last executing test programs:

17.941123211s ago: executing program 1 (id=7735):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r8=>0x0) (async)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r13=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000140deecfc90f26b00949d469524127d72fb2d8931667a81688c4397541cb19c499b355c38e5b8cdcc7baaa3e1a750f9e6454a78bc1e119605", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40184) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r14=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000050400000000fddbdf2500000000", @ANYRES32=r14, @ANYBLOB="00000000000000002c001280080001006873720700010000000a000400aaaaaaaaaaaa00000800020000000000000000", @ANYRES32=r14, @ANYBLOB], 0x4c}}, 0x0)

17.776906285s ago: executing program 1 (id=7737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

17.696638844s ago: executing program 1 (id=7738):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r2, @ANYBLOB="ddc65930855c63ac1a874487bd978639d1f6634842f1ff6663cec88052250f3c9822", @ANYRESOCT=r2, @ANYBLOB="d23d4da941c3444a399de4978be78463e55d01a1db2ff87dab1afa313f10630703d80cb8468ddd6786931aa2bcf4fc507ffabac261fad25dd6391861422cbbd2d9aa574a2448e7693efe1692d1864c976faf35810dc3c01f1d61121996a7d2e42d379ddc0f9dea32aea9240014c0cf8a8f080a594552", @ANYRESOCT=r0, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000085000000610000008500"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendfile(r8, r9, 0x0, 0xffffffff000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r11, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef)

17.322324296s ago: executing program 1 (id=7745):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r4=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={r4, 0x7, 0x3, [0x5, 0x1, 0x5]}, &(0x7f0000000180)=0xe) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000780)={{&(0x7f0000000400)=[{0xfff, 0x8, 0xfffffffffffffffc, {0x6, 0x7}, 0x7, 0xb, 0x2}, {0x1, 0x0, 0x2, {0x6, 0x9a}, 0x2, 0x8000000000000000, 0x8f}, {0x9, 0x4, 0x3ff, {0x5, 0x6}, 0x100, 0x3, 0x800}, {0x4c29108c, 0x100, 0x0, {0x3, 0x8}, 0x9, 0x5, 0x1d2}], 0x4, 0x40, 0xa1, 0x4}, {&(0x7f0000000500)=[{0x2, 0x4}, {0xa9e2, 0xd1bc}, {0x5, 0x2}, {0x2, 0x6}, {0x9, 0x8000000000000001}], 0x5, 0x10, 0x5, 0x3}, {&(0x7f0000000580)=[0x2bd, 0xffff, 0x7, 0xffffffff], 0x4, 0x8, 0xd, 0x1}, {&(0x7f0000000640)=[{0x8000000000000001, 0x7, 0x2b026c4a, 0xffff, 0x9}, {0xfffffffffffffff4, 0x4, 0x40, 0x2, 0x9}, {0x100000001, 0x9, 0x2, 0xc3e, 0x8b}, {0x1000, 0x3, 0x10, 0x0, 0x2}, {0x10, 0x9, 0x0, 0x40, 0x3}], 0x5, 0x28, 0x8739, 0x291}, {&(0x7f0000000740)=[0x0, 0x275e, 0x200, 0x3], 0x4, 0x8, 0x6, 0x3ff}})

17.170954956s ago: executing program 2 (id=7747):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, 0x0, 0x62a1}}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r1=>0xffffffffffffffff}, 0x4)
socket(0xf, 0x808, 0x60000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

17.147922515s ago: executing program 1 (id=7748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0}], 0x1, 0x45800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af0ff00000000b70800000d0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

17.065973829s ago: executing program 2 (id=7750):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="08002cbd7000fcdbdf25010000000000000007410000004c0018ffffff7073797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10000000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000001400"/24], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0xfffffffffffffe5d, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x7, 0x10}, {0x5, 0xb}, {0x4, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x7, 0xd, 0x2, 0x4000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004070}, 0x8000)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
close(0xffffffffffffffff)
socket$unix(0x1, 0x2, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
mkdirat$cgroup(r8, &(0x7f0000000000)='syz1\x00', 0x1ff)
write$cgroup_devices(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* r'], 0xa)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000000)={0x20000008})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r2}, 0x18)

17.057046361s ago: executing program 1 (id=7751):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000001c0)=0x800, 0x12)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000400)={0xfffbfffc, 0x9, 0x1, 0x6}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000007c7077fa2a2a81996f1ac00f8460ff9c7bbe3acf05083ca41e46b27f54118e8e7d11362065bf5975b9e7261a35ab2dab2573f9d115ae0283129b3e9ecc9bd273a1965ed9913f72c06f1c5cbddd3", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xbb, 0x0, 0x0, 0x41000, 0x22}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1\x00'})
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x15, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'batadv0\x00', @broadcast})

16.879992081s ago: executing program 2 (id=7753):
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x5, 0x8, 0x6fb1, 0x29, 0x8, 0x5, 0x6, 0x8}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e4, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4bb1ac6172b3d63905d6838bdb3cfc28916eb1bb"}}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffc2fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff461}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa580000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4c4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4080}, 0x4e9706bdf8f9b9ce)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0xa8, 0x31, 0x100, 0x70bd26, 0x255fdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x808}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6a4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xa8}}, 0x4000050)

16.758930811s ago: executing program 2 (id=7755):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond0\x00', {0x2, 0x0, @broadcast}})
clock_gettime(0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2000000000000099, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="10ca63cd37b02dfd59ec0f2284604474529f4502ef345beab68e025dce3ffac7de2c1bfc8ae4fd36f73c5eff7fbe8880e0755c4158b4331bd703281374370a153f7999e61c9490c7d1a78304c93043b85a9a4b951ab8f9d623e2f65ece4260861351812c490e1a0bfa6ff9534d50ece8b72e0885e23df51b6c5f4c386a48cc24f1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94)
close(0x3)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000540)="8cc5a877977c8e1ab624fcd14491", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', <r4=>0x0, 0x7800, 0x1, 0x6, 0xf, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xf7, 0x1, 0xf, [{@remote, 0x40000}, {@private=0xa010101, 0x3c}, {@local, 0x10}]}, @noop, @noop, @timestamp={0x44, 0x18, 0x54, 0x0, 0x8, [0x7, 0x0, 0x1, 0xc629, 0xfff]}, @timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x7, [{@local, 0x3}]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1d, 0x46, 0x4, 0x0, 0x4, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)

16.68194488s ago: executing program 3 (id=7757):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000680)={{<r2=>r0, &(0x7f0000000080)='AUDIT\x00', 0x402100, &(0x7f0000000100)={@align, {0x10, 0x6, 0x0, 0x1}}, 0xffffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4800000}, 0x4, &(0x7f0000000600)=[{0x1, 0xab7b, &(0x7f0000000200)='target\x00', &(0x7f0000000240)="98133a4772d9f3af826a71b0523e11af2518be8e32780749670d2a8ec3111f15122fa99a3d2f68bc4967f44de4923a1dd2686aad277076f946da48b2b3748bd68765dd2f67531fc4bacca13ef3ba1e57b7b37f56a641d6e2dfec5f4bc55e1258f2b46f9a9ee3155a126ef519718ec05f9230c79c26a8411b2044803af9e3e19e81315b239d96316b175de3f0c4c0db70200ca74878249956f8d0caa2f8d4608902e4c39ae2e97d2012a5eb814ba832f943a5b000bf6a91e22e12426dd1f104f62411bffba38abd2a0317671c8788d6871662380c1abd5e7add4ca338eb76d98a49cf61311d4e", 0xe6, 0x8}, {0x3, 0x400, &(0x7f0000000340)='syz0\x00', &(0x7f0000000380)="50f3ae274530383f2ca9a9bbaa515e3103d1f219556345083f16cde8f7e4187d3fe76a355f9262d9fcd16be46f07a7958f56260d8808a70aaedc5f74c7a4aa64b97e58c627d6fd2d2531eb830481e76882aa930818244ba08ef8c79656da", 0x5e, 0x1a}, {0x3, 0x2, &(0x7f0000000400)='@!\x03\x00', &(0x7f0000000480)="e3693c42a35c5b33dc1689aed2ec6714d70f5e33d27973a8f11664cc157724cf785c61379153b2659390531632cc085f096daf4369c231ea881cfa6cb5e287dedafba9c1c3711a004e", 0x49, 0x10}, {0x3, 0x5, &(0x7f0000000500)='target\x00', &(0x7f0000000540)="043ad3ab76c0faf44e5464b83afd99af33756e91b2c02865a75ae094d93dbce0eb5e6bc3df6e69d93e12fa454deb65215abca81ce01e672dd8e2d5e6c89c0517b9a93097060c2c467799e07e80ec5094cb100f44643b915d34999135afce7eb5496fc6fd881f9ab0881346236bc61dbe10a2810075480167d4ce6322ca351e54b98ce37ee8b14e0bcaffbe4bf3c05b312dfe79c9768ab23d1ddf55e50d8fe13c99f93db07968846cabedc64c295b2b41847be69e6add0628d4d6060000", 0xbd, 0x22}]})
r3 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
openat$cgroup_ro(r2, &(0x7f0000000700)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r2, &(0x7f0000000700)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50)
close(0x3) (async)
close(0x3)
r7 = socket(0x10, 0x3, 0x0)
unshare(0x20000400)
write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r2, 0xffffffffffffffff, 0x60000000}, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xc93, 0x1, 0xff, 0x8, 0x21, 0xa}, 0x20)

16.68122187s ago: executing program 4 (id=7758):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x54, &(0x7f00000001c0)="496f4fbbee5ca70e3dc3dedba2e3a305e17ac4c26e7a2bf15b0111b34de137c63f172c06f1b7e419095d342f84852a0678253c2b839fc62e13e9816a9c44f0c4d54ff95e146c552cd03368ef673c602be2fe6b80", 0x6b, 0x0, &(0x7f0000000240)="59125c30f0109cc7d7076ddc0f955bacad7034606b029180ba6f74cd77aee657bdccd4a0c034ebc39cafe7bcba3dccc84bfce754bf110d161b3e00c79d9bf5aea1d170380e74fdcb28651a731e3bc7ad80140b689350cd08e27efd484d14a2cc80843220f184eda17181e0"}) (async)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x1, 0x1000, 0x54, &(0x7f00000001c0)="496f4fbbee5ca70e3dc3dedba2e3a305e17ac4c26e7a2bf15b0111b34de137c63f172c06f1b7e419095d342f84852a0678253c2b839fc62e13e9816a9c44f0c4d54ff95e146c552cd03368ef673c602be2fe6b80", 0x6b, 0x0, &(0x7f0000000240)="59125c30f0109cc7d7076ddc0f955bacad7034606b029180ba6f74cd77aee657bdccd4a0c034ebc39cafe7bcba3dccc84bfce754bf110d161b3e00c79d9bf5aea1d170380e74fdcb28651a731e3bc7ad80140b689350cd08e27efd484d14a2cc80843220f184eda17181e0"})
syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "7bec00", 0x54, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf25030be07d"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0x5, 0xb, 0x3e], "097fa129"}, {}, {0x6600, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x5, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x8a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "7bec00", 0x54, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf25030be07d"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0x5, 0xb, 0x3e], "097fa129"}, {}, {0x6600, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x5, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=<r2=>0xffffffffffffffff], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x308800}}]}, {0x0, [0x5f, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f00000006c0)=""/43, 0x37, 0x2b, 0x0, 0xf}, 0x28) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x308800}}]}, {0x0, [0x5f, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f00000006c0)=""/43, 0x37, 0x2b, 0x0, 0xf}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="185740f9a5b6f62949c236a8000000fcffffffd98d559491abf3898477fd5dd8029a3b401e7a25871984dbd66d083477de5fa6f9e4800500247de63caf231988820400a986b2d1fbecd89b4d76775e5380c4e2549429061d", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100200000009500000000000000bf91000000000000b70200000000000085000000d4000000b7000000006400009500000000000000"], &(0x7f0000004380)='GPL\x00', 0x5, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
socket$alg(0x26, 0x5, 0x0) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async)
bind$alg(r10, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1f, 0x0, 0x0)
r11 = accept4(r7, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80000001}, &(0x7f0000000480)=0x8)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe8a)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$inet(0x2, 0x2, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010) (async)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010)
socket$inet(0x2, 0x2, 0x0)

16.601304111s ago: executing program 3 (id=7760):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="610904091c02b458d34a103a1592fc45a07ea9c49d6cc53251da016065bb3d52e70aca3d61861237d521763ab240d793c8701252515dee04008b3720e4e93cbbec37e091b351cd4c9027ab1535110af54b528fe519cd65b52d2c7033269fe78ad2e2bbdc205b31c039483d3b33b7a8cc03c89eee80426fb4134fdd34413c62cb173434e32a58d66369ccbb0243d68b4c178019551bb13b867e788673ece71ff01174b9ec8ad5afa18845c2c2f113eb2c4b5ff864f9b9470435eeef35c2aa7c56d6e72f88705ada3e38b280e9843f5452208c86183a0894b6b90ed386d7b25c55e83f4d42c2f1e6e1c7db59aef10c4ed20ca0bfd25249501b368fda24067e1b"], 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x7, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0x60000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="3c000380"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/26, 0x1a}], 0x1}, 0x40)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r9, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e44afc5538a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0xc, &(0x7f0000000100)=0x2)

16.542180352s ago: executing program 2 (id=7761):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28)
recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

16.541943487s ago: executing program 4 (id=7762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2e, &(0x7f00000002c0)=0x10000, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0)

16.526258519s ago: executing program 0 (id=7763):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xff1e, 0xfffffffffffffe84, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x242, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54ee2cbf21a66489121f24fefd198059288c9b735e0298e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0abece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c60000000000000002e8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39767830c6f24cd4189b1f7aac072f363e6f4d9633391bc51086c573f6907058f857d748e2531c04896f0a276b55"}, 0x23)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f0, 0x100, 0x0, 0x0, 0x1f8, 0x1f8, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, &(0x7f0000000480), {[{{@ipv6={@mcast1, @mcast2, [0xffffffff, 0xffffff, 0xff000000, 0xff000000], [0xffffff00, 0xff, 0xffffffff], 'erspan0\x00', 'pim6reg1\x00', {}, {}, 0x3a, 0x3, 0x5}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x78, 0x6, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x24}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xff], 'ip6gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x52, 0xe6, 0x2, 0x24}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x78}, @mcast1, [0xffffff00, 0xffffff, 0xffffff00], [0xff000000, 0xff, 0xffffff00, 0xff], 'ip6gretap0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x33, 0x8, 0x0, 0x18}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0xac, 0x10}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x2, @ipv6=@mcast2, 0x4e21}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x2, 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @mcast1, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xabe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r2, 0x4, r2}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x112c}, 0x1, 0x0, 0x0, 0x40000}, 0xc004)

16.50926259s ago: executing program 3 (id=7764):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c002000000000000002000000", @ANYRES32=r1, @ANYBLOB="0800100014000100fc0000000000000000000000e2ffffff090002"], 0x3c}}, 0x20024090)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

16.402207314s ago: executing program 0 (id=7765):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841)
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801)
bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.401858936s ago: executing program 4 (id=7766):
syz_emit_ethernet(0x82, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800450000740000000000019078ac1e00010000000067000000110000ac1414aae0000001830389070300443c00030a01012f00000000ac1414aa00000000ac141436c09437a8c1dd82bb000000007f00000100008000ac14143b00000800e0000002000000000000"], 0x0)
r0 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1}}}, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4c, 0x0, "befe68b7f294194e7c09e4d5eaa0a93afae136a5e005005847c95736fa6ab6e1cc004100dc511b32ca2aea1b0787a42c95ca09000000915e7ae7ad93117d9abe34e850f27e27a2000800"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xe)
r3 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0)
shutdown(r2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000140)=0x1, 0x4)

16.401238175s ago: executing program 3 (id=7767):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x4, 0x4) (async)
setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x4, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}}, 0x4000010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x9, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3a, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xfffffdfe, 0x0, 0x6, 0x6, 0x3}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xfffffdfe, 0x0, 0x6, 0x6, 0x3}})

16.388344412s ago: executing program 0 (id=7768):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000001f"], 0x14}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000700)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff90}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000f40)=""/4088, 0x0, 0xff8, 0x8, 0xffffffff}, 0x28) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) (async)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r12, 0x400454cd, 0x30c) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x4c}}, 0x0)

16.326243269s ago: executing program 0 (id=7769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x301, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xec}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x400c8d4}, 0x40)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

16.275145449s ago: executing program 3 (id=7770):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
getpid() (async)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110650000b0ae7cd60c0841a7000000"], &(0x7f0000000280)='GPL\x00'}, 0x90)
unshare(0x2c020400)
unshare(0x24040600)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f00010008000200ac14142a08000b0006000000050016008900000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f00010008000200ac14142a08000b0006000000050016008900000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
poll(&(0x7f0000000100)=[{r4}, {r3, 0x200}], 0x2, 0x8001) (async)
poll(&(0x7f0000000100)=[{r4}, {r3, 0x200}], 0x2, 0x8001)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r0, &(0x7f0000000140), 0x0, 0x20, &(0x7f0000000200)={r7, r8+10000000}) (async)
recvmmsg$unix(r0, &(0x7f0000000140), 0x0, 0x20, &(0x7f0000000200)={r7, r8+10000000})

16.274344383s ago: executing program 0 (id=7771):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c0001800600060088470000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)

16.273931946s ago: executing program 4 (id=7772):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={0x32, 0x4, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x28)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}})
clock_gettime(0x3, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000001900)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f2a, 0x5, 0x6, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000000c0))
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r2, r3/1000+60000}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x10002, 0x0, 0x0)

16.181895621s ago: executing program 3 (id=7773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/302, @ANYRES16=r1, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004450)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002abd70fcfcdbdf250f0000000c0006000300000003000000a93fb5a2b1826747bcdb5dc7a07edc99ef3fe0f5e4eacadf10588aa581bacfeeadf5bf184289cc00872ed8a43ea8193bd92d3f4e2c69be7716b74b12883a83bb326ce0386a807231d6b7bbe3"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002abd70fcfcdbdf250f0000000c0006000300000003000000a93fb5a2b1826747bcdb5dc7a07edc99ef3fe0f5e4eacadf10588aa581bacfeeadf5bf184289cc00872ed8a43ea8193bd92d3f4e2c69be7716b74b12883a83bb326ce0386a807231d6b7bbe3"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0) (async)
sendmsg$nl_route(r3, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r6 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r8}, 0x14)

16.18074398s ago: executing program 0 (id=7774):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x88, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

15.713787183s ago: executing program 2 (id=7775):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000003}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

15.398885358s ago: executing program 4 (id=7776):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
close(0xffffffffffffffff) (async)
r2 = socket$kcm(0x29, 0x5, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) (async)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendfile(r2, r3, 0x0, 0xffffffff000) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15.28218608s ago: executing program 4 (id=7777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, r3, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x31}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x7, 0x0)

1.569562582s ago: executing program 32 (id=7751):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000001c0)=0x800, 0x12)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000400)={0xfffbfffc, 0x9, 0x1, 0x6}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000007c7077fa2a2a81996f1ac00f8460ff9c7bbe3acf05083ca41e46b27f54118e8e7d11362065bf5975b9e7261a35ab2dab2573f9d115ae0283129b3e9ecc9bd273a1965ed9913f72c06f1c5cbddd3", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xbb, 0x0, 0x0, 0x41000, 0x22}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1\x00'})
connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockname$inet(r6, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0xfffffffffffffe21, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x15, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'batadv0\x00', @broadcast})

1.062610616s ago: executing program 33 (id=7774):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x88, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

1.033924058s ago: executing program 34 (id=7773):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c094}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/302, @ANYRES16=r1, @ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004450)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002abd70fcfcdbdf250f0000000c0006000300000003000000a93fb5a2b1826747bcdb5dc7a07edc99ef3fe0f5e4eacadf10588aa581bacfeeadf5bf184289cc00872ed8a43ea8193bd92d3f4e2c69be7716b74b12883a83bb326ce0386a807231d6b7bbe3"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002abd70fcfcdbdf250f0000000c0006000300000003000000a93fb5a2b1826747bcdb5dc7a07edc99ef3fe0f5e4eacadf10588aa581bacfeeadf5bf184289cc00872ed8a43ea8193bd92d3f4e2c69be7716b74b12883a83bb326ce0386a807231d6b7bbe3"], 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00'})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0) (async)
sendmsg$nl_route(r3, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r6 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r8}, 0x14)

18.115394ms ago: executing program 35 (id=7775):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000003}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

0s ago: executing program 36 (id=7777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, r3, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x31}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x7, 0x0)

kernel console output (not intermixed with test programs):

  584.377429][T31532]  do_syscall_64+0x174/0x580
[  584.377451][T31532]  ? clear_bhb_loop+0x40/0x90
[  584.377468][T31532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.377484][T31532] RIP: 0033:0x7f90cd39ce59
[  584.377512][T31532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.377526][T31532] RSP: 002b:00007f90ce31a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  584.377544][T31532] RAX: ffffffffffffffda RBX: 00007f90cd615fa0 RCX: 00007f90cd39ce59
[  584.377556][T31532] RDX: 000000000000c000 RSI: 0000200000000ac0 RDI: 0000000000000003
[  584.377567][T31532] RBP: 00007f90ce31a090 R08: 0000000000000000 R09: 0000000000000000
[  584.377577][T31532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  584.377587][T31532] R13: 00007f90cd616038 R14: 00007f90cd615fa0 R15: 00007ffece9d06a8
[  584.377606][T31532]  </TASK>
[  584.619818][T31534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6846'.
[  584.629420][T31534] netlink: 'syz.1.6846': attribute type 1 has an invalid length.
[  584.637152][T31534] netlink: 'syz.1.6846': attribute type 2 has an invalid length.
[  584.647522][T31534] tipc: Started in network mode
[  584.652396][T31534] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  584.659653][T31534] tipc: Enabled bearer <eth:macvlan1>, priority 0
[  584.771027][T31545] netlink: 'syz.1.6847': attribute type 1 has an invalid length.
[  584.812536][T31546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6849'.
[  584.822339][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6849'.
[  584.921377][T31556] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6847'.
[  585.157328][T14620] net_ratelimit: 24 callbacks suppressed
[  585.157359][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  585.288050][T31572] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6855'.
[  585.328353][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  585.446476][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  585.464277][T31584] netlink: 'syz.0.6860': attribute type 1 has an invalid length.
[  585.497102][T31584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6860'.
[  585.519064][T31591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6861'.
[  585.569398][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  585.633719][T31599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6863'.
[  585.693145][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  585.736262][ T9185] tipc: Node number set to 10463914
[  585.823911][T31604] syzkaller1: entered promiscuous mode
[  585.847382][T31604] syzkaller1: entered allmulticast mode
[  585.896365][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  585.913757][T31615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.020565][T14625] bond4: (slave bridge1): failed to get link speed/duplex
[  586.135277][T31622] block nbd0: must specify backend
[  586.136015][T14625] bond4: (slave bridge1): failed to get link speed/duplex
[  586.165491][T31622] netlink: 'syz.0.6871': attribute type 13 has an invalid length.
[  586.432199][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  586.730426][T31638] syzkaller0: entered promiscuous mode
[  586.750793][T31638] syzkaller0: entered allmulticast mode
[  586.853148][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6878'.
[  587.018447][T31649] bond3: Unable to set up delay as MII monitoring is disabled
[  587.048466][T31649] bond3 (unregistering): Released all slaves
[  587.141559][T31662] ip6t_srh: unknown srh match flags  4000
[  587.147887][T31659] syzkaller0: entered promiscuous mode
[  587.169467][T31650] FAULT_INJECTION: forcing a failure.
[  587.169467][T31650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.171070][T31659] syzkaller0: entered allmulticast mode
[  587.192682][T31650] CPU: 0 UID: 0 PID: 31650 Comm: syz.3.6879 Not tainted syzkaller #0 PREEMPT(full) 
[  587.192706][T31650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  587.192715][T31650] Call Trace:
[  587.192722][T31650]  <TASK>
[  587.192730][T31650]  dump_stack_lvl+0xe8/0x150
[  587.192752][T31650]  should_fail_ex+0x40c/0x560
[  587.192771][T31650]  _copy_from_iter+0x1d3/0x1660
[  587.192790][T31650]  ? rcu_is_watching+0x15/0xb0
[  587.192809][T31650]  ? __pfx__copy_from_iter+0x10/0x10
[  587.192826][T31650]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  587.192848][T31650]  ? netlink_sendmsg+0x650/0xb40
[  587.192870][T31650]  ? skb_put+0x112/0x210
[  587.192892][T31650]  netlink_sendmsg+0x6c0/0xb40
[  587.192911][T31650]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.192931][T31650]  ? aa_sock_msg_perm+0xf1/0x1b0
[  587.192944][T31650]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  587.192961][T31650]  ? __pfx_netlink_sendmsg+0x10/0x10
[  587.192978][T31650]  ____sys_sendmsg+0x9b9/0xa20
[  587.193000][T31650]  ? __pfx_____sys_sendmsg+0x10/0x10
[  587.193018][T31650]  ? lock_release+0x4b/0x3c0
[  587.193037][T31650]  ? import_iovec+0x73/0xa0
[  587.193056][T31650]  ___sys_sendmsg+0x2a5/0x360
[  587.193072][T31650]  ? rcu_is_watching+0x15/0xb0
[  587.193085][T31650]  ? get_pid_task+0x20/0x1f0
[  587.193098][T31650]  ? __pfx____sys_sendmsg+0x10/0x10
[  587.193117][T31650]  ? rcu_is_watching+0x15/0xb0
[  587.193139][T31650]  ? __fget_files+0x2a/0x420
[  587.193155][T31650]  ? __fget_files+0x3a2/0x420
[  587.193171][T31650]  __x64_sys_sendmsg+0x1b1/0x290
[  587.193191][T31650]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  587.193212][T31650]  ? rcu_is_watching+0x15/0xb0
[  587.193227][T31650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.193239][T31650]  do_syscall_64+0x174/0x580
[  587.193257][T31650]  ? trace_irq_disable+0x3b/0x140
[  587.193273][T31650]  ? clear_bhb_loop+0x40/0x90
[  587.193289][T31650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.193301][T31650] RIP: 0033:0x7f90cd39ce59
[  587.193315][T31650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.193327][T31650] RSP: 002b:00007f90ce31a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  587.193341][T31650] RAX: ffffffffffffffda RBX: 00007f90cd615fa0 RCX: 00007f90cd39ce59
[  587.193352][T31650] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[  587.193361][T31650] RBP: 00007f90ce31a090 R08: 0000000000000000 R09: 0000000000000000
[  587.193368][T31650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.193377][T31650] R13: 00007f90cd616038 R14: 00007f90cd615fa0 R15: 00007ffece9d06a8
[  587.193392][T31650]  </TASK>
[  587.702818][T31671] syzkaller0: entered promiscuous mode
[  587.747725][T31671] syzkaller0: entered allmulticast mode
[  587.991194][T31693] netlink: 'syz.4.6894': attribute type 1 has an invalid length.
[  588.039167][T31693] __nla_validate_parse: 4 callbacks suppressed
[  588.039195][T31693] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6894'.
[  588.176500][T31694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6894'.
[  588.211212][T31694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6894'.
[  588.359019][T31708] siw: device registration error -23
[  588.581040][T31730] FAULT_INJECTION: forcing a failure.
[  588.581040][T31730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  588.581652][T31728] bond5: Unable to set up delay as MII monitoring is disabled
[  588.595233][T31730] CPU: 0 UID: 0 PID: 31730 Comm: syz.4.6905 Not tainted syzkaller #0 PREEMPT(full) 
[  588.595253][T31730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  588.595263][T31730] Call Trace:
[  588.595270][T31730]  <TASK>
[  588.595277][T31730]  dump_stack_lvl+0xe8/0x150
[  588.595300][T31730]  should_fail_ex+0x40c/0x560
[  588.595319][T31730]  _copy_from_iter+0x1d3/0x1660
[  588.595339][T31730]  ? rcu_is_watching+0x15/0xb0
[  588.595358][T31730]  ? __pfx__copy_from_iter+0x10/0x10
[  588.595373][T31730]  ? kmem_cache_alloc_node_noprof+0x3ca/0x680
[  588.595397][T31730]  ? netlink_sendmsg+0x650/0xb40
[  588.595419][T31730]  ? skb_put+0x112/0x210
[  588.595439][T31730]  netlink_sendmsg+0x6c0/0xb40
[  588.595469][T31730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.595491][T31730]  ? aa_sock_msg_perm+0xf1/0x1b0
[  588.595507][T31730]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  588.595525][T31730]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.595546][T31730]  ____sys_sendmsg+0x9b9/0xa20
[  588.595571][T31730]  ? __pfx_____sys_sendmsg+0x10/0x10
[  588.595591][T31730]  ? lock_release+0x4b/0x3c0
[  588.595613][T31730]  ? import_iovec+0x73/0xa0
[  588.595633][T31730]  ___sys_sendmsg+0x2a5/0x360
[  588.595652][T31730]  ? rcu_is_watching+0x15/0xb0
[  588.595666][T31730]  ? get_pid_task+0x20/0x1f0
[  588.595681][T31730]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.595704][T31730]  ? rcu_is_watching+0x15/0xb0
[  588.595729][T31730]  ? __fget_files+0x2a/0x420
[  588.595745][T31730]  ? __fget_files+0x3a2/0x420
[  588.595766][T31730]  __x64_sys_sendmsg+0x1b1/0x290
[  588.595787][T31730]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.595813][T31730]  ? rcu_is_watching+0x15/0xb0
[  588.595828][T31730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.595844][T31730]  do_syscall_64+0x174/0x580
[  588.595864][T31730]  ? clear_bhb_loop+0x40/0x90
[  588.595880][T31730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.595895][T31730] RIP: 0033:0x7f377399ce59
[  588.595910][T31730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.595923][T31730] RSP: 002b:00007f3774907028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.595940][T31730] RAX: ffffffffffffffda RBX: 00007f3773c16090 RCX: 00007f377399ce59
[  588.595952][T31730] RDX: 0000000000004004 RSI: 0000200000000f00 RDI: 0000000000000004
[  588.595962][T31730] RBP: 00007f3774907090 R08: 0000000000000000 R09: 0000000000000000
[  588.595971][T31730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.595981][T31730] R13: 00007f3773c16128 R14: 00007f3773c16090 R15: 00007fff7d903158
[  588.596000][T31730]  </TASK>
[  588.693233][T31730] netlink: 'syz.4.6905': attribute type 1 has an invalid length.
[  588.884631][T31730] netlink: 'syz.4.6905': attribute type 2 has an invalid length.
[  588.886640][T31728] bond5 (unregistering): Released all slaves
[  588.996607][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6907'.
[  589.133966][T31744] FAULT_INJECTION: forcing a failure.
[  589.133966][T31744] name failslab, interval 1, probability 0, space 0, times 0
[  589.147343][T31744] CPU: 1 UID: 0 PID: 31744 Comm: syz.2.6908 Not tainted syzkaller #0 PREEMPT(full) 
[  589.147366][T31744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  589.147375][T31744] Call Trace:
[  589.147381][T31744]  <TASK>
[  589.147387][T31744]  dump_stack_lvl+0xe8/0x150
[  589.147409][T31744]  should_fail_ex+0x40c/0x560
[  589.147428][T31744]  should_failslab+0xa8/0x100
[  589.147449][T31744]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  589.147471][T31744]  ? pfn_valid+0x125/0x4c0
[  589.147487][T31744]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  589.147555][T31744]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  589.147589][T31744]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  589.147617][T31744]  ? 0xffffffffa0201a58
[  589.147631][T31744]  ? 0xffffffffa020316c
[  589.147652][T31744]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  589.147672][T31744]  ? _copy_from_user+0x94/0xb0
[  589.147692][T31744]  ? bpf_test_init+0x113/0x150
[  589.147709][T31744]  ? xdp_convert_md_to_buff+0x5b/0x330
[  589.147730][T31744]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  589.147749][T31744]  ? lock_release+0x4b/0x3c0
[  589.147772][T31744]  ? rcu_is_watching+0x15/0xb0
[  589.147787][T31744]  ? lock_release+0x4b/0x3c0
[  589.147807][T31744]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  589.147834][T31744]  ? __fget_files+0x2a/0x420
[  589.147854][T31744]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  589.147874][T31744]  bpf_prog_test_run+0x2c5/0x340
[  589.147897][T31744]  __sys_bpf+0x643/0x950
[  589.147924][T31744]  ? __pfx___sys_bpf+0x10/0x10
[  589.147949][T31744]  ? ksys_write+0x242/0x270
[  589.147969][T31744]  ? __pfx_ksys_write+0x10/0x10
[  589.147989][T31744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.148005][T31744]  __x64_sys_bpf+0x7c/0x90
[  589.148023][T31744]  do_syscall_64+0x174/0x580
[  589.148043][T31744]  ? clear_bhb_loop+0x40/0x90
[  589.148060][T31744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.148074][T31744] RIP: 0033:0x7f34c2b9ce59
[  589.148089][T31744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.148101][T31744] RSP: 002b:00007f34c3a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  589.148119][T31744] RAX: ffffffffffffffda RBX: 00007f34c2e15fa0 RCX: 00007f34c2b9ce59
[  589.148131][T31744] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  589.148141][T31744] RBP: 00007f34c3a00090 R08: 0000000000000000 R09: 0000000000000000
[  589.148152][T31744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  589.148161][T31744] R13: 00007f34c2e16038 R14: 00007f34c2e15fa0 R15: 00007ffe5c8ede48
[  589.148181][T31744]  </TASK>
[  590.206081][T14635] net_ratelimit: 88 callbacks suppressed
[  590.206116][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  590.226073][T14635] bond2: (slave geneve2): failed to get link speed/duplex
[  590.233670][T14635] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.330769][T14625] bond4: (slave bridge1): failed to get link speed/duplex
[  590.346451][T14620] bond2: (slave geneve2): failed to get link speed/duplex
[  590.354295][T14620] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.446011][ T7712] bond4: (slave bridge1): failed to get link speed/duplex
[  590.466006][ T7712] bond2: (slave geneve2): failed to get link speed/duplex
[  590.473540][ T7712] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  590.566789][ T7712] bond4: (slave bridge1): failed to get link speed/duplex
[  590.644076][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6911'.
[  590.659301][T31756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6911'.
[  591.215590][T31707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  591.229945][T31746] netlink: 'syz.1.6909': attribute type 1 has an invalid length.
[  591.246365][T31746] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6909'.
[  591.280871][T31746] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6909'.
[  591.302490][T31746] netlink: 'syz.1.6909': attribute type 1 has an invalid length.
[  591.319559][T31746] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6909'.
[  591.330095][T31753] netlink: 'syz.2.6911': attribute type 1 has an invalid length.
[  591.352102][T31753] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6911'.
[  591.412046][T31766] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  591.559735][T31776] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  591.582107][T31769] lo speed is unknown, defaulting to 1000
[  591.772077][T31783] FAULT_INJECTION: forcing a failure.
[  591.772077][T31783] name failslab, interval 1, probability 0, space 0, times 0
[  591.785453][T31783] CPU: 1 UID: 0 PID: 31783 Comm: syz.4.6920 Not tainted syzkaller #0 PREEMPT(full) 
[  591.785477][T31783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  591.785487][T31783] Call Trace:
[  591.785494][T31783]  <TASK>
[  591.785501][T31783]  dump_stack_lvl+0xe8/0x150
[  591.785523][T31783]  should_fail_ex+0x40c/0x560
[  591.785542][T31783]  should_failslab+0xa8/0x100
[  591.785566][T31783]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  591.785590][T31783]  ? pfn_valid+0x125/0x4c0
[  591.785610][T31783]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  591.785637][T31783]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  591.785665][T31783]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  591.785696][T31783]  ? 0xffffffffa0201a5c
[  591.785709][T31783]  ? 0xffffffffa020316c
[  591.785732][T31783]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  591.785752][T31783]  ? _copy_from_user+0x94/0xb0
[  591.785772][T31783]  ? bpf_test_init+0x113/0x150
[  591.785790][T31783]  ? xdp_convert_md_to_buff+0x5b/0x330
[  591.785813][T31783]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  591.785833][T31783]  ? lock_release+0x4b/0x3c0
[  591.785857][T31783]  ? rcu_is_watching+0x15/0xb0
[  591.785873][T31783]  ? lock_release+0x4b/0x3c0
[  591.785893][T31783]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  591.785916][T31783]  ? __fget_files+0x2a/0x420
[  591.785935][T31783]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  591.785957][T31783]  bpf_prog_test_run+0x2c5/0x340
[  591.785980][T31783]  __sys_bpf+0x643/0x950
[  591.786001][T31783]  ? __pfx___sys_bpf+0x10/0x10
[  591.786026][T31783]  ? ksys_write+0x242/0x270
[  591.786047][T31783]  ? __pfx_ksys_write+0x10/0x10
[  591.786068][T31783]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.786084][T31783]  __x64_sys_bpf+0x7c/0x90
[  591.786103][T31783]  do_syscall_64+0x174/0x580
[  591.786124][T31783]  ? clear_bhb_loop+0x40/0x90
[  591.786142][T31783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.786158][T31783] RIP: 0033:0x7f377399ce59
[  591.786172][T31783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.786186][T31783] RSP: 002b:00007f3774928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  591.786203][T31783] RAX: ffffffffffffffda RBX: 00007f3773c15fa0 RCX: 00007f377399ce59
[  591.786215][T31783] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  591.786241][T31783] RBP: 00007f3774928090 R08: 0000000000000000 R09: 0000000000000000
[  591.786251][T31783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  591.786261][T31783] R13: 00007f3773c16038 R14: 00007f3773c15fa0 R15: 00007fff7d903158
[  591.786281][T31783]  </TASK>
[  592.229560][T31798] FAULT_INJECTION: forcing a failure.
[  592.229560][T31798] name failslab, interval 1, probability 0, space 0, times 0
[  592.248507][T31798] CPU: 1 UID: 0 PID: 31798 Comm: syz.3.6925 Not tainted syzkaller #0 PREEMPT(full) 
[  592.248530][T31798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  592.248540][T31798] Call Trace:
[  592.248546][T31798]  <TASK>
[  592.248553][T31798]  dump_stack_lvl+0xe8/0x150
[  592.248577][T31798]  should_fail_ex+0x40c/0x560
[  592.248598][T31798]  should_failslab+0xa8/0x100
[  592.248620][T31798]  ? skb_clone+0x212/0x3a0
[  592.248635][T31798]  kmem_cache_alloc_noprof+0x87/0x650
[  592.248658][T31798]  skb_clone+0x212/0x3a0
[  592.248674][T31798]  __netlink_deliver_tap+0x413/0x860
[  592.248700][T31798]  ? netlink_deliver_tap+0x2e/0x1b0
[  592.248722][T31798]  netlink_deliver_tap+0x19c/0x1b0
[  592.248742][T31798]  netlink_unicast+0x77f/0x940
[  592.248767][T31798]  netlink_sendmsg+0x813/0xb40
[  592.248792][T31798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.248815][T31798]  ? aa_sock_msg_perm+0xf1/0x1b0
[  592.248832][T31798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  592.248851][T31798]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.248873][T31798]  ____sys_sendmsg+0x9b9/0xa20
[  592.248899][T31798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.248921][T31798]  ? lock_release+0x4b/0x3c0
[  592.248945][T31798]  ? import_iovec+0x73/0xa0
[  592.248966][T31798]  ___sys_sendmsg+0x2a5/0x360
[  592.248986][T31798]  ? rcu_is_watching+0x15/0xb0
[  592.249001][T31798]  ? get_pid_task+0x20/0x1f0
[  592.249017][T31798]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.249040][T31798]  ? rcu_is_watching+0x15/0xb0
[  592.249067][T31798]  ? __fget_files+0x2a/0x420
[  592.249085][T31798]  ? __fget_files+0x3a2/0x420
[  592.249105][T31798]  __x64_sys_sendmsg+0x1b1/0x290
[  592.249128][T31798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.249155][T31798]  ? rcu_is_watching+0x15/0xb0
[  592.249171][T31798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.249188][T31798]  do_syscall_64+0x174/0x580
[  592.249217][T31798]  ? trace_irq_disable+0x3b/0x140
[  592.249237][T31798]  ? clear_bhb_loop+0x40/0x90
[  592.249255][T31798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.249271][T31798] RIP: 0033:0x7f90cd39ce59
[  592.249286][T31798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.249300][T31798] RSP: 002b:00007f90ce31a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.249318][T31798] RAX: ffffffffffffffda RBX: 00007f90cd615fa0 RCX: 00007f90cd39ce59
[  592.249330][T31798] RDX: 0000000000004004 RSI: 0000200000000f00 RDI: 0000000000000003
[  592.249342][T31798] RBP: 00007f90ce31a090 R08: 0000000000000000 R09: 0000000000000000
[  592.249352][T31798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.249362][T31798] R13: 00007f90cd616038 R14: 00007f90cd615fa0 R15: 00007ffece9d06a8
[  592.249382][T31798]  </TASK>
[  592.581260][T31799] ip6gre0: Caught tx_queue_len zero misconfig
[  592.587377][T31799] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  592.679321][T31798] netlink: 'syz.3.6925': attribute type 1 has an invalid length.
[  592.690560][T31798] netlink: 'syz.3.6925': attribute type 2 has an invalid length.
[  592.709390][T31806] netlink: 'syz.4.6927': attribute type 1 has an invalid length.
[  592.750447][T31798] tipc: Enabling of bearer <eth:macvlan1> rejected, already enabled
[  593.233051][T31838] netlink: 'syz.0.6937': attribute type 2 has an invalid length.
[  593.251228][T31838] netlink: 'syz.0.6937': attribute type 8 has an invalid length.
[  593.263842][T31840] __nla_validate_parse: 7 callbacks suppressed
[  593.263858][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6936'.
[  593.281577][T31838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6937'.
[  593.315952][T31838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6937'.
[  593.392002][T31840] bond3: entered promiscuous mode
[  593.398629][T31840] 8021q: adding VLAN 0 to HW filter on device bond3
[  593.496181][T31850] tipc: Resetting bearer <eth:macvlan1>
[  593.805354][T31840] bond3: (slave veth5): making interface the new active one
[  593.816014][T31840] veth5: entered promiscuous mode
[  593.831798][T31840] bond3: (slave veth5): Enslaving as an active interface with an up link
[  594.387557][T31882] validate_nla: 1 callbacks suppressed
[  594.387572][T31882] netlink: 'syz.1.6946': attribute type 1 has an invalid length.
[  594.416729][T31883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6945'.
[  594.444163][T31882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6946'.
[  594.619798][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6946'.
[  594.650265][T31896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6948'.
[  594.652410][T31892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6946'.
[  594.783831][T14625] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  594.823886][T14625] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.844760][T14625] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.901706][T14625] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  594.965641][T31904] syzkaller0: entered promiscuous mode
[  594.987277][T31904] syzkaller0: entered allmulticast mode
[  595.188366][T31913] netlink: 'syz.3.6949': attribute type 1 has an invalid length.
[  595.350328][T31917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6954'.
[  595.372044][T31913] 8021q: adding VLAN 0 to HW filter on device bond2
[  595.380661][ T7712] net_ratelimit: 92 callbacks suppressed
[  595.380693][ T7712] bond4: (slave bridge1): failed to get link speed/duplex
[  595.448888][T31913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6949'.
[  595.457963][T14634] bond2: (slave geneve2): failed to get link speed/duplex
[  595.457996][T14634] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.527952][T14634] bond4: (slave bridge1): failed to get link speed/duplex
[  595.568228][T14634] bond2: (slave geneve2): failed to get link speed/duplex
[  595.607314][T14634] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  595.645475][T31930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  595.706123][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  595.736208][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  595.759931][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  596.040651][T31949] dummy0: entered allmulticast mode
[  596.591745][T31983] netlink: 'syz.0.6975': attribute type 3 has an invalid length.
[  597.475586][T32021] veth3: entered allmulticast mode
[  597.500092][T32022] netlink: 'syz.0.6986': attribute type 1 has an invalid length.
[  597.853401][T32037] veth1_to_batadv: entered promiscuous mode
[  597.940185][T32041] netlink: 'syz.1.6992': attribute type 1 has an invalid length.
[  598.006992][T32042] ip6tnl0: entered promiscuous mode
[  599.439064][T31974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.462695][T32034] netlink: 'syz.4.6990': attribute type 1 has an invalid length.
[  599.500048][T32034] __nla_validate_parse: 8 callbacks suppressed
[  599.500077][T32034] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6990'.
[  599.538595][T32034] netlink: 'syz.4.6990': attribute type 1 has an invalid length.
[  599.561125][T32034] netlink: 638 bytes leftover after parsing attributes in process `syz.4.6990'.
[  599.582826][T32034] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6990'.
[  599.816435][T32057] netlink: 'syz.1.6997': attribute type 1 has an invalid length.
[  599.830430][T32057] netlink: 'syz.1.6997': attribute type 2 has an invalid length.
[  599.903472][T32057] tipc: Enabling of bearer <eth:macvlan1> rejected, already enabled
[  599.923328][T32062] tunl0: Caught tx_queue_len zero misconfig
[  599.948853][T32062] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6998'.
[  600.034484][T32067] FAULT_INJECTION: forcing a failure.
[  600.034484][T32067] name failslab, interval 1, probability 0, space 0, times 0
[  600.047880][T32067] CPU: 0 UID: 0 PID: 32067 Comm: syz.3.7001 Not tainted syzkaller #0 PREEMPT(full) 
[  600.047905][T32067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  600.047915][T32067] Call Trace:
[  600.047922][T32067]  <TASK>
[  600.047929][T32067]  dump_stack_lvl+0xe8/0x150
[  600.047952][T32067]  should_fail_ex+0x40c/0x560
[  600.047972][T32067]  should_failslab+0xa8/0x100
[  600.047995][T32067]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  600.048018][T32067]  ? pfn_valid+0x125/0x4c0
[  600.048037][T32067]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  600.048064][T32067]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  600.048090][T32067]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  600.048122][T32067]  ? 0xffffffffa020316c
[  600.048156][T32067]  ? 0xffffffffa020365c
[  600.048169][T32067]  ? 0xffffffffa0203db0
[  600.048191][T32067]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  600.048212][T32067]  ? _copy_from_user+0x94/0xb0
[  600.048232][T32067]  ? bpf_test_init+0x113/0x150
[  600.048250][T32067]  ? xdp_convert_md_to_buff+0x5b/0x330
[  600.048272][T32067]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  600.048292][T32067]  ? lock_release+0x4b/0x3c0
[  600.048316][T32067]  ? rcu_is_watching+0x15/0xb0
[  600.048332][T32067]  ? lock_release+0x4b/0x3c0
[  600.048353][T32067]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  600.048376][T32067]  ? __fget_files+0x2a/0x420
[  600.048396][T32067]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  600.048417][T32067]  bpf_prog_test_run+0x2c5/0x340
[  600.048440][T32067]  __sys_bpf+0x643/0x950
[  600.048460][T32067]  ? __pfx___sys_bpf+0x10/0x10
[  600.048485][T32067]  ? ksys_write+0x242/0x270
[  600.048506][T32067]  ? __pfx_ksys_write+0x10/0x10
[  600.048527][T32067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.048543][T32067]  __x64_sys_bpf+0x7c/0x90
[  600.048561][T32067]  do_syscall_64+0x174/0x580
[  600.048583][T32067]  ? clear_bhb_loop+0x40/0x90
[  600.048601][T32067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.048616][T32067] RIP: 0033:0x7f90cd39ce59
[  600.048631][T32067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.048644][T32067] RSP: 002b:00007f90ce31a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  600.048662][T32067] RAX: ffffffffffffffda RBX: 00007f90cd615fa0 RCX: 00007f90cd39ce59
[  600.048673][T32067] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  600.048684][T32067] RBP: 00007f90ce31a090 R08: 0000000000000000 R09: 0000000000000000
[  600.048694][T32067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  600.048704][T32067] R13: 00007f90cd616038 R14: 00007f90cd615fa0 R15: 00007ffece9d06a8
[  600.048723][T32067]  </TASK>
[  600.468017][T14625] net_ratelimit: 117 callbacks suppressed
[  600.468049][T14625] bond2: (slave geneve2): failed to get link speed/duplex
[  600.532927][T14625] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.575958][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  600.678628][T14625] bond2: (slave geneve2): failed to get link speed/duplex
[  600.688440][T14625] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.776764][T32082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7005'.
[  600.789018][T32082] netlink: 'syz.3.7005': attribute type 1 has an invalid length.
[  600.846274][T14634] bond4: (slave bridge1): failed to get link speed/duplex
[  600.866162][T14625] bond2: (slave geneve2): failed to get link speed/duplex
[  600.906995][T14625] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  600.957517][T14625] bond4: (slave bridge1): failed to get link speed/duplex
[  601.128989][ T7712] bond2: (slave geneve2): failed to get link speed/duplex
[  601.194037][T32096] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  601.234193][T32096] bond7 (unregistering): Released all slaves
[  601.291258][T32088] syzkaller0: entered promiscuous mode
[  601.326847][T32088] syzkaller0: entered allmulticast mode
[  601.356379][T32091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.405496][T32087] tipc: Resetting bearer <eth:syzkaller0>
[  601.429913][T32087] tipc: Disabling bearer <eth:syzkaller0>
[  601.523157][T32120] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7013'.
[  601.732437][T32126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7017'.
[  601.798862][T32127] netlink: 'syz.1.7016': attribute type 1 has an invalid length.
[  601.822646][T32127] netlink: 'syz.1.7016': attribute type 2 has an invalid length.
[  604.305419][T32107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  604.315218][T14624] nci: nci_rf_intf_activated_ntf_packet: error when signaling tm activation
[  604.472780][T32144] Bluetooth: hci0: Opcode 0x080f failed: -22
[  604.623877][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7025'.
[  604.650374][T32157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  604.658996][T32157] +
: renamed from syzkaller0
[  604.702284][T32157] tipc: Disabling bearer <eth:syzkaller0>
[  604.721683][T32157] netlink: 'syz.3.7025': attribute type 1 has an invalid length.
[  604.902771][T32172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'.
[  604.984815][T32172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7026'.
[  605.088930][T32185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7031'.
[  605.092599][T32164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7026'.
[  605.123632][T32186] netlink: 'syz.4.7030': attribute type 1 has an invalid length.
[  605.147973][T32185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'.
[  605.156537][T32186] netlink: 'syz.4.7030': attribute type 2 has an invalid length.
[  605.163647][T32185] netlink: 'syz.1.7031': attribute type 19 has an invalid length.
[  605.189703][T32179] tipc: Enabling of bearer <eth:macvlan1> rejected, already enabled
[  605.238629][T32185] netlink: 'syz.1.7031': attribute type 20 has an invalid length.
[  605.308280][T32191] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  605.478161][T32201] netlink: 'syz.4.7035': attribute type 1 has an invalid length.
[  605.678769][T32188] tipc: Resetting bearer <eth:macvlan1>
[  605.729522][T32188] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  605.737459][T32188] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  605.809808][T32188] bond1: left allmulticast mode
[  605.823522][T32185] syzkaller1: entered promiscuous mode
[  605.833095][T32185] syzkaller1: entered allmulticast mode
[  605.882457][T32201] bond4: option mode: invalid value (7)
[  605.889404][T32201] bond4 (unregistering): Released all slaves
[  606.000689][T14620] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  606.027748][T14620] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.054387][T14620] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  606.083971][T14620] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.109741][T14620] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  606.119289][T14620] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.151783][T14620] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  606.183975][T14620] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.237220][T14620] net_ratelimit: 111 callbacks suppressed
[  606.237237][T14620] bond2: (slave geneve2): failed to get link speed/duplex
[  606.270010][T14620] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  606.285973][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  606.309253][T32233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7042'.
[  606.309345][T32230] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7039'.
[  606.386285][T14635] bond2: (slave geneve2): failed to get link speed/duplex
[  606.401040][T14635] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  606.445962][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  606.497699][T32245] netlink: 'syz.3.7046': attribute type 1 has an invalid length.
[  606.508890][T32249] gre1: entered allmulticast mode
[  606.545497][T32245] 8021q: adding VLAN 0 to HW filter on device bond3
[  606.557597][T14635] bond2: (slave geneve2): failed to get link speed/duplex
[  606.610301][T14635] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  606.646374][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  606.682193][T32245] bond3: (slave veth7): Enslaving as an active interface with a down link
[  606.724035][T32268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7051'.
[  606.748073][T32245] 8021q: adding VLAN 0 to HW filter on device batadv1
[  606.755496][T32245] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  606.775277][T32269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7051'.
[  606.795269][T32259] syzkaller0: entered promiscuous mode
[  606.807367][T32259] syzkaller0: entered allmulticast mode
[  606.811741][T32274] FAULT_INJECTION: forcing a failure.
[  606.811741][T32274] name failslab, interval 1, probability 0, space 0, times 0
[  606.825589][T32274] CPU: 0 UID: 0 PID: 32274 Comm: syz.4.7054 Not tainted syzkaller #0 PREEMPT(full) 
[  606.825617][T32274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  606.825627][T32274] Call Trace:
[  606.825634][T32274]  <TASK>
[  606.825642][T32274]  dump_stack_lvl+0xe8/0x150
[  606.825665][T32274]  should_fail_ex+0x40c/0x560
[  606.825685][T32274]  should_failslab+0xa8/0x100
[  606.825708][T32274]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  606.825732][T32274]  ? pfn_valid+0x125/0x4c0
[  606.825751][T32274]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  606.825783][T32274]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  606.825809][T32274]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  606.825841][T32274]  ? 0xffffffffa020316c
[  606.825853][T32274]  ? 0xffffffffa0203db0
[  606.825865][T32274]  ? 0xffffffffa0203e1c
[  606.825888][T32274]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  606.825909][T32274]  ? _copy_from_user+0x94/0xb0
[  606.825928][T32274]  ? bpf_test_init+0x113/0x150
[  606.825947][T32274]  ? xdp_convert_md_to_buff+0x5b/0x330
[  606.825970][T32274]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  606.825990][T32274]  ? lock_release+0x4b/0x3c0
[  606.826014][T32274]  ? rcu_is_watching+0x15/0xb0
[  606.826030][T32274]  ? lock_release+0x4b/0x3c0
[  606.826049][T32274]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  606.826072][T32274]  ? __fget_files+0x2a/0x420
[  606.826092][T32274]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  606.826113][T32274]  bpf_prog_test_run+0x2c5/0x340
[  606.826137][T32274]  __sys_bpf+0x643/0x950
[  606.826155][T32274]  ? __pfx___sys_bpf+0x10/0x10
[  606.826180][T32274]  ? ksys_write+0x242/0x270
[  606.826201][T32274]  ? __pfx_ksys_write+0x10/0x10
[  606.826221][T32274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.826238][T32274]  __x64_sys_bpf+0x7c/0x90
[  606.826256][T32274]  do_syscall_64+0x174/0x580
[  606.826275][T32274]  ? trace_irq_disable+0x3b/0x140
[  606.826295][T32274]  ? clear_bhb_loop+0x40/0x90
[  606.826312][T32274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.826327][T32274] RIP: 0033:0x7f377399ce59
[  606.826341][T32274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.826354][T32274] RSP: 002b:00007f3774928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  606.826371][T32274] RAX: ffffffffffffffda RBX: 00007f3773c15fa0 RCX: 00007f377399ce59
[  606.826383][T32274] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  606.826393][T32274] RBP: 00007f3774928090 R08: 0000000000000000 R09: 0000000000000000
[  606.826403][T32274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  606.826413][T32274] R13: 00007f3773c16038 R14: 00007f3773c15fa0 R15: 00007fff7d903158
[  606.826431][T32274]  </TASK>
[  606.848501][T32275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  607.575048][T32292] batadv0: entered promiscuous mode
[  607.989322][T32315] FAULT_INJECTION: forcing a failure.
[  607.989322][T32315] name failslab, interval 1, probability 0, space 0, times 0
[  608.002714][T32315] CPU: 1 UID: 0 PID: 32315 Comm: syz.0.7066 Not tainted syzkaller #0 PREEMPT(full) 
[  608.002738][T32315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  608.002748][T32315] Call Trace:
[  608.002755][T32315]  <TASK>
[  608.002762][T32315]  dump_stack_lvl+0xe8/0x150
[  608.002785][T32315]  should_fail_ex+0x40c/0x560
[  608.002805][T32315]  should_failslab+0xa8/0x100
[  608.002828][T32315]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  608.002852][T32315]  ? pfn_valid+0x125/0x4c0
[  608.002871][T32315]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  608.002898][T32315]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  608.002922][T32315]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  608.002951][T32315]  ? 0xffffffffa020316c
[  608.002964][T32315]  ? 0xffffffffa0203db0
[  608.002975][T32315]  ? 0xffffffffa0203e9c
[  608.002995][T32315]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  608.003015][T32315]  ? _copy_from_user+0x94/0xb0
[  608.003035][T32315]  ? bpf_test_init+0x113/0x150
[  608.003054][T32315]  ? xdp_convert_md_to_buff+0x5b/0x330
[  608.003076][T32315]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  608.003099][T32315]  ? rcu_is_watching+0x15/0xb0
[  608.003115][T32315]  ? lock_release+0x4b/0x3c0
[  608.003136][T32315]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  608.003159][T32315]  ? __fget_files+0x2a/0x420
[  608.003178][T32315]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  608.003199][T32315]  bpf_prog_test_run+0x2c5/0x340
[  608.003223][T32315]  __sys_bpf+0x643/0x950
[  608.003243][T32315]  ? __pfx___sys_bpf+0x10/0x10
[  608.003269][T32315]  ? irqtime_account_irq+0x1f8/0x260
[  608.003291][T32315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.003308][T32315]  __x64_sys_bpf+0x7c/0x90
[  608.003326][T32315]  do_syscall_64+0x174/0x580
[  608.003346][T32315]  ? clear_bhb_loop+0x40/0x90
[  608.003363][T32315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.003377][T32315] RIP: 0033:0x7f37f2d9ce59
[  608.003392][T32315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.003405][T32315] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  608.003423][T32315] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  608.003435][T32315] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  608.003444][T32315] RBP: 00007f37f3be8090 R08: 0000000000000000 R09: 0000000000000000
[  608.003454][T32315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  608.003464][T32315] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  608.003482][T32315]  </TASK>
[  608.584773][T32345] lo speed is unknown, defaulting to 1000
[  608.624143][T32350] lo speed is unknown, defaulting to 1000
[  608.801854][T32363] syzkaller0: entered promiscuous mode
[  608.807349][T32363] syzkaller0: entered allmulticast mode
[  608.863480][T32363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  608.879637][T32361] tipc: Resetting bearer <eth:syzkaller0>
[  608.969537][T32361] tipc: Disabling bearer <eth:syzkaller0>
[  609.264631][T32386] bond6: option xmit_hash_policy: invalid value (10)
[  609.281291][T32386] bond6 (unregistering): Released all slaves
[  609.345923][T32394] netlink: 'syz.3.7088': attribute type 4 has an invalid length.
[  609.409152][T32396] block nbd0: must specify backend
[  609.939740][T32427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  610.117177][T32440] netlink: 'syz.2.7098': attribute type 3 has an invalid length.
[  610.132349][T32440] __nla_validate_parse: 9 callbacks suppressed
[  610.132365][T32440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7098'.
[  610.167886][T32440] mac80211_hwsim hwsim123 wlan0: entered promiscuous mode
[  610.179485][T32442] netlink: 'syz.4.7100': attribute type 1 has an invalid length.
[  610.190925][T32440] batman_adv: batadv0: Adding interface: wlan0
[  610.204044][T32440] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.239063][T32440] batman_adv: batadv0: Interface activated: wlan0
[  610.275120][T32442] bond4: entered promiscuous mode
[  610.301070][T32442] 8021q: adding VLAN 0 to HW filter on device bond4
[  610.472968][T32442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7100'.
[  610.583833][T32465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7103'.
[  610.647848][T32458] lo speed is unknown, defaulting to 1000
[  610.969000][T32486] netlink: 'syz.2.7111': attribute type 2 has an invalid length.
[  610.981850][T32489] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7110'.
[  611.250438][T32503] netlink: 110 bytes leftover after parsing attributes in process `syz.4.7113'.
[  611.360714][   T13] net_ratelimit: 83 callbacks suppressed
[  611.360744][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  611.416956][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  611.647411][T32524] sit0: entered promiscuous mode
[  611.660614][T32524] netlink: 'syz.3.7120': attribute type 1 has an invalid length.
[  611.672516][T32524] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7120'.
[  611.695625][T32529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7122'.
[  611.697602][T32536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7123'.
[  611.746048][T14624] bond4: (slave bridge1): failed to get link speed/duplex
[  611.997681][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  612.037560][T14625] bond2: (slave geneve2): failed to get link speed/duplex
[  612.048958][T14625] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  612.115910][   T13] bond4: (slave bridge1): failed to get link speed/duplex
[  612.223593][T32573] netlink: 'syz.4.7135': attribute type 21 has an invalid length.
[  612.232710][T14625] bond2: (slave geneve2): failed to get link speed/duplex
[  612.236330][T32573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7135'.
[  612.249202][T14625] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  612.255891][T14625] bond4: (slave bridge1): failed to get link speed/duplex
[  612.481771][T32597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7143'.
[  612.696345][T32607] rdma_rxe: rxe_newlink: failed to add lo
[  613.023026][T32629] netlink: 'syz.1.7154': attribute type 16 has an invalid length.
[  613.034096][T32629] netlink: 'syz.1.7154': attribute type 17 has an invalid length.
[  613.154073][T32636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.179010][T32642] netlink: 'syz.3.7160': attribute type 10 has an invalid length.
[  613.196910][T32634] tipc: Disabling bearer <eth:syzkaller0>
[  613.951080][T32682] lo speed is unknown, defaulting to 1000
[  614.114809][T32692] netlink: 'syz.0.7177': attribute type 89 has an invalid length.
[  615.143562][T32729] syzkaller0: entered promiscuous mode
[  615.167646][T32729] syzkaller0: entered allmulticast mode
[  615.229415][T32741] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  615.251052][T32743] __nla_validate_parse: 6 callbacks suppressed
[  615.251068][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7185'.
[  615.267064][T32727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  615.291019][T32722] tipc: Resetting bearer <eth:syzkaller0>
[  615.356604][T32722] tipc: Disabling bearer <eth:syzkaller0>
[  615.408341][T32743] veth1_macvtap: left promiscuous mode
[  615.488604][T32746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7185'.
[  615.526375][   T50] Bluetooth: hci4: command tx timeout
[  616.020006][  T328] netlink: 'syz.4.7195': attribute type 21 has an invalid length.
[  616.042351][  T328] netlink: 'syz.4.7195': attribute type 1 has an invalid length.
[  616.043395][  T330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7198'.
[  616.060080][  T328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7195'.
[  616.183706][  T339] syz.0.7200: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  616.213271][  T339] CPU: 0 UID: 0 PID: 339 Comm: syz.0.7200 Not tainted syzkaller #0 PREEMPT(full) 
[  616.213294][  T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  616.213305][  T339] Call Trace:
[  616.213312][  T339]  <TASK>
[  616.213319][  T339]  dump_stack_lvl+0xe8/0x150
[  616.213343][  T339]  warn_alloc+0x249/0x340
[  616.213367][  T339]  ? __pfx_stack_trace_save+0x10/0x10
[  616.213391][  T339]  ? __pfx_warn_alloc+0x10/0x10
[  616.213415][  T339]  ? __kasan_kmalloc+0x93/0xb0
[  616.213435][  T339]  ? __kmalloc_cache_noprof+0x318/0x660
[  616.213464][  T339]  ? xskq_create+0x56/0x170
[  616.213486][  T339]  ? xsk_init_queue+0x8a/0xe0
[  616.213503][  T339]  ? xsk_setsockopt+0x52a/0x960
[  616.213519][  T339]  ? do_sock_setsockopt+0x17c/0x1b0
[  616.213540][  T339]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  616.213560][  T339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.213580][  T339]  __vmalloc_node_range_noprof+0x12c/0x1730
[  616.213612][  T339]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  616.213636][  T339]  ? __kasan_kmalloc+0x93/0xb0
[  616.213659][  T339]  vmalloc_user_noprof+0xad/0xe0
[  616.213678][  T339]  ? xskq_create+0xbf/0x170
[  616.213697][  T339]  xskq_create+0xbf/0x170
[  616.213716][  T339]  xsk_init_queue+0x8a/0xe0
[  616.213736][  T339]  xsk_setsockopt+0x52a/0x960
[  616.213753][  T339]  ? __pfx_xsk_setsockopt+0x10/0x10
[  616.213770][  T339]  ? __pfx_aa_sk_perm+0x10/0x10
[  616.213793][  T339]  ? lock_release+0x4b/0x3c0
[  616.213815][  T339]  ? aa_sock_opt_perm+0xff/0x1a0
[  616.213832][  T339]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  616.213852][  T339]  ? __pfx_xsk_setsockopt+0x10/0x10
[  616.213870][  T339]  do_sock_setsockopt+0x17c/0x1b0
[  616.213893][  T339]  __x64_sys_setsockopt+0x13d/0x1b0
[  616.213915][  T339]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.213931][  T339]  do_syscall_64+0x174/0x580
[  616.213950][  T339]  ? trace_irq_disable+0x3b/0x140
[  616.213971][  T339]  ? clear_bhb_loop+0x40/0x90
[  616.213988][  T339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.214004][  T339] RIP: 0033:0x7f37f2d9ce59
[  616.214020][  T339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.214035][  T339] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  616.214053][  T339] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  616.214066][  T339] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  616.214075][  T339] RBP: 00007f37f2e32d6f R08: 0000000000000004 R09: 0000000000000000
[  616.214086][  T339] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.214096][  T339] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  616.214116][  T339]  </TASK>
[  616.214132][  T339] Mem-Info:
[  616.467633][T14634] net_ratelimit: 83 callbacks suppressed
[  616.467663][T14634] bond2: (slave geneve2): failed to get link speed/duplex
[  616.476483][  T339] active_anon:12623 inactive_anon:0 isolated_anon:0
[  616.476483][  T339]  active_file:3815 inactive_file:40190 isolated_file:0
[  616.476483][  T339]  unevictable:768 dirty:302 writeback:0
[  616.476483][  T339]  slab_reclaimable:15055 slab_unreclaimable:241705
[  616.476483][  T339]  mapped:31208 shmem:1297 pagetables:1674
[  616.476483][  T339]  sec_pagetables:0 bounce:0
[  616.476483][  T339]  kernel_misc_reclaimable:0
[  616.476483][  T339]  free:1141625 free_pcp:28601 free_cma:0
[  616.557602][  T339] Node 0 active_anon:50592kB inactive_anon:0kB active_file:15260kB inactive_file:160548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83872kB dirty:1204kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20620kB pagetables:6544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  616.589671][T14634] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  616.621382][  T349] netlink: 'syz.0.7200': attribute type 10 has an invalid length.
[  616.653084][  T339] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  616.653857][  T349] bond0: (slave dummy0): Releasing backup interface
[  616.705050][  T339] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB
[  616.707682][  T349] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  616.753810][  T339] lowmem_reserve[]: 0 2492 2493 2493 2493
[  616.761275][  T339] Node 0 DMA32 free:815024kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50428kB inactive_anon:0kB active_file:15260kB inactive_file:160548kB unevictable:1536kB writepending:1184kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:46768kB local_pcp:25008kB free_cma:0kB
[  616.761394][T14634] bond4: (slave bridge1): failed to get link speed/duplex
[  616.813046][  T339] lowmem_reserve[]: 0 0 0 0 0
[  616.818294][  T339] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  616.847965][  T339] lowmem_reserve[]: 0 0 0 0 0
[  616.852707][  T339] Node 1 Normal free:3741836kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66432kB local_pcp:34392kB free_cma:0kB
[  616.885256][  T339] lowmem_reserve[]: 0 0 0 0 0
[  616.890051][  T339] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB
[  616.905402][  T339] Node 0 DMA32: 4263*4kB (UME) 6458*8kB (UME) 4261*16kB (UME) 267*32kB (UME) 77*64kB (UM) 363*128kB (UM) 467*256kB (UM) 320*512kB (UM) 186*1024kB (UM) 71*2048kB (UME) 0*4096kB = 816092kB
[  616.924086][T14620] bond4: (slave bridge1): failed to get link speed/duplex
[  616.934750][T14620] bond2: (slave geneve2): failed to get link speed/duplex
[  616.943182][  T339] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  616.948062][T14620] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  616.956151][  T339] Node 1 Normal: 9*4kB (U) 15*8kB (UM) 17*16kB (UM) 13*32kB (UM) 13*64kB (UM) 18*128kB (UM) 19*256kB (UM) 15*512kB (UM) 14*1024kB (UM) 14*2048kB (U) 899*4096kB (UM) = 3741836kB
[  616.982076][  T339] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  616.992814][  T339] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.005112][  T339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.015692][  T339] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.026117][  T339] 45300 total pagecache pages
[  617.030962][  T339] 0 pages in swap cache
[  617.035251][  T339] Free swap  = 124996kB
[  617.040318][  T339] Total swap = 124996kB
[  617.044501][  T339] 2097051 pages RAM
[  617.050312][  T339] 0 pages HighMem/MovableOnly
[  617.054993][  T339] 427122 pages reserved
[  617.059366][  T339] 0 pages cma reserved
[  617.066123][T14634] bond4: (slave bridge1): failed to get link speed/duplex
[  617.088131][ T7712] bond2: (slave geneve2): failed to get link speed/duplex
[  617.095283][ T7712] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  617.176321][ T7712] bond4: (slave bridge1): failed to get link speed/duplex
[  617.277715][  T370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7206'.
[  617.515640][  T380] netlink: 'syz.0.7209': attribute type 1 has an invalid length.
[  617.523586][  T380] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7209'.
[  618.801011][  T313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  618.872651][  T387] batman_adv: batadv0: Adding interface: dummy0
[  618.882231][  T387] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.915669][  T387] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  619.006567][  T396] netlink: 'syz.4.7213': attribute type 1 has an invalid length.
[  619.037245][  T396] netlink: 'syz.4.7213': attribute type 3 has an invalid length.
[  619.050387][  T396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7213'.
[  619.129428][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  619.188027][  T410] nbd: socks must be embedded in a SOCK_ITEM attr
[  619.318527][  T415] netlink: 'syz.0.7219': attribute type 1 has an invalid length.
[  619.326279][  T415] netlink: 'syz.0.7219': attribute type 2 has an invalid length.
[  619.333997][  T415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7219'.
[  619.406299][  T401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.416621][  T401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.454196][  T421] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7222'.
[  619.471530][  T421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7222'.
[  619.634223][  T401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.664051][  T401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.740749][  T401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.757863][  T401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.825693][  T401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  619.837506][  T401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  619.938777][T14634] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  619.948580][T14634] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.963526][T14634] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  619.972797][T14634] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.992213][T14634] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  620.003859][T14634] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  620.020725][T14634] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  620.029205][T14634] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.131128][  T445] xt_CT: You must specify a L4 protocol and not use inversions on it
[  620.349697][  T460] IPVS: Error connecting to the multicast addr
[  620.775155][  T489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7240'.
[  620.837152][  T494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7240'.
[  620.889621][  T493] netlink: 'syz.4.7238': attribute type 2 has an invalid length.
[  620.903105][  T496] vlan2: entered promiscuous mode
[  620.932476][  T496] bridge0: entered promiscuous mode
[  621.074922][T28861] udevd[28861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  621.160051][  T517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7246'.
[  621.405888][  T529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7250'.
[  621.427367][  T529] IPv6: NLM_F_CREATE should be specified when creating new route
[  621.467629][  T534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7252'.
[  621.477357][T14624] net_ratelimit: 95 callbacks suppressed
[  621.477388][T14624] bond4: (slave bridge1): failed to get link speed/duplex
[  621.501613][T14634] bond2: (slave geneve2): failed to get link speed/duplex
[  621.511081][T14634] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  621.524745][  T534] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7252'.
[  621.543873][  T539] bridge0: port 1(veth1_vlan) entered blocking state
[  621.568098][  T539] bridge0: port 1(veth1_vlan) entered disabled state
[  621.587894][  T539] veth1_vlan: entered allmulticast mode
[  621.601691][  T539] veth1_vlan: left allmulticast mode
[  621.649231][T14634] bond2: (slave geneve2): failed to get link speed/duplex
[  621.660264][T14634] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  621.700114][  T545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7253'.
[  621.719768][ T7712] bond4: (slave bridge1): failed to get link speed/duplex
[  621.818915][  T549] IPVS: persistence engine module ip_vs_pe_À not found
[  621.827318][  T554] 8021q: adding VLAN 0 to HW filter on device bond6
[  621.887269][T14624] bond2: (slave geneve2): failed to get link speed/duplex
[  621.895559][T14624] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  621.905948][T14624] bond4: (slave bridge1): failed to get link speed/duplex
[  621.907486][  T565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7260'.
[  622.008756][  T572] x_tables: duplicate underflow at hook 2
[  622.011756][T11519] bond2: (slave geneve2): failed to get link speed/duplex
[  622.014602][  T573] x_tables: duplicate underflow at hook 2
[  622.304811][  T589] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  622.372994][  T589] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  622.474491][  T589] 8021q: adding VLAN 0 to HW filter on device batadv1
[  622.533624][  T589] bridge0: port 3(vlan2) entered blocking state
[  622.540368][  T589] bridge0: port 3(vlan2) entered forwarding state
[  622.562757][  T589] 8021q: adding VLAN 0 to HW filter on device bond2
[  622.599992][  T589] bond3: left promiscuous mode
[  622.608535][  T589] veth5: left promiscuous mode
[  622.631421][  T589] bond4: left promiscuous mode
[  622.645169][T14625] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.652709][T14625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.940309][  T627] vlan2: entered promiscuous mode
[  622.945549][  T627] bridge0: entered promiscuous mode
[  623.020912][  T630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7277'.
[  623.086534][  T635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7280'.
[  623.173528][  T644] netlink: 'syz.4.7281': attribute type 10 has an invalid length.
[  623.230379][  T644] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  623.246849][ T9145] team_slave_0: entered promiscuous mode
[  623.252545][ T9145] team_slave_1: entered promiscuous mode
[  623.258232][ T9145] geneve1: entered promiscuous mode
[  623.629453][  T664] syz_tun: left promiscuous mode
[  623.997150][  T674] Bluetooth: hci0: Opcode 0x080f failed: -22
[  624.252326][  T686] macvtap1: entered promiscuous mode
[  624.258170][  T686] vlan0: entered promiscuous mode
[  624.388772][  T686] vlan0: left promiscuous mode
[  624.785573][  T713] netlink: 'syz.2.7303': attribute type 1 has an invalid length.
[  624.796811][  T713] netlink: 'syz.2.7303': attribute type 2 has an invalid length.
[  625.029675][  T718] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  625.175721][  T725] netlink: 'syz.1.7307': attribute type 1 has an invalid length.
[  625.189331][  T727] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  625.320325][  T733] syzkaller0: entered promiscuous mode
[  625.326035][  T733] syzkaller0: entered allmulticast mode
[  625.334816][  T733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  625.352241][  T732] tipc: Resetting bearer <eth:syzkaller0>
[  625.377660][  T732] tipc: Disabling bearer <eth:syzkaller0>
[  625.399451][  T738] netlink: 'syz.1.7312': attribute type 7 has an invalid length.
[  625.408360][  T738] netlink: 'syz.1.7312': attribute type 8 has an invalid length.
[  625.601321][  T752] pimreg9: entered allmulticast mode
[  625.629653][  T751] syzkaller0: entered promiscuous mode
[  625.645671][  T751] syzkaller0: entered allmulticast mode
[  625.763532][  T761] hmac(sha224): entered promiscuous mode
[  626.016509][  T791] __nla_validate_parse: 6 callbacks suppressed
[  626.016553][  T791] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7329'.
[  626.025324][  T787] lo speed is unknown, defaulting to 1000
[  626.083631][  T790] block nbd0: must specify backend
[  626.144905][  T798] netlink: 'syz.4.7330': attribute type 3 has an invalid length.
[  626.231913][  T802] tap0: tun_chr_ioctl cmd 2147767520
[  626.474060][  T809] lo speed is unknown, defaulting to 1000
[  626.506189][T19382] net_ratelimit: 95 callbacks suppressed
[  626.506206][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  626.535985][T19415] bond2: (slave geneve2): failed to get link speed/duplex
[  626.551756][T19415] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  626.554436][  T815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7334'.
[  626.746908][  T815] 8021q: adding VLAN 0 to HW filter on device bond8
[  626.758532][  T821] bond8: entered promiscuous mode
[  626.765951][  T821] bond8: entered allmulticast mode
[  626.807784][T19406] bond2: (slave geneve2): failed to get link speed/duplex
[  626.831333][T19406] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  626.846099][  T825] netlink: 'syz.1.7336': attribute type 13 has an invalid length.
[  626.906909][  T815] bond8 (unregistering): Released all slaves
[  627.046714][T19387] bond2: (slave geneve2): failed to get link speed/duplex
[  627.060978][T19387] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  627.089000][  T828] FAULT_INJECTION: forcing a failure.
[  627.089000][  T828] name failslab, interval 1, probability 0, space 0, times 0
[  627.102363][  T828] CPU: 1 UID: 0 PID: 828 Comm: syz.0.7337 Not tainted syzkaller #0 PREEMPT(full) 
[  627.102386][  T828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  627.102396][  T828] Call Trace:
[  627.102402][  T828]  <TASK>
[  627.102410][  T828]  dump_stack_lvl+0xe8/0x150
[  627.102434][  T828]  should_fail_ex+0x40c/0x560
[  627.102453][  T828]  should_failslab+0xa8/0x100
[  627.102477][  T828]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  627.102501][  T828]  ? pfn_valid+0x125/0x4c0
[  627.102521][  T828]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  627.102549][  T828]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  627.102575][  T828]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  627.102607][  T828]  ? 0xffffffffa020316c
[  627.102620][  T828]  ? 0xffffffffa0203db0
[  627.102632][  T828]  ? 0xffffffffa0203e1c
[  627.102654][  T828]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  627.102674][  T828]  ? _copy_from_user+0x94/0xb0
[  627.102694][  T828]  ? bpf_test_init+0x113/0x150
[  627.102721][  T828]  ? xdp_convert_md_to_buff+0x5b/0x330
[  627.102744][  T828]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  627.102764][  T828]  ? trace_irq_enable+0x3b/0x140
[  627.102790][  T828]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  627.102815][  T828]  ? bpf_prog_test_run_xdp+0x15/0x11d0
[  627.102838][  T828]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  627.102860][  T828]  bpf_prog_test_run+0x2c5/0x340
[  627.102884][  T828]  __sys_bpf+0x643/0x950
[  627.102904][  T828]  ? __pfx___sys_bpf+0x10/0x10
[  627.102931][  T828]  ? rcu_is_watching+0x15/0xb0
[  627.102950][  T828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.102968][  T828]  __x64_sys_bpf+0x7c/0x90
[  627.102986][  T828]  do_syscall_64+0x174/0x580
[  627.103007][  T828]  ? trace_irq_disable+0x3b/0x140
[  627.103026][  T828]  ? clear_bhb_loop+0x40/0x90
[  627.103044][  T828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.103060][  T828] RIP: 0033:0x7f37f2d9ce59
[  627.103075][  T828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.103089][  T828] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  627.103107][  T828] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  627.103119][  T828] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  627.103130][  T828] RBP: 00007f37f3be8090 R08: 0000000000000000 R09: 0000000000000000
[  627.103140][  T828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  627.103150][  T828] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  627.103168][  T828]  </TASK>
[  627.565918][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  627.585980][T19406] bond2: (slave geneve2): failed to get link speed/duplex
[  627.594847][T19406] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  627.710767][  T842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.833102][  T842] syzkaller0: entered promiscuous mode
[  627.864657][  T842] syzkaller0: entered allmulticast mode
[  627.900478][  T842] tipc: Resetting bearer <eth:syzkaller0>
[  627.923518][T19383] tipc: Resetting bearer <eth:syzkaller0>
[  627.977993][  T841] tipc: Resetting bearer <eth:syzkaller0>
[  628.152327][  T841] tipc: Disabling bearer <eth:syzkaller0>
[  628.443012][  T879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'.
[  628.479686][  T872] batman_adv: batadv0: Removing interface: dummy0
[  628.921775][  T903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7356'.
[  628.961985][  T901] syzkaller0: entered promiscuous mode
[  628.967634][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  628.978332][    C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  629.074239][  T901] syzkaller0: entered allmulticast mode
[  629.108829][  T920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7360'.
[  629.115994][  T915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.146437][  T900] tipc: Resetting bearer <eth:syzkaller0>
[  629.182959][  T900] tipc: Disabling bearer <eth:syzkaller0>
[  629.209868][  T920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7360'.
[  629.301372][  T925] geneve0: entered promiscuous mode
[  629.361856][  T925] macvlan2: entered promiscuous mode
[  629.376112][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  629.520755][  T964] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001
[  630.009285][  T990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'.
[  630.208839][  T930] bridge0: port 3(vlan2) entered disabled state
[  630.216617][  T930] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.224477][  T930] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.353566][  T985] netlink: 'syz.3.7366': attribute type 10 has an invalid length.
[  630.528467][  T930] team_slave_0: left promiscuous mode
[  630.554451][  T930] team_slave_1: left promiscuous mode
[  630.584048][  T930] geneve1: left promiscuous mode
[  631.202686][  T930] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.243552][  T930] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.620339][  T930] tipc: Resetting bearer <eth:macvlan1>
[  631.962108][  T930] gre1: left allmulticast mode
[  632.032768][  T995] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  632.129993][T19383] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.145684][T19383] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0
[  632.159023][T19383] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.175331][T19383] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.185391][T19383] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0
[  632.207651][T19383] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.234670][T19383] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.251073][T19383] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0
[  632.260700][T19383] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.283153][ T1088] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  632.324830][ T1088] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0
[  632.345287][ T1088] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.380714][ T1030] ip6erspan1: entered allmulticast mode
[  632.418668][ T1039] dvmrp0: entered allmulticast mode
[  632.476233][ T1088] net_ratelimit: 28 callbacks suppressed
[  632.476251][ T1088] bond2: (slave geneve2): failed to get link speed/duplex
[  632.522236][ T1088] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  632.546354][T19387] bond4: (slave bridge1): failed to get link speed/duplex
[  632.647682][ T1088] bond2: (slave geneve2): failed to get link speed/duplex
[  632.663958][ T1088] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  632.682437][ T1073] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  632.816049][T19406] bond2: (slave geneve2): failed to get link speed/duplex
[  632.833343][ T1093] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7384'.
[  632.842956][T19406] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  633.090278][ T1106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  633.111400][T19406] bond2: (slave geneve2): failed to get link speed/duplex
[  633.119853][T19406] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  633.127566][ T1106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7389'.
[  633.202148][ T1113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7390'.
[  633.275375][ T1098] batman_adv: batadv0: Interface deactivated: wlan0
[  633.460615][ T1127] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7394'.
[  633.501008][ T1127] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7394'.
[  633.626482][ T1137] ip6tnl0: Caught tx_queue_len zero misconfig
[  633.783412][ T1152] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  636.761803][ T1149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  636.906211][ T1229] bond8: entered allmulticast mode
[  636.933577][ T1229] ipip0: entered promiscuous mode
[  636.935036][ T1238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7412'.
[  636.939300][ T1229] ipip0: entered allmulticast mode
[  636.953936][ T1229] bond8: (slave ipip0): The slave device specified does not support setting the MAC address
[  636.964980][ T1229] bond8: (slave ipip0): Error -95 calling set_mac_address
[  637.012006][ T1238] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  637.084555][ T1243] veth0: entered promiscuous mode
[  637.139626][ T1248] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  637.157869][ T1248] bond5 (unregistering): Released all slaves
[  637.197154][ T1232] veth0: left promiscuous mode
[  637.214601][ T1249] lo: Caught tx_queue_len zero misconfig
[  637.438107][ T1274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7423'.
[  637.439783][ T1272] FAULT_INJECTION: forcing a failure.
[  637.439783][ T1272] name failslab, interval 1, probability 0, space 0, times 0
[  637.460805][ T1272] CPU: 1 UID: 0 PID: 1272 Comm: syz.0.7421 Not tainted syzkaller #0 PREEMPT(full) 
[  637.460826][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  637.460836][ T1272] Call Trace:
[  637.460843][ T1272]  <TASK>
[  637.460850][ T1272]  dump_stack_lvl+0xe8/0x150
[  637.460874][ T1272]  should_fail_ex+0x40c/0x560
[  637.460894][ T1272]  should_failslab+0xa8/0x100
[  637.460917][ T1272]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  637.460947][ T1272]  ? pfn_valid+0x125/0x4c0
[  637.460966][ T1272]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  637.460993][ T1272]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  637.461019][ T1272]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  637.461050][ T1272]  ? 0xffffffffa020316c
[  637.461063][ T1272]  ? 0xffffffffa020324c
[  637.461076][ T1272]  ? 0xffffffffa0203db0
[  637.461098][ T1272]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  637.461119][ T1272]  ? _copy_from_user+0x94/0xb0
[  637.461138][ T1272]  ? bpf_test_init+0x113/0x150
[  637.461158][ T1272]  ? xdp_convert_md_to_buff+0x5b/0x330
[  637.461180][ T1272]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  637.461206][ T1272]  ? rcu_is_watching+0x15/0xb0
[  637.461223][ T1272]  ? lock_release+0x4b/0x3c0
[  637.461245][ T1272]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  637.461268][ T1272]  ? __fget_files+0x2a/0x420
[  637.461288][ T1272]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  637.461310][ T1272]  bpf_prog_test_run+0x2c5/0x340
[  637.461333][ T1272]  __sys_bpf+0x643/0x950
[  637.461353][ T1272]  ? __pfx___sys_bpf+0x10/0x10
[  637.461379][ T1272]  ? irqtime_account_irq+0x1f8/0x260
[  637.461400][ T1272]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.461417][ T1272]  __x64_sys_bpf+0x7c/0x90
[  637.461432][ T1272]  do_syscall_64+0x174/0x580
[  637.461454][ T1272]  ? clear_bhb_loop+0x40/0x90
[  637.461471][ T1272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.461487][ T1272] RIP: 0033:0x7f37f2d9ce59
[  637.461501][ T1272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.461515][ T1272] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  637.461533][ T1272] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  637.461545][ T1272] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  637.461556][ T1272] RBP: 00007f37f3be8090 R08: 0000000000000000 R09: 0000000000000000
[  637.461567][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  637.461577][ T1272] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  637.461596][ T1272]  </TASK>
[  637.877615][ T1289] FAULT_INJECTION: forcing a failure.
[  637.877615][ T1289] name failslab, interval 1, probability 0, space 0, times 0
[  637.890261][ T1289] CPU: 0 UID: 0 PID: 1289 Comm: syz.1.7424 Not tainted syzkaller #0 PREEMPT(full) 
[  637.890275][ T1289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  637.890282][ T1289] Call Trace:
[  637.890287][ T1289]  <TASK>
[  637.890292][ T1289]  dump_stack_lvl+0xe8/0x150
[  637.890306][ T1289]  should_fail_ex+0x40c/0x560
[  637.890319][ T1289]  should_failslab+0xa8/0x100
[  637.890340][ T1289]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  637.890352][ T1289]  ? rcu_is_watching+0x15/0xb0
[  637.890362][ T1289]  ? __alloc_skb+0x1d7/0x7a0
[  637.890374][ T1289]  ? trace_irq_enable+0x3b/0x140
[  637.890387][ T1289]  __alloc_skb+0x1d7/0x7a0
[  637.890400][ T1289]  netlink_sendmsg+0x5d4/0xb40
[  637.890416][ T1289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.890430][ T1289]  ? aa_sock_msg_perm+0xf1/0x1b0
[  637.890440][ T1289]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  637.890452][ T1289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  637.890465][ T1289]  ____sys_sendmsg+0x9b9/0xa20
[  637.890481][ T1289]  ? __pfx_____sys_sendmsg+0x10/0x10
[  637.890494][ T1289]  ? lock_release+0x4b/0x3c0
[  637.890508][ T1289]  ? import_iovec+0x73/0xa0
[  637.890521][ T1289]  ___sys_sendmsg+0x2a5/0x360
[  637.890534][ T1289]  ? rcu_is_watching+0x15/0xb0
[  637.890543][ T1289]  ? get_pid_task+0x20/0x1f0
[  637.890553][ T1289]  ? __pfx____sys_sendmsg+0x10/0x10
[  637.890566][ T1289]  ? rcu_is_watching+0x15/0xb0
[  637.890581][ T1289]  ? __fget_files+0x2a/0x420
[  637.890591][ T1289]  ? __fget_files+0x3a2/0x420
[  637.890602][ T1289]  __x64_sys_sendmsg+0x1b1/0x290
[  637.890615][ T1289]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  637.890631][ T1289]  ? rcu_is_watching+0x15/0xb0
[  637.890640][ T1289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.890649][ T1289]  do_syscall_64+0x174/0x580
[  637.890662][ T1289]  ? trace_irq_disable+0x3b/0x140
[  637.890674][ T1289]  ? clear_bhb_loop+0x40/0x90
[  637.890684][ T1289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.890693][ T1289] RIP: 0033:0x7f5bd139ce59
[  637.890703][ T1289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.890711][ T1289] RSP: 002b:00007f5bcf5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  637.890722][ T1289] RAX: ffffffffffffffda RBX: 00007f5bd1616180 RCX: 00007f5bd139ce59
[  637.890729][ T1289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  637.890735][ T1289] RBP: 00007f5bcf5d5090 R08: 0000000000000000 R09: 0000000000000000
[  637.890741][ T1289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.890746][ T1289] R13: 00007f5bd1616218 R14: 00007f5bd1616180 R15: 00007ffc44937088
[  637.890757][ T1289]  </TASK>
[  638.165157][T19383] net_ratelimit: 109 callbacks suppressed
[  638.165173][T19383] bond2: (slave geneve2): failed to get link speed/duplex
[  638.178093][T19383] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  638.302887][ T1298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7428'.
[  638.875983][T19416] bond2: (slave geneve2): failed to get link speed/duplex
[  638.886544][T19416] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  638.915976][ T1088] bond4: (slave bridge1): failed to get link speed/duplex
[  639.008013][T19386] bond2: (slave geneve2): failed to get link speed/duplex
[  639.028301][T19386] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  639.050463][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  639.167998][T19387] bond2: (slave geneve2): failed to get link speed/duplex
[  639.185144][T19387] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  641.686050][   T50] Bluetooth: hci5: command 0x0406 tx timeout
[  643.255929][T19387] net_ratelimit: 106 callbacks suppressed
[  643.255949][T19387] bond2: (slave geneve2): failed to get link speed/duplex
[  643.269250][T19387] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  643.305913][T19416] bond4: (slave bridge1): failed to get link speed/duplex
[  643.385966][T19416] bond2: (slave geneve2): failed to get link speed/duplex
[  643.393488][T19416] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  643.415921][ T1088] bond4: (slave bridge1): failed to get link speed/duplex
[  643.506457][T19382] bond2: (slave geneve2): failed to get link speed/duplex
[  643.513607][T19382] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  643.525910][T19416] bond4: (slave bridge1): failed to get link speed/duplex
[  643.626215][T19387] bond2: (slave geneve2): failed to get link speed/duplex
[  644.379626][ T1335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7437'.
[  644.538477][ T1340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7438'.
[  644.548373][ T1341] netlink: 'syz.2.7438': attribute type 1 has an invalid length.
[  644.556587][ T1341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7438'.
[  644.571377][ T1340] bridge3: entered promiscuous mode
[  644.576782][ T1340] bridge3: entered allmulticast mode
[  648.096490][ T1349] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.109005][ T1349] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.137192][ T1351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.147862][ T1351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.179546][ T1352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7442'.
[  648.338190][ T1362] net_ratelimit: 119 callbacks suppressed
[  648.338208][ T1362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.527514][ T1355] geneve0: left promiscuous mode
[  648.544198][ T1352] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  648.572806][ T1352] bridge4: entered allmulticast mode
[  648.597335][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  648.651483][ T1088] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  648.673240][ T1088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  648.690429][ T1349] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.700668][ T1349] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.750214][ T1380] FAULT_INJECTION: forcing a failure.
[  648.750214][ T1380] name failslab, interval 1, probability 0, space 0, times 0
[  648.763623][ T1380] CPU: 1 UID: 0 PID: 1380 Comm: syz.0.7446 Not tainted syzkaller #0 PREEMPT(full) 
[  648.763647][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  648.763657][ T1380] Call Trace:
[  648.763664][ T1380]  <TASK>
[  648.763672][ T1380]  dump_stack_lvl+0xe8/0x150
[  648.763695][ T1380]  should_fail_ex+0x40c/0x560
[  648.763716][ T1380]  should_failslab+0xa8/0x100
[  648.763739][ T1380]  kmem_cache_alloc_bulk_noprof+0x85/0x7c0
[  648.763763][ T1380]  ? pfn_valid+0x125/0x4c0
[  648.763782][ T1380]  bpf_test_run_xdp_live+0x16e9/0x1c20
[  648.763810][ T1380]  ? bpf_test_run_xdp_live+0x43e/0x1c20
[  648.763836][ T1380]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  648.763868][ T1380]  ? 0xffffffffa020316c
[  648.763881][ T1380]  ? 0xffffffffa0203258
[  648.763893][ T1380]  ? 0xffffffffa0203db0
[  648.763916][ T1380]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  648.763935][ T1380]  ? _copy_from_user+0x94/0xb0
[  648.763953][ T1380]  ? bpf_test_init+0x113/0x150
[  648.763970][ T1380]  ? xdp_convert_md_to_buff+0x5b/0x330
[  648.763991][ T1380]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  648.764011][ T1380]  ? lock_release+0x4b/0x3c0
[  648.764036][ T1380]  ? rcu_is_watching+0x15/0xb0
[  648.764051][ T1380]  ? lock_release+0x4b/0x3c0
[  648.764070][ T1380]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  648.764093][ T1380]  ? __fget_files+0x2a/0x420
[  648.764112][ T1380]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  648.764132][ T1380]  bpf_prog_test_run+0x2c5/0x340
[  648.764154][ T1380]  __sys_bpf+0x643/0x950
[  648.764173][ T1380]  ? __pfx___sys_bpf+0x10/0x10
[  648.764198][ T1380]  ? ksys_write+0x242/0x270
[  648.764219][ T1380]  ? __pfx_ksys_write+0x10/0x10
[  648.764239][ T1380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.764256][ T1380]  __x64_sys_bpf+0x7c/0x90
[  648.764274][ T1380]  do_syscall_64+0x174/0x580
[  648.764293][ T1380]  ? trace_irq_disable+0x3b/0x140
[  648.764313][ T1380]  ? clear_bhb_loop+0x40/0x90
[  648.764329][ T1380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.764343][ T1380] RIP: 0033:0x7f37f2d9ce59
[  648.764358][ T1380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.764372][ T1380] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  648.764389][ T1380] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  648.764401][ T1380] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  648.764411][ T1380] RBP: 00007f37f3be8090 R08: 0000000000000000 R09: 0000000000000000
[  648.764420][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  648.764430][ T1380] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  648.764449][ T1380]  </TASK>
[  649.055552][ T1351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.088121][ T1351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.130418][ T1088] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  649.140179][ T1088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.150586][ T1088] bond4: (slave bridge1): failed to get link speed/duplex
[  649.167746][ T1349] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.178621][ T1349] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.201644][T19387] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  649.213415][T19387] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  649.229941][ T1388] tipc: Enabled bearer <ib:wg1>, priority 10
[  649.236314][ T1389] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  649.251329][ T1351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.262568][ T1351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.290979][ T1088] bond4: (slave bridge1): failed to get link speed/duplex
[  649.355168][ T1349] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.368335][ T1349] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.383372][ T1397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7448'.
[  649.391253][ T1399] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7449'.
[  649.418787][ T1351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  649.421982][ T1399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7449'.
[  649.438856][ T1351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.451884][ T1395] syzkaller1: entered promiscuous mode
[  649.461142][ T1395] syzkaller1: entered allmulticast mode
[  649.470389][ T1400] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  649.485013][ T1395] xt_CONNSECMARK: invalid mode: 254
[  649.506103][T19387] bond4: (slave bridge1): failed to get link speed/duplex
[  649.522702][ T1402] netlink: 'syz.0.7451': attribute type 1 has an invalid length.
[  649.533191][ T1402] netlink: 'syz.0.7451': attribute type 2 has an invalid length.
[  649.542505][ T1402] netlink: 'syz.0.7451': attribute type 3 has an invalid length.
[  649.566936][ T1088] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  649.575269][ T1088] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.601702][ T1088] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  649.613172][ T1088] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.637147][ T1088] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  649.645456][ T1088] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.674923][ T1088] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  649.683297][ T1088] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  649.692213][ T1088] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  649.709370][ T1088] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.709709][ T1410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7453'.
[  649.724800][ T1088] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  649.735975][ T1088] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  649.748017][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  649.756032][ T1088] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  649.764661][ T1088] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.774548][ T1088] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  649.785339][ T1088] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  649.827832][ T1411] netlink: 'syz.0.7453': attribute type 4 has an invalid length.
[  649.830653][ T1414] sctp: [Deprecated]: syz.1.7454 (pid 1414) Use of int in max_burst socket option.
[  649.830653][ T1414] Use struct sctp_assoc_value instead
[  649.883370][ T1414] bridge0: port 3(ipvlan2) entered blocking state
[  649.893313][ T1422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7457'.
[  649.902585][ T1414] bridge0: port 3(ipvlan2) entered disabled state
[  649.906449][ T1422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7457'.
[  649.922993][ T1414] ipvlan2: entered allmulticast mode
[  649.928939][ T1414] bridge0: entered allmulticast mode
[  649.935445][ T1414] ipvlan2: left allmulticast mode
[  649.940922][ T1414] bridge0: left allmulticast mode
[  649.963924][ T1422] geneve2: entered promiscuous mode
[  649.969963][ T1422] geneve2: entered allmulticast mode
[  649.977978][T19406] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.993654][T19406] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.021013][T19406] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.030950][T19406] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.043038][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'.
[  650.052369][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  650.064238][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'.
[  650.067237][ T1433] netlink: 'syz.1.7459': attribute type 1 has an invalid length.
[  650.102450][ T1433] 8021q: adding VLAN 0 to HW filter on device bond1
[  650.121230][ T1431] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  650.148159][ T1437] x_tables: duplicate underflow at hook 1
[  650.156327][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  650.165515][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  650.177521][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_0
[  650.187087][ T1431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  650.204611][ T1431] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.212712][ T1431] batman_adv: batadv0: Removing interface: wlan0
[  650.265620][ T1443] netlink: 'syz.1.7461': attribute type 29 has an invalid length.
[  650.273627][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  650.379999][ T1460] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  650.596541][ T1475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7468'.
[  651.161953][ T1502] xt_CT: You must specify a L4 protocol and not use inversions on it
[  651.612433][ T1519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7482'.
[  651.654413][ T1520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7481'.
[  651.876542][ T1526] netlink: 'syz.1.7484': attribute type 30 has an invalid length.
[  651.886669][ T1527] netlink: 'syz.1.7484': attribute type 30 has an invalid length.
[  651.924882][ T1527] bond2: option arp_missed_max: invalid value (0)
[  651.931782][   T50] Bluetooth: hci2: command 0x0419 tx timeout
[  651.938325][ T1527] bond2: option arp_missed_max: allowed values 1 - 255
[  651.949009][ T1527] bond2 (unregistering): Released all slaves
[  651.974429][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7483'.
[  652.023573][ T1538] FAULT_INJECTION: forcing a failure.
[  652.023573][ T1538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.032926][ T1526] bond2: option arp_missed_max: invalid value (0)
[  652.044101][ T1526] bond2: option arp_missed_max: allowed values 1 - 255
[  652.053087][ T1538] CPU: 1 UID: 0 PID: 1538 Comm: syz.3.7487 Not tainted syzkaller #0 PREEMPT(full) 
[  652.053111][ T1538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  652.053120][ T1538] Call Trace:
[  652.053126][ T1538]  <TASK>
[  652.053133][ T1538]  dump_stack_lvl+0xe8/0x150
[  652.053156][ T1538]  should_fail_ex+0x40c/0x560
[  652.053174][ T1538]  _copy_to_user+0x31/0xb0
[  652.053196][ T1538]  simple_read_from_buffer+0xe1/0x170
[  652.053216][ T1538]  proc_fail_nth_read+0x1bb/0x230
[  652.053247][ T1538]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  652.053267][ T1538]  ? rw_verify_area+0x24a/0x4c0
[  652.053288][ T1538]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  652.053307][ T1538]  vfs_read+0x213/0xa80
[  652.053327][ T1538]  ? rcu_is_watching+0x15/0xb0
[  652.053345][ T1538]  ? __pfx_vfs_read+0x10/0x10
[  652.053363][ T1538]  ? aa_sk_perm+0x6d5/0x900
[  652.053386][ T1538]  ? fd_install+0x94/0x3d0
[  652.053403][ T1538]  ? kcm_setsockopt+0xdc/0x530
[  652.053553][ T1538]  ? __pfx_aa_sk_perm+0x10/0x10
[  652.053579][ T1538]  ksys_read+0x150/0x270
[  652.053599][ T1538]  ? __pfx_ksys_read+0x10/0x10
[  652.053621][ T1538]  ? rcu_is_watching+0x15/0xb0
[  652.053637][ T1538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.053655][ T1538]  do_syscall_64+0x174/0x580
[  652.053674][ T1538]  ? trace_irq_disable+0x3b/0x140
[  652.053694][ T1538]  ? clear_bhb_loop+0x40/0x90
[  652.053711][ T1538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.053726][ T1538] RIP: 0033:0x7f90cd35d68e
[  652.053741][ T1538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  652.053755][ T1538] RSP: 002b:00007f90ce319fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  652.053774][ T1538] RAX: ffffffffffffffda RBX: 00007f90ce31a6c0 RCX: 00007f90cd35d68e
[  652.053787][ T1538] RDX: 000000000000000f RSI: 00007f90ce31a0a0 RDI: 0000000000000004
[  652.053797][ T1538] RBP: 00007f90ce31a090 R08: 0000000000000000 R09: 0000000000000000
[  652.053808][ T1538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  652.053818][ T1538] R13: 00007f90cd616038 R14: 00007f90cd615fa0 R15: 00007ffece9d06a8
[  652.053838][ T1538]  </TASK>
[  652.316612][ T1526] bond2 (unregistering): Released all slaves
[  652.617450][ T1555] syzkaller0: entered promiscuous mode
[  652.633341][ T1555] syzkaller0: entered allmulticast mode
[  652.660029][ T1557] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  652.670090][ T1555] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  653.190065][ T1605] netlink: 'syz.0.7510': attribute type 89 has an invalid length.
[  653.435871][T19383] net_ratelimit: 24 callbacks suppressed
[  653.435923][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  653.556017][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  653.665874][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  653.775877][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  653.915977][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  654.025885][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  654.042913][ T1619] netlink: 'syz.1.7515': attribute type 3 has an invalid length.
[  654.064716][ T1619] bond2: option tlb_dynamic_lb: invalid value (5)
[  654.072728][ T1619] bond2 (unregistering): Released all slaves
[  654.145890][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  654.243040][ T1626] netlink: 'syz.1.7517': attribute type 1 has an invalid length.
[  654.275917][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  654.385903][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  654.495917][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  656.057365][ T1599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  656.066435][ T1609] __nla_validate_parse: 1 callbacks suppressed
[  656.066452][ T1609] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7511'.
[  656.081933][ T1609] netlink: 'syz.3.7511': attribute type 2 has an invalid length.
[  656.092766][ T1611] netlink: 'syz.0.7512': attribute type 1 has an invalid length.
[  656.118024][ T1611] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7512'.
[  656.132276][ T1611] NCSI netlink: No device for ifindex 0
[  656.288825][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7530'.
[  656.354270][ T1665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7532'.
[  656.464930][ T1670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7533'.
[  656.485446][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7533'.
[  656.521899][ T1670] netlink: 'syz.0.7533': attribute type 14 has an invalid length.
[  656.873628][T19386] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  656.902935][T19386] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  656.926518][ T1703] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component
[  656.937467][T19386] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  656.949783][T19386] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  657.203100][ T1726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7550'.
[  657.338903][ T1741] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.356537][ T1741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.454717][ T1741] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.465927][ T1741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.552933][ T1741] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.575980][ T1741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.591359][ T1756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7560'.
[  657.614504][ T1756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7560'.
[  657.711020][ T1741] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  657.730053][ T1741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.810899][ T1760] bridge4: entered promiscuous mode
[  657.853677][T19383] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  657.872359][T19383] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.893436][ T1767] netlink: 'syz.3.7564': attribute type 1 has an invalid length.
[  657.942261][ T1772] netlink: 'syz.4.7563': attribute type 9 has an invalid length.
[  657.951459][ T1772] netlink: 'syz.4.7563': attribute type 6 has an invalid length.
[  657.960645][ T1772] netlink: 'syz.4.7563': attribute type 7 has an invalid length.
[  657.969914][ T1772] netlink: 'syz.4.7563': attribute type 8 has an invalid length.
[  658.161444][ T1767] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  658.219571][T19382] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  658.257984][T19382] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.292637][T19382] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  658.314870][T19382] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.357620][ T1783] netlink: 'syz.2.7566': attribute type 22 has an invalid length.
[  658.365512][T14635] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  658.374137][T14635] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.446772][T19406] net_ratelimit: 27 callbacks suppressed
[  658.446791][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  658.503488][ T1797] netlink: 'syz.2.7571': attribute type 11 has an invalid length.
[  658.595110][ T1794] xt_hashlimit: size too large, truncated to 1048576
[  658.603612][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  658.713467][ T1804] xt_hashlimit: size too large, truncated to 1048576
[  658.716812][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  658.845961][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  658.867415][ T1804] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  658.938510][ T1814] lo speed is unknown, defaulting to 1000
[  658.966414][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  659.112541][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  659.448258][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  659.615890][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  659.765327][ T1844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7582'.
[  659.787015][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  660.016252][T19386] bond4: (slave bridge1): failed to get link speed/duplex
[  660.068971][ T1852] geneve2: entered promiscuous mode
[  660.075546][ T1852] geneve2: entered allmulticast mode
[  660.393545][ T1887] netlink: 'syz.4.7593': attribute type 9 has an invalid length.
[  660.621544][   T24] IPVS: starting estimator thread 0...
[  660.657457][ T1912] hsr0: entered promiscuous mode
[  660.664530][ T1911] hsr0: left promiscuous mode
[  660.715585][ T1906] bridge5: entered promiscuous mode
[  660.725707][ T1906] bridge5: entered allmulticast mode
[  660.725857][ T1917] IPVS: using max 53 ests per chain, 127200 per kthread
[  661.334920][ T1972] __nla_validate_parse: 30 callbacks suppressed
[  661.334937][ T1972] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7620'.
[  661.367880][ T1973] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7619'.
[  661.393849][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7620'.
[  661.413066][ T1978] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7620'.
[  661.432617][ T1978] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR
[  661.434786][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7621'.
[  661.754287][ T2000] ip6gre1: entered promiscuous mode
[  661.786874][ T2005] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  661.787857][ T2000] ip6gre1: entered allmulticast mode
[  661.880928][T19406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  661.889337][ T2008] validate_nla: 29 callbacks suppressed
[  661.889351][ T2008] netlink: 'syz.1.7630': attribute type 29 has an invalid length.
[  661.903106][T19406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  661.911470][ T9166] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  661.919888][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7630'.
[  661.934528][ T2005] syzkaller1: entered promiscuous mode
[  661.951521][ T2005] syzkaller1: entered allmulticast mode
[  661.967054][ T2011] hsr0: entered promiscuous mode
[  662.128410][ T2016] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20002
[  662.152806][ T2018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7633'.
[  662.168279][ T2018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7633'.
[  662.347070][  T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  662.551149][ T2036] netlink: 'syz.1.7638': attribute type 3 has an invalid length.
[  662.602554][ T2042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7639'.
[  662.680006][ T2050] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  662.728703][  T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  662.747668][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7642'.
[  662.841444][ T2013] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  662.895222][ T2063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  662.932806][ T2067] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.993622][ T2063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.083191][ T2067] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.129669][ T2063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.169765][ T2067] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.206510][ T2063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  663.238320][ T2067] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.330176][T19386] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  663.378820][T19416] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  663.430336][T19383] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  663.483954][T19383] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  663.525658][T19383] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.581940][T19386] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.634798][T14635] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.675503][T14635] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.715923][T14635] net_ratelimit: 29 callbacks suppressed
[  663.715941][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  663.886018][T19415] bond4: (slave bridge1): failed to get link speed/duplex
[  663.894609][ T2120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.018918][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  664.042026][ T2131] netlink: 'syz.1.7656': attribute type 20 has an invalid length.
[  664.141886][ T2131] netlink: 'syz.1.7656': attribute type 20 has an invalid length.
[  664.149981][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  664.266753][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  664.293120][ T2142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.396097][T19415] bond4: (slave bridge1): failed to get link speed/duplex
[  664.469779][ T2158] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  664.481719][ T2158] bond9 (unregistering): Released all slaves
[  664.526601][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  664.666906][T19415] bond4: (slave bridge1): failed to get link speed/duplex
[  664.827777][ T2186] veth0: Caught tx_queue_len zero misconfig
[  664.916542][ T2192] netlink: 'syz.1.7668': attribute type 3 has an invalid length.
[  665.180438][ T2204] veth0_macvtap: Caught tx_queue_len zero misconfig
[  665.650484][ T2232] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  665.828710][ T2245] ipvlan2: entered allmulticast mode
[  665.834094][ T2245] syz_tun: entered allmulticast mode
[  665.843659][ T2243] netlink: 'syz.2.7686': attribute type 1 has an invalid length.
[  665.946886][ T2245] lo speed is unknown, defaulting to 1000
[  665.971611][ T2246] netlink: 'syz.2.7686': attribute type 3 has an invalid length.
[  666.060706][ T2246] 8021q: adding VLAN 0 to HW filter on device bond8
[  666.084233][ T2246] bond7: (slave bond8): making interface the new active one
[  666.098282][ T2246] bond7: (slave bond8): Enslaving as an active interface with an up link
[  666.325890][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  666.533568][ T2279] IPVS: set_ctl: invalid protocol: 373 255.255.255.255:20002
[  666.790177][ T2299] __nla_validate_parse: 11 callbacks suppressed
[  666.790207][ T2299] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.7704'.
[  666.824746][ T2300] netlink: 'syz.4.7703': attribute type 30 has an invalid length.
[  666.902451][ T2300] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  666.934707][ T2300] bond6 (unregistering): Released all slaves
[  666.965709][ T2315] netlink: 'syz.3.7708': attribute type 10 has an invalid length.
[  666.974227][ T2315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7708'.
[  666.991154][ T2315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7708'.
[  667.027361][ T2315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7708'.
[  667.361258][ T2337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7714'.
[  667.390476][ T2341] netlink: 'syz.0.7715': attribute type 1 has an invalid length.
[  667.393596][ T2337] veth1_to_team: entered promiscuous mode
[  667.430675][ T2337] gretap0: entered promiscuous mode
[  667.463237][ T2337] debugfs: 'hsr1' already exists in 'hsr'
[  667.472398][ T2337] Cannot create hsr debugfs directory
[  667.478597][ T2337] hsr1: entered promiscuous mode
[  667.563133][ T2348] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7718'.
[  667.608189][ T2348] tipc: Disabling bearer <ib:wg1>
[  667.795003][ T2368] netlink: 712 bytes leftover after parsing attributes in process `syz.2.7722'.
[  667.816495][ T2368] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.7722'.
[  667.835449][ T2368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7722'.
[  668.022533][ T2382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7726'.
[  668.086072][  T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  668.160729][ T2387] netlink: 'syz.3.7730': attribute type 1 has an invalid length.
[  668.171161][ T2387] netlink: 'syz.3.7730': attribute type 7 has an invalid length.
[  668.188136][ T2387] : entered promiscuous mode
[  668.321500][  T993] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  668.501296][ T2400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  668.587308][ T2403] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  668.589572][ T2415] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  668.836078][T19383] net_ratelimit: 62 callbacks suppressed
[  668.836097][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  668.966109][T19416] bond4: (slave bridge1): failed to get link speed/duplex
[  669.086790][T19383] bond4: (slave bridge1): failed to get link speed/duplex
[  669.140158][ T2445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.193593][ T2458] netlink: 'syz.1.7745': attribute type 10 has an invalid length.
[  669.236283][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  669.378179][T14635] bond4: (slave bridge1): failed to get link speed/duplex
[  669.447453][ T2486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  669.521724][ T2494] batadv0: entered allmulticast mode
[  669.531108][ T2494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  669.548035][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  669.676363][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  669.809764][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  669.927930][ T2540] x_tables: duplicate underflow at hook 1
[  669.938252][T19382] bond4: (slave bridge1): failed to get link speed/duplex
[  670.035943][T19383] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  670.044744][T19383] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  670.054637][T19383] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  670.064582][T19383] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  670.095971][T19406] bond4: (slave bridge1): failed to get link speed/duplex
[  670.298608][ T2585] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.495930][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  675.446403][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  684.918319][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  684.926601][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  684.934167][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  684.942283][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  684.950286][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  685.464401][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  685.472423][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  685.480135][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  685.487176][T29213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  685.488067][ T2619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  685.495078][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  685.503486][ T2619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  685.509871][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  685.518868][ T2619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  685.533043][ T2619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  686.509231][   T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  686.516977][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  686.518317][   T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  686.524193][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  686.524396][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  686.532693][   T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  686.539532][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  686.547927][   T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  686.553692][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  686.561739][   T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  686.975909][ T5634] Bluetooth: hci3: command tx timeout
[  687.525913][ T5634] Bluetooth: hci6: command tx timeout
[  687.606104][ T5634] Bluetooth: hci7: command tx timeout
[  688.645919][ T5634] Bluetooth: hci9: command tx timeout
[  688.648202][   T50] Bluetooth: hci8: command tx timeout
[  689.045814][   T50] Bluetooth: hci3: command tx timeout
[  689.605834][   T50] Bluetooth: hci6: command tx timeout
[  689.685960][   T50] Bluetooth: hci7: command tx timeout
[  690.725824][   T50] Bluetooth: hci8: command tx timeout
[  690.727057][ T5634] Bluetooth: hci9: command tx timeout
[  691.125837][ T5634] Bluetooth: hci3: command tx timeout
[  691.685906][ T5634] Bluetooth: hci6: command tx timeout
[  691.776297][ T5634] Bluetooth: hci7: command tx timeout
[  692.725916][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  692.805837][ T5634] Bluetooth: hci8: command tx timeout
[  692.816378][ T5634] Bluetooth: hci9: command tx timeout
[  693.206235][ T5634] Bluetooth: hci3: command tx timeout
[  693.766203][ T5634] Bluetooth: hci6: command tx timeout
[  693.846032][ T5634] Bluetooth: hci7: command tx timeout
[  694.885835][ T5634] Bluetooth: hci9: command tx timeout
[  694.896707][ T5634] Bluetooth: hci8: command tx timeout
[  726.005901][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  745.023607][   T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  745.032798][   T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  745.040893][   T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  745.049255][   T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  745.057282][   T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  745.550201][ T5634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  745.557790][ T5634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  745.565077][ T5634] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  745.572852][ T5634] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  745.581441][ T5634] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  745.581658][ T5617] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  745.598962][ T5617] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  745.606922][ T5617] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  745.617992][ T5617] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  745.629275][ T5617] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  746.545071][ T5617] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  746.553465][ T5617] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  746.560875][ T5617] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  746.568927][ T5617] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  746.576474][ T5617] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  746.593785][ T2619] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  746.604739][ T2619] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  746.613488][ T2619] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  746.622307][ T2619] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  746.631077][ T2619] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  747.127504][ T5617] Bluetooth: hci10: command tx timeout
[  747.605920][ T5617] Bluetooth: hci11: command tx timeout
[  747.685921][ T5617] Bluetooth: hci12: command tx timeout
[  748.646055][ T2619] Bluetooth: hci13: command tx timeout
[  748.646049][ T5617] Bluetooth: hci14: command tx timeout
[  749.215942][ T5617] Bluetooth: hci10: command tx timeout
[  749.687418][ T5617] Bluetooth: hci11: command tx timeout
[  749.765962][ T5617] Bluetooth: hci12: command tx timeout
[  750.726141][ T2619] Bluetooth: hci14: command tx timeout
[  750.727172][ T5617] Bluetooth: hci13: command tx timeout
[  751.295789][ T5617] Bluetooth: hci10: command tx timeout
[  751.775827][ T5617] Bluetooth: hci11: command tx timeout
[  751.845780][ T5617] Bluetooth: hci12: command tx timeout
[  752.806113][ T2619] Bluetooth: hci14: command tx timeout
[  752.811634][ T5617] Bluetooth: hci13: command tx timeout
[  753.365797][ T5617] Bluetooth: hci10: command tx timeout
[  753.845918][ T5617] Bluetooth: hci11: command tx timeout
[  753.925830][ T5617] Bluetooth: hci12: command tx timeout
[  754.887302][ T5617] Bluetooth: hci13: command tx timeout
[  754.895896][ T5617] Bluetooth: hci14: command tx timeout
[  757.366781][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  774.815874][ T2619] Bluetooth: hci4: command 0x0406 tx timeout
[  798.325870][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.107999][ T2619] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  805.116515][ T2619] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  805.124105][ T2619] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  805.132562][ T2619] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  805.141016][ T2619] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  806.132636][ T2619] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  806.140170][ T2619] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  806.150263][ T2619] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  806.158761][ T2619] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  806.169301][ T2619] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  806.184977][ T2619] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  806.193234][ T2619] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  806.201265][ T2619] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  806.210088][ T2619] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  806.218467][ T2619] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  806.625004][ T2619] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  806.633507][ T2619] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  806.641519][ T2619] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  806.651675][ T2619] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  806.660063][ T2619] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  806.666037][ T5634] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  806.678855][ T5634] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  806.689172][ T5634] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  806.697093][ T5634] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  806.704766][ T5634] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  807.216382][ T5634] Bluetooth: hci15: command tx timeout
[  808.256264][   T50] Bluetooth: hci16: command tx timeout
[  808.256868][ T5634] Bluetooth: hci17: command tx timeout
[  808.725879][ T2712] Bluetooth: hci19: command tx timeout
[  808.736132][ T2712] Bluetooth: hci18: command tx timeout
[  809.287184][ T2712] Bluetooth: hci15: command tx timeout
[  810.326977][ T2712] Bluetooth: hci17: command tx timeout
[  810.326985][ T2711] Bluetooth: hci16: command tx timeout
[  810.655883][ T5634] Bluetooth: hci9: command 0x0406 tx timeout
[  810.656069][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  810.661993][ T2711] Bluetooth: hci8: command 0x0406 tx timeout
[  810.662020][ T2711] Bluetooth: hci6: command 0x0406 tx timeout
[  810.662039][ T2711] Bluetooth: hci7: command 0x0406 tx timeout
[  810.806226][ T2619] Bluetooth: hci18: command tx timeout
[  810.812115][ T5617] Bluetooth: hci19: command tx timeout
[  811.376312][ T5617] Bluetooth: hci15: command tx timeout
[  812.405921][ T5617] Bluetooth: hci16: command tx timeout
[  812.417411][ T5617] Bluetooth: hci17: command tx timeout
[  812.885871][ T5617] Bluetooth: hci19: command tx timeout
[  812.885974][ T2619] Bluetooth: hci18: command tx timeout
[  813.447147][ T2619] Bluetooth: hci15: command tx timeout
[  814.485843][ T2619] Bluetooth: hci17: command tx timeout
[  814.487188][ T5617] Bluetooth: hci16: command tx timeout
[  814.976283][ T2619] Bluetooth: hci19: command tx timeout
[  814.976360][ T5617] Bluetooth: hci18: command tx timeout
[  833.536140][   T30] INFO: task dhcpcd:5281 blocked for more than 143 seconds.
[  833.543759][   T30]       Not tainted syzkaller #0
[  833.549560][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  833.558738][   T30] task:dhcpcd          state:D stack:22072 pid:5281  tgid:5281  ppid:5280   task_flags:0x400140 flags:0x00080000
[  833.571099][   T30] Call Trace:
[  833.574474][   T30]  <TASK>
[  833.577713][   T30]  __schedule+0x17d9/0x56c0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  833.582364][   T30]  ? _raw_spin_unlock+0x28/0x50
[  833.587606][   T30]  ? sched_balance_rq+0x6511/0x7020
[  833.593151][   T30]  ? __pfx___schedule+0x10/0x10
[  833.598427][   T30]  ? rcu_is_watching+0x15/0xb0
[  833.603506][   T30]  ? rcu_is_watching+0x15/0xb0
[  833.609014][   T30]  ? lock_release+0x4b/0x3c0
[  833.613928][   T30]  ? rcu_is_watching+0x15/0xb0
[  833.619078][   T30]  schedule+0x164/0x360
[  833.623530][   T30]  schedule_preempt_disabled+0x13/0x30
[  833.629430][   T30]  __mutex_lock+0x7bf/0x1550
[  833.634337][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  833.640240][   T30]  ? __mutex_lock+0x5d4/0x1550
[  833.645552][   T30]  ? rtnl_dump_ifinfo+0xa74/0x14a0
[  833.651486][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  833.657207][   T30]  ? lock_release+0x4b/0x3c0
[  833.662105][   T30]  ? __nla_parse+0x40/0x60
[  833.667236][   T30]  rtnl_dump_ifinfo+0xa74/0x14a0
[  833.672551][   T30]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  833.678876][   T30]  ? stack_trace_save+0xa9/0x100
[  833.684180][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  833.690908][   T30]  ? stack_depot_save_flags+0x33/0x800
[  833.697091][   T30]  ? rcu_is_watching+0x15/0xb0
[  833.702406][   T30]  ? trace_kmalloc+0x2a/0xf0
[  833.707677][   T30]  ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0
[  833.714724][   T30]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  833.720895][   T30]  rtnl_dumpit+0xcc/0x200
[  833.725500][   T30]  netlink_dump+0x711/0xee0
[  833.730742][   T30]  ? __pfx_netlink_dump+0x10/0x10
[  833.771183][   T30]  ? netlink_lookup+0x30/0x200
[  833.777024][   T30]  __netlink_dump_start+0x589/0x7b0
[  833.782459][   T30]  rtnetlink_rcv_msg+0xa48/0xc00
[  833.787669][   T30]  ? kasan_save_track+0x3e/0x80
[  833.792684][   T30]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  833.798355][   T30]  ? __x64_sys_sendto+0xde/0x100
[  833.803482][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  833.808928][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  833.814415][   T30]  ? __pfx_rtnl_dumpit+0x10/0x10
[  833.819653][   T30]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  833.825067][   T30]  ? rcu_is_watching+0x15/0xb0
[  833.830189][   T30]  netlink_rcv_skb+0x226/0x4a0
[  833.835115][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  833.840911][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  833.846586][   T30]  ? net_generic+0x1e/0x240
[  833.851134][   T30]  ? net_generic+0x1e/0x240
[  833.855641][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  833.861124][   T30]  netlink_unicast+0x7bb/0x940
[  833.866215][   T30]  netlink_sendmsg+0x813/0xb40
[  833.871200][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  833.876732][   T30]  ? __might_fault+0xaf/0x130
[  833.881434][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  833.886554][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  833.891882][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  833.897374][   T30]  __sys_sendto+0x626/0x6c0
[  833.901905][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  833.907224][   T30]  ? __pfx___sys_getsockname+0x10/0x10
[  833.912717][   T30]  __x64_sys_sendto+0xde/0x100
[  833.917726][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.923821][   T30]  do_syscall_64+0x174/0x580
[  833.928966][   T30]  ? clear_bhb_loop+0x40/0x90
[  833.933682][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  833.939768][   T30] RIP: 0033:0x7f5a2da53407
[  833.944211][   T30] RSP: 002b:00007fff2ac00f50 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  833.953164][   T30] RAX: ffffffffffffffda RBX: 00007f5a2d9c9780 RCX: 00007f5a2da53407
[  833.961410][   T30] RDX: 0000000000000014 RSI: 00007fff2ac00fe0 RDI: 0000000000000011
[  833.969517][   T30] RBP: 00007fff2ac00fc4 R08: 00007fff2ac00fc4 R09: 000000000000000c
[  833.977579][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff2ac218d0
[  833.985936][   T30] R13: 00007f5a2d9c9708 R14: 00007fff2ac010c0 R15: 00007fff2ac116a0
[  833.993954][   T30]  </TASK>
[  833.997175][   T30] INFO: task kworker/0:6:5734 blocked for more than 143 seconds.
[  834.004925][   T30]       Not tainted syzkaller #0
[  834.010102][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.018867][   T30] task:kworker/0:6     state:D stack:26800 pid:5734  tgid:5734  ppid:2      task_flags:0x4208060 flags:0x00080000
[  834.031125][   T30] Workqueue: events netdev_rx_mode_work
[  834.036880][   T30] Call Trace:
[  834.040174][   T30]  <TASK>
[  834.043107][   T30]  __schedule+0x17d9/0x56c0
[  834.047763][   T30]  ? __dequeue_entity+0x49/0x1180
[  834.052832][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.058000][   T30]  ? __pfx___schedule+0x10/0x10
[  834.062889][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.067894][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.072699][   T30]  ? lock_release+0x4b/0x3c0
[  834.077422][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.082213][   T30]  ? schedule+0x90/0x360
[  834.086580][   T30]  ? trace_irq_enable+0x3b/0x140
[  834.091553][   T30]  schedule+0x164/0x360
[  834.095788][   T30]  schedule_preempt_disabled+0x13/0x30
[  834.101257][   T30]  __mutex_lock+0x7bf/0x1550
[  834.106125][   T30]  ? __mutex_lock+0x5d4/0x1550
[  834.110927][   T30]  ? netdev_rx_mode_work+0x18/0x3c0
[  834.116233][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  834.121284][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  834.126791][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.132539][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.137435][   T30]  ? lock_acquire+0x5f/0x350
[  834.142055][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.148000][   T30]  netdev_rx_mode_work+0x18/0x3c0
[  834.153062][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.158945][   T30]  process_scheduled_works+0xa8e/0x14e0
[  834.164545][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  834.171679][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.176816][   T30]  ? assign_work+0x3cf/0x5d0
[  834.181426][   T30]  worker_thread+0xa47/0xfb0
[  834.186264][   T30]  kthread+0x388/0x470
[  834.190358][   T30]  ? __pfx_worker_thread+0x10/0x10
[  834.195491][   T30]  ? __pfx_kthread+0x10/0x10
[  834.200241][   T30]  ret_from_fork+0x514/0xb70
[  834.204895][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  834.210152][   T30]  ? __switch_to+0xc89/0x1420
[  834.214858][   T30]  ? __pfx_kthread+0x10/0x10
[  834.219519][   T30]  ret_from_fork_asm+0x1a/0x30
[  834.224303][   T30]  </TASK>
[  834.227696][   T30] INFO: task kworker/u8:37:14635 blocked for more than 144 seconds.
[  834.235838][   T30]       Not tainted syzkaller #0
[  834.240800][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.249638][   T30] task:kworker/u8:37   state:D stack:22648 pid:14635 tgid:14635 ppid:2      task_flags:0x4208160 flags:0x00080000
[  834.261759][   T30] Workqueue: events_unbound linkwatch_event
[  834.267895][   T30] Call Trace:
[  834.271199][   T30]  <TASK>
[  834.274134][   T30]  __schedule+0x17d9/0x56c0
[  834.278783][   T30]  ? trace_pelt_se_tp+0x3b/0x150
[  834.283769][   T30]  ? __pfx___schedule+0x10/0x10
[  834.288763][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.293555][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.298391][   T30]  ? lock_release+0x4b/0x3c0
[  834.303001][   T30]  ? wq_worker_sleeping+0x66/0x250
[  834.308344][   T30]  schedule+0x164/0x360
[  834.312540][   T30]  schedule_preempt_disabled+0x13/0x30
[  834.318165][   T30]  __mutex_lock+0x7bf/0x1550
[  834.322785][   T30]  ? __mutex_lock+0x5d4/0x1550
[  834.327951][   T30]  ? linkwatch_event+0xe/0x60
[  834.332661][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  834.337785][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.343532][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.348804][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.353598][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.359487][   T30]  linkwatch_event+0xe/0x60
[  834.364166][   T30]  process_scheduled_works+0xa8e/0x14e0
[  834.370032][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  834.376288][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.381333][   T30]  ? assign_work+0x3cf/0x5d0
[  834.386175][   T30]  worker_thread+0xa47/0xfb0
[  834.390804][   T30]  ? __kthread_parkme+0x71/0x1f0
[  834.395849][   T30]  kthread+0x388/0x470
[  834.399946][   T30]  ? __pfx_worker_thread+0x10/0x10
[  834.405065][   T30]  ? __pfx_kthread+0x10/0x10
[  834.409838][   T30]  ret_from_fork+0x514/0xb70
[  834.414448][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  834.419715][   T30]  ? __switch_to+0xc89/0x1420
[  834.424447][   T30]  ? __pfx_kthread+0x10/0x10
[  834.429444][   T30]  ret_from_fork_asm+0x1a/0x30
[  834.434241][   T30]  </TASK>
[  834.437734][   T30] INFO: task kworker/u8:56:19406 blocked for more than 144 seconds.
[  834.454062][   T30]       Not tainted syzkaller #0
[  834.459529][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.468468][   T30] task:kworker/u8:56   state:D stack:23096 pid:19406 tgid:19406 ppid:2      task_flags:0x4208060 flags:0x00080000
[  834.480564][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  834.486791][   T30] Call Trace:
[  834.490084][   T30]  <TASK>
[  834.493014][   T30]  __schedule+0x17d9/0x56c0
[  834.497645][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.502448][   T30]  ? __pfx___schedule+0x10/0x10
[  834.507535][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.512321][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.517153][   T30]  ? lock_release+0x4b/0x3c0
[  834.521755][   T30]  ? wq_worker_sleeping+0x66/0x250
[  834.527015][   T30]  schedule+0x164/0x360
[  834.531201][   T30]  schedule_preempt_disabled+0x13/0x30
[  834.536755][   T30]  __mutex_lock+0x7bf/0x1550
[  834.541371][   T30]  ? __mutex_lock+0x5d4/0x1550
[  834.546414][   T30]  ? addrconf_dad_work+0x116/0x15c0
[  834.551641][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  834.556788][   T30]  ? kvm_sched_clock_read+0x11/0x20
[  834.561996][   T30]  ? sched_clock+0x3f/0x60
[  834.566717][   T30]  addrconf_dad_work+0x116/0x15c0
[  834.571778][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  834.577283][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  834.582771][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.587790][   T30]  ? lock_acquire+0x5f/0x350
[  834.592427][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.597278][   T30]  ? process_scheduled_works+0xa20/0x14e0
[  834.603007][   T30]  process_scheduled_works+0xa8e/0x14e0
[  834.608740][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  834.614744][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  834.619868][   T30]  ? assign_work+0x3cf/0x5d0
[  834.624474][   T30]  worker_thread+0xa47/0xfb0
[  834.629331][   T30]  kthread+0x388/0x470
[  834.633433][   T30]  ? __pfx_worker_thread+0x10/0x10
[  834.638628][   T30]  ? __pfx_kthread+0x10/0x10
[  834.643230][   T30]  ret_from_fork+0x514/0xb70
[  834.648335][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  834.653505][   T30]  ? __switch_to+0xc89/0x1420
[  834.658294][   T30]  ? __pfx_kthread+0x10/0x10
[  834.662894][   T30]  ret_from_fork_asm+0x1a/0x30
[  834.667933][   T30]  </TASK>
[  834.671066][   T30] INFO: task syz.1.7751:2480 blocked for more than 144 seconds.
[  834.679063][   T30]       Not tainted syzkaller #0
[  834.684004][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.692837][   T30] task:syz.1.7751      state:D stack:25880 pid:2480  tgid:2480  ppid:30266  task_flags:0x400040 flags:0x00080002
[  834.704833][   T30] Call Trace:
[  834.708565][   T30]  <TASK>
[  834.711523][   T30]  __schedule+0x17d9/0x56c0
[  834.716487][   T30]  ? stack_trace_save+0xa9/0x100
[  834.721488][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  834.729483][   T30]  ? __pfx___schedule+0x10/0x10
[  834.734386][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.739227][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.744002][   T30]  ? lock_release+0x4b/0x3c0
[  834.748866][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.753662][   T30]  schedule+0x164/0x360
[  834.757897][   T30]  schedule_preempt_disabled+0x13/0x30
[  834.763384][   T30]  __mutex_lock+0x7bf/0x1550
[  834.768115][   T30]  ? __mutex_lock+0x5d4/0x1550
[  834.772913][   T30]  ? tun_chr_close+0x3e/0x1c0
[  834.777768][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  834.782804][   T30]  ? do_raw_spin_unlock+0xf5/0x210
[  834.788177][   T30]  ? _raw_spin_unlock+0x28/0x50
[  834.793690][   T30]  ? fasync_remove_entry+0x18c/0x1c0
[  834.799149][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  834.804293][   T30]  tun_chr_close+0x3e/0x1c0
[  834.809065][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  834.814209][   T30]  __fput+0x418/0xa50
[  834.818279][   T30]  task_work_run+0x1d9/0x270
[  834.822890][   T30]  ? __pfx_task_work_run+0x10/0x10
[  834.828284][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.833095][   T30]  exit_to_user_mode_loop+0x1fa/0x730
[  834.838748][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.843804][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.850072][   T30]  do_syscall_64+0x353/0x580
[  834.854712][   T30]  ? clear_bhb_loop+0x40/0x90
[  834.859485][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.865383][   T30] RIP: 0033:0x7f5bd139ce59
[  834.870026][   T30] RSP: 002b:00007ffc449371e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  834.878525][   T30] RAX: 0000000000000000 RBX: 00007f5bd1617da0 RCX: 00007f5bd139ce59
[  834.886631][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  834.894628][   T30] RBP: 00007f5bd1617da0 R08: 0000000000000006 R09: 0000000000000000
[  834.902672][   T30] R10: 00007f5bd1617cb0 R11: 0000000000000246 R12: 00000000000a39fb
[  834.910895][   T30] R13: 00007f5bd161609c R14: 00000000000a3754 R15: 00007f5bd1616090
[  834.919153][   T30]  </TASK>
[  834.922190][   T30] INFO: task syz.3.7773:2575 blocked for more than 144 seconds.
[  834.929959][   T30]       Not tainted syzkaller #0
[  834.934914][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  834.943778][   T30] task:syz.3.7773      state:D stack:25896 pid:2575  tgid:2575  ppid:29211  task_flags:0x400040 flags:0x00080002
[  834.955887][   T30] Call Trace:
[  834.959201][   T30]  <TASK>
[  834.962133][   T30]  __schedule+0x17d9/0x56c0
[  834.967224][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.972038][   T30]  ? irqentry_exit+0x218/0x8f0
[  834.976965][   T30]  ? trace_irq_disable+0x3b/0x140
[  834.982041][   T30]  ? __pfx___schedule+0x10/0x10
[  834.986977][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.991758][   T30]  ? rcu_is_watching+0x15/0xb0
[  834.996634][   T30]  ? lock_release+0x4b/0x3c0
[  835.001265][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.006090][   T30]  schedule+0x164/0x360
[  835.010263][   T30]  schedule_preempt_disabled+0x13/0x30
[  835.015902][   T30]  __mutex_lock+0x7bf/0x1550
[  835.020535][   T30]  ? __mutex_lock+0x5d4/0x1550
[  835.025575][   T30]  ? tun_chr_close+0x3e/0x1c0
[  835.030331][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  835.035458][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  835.040725][   T30]  tun_chr_close+0x3e/0x1c0
[  835.045256][   T30]  ? __pfx_tun_chr_close+0x10/0x10
[  835.050477][   T30]  __fput+0x418/0xa50
[  835.054482][   T30]  task_work_run+0x1d9/0x270
[  835.059218][   T30]  ? __pfx_task_work_run+0x10/0x10
[  835.064355][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.069245][   T30]  exit_to_user_mode_loop+0x1fa/0x730
[  835.074670][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.079564][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.085716][   T30]  do_syscall_64+0x353/0x580
[  835.090320][   T30]  ? trace_irq_disable+0x3b/0x140
[  835.095354][   T30]  ? clear_bhb_loop+0x40/0x90
[  835.100323][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.106302][   T30] RIP: 0033:0x7f90cd39ce59
[  835.110723][   T30] RSP: 002b:00007ffece9d0808 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  835.119281][   T30] RAX: 0000000000000000 RBX: 00007ffece9d08f0 RCX: 00007f90cd39ce59
[  835.127397][   T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  835.135390][   T30] RBP: 00000000000a39d3 R08: 0000000000000001 R09: 0000000000000000
[  835.143523][   T30] R10: 0000001b2d120000 R11: 0000000000000246 R12: 00007ffece9d0930
[  835.151573][   T30] R13: 00007f90cd615fac R14: 00000000000a3a3e R15: 00007f90cd615fa0
[  835.159703][   T30]  </TASK>
[  835.162752][   T30] INFO: task syz.0.7774:2585 blocked for more than 144 seconds.
[  835.170568][   T30]       Not tainted syzkaller #0
[  835.175506][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  835.184321][   T30] task:syz.0.7774      state:D stack:22672 pid:2585  tgid:2584  ppid:27326  task_flags:0x400140 flags:0x00080002
[  835.196370][   T30] Call Trace:
[  835.199667][   T30]  <TASK>
[  835.202631][   T30]  __schedule+0x17d9/0x56c0
[  835.207208][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.211979][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.216920][   T30]  ? irqentry_exit+0x218/0x8f0
[  835.221730][   T30]  ? trace_irq_disable+0x3b/0x140
[  835.226873][   T30]  ? __pfx___schedule+0x10/0x10
[  835.231731][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.236804][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.241589][   T30]  ? lock_release+0x4b/0x3c0
[  835.246277][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.251134][   T30]  schedule+0x164/0x360
[  835.255308][   T30]  schedule_preempt_disabled+0x13/0x30
[  835.260935][   T30]  __mutex_lock+0x7bf/0x1550
[  835.265571][   T30]  ? __mutex_lock+0x5d4/0x1550
[  835.270448][   T30]  ? __ethtool_get_link_ksettings+0x109/0x250
[  835.276650][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  835.281699][   T30]  ? igmp_group_added+0x238/0x910
[  835.286969][   T30]  ? igmpv3_del_delrec+0x204/0x710
[  835.292114][   T30]  __ethtool_get_link_ksettings+0x109/0x250
[  835.298115][   T30]  bond_netdev_event+0x643/0xf80
[  835.303173][   T30]  ? __pfx_bond_netdev_event+0x10/0x10
[  835.308690][   T30]  ? __pfx_inetdev_event+0x10/0x10
[  835.313802][   T30]  ? preempt_schedule_notrace+0x57/0x90
[  835.319490][   T30]  ? ipmr_device_event+0x1f6/0x220
[  835.324702][   T30]  notifier_call_chain+0x1a5/0x3d0
[  835.329941][   T30]  __dev_notify_flags+0x1aa/0x310
[  835.335046][   T30]  ? __pfx___dev_notify_flags+0x10/0x10
[  835.340727][   T30]  ? __dev_change_flags+0x5f1/0x820
[  835.346061][   T30]  ? __pfx___dev_change_flags+0x10/0x10
[  835.351635][   T30]  netif_change_flags+0xde/0x1b0
[  835.356710][   T30]  dev_change_flags+0x128/0x260
[  835.361595][   T30]  vlan_device_event+0x1b4e/0x1f00
[  835.367126][   T30]  ? packet_notifier+0xf1b/0xf70
[  835.372181][   T30]  ? br_device_event+0x282/0x9c0
[  835.377323][   T30]  ? __pfx_phonet_device_notify+0x10/0x10
[  835.383121][   T30]  ? __pfx_vlan_device_event+0x10/0x10
[  835.388670][   T30]  ? bcm_notifier+0xa9/0x890
[  835.393337][   T30]  ? nlmsg_notify+0x142/0x1a0
[  835.398169][   T30]  ? raw_notifier+0x9d/0x7d0
[  835.402799][   T30]  ? cgw_notifier+0x314/0x380
[  835.407570][   T30]  notifier_call_chain+0x1a5/0x3d0
[  835.412704][   T30]  __dev_notify_flags+0x1aa/0x310
[  835.417888][   T30]  ? __pfx___dev_notify_flags+0x10/0x10
[  835.423480][   T30]  ? __dev_change_flags+0x5f1/0x820
[  835.428760][   T30]  ? __pfx___dev_change_flags+0x10/0x10
[  835.434313][   T30]  ? netif_rx_mode_sync+0x15d/0x1e0
[  835.439642][   T30]  ? trace_irq_enable+0x3b/0x140
[  835.444612][   T30]  netif_change_flags+0xde/0x1b0
[  835.449705][   T30]  do_setlink+0xdd6/0x4670
[  835.454139][   T30]  ? trace_sched_exit_tp+0x3a/0x130
[  835.459508][   T30]  ? __schedule+0x17ef/0x56c0
[  835.464220][   T30]  ? __pfx_do_setlink+0x10/0x10
[  835.469127][   T30]  ? stack_trace_save+0xa9/0x100
[  835.474075][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  835.479201][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.483983][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.488803][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.493593][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.498496][   T30]  ? trace_irq_enable+0x3b/0x140
[  835.503471][   T30]  ? __mutex_lock+0x1092/0x1550
[  835.508480][   T30]  ? __mutex_lock+0x5d4/0x1550
[  835.513270][   T30]  ? rtnl_newlink+0x8a3/0x1bd0
[  835.518172][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  835.523231][   T30]  ? ns_capable+0x89/0xe0
[  835.527671][   T30]  ? rtnl_link_get_net_capable+0xd3/0x310
[  835.533406][   T30]  rtnl_newlink+0x148e/0x1bd0
[  835.538224][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  835.543277][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  835.548563][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.553337][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.558243][   T30]  ? lock_release+0x4b/0x3c0
[  835.562861][   T30]  ? lock_release+0x4b/0x3c0
[  835.567569][   T30]  ? is_bpf_text_address+0x292/0x2b0
[  835.572886][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  835.578206][   T30]  ? kernel_text_address+0xa5/0xe0
[  835.583347][   T30]  ? unwind_next_frame+0x8f/0x2550
[  835.588530][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.593302][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  835.598657][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.603454][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.608298][   T30]  ? lock_release+0x4b/0x3c0
[  835.612903][   T30]  ? lock_release+0x4b/0x3c0
[  835.617686][   T30]  ? is_bpf_text_address+0x292/0x2b0
[  835.623005][   T30]  ? is_bpf_text_address+0x26/0x2b0
[  835.628290][   T30]  ? kernel_text_address+0xa5/0xe0
[  835.633419][   T30]  ? __kernel_text_address+0xd/0x30
[  835.638926][   T30]  ? unwind_get_return_address+0x4d/0x90
[  835.644815][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  835.651076][   T30]  ? arch_stack_walk+0xfb/0x150
[  835.656066][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  835.661212][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.666133][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  835.671188][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.676101][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  835.681146][   T30]  ? lock_release+0x4b/0x3c0
[  835.685889][   T30]  ? bpf_lsm_capable+0x9/0x20
[  835.690592][   T30]  ? security_capable+0x7e/0x2c0
[  835.695785][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  835.700833][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  835.705935][   T30]  ? kasan_save_track+0x3e/0x80
[  835.710812][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  835.716036][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  835.722147][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  835.727276][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.732069][   T30]  netlink_rcv_skb+0x226/0x4a0
[  835.736969][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  835.742461][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  835.747925][   T30]  ? net_generic+0x1e/0x240
[  835.752450][   T30]  ? net_generic+0x1e/0x240
[  835.757090][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  835.762317][   T30]  netlink_unicast+0x7bb/0x940
[  835.767512][   T30]  netlink_sendmsg+0x813/0xb40
[  835.772507][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.777899][   T30]  ? futex_unqueue+0x22/0x240
[  835.782630][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  835.787785][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  835.793109][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.798537][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  835.803346][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  835.808719][   T30]  ? lock_release+0x4b/0x3c0
[  835.813326][   T30]  ? import_iovec+0x73/0xa0
[  835.818010][   T30]  ___sys_sendmsg+0x2a5/0x360
[  835.822850][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  835.828263][   T30]  ? futex_wait+0x2a2/0x390
[  835.832817][   T30]  ? __fget_files+0x2a/0x420
[  835.837553][   T30]  ? __fget_files+0x3a2/0x420
[  835.842322][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  835.847386][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  835.852870][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.857756][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.863863][   T30]  do_syscall_64+0x174/0x580
[  835.868627][   T30]  ? clear_bhb_loop+0x40/0x90
[  835.873334][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.879366][   T30] RIP: 0033:0x7f37f2d9ce59
[  835.883811][   T30] RSP: 002b:00007f37f3be8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.892315][   T30] RAX: ffffffffffffffda RBX: 00007f37f3015fa0 RCX: 00007f37f2d9ce59
[  835.900581][   T30] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005
[  835.908702][   T30] RBP: 00007f37f2e32d6f R08: 0000000000000000 R09: 0000000000000000
[  835.916841][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.924854][   T30] R13: 00007f37f3016038 R14: 00007f37f3015fa0 R15: 00007ffdcb591f78
[  835.932975][   T30]  </TASK>
[  835.936105][   T30] INFO: task syz.2.7775:2589 blocked for more than 145 seconds.
[  835.943758][   T30]       Not tainted syzkaller #0
[  835.948877][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  835.957658][   T30] task:syz.2.7775      state:D stack:27256 pid:2589  tgid:2588  ppid:28899  task_flags:0x400140 flags:0x00080002
[  835.969659][   T30] Call Trace:
[  835.972941][   T30]  <TASK>
[  835.975991][   T30]  __schedule+0x17d9/0x56c0
[  835.980552][   T30]  ? __pfx___schedule+0x10/0x10
[  835.985424][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.990354][   T30]  ? rcu_is_watching+0x15/0xb0
[  835.995148][   T30]  ? lock_release+0x4b/0x3c0
[  835.999885][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.004673][   T30]  schedule+0x164/0x360
[  836.009216][   T30]  schedule_preempt_disabled+0x13/0x30
[  836.014714][   T30]  __mutex_lock+0x7bf/0x1550
[  836.019427][   T30]  ? __mutex_lock+0x5d4/0x1550
[  836.024250][   T30]  ? __tun_chr_ioctl+0x3bc/0x1e10
[  836.029403][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  836.034457][   T30]  ? lock_release+0x4b/0x3c0
[  836.039183][   T30]  ? __might_fault+0xaf/0x130
[  836.043894][   T30]  ? __might_fault+0xcb/0x130
[  836.048834][   T30]  __tun_chr_ioctl+0x3bc/0x1e10
[  836.053723][   T30]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  836.059160][   T30]  ? __fget_files+0x2a/0x420
[  836.063774][   T30]  ? __fget_files+0x3a2/0x420
[  836.068603][   T30]  ? __fget_files+0x2a/0x420
[  836.073219][   T30]  ? bpf_lsm_file_ioctl+0x9/0x20
[  836.078270][   T30]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  836.083407][   T30]  __se_sys_ioctl+0xfc/0x170
[  836.088115][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.094190][   T30]  do_syscall_64+0x174/0x580
[  836.098943][   T30]  ? trace_irq_disable+0x3b/0x140
[  836.104003][   T30]  ? clear_bhb_loop+0x40/0x90
[  836.108828][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.114743][   T30] RIP: 0033:0x7f34c2b9ce59
[  836.119309][   T30] RSP: 002b:00007f34c3a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  836.127806][   T30] RAX: ffffffffffffffda RBX: 00007f34c2e15fa0 RCX: 00007f34c2b9ce59
[  836.135893][   T30] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000003
[  836.143889][   T30] RBP: 00007f34c2c32d6f R08: 0000000000000000 R09: 0000000000000000
[  836.151993][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  836.160136][   T30] R13: 00007f34c2e16038 R14: 00007f34c2e15fa0 R15: 00007ffe5c8ede48
[  836.168418][   T30]  </TASK>
[  836.171481][   T30] INFO: task syz.2.7775:2590 blocked for more than 146 seconds.
[  836.179229][   T30]       Not tainted syzkaller #0
[  836.184189][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  836.193038][   T30] task:syz.2.7775      state:D stack:29144 pid:2590  tgid:2588  ppid:28899  task_flags:0x400140 flags:0x00080002
[  836.205098][   T30] Call Trace:
[  836.208456][   T30]  <TASK>
[  836.211391][   T30]  __schedule+0x17d9/0x56c0
[  836.216011][   T30]  ? kasan_save_free_info+0x40/0x50
[  836.221237][   T30]  ? do_syscall_64+0x174/0x580
[  836.226206][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.232312][   T30]  ? __pfx___schedule+0x10/0x10
[  836.237295][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.242084][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.246918][   T30]  ? lock_release+0x4b/0x3c0
[  836.251516][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.256438][   T30]  schedule+0x164/0x360
[  836.260630][   T30]  schedule_preempt_disabled+0x13/0x30
[  836.266288][   T30]  __mutex_lock+0x7bf/0x1550
[  836.270914][   T30]  ? __mutex_lock+0x5d4/0x1550
[  836.275834][   T30]  ? vlan_ioctl_handler+0xf0/0x630
[  836.280982][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  836.286244][   T30]  ? lock_release+0x4b/0x3c0
[  836.292011][   T30]  ? __might_fault+0xaf/0x130
[  836.296862][   T30]  ? __might_fault+0xcb/0x130
[  836.301571][   T30]  vlan_ioctl_handler+0xf0/0x630
[  836.306640][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  836.311726][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  836.317424][   T30]  ? hook_file_ioctl+0x1f0/0x5c0
[  836.322478][   T30]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  836.328133][   T30]  sock_ioctl+0x612/0x7e0
[  836.332473][   T30]  ? lock_release+0x4b/0x3c0
[  836.337249][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  836.342141][   T30]  ? __fget_files+0x2a/0x420
[  836.346843][   T30]  ? __fget_files+0x3a2/0x420
[  836.351548][   T30]  ? __fget_files+0x2a/0x420
[  836.356258][   T30]  ? bpf_lsm_file_ioctl+0x9/0x20
[  836.361234][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  836.366334][   T30]  __se_sys_ioctl+0xfc/0x170
[  836.370977][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.377170][   T30]  do_syscall_64+0x174/0x580
[  836.381799][   T30]  ? clear_bhb_loop+0x40/0x90
[  836.386616][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.392552][   T30] RIP: 0033:0x7f34c2b9ce59
[  836.397095][   T30] RSP: 002b:00007f34c39df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  836.405540][   T30] RAX: ffffffffffffffda RBX: 00007f34c2e16090 RCX: 00007f34c2b9ce59
[  836.413735][   T30] RDX: 0000200000000300 RSI: 0000000000008983 RDI: 0000000000000042
[  836.421856][   T30] RBP: 00007f34c2c32d6f R08: 0000000000000000 R09: 0000000000000000
[  836.429954][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  836.438186][   T30] R13: 00007f34c2e16128 R14: 00007f34c2e16090 R15: 00007ffe5c8ede48
[  836.446328][   T30]  </TASK>
[  836.449379][   T30] INFO: task syz.2.7775:2591 blocked for more than 146 seconds.
[  836.457130][   T30]       Not tainted syzkaller #0
[  836.462091][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  836.471022][   T30] task:syz.2.7775      state:D stack:26968 pid:2591  tgid:2588  ppid:28899  task_flags:0x400140 flags:0x00080002
[  836.483074][   T30] Call Trace:
[  836.486450][   T30]  <TASK>
[  836.489391][   T30]  __schedule+0x17d9/0x56c0
[  836.493916][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.498867][   T30]  ? __pfx___schedule+0x10/0x10
[  836.503759][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.508804][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.513602][   T30]  ? lock_release+0x4b/0x3c0
[  836.518349][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.523145][   T30]  schedule+0x164/0x360
[  836.527385][   T30]  schedule_preempt_disabled+0x13/0x30
[  836.532859][   T30]  __mutex_lock+0x7bf/0x1550
[  836.537574][   T30]  ? __mutex_lock+0x5d4/0x1550
[  836.542377][   T30]  ? rtnl_newlink+0x8a3/0x1bd0
[  836.547477][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  836.552633][   T30]  ? ns_capable+0x89/0xe0
[  836.557141][   T30]  ? rtnl_link_get_net_capable+0xd3/0x310
[  836.562906][   T30]  rtnl_newlink+0x8a3/0x1bd0
[  836.567613][   T30]  ? netlink_deliver_tap+0x19c/0x1b0
[  836.572918][   T30]  ? netlink_unicast+0x77f/0x940
[  836.578006][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  836.583072][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.589402][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.594193][   T30]  ? trace_irq_enable+0x3b/0x140
[  836.599274][   T30]  ? nlmon_xmit+0xb0/0x100
[  836.603800][   T30]  ? kmem_cache_free+0x182/0x650
[  836.608912][   T30]  ? dev_hard_start_xmit+0x7c7/0x830
[  836.614305][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.619590][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.624737][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.629763][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.634906][   T30]  ? trace_irq_enable+0x3b/0x140
[  836.639996][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.645136][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.650380][   T30]  ? __local_bh_enable_ip+0xd0/0x130
[  836.655790][   T30]  ? __dev_queue_xmit+0x29b/0x37f0
[  836.660946][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  836.666287][   T30]  ? lock_release+0x4b/0x3c0
[  836.670908][   T30]  ? bpf_lsm_capable+0x9/0x20
[  836.675589][   T30]  ? security_capable+0x7e/0x2c0
[  836.680706][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  836.685817][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  836.690775][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  836.696345][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  836.701835][   T30]  ? ref_tracker_free+0x689/0x830
[  836.707113][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  836.712519][   T30]  netlink_rcv_skb+0x226/0x4a0
[  836.717428][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  836.722925][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  836.728737][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  836.733984][   T30]  netlink_unicast+0x7bb/0x940
[  836.738892][   T30]  netlink_sendmsg+0x813/0xb40
[  836.743691][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  836.749362][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.754163][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  836.759219][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  836.764534][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  836.769888][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  836.774671][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  836.780102][   T30]  ? lock_release+0x4b/0x3c0
[  836.784721][   T30]  ? import_iovec+0x73/0xa0
[  836.789454][   T30]  ___sys_sendmsg+0x2a5/0x360
[  836.794175][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  836.799527][   T30]  ? futex_wait+0x2a2/0x390
[  836.804084][   T30]  ? __fget_files+0x2a/0x420
[  836.810180][   T30]  ? __fget_files+0x3a2/0x420
[  836.815197][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  836.820285][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  836.826372][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.831168][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.837335][   T30]  do_syscall_64+0x174/0x580
[  836.841982][   T30]  ? trace_irq_disable+0x3b/0x140
[  836.847136][   T30]  ? clear_bhb_loop+0x40/0x90
[  836.851874][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  836.857849][   T30] RIP: 0033:0x7f34c2b9ce59
[  836.862276][   T30] RSP: 002b:00007f34c39be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  836.870983][   T30] RAX: ffffffffffffffda RBX: 00007f34c2e16180 RCX: 00007f34c2b9ce59
[  836.879036][   T30] RDX: 0000000000004080 RSI: 0000200000000080 RDI: 0000000000000045
[  836.887505][   T30] RBP: 00007f34c2c32d6f R08: 0000000000000000 R09: 0000000000000000
[  836.895512][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  836.903546][   T30] R13: 00007f34c2e16218 R14: 00007f34c2e16180 R15: 00007ffe5c8ede48
[  836.911802][   T30]  </TASK>
[  836.914845][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  836.923958][   T30] INFO: task syz.4.7777:2602 blocked for more than 146 seconds.
[  836.931713][   T30]       Not tainted syzkaller #0
[  836.936816][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  836.945515][   T30] task:syz.4.7777      state:D stack:27800 pid:2602  tgid:2601  ppid:28641  task_flags:0x400140 flags:0x00080002
[  836.957703][   T30] Call Trace:
[  836.961111][   T30]  <TASK>
[  836.964050][   T30]  __schedule+0x17d9/0x56c0
[  836.968640][   T30]  ? stack_trace_save+0xa9/0x100
[  836.973594][   T30]  ? stack_depot_save_flags+0x33/0x800
[  836.979206][   T30]  ? __pfx___schedule+0x10/0x10
[  836.984170][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.989153][   T30]  ? rcu_is_watching+0x15/0xb0
[  836.993952][   T30]  ? lock_release+0x4b/0x3c0
[  836.998769][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.003571][   T30]  schedule+0x164/0x360
[  837.007983][   T30]  schedule_preempt_disabled+0x13/0x30
[  837.013448][   T30]  __mutex_lock+0x7bf/0x1550
[  837.018225][   T30]  ? __mutex_lock+0x5d4/0x1550
[  837.023033][   T30]  ? nl80211_pre_doit+0x5e/0x890
[  837.028257][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  837.033314][   T30]  ? __nla_parse+0x40/0x60
[  837.037859][   T30]  nl80211_pre_doit+0x5e/0x890
[  837.042661][   T30]  genl_family_rcv_msg_doit+0x1db/0x340
[  837.048781][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  837.054890][   T30]  ? bpf_lsm_capable+0x9/0x20
[  837.059708][   T30]  ? security_capable+0x7e/0x2c0
[  837.064679][   T30]  genl_rcv_msg+0x614/0x7a0
[  837.069369][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  837.074429][   T30]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  837.079935][   T30]  ? __pfx_nl80211_join_mesh+0x10/0x10
[  837.085507][   T30]  ? __pfx_nl80211_post_doit+0x10/0x10
[  837.091160][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  837.096209][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.101010][   T30]  netlink_rcv_skb+0x226/0x4a0
[  837.106024][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  837.111081][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  837.116506][   T30]  ? down_read+0x2be/0x330
[  837.120961][   T30]  genl_rcv+0x28/0x40
[  837.124953][   T30]  netlink_unicast+0x7bb/0x940
[  837.129818][   T30]  netlink_sendmsg+0x813/0xb40
[  837.134604][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.140037][   T30]  ? futex_unqueue+0x22/0x240
[  837.144757][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  837.149877][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  837.155185][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.160628][   T30]  ____sys_sendmsg+0x9b9/0xa20
[  837.165437][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  837.170816][   T30]  ? lock_release+0x4b/0x3c0
[  837.175420][   T30]  ? import_iovec+0x73/0xa0
[  837.180075][   T30]  ___sys_sendmsg+0x2a5/0x360
[  837.184789][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  837.190205][   T30]  ? futex_wait+0x2a2/0x390
[  837.194744][   T30]  ? __fget_files+0x2a/0x420
[  837.199449][   T30]  ? __fget_files+0x3a2/0x420
[  837.204165][   T30]  __x64_sys_sendmsg+0x1b1/0x290
[  837.209217][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  837.214705][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.219655][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.225887][   T30]  do_syscall_64+0x174/0x580
[  837.230513][   T30]  ? clear_bhb_loop+0x40/0x90
[  837.235200][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.241221][   T30] RIP: 0033:0x7f377399ce59
[  837.245711][   T30] RSP: 002b:00007f3774928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  837.254309][   T30] RAX: ffffffffffffffda RBX: 00007f3773c15fa0 RCX: 00007f377399ce59
[  837.262701][   T30] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  837.270911][   T30] RBP: 00007f3773a32d6f R08: 0000000000000000 R09: 0000000000000000
[  837.279044][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  837.287122][   T30] R13: 00007f3773c16038 R14: 00007f3773c15fa0 R15: 00007fff7d903158
[  837.295113][   T30]  </TASK>
[  837.298281][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  837.307536][   T30] INFO: task syz-executor:2605 blocked for more than 147 seconds.
[  837.315360][   T30]       Not tainted syzkaller #0
[  837.320607][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  837.329438][   T30] task:syz-executor    state:D stack:27088 pid:2605  tgid:2605  ppid:1      task_flags:0x400140 flags:0x00080002
[  837.341497][   T30] Call Trace:
[  837.344803][   T30]  <TASK>
[  837.347902][   T30]  __schedule+0x17d9/0x56c0
[  837.352449][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  837.358416][   T30]  ? __pfx___schedule+0x10/0x10
[  837.363454][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.368441][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.373238][   T30]  ? lock_release+0x4b/0x3c0
[  837.378049][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.382851][   T30]  schedule+0x164/0x360
[  837.387185][   T30]  schedule_preempt_disabled+0x13/0x30
[  837.392676][   T30]  __mutex_lock+0x7bf/0x1550
[  837.397401][   T30]  ? __mutex_lock+0x5d4/0x1550
[  837.402200][   T30]  ? inet_rtm_newaddr+0x464/0x19e0
[  837.407789][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  837.412842][   T30]  ? __nla_parse+0x40/0x60
[  837.417398][   T30]  inet_rtm_newaddr+0x464/0x19e0
[  837.422371][   T30]  ? __kernel_text_address+0xd/0x30
[  837.427715][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  837.433932][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  837.439493][   T30]  ? lock_release+0x4b/0x3c0
[  837.444111][   T30]  ? bpf_lsm_capable+0x9/0x20
[  837.448996][   T30]  ? security_capable+0x7e/0x2c0
[  837.453953][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  837.459492][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  837.464466][   T30]  ? kasan_save_track+0x3e/0x80
[  837.469642][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  837.474789][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  837.480492][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  837.485643][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.490671][   T30]  netlink_rcv_skb+0x226/0x4a0
[  837.495449][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  837.501046][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  837.506461][   T30]  ? net_generic+0x1e/0x240
[  837.510994][   T30]  ? net_generic+0x1e/0x240
[  837.515512][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  837.520864][   T30]  netlink_unicast+0x7bb/0x940
[  837.525736][   T30]  netlink_sendmsg+0x813/0xb40
[  837.530515][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.536011][   T30]  ? __might_fault+0xaf/0x130
[  837.540712][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  837.545816][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  837.551134][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.556570][   T30]  __sys_sendto+0x626/0x6c0
[  837.561102][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  837.566236][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  837.571531][   T30]  __x64_sys_sendto+0xde/0x100
[  837.576456][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.582575][   T30]  do_syscall_64+0x174/0x580
[  837.587311][   T30]  ? trace_irq_disable+0x3b/0x140
[  837.592388][   T30]  ? clear_bhb_loop+0x40/0x90
[  837.597239][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.603163][   T30] RIP: 0033:0x7feadbb5d68e
[  837.607655][   T30] RSP: 002b:00007ffd07f9fdd8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  837.616203][   T30] RAX: ffffffffffffffda RBX: 000055556cb5f500 RCX: 00007feadbb5d68e
[  837.624212][   T30] RDX: 0000000000000028 RSI: 00007feadc944670 RDI: 0000000000000003
[  837.632308][   T30] RBP: 0000000000000001 R08: 00007ffd07f9fe54 R09: 000000000000000c
[  837.640407][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  837.648456][   T30] R13: 0000000000000000 R14: 00007feadc944670 R15: 0000000000000000
[  837.656706][   T30]  </TASK>
[  837.659750][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  837.668917][   T30] INFO: task syz-executor:2615 blocked for more than 147 seconds.
[  837.676842][   T30]       Not tainted syzkaller #0
[  837.681823][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  837.690645][   T30] task:syz-executor    state:D stack:25784 pid:2615  tgid:2615  ppid:1      task_flags:0x400140 flags:0x00080002
[  837.702699][   T30] Call Trace:
[  837.706121][   T30]  <TASK>
[  837.709096][   T30]  __schedule+0x17d9/0x56c0
[  837.713617][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  837.719572][   T30]  ? __pfx___schedule+0x10/0x10
[  837.724445][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.729311][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.734086][   T30]  ? lock_release+0x4b/0x3c0
[  837.738817][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.743604][   T30]  schedule+0x164/0x360
[  837.747878][   T30]  schedule_preempt_disabled+0x13/0x30
[  837.753369][   T30]  __mutex_lock+0x7bf/0x1550
[  837.758085][   T30]  ? __mutex_lock+0x5d4/0x1550
[  837.762880][   T30]  ? inet_rtm_newaddr+0x464/0x19e0
[  837.768343][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  837.773624][   T30]  ? __nla_parse+0x40/0x60
[  837.778189][   T30]  inet_rtm_newaddr+0x464/0x19e0
[  837.783162][   T30]  ? __kernel_text_address+0xd/0x30
[  837.788484][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  837.794677][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  837.800201][   T30]  ? lock_release+0x4b/0x3c0
[  837.804822][   T30]  ? bpf_lsm_capable+0x9/0x20
[  837.809580][   T30]  ? security_capable+0x7e/0x2c0
[  837.814545][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  837.820084][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  837.825051][   T30]  ? kasan_save_track+0x3e/0x80
[  837.830008][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  837.835159][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  837.840785][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  837.847362][   T30]  ? rcu_is_watching+0x15/0xb0
[  837.852816][   T30]  netlink_rcv_skb+0x226/0x4a0
[  837.857716][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  837.863212][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  837.868627][   T30]  ? net_generic+0x1e/0x240
[  837.873158][   T30]  ? net_generic+0x1e/0x240
[  837.877834][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  837.883066][   T30]  netlink_unicast+0x7bb/0x940
[  837.887907][   T30]  netlink_sendmsg+0x813/0xb40
[  837.892690][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.898155][   T30]  ? __might_fault+0xaf/0x130
[  837.902876][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  837.907933][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  837.913256][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.918695][   T30]  __sys_sendto+0x626/0x6c0
[  837.923253][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  837.928458][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  837.933786][   T30]  __x64_sys_sendto+0xde/0x100
[  837.938816][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.944931][   T30]  do_syscall_64+0x174/0x580
[  837.949674][   T30]  ? trace_irq_disable+0x3b/0x140
[  837.954722][   T30]  ? clear_bhb_loop+0x40/0x90
[  837.959585][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.965571][   T30] RIP: 0033:0x7f24e1f5d68e
[  837.970064][   T30] RSP: 002b:00007ffe284b39b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  837.978705][   T30] RAX: ffffffffffffffda RBX: 0000555585e69500 RCX: 00007f24e1f5d68e
[  837.986892][   T30] RDX: 0000000000000028 RSI: 00007f24e2d44670 RDI: 0000000000000003
[  837.994987][   T30] RBP: 0000000000000001 R08: 00007ffe284b3a34 R09: 000000000000000c
[  838.003104][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  838.011352][   T30] R13: 0000000000000000 R14: 00007f24e2d44670 R15: 0000000000000000
[  838.019435][   T30]  </TASK>
[  838.022462][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  838.031739][   T30] INFO: task syz-executor:2617 blocked for more than 147 seconds.
[  838.039673][   T30]       Not tainted syzkaller #0
[  838.044627][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  838.053421][   T30] task:syz-executor    state:D stack:27088 pid:2617  tgid:2617  ppid:1      task_flags:0x400140 flags:0x00080002
[  838.065410][   T30] Call Trace:
[  838.068814][   T30]  <TASK>
[  838.071946][   T30]  __schedule+0x17d9/0x56c0
[  838.076588][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  838.082418][   T30]  ? __pfx___schedule+0x10/0x10
[  838.087622][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.092427][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.097340][   T30]  ? lock_release+0x4b/0x3c0
[  838.101957][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.106902][   T30]  schedule+0x164/0x360
[  838.111082][   T30]  schedule_preempt_disabled+0x13/0x30
[  838.116615][   T30]  __mutex_lock+0x7bf/0x1550
[  838.121223][   T30]  ? __mutex_lock+0x5d4/0x1550
[  838.126143][   T30]  ? inet_rtm_newaddr+0x464/0x19e0
[  838.131283][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  838.136394][   T30]  ? __nla_parse+0x40/0x60
[  838.140862][   T30]  inet_rtm_newaddr+0x464/0x19e0
[  838.145993][   T30]  ? __kernel_text_address+0xd/0x30
[  838.151227][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  838.157467][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.162846][   T30]  ? lock_release+0x4b/0x3c0
[  838.167594][   T30]  ? bpf_lsm_capable+0x9/0x20
[  838.172297][   T30]  ? security_capable+0x7e/0x2c0
[  838.177316][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.182702][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  838.187796][   T30]  ? kasan_save_track+0x3e/0x80
[  838.192679][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  838.197876][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.203345][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  838.208454][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.213259][   T30]  netlink_rcv_skb+0x226/0x4a0
[  838.218120][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.223597][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  838.229093][   T30]  ? net_generic+0x1e/0x240
[  838.233625][   T30]  ? net_generic+0x1e/0x240
[  838.238215][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  838.243432][   T30]  netlink_unicast+0x7bb/0x940
[  838.248523][   T30]  netlink_sendmsg+0x813/0xb40
[  838.253326][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.258780][   T30]  ? __might_fault+0xaf/0x130
[  838.263483][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  838.268564][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  838.273899][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.279332][   T30]  __sys_sendto+0x626/0x6c0
[  838.283868][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  838.289052][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  838.294367][   T30]  __x64_sys_sendto+0xde/0x100
[  838.299208][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.305277][   T30]  do_syscall_64+0x174/0x580
[  838.310035][   T30]  ? trace_irq_disable+0x3b/0x140
[  838.315098][   T30]  ? clear_bhb_loop+0x40/0x90
[  838.319935][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.325985][   T30] RIP: 0033:0x7f2b8a55d68e
[  838.330432][   T30] RSP: 002b:00007ffe0b21b438 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  838.338959][   T30] RAX: ffffffffffffffda RBX: 000055557b731500 RCX: 00007f2b8a55d68e
[  838.347168][   T30] RDX: 0000000000000028 RSI: 00007f2b8b344670 RDI: 0000000000000003
[  838.355166][   T30] RBP: 0000000000000001 R08: 00007ffe0b21b4b4 R09: 000000000000000c
[  838.363309][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  838.371720][   T30] R13: 0000000000000000 R14: 00007f2b8b344670 R15: 0000000000000000
[  838.379803][   T30]  </TASK>
[  838.382831][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  838.392021][   T30] INFO: task syz-executor:2630 blocked for more than 148 seconds.
[  838.399974][   T30]       Not tainted syzkaller #0
[  838.404918][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  838.413751][   T30] task:syz-executor    state:D stack:27088 pid:2630  tgid:2630  ppid:1      task_flags:0x400140 flags:0x00080002
[  838.425889][   T30] Call Trace:
[  838.429194][   T30]  <TASK>
[  838.432129][   T30]  __schedule+0x17d9/0x56c0
[  838.436726][   T30]  ? __kernel_text_address+0xd/0x30
[  838.441941][   T30]  ? arch_stack_walk+0xfb/0x150
[  838.446972][   T30]  ? __pfx___schedule+0x10/0x10
[  838.451856][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.456706][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.461481][   T30]  ? lock_release+0x4b/0x3c0
[  838.466228][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.471031][   T30]  schedule+0x164/0x360
[  838.475210][   T30]  schedule_preempt_disabled+0x13/0x30
[  838.480816][   T30]  __mutex_lock+0x7bf/0x1550
[  838.485452][   T30]  ? __mutex_lock+0x5d4/0x1550
[  838.490507][   T30]  ? inet_rtm_newaddr+0x464/0x19e0
[  838.495723][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  838.500789][   T30]  ? __nla_parse+0x40/0x60
[  838.505230][   T30]  inet_rtm_newaddr+0x464/0x19e0
[  838.510333][   T30]  ? __kernel_text_address+0xd/0x30
[  838.515577][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  838.521838][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.527392][   T30]  ? lock_release+0x4b/0x3c0
[  838.532033][   T30]  ? bpf_lsm_capable+0x9/0x20
[  838.536847][   T30]  ? security_capable+0x7e/0x2c0
[  838.541859][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.547383][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  838.552357][   T30]  ? kasan_save_track+0x3e/0x80
[  838.557288][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  838.562419][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.568068][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.572867][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  838.577892][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.582665][   T30]  netlink_rcv_skb+0x226/0x4a0
[  838.587608][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.593116][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  838.598512][   T30]  ? net_generic+0x1e/0x240
[  838.603041][   T30]  ? net_generic+0x1e/0x240
[  838.607705][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  838.612938][   T30]  netlink_unicast+0x7bb/0x940
[  838.617802][   T30]  netlink_sendmsg+0x813/0xb40
[  838.622588][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.628026][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  838.632990][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  838.638360][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.643664][   T30]  __sys_sendto+0x626/0x6c0
[  838.648541][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  838.653618][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  838.658989][   T30]  __x64_sys_sendto+0xde/0x100
[  838.663767][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.669962][   T30]  do_syscall_64+0x174/0x580
[  838.674585][   T30]  ? trace_irq_disable+0x3b/0x140
[  838.679700][   T30]  ? clear_bhb_loop+0x40/0x90
[  838.684384][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  838.690420][   T30] RIP: 0033:0x7f8b8a35d68e
[  838.694869][   T30] RSP: 002b:00007ffe2ff863e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  838.703436][   T30] RAX: ffffffffffffffda RBX: 000055555681d500 RCX: 00007f8b8a35d68e
[  838.711552][   T30] RDX: 0000000000000028 RSI: 00007f8b8b144670 RDI: 0000000000000003
[  838.719617][   T30] RBP: 0000000000000001 R08: 00007ffe2ff86464 R09: 000000000000000c
[  838.727740][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  838.735803][   T30] R13: 0000000000000000 R14: 00007f8b8b144670 R15: 0000000000000000
[  838.743791][   T30]  </TASK>
[  838.746966][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  838.756118][   T30] INFO: task syz-executor:2631 blocked for more than 148 seconds.
[  838.763948][   T30]       Not tainted syzkaller #0
[  838.769025][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  838.777808][   T30] task:syz-executor    state:D stack:27088 pid:2631  tgid:2631  ppid:1      task_flags:0x400140 flags:0x00080002
[  838.789890][   T30] Call Trace:
[  838.793207][   T30]  <TASK>
[  838.796225][   T30]  __schedule+0x17d9/0x56c0
[  838.800762][   T30]  ? __update_page_owner_handle+0x5a/0x570
[  838.807211][   T30]  ? __pfx___schedule+0x10/0x10
[  838.812109][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.816970][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.821748][   T30]  ? lock_release+0x4b/0x3c0
[  838.826487][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.831287][   T30]  schedule+0x164/0x360
[  838.835462][   T30]  schedule_preempt_disabled+0x13/0x30
[  838.841120][   T30]  __mutex_lock+0x7bf/0x1550
[  838.845859][   T30]  ? __mutex_lock+0x5d4/0x1550
[  838.850674][   T30]  ? inet_rtm_newaddr+0x464/0x19e0
[  838.855889][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  838.860941][   T30]  ? __nla_parse+0x40/0x60
[  838.865385][   T30]  inet_rtm_newaddr+0x464/0x19e0
[  838.870594][   T30]  ? __kernel_text_address+0xd/0x30
[  838.876000][   T30]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  838.882197][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.888156][   T30]  ? lock_release+0x4b/0x3c0
[  838.893075][   T30]  ? bpf_lsm_capable+0x9/0x20
[  838.897867][   T30]  ? security_capable+0x7e/0x2c0
[  838.902838][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  838.908357][   T30]  rtnetlink_rcv_msg+0x802/0xc00
[  838.913350][   T30]  ? kasan_save_track+0x3e/0x80
[  838.918333][   T30]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  838.923498][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.929117][   T30]  ? __netlink_lookup+0xc6/0x8b0
[  838.934085][   T30]  ? rcu_is_watching+0x15/0xb0
[  838.938961][   T30]  netlink_rcv_skb+0x226/0x4a0
[  838.943737][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  838.949436][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  838.954768][   T30]  ? net_generic+0x1e/0x240
[  838.959380][   T30]  ? net_generic+0x1e/0x240
[  838.963896][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  838.969250][   T30]  netlink_unicast+0x7bb/0x940
[  838.974055][   T30]  netlink_sendmsg+0x813/0xb40
[  838.978986][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  838.984318][   T30]  ? __might_fault+0xaf/0x130
[  838.989129][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  838.994095][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  838.999484][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  839.004788][   T30]  __sys_sendto+0x626/0x6c0
[  839.009436][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  839.014502][   T30]  ? do_user_addr_fault+0xc4a/0x1340
[  839.019883][   T30]  __x64_sys_sendto+0xde/0x100
[  839.024664][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.030907][   T30]  do_syscall_64+0x174/0x580
[  839.035536][   T30]  ? trace_irq_disable+0x3b/0x140
[  839.041020][   T30]  ? clear_bhb_loop+0x40/0x90
[  839.046015][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  839.051969][   T30] RIP: 0033:0x7f828d15d68e
[  839.056448][   T30] RSP: 002b:00007ffe4e6c58b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  839.064885][   T30] RAX: ffffffffffffffda RBX: 0000555560c66500 RCX: 00007f828d15d68e
[  839.073030][   T30] RDX: 0000000000000028 RSI: 00007f828df44670 RDI: 0000000000000003
[  839.081096][   T30] RBP: 0000000000000001 R08: 00007ffe4e6c5934 R09: 000000000000000c
[  839.089236][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  839.097381][   T30] R13: 0000000000000000 R14: 00007f828df44670 R15: 0000000000000000
[  839.105370][   T30]  </TASK>
[  839.108520][   T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings
[  839.117631][   T30] INFO: lockdep is turned off.
[  839.122476][   T30] NMI backtrace for cpu 0
[  839.122493][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  839.122511][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  839.122520][   T30] Call Trace:
[  839.122529][   T30]  <TASK>
[  839.122537][   T30]  dump_stack_lvl+0xe8/0x150
[  839.122561][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  839.122625][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  839.122660][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  839.122679][   T30]  sys_info+0x135/0x170
[  839.122694][   T30]  watchdog+0xfd7/0x1030
[  839.122724][   T30]  ? watchdog+0x1c7/0x1030
[  839.122747][   T30]  kthread+0x388/0x470
[  839.122763][   T30]  ? __pfx_watchdog+0x10/0x10
[  839.122781][   T30]  ? __pfx_kthread+0x10/0x10
[  839.122796][   T30]  ret_from_fork+0x514/0xb70
[  839.122814][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  839.122829][   T30]  ? __switch_to+0xc89/0x1420
[  839.122852][   T30]  ? __pfx_kthread+0x10/0x10
[  839.122927][   T30]  ret_from_fork_asm+0x1a/0x30
[  839.122953][   T30]  </TASK>
[  839.122959][   T30] Sending NMI from CPU 0 to CPUs 1:
[  839.233190][    C1] NMI backtrace for cpu 1
[  839.233209][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  839.233227][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  839.233236][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  839.233264][    C1] Code: 0c 80 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 a7 21 00 fb f4 <e9> 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  839.233278][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[  839.233292][    C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001
[  839.233305][    C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170
[  839.233316][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  839.233329][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  839.233340][    C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  839.233352][    C1] FS:  0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[  839.233370][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  839.233381][    C1] CR2: 00007fa9be2ddb9a CR3: 000000000e746000 CR4: 00000000003526f0
[  839.233395][    C1] Call Trace:
[  839.233403][    C1]  <TASK>
[  839.233409][    C1]  default_idle+0x9/0x20
[  839.233432][    C1]  default_idle_call+0x72/0xb0
[  839.233460][    C1]  do_idle+0x2e0/0x540
[  839.233484][    C1]  ? __pfx_do_idle+0x10/0x10
[  839.233510][    C1]  cpu_startup_entry+0x43/0x60
[  839.233532][    C1]  start_secondary+0x101/0x110
[  839.233555][    C1]  common_startup_64+0x13e/0x157
[  839.233583][    C1]  </TASK>
[  839.395754][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  839.402623][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  839.411734][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  839.421790][   T30] Call Trace:
[  839.425063][   T30]  <TASK>
[  839.427997][   T30]  vpanic+0x56c/0xa60
[  839.432015][   T30]  ? __pfx___schedule+0x10/0x10
[  839.436869][   T30]  ? __pfx_vpanic+0x10/0x10
[  839.441377][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  839.447533][   T30]  panic+0xc5/0xd0
[  839.451250][   T30]  ? __pfx_panic+0x10/0x10
[  839.455659][   T30]  ? preempt_schedule_common+0x82/0xd0
[  839.461126][   T30]  ? preempt_schedule_thunk+0x16/0x40
[  839.466520][   T30]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  839.472858][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  839.479021][   T30]  watchdog+0x1030/0x1030
[  839.483360][   T30]  ? watchdog+0x1c7/0x1030
[  839.487780][   T30]  kthread+0x388/0x470
[  839.491854][   T30]  ? __pfx_watchdog+0x10/0x10
[  839.496531][   T30]  ? __pfx_kthread+0x10/0x10
[  839.501121][   T30]  ret_from_fork+0x514/0xb70
[  839.505713][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  839.510832][   T30]  ? __switch_to+0xc89/0x1420
[  839.515519][   T30]  ? __pfx_kthread+0x10/0x10
[  839.520100][   T30]  ret_from_fork_asm+0x1a/0x30
[  839.524862][   T30]  </TASK>
[  839.528023][   T30] Kernel Offset: disabled
[  839.532356][   T30] Rebooting in 86400 seconds..