last executing test programs:

1m44.710146209s ago: executing program 3 (id=20290):
unshare(0x24060400) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa, 0x4}, 0xe)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x7d, 0x0, 0x2}, 0x50) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) (async)
getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={<r4=>0x0, @empty, @loopback}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000740)={'erspan0\x00', r4, 0x40, 0x1, 0x7, 0x1, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x64, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @broadcast, {[@end, @timestamp_addr={0x44, 0x34, 0x20, 0x1, 0xc, [{@private=0xa010100, 0x5bdb3e0f}, {@empty, 0xff}, {@empty, 0x5}, {@empty, 0x4}, {@loopback, 0xfe}, {@multicast2, 0x4}]}]}}}}}) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xffffffffffffff09, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x70}]}, 0x84}}, 0x800) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async)
connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async)
shutdown(r5, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r5, 0x205}], 0x1, 0x0, 0x0, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c000200080001000633716b553807ff4cd4f5fc38889509420e826195acdca15f4338cb2f320414678dd38da1eb4d8e93ca98107292c819ffe4aec9422649accc8c93347b72d4a643bb600cb9be8674a244e88e54f94d510969"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79740000000000000000000002000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

1m44.423280878s ago: executing program 3 (id=20295):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}}, 0x40000)
accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) (async)
r1 = accept(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
write(r2, 0x0, 0x2b)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="720a08fbe60bdd0141c35a1c90b97f33", 0x10)

1m44.416262529s ago: executing program 3 (id=20296):
socket(0x1d, 0x2, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
socket$inet(0x2, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000024010880f000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691ca400098028000080060001000a0000001c000200fe880000000000000000000000000001050003000300000028000080060001000a"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async)
close(r0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r2, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async)
accept(r2, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async)
writev(r3, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
write$tun(0xffffffffffffffff, 0x0, 0x2e)

1m44.35710335s ago: executing program 3 (id=20297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x25}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8810)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x1)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x700, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x50000000)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, 0x0, 0x4008004)

1m43.977866015s ago: executing program 3 (id=20301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r2, 0x1)
ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x0, 0x0, {{0x8}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfef8, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x60008805}, 0x44800)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000140)={0x80000000, 0x9, 0x9, 0x7, 0x0, 0x7, 0x4, 0xc})

1m43.740859111s ago: executing program 3 (id=20303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000400)=0x4)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0x98)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r3, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x200004d5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r10, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000300)={<r11=>r6, &(0x7f0000000580)='\b\x10\xd0\x99\xe1\xbb\x98np\xb8\x84\xbf\xcd\x9f\xc0\x92\xae\xb0\x93\x9f\xefO\x0f\x94z\xc8\x83E\x80\xa2I\xc0\xb59\xf8S<\x8a\x17\xe2hU\xf3~t\'\xaf\xf8G\xe4n\xcf\x1e:\x98\xcb\f;\x87\xaa(64\t\x83De\xfbx\xa7\x8a\x0eQ\x87W\x1b\"\xbc\xd9S\x861\xc2C\xfdH\x83?\xb4Ci\xf1\xd7d\x89?.f{\xca\x93d\xaf\x9f\xc7\x84\xfa\xdc\xe000\xcdadJ&\xb7\xe2\xf9c\xb0`\x1bE\xa1\xd6\xde ~\xa8ti]G\xde\xf5R\xf0\x1d\rP\xfa\x9a\x15\xad\xbcE\xa1\xbc\x1aQ\x9e\xa0r\xee\xf4\x96\x85L~X\xfa\xea|GQ\x9dtR\xf3\xbcQK\x88l.\xd2\xa9\x18h\x93\x84ep\xd6D\x87\xbc!C\xea\b\xf1j\xfd\x02\xa7\x8c$\xa1J\x12\xa4\xc8\x85\xb8\xe3\xeb\xdc\xdd\n\xd0\xd8\x1f\'\xc9\x0f\x18\r&\xa6u\xf4\xddT(9\xac\x8b\x1d4\x02:\x0e\r\xeb\x0f\xdf\xb7\"`f\x83R\xbe\xffZ\xb7\x8e\xe6Om\xf8\x06\xe8w\xfeH\xbf \x92\x9e\xba\xc0\a\xcd\b\x00\xf8\x9a\xbdc\xeb6b\x1b\bt\xc1\xd4h\x91\x8e(\xb5\xa7\a+\x1b\xafx\xf2Q\xd6BZ\x8a()\xc8\xb8\xb0\xc6\r\x0e\xb2\xe5\xde\x9fy\xaa\xaf\x8b|\xe6\x83e\x99\x14h\x8c\xc4\xc9\x04\x81\x02\xb7eXh\xf5\xadj9\x98(\t\xf0qI6\x06\x02|2\x01M\x89\xef\x89\xa2(\v\xb8^\xbf\xdb\xe9\x9dv&\xd5dP`\x87z\x1b\xdf\xe9\xa0\x9e\x03;L\x17t\xb9\xee\xa4\xb9\xfe\x10\x04\xa1\xbe\xae\xa3\xb1g\'\xb6\xa9Hdg\x85\x9a\x8d\xea\xf8+\x8cQ\xe5\xf2J\xc8\'\aL\xbdA\xd9L\x89\x04Fx\xf1P\ri\xc0\x9e1B\x16\xef\x897\x7f\xf8\xd3\x9c\xd6W\xd1\xe5\x80\xfc!\x87\xd2x\xb2\xa6B>$/\xb9\x01i\x11\xc3\xe5u\xa07\x8b\x00\x80^\x1eEoZ\xd2\xbd\x96\xcfh\"\"\x00'/491, 0x42103, &(0x7f0000000100)={@align=0xff9, {0x6, 0x8, 0x120000}}, 0x3e4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x4})
connect$inet6(r11, &(0x7f0000000340)={0xa, 0x4e22, 0xffff8000, @rand_addr=' \x01\x00', 0x401}, 0x1c)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

1m28.579952385s ago: executing program 32 (id=20303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f0000000400)=0x4)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000003c0)=ANY=[], 0x98)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r3, @ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x20008081}, 0x200004d5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x18)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$inet6(r10, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, &(0x7f0000000300)={<r11=>r6, &(0x7f0000000580)='\b\x10\xd0\x99\xe1\xbb\x98np\xb8\x84\xbf\xcd\x9f\xc0\x92\xae\xb0\x93\x9f\xefO\x0f\x94z\xc8\x83E\x80\xa2I\xc0\xb59\xf8S<\x8a\x17\xe2hU\xf3~t\'\xaf\xf8G\xe4n\xcf\x1e:\x98\xcb\f;\x87\xaa(64\t\x83De\xfbx\xa7\x8a\x0eQ\x87W\x1b\"\xbc\xd9S\x861\xc2C\xfdH\x83?\xb4Ci\xf1\xd7d\x89?.f{\xca\x93d\xaf\x9f\xc7\x84\xfa\xdc\xe000\xcdadJ&\xb7\xe2\xf9c\xb0`\x1bE\xa1\xd6\xde ~\xa8ti]G\xde\xf5R\xf0\x1d\rP\xfa\x9a\x15\xad\xbcE\xa1\xbc\x1aQ\x9e\xa0r\xee\xf4\x96\x85L~X\xfa\xea|GQ\x9dtR\xf3\xbcQK\x88l.\xd2\xa9\x18h\x93\x84ep\xd6D\x87\xbc!C\xea\b\xf1j\xfd\x02\xa7\x8c$\xa1J\x12\xa4\xc8\x85\xb8\xe3\xeb\xdc\xdd\n\xd0\xd8\x1f\'\xc9\x0f\x18\r&\xa6u\xf4\xddT(9\xac\x8b\x1d4\x02:\x0e\r\xeb\x0f\xdf\xb7\"`f\x83R\xbe\xffZ\xb7\x8e\xe6Om\xf8\x06\xe8w\xfeH\xbf \x92\x9e\xba\xc0\a\xcd\b\x00\xf8\x9a\xbdc\xeb6b\x1b\bt\xc1\xd4h\x91\x8e(\xb5\xa7\a+\x1b\xafx\xf2Q\xd6BZ\x8a()\xc8\xb8\xb0\xc6\r\x0e\xb2\xe5\xde\x9fy\xaa\xaf\x8b|\xe6\x83e\x99\x14h\x8c\xc4\xc9\x04\x81\x02\xb7eXh\xf5\xadj9\x98(\t\xf0qI6\x06\x02|2\x01M\x89\xef\x89\xa2(\v\xb8^\xbf\xdb\xe9\x9dv&\xd5dP`\x87z\x1b\xdf\xe9\xa0\x9e\x03;L\x17t\xb9\xee\xa4\xb9\xfe\x10\x04\xa1\xbe\xae\xa3\xb1g\'\xb6\xa9Hdg\x85\x9a\x8d\xea\xf8+\x8cQ\xe5\xf2J\xc8\'\aL\xbdA\xd9L\x89\x04Fx\xf1P\ri\xc0\x9e1B\x16\xef\x897\x7f\xf8\xd3\x9c\xd6W\xd1\xe5\x80\xfc!\x87\xd2x\xb2\xa6B>$/\xb9\x01i\x11\xc3\xe5u\xa07\x8b\x00\x80^\x1eEoZ\xd2\xbd\x96\xcfh\"\"\x00'/491, 0x42103, &(0x7f0000000100)={@align=0xff9, {0x6, 0x8, 0x120000}}, 0x3e4, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x4})
connect$inet6(r11, &(0x7f0000000340)={0xa, 0x4e22, 0xffff8000, @rand_addr=' \x01\x00', 0x401}, 0x1c)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

24.081092228s ago: executing program 2 (id=21037):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe28, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x1c}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.92116144s ago: executing program 2 (id=21041):
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(0xffffffffffffffff, 0x1)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44800)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000140)={0x80000000, 0x9, 0x9, 0x7, 0x0, 0x7, 0x4, 0xc})

23.709822291s ago: executing program 2 (id=21043):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a311100000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0xd01, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x5}, 0x8, 0x5, 0x0, 0x8, 0x8, 'syz1\x00', "bb419f54ec3a1657f102f528f3a9bd340bb4aadb7aefa68954f5a7d736e9f894", "8aef8890aa31934f32ec03ab39f3d12388ec726ae5b33fc81f253f71d92da331", [{0xffff, 0xb, {0x1, 0xffffffff}}, {0x5400, 0x6, {0x0, 0x8}}, {0x200, 0x9, {0x0, 0x8}}, {0x2, 0x3, {0x3, 0xb}}, {0x6, 0x7, {0x3, 0x4}}, {0x8, 0x3, {0x2, 0x25d7a53a}}, {0x101, 0x4, {0x2, 0x80000001}}, {0x1, 0x80, {0x2, 0x5}}, {0xd0e5, 0x7ff, {0x3, 0xe}}, {0x0, 0x8000, {0x1, 0x9}}, {0x1, 0x255a, {0x2, 0xef}}, {0x8, 0x8fcc, {0x1, 0x48000}}, {0x6, 0x6, {0x0, 0x8}}, {0x0, 0x65c, {0x1, 0xffff}}, {0x0, 0xffff, {0x1, 0x4}}, {0xaff, 0x1}, {0x7f, 0x1, {0x1, 0x2}}, {0x2, 0x7, {0x6, 0x9}}, {0x6, 0x7, {0x2, 0x6}}, {0x8, 0x7, {0x1, 0x938c}}, {0x3, 0x7, {0x3, 0x4}}, {0x2, 0x8, {0x0, 0x1}}, {0x4, 0xcf7, {0x1, 0x3}}, {0x5, 0x4, {0x2, 0xbef}}, {0x3, 0x101, {0x1}}, {0x0, 0x8001, {0x0, 0x57}}, {0x1, 0x80, {0x3, 0x52ec}}, {0x4, 0xb9e9, {0x1, 0x3}}, {0x8, 0x3, {0x2, 0x3}}, {0xf1ff, 0x43a7, {0x0, 0x5}}, {0x4, 0x9, {0x3, 0x60000}}, {0x5, 0xe2, {0x0, 0xe5}}, {0x3, 0x3, {0x1, 0x6}}, {0x800, 0x9c1, {0x0, 0x91}}, {0x40, 0x0, {0x2, 0x5}}, {0x0, 0x4, {0x3, 0x40}}, {0x66d6, 0x94a, {0x2, 0xfffffffd}}, {0x76d, 0x5, {0x0, 0x4}}, {0x6, 0x7fff, {0x1, 0x2}}, {0x1, 0x7, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x894}, 0x80)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xc, 0x24, [{0x3}, {0x2}, {0xb, 0x1}, {0x18, 0x1}, {0x2}, {0x30}, {0xb, 0x1}, {0xb}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5f}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000e80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x18c, r7, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x51}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3f50884d29b5f47262c0e44e0ac224573ec5d60d6b98a96"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "769691b428f62fde79071757ccb29f4d24b528370ad362f3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "158cdce2c015090e733b0c5252162a944b28e44092849a00"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7351f6b282fb0baee758c4298cb86b5d799461c2e88a1a83"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "069dcc7239d8641ff13cb21b78f5013e454cfa70a1d31b17"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r10, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r14=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r13, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r13, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40)

22.727850663s ago: executing program 2 (id=21059):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x1100000000f336, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002040)={r2, 0x0, 0x1000, 0x7d, &(0x7f0000000e80)="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", &(0x7f0000001e80)=""/125, 0x235, 0x0, 0xa6, 0x7b, &(0x7f0000001f00)="ecca421d11c7bdbcb64951a5f045652ceb978e03a2761edf696f2376c97e88958a55e65386b5239e280b2b0a2bcef6ccc126597a4a2cf40e7dc1cac5f03765e6af36eecb62c81ede42280d8899b1217e3d4a09783fd8abe7436409d4be6aa8987a0def0501c2b9e2c386868cccf278272aa3227a8143c727fe3626ac40ca5e7b1bccd0ed673f65b007b62d262fd0a48415a6d6ce7ca8e723189a5e6f70be7689bd23cb83b629", &(0x7f0000001fc0)="189c054d98b86c9b0cfa52fb346d4a3c372cc28b1f43f813667b2cb324c95e94a4866ec86495076e9c881602fe4ec041f07def5a7dd95e996816680004823ab19ab979d79b6a8c591b4eea7f04c498543d3be4b18131e28441bc9e0cfcc173ce9287c90d9a418bebbb3f1ee4acfc4a2c82af68faad5ad88fcaeca8", 0x4, 0x0, 0x81}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff0}, {0x85, 0x0, 0x0, 0xb4}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.815541903s ago: executing program 1 (id=21079):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x188, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x971c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x27f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37c7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb82e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x12000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x19)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r3, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)

20.305525284s ago: executing program 1 (id=21080):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @local, 0x2}}, {{0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}}}}, 0x108)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85", 0x79}], 0x1, 0x1)
close(r1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
splice(r2, 0x0, r3, 0x0, 0x6, 0x5)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)="6576c4b4f0a1180b5db0d5632021275931f16e6d6a3241df44e873377c53783eb3beaacc0b4c5c0d32d62981dbeadc68e79f2aa3c96d71120b8191cdb095c719f62a5ba689bcf5f98df9f46f2e51d7767af1b68cc5c5854e34332b438446a3e346b1c84816742a926972e02bb5c8e0feca60903e04afaeff944dc08254531378b702b94429565b95891a4f5be358179e2c855f1bc24f8db74958bf28d5ab99eaaf24", 0xa2}, {&(0x7f0000000540)="c2eef578059037be1c30c5cd1d5eb8822e4628cc5a9b1ca7975b3cc6327568bd9d1e01f849aed6a72004bab65161362af9d401cd51a9d7e8c9eeb0d4ab3707bb49427423fed214bbcac2214cfce533b298ce5ecc020b701933ef44e6f0e6484dbff2757c257d577456eae344844031d5e670850c765a170adf6415c00f635b9e4f8c684c1bcc110f981da8d5c0a039aa94b7a2ab46e0d80d9c8025f9472a3fc749e736507232186224a0f7b34cafe72c71da3463b29ddc9a30668a9815511a6223e1a8de5019b8041cd8a36e2c6ac796612294136afb3cf2e0f2c6020370c0c4167d767c30e4b3c263c6b26dd8d8", 0xee}, {&(0x7f0000000640)="beff51b035e5e7914dd67757be0b9e500757687374e469c0f0e70a1c68cab259c96d9d236b2b0b148da4cc0c18e6397cb6853889f426b517ca805170cb8a3b35da73e16ff1bce2c223c6a03bc5012dc462e7850558ae5e3fbeb40c66ba1da59a353291722298ae339ec90d788f9d46b2e2c0f0b7415fc46b25dfc49ccc131088cb905eb5a80c07dea41930f97cdabdee", 0x90}], 0x3, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x75, "c793125d4ad2333be651e67760fbafa2614d33d15d89c157afeb62a0fa33c97e560de5c2b666ca7ba8dbc7066d7701a089447c38e53915befec189977b0783bc4ca30325915287960b7c5a8c6118f97613f36e546b3debd626ce48d9652ca6392e362988f70dfe9549897dbcddc87f62c8e2894bf8"}], 0xa8, 0x800}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="d0249e3c8a94b6f92b0da43799d2657f3fdceb32e07e4f20f3ec1258045c4b1d95e77c4ad2f90c487ac88f82820bb5f4e096ca638d31cad414f9604f4b00578850ba7bac3f452d2e5af72a6ed82909a9e0938fad3822aae1b5def86ce66c3111cb8cdaae1a8bd3e8f720a7ec113a0589b12e8ac3d90d8c4f2d0b985b6b9230a6d492f0", 0x83}], 0x1, &(0x7f0000000940)=[@assoc={0x18, 0x117, 0x4, 0x4679c7d8}, @op={0x18}, @iv={0x100, 0x117, 0x2, 0xe6, "ee06a8723273462e613b2fabffd468f9db8a9f304990e17c163e488361e734be3ed193bf0b8aaea9d687f9ca89ae3f50209d62d749a7df62220bd90b4f415d64972e2925304c0152a30acb951a9b4c16f972a7f44221906c6e83156c7afa2a2660baea8030088db0abd3a217edfe9522b9949d49a0dd194846a6b1cd7d8da44dbb1503b01263049afce06171ff9cdbba4101e6b2145b741d0f34125ef97bb7adceab407afd5b5a17a3849f951b14c316b26562d0d8a70a0cf5d85812e41fb42a97ef4adf348a41f4bc03a9012dd0a34db6f54282c479ff526a8e811113380eb288ffc2a1f95d"}, @iv={0x58, 0x117, 0x2, 0x40, "be8ca16b32cac96e1250d1399631935d6a3679757572514134cca8331503bcc2fdf43c99a87fb69421a47280ab03e375131def9cb615c7be46af7ef4e55cf58c"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc5, "1c76adef05078967c528c1c494ba84569678003e5f4e5429b61e37562174994ae815a0862bfca4b3f13d9df2a35da3c6e5d447ef75ea0ec27c69d722e0c5a5cf3c81f0eea80a2d39f050dbfd261453207b1d35c5a760d595e9aad75ecf153b58387090122b5c7aaeef4fb6dc3d88b1e11049bf184102ae4c465d9b5506794df65828fc58c6dbbddf860eeb8d6133274d716d2998068b8ddc1a77959d79d6ad55a593817907f0c03398efdce1ab1fc441a2089a8621c41de8510bcce40d44572c518f452304"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x298, 0x800}], 0x2, 0x20000800)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(r0, &(0x7f0000000d00)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000340)={0x6, {{0xa, 0x4e20, 0x8, @mcast1, 0x9}}, {{0xa, 0x4e24, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x108)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000c80)={&(0x7f00000001c0)={0x24, r11, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4800)

19.938863918s ago: executing program 5 (id=21082):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r0, 0x1)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x200000c5)
close(0x3)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffd, 0x0, @private1, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
r5 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="4c237487bf1dc0b43c4460", 0xb}, {0x0}], 0x2}}], 0x2, 0x2004000)
getsockopt$bt_hci(r2, 0x11a, 0x5, 0x0, &(0x7f00000000c0)=0x60)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x28, 0xfe, 0x7, 0xfffff01c}, {0x6, 0x7f, 0x22, 0x5}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44800)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f0000000140)={0x80000000, 0xc, 0x9, 0x7, 0x40, 0x7, 0x4, 0xc})

19.564895575s ago: executing program 1 (id=21084):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000050000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000004000000040000000000000000000000010002020000000084010500fe880000000000000000000000000101000004d23c00000000000000ac1414aa0000000000000000000000000000000000020100ff7f0000070000005395214300000000000000000000000000000000000004d533"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

19.486876596s ago: executing program 1 (id=21085):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000100)={@private1, <r2=>0x0}, &(0x7f0000000140)=0x14)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x3, 0x7fff, 0x100, 0x7, 0x8, r2})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x400, 0x4)
r3 = socket(0x1, 0x1, 0x1)
sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x1, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000400), 0x4)
connect$nfc_raw(r3, &(0x7f0000000200)={0x27, r5, 0x1, 0x3}, 0x10)

19.436095367s ago: executing program 2 (id=21086):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x2b, 0x80801, 0x1)
shutdown(r3, 0x7ffffffe)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x18, 0x0, 0x0, 0x8}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900)
socket$nl_crypto(0x10, 0x3, 0x15)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x0, 0x40}}, 0x40)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)

19.435325922s ago: executing program 5 (id=21087):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, 0x0, 0x2000)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x1, 0x7, 0x101, 0x0, 0x0, {0xb}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9f87}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1)

19.305605051s ago: executing program 5 (id=21088):
socket$kcm(0x2, 0x3, 0x2)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000444578ccab2879800100000000000500000a28000000020a010200000000000000000a000006090000000000000000080000f9ff0240000000018c000000020a010100000000000068000000000369000e00090007258a6d38caf4cb1d7a776a6a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc05211300766b6ebe3279da9e49cca5c2a07460e46e35eabfb48a2dd2cd83790d7e705b010000000900010073797a31000000001c00000009f467ee13000000000000000a00000208000c51040000"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r3)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000240), &(0x7f0000000380)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

18.875776578s ago: executing program 4 (id=21093):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203021200200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb4, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

18.83123922s ago: executing program 0 (id=21094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x7, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x7}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_ACT={0x54, 0x6, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000)

18.697538554s ago: executing program 4 (id=21095):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

18.34519194s ago: executing program 4 (id=21096):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0xffffffffffffff44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x3c}}, 0x4000)

18.255191094s ago: executing program 4 (id=21097):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000a26bd7000fedbdf251300000063d6c82bfbb3e100f24f4d2e62de79d90ecce61ed1e9241b21abe56199db62c92d5f2592ce2f40389e79074ffe553c85ce8bb807ee5fe0c51e"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r4 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000", @ANYBLOB="fc15617e2d1e9486506c5c7922cd676b4f8275838ba54621ce7fd0f71121db90b10732860d29bad5c4a6ec", @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
bind$bt_hci(r0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="27875082014f62be715cb85659d321968bb84d918c9ef4a94a61601f4408d3ad9270918e72cb6eeaf2a7243261c56d2686448d22b2b31085bddcf6ef32", 0x3d}, {&(0x7f00000000c0)="4546d8e58cce4c1705f6b6ef0d6553911d9fa8f9f982ee02a1861574d2a398674df0d40c1435deae225b6489ec5687d52cbc4ea92175dfc0339091853c277f11436bc98f1039474c690535f06ab999acb1a7213b0c4f8062ea29e5b961983a6ae8993bafb6ef582f58ab8d3860cc843a2ace5f21d4df8c8fcf7600e2beb288bd2a34d784c5b430b67a23bc0b1680391b1ffb89996e2760bb1f08eaaab772f7022b05fc6a09c88ab1aa3da5a24aeaa3c8293804110776", 0xb6}, {&(0x7f0000000180)="60e269656b708b6c5a95", 0xa}, {0x0}, {&(0x7f0000000500)}], 0x5, 0x5)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a00"/28, @ANYRES32, @ANYRESOCT=r3], 0x2c}}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000240)='zvh')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES8=r6], 0x10b8}, 0x4ff18)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4)
shutdown(r7, 0x0)
recvmmsg(r6, &(0x7f00000066c0), 0x0, 0x10000, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00'})

18.241514232s ago: executing program 0 (id=21098):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x6, 0x8208, 0xfffffe01, 0x7fffffff, 0x80, 0x101, 0x8001, r3}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x2, 0x8, 0x4, 0x7, 0x0, 0xaf, 0x800, r3}, &(0x7f0000000080)=0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8992, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

17.35122495s ago: executing program 0 (id=21099):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x1, 0x40, 0x2}}]}]}}}]}, 0x6c}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001940)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/176, 0xb0, 0x0, &(0x7f0000001840)=""/196, 0xc4}, &(0x7f0000001980)=0x40)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)=""/4099, 0x1003}, {&(0x7f0000003700)=""/4087, 0xff7}, {&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000005700)=""/4082, 0xff2}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000001800)=""/4090, 0xffa}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000640)=""/214, 0xd6}], 0x8}, 0x32120)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xbf7ffffd}}, {{0xa, 0x4e08, 0x4a3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r10, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@empty}, {@initdev}]}})
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xe050)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r11}, 0x38)

16.961279953s ago: executing program 0 (id=21100):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390400000000fcffffff000087c1", @ANYRES32=r1, @ANYBLOB="01980000000000002800128008000100677265001c00028008000700ac1414bb05001300"], 0x48}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000280)=0x8)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
accept4$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0xf5cfd0ed62d9e836, 0xffffffffffffffff, 0x2000)

16.455266409s ago: executing program 1 (id=21101):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x8, 0x2, 0x80}, {0xbd28, 0x9, 0x1a, 0xffff}, {0x7f, 0x3, 0xc, 0xfffffffa}, {0xff, 0x4, 0xb, 0x6}, {0x8, 0xa, 0x8}, {0xc, 0x6, 0x3, 0x1}, {0xfff, 0xa, 0x80}, {0x5, 0x0, 0x0, 0x6}]})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x10001, 0x4)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
connect$nfc_raw(r0, &(0x7f0000000100)={0x27, r2, 0x0, 0x4}, 0x10)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000240)={r0, &(0x7f0000000140)='memory.swap.current\x00', 0x140, &(0x7f0000000180)={@_ha_fsid={[0x101, 0x3]}, {0xaa0b, 0xfd, 0x8, 0x13259624}}, 0xffff401a, &(0x7f00000001c0), &(0x7f0000000200)})
bind$llc(r0, &(0x7f0000000280)={0x1a, 0x18, 0x1e, 0x4, 0x2, 0x2, @remote}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@remote, 0x4e20, 0x9, 0x4e22, 0x0, 0x2, 0x90, 0x80, 0x2c, r3, r4}, {0xffffffff, 0x8000000000000000, 0x2, 0x1, 0xff, 0x1000, 0x8, 0x9}, {0xff, 0x907, 0x101, 0x6}, 0x3, 0x6e6bb3, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private0, 0x4d6, 0x2b}, 0xa, @in=@multicast1, 0x3504, 0x2, 0x0, 0x0, 0x177, 0xc, 0x1}}, 0xe8)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @local}})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000000)
getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000700), &(0x7f0000000740)=0x4)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000780)=0x4, 0x4)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f00000007c0)={0x51, 0x7ff, 0xa, 0xc, 0x6})
ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000000800)=0x9)
pipe(&(0x7f0000000840)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@can_delroute={0x3c, 0x19, 0x20, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x7}, [@CGW_SRC_IF={0x8, 0x9, r10}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x9}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "4b1c0ac7406a2e5e"}, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000040)
r11 = getpid()
syz_open_procfs$namespace(r11, &(0x7f00000009c0)='ns/time_for_children\x00')
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r9)
sendmsg$ETHTOOL_MSG_RINGS_GET(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r12, 0x909, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0xc000)
r13 = accept4$packet(r8, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14, 0x80000)
getsockname$packet(r13, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c00)=0x14)

16.45457366s ago: executing program 2 (id=21102):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001"], 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x33}, {@in=@local, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x3736, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x80, 0x3}, {0x25, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @tfcpad={0x8, 0x16, 0xffffffff}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
splice(r1, 0x0, r4, 0x0, 0x2, 0x8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r6, &(0x7f0000000480)={0x2, 0xfffc, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xffffffffffffff66, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

16.431264351s ago: executing program 5 (id=21103):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x11000, 0x3a, 0x0, 0x0, 0x6}, 0x1c)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)

16.377562163s ago: executing program 4 (id=21104):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe28, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x102}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.265064263s ago: executing program 4 (id=21105):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffff1}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000380), 0x0}, 0x20)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000419c264fd7300000000000000000000002000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000419c264fd7300000000000000000000002000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000001b40)=ANY=[@ANYBLOB='b 1223'], 0xa)
write$nci(r2, &(0x7f0000000240)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x33}, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x7fffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private1}, @in6={0xa, 0x4e23, 0xffff0dd0, @local, 0x8}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x5}], 0xa0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x7fffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private1}, @in6={0xa, 0x4e23, 0xffff0dd0, @local, 0x8}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x5}], 0xa0)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="a4001ccbc807e53dd47be9d95af7f6896a3c9b93ae72a82788901e6ec594d83c0501dacb979a057de9816932da5a0bc9a9911d47ac158b0bf5ce319d3092a6ceed3056fac98a76e66b9f4b26fc", 0x4d}], 0x1}, 0x20048800) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="a4001ccbc807e53dd47be9d95af7f6896a3c9b93ae72a82788901e6ec594d83c0501dacb979a057de9816932da5a0bc9a9911d47ac158b0bf5ce319d3092a6ceed3056fac98a76e66b9f4b26fc", 0x4d}], 0x1}, 0x20048800)

16.17044666s ago: executing program 0 (id=21106):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f030041000b05d25a806c8c6394f90324fc6010", 0x15}], 0x1}, 0x20040840)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

16.169636696s ago: executing program 5 (id=21107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x18, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff6666}}, @jmp={0x5, 0x0, 0xa, 0x5, 0xb, 0x16f, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0x7e58, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r4, r1, r1, r0], 0x0, 0x10, 0xed9}, 0x94)
ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000040)={0x8cb, 0x7f, 0x0, 0x9, 0x4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getlink={0x28, 0x12, 0x315, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2016, 0x2000}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xc, 0x2, 0x9, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

15.946326626s ago: executing program 1 (id=21108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006650000000000000180000000000000000000000000000009500000000000000180100002020702500000000002020"], 0x0, 0x2}, 0x94)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x402)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080))

15.87003751s ago: executing program 0 (id=21109):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10300, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0xe, 0x28}, 0x20)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
close(r1)
r2 = socket$inet(0x2, 0x3, 0xff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getnetconf={0x14, 0x52, 0xa3d4ba35220a95bf, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002900)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="6c0a9a1e45c127008123e5c2e3f28b2a20446a1c4c8a85f158893f02941e1d56a888233a218ca1aacab397a096a1fbe5e61eb29051730130d5d145e407422b59912c20ab011b3fddd53eb9d680398eed764c0e6872810f95bb41f3fa837042b27d8151207749e24a", 0x68}], 0x1, 0x0, 0x0, 0x4004011}], 0x1, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000000000000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xcc0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x4004089)
sendmsg(r2, &(0x7f00000006c0)={&(0x7f0000000240)=@isdn={0x22, 0xb, 0xb4, 0x1, 0x57}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfb}], 0x1, &(0x7f0000000500), 0x1a0}, 0x4000)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000500)={{0x2b, @rand_addr=0x64010101, 0x4e21, 0x0, 'wlc\x00', 0x16, 0xc4d3, 0x3e}, {@private=0xa010102, 0x4e23, 0x2000, 0x3ff, 0x0, 0x401}}, 0x44)

15.425731882s ago: executing program 5 (id=21110):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300090c0000000000100000000000030006000000000002000000000000000000f7000000000002000100000000000000090301000000030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) (async, rerun: 32)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="1a5a84648bc61793438471d9944ff3c663c84c45f64cff7ebf12d81d1a2008c10dcf4e661c88eb7c3989651fb8a51c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f", 0x66}], 0x1) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000110000009500000000000000f02cba79a4d5d96f8cb668b31dfc42a07e73179e1e679b81c666fa7b80b715aaa4b10a541645e0f9a4c7222596f65d305c3e6b0e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1.003267027s ago: executing program 33 (id=21102):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010200000000000000001c8e003d43177dc69c0000fc070001"], 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000003c0)=@allocspi={0x11c, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@empty, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0xa0, 0x33}, {@in=@local, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x3736, 0x4, 0x2, 0xab8, 0x8, 0x1, 0x80, 0x3}, {0x25, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3504, 0xf016e6580cc0e8b0, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @tfcpad={0x8, 0x16, 0xffffffff}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
splice(r1, 0x0, r4, 0x0, 0x2, 0x8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r6, &(0x7f0000000480)={0x2, 0xfffc, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0xffffffffffffff66, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

949.838628ms ago: executing program 34 (id=21105):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffff1}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x19, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x0, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000260000000800000002"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000380), 0x0}, 0x20)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000419c264fd7300000000000000000000002000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000419c264fd7300000000000000000000002000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000001b40)=ANY=[@ANYBLOB='b 1223'], 0xa)
write$nci(r2, &(0x7f0000000240)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x33}, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x7fffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private1}, @in6={0xa, 0x4e23, 0xffff0dd0, @local, 0x8}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x5}], 0xa0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x7fffffff}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x8, @private1}, @in6={0xa, 0x4e23, 0xffff0dd0, @local, 0x8}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x5}], 0xa0)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="a4001ccbc807e53dd47be9d95af7f6896a3c9b93ae72a82788901e6ec594d83c0501dacb979a057de9816932da5a0bc9a9911d47ac158b0bf5ce319d3092a6ceed3056fac98a76e66b9f4b26fc", 0x4d}], 0x1}, 0x20048800) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000380)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)="a4001ccbc807e53dd47be9d95af7f6896a3c9b93ae72a82788901e6ec594d83c0501dacb979a057de9816932da5a0bc9a9911d47ac158b0bf5ce319d3092a6ceed3056fac98a76e66b9f4b26fc", 0x4d}], 0x1}, 0x20048800)

503.487508ms ago: executing program 35 (id=21109):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10300, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0xe, 0x28}, 0x20)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000280)=0x4)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
close(r1)
r2 = socket$inet(0x2, 0x3, 0xff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getnetconf={0x14, 0x52, 0xa3d4ba35220a95bf, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20142}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002900)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="6c0a9a1e45c127008123e5c2e3f28b2a20446a1c4c8a85f158893f02941e1d56a888233a218ca1aacab397a096a1fbe5e61eb29051730130d5d145e407422b59912c20ab011b3fddd53eb9d680398eed764c0e6872810f95bb41f3fa837042b27d8151207749e24a", 0x68}], 0x1, 0x0, 0x0, 0x4004011}], 0x1, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000000000000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xcc0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48001}, 0x4004089)
sendmsg(r2, &(0x7f00000006c0)={&(0x7f0000000240)=@isdn={0x22, 0xb, 0xb4, 0x1, 0x57}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="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", 0xfb}], 0x1, &(0x7f0000000500), 0x1a0}, 0x4000)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000500)={{0x2b, @rand_addr=0x64010101, 0x4e21, 0x0, 'wlc\x00', 0x16, 0xc4d3, 0x3e}, {@private=0xa010102, 0x4e23, 0x2000, 0x3ff, 0x0, 0x401}}, 0x44)

461.399238ms ago: executing program 36 (id=21108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006650000000000000180000000000000000000000000000009500000000000000180100002020702500000000002020"], 0x0, 0x2}, 0x94)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x402)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080))

0s ago: executing program 37 (id=21110):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300090c0000000000100000000000030006000000000002000000000000000000f7000000000002000100000000000000090301000000030005000000000002000000ac1414aa0000000000000000020008"], 0x60}, 0x1, 0x7}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) (async, rerun: 32)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="1a5a84648bc61793438471d9944ff3c663c84c45f64cff7ebf12d81d1a2008c10dcf4e661c88eb7c3989651fb8a51c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f", 0x66}], 0x1) (async, rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000110000009500000000000000f02cba79a4d5d96f8cb668b31dfc42a07e73179e1e679b81c666fa7b80b715aaa4b10a541645e0f9a4c7222596f65d305c3e6b0e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

kernel console output (not intermixed with test programs):

n process `syz.3.20277'.
[ 1756.059011][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1756.100393][ T6139] netlink: 'syz.4.20278': attribute type 1 has an invalid length.
[ 1756.250928][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1756.700824][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20289'.
[ 1756.773174][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1758.074231][ T6235] netlink: 'syz.1.20305': attribute type 10 has an invalid length.
[ 1758.087479][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20305'.
[ 1758.109718][ T6235] geneve1: entered promiscuous mode
[ 1758.132708][ T6235] team0: Port device geneve1 added
[ 1758.223325][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20305'.
[ 1758.373517][ T6244] netlink: 'syz.0.20308': attribute type 4 has an invalid length.
[ 1758.405217][ T6247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.20310'.
[ 1758.415655][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20310'.
[ 1758.454344][ T6248] netlink: 'syz.0.20308': attribute type 4 has an invalid length.
[ 1758.488248][ T6243] can: request_module (can-proto-0) failed.
[ 1758.562006][ T6255] netlink: 'syz.4.20309': attribute type 1 has an invalid length.
[ 1758.571181][T20379] lo speed is unknown, defaulting to 1000
[ 1758.578413][T20384] lo speed is unknown, defaulting to 1000
[ 1758.670072][T20384] lo speed is unknown, defaulting to 1000
[ 1758.880701][ T6269] netlink: 'syz.1.20319': attribute type 4 has an invalid length.
[ 1758.918218][ T6274] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1758.948253][ T6269] netlink: 'syz.1.20319': attribute type 4 has an invalid length.
[ 1759.650123][T30721] net_ratelimit: 25 callbacks suppressed
[ 1759.650160][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1759.773234][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1759.890657][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1759.994134][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1760.159939][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1760.276831][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20332'.
[ 1760.318479][ T6314] bond9: entered promiscuous mode
[ 1760.326646][ T6314] bond9: entered allmulticast mode
[ 1760.369493][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1760.435694][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20334'.
[ 1760.504301][ T6326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20337'.
[ 1760.545132][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1760.759809][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1760.793368][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20335'.
[ 1760.881626][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1761.000337][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1761.959231][ T6376] vxcan0: tx drop: invalid sa for name 0xffffffffffffffff
[ 1762.734850][ T6409] netlink: 'syz.0.20359': attribute type 1 has an invalid length.
[ 1762.742783][ T6409] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20359'.
[ 1762.760324][ T6409] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20359'.
[ 1762.769347][ T6409] netlink: 658 bytes leftover after parsing attributes in process `syz.0.20359'.
[ 1762.910043][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1763.131332][ T6433] batadv0: entered promiscuous mode
[ 1763.137408][ T6433] batadv0: entered allmulticast mode
[ 1764.439216][ T6475] netlink: 'syz.4.20369': attribute type 10 has an invalid length.
[ 1764.585213][ T6475] veth0_vlan: left promiscuous mode
[ 1764.617673][ T6475] veth0_vlan: entered promiscuous mode
[ 1764.624433][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20367'.
[ 1764.637171][ T6475] team0: Device veth0_vlan failed to register rx_handler
[ 1764.763374][ T5211] net_ratelimit: 26 callbacks suppressed
[ 1764.763422][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1764.899949][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1764.935836][ T6497] syzkaller0: left promiscuous mode
[ 1764.941764][ T6497] syzkaller0: left allmulticast mode
[ 1765.055397][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.209432][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.226455][ T6501] sit0: entered promiscuous mode
[ 1765.243074][ T6501] netlink: 'syz.2.20377': attribute type 1 has an invalid length.
[ 1765.250997][ T6501] netlink: 1 bytes leftover after parsing attributes in process `syz.2.20377'.
[ 1765.385056][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.508135][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.629976][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.650981][ T6529] netlink: 'syz.4.20386': attribute type 1 has an invalid length.
[ 1765.660814][ T6529] netlink: 'syz.4.20386': attribute type 2 has an invalid length.
[ 1765.670117][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20386'.
[ 1765.727061][ T6533] nbd: nbd0 already in use
[ 1765.732144][ T6533] block nbd0: NBD_DISCONNECT
[ 1765.736882][ T6533] block nbd0: Send disconnect failed -32
[ 1765.743000][ T6533] block nbd0: Send disconnect failed -32
[ 1765.748676][ T6533] block nbd0: shutting down sockets
[ 1765.791451][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1765.992618][ T6544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20389'.
[ 1766.041095][ T6519] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1766.069241][ T6519] 8021q: adding VLAN 0 to HW filter on device team0
[ 1766.092422][ T6519] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[ 1766.171878][ T6519] batadv_slave_1: left promiscuous mode
[ 1766.216285][ T6519] veth1_vlan: left promiscuous mode
[ 1766.225523][ T6519] veth0_vlan: left promiscuous mode
[ 1766.234457][ T6519] veth0_vlan: entered promiscuous mode
[ 1766.244584][ T6519] veth1_vlan: entered promiscuous mode
[ 1766.256917][ T6519] veth1_macvtap: left promiscuous mode
[ 1766.264263][ T6519] veth0_macvtap: left promiscuous mode
[ 1766.271155][ T6519] veth0_macvtap: entered promiscuous mode
[ 1766.286015][ T6519] veth1_macvtap: entered promiscuous mode
[ 1766.294762][ T6519] geneve1: left promiscuous mode
[ 1766.301766][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1766.314375][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1766.326800][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1766.339585][ T6519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1766.363096][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1766.379894][ T6519] bond2: left promiscuous mode
[ 1766.385091][ T6519] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1766.394707][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1766.402827][ T6519] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1766.411290][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1766.419954][ T6519] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 1766.429551][ T6519] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1766.444266][ T6519] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1766.504472][ T6519] bond6: left promiscuous mode
[ 1766.518278][ T6519] bond7: left promiscuous mode
[ 1766.527615][ T6519] bond8: left promiscuous mode
[ 1766.551346][ T6519] bridge3: left promiscuous mode
[ 1766.558069][ T6519] ip6gre2: left promiscuous mode
[ 1766.571812][ T6519] bond10: left promiscuous mode
[ 1766.580135][ T6519] gre1: left promiscuous mode
[ 1766.588109][T20379] lo speed is unknown, defaulting to 1000
[ 1766.596984][T30721] vlan2: left allmulticast mode
[ 1766.597663][T20379] syz1: Port: 1 Link ACTIVE
[ 1766.605733][T30721] geneve0: left allmulticast mode
[ 1766.611876][T30721] vlan2: left promiscuous mode
[ 1766.616757][T30721] geneve0: left promiscuous mode
[ 1766.623281][T30721] bridge0: port 3(vlan2) entered disabled state
[ 1766.629301][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20390'.
[ 1766.695675][T30721] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1766.763467][T30721] bond0 (unregistering): Released all slaves
[ 1766.775825][T30721] bond1 (unregistering): Released all slaves
[ 1766.790316][T30721] bond2 (unregistering): (slave veth3): Releasing active interface
[ 1766.803435][T30721] bond2 (unregistering): Released all slaves
[ 1766.828049][T30721] bond3 (unregistering): Released all slaves
[ 1766.841882][T30721] bond4 (unregistering): (slave veth7): Releasing active interface
[ 1766.851964][T30721] bond4 (unregistering): Released all slaves
[ 1766.865475][T30721] bond5 (unregistering): Released all slaves
[ 1766.879709][T30721] bond6 (unregistering): Released all slaves
[ 1766.893866][T20384] bridge0: entered promiscuous mode
[ 1766.893906][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20389'.
[ 1766.909964][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20389'.
[ 1766.971797][ T8941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1766.980564][ T8941] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0
[ 1766.989420][ T8941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1767.000368][ T8941] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0
[ 1767.009523][ T8941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1767.018357][ T8941] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0
[ 1767.038654][T20383] lo speed is unknown, defaulting to 1000
[ 1767.133342][ T8941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1767.159277][ T8941] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0
[ 1767.223373][ T5216] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1767.251936][ T5216] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1767.294107][ T5216] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1767.314368][T30721] tipc: Disabling bearer <udp:syz0>
[ 1767.319758][T30721] tipc: Disabling bearer <udp:syz2>
[ 1767.325740][T30721] tipc: Left network mode
[ 1767.938101][ T6551] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1767.953060][ T6551] bond3: left promiscuous mode
[ 1767.958458][ T6551] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1767.968673][ T6551] macvlan2: left promiscuous mode
[ 1767.983330][ T6551] bond4: left promiscuous mode
[ 1767.989465][ T6551] bond5: left promiscuous mode
[ 1768.026310][ T6551] ip6gre1: left promiscuous mode
[ 1768.033284][ T6551] bond6: left promiscuous mode
[ 1768.038396][ T6551] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1768.092329][ T6551] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1768.115562][ T6551] vti0: left promiscuous mode
[ 1768.120957][ T6551] ip6gre2: left promiscuous mode
[ 1768.142157][ T6551] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1768.150669][ T6551] bond9: left promiscuous mode
[ 1768.155804][ T6551] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1768.168588][ T5216] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1768.193645][ T9462] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1768.220037][ T8941] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex
[ 1768.303308][ T6589] __nla_validate_parse: 2 callbacks suppressed
[ 1768.303359][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20400'.
[ 1768.367926][ T6571] syzkaller0: entered promiscuous mode
[ 1768.378173][ T6571] syzkaller0: entered allmulticast mode
[ 1768.390376][ T5216] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1768.417415][ T5216] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1768.429849][ T9462] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1768.606504][ T8941] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[ 1768.694301][ T6592] bond3: entered allmulticast mode
[ 1768.737944][ T6593] macvlan5: entered promiscuous mode
[ 1768.743982][ T6593] macvlan5: entered allmulticast mode
[ 1768.760268][ T6593] bond3: (slave macvlan5): Opening slave failed
[ 1769.172112][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1769.289771][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1769.317659][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20405'.
[ 1769.389692][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1769.407006][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20405'.
[ 1769.416110][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20405'.
[ 1769.526084][ T6618] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[ 1769.833288][ T5215] net_ratelimit: 3 callbacks suppressed
[ 1769.833343][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1769.969632][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.080851][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.191260][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.319575][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.430991][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.550434][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.659693][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.769789][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1770.879596][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1771.154106][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1771.231219][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1771.453811][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1772.335132][ T6636] FAULT_INJECTION: forcing a failure.
[ 1772.335132][ T6636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1772.349913][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.1.20412 Not tainted syzkaller #0 PREEMPT(full) 
[ 1772.349945][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1772.349959][ T6636] Call Trace:
[ 1772.349968][ T6636]  <TASK>
[ 1772.349977][ T6636]  dump_stack_lvl+0xe8/0x150
[ 1772.350006][ T6636]  should_fail_ex+0x40c/0x560
[ 1772.350031][ T6636]  _copy_to_user+0x31/0xb0
[ 1772.350061][ T6636]  simple_read_from_buffer+0xe1/0x170
[ 1772.350088][ T6636]  proc_fail_nth_read+0x1bb/0x230
[ 1772.350118][ T6636]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1772.350147][ T6636]  ? rw_verify_area+0x24a/0x4c0
[ 1772.350176][ T6636]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1772.350209][ T6636]  vfs_read+0x213/0xa80
[ 1772.350238][ T6636]  ? __pfx___mutex_lock+0x10/0x10
[ 1772.350267][ T6636]  ? __pfx_vfs_read+0x10/0x10
[ 1772.350296][ T6636]  ? __fget_files+0x3a2/0x420
[ 1772.350317][ T6636]  ? __fget_files+0x2a/0x420
[ 1772.350343][ T6636]  ksys_read+0x150/0x270
[ 1772.350369][ T6636]  ? __pfx_ksys_read+0x10/0x10
[ 1772.350393][ T6636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1772.350417][ T6636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1772.350436][ T6636]  do_syscall_64+0x174/0x580
[ 1772.350463][ T6636]  ? clear_bhb_loop+0x40/0x90
[ 1772.350486][ T6636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1772.350505][ T6636] RIP: 0033:0x7f117215d68e
[ 1772.350523][ T6636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1772.350539][ T6636] RSP: 002b:00007f1172f7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1772.350560][ T6636] RAX: ffffffffffffffda RBX: 00007f1172f7e6c0 RCX: 00007f117215d68e
[ 1772.350575][ T6636] RDX: 000000000000000f RSI: 00007f1172f7e0a0 RDI: 0000000000000004
[ 1772.350587][ T6636] RBP: 00007f1172f7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1772.350599][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1772.350611][ T6636] R13: 00007f1172416038 R14: 00007f1172415fa0 R15: 00007fff8968df68
[ 1772.350636][ T6636]  </TASK>
[ 1772.352299][ T5742] hsr0: entered promiscuous mode
[ 1772.586211][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20411'.
[ 1772.798486][ T6647] netlink: 'syz.1.20416': attribute type 13 has an invalid length.
[ 1772.812767][ T6647] netlink: 'syz.1.20416': attribute type 12 has an invalid length.
[ 1773.203122][ T4781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1773.211186][ T4781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1773.219307][ T4781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1773.247689][ T4781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1773.256003][ T4781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1773.299064][T30721] hsr_slave_0: left promiscuous mode
[ 1773.451217][T30721] hsr_slave_1: left promiscuous mode
[ 1773.682527][ T6671] netlink: 232 bytes leftover after parsing attributes in process `syz.0.20421'.
[ 1774.724022][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20427'.
[ 1774.735298][ T6699] netlink: 'syz.2.20428': attribute type 1 has an invalid length.
[ 1774.831019][T30721] IPVS: stop unused estimator thread 0...
[ 1774.881908][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20428'.
[ 1774.922871][ T6699] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1774.963589][ T6703] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1774.974011][ T6703] bond8: (slave gre2): The slave device specified does not support setting the MAC address
[ 1774.990504][ T6703] bond8: (slave gre2): Error -95 calling set_mac_address
[ 1775.255861][ T5215] net_ratelimit: 18 callbacks suppressed
[ 1775.255897][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1775.285655][ T6699] macvlan5: entered promiscuous mode
[ 1775.292796][ T6699] macvlan5: entered allmulticast mode
[ 1775.300595][ T6699] bond8: entered promiscuous mode
[ 1775.309700][ T4781] Bluetooth: hci3: command tx timeout
[ 1775.320683][ T6699] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1775.334772][ T6699] bond8: left promiscuous mode
[ 1775.415942][ T6700] veth11: entered allmulticast mode
[ 1775.446115][ T6700] bond10: (slave veth11): Enslaving as an active interface with an up link
[ 1775.479732][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1775.558360][ T6660] lo speed is unknown, defaulting to 1000
[ 1775.565047][ T6660] lo speed is unknown, defaulting to 1000
[ 1775.592197][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20431'.
[ 1775.668058][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1775.778999][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1776.094202][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1776.255450][ T6740] netlink: 120 bytes leftover after parsing attributes in process `syz.2.20438'.
[ 1776.264663][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20438'.
[ 1776.350145][    C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed
[ 1776.350182][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1776.696783][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1776.711622][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1776.729850][ T6660] bridge_slave_0: entered allmulticast mode
[ 1776.745142][ T6660] bridge_slave_0: entered promiscuous mode
[ 1776.782447][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1776.791458][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1776.810792][ T6660] bridge_slave_1: entered allmulticast mode
[ 1776.827820][ T6660] bridge_slave_1: entered promiscuous mode
[ 1776.879634][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1776.961465][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1776.983167][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1777.011622][ T6660] team0: Port device team_slave_0 added
[ 1777.019716][ T6660] team0: Port device team_slave_1 added
[ 1777.158503][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1777.173270][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1777.206347][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1777.259165][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1777.273805][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1777.302225][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1777.400690][ T4781] Bluetooth: hci3: command tx timeout
[ 1777.417960][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20449'.
[ 1777.437139][ T6660] hsr_slave_0: entered promiscuous mode
[ 1777.446184][ T6660] hsr_slave_1: entered promiscuous mode
[ 1777.454168][ T6660] debugfs: 'hsr0' already exists in 'hsr'
[ 1777.460851][ T6660] Cannot create hsr debugfs directory
[ 1777.733776][ T6660] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1777.744559][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1777.752513][ T6660] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1777.776864][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1777.789913][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1777.797983][ T6660] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1777.819931][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1777.841010][ T6660] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1777.855885][ T6660] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1777.897604][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20445'.
[ 1777.906865][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20445'.
[ 1777.915951][ T6791] netlink: 'syz.0.20445': attribute type 7 has an invalid length.
[ 1777.923850][ T6800] netlink: 'syz.0.20445': attribute type 7 has an invalid length.
[ 1777.931697][ T6800] netlink: 'syz.0.20445': attribute type 8 has an invalid length.
[ 1777.939543][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20445'.
[ 1777.948558][ T6791] netlink: 'syz.0.20445': attribute type 8 has an invalid length.
[ 1778.062960][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1778.105230][ T6660] 8021q: adding VLAN 0 to HW filter on device team0
[ 1778.132919][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1778.140620][ T5215] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1778.181650][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1778.189430][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1778.379931][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1778.499964][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1778.909611][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1779.129853][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1779.411688][ T6842] __nla_validate_parse: 1 callbacks suppressed
[ 1779.411710][ T6842] netlink: 240 bytes leftover after parsing attributes in process `syz.4.20462'.
[ 1779.469787][ T4781] Bluetooth: hci3: command tx timeout
[ 1779.525733][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1779.549582][    C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1779.557931][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1779.893496][ T6848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20463'.
[ 1780.039825][ T6660] veth0_vlan: entered promiscuous mode
[ 1780.050395][ T6660] veth1_vlan: entered promiscuous mode
[ 1780.074268][ T6660] veth0_macvtap: entered promiscuous mode
[ 1780.083012][ T6660] veth1_macvtap: entered promiscuous mode
[ 1780.098827][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1780.116014][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1780.127207][ T5211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.253696][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1780.271925][ T5211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.280731][ T5211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.306973][ T5211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1780.374252][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20470'.
[ 1780.433172][ T6876] netlink: 'syz.1.20469': attribute type 2 has an invalid length.
[ 1780.441052][ T6876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20469'.
[ 1780.477975][T13664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1780.485850][T13664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1780.507207][ T5215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1780.515092][ T5215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1780.537052][ T5215] net_ratelimit: 6 callbacks suppressed
[ 1780.537074][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1780.663596][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1780.696684][ T6883] syzkaller1: entered promiscuous mode
[ 1780.702225][ T6883] syzkaller1: entered allmulticast mode
[ 1780.740238][ T6885] FAULT_INJECTION: forcing a failure.
[ 1780.740238][ T6885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1780.753342][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.4.20472 Not tainted syzkaller #0 PREEMPT(full) 
[ 1780.753370][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1780.753384][ T6885] Call Trace:
[ 1780.753392][ T6885]  <TASK>
[ 1780.753401][ T6885]  dump_stack_lvl+0xe8/0x150
[ 1780.753429][ T6885]  should_fail_ex+0x40c/0x560
[ 1780.753454][ T6885]  _copy_from_user+0x2d/0xb0
[ 1780.753483][ T6885]  __sys_bpf+0x229/0x950
[ 1780.753512][ T6885]  ? __pfx___sys_bpf+0x10/0x10
[ 1780.753546][ T6885]  ? ksys_write+0x242/0x270
[ 1780.753583][ T6885]  ? __pfx_ksys_write+0x10/0x10
[ 1780.753612][ T6885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1780.753631][ T6885]  __x64_sys_bpf+0x7c/0x90
[ 1780.753654][ T6885]  do_syscall_64+0x174/0x580
[ 1780.753680][ T6885]  ? trace_irq_disable+0x3b/0x140
[ 1780.753708][ T6885]  ? clear_bhb_loop+0x40/0x90
[ 1780.753731][ T6885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1780.753750][ T6885] RIP: 0033:0x7f5763b9ce59
[ 1780.753770][ T6885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1780.753789][ T6885] RSP: 002b:00007f5761df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1780.753812][ T6885] RAX: ffffffffffffffda RBX: 00007f5763e15fa0 RCX: 00007f5763b9ce59
[ 1780.753827][ T6885] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1780.753841][ T6885] RBP: 00007f5761df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1780.753853][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1780.753866][ T6885] R13: 00007f5763e16038 R14: 00007f5763e15fa0 R15: 00007ffef19d3fc8
[ 1780.753891][ T6885]  </TASK>
[ 1780.843306][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1780.907155][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1781.085071][ T6895] netlink: 'syz.2.20474': attribute type 1 has an invalid length.
[ 1781.190392][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20475'.
[ 1781.262197][ T6903] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1781.314377][ T6903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1781.386462][ T6905] x_tables: duplicate underflow at hook 3
[ 1781.485354][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1781.524600][    C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[ 1781.533470][ T6902] bond9: entered promiscuous mode
[ 1781.589721][ T4781] Bluetooth: hci3: command tx timeout
[ 1784.545437][ T6895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1784.564148][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1784.580612][ T6911] netlink: 148 bytes leftover after parsing attributes in process `syz.1.20478'.
[ 1784.618650][ T6894] bond9: left promiscuous mode
[ 1784.822730][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1784.879410][ T6923] netlink: 7 bytes leftover after parsing attributes in process `syz.1.20481'.
[ 1784.918375][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20480'.
[ 1785.104780][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20485'.
[ 1785.114808][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20485'.
[ 1785.207567][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20485'.
[ 1785.237231][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20485'.
[ 1785.503716][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20487'.
[ 1785.551491][ T6946] bond10: entered allmulticast mode
[ 1785.559616][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1785.625479][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20485'.
[ 1785.657917][ T6948] ipip0: entered promiscuous mode
[ 1785.665155][ T6948] ipip0: entered allmulticast mode
[ 1785.768984][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1785.880821][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1786.066289][ T6971] macsec1: entered promiscuous mode
[ 1786.071566][ T6971] dummy0: entered promiscuous mode
[ 1786.076883][ T6971] macsec1: entered allmulticast mode
[ 1786.129692][ T6971] dummy0: entered allmulticast mode
[ 1786.147386][ T6971] dummy0: left allmulticast mode
[ 1786.199865][T20383] dummy0: left promiscuous mode
[ 1786.294431][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1786.534179][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1786.604451][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20500'.
[ 1786.649762][ T6997] netlink: 'syz.5.20501': attribute type 1 has an invalid length.
[ 1786.742160][ T6997] bond1 (unregistering): Released all slaves
[ 1786.759426][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1786.947976][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1787.439665][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1787.799576][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1787.940013][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1788.231214][ T7040] lo speed is unknown, defaulting to 1000
[ 1788.238681][ T7040] lo speed is unknown, defaulting to 1000
[ 1788.758818][ T7054] bond0: entered promiscuous mode
[ 1788.764128][ T7054] bond_slave_0: entered promiscuous mode
[ 1788.769973][ T7054] bond_slave_1: entered promiscuous mode
[ 1788.777492][ T7054] batadv_slave_0: entered promiscuous mode
[ 1788.784172][ T7054] debugfs: 'hsr0' already exists in 'hsr'
[ 1788.789941][ T7054] Cannot create hsr debugfs directory
[ 1789.218210][ T7082] xfrm0: entered allmulticast mode
[ 1790.569564][T13664] net_ratelimit: 19 callbacks suppressed
[ 1790.569605][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1790.691698][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1790.849503][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1790.957854][ T7025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1791.103260][ T7089] __nla_validate_parse: 30 callbacks suppressed
[ 1791.103283][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20525'.
[ 1791.115005][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1791.153637][ T7089] netlink: 'syz.1.20525': attribute type 5 has an invalid length.
[ 1791.161508][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20525'.
[ 1791.176818][ T7089] geneve2: entered promiscuous mode
[ 1791.182511][ T7089] geneve2: entered allmulticast mode
[ 1791.189579][T13664] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50021 - 0
[ 1791.226087][T13664] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50021 - 0
[ 1791.264063][T13664] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50021 - 0
[ 1791.310234][T13664] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50021 - 0
[ 1791.349753][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1791.489599][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1791.610615][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1791.693345][ T7112] netlink: 48 bytes leftover after parsing attributes in process `syz.5.20531'.
[ 1791.756754][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1791.895038][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1792.273126][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1792.951156][ T7139] block nbd4: must specify backend
[ 1793.208609][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20543'.
[ 1794.240798][ T7185] netlink: 272 bytes leftover after parsing attributes in process `syz.4.20555'.
[ 1794.270562][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1794.351894][ T7195] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20557'.
[ 1794.449714][ T7197] ip6tnl4: entered allmulticast mode
[ 1794.459146][ T5216] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1794.490236][ T5216] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1794.498604][ T9460] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1794.659891][ T7210] lo speed is unknown, defaulting to 1000
[ 1794.666663][ T7210] lo speed is unknown, defaulting to 1000
[ 1794.849742][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20567'.
[ 1794.858861][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20567'.
[ 1794.868802][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20567'.
[ 1794.910369][    C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1794.919092][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1794.923713][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20567'.
[ 1795.102046][ T9460] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1795.390893][   T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1795.549992][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1795.768856][ T7233] syzkaller0: entered promiscuous mode
[ 1795.817913][ T7233] syzkaller0: entered allmulticast mode
[ 1795.863959][T30721] net_ratelimit: 18 callbacks suppressed
[ 1795.864011][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.051657][T30721] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.179749][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.341323][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.470936][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.599754][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.730657][T13662] bond6: (slave batadv0): failed to get link speed/duplex
[ 1796.831840][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1796.858074][ T7280] __nla_validate_parse: 4 callbacks suppressed
[ 1796.858099][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20580'.
[ 1796.948326][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1797.027882][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20586'.
[ 1797.276073][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20584'.
[ 1797.279238][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.295610][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.316644][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.325750][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.335145][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.344218][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.358750][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20587'.
[ 1797.436789][ T7299] nbd: couldn't find a device at index 0
[ 1797.443612][ T7299] netlink: 'syz.4.20590': attribute type 13 has an invalid length.
[ 1797.689642][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1797.815469][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1798.613497][ T7332] sctp: [Deprecated]: syz.2.20599 (pid 7332) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1798.613497][ T7332] Use struct sctp_sack_info instead
[ 1799.011217][ T7343] netlink: 'syz.5.20603': attribute type 1 has an invalid length.
[ 1799.063782][ T7340] syzkaller0: entered promiscuous mode
[ 1799.085343][ T7340] syzkaller0: entered allmulticast mode
[ 1799.134032][ T7340] netlink: 'syz.2.20602': attribute type 1 has an invalid length.
[ 1799.173976][ T7340] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1799.207633][ T7340] bond11: (slave veth5): Enslaving as an active interface with a down link
[ 1799.293599][ T7354] netlink: 'syz.0.20607': attribute type 5 has an invalid length.
[ 1799.358932][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1799.373082][ T7340] bond11: (slave batadv1): making interface the new active one
[ 1799.385075][ T7340] batadv1: entered promiscuous mode
[ 1799.394117][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[ 1799.394152][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1799.394475][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1799.422658][ T7340] bond11: (slave batadv1): Enslaving as an active interface with an up link
[ 1799.852531][ T7364] lo speed is unknown, defaulting to 1000
[ 1799.861354][ T7364] lo speed is unknown, defaulting to 1000
[ 1800.208222][ T7371] syzkaller0: entered promiscuous mode
[ 1800.213863][ T7371] syzkaller0: entered allmulticast mode
[ 1800.222995][ T7371] tipc: Started in network mode
[ 1800.228106][ T7371] tipc: Node identity ae469981a606, cluster identity 4711
[ 1800.235919][ T7371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1800.247760][ T7370] tipc: Resetting bearer <eth:syzkaller0>
[ 1800.282357][ T7370] tipc: Disabling bearer <eth:syzkaller0>
[ 1800.990834][T13664] net_ratelimit: 14 callbacks suppressed
[ 1800.990858][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.310656][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1801.349774][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.459555][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.653017][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.771196][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.890528][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1801.937676][T13220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1801.966361][T13220] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1801.997322][T13220] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1802.026235][T13220] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1802.035072][T13220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1802.093530][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1802.294310][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1802.403258][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1802.583038][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1802.745992][ T7430] lo speed is unknown, defaulting to 1000
[ 1802.772737][ T7430] lo speed is unknown, defaulting to 1000
[ 1803.251594][ T7470] __nla_validate_parse: 10 callbacks suppressed
[ 1803.251647][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20637'.
[ 1803.443065][T24512] syz_tun (unregistering): left allmulticast mode
[ 1803.632620][ T7488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20640'.
[ 1803.789058][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20642'.
[ 1803.825822][ T7494] ip6gre1: entered promiscuous mode
[ 1803.831114][ T7494] ip6gre1: entered allmulticast mode
[ 1803.849409][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1803.856893][ T7430] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1803.866212][ T7430] bridge_slave_0: entered allmulticast mode
[ 1803.874372][ T7430] bridge_slave_0: entered promiscuous mode
[ 1803.884836][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1803.892343][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1803.903107][ T7430] bridge_slave_1: entered allmulticast mode
[ 1803.910999][ T7430] bridge_slave_1: entered promiscuous mode
[ 1803.937525][ T7430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1803.950063][ T7430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1804.006617][ T7430] team0: Port device team_slave_0 added
[ 1804.119557][ T7430] team0: Port device team_slave_1 added
[ 1804.235387][T13220] Bluetooth: hci6: command tx timeout
[ 1804.238664][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1804.249500][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1804.295228][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20649'.
[ 1804.305226][ T7430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1804.322214][ T7430] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1804.329304][ T7430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1804.359099][ T7430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1804.371704][ T7518] syzkaller1: entered promiscuous mode
[ 1804.377409][ T7518] syzkaller1: entered allmulticast mode
[ 1804.395296][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1804.404767][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1804.419958][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1804.427595][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1804.499697][ T7430] hsr_slave_0: entered promiscuous mode
[ 1804.506330][ T7430] hsr_slave_1: entered promiscuous mode
[ 1804.512531][ T7430] debugfs: 'hsr0' already exists in 'hsr'
[ 1804.518277][ T7430] Cannot create hsr debugfs directory
[ 1804.807094][ T7529] netlink: 128 bytes leftover after parsing attributes in process `syz.2.20653'.
[ 1804.924187][ T7430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1804.943446][ T7430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1805.130600][ T7430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1805.142792][ T7430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1805.251207][ T7554] netlink: 272 bytes leftover after parsing attributes in process `syz.5.20659'.
[ 1805.357775][ T7430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1805.415689][ T7430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1805.592622][ T7567] netlink: 5 bytes leftover after parsing attributes in process `syz.1.20665'.
[ 1805.622284][ T7430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1805.634050][ T7430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0
[ 1805.696241][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20666'.
[ 1805.851779][ T7430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1805.862822][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1805.870720][ T7430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1805.887061][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1805.895237][ T7430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1805.905345][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1805.918133][ T7430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1805.933703][ T7430] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1805.943478][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20671'.
[ 1806.079336][ T7430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1806.088619][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20671'.
[ 1806.188736][ T7601] netlink: 'syz.1.20673': attribute type 1 has an invalid length.
[ 1806.196665][ T7601] netlink: 'syz.1.20673': attribute type 1 has an invalid length.
[ 1806.204693][ T7601] netlink: 'syz.1.20673': attribute type 2 has an invalid length.
[ 1806.212717][ T7601] netlink: 'syz.1.20673': attribute type 1 has an invalid length.
[ 1806.221072][ T7430] 8021q: adding VLAN 0 to HW filter on device team0
[ 1806.252461][T13662] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1806.259815][T13662] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1806.269366][T13662] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1806.276603][T13662] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1806.288014][   T13] net_ratelimit: 12 callbacks suppressed
[ 1806.288041][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1806.327668][ T7430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1806.338443][ T7430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1806.396171][T13220] Bluetooth: hci6: command tx timeout
[ 1806.429630][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1806.438764][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1806.533253][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1806.736059][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1806.898815][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.030215][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.155429][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.290298][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.384648][ T7632] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[ 1807.422549][ T7632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1807.494249][ T7430] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1807.520141][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.649521][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1807.862249][ T7430] veth0_vlan: entered promiscuous mode
[ 1807.946624][ T7430] veth1_vlan: entered promiscuous mode
[ 1808.064886][ T7430] veth0_macvtap: entered promiscuous mode
[ 1808.093866][ T7430] veth1_macvtap: entered promiscuous mode
[ 1808.203183][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1808.278506][ T7430] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1808.429805][T13220] Bluetooth: hci6: command tx timeout
[ 1808.710745][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1808.766210][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1808.823266][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1808.853314][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1808.990091][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1809.094403][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.105199][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.132074][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.142768][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.169800][ T7682] netlink: 272 bytes leftover after parsing attributes in process `syz.1.20695'.
[ 1809.181207][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.193454][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.236398][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20697'.
[ 1809.270255][T13662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1809.281017][T13662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1809.323585][T13662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1809.332494][T13662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1809.469627][ T7694] bond11: (slave tunl0): Device is not bonding slave
[ 1809.476486][ T7694] bond11: option active_slave: invalid value (tunl0)
[ 1809.484903][ T7694] bond11 (unregistering): Released all slaves
[ 1809.562455][ T7701] syzkaller0: entered promiscuous mode
[ 1809.568098][ T7701] syzkaller0: entered allmulticast mode
[ 1809.577774][ T7701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1809.586321][ T7700] tipc: Resetting bearer <eth:syzkaller0>
[ 1809.619254][ T7700] tipc: Disabling bearer <eth:syzkaller0>
[ 1809.749812][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20700'.
[ 1809.858432][ T7713] netlink: 'syz.4.20704': attribute type 1 has an invalid length.
[ 1809.940017][ T7713] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1810.022880][ T7713] bond4: (slave veth7): Enslaving as an active interface with a down link
[ 1810.052698][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1810.062108][ T7713] bond4: (slave batadv0): making interface the new active one
[ 1810.071053][ T7713] batadv0: entered promiscuous mode
[ 1810.076677][ T7713] bond4: (slave batadv0): Enslaving as an active interface with an up link
[ 1810.177096][ T7725] FAULT_INJECTION: forcing a failure.
[ 1810.177096][ T7725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1810.190202][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.2.20708 Not tainted syzkaller #0 PREEMPT(full) 
[ 1810.190229][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1810.190242][ T7725] Call Trace:
[ 1810.190250][ T7725]  <TASK>
[ 1810.190258][ T7725]  dump_stack_lvl+0xe8/0x150
[ 1810.190284][ T7725]  should_fail_ex+0x40c/0x560
[ 1810.190310][ T7725]  _copy_from_iter+0x1d3/0x1660
[ 1810.190337][ T7725]  ? rcu_is_watching+0x15/0xb0
[ 1810.190362][ T7725]  ? __pfx__copy_from_iter+0x10/0x10
[ 1810.190385][ T7725]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[ 1810.190417][ T7725]  ? netlink_sendmsg+0x650/0xb40
[ 1810.190448][ T7725]  ? skb_put+0x112/0x210
[ 1810.190475][ T7725]  netlink_sendmsg+0x6c0/0xb40
[ 1810.190510][ T7725]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1810.190543][ T7725]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1810.190564][ T7725]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1810.190588][ T7725]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1810.190619][ T7725]  ____sys_sendmsg+0x9b9/0xa20
[ 1810.190654][ T7725]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1810.190685][ T7725]  ? lock_release+0x4b/0x3c0
[ 1810.190717][ T7725]  ? import_iovec+0x73/0xa0
[ 1810.190745][ T7725]  ___sys_sendmsg+0x2a5/0x360
[ 1810.190774][ T7725]  ? rcu_is_watching+0x15/0xb0
[ 1810.190794][ T7725]  ? get_pid_task+0x20/0x1f0
[ 1810.190815][ T7725]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1810.190846][ T7725]  ? rcu_is_watching+0x15/0xb0
[ 1810.190883][ T7725]  ? __fget_files+0x2a/0x420
[ 1810.190911][ T7725]  ? __fget_files+0x3a2/0x420
[ 1810.190939][ T7725]  __x64_sys_sendmsg+0x1b1/0x290
[ 1810.190969][ T7725]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1810.191007][ T7725]  ? rcu_is_watching+0x15/0xb0
[ 1810.191027][ T7725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.191049][ T7725]  do_syscall_64+0x174/0x580
[ 1810.191075][ T7725]  ? trace_irq_disable+0x3b/0x140
[ 1810.191102][ T7725]  ? clear_bhb_loop+0x40/0x90
[ 1810.191124][ T7725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.191144][ T7725] RIP: 0033:0x7fd1acd9ce59
[ 1810.191164][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1810.191181][ T7725] RSP: 002b:00007fd1adc4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1810.191204][ T7725] RAX: ffffffffffffffda RBX: 00007fd1ad015fa0 RCX: 00007fd1acd9ce59
[ 1810.191220][ T7725] RDX: 0000000004008000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1810.191234][ T7725] RBP: 00007fd1adc4b090 R08: 0000000000000000 R09: 0000000000000000
[ 1810.191247][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1810.191260][ T7725] R13: 00007fd1ad016038 R14: 00007fd1ad015fa0 R15: 00007fff9a5fcd58
[ 1810.191285][ T7725]  </TASK>
[ 1810.435509][ T7729] netlink: 10 bytes leftover after parsing attributes in process `syz.4.20710'.
[ 1810.681931][T13220] Bluetooth: hci6: command tx timeout
[ 1810.835185][ T7752] bond11 (unregistering): Released all slaves
[ 1810.942685][ T7758] syzkaller0: entered promiscuous mode
[ 1810.948245][ T7758] syzkaller0: entered allmulticast mode
[ 1811.380500][ T5216] net_ratelimit: 14 callbacks suppressed
[ 1811.380525][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1811.498533][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1811.589487][ T4781] block nbd0: Receive control failed (result -32)
[ 1811.596521][T13220] block nbd0: Receive control failed (result -32)
[ 1811.630672][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1811.819364][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1812.046427][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1812.468037][ T7809] syzkaller0: entered promiscuous mode
[ 1812.491820][ T7809] syzkaller0: entered allmulticast mode
[ 1812.528030][ T7810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1812.656922][ T7799] tipc: Resetting bearer <eth:syzkaller0>
[ 1812.743851][ T7799] tipc: Disabling bearer <eth:syzkaller0>
[ 1812.806942][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1812.889967][ T7825] bridge_slave_0 (unregistering): left allmulticast mode
[ 1812.897519][ T7825] bridge_slave_0 (unregistering): left promiscuous mode
[ 1812.904560][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1812.950421][ T7801] macvtap1: entered allmulticast mode
[ 1812.959482][ T7801] dummy0: entered allmulticast mode
[ 1812.974039][ T7801] dummy0: entered promiscuous mode
[ 1812.982002][ T7801] dummy0: left allmulticast mode
[ 1812.994589][T20391] dummy0: left promiscuous mode
[ 1813.027014][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1813.129479][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1813.242521][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1813.365114][ T7866] bridge0: port 1(syz_tun) entered blocking state
[ 1813.397287][ T7866] bridge0: port 1(syz_tun) entered disabled state
[ 1813.417054][ T7866] syz_tun: entered allmulticast mode
[ 1813.440345][ T7866] syz_tun: entered promiscuous mode
[ 1813.623599][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1813.742053][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1813.996087][ T7899] netlink: 'syz.5.20764': attribute type 1 has an invalid length.
[ 1814.035078][ T7899] syzkaller0: entered promiscuous mode
[ 1814.040632][ T7899] syzkaller0: entered allmulticast mode
[ 1814.249445][ T7913] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1814.257353][ T7913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1814.264589][ T7913] IPv6: NLM_F_CREATE should be set when creating new route
[ 1814.272377][ T7913] IPv6: NLM_F_CREATE should be set when creating new route
[ 1814.280065][T13662] batadv1: left promiscuous mode
[ 1814.627328][ T7928] __nla_validate_parse: 14 callbacks suppressed
[ 1814.627353][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20775'.
[ 1814.683920][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20775'.
[ 1814.707729][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20778'.
[ 1814.770703][ T7937] netlink: 'syz.2.20779': attribute type 13 has an invalid length.
[ 1814.885720][ T7939] veth0_vlan: left promiscuous mode
[ 1814.891862][ T7939] veth0_vlan: entered promiscuous mode
[ 1814.913267][ T7939] bridge0: port 1(syz_tun) entered blocking state
[ 1814.920068][ T7939] bridge0: port 1(syz_tun) entered forwarding state
[ 1814.947232][   T10] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1815.006477][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20780'.
[ 1815.046657][ T7939] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1815.088550][ T7944] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1815.103682][ T7944] bond11 (unregistering): Released all slaves
[ 1815.119142][ T8941] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1815.128307][ T8941] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1815.215299][T13662] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex
[ 1815.370495][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20788'.
[ 1815.491291][T20391] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1815.903411][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20793'.
[ 1816.149594][ T7981] netlink: 'syz.5.20795': attribute type 1 has an invalid length.
[ 1816.208482][ T7981] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1816.299432][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20795'.
[ 1816.366263][ T7989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20798'.
[ 1816.461465][ T7981] bond1: (slave macvlan0): making interface the new active one
[ 1816.482454][ T7981] bond1: (slave macvlan0): Enslaving as an active interface with an up link
[ 1816.542715][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1816.550606][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1816.561562][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20800'.
[ 1816.573434][ T7998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20801'.
[ 1816.614900][ T8941] net_ratelimit: 14 callbacks suppressed
[ 1816.614924][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1816.787607][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1816.942572][ T8008] syzkaller0: entered promiscuous mode
[ 1816.948989][ T8008] syzkaller0: entered allmulticast mode
[ 1816.983864][ T5216] wlan1: Trigger new scan to find an IBSS to join
[ 1817.260139][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1817.295488][ T8020] batman_adv: batadv0: Adding interface: macsec1
[ 1817.307847][ T8020] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1817.352839][ T8020] batman_adv: batadv0: Interface activated: macsec1
[ 1817.426108][ T8030] FAULT_INJECTION: forcing a failure.
[ 1817.426108][ T8030] name failslab, interval 1, probability 0, space 0, times 0
[ 1817.447531][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1817.458025][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.2.20812 Not tainted syzkaller #0 PREEMPT(full) 
[ 1817.458056][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1817.458069][ T8030] Call Trace:
[ 1817.458077][ T8030]  <TASK>
[ 1817.458086][ T8030]  dump_stack_lvl+0xe8/0x150
[ 1817.458115][ T8030]  should_fail_ex+0x40c/0x560
[ 1817.458140][ T8030]  should_failslab+0xa8/0x100
[ 1817.458173][ T8030]  __kmalloc_cache_noprof+0x88/0x660
[ 1817.458202][ T8030]  ? ip6_mc_add_src+0x748/0xfc0
[ 1817.458318][ T8030]  ip6_mc_add_src+0x748/0xfc0
[ 1817.458358][ T8030]  ip6_mc_source+0x12b2/0x1790
[ 1817.458397][ T8030]  do_ipv6_mcast_group_source+0x435/0x4c0
[ 1817.458452][ T8030]  ? __pfx_do_ipv6_mcast_group_source+0x10/0x10
[ 1817.458482][ T8030]  ? is_bpf_text_address+0x26/0x2b0
[ 1817.458512][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458536][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458557][ T8030]  ? lock_release+0x4b/0x3c0
[ 1817.458587][ T8030]  ? lock_release+0x4b/0x3c0
[ 1817.458620][ T8030]  ? is_bpf_text_address+0x292/0x2b0
[ 1817.458651][ T8030]  ? aa_file_perm+0x18b/0x15f0
[ 1817.458673][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458709][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458730][ T8030]  ? do_ipv6_setsockopt+0x8e0/0x3180
[ 1817.458755][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458777][ T8030]  ? trace_irq_enable+0x3b/0x140
[ 1817.458806][ T8030]  do_ipv6_setsockopt+0x1768/0x3180
[ 1817.458836][ T8030]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 1817.458861][ T8030]  ? get_pid_task+0x20/0x1f0
[ 1817.458882][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.458903][ T8030]  ? lock_release+0x4b/0x3c0
[ 1817.458931][ T8030]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1817.458961][ T8030]  ? preempt_count_add+0x91/0x190
[ 1817.458999][ T8030]  ? rcu_is_watching+0x15/0xb0
[ 1817.459020][ T8030]  ? lock_release+0x4b/0x3c0
[ 1817.459054][ T8030]  ? aa_sk_perm+0x6d5/0x900
[ 1817.459088][ T8030]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1817.459118][ T8030]  ? lock_release+0x4b/0x3c0
[ 1817.459149][ T8030]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1817.459188][ T8030]  ipv6_setsockopt+0x59/0x170
[ 1817.459213][ T8030]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1817.459240][ T8030]  do_sock_setsockopt+0x17c/0x1b0
[ 1817.459271][ T8030]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1817.459302][ T8030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.459324][ T8030]  do_syscall_64+0x174/0x580
[ 1817.459351][ T8030]  ? trace_irq_disable+0x3b/0x140
[ 1817.459377][ T8030]  ? clear_bhb_loop+0x40/0x90
[ 1817.459401][ T8030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.459422][ T8030] RIP: 0033:0x7fd1acd9ce59
[ 1817.459442][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1817.459461][ T8030] RSP: 002b:00007fd1adc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1817.459484][ T8030] RAX: ffffffffffffffda RBX: 00007fd1ad015fa0 RCX: 00007fd1acd9ce59
[ 1817.459500][ T8030] RDX: 000000000000002b RSI: 0000000000000029 RDI: 0000000000000004
[ 1817.459513][ T8030] RBP: 00007fd1adc4b090 R08: 0000000000000108 R09: 0000000000000000
[ 1817.459527][ T8030] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 1817.459540][ T8030] R13: 00007fd1ad016038 R14: 00007fd1ad015fa0 R15: 00007fff9a5fcd58
[ 1817.459565][ T8030]  </TASK>
[ 1817.916557][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.027933][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.159057][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.275876][ T8044] syzkaller0: entered promiscuous mode
[ 1818.281401][ T8044] syzkaller0: entered allmulticast mode
[ 1818.355696][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.491418][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.518193][T13220] Bluetooth: hci3: link tx timeout
[ 1818.524757][T13220] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1818.630328][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1818.703104][ T8063] lo speed is unknown, defaulting to 1000
[ 1818.709908][ T8063] lo speed is unknown, defaulting to 1000
[ 1818.850602][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1819.069599][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1819.438870][ T8092] xt_hashlimit: size too large, truncated to 1048576
[ 1819.458638][ T7683] udevd[7683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1819.621804][ T8097] netlink: 'syz.4.20834': attribute type 1 has an invalid length.
[ 1819.636029][ T8097] geneve2: entered promiscuous mode
[ 1819.641307][ T8097] geneve2: entered allmulticast mode
[ 1820.073430][ T8115] __nla_validate_parse: 6 callbacks suppressed
[ 1820.073474][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20840'.
[ 1820.096363][ T8105] team0: No ports can be present during mode change
[ 1820.299854][ T8122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20841'.
[ 1820.383303][ T8118] syzkaller0: entered promiscuous mode
[ 1820.388926][ T8118] syzkaller0: entered allmulticast mode
[ 1820.430372][ T8118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1820.453798][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20842'.
[ 1820.481403][ T8118] netlink: 660 bytes leftover after parsing attributes in process `syz.2.20842'.
[ 1820.568049][ T8117] tipc: Resetting bearer <eth:syzkaller0>
[ 1820.592311][ T8117] tipc: Disabling bearer <eth:syzkaller0>
[ 1820.627874][ T4781] Bluetooth: hci3: command 0x0406 tx timeout
[ 1820.985713][ T8141] sit0: left promiscuous mode
[ 1821.034806][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1821.044063][ T8143] nbd: must specify at least one socket
[ 1821.131036][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1821.140116][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1821.149906][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1821.158891][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20850'.
[ 1821.382346][ T8141] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[ 1821.532877][ T8141] ip6gre1: left promiscuous mode
[ 1821.538608][ T8141] ip6gre1: left allmulticast mode
[ 1821.547827][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20855'.
[ 1821.556936][ T8161] netlink: 'syz.1.20855': attribute type 26 has an invalid length.
[ 1821.562163][ T8141] dummy0: left allmulticast mode
[ 1821.570129][ T8141] macvlan3: left promiscuous mode
[ 1821.575277][ T8141] macvlan3: left allmulticast mode
[ 1821.588656][ T8141] bond4: left promiscuous mode
[ 1821.650085][ T8141] ip6tnl2: left allmulticast mode
[ 1821.785687][ T8141] ipvlan2: left allmulticast mode
[ 1821.790897][ T8141] bond6: left allmulticast mode
[ 1821.796683][ T8141] bond10: left allmulticast mode
[ 1821.801863][ T8141] ipip0: left promiscuous mode
[ 1821.806670][ T8141] ipip0: left allmulticast mode
[ 1821.812246][ T8141] ip6tnl4: left allmulticast mode
[ 1821.973778][   T13] net_ratelimit: 19 callbacks suppressed
[ 1821.973801][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1821.975313][ T8941] wlan1: Trigger new scan to find an IBSS to join
[ 1822.000718][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1822.014928][T13662] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1822.023865][T13662] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1822.032904][T13662] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1822.041812][T13662] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1822.050817][T13662] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1822.059722][T13662] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1822.068721][T13662] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1822.086615][T13662] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0
[ 1822.210870][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.226211][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1822.289878][ T8174] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1822.431240][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.592513][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1822.671635][T11659] Bluetooth: hci6: command 0x0405 tx timeout
[ 1822.722890][ T8192] ip6gre1: entered promiscuous mode
[ 1822.756438][ T8192] ip6gre1: entered allmulticast mode
[ 1822.852691][ T8198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1822.900297][ T3378] bond6: (slave batadv0): failed to get link speed/duplex
[ 1823.089924][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.141384][   T30] audit: type=1107 audit(1781748752.361:27): pid=8188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1823.250008][T13664] wlan1: Creating new IBSS network, BSSID de:c3:86:d0:56:47
[ 1823.277995][ T8209] pim6reg: entered allmulticast mode
[ 1823.334625][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1823.372330][T20390] syz_tun: tun_net_xmit 158
[ 1823.376987][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.674832][T20390] syz_tun: tun_net_xmit 158
[ 1824.295475][ T5215] batadv0: left promiscuous mode
[ 1824.722409][ T8265] syz_tun: tun_net_xmit 86
[ 1824.802734][ T8272] netlink: 'syz.4.20879': attribute type 1 has an invalid length.
[ 1824.910222][ T5215] wlan1: Trigger new scan to find an IBSS to join
[ 1824.990280][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1825.200646][ T8283] __nla_validate_parse: 5 callbacks suppressed
[ 1825.200688][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.220663][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.236078][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.266029][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.305872][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.338068][ T8286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20883'.
[ 1825.342938][ T8283] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.476703][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20884'.
[ 1825.487512][ T8289] bond5: option lacp_active: invalid value (8)
[ 1825.496905][ T8289] bond5 (unregistering): Released all slaves
[ 1825.623958][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20869'.
[ 1825.750729][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20882'.
[ 1825.839311][    C0] syz_tun: tun_net_xmit 86
[ 1825.890895][ T8322] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[ 1826.290981][ T8353] syzkaller0: entered promiscuous mode
[ 1826.296527][ T8353] syzkaller0: entered allmulticast mode
[ 1826.304985][ T8353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1826.329466][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1826.339855][    C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1826.370165][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1826.887539][ T8387] xt_l2tp: invalid flags combination: 8
[ 1826.903060][    C0] syz_tun: tun_net_xmit 86
[ 1826.909623][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1826.941605][T13662] net_ratelimit: 24 callbacks suppressed
[ 1826.941663][T13662] bond6: (slave batadv0): failed to get link speed/duplex
[ 1827.335434][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1827.347387][ T8391] syzkaller0: entered promiscuous mode
[ 1827.353016][ T8391] syzkaller0: entered allmulticast mode
[ 1827.382539][ T8391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1827.489516][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1827.543922][T20380] tipc: Node number set to 3758096385
[ 1827.625170][ T8390] tipc: Resetting bearer <eth:syzkaller0>
[ 1827.679704][T20391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.716783][ T8390] tipc: Disabling bearer <eth:syzkaller0>
[ 1827.778501][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1827.863088][ T8439] tipc: Resetting bearer <eth:syzkaller0>
[ 1827.869193][ T8439] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1827.884317][ T8442] netlink: 'syz.4.20922': attribute type 1 has an invalid length.
[ 1827.893571][ T8439] syzkaller0: entered allmulticast mode
[ 1827.959619][ T8442] bond5: entered promiscuous mode
[ 1827.976036][ T8442] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1827.992114][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1828.086899][ T8442] bond5: (slave bridge8): making interface the new active one
[ 1828.095625][ T8442] bridge8: entered promiscuous mode
[ 1828.106734][ T8442] bond5: (slave bridge8): Enslaving as an active interface with an up link
[ 1828.381864][ T8463] netlink: 'syz.5.20930': attribute type 4 has an invalid length.
[ 1828.451134][T13662] bond6: (slave batadv0): failed to get link speed/duplex
[ 1828.569963][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1828.678781][   T30] audit: type=1804 audit(1781748757.901:28): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.20935" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=497 res=1 errno=0
[ 1828.740712][   T30] audit: type=1800 audit(1781748757.921:29): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.20935" name="cgroup.controllers" dev="tmpfs" ino=497 res=0 errno=0
[ 1828.775027][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1828.804986][ T5216] bond6: (slave batadv0): failed to get link speed/duplex
[ 1828.841776][T13664] wlan1: Trigger new scan to find an IBSS to join
[ 1828.965418][ T8497] No such timeout policy "syz1"
[ 1828.972558][ T8498] netlink: 'syz.1.20938': attribute type 30 has an invalid length.
[ 1829.036495][ T8499] netlink: 'syz.1.20938': attribute type 30 has an invalid length.
[ 1829.887328][ T5211] wlan1: Creating new IBSS network, BSSID 06:47:10:65:42:13
[ 1830.055370][ T8530] syz_tun: entered allmulticast mode
[ 1830.077884][ T8530] bond0: entered promiscuous mode
[ 1830.094173][ T8530] vlan3: entered promiscuous mode
[ 1830.167675][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1830.243573][ T8532] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1830.672287][ T8539] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[ 1830.723212][ T8539] bond6 (unregistering): Released all slaves
[ 1831.294440][ T8570] __nla_validate_parse: 21 callbacks suppressed
[ 1831.294492][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20957'.
[ 1831.516469][ T8576] netlink: 'syz.1.20959': attribute type 1 has an invalid length.
[ 1831.623920][ T8576] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1831.871738][ T8582] bond11: (slave veth15): Enslaving as an active interface with a down link
[ 1831.947885][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1831.957233][T20391] net_ratelimit: 14 callbacks suppressed
[ 1831.957275][T20391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1831.986516][ T8576] bond11: (slave batadv1): making interface the new active one
[ 1831.999156][ T8576] batadv1: entered promiscuous mode
[ 1832.006239][ T8576] bond11: (slave batadv1): Enslaving as an active interface with an up link
[ 1832.026369][ T8592] xt_hashlimit: size too large, truncated to 1048576
[ 1832.035248][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.093700][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20965'.
[ 1832.166903][ T8598] lo: Caught tx_queue_len zero misconfig
[ 1832.195258][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.512127][ T5215] bond6: (slave batadv0): failed to get link speed/duplex
[ 1832.563443][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20970'.
[ 1832.575504][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20970'.
[ 1832.629604][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1832.665159][ T8612] netlink: 276 bytes leftover after parsing attributes in process `syz.4.20971'.
[ 1832.675680][    C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[ 1832.690163][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1832.717367][ T8612] 5nè: entered promiscuous mode
[ 1832.743771][ T8609] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[ 1832.764523][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1832.897136][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1832.948119][ T8616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.20973'.
[ 1833.017532][T20391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1833.311292][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1833.386017][ T8634] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1833.451025][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20978'.
[ 1833.470908][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20980'.
[ 1833.564619][ T8645] FAULT_INJECTION: forcing a failure.
[ 1833.564619][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1833.577719][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.0.20983 Not tainted syzkaller #0 PREEMPT(full) 
[ 1833.577745][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1833.577757][ T8645] Call Trace:
[ 1833.577765][ T8645]  <TASK>
[ 1833.577773][ T8645]  dump_stack_lvl+0xe8/0x150
[ 1833.577800][ T8645]  should_fail_ex+0x40c/0x560
[ 1833.577824][ T8645]  _copy_from_user+0x2d/0xb0
[ 1833.577852][ T8645]  bpf_test_init+0xd8/0x150
[ 1833.577883][ T8645]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[ 1833.577911][ T8645]  ? lock_release+0x4b/0x3c0
[ 1833.577941][ T8645]  ? rcu_is_watching+0x15/0xb0
[ 1833.577963][ T8645]  ? rcu_is_watching+0x15/0xb0
[ 1833.577983][ T8645]  ? lock_release+0x4b/0x3c0
[ 1833.578011][ T8645]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1833.578042][ T8645]  ? __fget_files+0x2a/0x420
[ 1833.578067][ T8645]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1833.578096][ T8645]  bpf_prog_test_run+0x2c5/0x340
[ 1833.578127][ T8645]  __sys_bpf+0x643/0x950
[ 1833.578154][ T8645]  ? __pfx___sys_bpf+0x10/0x10
[ 1833.578197][ T8645]  ? ksys_write+0x242/0x270
[ 1833.578224][ T8645]  ? __pfx_ksys_write+0x10/0x10
[ 1833.578251][ T8645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1833.578276][ T8645]  __x64_sys_bpf+0x7c/0x90
[ 1833.578299][ T8645]  do_syscall_64+0x174/0x580
[ 1833.578324][ T8645]  ? trace_irq_disable+0x3b/0x140
[ 1833.578352][ T8645]  ? clear_bhb_loop+0x40/0x90
[ 1833.578375][ T8645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1833.578393][ T8645] RIP: 0033:0x7fd593d9ce59
[ 1833.578410][ T8645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1833.578426][ T8645] RSP: 002b:00007fd591fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1833.578447][ T8645] RAX: ffffffffffffffda RBX: 00007fd594015fa0 RCX: 00007fd593d9ce59
[ 1833.578461][ T8645] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1833.578474][ T8645] RBP: 00007fd591fee090 R08: 0000000000000000 R09: 0000000000000000
[ 1833.578486][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1833.578497][ T8645] R13: 00007fd594016038 R14: 00007fd594015fa0 R15: 00007ffed5872b88
[ 1833.578522][ T8645]  </TASK>
[ 1833.867244][ T8649] netlink: 'syz.4.20985': attribute type 2 has an invalid length.
[ 1834.044733][ T8656] netlink: 'syz.0.20986': attribute type 2 has an invalid length.
[ 1834.142953][ T8656] netlink: 'syz.0.20986': attribute type 1 has an invalid length.
[ 1834.174371][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20986'.
[ 1834.191607][ T8656] bond1: (slave bridge1): making interface the new active one
[ 1834.232305][ T8656] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1834.452440][ T8664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20991'.
[ 1834.847635][ T8682] FAULT_INJECTION: forcing a failure.
[ 1834.847635][ T8682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1834.879546][ T8682] CPU: 0 UID: 0 PID: 8682 Comm: syz.2.20997 Not tainted syzkaller #0 PREEMPT(full) 
[ 1834.879577][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1834.879591][ T8682] Call Trace:
[ 1834.879600][ T8682]  <TASK>
[ 1834.879617][ T8682]  dump_stack_lvl+0xe8/0x150
[ 1834.879646][ T8682]  should_fail_ex+0x40c/0x560
[ 1834.879671][ T8682]  _copy_to_user+0x31/0xb0
[ 1834.879701][ T8682]  bpf_test_finish+0x1db/0x6b0
[ 1834.879738][ T8682]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1834.879771][ T8682]  ? _copy_from_user+0x94/0xb0
[ 1834.879798][ T8682]  ? bpf_test_init+0x113/0x150
[ 1834.879827][ T8682]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[ 1834.879859][ T8682]  ? lock_release+0x4b/0x3c0
[ 1834.879893][ T8682]  ? rcu_is_watching+0x15/0xb0
[ 1834.879915][ T8682]  ? lock_release+0x4b/0x3c0
[ 1834.879944][ T8682]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1834.879977][ T8682]  ? __fget_files+0x2a/0x420
[ 1834.880003][ T8682]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1834.880034][ T8682]  bpf_prog_test_run+0x2c5/0x340
[ 1834.880067][ T8682]  __sys_bpf+0x643/0x950
[ 1834.880096][ T8682]  ? __pfx___sys_bpf+0x10/0x10
[ 1834.880132][ T8682]  ? ksys_write+0x242/0x270
[ 1834.880161][ T8682]  ? __pfx_ksys_write+0x10/0x10
[ 1834.880190][ T8682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1834.880212][ T8682]  __x64_sys_bpf+0x7c/0x90
[ 1834.880238][ T8682]  do_syscall_64+0x174/0x580
[ 1834.880266][ T8682]  ? clear_bhb_loop+0x40/0x90
[ 1834.880290][ T8682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1834.880310][ T8682] RIP: 0033:0x7fd1acd9ce59
[ 1834.880329][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1834.880347][ T8682] RSP: 002b:00007fd1adc4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1834.880371][ T8682] RAX: ffffffffffffffda RBX: 00007fd1ad015fa0 RCX: 00007fd1acd9ce59
[ 1834.880387][ T8682] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1834.880400][ T8682] RBP: 00007fd1adc4b090 R08: 0000000000000000 R09: 0000000000000000
[ 1834.880414][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1834.880426][ T8682] R13: 00007fd1ad016038 R14: 00007fd1ad015fa0 R15: 00007fff9a5fcd58
[ 1834.880451][ T8682]  </TASK>
[ 1835.378008][ T8668] netlink: 'syz.0.20993': attribute type 3 has an invalid length.
[ 1835.458348][ T8702] erspan0: entered promiscuous mode
[ 1835.468309][ T8698] erspan0: left promiscuous mode
[ 1835.702911][ T8718] sctp: [Deprecated]: syz.4.21012 (pid 8718) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1835.702911][ T8718] Use struct sctp_sack_info instead
[ 1835.738528][ T8723] nbd: must specify at least one socket
[ 1835.862279][ T8726] FAULT_INJECTION: forcing a failure.
[ 1835.862279][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1835.875382][ T8726] CPU: 1 UID: 0 PID: 8726 Comm: syz.4.21015 Not tainted syzkaller #0 PREEMPT(full) 
[ 1835.875415][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1835.875429][ T8726] Call Trace:
[ 1835.875438][ T8726]  <TASK>
[ 1835.875447][ T8726]  dump_stack_lvl+0xe8/0x150
[ 1835.875473][ T8726]  should_fail_ex+0x40c/0x560
[ 1835.875500][ T8726]  _copy_to_user+0x31/0xb0
[ 1835.875530][ T8726]  bpf_test_finish+0x22c/0x6b0
[ 1835.875566][ T8726]  ? __pfx_bpf_test_finish+0x10/0x10
[ 1835.875601][ T8726]  ? _copy_from_user+0x94/0xb0
[ 1835.875628][ T8726]  ? bpf_test_init+0x113/0x150
[ 1835.875659][ T8726]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[ 1835.875690][ T8726]  ? lock_release+0x4b/0x3c0
[ 1835.875722][ T8726]  ? rcu_is_watching+0x15/0xb0
[ 1835.875743][ T8726]  ? lock_release+0x4b/0x3c0
[ 1835.875770][ T8726]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1835.875803][ T8726]  ? __fget_files+0x2a/0x420
[ 1835.875829][ T8726]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1835.875859][ T8726]  bpf_prog_test_run+0x2c5/0x340
[ 1835.875889][ T8726]  __sys_bpf+0x643/0x950
[ 1835.875916][ T8726]  ? __pfx___sys_bpf+0x10/0x10
[ 1835.875951][ T8726]  ? ksys_write+0x242/0x270
[ 1835.875979][ T8726]  ? __pfx_ksys_write+0x10/0x10
[ 1835.876017][ T8726]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.876039][ T8726]  __x64_sys_bpf+0x7c/0x90
[ 1835.876064][ T8726]  do_syscall_64+0x174/0x580
[ 1835.876089][ T8726]  ? trace_irq_disable+0x3b/0x140
[ 1835.876116][ T8726]  ? clear_bhb_loop+0x40/0x90
[ 1835.876138][ T8726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1835.876158][ T8726] RIP: 0033:0x7f5763b9ce59
[ 1835.876176][ T8726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1835.876194][ T8726] RSP: 002b:00007f5761df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1835.876215][ T8726] RAX: ffffffffffffffda RBX: 00007f5763e15fa0 RCX: 00007f5763b9ce59
[ 1835.876230][ T8726] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1835.876243][ T8726] RBP: 00007f5761df6090 R08: 0000000000000000 R09: 0000000000000000
[ 1835.876256][ T8726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1835.876268][ T8726] R13: 00007f5763e16038 R14: 00007f5763e15fa0 R15: 00007ffef19d3fc8
[ 1835.876294][ T8726]  </TASK>
[ 1836.160123][ T8733] syzkaller0: entered promiscuous mode
[ 1836.165669][ T8733] syzkaller0: entered allmulticast mode
[ 1836.174005][ T8733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1836.181676][ T8732] tipc: Resetting bearer <eth:syzkaller0>
[ 1836.192758][ T8732] tipc: Disabling bearer <eth:syzkaller0>
[ 1836.348246][ T8744] __nla_validate_parse: 5 callbacks suppressed
[ 1836.348268][ T8744] netlink: 52 bytes leftover after parsing attributes in process `syz.5.21022'.
[ 1836.377194][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21022'.
[ 1836.724936][ T8761] syz_tun: tun_net_xmit 86
[ 1836.755626][ T8765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21029'.
[ 1837.130626][T13664] net_ratelimit: 25 callbacks suppressed
[ 1837.130663][T13664] bond6: (slave batadv0): failed to get link speed/duplex
[ 1837.151098][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1837.162897][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1837.213013][ T8775] netlink: 64 bytes leftover after parsing attributes in process `syz.5.21032'.
[ 1837.342506][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1837.395424][T20391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1837.459555][ T8941] bond6: (slave batadv0): failed to get link speed/duplex
[ 1837.545735][ T8791] netlink: zone id is out of range
[ 1837.552532][ T8791] netlink: zone id is out of range
[ 1837.558170][ T8791] netlink: zone id is out of range
[ 1837.567475][T20382] syz_tun: tun_net_xmit 106
[ 1837.581827][ T8791] netlink: zone id is out of range
[ 1837.601293][ T8791] netlink: zone id is out of range
[ 1837.621072][ T8792] bond0: (slave vlan4): Enslaving as an active interface with an up link
[ 1837.621616][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21038'.
[ 1837.663471][ T8797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.21038'.
[ 1837.730483][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21039'.
[ 1837.757082][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21043'.
[ 1837.772731][ T8788] lo speed is unknown, defaulting to 1000
[ 1837.780732][ T8788] lo speed is unknown, defaulting to 1000
[ 1837.821516][    C0] syz_tun: tun_net_xmit 86
[ 1837.833557][T20382] syz_tun: tun_net_xmit 158
[ 1837.838361][ T8805] netlink: 76 bytes leftover after parsing attributes in process `syz.2.21043'.
[ 1837.850197][ T8805] xt_TCPMSS: Only works on TCP SYN packets
[ 1838.119788][ T8823] mac80211_hwsim hwsim220 wlan0: entered promiscuous mode
[ 1838.127961][ T8823] mac80211_hwsim hwsim220 wlan0: entered allmulticast mode
[ 1838.233174][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21051'.
[ 1838.308928][ T8825] vlan3: entered promiscuous mode
[ 1838.316535][ T8825] geneve1: entered promiscuous mode
[ 1838.322367][ T8825] vlan3: entered allmulticast mode
[ 1838.327771][ T8825] geneve1: entered allmulticast mode
[ 1838.333878][ T8827] erspan0: entered promiscuous mode
[ 1838.347254][ T8827] syzkaller1: entered promiscuous mode
[ 1838.384061][ T8827] syzkaller1: entered allmulticast mode
[ 1838.394913][ T8827] erspan0: left promiscuous mode
[ 1838.825639][ T8846] FAULT_INJECTION: forcing a failure.
[ 1838.825639][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1838.835021][T20382] syz_tun: tun_net_xmit 158
[ 1838.843483][T20382] syz_tun: tun_net_xmit 86
[ 1838.879830][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.1.21058 Not tainted syzkaller #0 PREEMPT(full) 
[ 1838.879859][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1838.879871][ T8846] Call Trace:
[ 1838.879879][ T8846]  <TASK>
[ 1838.879887][ T8846]  dump_stack_lvl+0xe8/0x150
[ 1838.879914][ T8846]  should_fail_ex+0x40c/0x560
[ 1838.879937][ T8846]  _copy_from_user+0x2d/0xb0
[ 1838.879965][ T8846]  ___sys_recvmsg+0x173/0x5a0
[ 1838.880000][ T8846]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1838.880034][ T8846]  ? __fget_files+0x2a/0x420
[ 1838.880057][ T8846]  ? rcu_is_watching+0x15/0xb0
[ 1838.880087][ T8846]  ? rcu_is_watching+0x15/0xb0
[ 1838.880108][ T8846]  ? lock_release+0x4b/0x3c0
[ 1838.880137][ T8846]  ? __might_fault+0xcb/0x130
[ 1838.880163][ T8846]  do_recvmmsg+0x31a/0x7f0
[ 1838.880209][ T8846]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1838.880246][ T8846]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1838.880275][ T8846]  ? __fget_files+0x3a2/0x420
[ 1838.880303][ T8846]  __x64_sys_recvmmsg+0x198/0x250
[ 1838.880336][ T8846]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1838.880370][ T8846]  ? rcu_is_watching+0x15/0xb0
[ 1838.880390][ T8846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1838.880412][ T8846]  do_syscall_64+0x174/0x580
[ 1838.880439][ T8846]  ? clear_bhb_loop+0x40/0x90
[ 1838.880462][ T8846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1838.880483][ T8846] RIP: 0033:0x7f117219ce59
[ 1838.880502][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1838.880521][ T8846] RSP: 002b:00007f1172f7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1838.880542][ T8846] RAX: ffffffffffffffda RBX: 00007f1172415fa0 RCX: 00007f117219ce59
[ 1838.880557][ T8846] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003
[ 1838.880570][ T8846] RBP: 00007f1172f7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1838.880583][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1838.880595][ T8846] R13: 00007f1172416038 R14: 00007f1172415fa0 R15: 00007fff8968df68
[ 1838.880621][ T8846]  </TASK>
[ 1839.470695][T20391] syz_tun: tun_net_xmit 158
[ 1839.673423][ T8880] netlink: 'syz.5.21070': attribute type 1 has an invalid length.
[ 1839.920775][T20391] syz_tun: tun_net_xmit 158
[ 1840.989632][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1841.586283][ T8936] syz_tun: tun_net_xmit 86
[ 1841.697434][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1841.721601][ T8936] __nla_validate_parse: 14 callbacks suppressed
[ 1841.721626][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21082'.
[ 1842.141105][ T5211] net_ratelimit: 390 callbacks suppressed
[ 1842.141160][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1842.276797][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1842.390395][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1842.482514][ T8968] bond0: Caught tx_queue_len zero misconfig
[ 1842.549820][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1842.572857][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21093'.
[ 1842.600216][    C0] syz_tun: tun_net_xmit 86
[ 1842.638614][ T8973] geneve1: entered promiscuous mode
[ 1842.728380][T20391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1842.736815][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21095'.
[ 1842.826200][ T8976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21095'.
[ 1842.835393][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21095'.
[ 1842.980083][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1843.069369][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21096'.
[ 1843.090253][T19947] bond6: (slave batadv0): failed to get link speed/duplex
[ 1843.244955][   T13] bond6: (slave batadv0): failed to get link speed/duplex
[ 1843.250195][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1843.365110][ T5211] bond6: (slave batadv0): failed to get link speed/duplex
[ 1843.682094][    C0] syz_tun: tun_net_xmit 86
[ 1844.088592][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21099'.
[ 1844.150555][ T8988] syzkaller1: entered promiscuous mode
[ 1844.156580][ T8988] syzkaller1: entered allmulticast mode
[ 1844.411307][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21100'.
[ 1844.884032][ T8943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1845.009918][ T8995] netlink: 'syz.2.21102': attribute type 1 has an invalid length.
[ 1845.149099][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1845.174907][ T9000] 8021q: adding VLAN 0 to HW filter on device team0
[ 1846.012756][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21109'.
[ 1846.023708][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21109'.
[ 1846.074138][ T9026] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001
[ 1847.390098][T20390] net_ratelimit: 25 callbacks suppressed
[ 1847.390133][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1847.951854][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1848.991332][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1849.311961][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1849.950202][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1850.030205][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1850.429891][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1851.070848][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1852.120605][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1853.152559][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1853.469863][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1854.191859][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.231136][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1856.270070][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1856.350612][ T5211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1856.512732][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1857.311134][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1858.269611][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1858.280129][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[ 1858.350287][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1859.390949][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1859.555397][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1859.564396][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1859.889115][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1860.431461][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1860.616051][ T4781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1860.624484][ T4781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1860.633812][ T4781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1860.642757][ T4781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1860.651743][ T4781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1860.674976][ T4781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1860.682381][ T4781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1860.689951][ T4781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1860.698116][ T4781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1860.705636][ T4781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1861.094446][T11659] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1861.102832][T11659] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1861.111391][T11659] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1861.121708][T11659] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1861.131619][T11659] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1861.188632][T11659] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1861.198814][T11659] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1861.210395][T11659] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1861.220447][T11659] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1861.231398][T11659] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1861.476611][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1861.532675][T11659] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1861.540192][T11659] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1861.547685][T11659] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1861.555623][T11659] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1861.566624][T11659] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1862.510336][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1862.589733][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1862.670117][T11659] Bluetooth: hci5: command tx timeout
[ 1862.778158][T11659] Bluetooth: hci7: command tx timeout
[ 1863.149531][ T4781] Bluetooth: hci8: command tx timeout
[ 1863.309857][ T4781] Bluetooth: hci9: command tx timeout
[ 1863.389882][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1863.402175][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1863.551413][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1863.559861][ T4781] Bluetooth: hci10: command tx timeout
[ 1864.592477][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1864.749764][ T4781] Bluetooth: hci5: command tx timeout
[ 1864.829950][ T4781] Bluetooth: hci7: command tx timeout
[ 1865.229971][ T4781] Bluetooth: hci8: command tx timeout
[ 1865.389820][ T4781] Bluetooth: hci9: command tx timeout
[ 1865.661326][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1865.712982][ T4781] Bluetooth: hci10: command tx timeout
[ 1865.719622][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1866.592206][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1866.707357][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1866.918720][ T4781] Bluetooth: hci5: command tx timeout
[ 1866.920929][T11659] Bluetooth: hci7: command tx timeout
[ 1867.351919][T11659] Bluetooth: hci8: command tx timeout
[ 1867.570583][T11659] Bluetooth: hci9: command tx timeout
[ 1867.710837][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1867.789586][T11659] Bluetooth: hci10: command tx timeout
[ 1868.513080][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1868.749802][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1868.763287][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1868.989515][T11659] Bluetooth: hci7: command tx timeout
[ 1868.991932][ T4781] Bluetooth: hci5: command tx timeout
[ 1869.150684][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1869.422474][ T4781] Bluetooth: hci8: command tx timeout
[ 1869.630249][ T4781] Bluetooth: hci9: command tx timeout
[ 1869.792691][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1869.907454][ T4781] Bluetooth: hci10: command tx timeout
[ 1870.830150][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1871.709667][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1871.870857][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1872.195463][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1872.913215][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1872.991685][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1873.629900][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1873.950974][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1874.270525][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1874.991116][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1875.232053][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1876.032257][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1877.070014][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1878.114367][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1878.270131][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1879.150428][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1879.391305][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1880.191558][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1881.229876][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1882.270856][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1882.439748][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1882.595093][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1883.230393][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1883.310805][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1883.872411][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1884.351706][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1885.400652][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1885.469950][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1886.441552][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1887.470082][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1888.350769][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1888.510888][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1888.519966][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1888.990042][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1888.994335][    C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured!
[ 1889.006351][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1889.550280][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1890.591659][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1890.916328][T30721] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1891.553657][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1891.630631][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1892.670917][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1892.830559][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1893.711712][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1894.592640][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1894.752388][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1895.790124][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1896.832200][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1897.630339][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1897.872009][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1898.911606][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1899.233258][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1899.950039][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1900.672217][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1900.991584][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1902.030510][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1902.430029][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1903.071746][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1903.710021][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1904.120549][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1904.352849][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1904.363074][    C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured!
[ 1905.150493][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1906.211016][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1906.749709][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1907.251098][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1908.313274][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1909.390233][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1909.796600][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1910.449497][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1911.470632][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1911.587889][ T4781] Bluetooth: hci3: command 0x0406 tx timeout
[ 1912.030012][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1912.549000][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1912.830382][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1913.550032][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1914.593562][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1914.597534][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1915.631016][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1915.870372][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1916.747568][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1917.790561][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1918.832357][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1918.910602][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1919.870775][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1920.349949][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1920.703039][ T4781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1920.711630][ T4781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1920.721063][ T4781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1920.730309][ T4781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1920.739082][ T4781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1920.788510][T11659] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1920.797184][T11659] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1920.806041][T11659] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1920.816461][T11659] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1920.825596][T11659] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1920.922189][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1921.119961][ T4781] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1921.128111][ T4781] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1921.136942][ T4781] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1921.145827][ T4781] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1921.154400][ T4781] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1921.179042][T11659] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1921.187501][T11659] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1921.197077][T11659] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1921.206895][T11659] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1921.216032][T11659] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1921.632830][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1921.685984][T11659] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1921.694789][T11659] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1921.707871][T11659] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1921.717790][T11659] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1921.726814][T11659] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1921.841527][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1921.950253][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1921.958876][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1922.830760][ T4781] Bluetooth: hci11: command tx timeout
[ 1922.910589][ T4781] Bluetooth: hci12: command tx timeout
[ 1922.989901][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1923.150876][ T4781] Bluetooth: hci13: command tx timeout
[ 1923.229564][ T4781] Bluetooth: hci14: command tx timeout
[ 1923.790329][ T4781] Bluetooth: hci15: command tx timeout
[ 1924.034983][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1924.849796][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1924.910406][ T4781] Bluetooth: hci11: command tx timeout
[ 1924.990078][ T4781] Bluetooth: hci12: command tx timeout
[ 1924.996294][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1925.072010][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1925.229710][ T4781] Bluetooth: hci13: command tx timeout
[ 1925.309847][ T4781] Bluetooth: hci14: command tx timeout
[ 1925.870246][ T4781] Bluetooth: hci15: command tx timeout
[ 1926.111855][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1926.990270][ T4781] Bluetooth: hci11: command tx timeout
[ 1927.070063][ T4781] Bluetooth: hci12: command tx timeout
[ 1927.150695][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1927.309561][ T4781] Bluetooth: hci13: command tx timeout
[ 1927.390051][ T4781] Bluetooth: hci14: command tx timeout
[ 1927.950072][ T4781] Bluetooth: hci15: command tx timeout
[ 1928.032342][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1928.190274][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1929.070103][ T4781] Bluetooth: hci11: command tx timeout
[ 1929.150587][ T4781] Bluetooth: hci12: command tx timeout
[ 1929.231440][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1929.389439][ T4781] Bluetooth: hci13: command tx timeout
[ 1929.469499][ T4781] Bluetooth: hci14: command tx timeout
[ 1929.949620][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1930.029908][ T4781] Bluetooth: hci15: command tx timeout
[ 1930.272114][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1931.069736][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1931.310127][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1932.350047][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1933.391325][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1934.109945][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1934.430321][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1934.438941][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1935.070119][    C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[ 1935.082438][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1935.472880][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1936.511317][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1937.550712][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1938.110251][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1938.591992][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1939.630364][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1940.196264][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1940.670162][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1941.149940][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1941.710509][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1942.752117][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1943.791336][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1944.194763][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1944.830386][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1945.309767][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1945.320446][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1945.333002][ T5211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1945.343185][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1945.353755][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1946.941301][  T808] net_ratelimit: 1 callbacks suppressed
[ 1946.941336][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1947.950844][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1948.434114][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1948.990504][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1949.790782][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.030001][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.433330][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.443022][ T5211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.453187][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1950.463086][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1952.110480][T20390] net_ratelimit: 4 callbacks suppressed
[ 1952.110515][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1952.351847][T13662] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1952.765462][ T3378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1953.164425][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1954.111716][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1954.191340][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1955.231220][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1956.270695][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1957.151233][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1957.311012][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1958.352085][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1959.391778][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1960.031528][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1960.189724][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1960.431011][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1961.471787][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1962.511166][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1963.231914][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1963.550893][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1964.591715][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1965.631061][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1966.285937][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1966.671247][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1967.713190][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1967.869671][T11659] Bluetooth: hci6: command 0x0405 tx timeout
[ 1968.751349][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1969.310450][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1969.630125][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1969.791308][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1970.831758][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1971.871096][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1972.350337][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1972.910955][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1973.951956][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1974.990829][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1975.000420][T30721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1975.010922][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1975.022033][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1975.391696][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1976.109960][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1977.150398][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1978.190766][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1978.430208][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1979.231950][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1979.240571][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1980.269752][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1980.698569][T11659] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1980.715209][T11659] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1980.724786][T11659] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1980.733827][T11659] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1980.742515][T11659] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1980.763965][T11659] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1980.772394][T11659] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1980.780876][T11659] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1980.790256][T11659] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1980.798881][T11659] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1981.263902][ T9108] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 1981.272189][ T9108] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 1981.291882][ T9107] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 1981.297003][ T9113] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[ 1981.307640][ T9115] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 1981.315971][ T9113] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[ 1981.323464][ T9113] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[ 1981.331560][ T9113] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[ 1981.339323][ T9113] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[ 1981.349611][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1981.366658][ T9115] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 1981.473883][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1981.781775][ T9115] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[ 1981.790650][ T9115] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[ 1981.798622][ T9115] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[ 1981.807125][ T9115] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[ 1981.814761][ T9115] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[ 1982.441966][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1982.869481][ T9115] Bluetooth: hci16: command tx timeout
[ 1982.875111][ T9109] Bluetooth: hci17: command tx timeout
[ 1983.298777][ T9109] Bluetooth: hci7: command 0x0406 tx timeout
[ 1983.303798][ T9115] Bluetooth: hci8: command 0x0406 tx timeout
[ 1983.306421][ T9108] Bluetooth: hci5: command 0x0406 tx timeout
[ 1983.401996][ T4781] Bluetooth: hci18: command tx timeout
[ 1983.401995][T11659] Bluetooth: hci19: command tx timeout
[ 1983.522652][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1983.855656][ T5216] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1983.972715][T11659] Bluetooth: hci20: command tx timeout
[ 1984.352372][ T5216] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1984.510279][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1984.589710][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1984.909632][T11659] Bluetooth: hci17: command tx timeout
[ 1984.915405][ T4781] Bluetooth: hci16: command tx timeout
[ 1985.469606][T11659] Bluetooth: hci18: command tx timeout
[ 1985.474590][ T4781] Bluetooth: hci19: command tx timeout
[ 1985.632059][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1986.029450][ T4781] Bluetooth: hci20: command tx timeout
[ 1986.669786][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1986.989885][ T9109] Bluetooth: hci17: command tx timeout
[ 1986.989890][T11659] Bluetooth: hci16: command tx timeout
[ 1987.549544][ T9109] Bluetooth: hci18: command tx timeout
[ 1987.555513][T11659] Bluetooth: hci19: command tx timeout
[ 1987.562123][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1987.709645][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1988.109435][T11659] Bluetooth: hci20: command tx timeout
[ 1988.351232][T11659] Bluetooth: hci10: command 0x0406 tx timeout
[ 1988.352393][ T9109] Bluetooth: hci9: command 0x0406 tx timeout
[ 1988.760052][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1988.829769][T20382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1988.832655][   T31] INFO: task kworker/0:15:20391 blocked for more than 143 seconds.
[ 1988.846707][   T31]       Not tainted syzkaller #0
[ 1988.852182][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1988.861447][   T31] task:kworker/0:15    state:D stack:24312 pid:20391 tgid:20391 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1988.874225][   T31] Workqueue: events netdev_rx_mode_work
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1988.880197][   T31] Call Trace:
[ 1988.884361][   T31]  <TASK>
[ 1988.887601][   T31]  __schedule+0x17d9/0x56c0
[ 1988.893465][   T31]  ? kasan_save_track+0x4f/0x80
[ 1988.898747][   T31]  ? kasan_save_track+0x3e/0x80
[ 1988.904019][   T31]  ? kasan_save_free_info+0x40/0x50
[ 1988.909648][   T31]  ? __kasan_slab_free+0x5c/0x80
[ 1988.914996][   T31]  ? kfree+0x1c5/0x640
[ 1988.919442][   T31]  ? iterate_cleanup_work+0x110/0x180
[ 1988.924854][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1988.929916][   T31]  ? __pfx___schedule+0x10/0x10
[ 1988.934799][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1988.939620][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1988.944418][   T31]  ? lock_release+0x4b/0x3c0
[ 1988.949078][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1988.953866][   T31]  ? schedule+0x90/0x360
[ 1988.958142][   T31]  ? trace_irq_enable+0x3b/0x140
[ 1988.963119][   T31]  schedule+0x164/0x360
[ 1988.967320][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1988.972824][   T31]  __mutex_lock+0x7bf/0x1550
[ 1988.977462][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1988.982294][   T31]  ? netdev_rx_mode_work+0x18/0x3c0
[ 1988.987527][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1988.992612][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1988.998021][   T31]  ? pwq_dec_nr_in_flight+0xb93/0xf20
[ 1989.003427][   T31]  ? process_scheduled_works+0xa20/0x14e0
[ 1989.009182][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.013990][   T31]  ? lock_acquire+0x5f/0x350
[ 1989.019271][   T31]  ? process_scheduled_works+0xa20/0x14e0
[ 1989.033782][   T31]  netdev_rx_mode_work+0x18/0x3c0
[ 1989.038882][   T31]  ? process_scheduled_works+0xa20/0x14e0
[ 1989.044644][   T31]  process_scheduled_works+0xa8e/0x14e0
[ 1989.050238][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1989.056249][   T31]  ? move_linked_works+0x218/0x230
[ 1989.061393][   T31]  ? assign_work+0x3cf/0x5d0
[ 1989.066021][   T31]  worker_thread+0xa47/0xfb0
[ 1989.070674][   T31]  ? __kthread_parkme+0x71/0x1f0
[ 1989.077914][ T9108] Bluetooth: hci16: command tx timeout
[ 1989.084910][   T31]  kthread+0x388/0x470
[ 1989.089037][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1989.094192][   T31]  ? __pfx_kthread+0x10/0x10
[ 1989.098824][   T31]  ret_from_fork+0x514/0xb70
[ 1989.103449][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1989.108584][   T31]  ? __switch_to+0xc89/0x1420
[ 1989.113334][   T31]  ? __pfx_kthread+0x10/0x10
[ 1989.117983][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1989.122794][   T31]  </TASK>
[ 1989.125886][   T31] INFO: task kworker/u8:3:13664 blocked for more than 143 seconds.
[ 1989.141698][ T9108] Bluetooth: hci17: command tx timeout
[ 1989.144341][   T31]       Not tainted syzkaller #0
[ 1989.152267][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1989.160962][   T31] task:kworker/u8:3    state:D stack:22328 pid:13664 tgid:13664 ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1989.173018][   T31] Workqueue: ipv6_addrconf addrconf_dad_work
[ 1989.179058][   T31] Call Trace:
[ 1989.182400][   T31]  <TASK>
[ 1989.185358][   T31]  __schedule+0x17d9/0x56c0
[ 1989.189894][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.194995][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.200377][   T31]  ? irqentry_exit+0x218/0x8f0
[ 1989.205220][   T31]  ? trace_irq_disable+0x3b/0x140
[ 1989.210297][   T31]  ? __pfx___schedule+0x10/0x10
[ 1989.215188][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.219989][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.224780][   T31]  ? lock_release+0x4b/0x3c0
[ 1989.229408][   T31]  ? wq_worker_sleeping+0x66/0x250
[ 1989.234559][   T31]  schedule+0x164/0x360
[ 1989.238751][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1989.258185][   T31]  __mutex_lock+0x7bf/0x1550
[ 1989.262892][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1989.267700][   T31]  ? addrconf_dad_work+0x116/0x15c0
[ 1989.272936][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1989.278001][   T31]  ? trace_irq_enable+0x3b/0x140
[ 1989.282989][   T31]  addrconf_dad_work+0x116/0x15c0
[ 1989.288059][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1989.293472][   T31]  ? pwq_dec_nr_in_flight+0xb93/0xf20
[ 1989.298893][   T31]  ? __pfx_addrconf_dad_work+0x10/0x10
[ 1989.304395][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.309190][   T31]  ? lock_acquire+0x5f/0x350
[ 1989.314562][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.319382][   T31]  ? process_scheduled_works+0xa20/0x14e0
[ 1989.325148][   T31]  process_scheduled_works+0xa8e/0x14e0
[ 1989.330767][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1989.336799][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1989.341874][   T31]  ? assign_work+0x3cf/0x5d0
[ 1989.346508][   T31]  worker_thread+0xa47/0xfb0
[ 1989.367642][   T31]  ? __kthread_parkme+0x71/0x1f0
[ 1989.372787][   T31]  kthread+0x388/0x470
[ 1989.376889][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1989.382034][   T31]  ? __pfx_kthread+0x10/0x10
[ 1989.386669][   T31]  ret_from_fork+0x514/0xb70
[ 1989.391291][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1989.396429][   T31]  ? __switch_to+0xc89/0x1420
[ 1989.401150][   T31]  ? __pfx_kthread+0x10/0x10
[ 1989.405766][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1989.410577][   T31]  </TASK>
[ 1989.413774][   T31] INFO: task syz.2.21102:9000 blocked for more than 143 seconds.
[ 1989.421535][   T31]       Not tainted syzkaller #0
[ 1989.427456][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1989.436836][   T31] task:syz.2.21102     state:D stack:22592 pid:9000  tgid:8993  ppid:1722   task_flags:0x400140 flags:0x00080002
[ 1989.448831][   T31] Call Trace:
[ 1989.452147][   T31]  <TASK>
[ 1989.455110][   T31]  __schedule+0x17d9/0x56c0
[ 1989.478162][   T31]  ? kasan_save_track+0x4f/0x80
[ 1989.483809][   T31]  ? netlink_broadcast_filtered+0xd9d/0xea0
[ 1989.490555][   T31]  ? ip_mc_up+0x115/0x2e0
[ 1989.495369][   T31]  ? vlan_device_event+0x1b4e/0x1f00
[ 1989.501731][   T31]  ? notifier_call_chain+0x1a5/0x3d0
[ 1989.507457][   T31]  ? __dev_notify_flags+0x1aa/0x310
[ 1989.516011][   T31]  ? netif_change_flags+0xde/0x1b0
[ 1989.522078][   T31]  ? do_setlink+0xdd6/0x4670
[ 1989.527056][   T31]  ? rtnl_newlink+0x148e/0x1bd0
[ 1989.533416][   T31]  ? netlink_sendmsg+0x813/0xb40
[ 1989.538788][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1989.547076][   T31]  ? __pfx___schedule+0x10/0x10
[ 1989.552679][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.560014][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.565220][   T31]  ? lock_release+0x4b/0x3c0
[ 1989.570807][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.576037][   T31]  schedule+0x164/0x360
[ 1989.581124][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1989.587050][   T31]  __mutex_lock+0x7bf/0x1550
[ 1989.594202][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1989.599761][   T31]  ? __ethtool_get_link_ksettings+0x109/0x250
[ 1989.606330][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1989.612359][   T31]  ? igmp_group_added+0x238/0x910
[ 1989.617829][   T31]  ? igmpv3_del_delrec+0x204/0x710
[ 1989.623943][   T31]  __ethtool_get_link_ksettings+0x109/0x250
[ 1989.630697][   T31]  bond_netdev_event+0x643/0xf80
[ 1989.636172][   T31]  ? __pfx_bond_netdev_event+0x10/0x10
[ 1989.644655][   T31]  ? __pfx_inetdev_event+0x10/0x10
[ 1989.650502][   T31]  ? preempt_schedule_notrace+0x57/0x90
[ 1989.656494][   T31]  ? ipmr_device_event+0x1f6/0x220
[ 1989.662839][   T31]  notifier_call_chain+0x1a5/0x3d0
[ 1989.664566][ T9108] Bluetooth: hci19: command tx timeout
[ 1989.670605][   T31]  __dev_notify_flags+0x1aa/0x310
[ 1989.674109][ T9108] Bluetooth: hci18: command tx timeout
[ 1989.679095][   T31]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1989.690111][   T31]  ? __dev_change_flags+0x5f1/0x820
[ 1989.695359][   T31]  ? __pfx___dev_change_flags+0x10/0x10
[ 1989.701525][   T31]  netif_change_flags+0xde/0x1b0
[ 1989.706533][   T31]  dev_change_flags+0x128/0x260
[ 1989.711430][   T31]  vlan_device_event+0x1b4e/0x1f00
[ 1989.716604][   T31]  ? packet_notifier+0xf1b/0xf70
[ 1989.721594][   T31]  ? br_device_event+0x282/0x9c0
[ 1989.726586][   T31]  ? __pfx_phonet_device_notify+0x10/0x10
[ 1989.732346][   T31]  ? __pfx_vlan_device_event+0x10/0x10
[ 1989.737846][   T31]  ? bcm_notifier+0xa9/0x890
[ 1989.742479][   T31]  ? nlmsg_notify+0x142/0x1a0
[ 1989.747247][   T31]  ? raw_notifier+0x9d/0x7d0
[ 1989.751895][   T31]  ? cgw_notifier+0x314/0x380
[ 1989.756629][   T31]  notifier_call_chain+0x1a5/0x3d0
[ 1989.761792][   T31]  __dev_notify_flags+0x1aa/0x310
[ 1989.766867][   T31]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1989.782494][   T31]  ? __dev_change_flags+0x5f1/0x820
[ 1989.788249][   T31]  ? __pfx___dev_change_flags+0x10/0x10
[ 1989.794769][   T31]  ? netif_rx_mode_sync+0x15d/0x1e0
[ 1989.800763][   T31]  ? trace_irq_enable+0x3b/0x140
[ 1989.806380][   T31]  netif_change_flags+0xde/0x1b0
[ 1989.812302][   T31]  do_setlink+0xdd6/0x4670
[ 1989.817117][   T31]  ? __pfx_do_setlink+0x10/0x10
[ 1989.822982][   T31]  ? stack_trace_save+0xa9/0x100
[ 1989.828371][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1989.835219][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1989.845068][   T31]  ? __mutex_trylock_common+0x15f/0x270
[ 1989.851558][   T31]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1989.857980][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.863778][   T31]  ? trace_contention_end+0x3d/0x140
[ 1989.870046][   T31]  ? __mutex_lock+0x30d/0x1550
[ 1989.875252][   T31]  ? rtnl_newlink+0x8a3/0x1bd0
[ 1989.882364][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1989.892157][   T31]  ? ns_capable+0x89/0xe0
[ 1989.896916][   T31]  ? rtnl_link_get_net_capable+0xd3/0x310
[ 1989.903278][   T31]  rtnl_newlink+0x148e/0x1bd0
[ 1989.911165][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1989.916649][   T31]  ? __css_rstat_updated+0x235/0x540
[ 1989.922410][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1989.927850][   T31]  ? debug_object_activate+0xb7/0x410
[ 1989.933687][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.938862][   T31]  ? unwind_next_frame+0x8f/0x2550
[ 1989.945215][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.950429][   T31]  ? is_bpf_text_address+0x26/0x2b0
[ 1989.956063][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.961270][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1989.966418][   T31]  ? lock_release+0x4b/0x3c0
[ 1989.971442][   T31]  ? lock_release+0x4b/0x3c0
[ 1989.976440][   T31]  ? is_bpf_text_address+0x292/0x2b0
[ 1989.982211][   T31]  ? is_bpf_text_address+0x26/0x2b0
[ 1989.987889][   T31]  ? kernel_text_address+0xa5/0xe0
[ 1989.994341][   T31]  ? __kernel_text_address+0xd/0x30
[ 1990.000014][   T31]  ? unwind_get_return_address+0x4d/0x90
[ 1990.006076][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1990.015153][   T31]  ? arch_stack_walk+0xfb/0x150
[ 1990.020614][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1990.026189][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.031403][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1990.037798][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.043005][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1990.048439][   T31]  ? lock_release+0x4b/0x3c0
[ 1990.053429][   T31]  ? bpf_lsm_capable+0x9/0x20
[ 1990.058506][   T31]  ? security_capable+0x7e/0x2c0
[ 1990.065292][   T31]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1990.070789][   T31]  rtnetlink_rcv_msg+0x802/0xc00
[ 1990.076132][   T31]  ? kasan_save_track+0x3e/0x80
[ 1990.081508][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1990.087049][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1990.092977][   T31]  ? __netlink_lookup+0xc6/0x8b0
[ 1990.098326][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.104280][   T31]  netlink_rcv_skb+0x226/0x4a0
[ 1990.109482][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1990.115395][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1990.130714][   T31]  ? net_generic+0x1e/0x240
[ 1990.135669][   T31]  ? net_generic+0x1e/0x240
[ 1990.141049][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1990.146686][   T31]  netlink_unicast+0x7bb/0x940
[ 1990.151918][   T31]  netlink_sendmsg+0x813/0xb40
[ 1990.157082][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1990.162812][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1990.168149][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1990.174854][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1990.180671][   T31]  ____sys_sendmsg+0x9b9/0xa20
[ 1990.185843][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1990.191581][   T31]  ? lock_release+0x4b/0x3c0
[ 1990.196590][   T31]  ? import_iovec+0x73/0xa0
[ 1990.201503][   T31]  ___sys_sendmsg+0x2a5/0x360
[ 1990.206614][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1990.224514][ T4781] Bluetooth: hci20: command tx timeout
[ 1990.240202][   T31]  ? __fget_files+0x2a/0x420
[ 1990.265445][   T31]  ? __fget_files+0x3a2/0x420
[ 1990.277062][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[ 1990.282117][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[ 1990.287290][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1990.292911][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.297731][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1990.303853][   T31]  do_syscall_64+0x174/0x580
[ 1990.308500][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1990.313307][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1990.319236][   T31] RIP: 0033:0x7fd1acd9ce59
[ 1990.346073][   T31] RSP: 002b:00007fd1adc2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1990.355964][   T31] RAX: ffffffffffffffda RBX: 00007fd1ad016090 RCX: 00007fd1acd9ce59
[ 1990.364006][   T31] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 000000000000000b
[ 1990.372023][   T31] RBP: 00007fd1ace32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1990.380041][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1990.388045][   T31] R13: 00007fd1ad016128 R14: 00007fd1ad016090 R15: 00007fff9a5fcd58
[ 1990.396066][   T31]  </TASK>
[ 1990.399209][   T31] INFO: task syz.4.21105:9005 blocked for more than 144 seconds.
[ 1990.407022][   T31]       Not tainted syzkaller #0
[ 1990.412004][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1990.420664][   T31] task:syz.4.21105     state:D stack:27280 pid:9005  tgid:9004  ppid:2177   task_flags:0x400140 flags:0x00080002
[ 1990.432583][   T31] Call Trace:
[ 1990.435859][   T31]  <TASK>
[ 1990.438790][   T31]  __schedule+0x17d9/0x56c0
[ 1990.443310][   T31]  ? trace_irq_enable+0x3b/0x140
[ 1990.448251][   T31]  ? __pfx___schedule+0x10/0x10
[ 1990.453103][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.463589][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.468477][   T31]  ? lock_release+0x4b/0x3c0
[ 1990.473456][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.478496][   T31]  schedule+0x164/0x360
[ 1990.485114][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1990.491177][   T31]  __mutex_lock+0x7bf/0x1550
[ 1990.496171][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1990.501280][   T31]  ? rtnetlink_rcv_msg+0x767/0xc00
[ 1990.506776][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1990.512193][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1990.517362][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.522155][   T31]  ? lock_release+0x4b/0x3c0
[ 1990.526752][   T31]  ? bpf_lsm_capable+0x9/0x20
[ 1990.531430][   T31]  ? security_capable+0x7e/0x2c0
[ 1990.536397][   T31]  rtnetlink_rcv_msg+0x767/0xc00
[ 1990.541340][   T31]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1990.546453][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1990.551917][   T31]  ? ref_tracker_free+0x689/0x830
[ 1990.556945][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1990.562326][   T31]  netlink_rcv_skb+0x226/0x4a0
[ 1990.567098][   T31]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1990.572773][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1990.578086][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1990.583316][   T31]  netlink_unicast+0x7bb/0x940
[ 1990.588097][   T31]  netlink_sendmsg+0x813/0xb40
[ 1990.599064][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1990.604445][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1990.609621][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1990.615048][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1990.627310][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1990.636986][   T31]  ____sys_sendmsg+0x9b9/0xa20
[ 1990.641833][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1990.647229][   T31]  ? lock_release+0x4b/0x3c0
[ 1990.651863][   T31]  ? import_iovec+0x73/0xa0
[ 1990.656377][   T31]  ___sys_sendmsg+0x2a5/0x360
[ 1990.661067][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1990.666276][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1990.671575][   T31]  ? __fget_files+0x2a/0x420
[ 1990.676188][   T31]  ? __fget_files+0x3a2/0x420
[ 1990.680890][   T31]  __sys_sendmmsg+0x273/0x4d0
[ 1990.685576][   T31]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1990.690783][   T31]  ? do_futex+0x3e7/0x4e0
[ 1990.695159][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1990.699950][   T31]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1990.704809][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1990.710986][   T31]  do_syscall_64+0x174/0x580
[ 1990.715583][   T31]  ? trace_irq_disable+0x3b/0x140
[ 1990.720612][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1990.725291][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1990.739153][   T31] RIP: 0033:0x7f5763b9ce59
[ 1990.744151][   T31] RSP: 002b:00007f5761df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1990.752615][   T31] RAX: ffffffffffffffda RBX: 00007f5763e15fa0 RCX: 00007f5763b9ce59
[ 1990.760629][   T31] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006
[ 1990.768634][   T31] RBP: 00007f5763c32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1990.776698][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1990.784678][   T31] R13: 00007f5763e16038 R14: 00007f5763e15fa0 R15: 00007ffef19d3fc8
[ 1990.792659][   T31]  </TASK>
[ 1990.795749][   T31] INFO: lockdep is turned off.
[ 1990.800530][   T31] NMI backtrace for cpu 0
[ 1990.800543][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1990.800560][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1990.800569][   T31] Call Trace:
[ 1990.800576][   T31]  <TASK>
[ 1990.800583][   T31]  dump_stack_lvl+0xe8/0x150
[ 1990.800603][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1990.800620][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1990.800645][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1990.800661][   T31]  sys_info+0x135/0x170
[ 1990.800674][   T31]  watchdog+0xfd7/0x1030
[ 1990.800696][   T31]  ? watchdog+0x1c7/0x1030
[ 1990.800717][   T31]  kthread+0x388/0x470
[ 1990.800732][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1990.800749][   T31]  ? __pfx_kthread+0x10/0x10
[ 1990.800762][   T31]  ret_from_fork+0x514/0xb70
[ 1990.800778][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1990.800791][   T31]  ? __switch_to+0xc89/0x1420
[ 1990.800812][   T31]  ? __pfx_kthread+0x10/0x10
[ 1990.800826][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1990.800848][   T31]  </TASK>
[ 1990.800924][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1990.918299][    C1] NMI backtrace for cpu 1
[ 1990.918317][    C1] CPU: 1 UID: 0 PID: 5215 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[ 1990.918338][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1990.918350][    C1] Workqueue:  0x0 (events_unbound)
[ 1990.918376][    C1] RIP: 0010:update_se+0x3cf/0x1020
[ 1990.918404][    C1] Code: 07 3f 9b 00 49 83 7d 00 00 4c 8b 6c 24 48 74 0b 4c 89 e7 4c 89 f6 e8 40 a3 28 00 0f 1f 44 00 00 4c 89 f0 48 83 c4 58 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 8f be 11 0a 85 c0 74 87
[ 1990.918420][    C1] RSP: 0018:ffffc900051f78e0 EFLAGS: 00000092
[ 1990.918435][    C1] RAX: 0000000000000000 RBX: ffff888030aa1f80 RCX: 1ffff110170e75f1
[ 1990.918449][    C1] RDX: 1ffff110170e776c RSI: ffff888030aa1f80 RDI: ffff8880b873af80
[ 1990.918462][    C1] RBP: 000001910d786eec R08: ffffc900051f7c48 R09: 1ffffffff20622de
[ 1990.918475][    C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: ffff8880b873b050
[ 1990.918488][    C1] R13: 1ffff110061543fc R14: 0000000000000000 R15: ffff888030aa1fe0
[ 1990.918501][    C1] FS:  0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[ 1990.918516][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1990.918528][    C1] CR2: 0000559f226ebee8 CR3: 000000000e746000 CR4: 00000000003526f0
[ 1990.918545][    C1] Call Trace:
[ 1990.918553][    C1]  <TASK>
[ 1990.918561][    C1]  update_curr+0x6c/0x440
[ 1990.918590][    C1]  pick_task_fair+0x12d/0x1320
[ 1990.918617][    C1]  ? dequeue_entities+0x3528/0x3bc0
[ 1990.918640][    C1]  ? pwq_dec_nr_in_flight+0xb93/0xf20
[ 1990.918667][    C1]  __pick_next_task+0xdb/0x3c0
[ 1990.918689][    C1]  __schedule+0x901/0x56c0
[ 1990.918723][    C1]  ? __pfx___schedule+0x10/0x10
[ 1990.918743][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1990.918762][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1990.918780][    C1]  ? lock_release+0x4b/0x3c0
[ 1990.918807][    C1]  ? wq_worker_sleeping+0x66/0x250
[ 1990.918832][    C1]  schedule+0x164/0x360
[ 1990.918853][    C1]  worker_thread+0xc12/0xfb0
[ 1990.918883][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 1990.918911][    C1]  kthread+0x388/0x470
[ 1990.918927][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1990.918949][    C1]  ? __pfx_kthread+0x10/0x10
[ 1990.918965][    C1]  ret_from_fork+0x514/0xb70
[ 1990.918985][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1990.919001][    C1]  ? __switch_to+0xc89/0x1420
[ 1990.919026][    C1]  ? __pfx_kthread+0x10/0x10
[ 1990.919043][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1990.919071][    C1]  </TASK>
[ 1991.179349][T26025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1991.187772][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1991.194673][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1991.203786][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1991.213877][   T31] Call Trace:
[ 1991.217160][   T31]  <TASK>
[ 1991.220099][   T31]  vpanic+0x56c/0xa60
[ 1991.224098][   T31]  ? __pfx___schedule+0x10/0x10
[ 1991.228961][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1991.233466][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[ 1991.239722][   T31]  panic+0xc5/0xd0
[ 1991.243467][   T31]  ? __pfx_panic+0x10/0x10
[ 1991.248964][   T31]  ? preempt_schedule_common+0x82/0xd0
[ 1991.254459][   T31]  ? preempt_schedule_thunk+0x16/0x40
[ 1991.259854][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1991.266014][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1991.272173][   T31]  watchdog+0x1030/0x1030
[ 1991.276527][   T31]  ? watchdog+0x1c7/0x1030
[ 1991.280990][   T31]  kthread+0x388/0x470
[ 1991.285091][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1991.289799][   T31]  ? __pfx_kthread+0x10/0x10
[ 1991.294414][   T31]  ret_from_fork+0x514/0xb70
[ 1991.299047][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1991.304211][   T31]  ? __switch_to+0xc89/0x1420
[ 1991.309019][   T31]  ? __pfx_kthread+0x10/0x10
[ 1991.313672][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1991.318472][   T31]  </TASK>
[ 1991.322116][   T31] Kernel Offset: disabled
[ 1991.326451][   T31] Rebooting in 86400 seconds..