last executing test programs:

7.652036873s ago: executing program 2 (id=3):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x608f, 0x0, 0x0, 0x0, 0xfffff800}, [@generic={0x80, 0x8, 0x5, 0x4, 0x8f}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x1a, &(0x7f0000000180)=""/26, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x5, 0x2, 0x2}], 0x10, 0x3}, 0x94)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000300)=r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@newtaction={0x14, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

7.492705298s ago: executing program 2 (id=5):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = epoll_create1(0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f00000000c0), 0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001400)={0xe0000017})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
epoll_wait(r5, &(0x7f0000001940)=[{}], 0x1, 0x0)
socket(0x2, 0x5, 0x9)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
epoll_create1(0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f00000000c0), 0x4) (async)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001400)={0xe0000017}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
epoll_wait(r5, &(0x7f0000001940)=[{}], 0x1, 0x0) (async)
socket(0x2, 0x5, 0x9) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)

7.263556406s ago: executing program 2 (id=8):
socket$kcm(0xa, 0x3, 0x73)
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x8000, 0x8}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r5, {0xa, 0x1}, {0x0, 0xfff1}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="6864872be6b4"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'caif0\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)={[{0x2d, 'net_prio'}]}, 0xa)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x8000000}, 0x38)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0x6, 0x40, 0x801, r0, 0x2, '\x00', r6, r7, 0x1, 0x5, 0x5, 0xa}, 0x50)
r10 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0200000002"], 0x10)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r13, r14, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

5.87181751s ago: executing program 2 (id=29):
r0 = socket(0x26, 0xa, 0x8001)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x80108906, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x2, 0x8827, 0x2d, 0x9, 0x8000})
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x802, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4008010)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000440)=0xb, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf86}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4085)

4.383222514s ago: executing program 2 (id=51):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', <r5=>0x0, 0x20, 0x7800, 0x7fffffff, 0x0, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x67, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@end, @lsrr={0x83, 0x27, 0x89, [@empty, @remote, @multicast1, @loopback, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x1, [{@loopback, 0x3ff}, {@multicast1, 0x2}, {@empty, 0x2}, {@local, 0x5}]}, @ssrr={0x89, 0x1f, 0xff, [@remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @loopback, @broadcast]}, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0xd, [0x8]}, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x9, [{@multicast2, 0xaf4}, {@empty, 0x40}]}]}}}}})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98)
splice(r8, 0x0, r10, 0x0, 0x80, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x1, 0x3, 0x1, 0x5, 0x0, 0xfffffffffffffff4, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x6, &(0x7f0000000140)=""/6, 0x40f00, 0x1, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r6, r7, r10], &(0x7f00000003c0)=[{0x1, 0x3, 0x6, 0xb}, {0x4, 0x5, 0xd, 0x8}, {0x4, 0x4, 0xc, 0x7}, {0x2, 0x4, 0x9, 0xb}], 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x700}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0)

3.113826682s ago: executing program 1 (id=65):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3)
sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7002ff010200001ad69092d44ca26eb34ceba0dbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_mreqn(r5, 0x0, 0x62, 0x0, &(0x7f0000000080))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000080", @ANYRES16=0x0, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
unshare(0x6a040000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x98, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="99742dbd7000a1e8bb4b15000000140001800d000c007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2402c002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
socket$key(0xf, 0x3, 0x2)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [0xff], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0x78)
getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f00761e99319cd3c3197ccf0840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

953.683798ms ago: executing program 1 (id=69):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100), 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xff00}]}]}]}, 0x38}}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)

883.039037ms ago: executing program 1 (id=71):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012cbd7000fcdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB="8500340040000000000200", @ANYRES32=r10, @ANYBLOB="050035000400000008000200", @ANYRES32=r11, @ANYBLOB="0a0001007770616e31000000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2d, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "03a8"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x2, 0x0, 0x0, 0x2, 0xfffffffb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x1b1c}}]}, 0x80}, 0x1, 0x7}, 0x0)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r13, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

693.730535ms ago: executing program 0 (id=73):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r1, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40)

633.346364ms ago: executing program 0 (id=74):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r5], 0x48}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c"], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)
bind$xdp(r3, &(0x7f0000000080)={0x2c, 0xe, r6, 0x3, r7}, 0x10)

461.73413ms ago: executing program 0 (id=75):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
unshare(0x40010200)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)

333.369762ms ago: executing program 0 (id=76):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
connect$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r9 = accept(r7, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r9}, 0x47)
recvmmsg(r9, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r11}, 0x18)
getpeername$netlink(r9, 0x0, &(0x7f0000000080))
sendmsg$IPSET_CMD_DESTROY(r9, 0x0, 0x40810)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10)
ioctl$AUTOFS_IOC_READY(r12, 0x9360, 0xd)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

240.187345ms ago: executing program 1 (id=77):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0)

234.703299ms ago: executing program 0 (id=78):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r2=>0x0}) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@mcast1, 0x4e21, 0x1, 0x4e20, 0x0, 0x2, 0x60, 0x80, 0x73, r2, r3}, {0x6, 0x7, 0x100000001, 0x2, 0x2, 0x3, 0x0, 0x1}, {0x100000001, 0x9acc, 0x5, 0x3}, 0x0, 0x6e6bb6, 0x1, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d2, 0x3c}, 0x2, @in6=@private0, 0x3504, 0x2, 0x1, 0x5, 0x9, 0x1, 0x5}}, 0xe8) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0)

82.803243ms ago: executing program 0 (id=79):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x100000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80a}, {0xa, 0x8, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x5}}, 0x2, {[0x9, 0x1, 0xfffffffe, 0x1, 0xffffffff, 0x8, 0x4]}}, 0x5c)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xf8, 0x1, 0x2d3e, 0x1004, 0xffffffffffffffff, 0x9, '\x00', r2, r5, 0x0, 0x0, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1c, 0x6, 0x7ff, 0x4, 0x1004, r8, 0x9, '\x00', r2, r5, 0x2, 0x4, 0x4}, 0x50)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={0xcc, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0xcc}, 0x1, 0x3fffffffffffff, 0x0, 0x40}, 0x4010044)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="5f43d94c2b6a15e7394b20d1e81d7cfe7a653b3ff6c5e9f3ce023d9b79298a28f182c5e33323865440bf1d1ecc0269994863e65e2b8b244f04365b177f6e547d2bc465eb7d830a21cd442f82146ebe3f921533dc2b4d7a80e836fad2d73017382d81d02dfc1f3bbdb921063536b4bb4dd5feb6b7c2befbe1f6f7d22c8f3902995497a86820180095aef8d1d2bce9a28516e04cb138fdef2085392b065e9843c88f3522394c3ab2d231f032d8fa0cf644f6a75701e5a883fc292fcfdd93ec0d5b9f075683dc6105db5fc05b5c224848972a27d89d75cf96166f14131370696d43b271c1377e2a5264cc4934"], 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, &(0x7f0000000080)="e5902d", &(0x7f0000000440)=""/246}, 0x20)

82.316226ms ago: executing program 1 (id=80):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0xd, &(0x7f0000000040)="0f114def84b22dde27e442f1a7", 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x8, 0x60000000, 0xc}, {@broadcast, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)

0s ago: executing program 1 (id=81):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x5000, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r1, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40)

kernel console output (not intermixed with test programs):

syzkaller login: [   54.184246][ T5800] sftp-server (5800) used greatest stack depth: 20504 bytes left
Warning: Permanently added '[localhost]:54697' (ED25519) to the list of known hosts.
[   56.793160][ T5804] cgroup: Unknown subsys name 'net'
[   56.877288][ T5804] cgroup: Unknown subsys name 'cpuset'
[   56.883099][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.510155][ T5804] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.945079][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.948720][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.952237][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.956895][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.960679][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.008300][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.012010][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.016049][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.019674][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.023451][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.120905][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.124981][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.128443][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.132137][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.136137][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.265794][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   63.370547][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   63.389499][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.393109][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.396322][ T5818] bridge_slave_0: entered allmulticast mode
[   63.400314][ T5818] bridge_slave_0: entered promiscuous mode
[   63.422318][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.426167][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.429112][ T5818] bridge_slave_1: entered allmulticast mode
[   63.433176][ T5818] bridge_slave_1: entered promiscuous mode
[   63.489045][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.508358][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.570508][ T5818] team0: Port device team_slave_0 added
[   63.574132][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.576649][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.579024][ T5823] bridge_slave_0: entered allmulticast mode
[   63.581815][ T5823] bridge_slave_0: entered promiscuous mode
[   63.586727][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   63.592793][ T5818] team0: Port device team_slave_1 added
[   63.595343][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.597760][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.600409][ T5823] bridge_slave_1: entered allmulticast mode
[   63.603735][ T5823] bridge_slave_1: entered promiscuous mode
[   63.637236][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.659453][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.689568][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.692442][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.703685][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.726062][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.728481][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.737445][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.744230][ T5823] team0: Port device team_slave_0 added
[   63.770413][ T5823] team0: Port device team_slave_1 added
[   63.790941][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.793758][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.796076][ T5826] bridge_slave_0: entered allmulticast mode
[   63.799031][ T5826] bridge_slave_0: entered promiscuous mode
[   63.803235][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.805548][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.808044][ T5826] bridge_slave_1: entered allmulticast mode
[   63.810957][ T5826] bridge_slave_1: entered promiscuous mode
[   63.824756][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.827395][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.836705][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.882114][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.885842][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.895865][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.912375][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.919829][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.937303][ T5818] hsr_slave_0: entered promiscuous mode
[   63.940545][ T5818] hsr_slave_1: entered promiscuous mode
[   63.974140][ T5826] team0: Port device team_slave_0 added
[   63.990891][ T5826] team0: Port device team_slave_1 added
[   64.023770][ T5823] hsr_slave_0: entered promiscuous mode
[   64.027304][ T5823] hsr_slave_1: entered promiscuous mode
[   64.029887][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.033718][ T5823] Cannot create hsr debugfs directory
[   64.056288][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.058966][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.069231][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.079424][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.082007][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.091217][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.201593][ T5826] hsr_slave_0: entered promiscuous mode
[   64.205306][ T5826] hsr_slave_1: entered promiscuous mode
[   64.208255][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.211495][ T5826] Cannot create hsr debugfs directory
[   64.364445][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.392872][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.403536][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.424366][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.457959][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.475625][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.488278][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.508709][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.530290][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.539277][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.546867][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.553921][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.675636][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.707177][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.717225][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   64.722431][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.736322][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.739481][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.749397][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   64.762060][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.765141][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.776617][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.779301][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.788512][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   64.810505][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.813685][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.822343][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.825513][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.847141][  T185] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.850050][  T185] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.926355][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.004109][ T5202] Bluetooth: hci0: command tx timeout
[   65.083638][ T5202] Bluetooth: hci1: command tx timeout
[   65.135760][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.165322][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.167394][ T5202] Bluetooth: hci2: command tx timeout
[   65.176720][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.248944][ T5823] veth0_vlan: entered promiscuous mode
[   65.260229][ T5818] veth0_vlan: entered promiscuous mode
[   65.264704][ T5826] veth0_vlan: entered promiscuous mode
[   65.272483][ T5826] veth1_vlan: entered promiscuous mode
[   65.279096][ T5818] veth1_vlan: entered promiscuous mode
[   65.286130][ T5823] veth1_vlan: entered promiscuous mode
[   65.303372][ T5826] veth0_macvtap: entered promiscuous mode
[   65.318876][ T5826] veth1_macvtap: entered promiscuous mode
[   65.350346][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.366553][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.372119][ T5823] veth0_macvtap: entered promiscuous mode
[   65.382139][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.387091][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.390798][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.396642][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.415991][ T5823] veth1_macvtap: entered promiscuous mode
[   65.427137][ T5818] veth0_macvtap: entered promiscuous mode
[   65.436059][ T5818] veth1_macvtap: entered promiscuous mode
[   65.448358][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.467297][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.490205][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.494734][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.497570][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.500334][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.517990][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.539671][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.550201][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.556209][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.559552][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.562128][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.567564][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.570341][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.619363][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.625194][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.676496][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.679785][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.729205][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.732612][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.736912][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.797642][  T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.803403][  T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.817985][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.821357][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.983793][ T5888] Zero length message leads to an empty skb
[   66.188414][ T5899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.191810][ T5899] IPv6: NLM_F_CREATE should be set when creating new route
[   66.393319][ T5906] netlink: 'syz.2.8': attribute type 39 has an invalid length.
[   66.614931][ T5916] 8021q: VLANs not supported on gre0
[   66.756768][ T5920] openvswitch: netlink: IP tunnel dst address not specified
[   66.816301][ T5922] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.893720][ T5925] netlink: 'syz.0.17': attribute type 39 has an invalid length.
[   66.998070][ T5930] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET)
[   67.083326][ T5202] Bluetooth: hci0: command tx timeout
[   67.165786][ T5202] Bluetooth: hci1: command tx timeout
[   67.227155][ T5936] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.21'.
[   67.243154][ T5202] Bluetooth: hci2: command tx timeout
[   67.326455][ T5938] openvswitch: netlink: IP tunnel dst address not specified
[   67.378934][ T5940] 8021q: VLANs not supported on wg2
[   67.384885][ T5940] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.586691][ T5948] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[   67.598509][ T5948] gretap1: entered promiscuous mode
[   68.148355][ T5969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'.
[   68.192152][ T5971] xt_hashlimit: size too large, truncated to 1048576
[   68.203138][ T5971] xt_hashlimit: overflow, try lower: 3/0
[   68.212229][ T5971] Bluetooth: MGMT ver 1.23
[   68.298403][ T5973] xt_bpf: check failed: parse error
[   68.354927][ T5975] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000
[   68.367150][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.712155][ T5977] netlink: 'syz.0.39': attribute type 10 has an invalid length.
[   68.715653][ T5977] macvlan0: entered allmulticast mode
[   68.722055][ T5977] veth1_vlan: entered allmulticast mode
[   68.735032][ T5977] team0: Port device macvlan0 added
[   68.745455][ T5977] syz.0.39 (5977) used greatest stack depth: 19544 bytes left
[   68.786924][ T5980] warning: `syz.0.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.810750][ T5980] tap0: tun_chr_ioctl cmd 1074025678
[   68.813452][ T5980] tap0: group set to 0
[   68.930778][ T5986] openvswitch: netlink: IP tunnel dst address not specified
[   68.957289][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'.
[   68.975646][ T5988] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   68.979763][ T5988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.029789][ T5991] netlink: 'syz.1.46': attribute type 1 has an invalid length.
[   69.032386][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   69.038048][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   69.110467][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[   69.163539][ T5202] Bluetooth: hci0: command tx timeout
[   69.207730][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.212045][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   69.218030][ T6005] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   69.282061][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.322904][ T5202] Bluetooth: hci2: command tx timeout
[   69.332075][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.444145][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.588917][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.601156][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.604449][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.607806][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.611105][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.718761][ T6039] netlink: 4344 bytes leftover after parsing attributes in process `syz.0.58'.
[   69.751625][   T12] bridge_slave_1: left allmulticast mode
[   69.765366][   T12] bridge_slave_1: left promiscuous mode
[   69.769062][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.792188][   T12] bridge_slave_0: left allmulticast mode
[   69.796727][   T12] bridge_slave_0: left promiscuous mode
[   69.799228][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.799626][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'.
[   70.107559][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.118029][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.125377][   T12] bond0 (unregistering): Released all slaves
[   70.457205][    T9] IPVS: starting estimator thread 0...
[   70.465302][ T6070] openvswitch: netlink: Multiple metadata blocks provided
[   70.522035][ T6029] chnl_net:caif_netlink_parms(): no params data found
[   70.555748][ T6071] IPVS: using max 79 ests per chain, 189600 per kthread
[   70.560449][   T12] hsr_slave_0: left promiscuous mode
[   70.564733][   T12] hsr_slave_1: left promiscuous mode
[   70.572986][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.575521][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.584289][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.587989][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.608233][   T12] veth1_macvtap: left promiscuous mode
[   70.610453][   T12] veth0_macvtap: left promiscuous mode
[   70.622170][   T12] veth1_vlan: left promiscuous mode
[   70.634038][   T12] veth0_vlan: left promiscuous mode
[   70.826182][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.015648][   T12] team0 (unregistering): Port device team_slave_1 removed
[   71.042621][   T12] team0 (unregistering): Port device team_slave_0 removed
[   71.087410][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.090295][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.243345][ T5828] Bluetooth: hci0: command tx timeout
[   71.389093][ T5839] syzkaller0: tun_net_xmit 76
[   71.391118][ T5839] syzkaller0: tun_net_xmit 48
[   71.413251][ T5828] Bluetooth: hci2: command tx timeout
[   71.643407][ T5828] Bluetooth: hci1: command tx timeout
[   72.256978][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.259345][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.264510][ T6029] bridge_slave_0: entered allmulticast mode
[   72.268277][ T6029] bridge_slave_0: entered promiscuous mode
[   72.275555][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.282461][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.286658][ T6029] bridge_slave_1: entered allmulticast mode
[   72.294197][ T6029] bridge_slave_1: entered promiscuous mode
[   72.338472][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.410319][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.475159][ T6029] team0: Port device team_slave_0 added
[   72.500612][ T6029] team0: Port device team_slave_1 added
[   72.545664][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.548683][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.579972][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.588925][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.591812][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.613799][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.706387][ T6029] hsr_slave_0: entered promiscuous mode
[   72.709385][ T6029] hsr_slave_1: entered promiscuous mode
[   72.712264][ T6029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.717141][ T6029] Cannot create hsr debugfs directory
[   72.720024][ T6111] __nla_validate_parse: 4 callbacks suppressed
[   72.720032][ T6111] netlink: 212 bytes leftover after parsing attributes in process `syz.0.70'.
[   72.753466][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.71'.
[   72.875439][ T6131] openvswitch: netlink: IP tunnel dst address not specified
[   72.959670][ T6134] bond1: entered promiscuous mode
[   72.961920][ T6134] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.976184][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'.
[   73.314709][ T6159] Cannot find del_set index 4 as target
[   73.346691][ T6159] netlink: 'syz.1.77': attribute type 10 has an invalid length.
[   73.349173][ T6159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'.
[   73.378678][ T6159] dummy0: entered promiscuous mode
[   73.382491][ T6159] bridge0: port 3(dummy0) entered blocking state
[   73.386317][ T6159] bridge0: port 3(dummy0) entered disabled state
[   73.389257][ T6159] dummy0: entered allmulticast mode
[   73.396066][ T6159] bridge0: port 3(dummy0) entered blocking state
[   73.399129][ T6159] bridge0: port 3(dummy0) entered forwarding state
[   73.448986][ T6029] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.478698][ T6029] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.490290][ T6029] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.514805][ T6029] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.616316][ T6177] openvswitch: netlink: IP tunnel dst address not specified
[   73.714562][ T6167] 
[   73.715485][ T6167] ======================================================
[   73.717863][ T6167] WARNING: possible circular locking dependency detected
[   73.720719][ T6167] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[   73.724708][ T6167] ------------------------------------------------------
[   73.727626][ T6167] syz.0.79/6167 is trying to acquire lock:
[   73.730124][ T6167] ffffffff8e2257a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0
[   73.734118][ T6167] 
[   73.734118][ T6167] but task is already holding lock:
[   73.737084][ T6167] ffff8880206858b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   73.741273][ T6167] 
[   73.741273][ T6167] which lock already depends on the new lock.
[   73.741273][ T6167] 
[   73.745600][ T6167] 
[   73.745600][ T6167] the existing dependency chain (in reverse order) is:
[   73.749385][ T6167] 
[   73.749385][ T6167] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   73.752882][ T6167]        lock_acquire+0x120/0x360
[   73.754969][ T6167]        blk_alloc_queue+0x538/0x620
[   73.757169][ T6167]        __blk_mq_alloc_disk+0x162/0x340
[   73.759447][ T6167]        nbd_dev_add+0x476/0xb00
[   73.761504][ T6167]        nbd_init+0x21a/0x2d0
[   73.763511][ T6167]        do_one_initcall+0x236/0x820
[   73.765784][ T6167]        do_initcall_level+0x137/0x1f0
[   73.768163][ T6167]        do_initcalls+0x69/0xd0
[   73.770259][ T6167]        kernel_init_freeable+0x3d9/0x570
[   73.772734][ T6167]        kernel_init+0x1d/0x1d0
[   73.774879][ T6167]        ret_from_fork+0x3fc/0x770
[   73.777120][ T6167]        ret_from_fork_asm+0x1a/0x30
[   73.779549][ T6167] 
[   73.779549][ T6167] -> #1 (fs_reclaim){+.+.}-{0:0}:
[   73.782667][ T6167]        lock_acquire+0x120/0x360
[   73.784991][ T6167]        fs_reclaim_acquire+0x72/0x100
[   73.787293][ T6167]        prepare_alloc_pages+0x153/0x610
[   73.789598][ T6167]        __alloc_frozen_pages_noprof+0x123/0x370
[   73.792253][ T6167]        __alloc_pages_noprof+0xa/0x30
[   73.794552][ T6167]        pcpu_populate_chunk+0x182/0xb30
[   73.796877][ T6167]        pcpu_alloc_noprof+0xcbf/0x16b0
[   73.799190][ T6167]        xt_percpu_counter_alloc+0x161/0x220
[   73.801742][ T6167]        translate_table+0x12e9/0x2000
[   73.804043][ T6167]        ipt_register_table+0x106/0x7c0
[   73.806408][ T6167]        iptable_mangle_table_init+0x41/0x70
[   73.808956][ T6167]        xt_find_table_lock+0x30c/0x3e0
[   73.811210][ T6167]        xt_request_find_table_lock+0x26/0x100
[   73.813836][ T6167]        do_ipt_get_ctl+0x730/0x1180
[   73.816015][ T6167]        nf_getsockopt+0x26e/0x290
[   73.818144][ T6167]        ip_getsockopt+0x1c4/0x220
[   73.820275][ T6167]        do_sock_getsockopt+0x360/0x650
[   73.822552][ T6167]        __x64_sys_getsockopt+0x1a5/0x250
[   73.824898][ T6167]        do_syscall_64+0xfa/0x3b0
[   73.826958][ T6167]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.829555][ T6167] 
[   73.829555][ T6167] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[   73.832708][ T6167]        validate_chain+0xb9b/0x2140
[   73.834832][ T6167]        __lock_acquire+0xab9/0xd20
[   73.836995][ T6167]        lock_acquire+0x120/0x360
[   73.839109][ T6167]        __mutex_lock+0x182/0xe80
[   73.841220][ T6167]        pcpu_alloc_noprof+0x286/0x16b0
[   73.843505][ T6167]        sbitmap_init_node+0x1e1/0x630
[   73.845715][ T6167]        sbitmap_queue_init_node+0x41/0x660
[   73.848152][ T6167]        blk_mq_init_tags+0x110/0x280
[   73.850456][ T6167]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[   73.852881][ T6167]        blk_mq_update_nr_hw_queues+0x76a/0x14c0
[   73.855526][ T6167]        nbd_start_device+0x16c/0xac0
[   73.857802][ T6167]        nbd_genl_connect+0x1250/0x1930
[   73.860161][ T6167]        genl_family_rcv_msg_doit+0x215/0x300
[   73.862751][ T6167]        genl_rcv_msg+0x60e/0x790
[   73.864921][ T6167]        netlink_rcv_skb+0x208/0x470
[   73.867147][ T6167]        genl_rcv+0x28/0x40
[   73.869106][ T6167]        netlink_unicast+0x75b/0x8d0
[   73.871307][ T6167]        netlink_sendmsg+0x805/0xb30
[   73.873591][ T6167]        __sock_sendmsg+0x21c/0x270
[   73.875828][ T6167]        ____sys_sendmsg+0x505/0x830
[   73.877955][ T6167]        ___sys_sendmsg+0x21f/0x2a0
[   73.880190][ T6167]        __x64_sys_sendmsg+0x19b/0x260
[   73.882536][ T6167]        do_syscall_64+0xfa/0x3b0
[   73.884683][ T6167]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.887383][ T6167] 
[   73.887383][ T6167] other info that might help us debug this:
[   73.887383][ T6167] 
[   73.891569][ T6167] Chain exists of:
[   73.891569][ T6167]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49
[   73.891569][ T6167] 
[   73.896986][ T6167]  Possible unsafe locking scenario:
[   73.896986][ T6167] 
[   73.900062][ T6167]        CPU0                    CPU1
[   73.902281][ T6167]        ----                    ----
[   73.904487][ T6167]   lock(&q->q_usage_counter(io)#49);
[   73.906804][ T6167]                                lock(fs_reclaim);
[   73.909544][ T6167]                                lock(&q->q_usage_counter(io)#49);
[   73.912860][ T6167]   lock(pcpu_alloc_mutex);
[   73.914828][ T6167] 
[   73.914828][ T6167]  *** DEADLOCK ***
[   73.914828][ T6167] 
[   73.918246][ T6167] 7 locks held by syz.0.79/6167:
[   73.920369][ T6167]  #0: ffffffff8f576170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   73.923599][ T6167]  #1: ffffffff8f575f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   73.927204][ T6167]  #2: ffff8880207dca30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[   73.931411][ T6167]  #3: ffff8880207dc988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   73.936209][ T6167]  #4: ffff8880207dc8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[   73.940723][ T6167]  #5: ffff8880206858b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   73.945023][ T6167]  #6: ffff8880206858e8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0
[   73.949536][ T6167] 
[   73.949536][ T6167] stack backtrace:
[   73.952053][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.0.79 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   73.952071][ T6167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.952080][ T6167] Call Trace:
[   73.952089][ T6167]  <TASK>
[   73.952097][ T6167]  dump_stack_lvl+0x189/0x250
[   73.952122][ T6167]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.952143][ T6167]  ? __pfx__printk+0x10/0x10
[   73.952159][ T6167]  ? print_lock_name+0xde/0x100
[   73.952173][ T6167]  print_circular_bug+0x2ee/0x310
[   73.952188][ T6167]  check_noncircular+0x134/0x160
[   73.952201][ T6167]  validate_chain+0xb9b/0x2140
[   73.952219][ T6167]  __lock_acquire+0xab9/0xd20
[   73.952237][ T6167]  ? pcpu_alloc_noprof+0x286/0x16b0
[   73.952250][ T6167]  lock_acquire+0x120/0x360
[   73.952265][ T6167]  ? pcpu_alloc_noprof+0x286/0x16b0
[   73.952280][ T6167]  __mutex_lock+0x182/0xe80
[   73.952297][ T6167]  ? pcpu_alloc_noprof+0x286/0x16b0
[   73.952308][ T6167]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   73.952325][ T6167]  ? kasan_save_track+0x4f/0x80
[   73.952370][ T6167]  ? kasan_save_track+0x3e/0x80
[   73.952389][ T6167]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[   73.952402][ T6167]  ? pcpu_alloc_noprof+0x286/0x16b0
[   73.952413][ T6167]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[   73.952433][ T6167]  ? blk_mq_update_nr_hw_queues+0x76a/0x14c0
[   73.952454][ T6167]  ? __pfx___mutex_lock+0x10/0x10
[   73.952472][ T6167]  ? genl_rcv+0x28/0x40
[   73.952488][ T6167]  ? __sock_sendmsg+0x21c/0x270
[   73.952505][ T6167]  ? ____sys_sendmsg+0x505/0x830
[   73.952522][ T6167]  pcpu_alloc_noprof+0x286/0x16b0
[   73.952538][ T6167]  sbitmap_init_node+0x1e1/0x630
[   73.952557][ T6167]  ? __kasan_kmalloc+0x93/0xb0
[   73.952567][ T6167]  sbitmap_queue_init_node+0x41/0x660
[   73.952584][ T6167]  ? __raw_spin_lock_init+0x45/0x100
[   73.952597][ T6167]  blk_mq_init_tags+0x110/0x280
[   73.952611][ T6167]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[   73.952630][ T6167]  ? blk_mq_update_nr_hw_queues+0x678/0x14c0
[   73.952647][ T6167]  ? kfree+0x18e/0x440
[   73.952666][ T6167]  blk_mq_update_nr_hw_queues+0x76a/0x14c0
[   73.952689][ T6167]  nbd_start_device+0x16c/0xac0
[   73.952708][ T6167]  ? __nla_parse+0x40/0x60
[   73.952725][ T6167]  nbd_genl_connect+0x1250/0x1930
[   73.952744][ T6167]  ? __pfx_nbd_genl_connect+0x10/0x10
[   73.952763][ T6167]  ? __nla_parse+0x40/0x60
[   73.952779][ T6167]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   73.952798][ T6167]  genl_family_rcv_msg_doit+0x215/0x300
[   73.952824][ T6167]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   73.952847][ T6167]  genl_rcv_msg+0x60e/0x790
[   73.952866][ T6167]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.952883][ T6167]  ? __pfx_nbd_genl_connect+0x10/0x10
[   73.952904][ T6167]  netlink_rcv_skb+0x208/0x470
[   73.952918][ T6167]  ? __pfx_genl_rcv_msg+0x10/0x10
[   73.952937][ T6167]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   73.952956][ T6167]  ? down_read+0x1ad/0x2e0
[   73.952970][ T6167]  genl_rcv+0x28/0x40
[   73.952986][ T6167]  netlink_unicast+0x75b/0x8d0
[   73.953001][ T6167]  netlink_sendmsg+0x805/0xb30
[   73.953016][ T6167]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.953030][ T6167]  ? aa_sock_msg_perm+0x94/0x160
[   73.953045][ T6167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   73.953060][ T6167]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.953073][ T6167]  __sock_sendmsg+0x21c/0x270
[   73.953091][ T6167]  ____sys_sendmsg+0x505/0x830
[   73.953106][ T6167]  ? __pfx_____sys_sendmsg+0x10/0x10
[   73.953122][ T6167]  ? import_iovec+0x74/0xa0
[   73.953134][ T6167]  ___sys_sendmsg+0x21f/0x2a0
[   73.953149][ T6167]  ? __pfx____sys_sendmsg+0x10/0x10
[   73.953172][ T6167]  ? __fget_files+0x2a/0x420
[   73.953184][ T6167]  ? __fget_files+0x3a0/0x420
[   73.953199][ T6167]  __x64_sys_sendmsg+0x19b/0x260
[   73.953214][ T6167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   73.953230][ T6167]  ? rcu_is_watching+0x15/0xb0
[   73.953250][ T6167]  ? do_syscall_64+0xbe/0x3b0
[   73.953261][ T6167]  do_syscall_64+0xfa/0x3b0
[   73.953271][ T6167]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.953287][ T6167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.953298][ T6167]  ? exc_page_fault+0x9f/0xf0
[   73.953315][ T6167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.953327][ T6167] RIP: 0033:0x7f0066b8e929
[   73.953340][ T6167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.953380][ T6167] RSP: 002b:00007f0067a0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.953393][ T6167] RAX: ffffffffffffffda RBX: 00007f0066db5fa0 RCX: 00007f0066b8e929
[   73.953402][ T6167] RDX: 0000000004010044 RSI: 0000200000000900 RDI: 0000000000000005
[   73.953409][ T6167] RBP: 00007f0066c10b39 R08: 0000000000000000 R09: 0000000000000000
[   73.953416][ T6167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.953423][ T6167] R13: 0000000000000000 R14: 00007f0066db5fa0 R15: 00007ffd6050d9b8
[   73.953435][ T6167]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   74.176290][ T5828] Bluetooth: hci1: command tx timeout
[   74.264403][ T6167] nbd0: detected capacity change from 0 to 8388607
[   74.381051][   T56] block nbd0: Receive control failed (result -104)
[   74.384376][ T6190] block nbd0: Receive control failed (result -32)
[   74.387177][ T6188] block nbd0: Receive control failed (result -32)
[   74.389879][ T6189] block nbd0: Receive control failed (result -32)
[   74.390006][ T6187] block nbd0: Receive control failed (result -32)
[   74.396125][ T6186] block nbd0: Receive control failed (result -32)
[   74.398953][ T6185] block nbd0: Receive control failed (result -32)
[   74.401705][ T6184] block nbd0: Receive control failed (result -32)
[   74.872229][   T12] bridge_slave_1: left allmulticast mode
[   74.874836][   T12] bridge_slave_1: left promiscuous mode
[   74.877385][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.881386][   T12] bridge_slave_0: left allmulticast mode
[   74.884727][   T12] bridge_slave_0: left promiscuous mode
[   74.886725][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.928058][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.931820][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.935398][   T12] bond0 (unregistering): Released all slaves
[   75.017092][   T12] hsr_slave_0: left promiscuous mode
[   75.020070][   T12] hsr_slave_1: left promiscuous mode
[   75.022100][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.026290][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.076170][   T12] team0 (unregistering): Port device team_slave_1 removed
[   75.083016][   T12] team0 (unregistering): Port device team_slave_0 removed
[   75.443981][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.476169][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.507228][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.553940][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.641789][   T12] dummy0: left allmulticast mode
[   75.646043][   T12] bridge0: port 3(dummy0) entered disabled state
[   75.653736][   T12] bridge_slave_1: left allmulticast mode
[   75.655670][   T12] bridge_slave_1: left promiscuous mode
[   75.657634][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.662304][   T12] bridge_slave_0: left allmulticast mode
[   75.667373][   T12] bridge_slave_0: left promiscuous mode
[   75.669222][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.769545][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.775118][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.778878][   T12] bond0 (unregistering): Released all slaves
[   75.944836][   T12] hsr_slave_0: left promiscuous mode
[   75.947015][   T12] hsr_slave_1: left promiscuous mode
[   75.949027][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.951506][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.955468][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.957910][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.962516][   T12] veth1_macvtap: left promiscuous mode
[   75.964803][   T12] veth0_macvtap: left promiscuous mode
[   75.966681][   T12] veth1_vlan: left promiscuous mode
[   75.968412][   T12] veth0_vlan: left promiscuous mode
[   76.041049][   T12] team0 (unregistering): Port device team_slave_1 removed
[   76.051420][   T12] team0 (unregistering): Port device team_slave_0 removed
[   76.350190][   T12] IPVS: stop unused estimator thread 0...
[   76.605420][   T61] block nbd0: Connection timed out, retrying (0/8 alive)
[   76.607804][   T61] block nbd0: Connection timed out, retrying (0/8 alive)
[   76.610100][   T61] block nbd0: Connection timed out, retrying (0/8 alive)
[   76.612426][   T61] block nbd0: Connection timed out, retrying (0/8 alive)
[   76.614882][   T61] block nbd0: Dead connection, failed to find a fallback

VM DIAGNOSIS:
10:26:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003efc RDI=0000000000003efd RBP=00000000000003f8 RSP=ffffc9000331e390
R8 =ffff888108480237 R9 =1ffff11021090046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e7 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0067a0b6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055593e870000 CR3=000000011156e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0066d84478 00007f0066d84450 XMM03=00007f0066d84488 00007f0066d84480
XMM04=00007f00678ed100 00007f0066d84440 XMM05=00007f0066d84458 00007f0066d844a0
XMM06=00007f0066d84498 00007f0066d84490 XMM07=00007f0066d84488 00007f0066d84480
XMM08=3449cc64522a7e37 c171b2436d697013 XMM09=0000000000000000 00007f0066c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4d920 RBX=ffff88813663b1c0 RCX=ffff88810a0d3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007027800 RSP=ffffc900070276a0
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a1736d2a18 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
