaulting to 1000
[  984.929812][T30831] lo speed is unknown, defaulting to 1000
[  984.947721][T30831] lo speed is unknown, defaulting to 1000
[  985.120513][T30891] netlink: 'syz.4.6258': attribute type 13 has an invalid length.
[  985.200906][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6259'.
[  985.234087][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6259'.
[  985.246987][T30891] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  985.268576][T30891] syzkaller0: entered promiscuous mode
[  985.279024][T30891] syzkaller0: entered allmulticast mode
[  985.491569][T21695] Bluetooth: hci1: command tx timeout
[  986.077274][T30924] can: request_module (can-proto-0) failed.
[  986.614835][T30946] lo: Caught tx_queue_len zero misconfig
[  986.710978][T30946] net_ratelimit: 25 callbacks suppressed
[  986.710997][T30946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  986.726210][T30652] bond1: (slave dummy0): failed to get link speed/duplex
[  986.859591][T30652] bond1: (slave dummy0): failed to get link speed/duplex
[  986.950598][T30957] syzkaller1: entered promiscuous mode
[  986.956131][T30957] syzkaller1: entered allmulticast mode
[  987.079893][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  987.096970][T30967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6277'.
[  987.125201][T30967] openvswitch: netlink: Missing key (keys=40, expected=80)
[  987.222458][T30831] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.240162][T30831] bridge0: port 1(bridge_slave_0) entered disabled state
[  987.250454][T30831] bridge_slave_0: entered allmulticast mode
[  987.272653][T30831] bridge_slave_0: entered promiscuous mode
[  987.283286][T30831] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.291087][T30831] bridge0: port 2(bridge_slave_1) entered disabled state
[  987.298298][T30831] bridge_slave_1: entered allmulticast mode
[  987.306585][T30831] bridge_slave_1: entered promiscuous mode
[  987.342622][T30831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  987.355554][T30831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  987.403201][T30980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6281'.
[  987.407682][T30831] team0: Port device team_slave_0 added
[  987.422398][T30831] team0: Port device team_slave_1 added
[  987.456804][T30831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.468427][T30831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.501254][T30831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  987.518924][T30831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  987.526626][T30831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  987.553096][T30831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  987.581504][T21695] Bluetooth: hci1: command tx timeout
[  987.651847][T30652] bond1: (slave dummy0): failed to get link speed/duplex
[  987.748091][T30831] hsr_slave_0: entered promiscuous mode
[  987.807973][T30831] hsr_slave_1: entered promiscuous mode
[  987.838547][T30987] x_tables: duplicate underflow at hook 2
[  987.851072][T30831] debugfs: 'hsr0' already exists in 'hsr'
[  987.888458][T30831] Cannot create hsr debugfs directory
[  988.290876][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  988.432229][T30651] bond1: (slave dummy0): failed to get link speed/duplex
[  988.697350][T31006] netlink: 'syz.3.6287': attribute type 9 has an invalid length.
[  988.801197][T31011] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  988.895248][T30831] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.113139][T31011] bond11: entered promiscuous mode
[  989.142191][T31036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6292'.
[  989.165594][T31011] 8021q: adding VLAN 0 to HW filter on device bond11
[  989.364504][T30831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.378360][T30831] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.430540][T14697] bond1: (slave dummy0): failed to get link speed/duplex
[  989.536078][T30831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.557404][T30831] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.602100][T14697] bond1: (slave dummy0): failed to get link speed/duplex
[  989.653882][T21695] Bluetooth: hci1: command tx timeout
[  989.678675][T30831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  989.717533][T30831] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  989.837203][T31060] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.852493][T31060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  990.158007][T31082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6299'.
[  990.193882][T31084] xt_CT: You must specify a L4 protocol and not use inversions on it
[  990.244110][T31085] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  990.260194][T31085] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  990.265378][T31086] xt_CT: You must specify a L4 protocol and not use inversions on it
[  990.278589][T31060] geneve2: left promiscuous mode
[  990.366744][T31060] 8021q: adding VLAN 0 to HW filter on device bond6
[  990.426928][T31060] geneve3: left promiscuous mode
[  990.455583][T31060] bond7: left promiscuous mode
[  990.461788][T31060] 8021q: adding VLAN 0 to HW filter on device bond7
[  990.484527][T31098] FAULT_INJECTION: forcing a failure.
[  990.484527][T31098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  990.498172][T31098] CPU: 1 UID: 0 PID: 31098 Comm: syz.4.6305 Not tainted syzkaller #0 PREEMPT(full) 
[  990.498197][T31098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  990.498210][T31098] Call Trace:
[  990.498217][T31098]  <TASK>
[  990.498225][T31098]  dump_stack_lvl+0xe8/0x150
[  990.498260][T31098]  should_fail_ex+0x40c/0x560
[  990.498290][T31098]  _copy_from_user+0x2d/0xb0
[  990.498310][T31098]  ___sys_sendmsg+0x1c6/0x360
[  990.498332][T31098]  ? __lock_acquire+0x683/0x2cf0
[  990.498364][T31098]  ? __pfx____sys_sendmsg+0x10/0x10
[  990.498384][T31098]  ? __lock_acquire+0x683/0x2cf0
[  990.498415][T31098]  ? kstrtouint+0x6e/0xe0
[  990.498479][T31098]  __sys_sendmmsg+0x273/0x4d0
[  990.498508][T31098]  ? __pfx___sys_sendmmsg+0x10/0x10
[  990.498541][T31098]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  990.498580][T31098]  ? ksys_write+0x242/0x270
[  990.498603][T31098]  ? __pfx_ksys_write+0x10/0x10
[  990.498628][T31098]  __x64_sys_sendmmsg+0xa0/0xc0
[  990.498651][T31098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.498672][T31098]  do_syscall_64+0x174/0x580
[  990.498694][T31098]  ? trace_irq_disable+0x3b/0x140
[  990.498719][T31098]  ? clear_bhb_loop+0x40/0x90
[  990.498743][T31098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.498762][T31098] RIP: 0033:0x7f3cc1f9de99
[  990.498780][T31098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.498796][T31098] RSP: 002b:00007f3cc2e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  990.498816][T31098] RAX: ffffffffffffffda RBX: 00007f3cc2225fa0 RCX: 00007f3cc1f9de99
[  990.498829][T31098] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[  990.498842][T31098] RBP: 00007f3cc2e18090 R08: 0000000000000000 R09: 0000000000000000
[  990.498853][T31098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  990.498864][T31098] R13: 00007f3cc2226038 R14: 00007f3cc2225fa0 R15: 00007ffe3b7686a8
[  990.498903][T31098]  </TASK>
[  990.708653][T31060] 8021q: adding VLAN 0 to HW filter on device bond9
[  990.726456][T31060] bond11: left promiscuous mode
[  990.747927][T31100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6306'.
[  991.732854][T21695] Bluetooth: hci1: command tx timeout
[  993.177304][T30651] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  993.219058][T31104] vlan2: entered allmulticast mode
[  993.225088][T31104] bond0: entered allmulticast mode
[  993.231784][T31104] bond_slave_0: entered allmulticast mode
[  993.237555][T31104] bond_slave_1: entered allmulticast mode
[  993.279879][T14691] net_ratelimit: 4 callbacks suppressed
[  993.279896][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  993.361517][T14691] 
[  993.363877][T14691] ======================================================
[  993.370903][T14691] WARNING: possible circular locking dependency detected
[  993.377932][T14691] syzkaller #0 Not tainted
[  993.382345][T14691] ------------------------------------------------------
[  993.389354][T14691] kworker/u8:22/14691 is trying to acquire lock:
[  993.395662][T14691] ffff88803f2dd070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  993.404730][T14691] 
[  993.404730][T14691] but task is already holding lock:
[  993.411244][T30831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  993.412083][T14691] ffff8880584cf158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  993.428572][T14691] 
[  993.428572][T14691] which lock already depends on the new lock.
[  993.428572][T14691] 
[  993.438976][T14691] 
[  993.438976][T14691] the existing dependency chain (in reverse order) is:
[  993.447978][T14691] 
[  993.447978][T14691] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}:
[  993.456225][T14691]        _raw_spin_lock+0x2e/0x40
[  993.461242][T14691]        sch_direct_xmit+0x15f/0x4c0
[  993.466526][T14691]        __dev_queue_xmit+0x177f/0x3820
[  993.472079][T14691]        hsr_forward_skb+0x152a/0x28c0
[  993.477529][T14691]        send_hsr_supervision_frame+0x733/0xcf0
[  993.483769][T14691]        hsr_announce+0x1db/0x370
[  993.488802][T14691]        call_timer_fn+0x192/0x5e0
[  993.493914][T14691]        __run_timer_base+0x652/0x8b0
[  993.499286][T14691]        run_timer_softirq+0xb7/0x170
[  993.504655][T14691]        handle_softirqs+0x225/0x840
[  993.509938][T14691]        __irq_exit_rcu+0xca/0x220
[  993.515052][T14691]        irq_exit_rcu+0x9/0x30
[  993.519810][T14691]        sysvec_apic_timer_interrupt+0xa6/0xc0
[  993.525968][T14691]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  993.532467][T14691]        its_return_thunk+0x0/0x10
[  993.537585][T14691]        __zap_vma_range+0x23ff/0x4f10
[  993.543047][T14691]        unmap_vmas+0x390/0x550
[  993.547895][T14691]        exit_mmap+0x293/0x9f0
[  993.552673][T14691]        __mmput+0x118/0x420
[  993.557276][T14691]        exit_mm+0x221/0x2d0
[  993.561861][T14691]        do_exit+0x6cd/0x2360
[  993.566532][T14691]        do_group_exit+0x22d/0x2f0
[  993.571633][T14691]        __x64_sys_exit_group+0x3f/0x40
[  993.577168][T14691]        x64_sys_call+0x221a/0x2240
[  993.582354][T14691]        do_syscall_64+0x174/0x580
[  993.587461][T14691]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.593861][T14691] 
[  993.593861][T14691] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  993.601587][T14691]        __lock_acquire+0x1520/0x2cf0
[  993.606957][T14691]        lock_acquire+0x106/0x350
[  993.611974][T14691]        _raw_spin_lock_bh+0x36/0x50
[  993.617249][T14691]        hsr_dev_xmit+0x237/0x360
[  993.622265][T14691]        dev_hard_start_xmit+0x2cd/0x830
[  993.627889][T14691]        __dev_queue_xmit+0x14c0/0x3820
[  993.633426][T14691]        NF_HOOK+0x33a/0x3c0
[  993.638035][T14691]        arp_xmit+0x16c/0x270
[  993.642713][T14691]        arp_solicit+0xbdc/0xe40
[  993.647641][T14691]        __neigh_event_send+0xf0c/0x1510
[  993.653269][T14691]        neigh_resolve_output+0x1a1/0x720
[  993.658980][T14691]        ip_finish_output2+0xc4b/0x10b0
[  993.664518][T14691]        ip_output+0x29f/0x450
[  993.669271][T14691]        iptunnel_xmit+0x626/0xd10
[  993.674372][T14691]        ip_tunnel_xmit+0x195b/0x2040
[  993.679732][T14691]        __gre_xmit+0x19e/0x240
[  993.684583][T14691]        erspan_xmit+0xad5/0x1590
[  993.689602][T14691]        dev_hard_start_xmit+0x2cd/0x830
[  993.695232][T14691]        sch_direct_xmit+0x257/0x4c0
[  993.700501][T14691]        __dev_queue_xmit+0x177f/0x3820
[  993.706038][T14691]        alb_send_lp_vid+0x348/0x550
[  993.711315][T14691]        alb_send_learning_packets+0x12c/0x300
[  993.717458][T14691]        bond_alb_monitor+0x3d0/0x17c0
[  993.722904][T14691]        process_scheduled_works+0xa8e/0x14e0
[  993.728957][T14691]        worker_thread+0xa47/0xfb0
[  993.734058][T14691]        kthread+0x388/0x470
[  993.738638][T14691]        ret_from_fork+0x514/0xb70
[  993.743742][T14691]        ret_from_fork_asm+0x1a/0x30
[  993.749016][T14691] 
[  993.749016][T14691] other info that might help us debug this:
[  993.749016][T14691] 
[  993.759256][T14691]  Possible unsafe locking scenario:
[  993.759256][T14691] 
[  993.766686][T14691]        CPU0                    CPU1
[  993.772035][T14691]        ----                    ----
[  993.777382][T14691]   lock(&qdisc_xmit_lock_key#3);
[  993.782401][T14691]                                lock(&hsr->seqnr_lock);
[  993.789408][T14691]                                lock(&qdisc_xmit_lock_key#3);
[  993.796942][T14691]   lock(&hsr->seqnr_lock);
[  993.801430][T14691] 
[  993.801430][T14691]  *** DEADLOCK ***
[  993.801430][T14691] 
[  993.809555][T14691] 11 locks held by kworker/u8:22/14691:
[  993.815117][T14691]  #0: ffff88808468b140 ((wq_completion)bond2#6){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  993.826164][T14691]  #1: ffffc90005667c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  993.839027][T14691]  #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0
[  993.848596][T14691]  #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  993.858508][T14691]  #4: ffff88803466c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820
[  993.871124][T14691]  #5: ffff8880584cf158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  993.881388][T14691]  #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[  993.890251][T14691]  #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[  993.899987][T14691]  #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  993.908762][T14691]  #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[  993.918669][T14691]  #10: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  993.927888][T14691] 
[  993.927888][T14691] stack backtrace:
[  993.933762][T14691] CPU: 1 UID: 0 PID: 14691 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) 
[  993.933780][T14691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  993.933792][T14691] Workqueue: bond2 bond_alb_monitor
[  993.933815][T14691] Call Trace:
[  993.933822][T14691]  <TASK>
[  993.933829][T14691]  dump_stack_lvl+0xe8/0x150
[  993.933853][T14691]  print_circular_bug+0x2e1/0x300
[  993.933871][T14691]  check_noncircular+0x12e/0x150
[  993.933891][T14691]  __lock_acquire+0x1520/0x2cf0
[  993.933918][T14691]  ? __siphash_unaligned+0x28d/0x3e0
[  993.933944][T14691]  ? skb_network_protocol+0x23d/0x400
[  993.933966][T14691]  ? hsr_dev_xmit+0x237/0x360
[  993.933990][T14691]  lock_acquire+0x106/0x350
[  993.934012][T14691]  ? hsr_dev_xmit+0x237/0x360
[  993.934043][T14691]  ? hsr_dev_xmit+0x237/0x360
[  993.934068][T14691]  _raw_spin_lock_bh+0x36/0x50
[  993.934085][T14691]  ? hsr_dev_xmit+0x237/0x360
[  993.934110][T14691]  hsr_dev_xmit+0x237/0x360
[  993.934136][T14691]  ? hsr_dev_xmit+0x2d/0x360
[  993.934161][T14691]  dev_hard_start_xmit+0x2cd/0x830
[  993.934190][T14691]  __dev_queue_xmit+0x14c0/0x3820
[  993.934218][T14691]  ? __dev_queue_xmit+0x29b/0x3820
[  993.934241][T14691]  ? __lock_acquire+0x683/0x2cf0
[  993.934262][T14691]  ? arpt_do_table+0x25b/0x1f90
[  993.934284][T14691]  ? __pfx___dev_queue_xmit+0x10/0x10
[  993.934305][T14691]  ? __pfx_arpt_do_table+0x10/0x10
[  993.934331][T14691]  ? NF_HOOK+0xa2/0x3c0
[  993.934346][T14691]  NF_HOOK+0x33a/0x3c0
[  993.934360][T14691]  ? __pfx_arp_xmit_finish+0x10/0x10
[  993.934373][T14691]  ? NF_HOOK+0xa2/0x3c0
[  993.934386][T14691]  ? __pfx_NF_HOOK+0x10/0x10
[  993.934398][T14691]  ? lock_acquire+0x106/0x350
[  993.934418][T14691]  ? __pfx_arp_xmit_finish+0x10/0x10
[  993.934432][T14691]  ? inet_addr_type_dev_table+0x25/0x190
[  993.934457][T14691]  arp_xmit+0x16c/0x270
[  993.934468][T14691]  ? arp_xmit+0x23/0x270
[  993.934482][T14691]  arp_solicit+0xbdc/0xe40
[  993.934500][T14691]  ? __pfx_arp_solicit+0x10/0x10
[  993.934522][T14691]  ? __neigh_event_send+0xea4/0x1510
[  993.934545][T14691]  ? __pfx_arp_solicit+0x10/0x10
[  993.934559][T14691]  __neigh_event_send+0xf0c/0x1510
[  993.934585][T14691]  neigh_resolve_output+0x1a1/0x720
[  993.934600][T14691]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  993.934619][T14691]  ? ip_finish_output2+0x3de/0x10b0
[  993.934634][T14691]  ip_finish_output2+0xc4b/0x10b0
[  993.934649][T14691]  ? ip_skb_dst_mtu+0x811/0xa50
[  993.934662][T14691]  ? ip_finish_output2+0x3de/0x10b0
[  993.934679][T14691]  ? ip_finish_output+0x40b/0x530
[  993.934693][T14691]  ip_output+0x29f/0x450
[  993.934707][T14691]  ? ip_output+0x5a/0x450
[  993.934720][T14691]  iptunnel_xmit+0x626/0xd10
[  993.934741][T14691]  ip_tunnel_xmit+0x195b/0x2040
[  993.934763][T14691]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  993.934779][T14691]  ? __pfx_gre_build_header+0x10/0x10
[  993.934800][T14691]  ? kfree+0x1c5/0x640
[  993.934816][T14691]  ? pskb_expand_head+0x469/0x13a0
[  993.934835][T14691]  __gre_xmit+0x19e/0x240
[  993.934855][T14691]  ? __pfx___gre_xmit+0x10/0x10
[  993.934879][T14691]  erspan_xmit+0xad5/0x1590
[  993.934903][T14691]  ? __pfx_erspan_xmit+0x10/0x10
[  993.934924][T14691]  ? __lock_acquire+0x683/0x2cf0
[  993.934945][T14691]  dev_hard_start_xmit+0x2cd/0x830
[  993.934968][T14691]  sch_direct_xmit+0x257/0x4c0
[  993.934985][T14691]  ? __pfx_sch_direct_xmit+0x10/0x10
[  993.934999][T14691]  ? __switch_to_asm+0x70/0x70
[  993.935015][T14691]  __dev_queue_xmit+0x177f/0x3820
[  993.935038][T14691]  ? __dev_queue_xmit+0x29b/0x3820
[  993.935060][T14691]  ? __pfx___dev_queue_xmit+0x10/0x10
[  993.935078][T14691]  ? rcu_is_watching+0x15/0xb0
[  993.935092][T14691]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  993.935110][T14691]  ? trace_kmem_cache_alloc+0x29/0xe0
[  993.935126][T14691]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  993.935145][T14691]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  993.935163][T14691]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  993.935184][T14691]  ? __alloc_skb+0x4cc/0x7a0
[  993.935200][T14691]  ? alb_send_lp_vid+0x14e/0x550
[  993.935222][T14691]  alb_send_lp_vid+0x348/0x550
[  993.935244][T14691]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  993.935270][T14691]  alb_send_learning_packets+0x12c/0x300
[  993.935292][T14691]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  993.935312][T14691]  ? bond_alb_monitor+0xf3/0x17c0
[  993.935334][T14691]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  993.935350][T14691]  bond_alb_monitor+0x3d0/0x17c0
[  993.935372][T14691]  ? bond_alb_monitor+0xf3/0x17c0
[  993.935392][T14691]  ? __pfx_bond_alb_monitor+0x10/0x10
[  993.935412][T14691]  ? rcu_is_watching+0x15/0xb0
[  993.935427][T14691]  ? process_scheduled_works+0xa20/0x14e0
[  993.935444][T14691]  process_scheduled_works+0xa8e/0x14e0
[  993.935471][T14691]  ? __pfx_process_scheduled_works+0x10/0x10
[  993.935490][T14691]  ? assign_work+0x3cf/0x5d0
[  993.935508][T14691]  worker_thread+0xa47/0xfb0
[  993.935539][T14691]  kthread+0x388/0x470
[  993.935560][T14691]  ? __pfx_worker_thread+0x10/0x10
[  993.935576][T14691]  ? __pfx_kthread+0x10/0x10
[  993.935596][T14691]  ret_from_fork+0x514/0xb70
[  993.935619][T14691]  ? __pfx_ret_from_fork+0x10/0x10
[  993.935639][T14691]  ? __switch_to+0xc89/0x1420
[  993.935658][T14691]  ? __pfx_kthread+0x10/0x10
[  993.935678][T14691]  ret_from_fork_asm+0x1a/0x30
[  993.935697][T14691]  </TASK>
[  994.468489][T30831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  994.479230][T30831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  994.491527][T30831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  994.499362][T30831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  994.512365][T30831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  994.534761][T30831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  994.551380][T30831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  994.591992][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  994.614138][T30831] 8021q: adding VLAN 0 to HW filter on device bond0
[  994.627322][T30831] 8021q: adding VLAN 0 to HW filter on device team0
[  994.637083][T14691] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.644160][T14691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  994.656715][T30653] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.663816][T30653] bridge0: port 2(bridge_slave_1) entered forwarding state
[  994.699607][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  994.769902][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  994.809833][T14697] bond1: (slave dummy0): failed to get link speed/duplex
[  994.876632][T30831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  994.902747][T30831] veth0_vlan: entered promiscuous mode
[  994.912781][T30831] veth1_vlan: entered promiscuous mode
[  994.931334][T30831] veth0_macvtap: entered promiscuous mode
[  994.940034][T30831] veth1_macvtap: entered promiscuous mode
[  994.953006][T30831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.963157][  T663] bond1: (slave dummy0): failed to get link speed/duplex
[  994.972150][T30831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.988179][T30653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.997841][T30653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.008669][T30653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.019009][T30653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.038763][T30831] ieee80211 phy104: Selected rate control algorithm 'minstrel_ht'
[  995.062054][T14697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.064828][T30831] ieee80211 phy105: Selected rate control algorithm 'minstrel_ht'
[  995.070806][T14697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.098027][T14697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.106744][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  995.114032][T14697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.279668][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  995.389966][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  995.499768][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  995.609824][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  997.089715][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  998.360325][T14691] net_ratelimit: 24 callbacks suppressed
[  998.360346][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  998.479546][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  998.599847][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[  998.709805][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  998.819864][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  998.929835][T30653] bond1: (slave dummy0): failed to get link speed/duplex
[  999.039639][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  999.159600][   T36] bond1: (slave dummy0): failed to get link speed/duplex
[  999.279712][T14691] bond1: (slave dummy0): failed to get link speed/duplex
[  999.389899][ T6478] bond1: (slave dummy0): failed to get link speed/duplex
[ 1001.170439][   T11] block nbd5: Possible stuck request ffff8880274ce000: control (read@0,4096B). Runtime 150 seconds