last executing test programs:

41.176408869s ago: executing program 2 (id=5251):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0)

40.916666989s ago: executing program 2 (id=5256):
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x400000}, 0x8)
socket(0x2, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4800}, 0x11)
sendto$inet(r3, &(0x7f0000000180)="8b643e", 0xfffffffffffffdfd, 0x101, 0x0, 0x9c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500004208000b4000000000340004803000018008000100636d7000240002801000038009000100d3060d2def000000080002400000000008000140000000160900010073797a30000000001400000011000100000000003a534f930000000a"], 0xd0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84)

39.924961639s ago: executing program 2 (id=5265):
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
getsockname$unix(r0, 0x0, &(0x7f0000000480))

39.746779362s ago: executing program 2 (id=5268):
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r0, 0x1)

39.521272717s ago: executing program 2 (id=5272):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0xfffffffe, 0x40000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x400c8dc)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r7, 0x29, 0x43, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
bind$bt_l2cap(r9, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x9, 0x1}, 0xe)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x1300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}}, 0x40488c4)

38.786138255s ago: executing program 2 (id=5280):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$can_raw(r4, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x200, 0x800, 0x6}}}}]}, 0x44}}, 0x40080)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6156f14a9235263f", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

23.583630499s ago: executing program 32 (id=5280):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$can_raw(r4, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x200, 0x800, 0x6}}}}]}, 0x44}}, 0x40080)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6156f14a9235263f", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$SO_COOKIE(r11, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)

4.399317932s ago: executing program 5 (id=5464):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003003e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000002000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

4.307371987s ago: executing program 5 (id=5465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="40eb000010003b0c00007b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200080015004b340500"], 0x40}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000440)={{<r1=>r0, &(0x7f0000000000)='erspan\x00', 0x2000, &(0x7f0000000040)={@align=0x81, {0x2, 0x98, 0x52a, 0xff}}, 0x4000007, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffffc}, 0x3, &(0x7f0000000300)=[{0x1, 0x10000, &(0x7f0000000140)='])^\x00', &(0x7f0000000180)="7d4521885a3adeb61d135cc5b8e6756db189e62e32aa5834", 0x18, 0x32}, {0x2, 0x6, &(0x7f00000001c0)='erspan\x00', &(0x7f0000000200)="f062be5bbac76418dbc116e94582b1bd037ccc0425607fcc81ae06d57a", 0x1d, 0x30}, {0x3, 0x8, &(0x7f0000000240)='erspan\x00', &(0x7f0000000280)="c67dca4e196dada8dd8b504435c98a0ce47dfbe65fa979c372ff4fdeb77a496c47fa7d7fa07a9ff38725308f4342c31a3df265e1ebf10ec7b8958662cbb563a4b2aafa2135e594c12d8d8db0e8051e1fe7e7f5180693f0da93ea397aac1cc087051c16788d13768d0c8810cb3a051e73699b46a1b855e21a2e3073818caa", 0x7e, 0x10}]})
pipe(&(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x2c020400)
splice(r2, 0x0, r3, 0x0, 0xfffd, 0xa)
sendto$packet(r1, &(0x7f0000000740)="2c87ea1abc07cba9beb341f9b3ca1735f54af403cc3c4105a40528f9b9fa0fac5dcb8b556b11e9982e90f39f0f2a62084186a7ce570d1d97ae627ecace08f718f7ed9235c01074aa083e81b51a145c487e70a12e478f57fb7c2cbb5145ccf7505b588428d44d4071743f97ee9838881c3b307cc33f457f597a1823838c7b9a68b9", 0x81, 0x807, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x1, 0x1, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x65, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, {[@rr={0x7, 0xb, 0x5e, [@rand_addr=0x64010102, @multicast1]}, @cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x6, 0x9, "d3936dd7b527c9"}, {0x0, 0x2}, {0x0, 0xb, "1a5b95f8bc5330cf8f"}, {0x0, 0xf, "f35a0e8f4fb8a8e24f6088c775"}, {0x2, 0xa, "11c3e209196df0f7"}, {0x0, 0x4, "ee83"}, {0x0, 0x5, 'FFA'}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x0, [{@rand_addr=0x64010102, 0x8}, {@loopback, 0x7}, {@multicast1, 0x9}, {@remote, 0x7ff}, {@private=0xa010101, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x10000}]}]}}}}})
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x9, 0x2, 0xa32a}, 0x10)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000640)="df327b4a31ca3a7e2cd3675a4ffc490931311b902d347ffa9078a8d959d5b6701462711de1ef76a2f1c3aa39a4cb1d0949b8aeccd97d847428892c3cc1f52c346e3525d5260246110c9d8fcfbd7e9902925e4bee5bbcf1a656728c5e98568ed27e79687346cd6570d236352f7d8278153aa42f78505080f138630a92db8a6d7de77cd56b0398a9c27f42867168b3906bb5ae995d26b74a7c233735b46b833958f62a976a75e410f3af2d8848153d3c8ef09e5a5e39e848c68a1b6451bb495ff83749c28d03", 0xc5}], 0x2}}], 0x1, 0x9200000000000000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2)
read$alg(r5, &(0x7f0000000300)=""/74, 0x4a)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'})
socket$kcm(0x10, 0x2, 0x4)

3.371526438s ago: executing program 5 (id=5480):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000003a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.260953871s ago: executing program 5 (id=5482):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x8, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x8, 0x6}, {0x0, 0x4}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a0500230800001000128008000100767469000400029a080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r4, 0xaa0f4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

3.031633342s ago: executing program 5 (id=5485):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x2)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000580)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB="dbe126c5757e83d802c362145e8d4017a18fbbf46e7c0759f73b7579f31b59c8619ae83dc590976b0eeb953ab9aba73a38fc47195e529c82f318d476e4bbec3c1038f9ef2dd666cf3f80a997438e48e3f45fcde540ae085f057f63cf0e94c40ff9e4e7135639271307e85c9ab134d2f6eded30040c94763efb4dee4a08624b27b80a0c372e72cf1bd735e10cca1143adb6a9d8f433ab", @ANYRES16=0x0, @ANYRES64=r2], 0x7c}}, 0x80d0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)

2.527781266s ago: executing program 4 (id=5491):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000f00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)=@deltaction={0x1d4, 0x31, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdac}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xafa}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9f}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x66}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40}, 0x40804)
r3 = socket$netlink(0x10, 0x3, 0x2523ab5f99c19f5f)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="010101007f02"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@remote, <r9=>0x0}, &(0x7f0000000180)=0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@rand_addr, <r10=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r11=>0x0})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[], 0x48}}, 0x0)
recvmmsg(r12, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000380)={'ip_vti0\x00', <r14=>0x0, 0x7, 0x20, 0x2, 0xa, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0xf8, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendto$packet(r1, &(0x7f0000000100)="cd23e1d8a427b9c3f1c700696820c07e9ee4ff4e0f072edb6b02bf80c9101f621d9d9f2f90b0608faa65d2b5bf188119f011bbfe0f7678023316b0c2b0d697f17d323d15f204238fb89e1730c2dc8b2c6cb3ed9e86167af5ce4a401ebed4c9ab6d78e3b67b7ccda44bc6b4f8439a1c02b8b739ad2ec7c0d9b85818f6e0d422cc5f59e12aea2e11c09c77dc01968bb93746d9948db9a6f659c9cf22340422744fd6c9317ac9cba4bea77c17e8ae8798e365c81a5a6e39f444be721dd4cecec1d6547ed03fae9e403f4fd7a821f4b577a0887acf3b830c81c13a78a4b897813ae3e228534b7497444da152b4d7d8ea87fc", 0xf0, 0x80, &(0x7f0000000280)={0x11, 0x16, r8, 0x1, 0x74, 0x6, @random="582323ff3abc"}, 0x14)
listen(r0, 0xfffffffc)
socket$netlink(0x10, 0x3, 0x8000000004)

2.310817043s ago: executing program 0 (id=5494):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.07785069s ago: executing program 0 (id=5496):
socket$inet6(0xa, 0x2, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700})
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000010101020000000000000000020040092000018006000340000400001400018008000100ac14141508000200ac1414bb04001980"], 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x404c044}, 0x800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000500db"], 0x30}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0)
preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1, 0x47b7, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0x4e25, 0x10003ff, @loopback={0xff00000000000000}, 0x5}, 0x1c, &(0x7f0000000240), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000002900000008000000080000662853630e741ef069f112f89d000000000014000000000000"], 0x250}}], 0x1, 0x4004804)

1.635481728s ago: executing program 0 (id=5498):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51b23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40044)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7ffffffc}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/17, 0x11}], 0x1}, 0x1800000}], 0x2, 0x10062, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40)
sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000", @ANYRES8=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r3, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000100)=0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0xfffffffe, 0x5, 0x200, r6, 0xb, '\x00', r7, r0, 0x4, 0x1, 0x3, 0x5}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f0000000480)={0x1, 0x40, '\x00', 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

1.545120601s ago: executing program 4 (id=5500):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x1, 0xff, 0x0, 0x4}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r3, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x50, &(0x7f0000000040)=0x4, 0x1)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="110000006800010003001000fd7f00000000000000000c000200030000001500001e04000c80"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
bind$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x40, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0x40180)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0)
close(0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00')
ioctl$XFS_IOC_FSGROWFSDATA(r9, 0x4010586e, &(0x7f0000000140)={0x79, 0x800})

1.441177838s ago: executing program 1 (id=5502):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)

1.311575659s ago: executing program 4 (id=5503):
r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0a00fe14ffffff79a4f0fd00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005a000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0x4, 0x5})

1.306415394s ago: executing program 3 (id=5504):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008851f00006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.264221344s ago: executing program 1 (id=5505):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x2400cc04}, 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.144028097s ago: executing program 4 (id=5506):
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20040044}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000000000009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8947, &(0x7f0000000080)={'bond0\x00', @ifru_ivalue=0xa})

1.143276816s ago: executing program 3 (id=5507):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.136814299s ago: executing program 5 (id=5508):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000140))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000180100002800c000180080001"], 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000d000000000000005300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000100000085000000800000000000000100000000950000ad27cc00006d3f520e32145f634c2ac036370aab70e311b570f2b4d5457b1d7b34c8eaaac2edd2c141012bf489de354f80eae4109a419919cb636c1cd50de0d30ce104c96714dce795ca892126158df62f5a069f857e63b3f3114e340a02ff03f56455a2150c5afa114afe4e8834b08f9e180433de9922270ec3a4c9efab1a69830c243b18fb797ffbf8be2e83fa1c3e7bd6a4a2c5e1dca4e88ef474"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x3f9602b6a203aea8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000640)={{r5, &(0x7f0000000240)='--\x00', 0x80c00, &(0x7f00000004c0)={@align=0x11, {0x2, 0x6, 0x1, 0xf07}}, 0x100, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)}, {[0x8, 0x8, 0xe5c7, 0x6]}, 0x59, 0xc0, &(0x7f0000000580)=""/192})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb4}, 0x94)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001180)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x8001, 0x2, @local, 0x30000}}, {{0xa, 0x4e20, 0xfc000000, @local, 0x5}}]}, 0x190)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x3c}}, 0x4000)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff26bd70000100000000000000fe253f965c4384a408d8e976f77538510e6e536a28436c56104523ab4d3e5f93ce7ada84e493d122ef0720ccd3e1cb76a95eb6e7d70c2564411735d319fe8b1acd1465c16d9352dfd5422dc936ae9f5fff1e5daef9134b28843b0a250c70bb7b218185f36dc34e14ef64", @ANYRES32=0x0, @ANYBLOB="0000000000010000300012800b00010067656e6576650000200002800500040001000000140007002001000000000000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4400}, 0x20040001)

1.070416119s ago: executing program 1 (id=5509):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000004f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000bc0)=0x5, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000b00), 0x0}, 0x20)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x3, {0x3, 0xff, 0x1}, {0x2, 0xf0, 0x1}, 0x1, 0xfd}, {0x1, 0x0, {0x0, 0x0, 0x3}, {0x1, 0x0, 0x2}, 0x0, 0x1}, {0x2, 0x2, {0x2, 0x1, 0x3}, {0x2, 0x0, 0x1}, 0xff, 0xff}], 0x60)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, <r5=>0x0]}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r5, 0x6, 0x5, 0x83ec}, 0x10)

954.790598ms ago: executing program 1 (id=5510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x400}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_COMMENT={0xa, 0x1a, ',,#$&\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000280)=0x1, 0x4)
ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000002c0)={0x7, 0xd, 0x9, 0x2e87, 0xfffffffe})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x4000})
r4 = socket(0x9, 0x6, 0xfffffff7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
sendmsg$can_j1939(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r5, 0x3, {0x0, 0x1, 0x4}, 0x2}, 0x18, &(0x7f0000000480)={&(0x7f0000000400)="01dc9453a0229841c72408e0bd075bd44797fc9c80902b64c080ebb97e1991b721de6399c9c26981af433ecd006958cee7474a78be950d6d41d2bfa20d7339dca70442cf334d1abd9e71df83dc5c4ce24ed228611817b9ac09b4b757938388ff7a4a4b5102e4bed8d8f67ee5db8dd3e47fa0df", 0x73}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'tunl0\x00', r5, 0x10, 0x10, 0x5, 0x9, {{0xc, 0x4, 0x3, 0x3, 0x30, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x1b, 0x1d, [@private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @multicast2, @empty]}]}}}}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r7, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz0\x00', 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000780)='blkio.bfq.sectors\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000840)={0x9, &(0x7f00000007c0)=[{0xfff7, 0x7, 0xd4, 0x9}, {0x4, 0x5, 0x8, 0x38}, {0x9, 0x9c, 0x0, 0x7f}, {0x8, 0x7, 0x7, 0x5}, {0x101, 0x1, 0xd}, {0x3, 0x3, 0x9, 0x5}, {0xfff, 0x5, 0xf7, 0x7}, {0x7, 0x3, 0x1, 0x4}, {0x1, 0x6, 0x80, 0x7}]})
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000008c0))
setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000900)=0x8001, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000980)={0x3, &(0x7f0000000940)=[{0x40, 0x8, 0x10, 0x6}, {0x9, 0x7, 0x8, 0x7fff}, {0x4, 0x6, 0x9c, 0x1ac0}]}, 0x10)
ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f00000009c0))
setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000a00)=0x8, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xcc}}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x4}]}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0x1, [{0x4, 0x1, 0x3}, {0xa, 0x7, 0xe}, {0xf, 0x4, 0x7ee1a7a8}]}]}, {0x0, [0x61, 0x61, 0x0, 0x2e]}}, &(0x7f0000000b00)=""/85, 0x96, 0x55, 0x0, 0x3}, 0x28)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r4)
sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c40)={0x208, r11, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x99c8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8d2, @ipv4={'\x00', '\xff\xff', @remote}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe21}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xcc6b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf61e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x208}}, 0x810)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008850}, 0x40)

855.543815ms ago: executing program 3 (id=5511):
r0 = socket(0x23, 0x80805, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0)
write(r0, 0x0, 0x0)

812.943954ms ago: executing program 4 (id=5512):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
r1 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bond={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc, 0x8, 0x0, 0x1, [@local, @local]}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xff}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @broadcast}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

759.423368ms ago: executing program 1 (id=5513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffff9, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x2}, {0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008019}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036"], 0x0, 0xa}, 0x94)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x400, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x7800, 0x2, 0x3ff, {{0x20, 0x4, 0x2, 0x7, 0x80, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x34, 0x30}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x6, [0x1, 0x8]}, @noop, @timestamp_addr={0x44, 0x3c, 0x51, 0x1, 0xb, [{@remote, 0x1}, {@rand_addr=0x64010102, 0x9f}, {@loopback, 0xffff}, {@multicast2, 0x1}, {@multicast1, 0x3}, {@multicast1}, {@empty, 0x9}]}, @generic={0x7, 0xfffffffffffffdc5, "a6"}, @lsrr={0x83, 0x13, 0x81, [@rand_addr=0x64010102, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x8b, 0x0, 0x7}]}}}}})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

683.906085ms ago: executing program 3 (id=5514):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r2, 0x0) (async)
clock_gettime(0x3, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+60000}, 0x10)
accept4(r2, 0x0, 0x0, 0x80800) (async)
close(0x4) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x2) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xf, 0x0, &(0x7f0000000080)="257fd3cbb7ba7feb35295a62cd27d0", 0x0, 0xfffffffd, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
write$6lowpan_control(r6, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=@delchain={0xf04, 0x65, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xe, 0xe}, {0x10, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0xec8, 0x2, [@TCA_MATCHALL_ACT={0xeb0, 0x2, [@m_ctinfo={0xe7c, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0xe4d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0xf04}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040800) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xfffffffffffffe62, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], <r9=>0x0, 0xa8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r7, 0xffffffffffffffff, 0x2b, 0x0, @val=@tracing={r9, 0x8}}, 0x20)

642.578994ms ago: executing program 0 (id=5515):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x34, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x34}}, 0x18)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x404, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfc2f}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
socket$inet6(0xa, 0x800, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xff81, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7861}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x2}, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) (async)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x34, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x34}}, 0x18) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (async)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x404, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xd}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfc2f}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (async)
socket$inet6(0xa, 0x800, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xff81, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7861}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000280)=0x8, 0x4) (async)

320.354239ms ago: executing program 0 (id=5516):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r0 = socket(0x29, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001540))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
unshare(0x2c020400)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xfffc, @none, 0x0, 0x1}, 0xe)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000002000000000000000000001ff0200000000000000000000000000014f194e20006490780200000000000000010000003e3c3afef985ff51ccb1c8230000000000000000000000000000000000000000aeae9722f544e6e34f9a474cfae5dd817ee995b43932ef77ec0fd0637ad0a514cb4854c942256b23cae3f9ab51c0ed49"], 0xa3)
r5 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14ffdbdf25f3000000"], 0x14}}, 0x15)
bind$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @remote, 0x3}, 0x10)

236.030063ms ago: executing program 4 (id=5517):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, 0xffffffffffffffff, 0x801000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001400010600000000000000002bfa008721f700"], 0x14}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYBLOB="879f3d6724b12c5a3909b530743502f1850b09f0a0e45afb70993e420c4fe6dbfd782fecc83c9399b8fdee75b7abf79666a0491f7e4271a308c80c088691650e723a5f59d4fde3ca969491fd2395584f38a5ce1bf6ac7d591a9f4abbace0ea11fb22f4c4bc766ba1cd1309f5747b51b03453024fc8212510c81fb8bcb33ab51d7a65de39cc", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)

235.55835ms ago: executing program 3 (id=5518):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008852000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

196.31596ms ago: executing program 1 (id=5519):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x12}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x48}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004000}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x1001, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r4, 0x204, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x4)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r6)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000740), &(0x7f00000007c0)=0x68)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r6)
sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x50)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b00)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x78, r8, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c000}, 0xe295193240e207ad)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffa9e3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000dc0), r12)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xb4, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffffffffe302}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c845)
r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f80)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(r13, 0x113, 0x2, &(0x7f0000001000)=<r14=>0x0, &(0x7f0000001040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r13, 0x89f0, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001080)={'syztnl1\x00', <r15=>0x0, 0x29, 0x7, 0x7, 0x2, 0xa, @local, @mcast1, 0x8, 0x8, 0x4, 0x4}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r13, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x74, 0x0, 0x458aca9e71598b7, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}}, 0x48000)

140.482003ms ago: executing program 3 (id=5520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="89ecf249358924a7f67db9fbcb3a1cea384ca11e217a5062c3b097732a2abbb8c9c2d31049e7b0e1d5dd2bb4e106425d03e052ed10b5cdc7c5a2408a2742154d1a356523349c96b05decf48a3a206f0779cffe6e056071b8ae1e495955ba962cf123e7861f95e948954d4475d241c52fbd21577ee6b910c86e142ac9abfa103f0a053aa9b2ec1c350fbfb8561ae532e5b476c795697960", @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0xcaf, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x800)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000)
socket$rds(0x15, 0x5, 0x0) (async)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x16, 0x200000006c832, 0xffffffffffffffff, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000000000000004e200064907802000000030000000100000056805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4c956f358ec21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db3"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000)="c5614b67a68b0995f76a76beda2b073a9ab417b0e1e94211fe451587b0a2b8f9176b86", &(0x7f00000000c0)=""/46, 0x4}, 0x20)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002200010029bd7000d9bebbbab591fe8981ecfbfdda19e90aeed2cd665a259efc25796552386cba601e4b4c1bc5fd3c92cad56190d373c79d4f954e48b9379b872ad7c13bee274d76e5f29472a74fd61922b76eb6d1"], 0x1c}, 0x1, 0x0, 0x0, 0x200448c0}, 0x40001)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00', <r9=>0x0})
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xb, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xb, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) (async)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})

0s ago: executing program 0 (id=5521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffff9, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x2}, {0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008019}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0xa}, 0x94)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x0, 0x1, 0x400, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x7800, 0x2, 0x3ff, {{0x20, 0x4, 0x2, 0x7, 0x80, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @remote, {[@ssrr={0x89, 0x34, 0x30}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x6, [0x1, 0x8]}, @noop, @timestamp_addr={0x44, 0x3c, 0x51, 0x1, 0xb, [{@remote, 0x1}, {@rand_addr=0x64010102, 0x9f}, {@loopback, 0xffff}, {@multicast2, 0x1}, {@multicast1, 0x3}, {@multicast1}, {@empty, 0x9}]}, @generic={0x7, 0xfffffffffffffdc5, "a6"}, @lsrr={0x83, 0x13, 0x81, [@rand_addr=0x64010102, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x8b, 0x0, 0x7}]}}}}})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031612d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

kernel console output (not intermixed with test programs):

4083'.
[  509.335265][T20359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4088'.
[  510.029506][T20395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4099'.
[  510.049971][T20400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4096'.
[  510.206203][T20407] netlink: 'syz.0.4101': attribute type 1 has an invalid length.
[  510.269021][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4100'.
[  510.325821][T20410] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  510.366394][T20410] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  510.435717][T20411] geneve4: entered promiscuous mode
[  510.552283][T15244] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 51822 - 0
[  510.565638][T15244] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 51822 - 0
[  510.600515][T20410] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  510.611566][T20429] netlink: 'syz.0.4106': attribute type 10 has an invalid length.
[  510.624795][T20410] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  510.757378][T20429] veth1_virt_wifi: entered promiscuous mode
[  510.766762][T20429] bridge0: port 1(veth1_virt_wifi) entered blocking state
[  510.774755][T20429] bridge0: port 1(veth1_virt_wifi) entered disabled state
[  510.782443][T20429] veth1_virt_wifi: entered allmulticast mode
[  510.792060][T20429] veth1_virt_wifi: left allmulticast mode
[  511.283295][    T9] net_ratelimit: 9 callbacks suppressed
[  511.283315][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.297335][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.762196][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  511.861088][T20475] syzkaller0: entered promiscuous mode
[  511.933482][T20475] syzkaller0: entered allmulticast mode
[  512.255393][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.328439][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.336826][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.407041][T20508] syzkaller1: entered promiscuous mode
[  512.412859][T20508] syzkaller1: entered allmulticast mode
[  512.551031][T20521] netlink: 'syz.1.4122': attribute type 1 has an invalid length.
[  512.569387][T20522] netlink: 'syz.1.4122': attribute type 8 has an invalid length.
[  512.745665][T20530] netlink: 'syz.1.4126': attribute type 1 has an invalid length.
[  512.789912][T20410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  512.801968][T20410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  512.827744][T20410] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 51822 - 0
[  512.934884][T20530] 8021q: adding VLAN 0 to HW filter on device bond6
[  512.995738][T20531] vlan2: entered allmulticast mode
[  513.002550][T20531] bond6: entered allmulticast mode
[  513.008080][T20541] __nla_validate_parse: 5 callbacks suppressed
[  513.008100][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'.
[  513.049088][T20410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  513.059301][T20410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  513.069123][   T29] audit: type=1804 audit(1777820997.195:15): pid=20541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4129" name="/newroot/258/cgroup.controllers" dev="tmpfs" ino=1325 res=1 errno=0
[  513.069180][   T29] audit: type=1800 audit(1777820997.195:16): pid=20541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4129" name="cgroup.controllers" dev="tmpfs" ino=1325 res=0 errno=0
[  513.115726][T20410] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 51822 - 0
[  513.369049][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.377418][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.391164][T16541] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 51822 - 0
[  513.405659][T20547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4131'.
[  513.418133][T16541] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  513.426602][T16541] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  513.483587][T16541] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 51822 - 0
[  513.501950][T16541] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  513.520960][T16541] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  513.585512][T16536] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 51822 - 0
[  513.613090][T16536] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  513.634593][T16536] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  513.678283][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  513.678424][T16554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.696359][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.748542][T20544] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4130'.
[  513.759735][T10500] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 51822 - 0
[  513.787035][T10500] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  513.825503][T10500] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  514.398745][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.997026][T20601] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  515.298385][T20605] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4149'.
[  515.357076][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'.
[  515.626743][T20628] syzkaller1: entered promiscuous mode
[  515.648780][T20628] syzkaller1: entered allmulticast mode
[  516.033960][T20639] syzkaller0: entered promiscuous mode
[  516.047722][T20639] syzkaller0: entered allmulticast mode
[  516.102627][T20639] netlink: 'syz.3.4154': attribute type 15 has an invalid length.
[  516.481006][    T9] net_ratelimit: 4 callbacks suppressed
[  516.482830][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.496873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.550490][T20666] bond5: option all_slaves_active: invalid value (5)
[  516.591114][T20666] bond5 (unregistering): Released all slaves
[  516.716213][T20675] tipc: Started in network mode
[  516.723552][T20675] tipc: Node identity 461465cc7db2, cluster identity 4711
[  516.732689][T20675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.741659][T20685] syzkaller0: entered promiscuous mode
[  516.747546][T20685] syzkaller0: entered allmulticast mode
[  516.951798][T20669] tipc: Resetting bearer <eth:syzkaller0>
[  516.992441][T20665] tipc: Resetting bearer <eth:syzkaller0>
[  517.107508][T20665] tipc: Disabling bearer <eth:syzkaller0>
[  517.418899][T20713] netlink: 'syz.4.4172': attribute type 1 has an invalid length.
[  517.522166][T20713] 8021q: adding VLAN 0 to HW filter on device bond5
[  517.529701][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.538128][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.638159][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'.
[  517.651667][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4174'.
[  517.806016][T20731] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4176'.
[  518.211340][T20749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4182'.
[  518.249248][T20749] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4182'.
[  518.254449][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'.
[  518.271350][T20754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.278763][T20754] IPv6: NLM_F_CREATE should be set when creating new route
[  518.286070][T20754] IPv6: NLM_F_CREATE should be set when creating new route
[  518.293384][T20754] IPv6: NLM_F_CREATE should be set when creating new route
[  518.318369][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.333948][T16539] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  518.334089][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'.
[  518.365462][T16539] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  518.389830][T16539] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  518.424123][T16539] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  518.543551][T20762] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  518.559929][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.577539][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.825559][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4189'.
[  518.835444][T20779] netlink: 'syz.4.4191': attribute type 17 has an invalid length.
[  518.911689][T20779] 8021q: adding VLAN 0 to HW filter on device team0
[  519.026121][T20784] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.4192'.
[  519.031219][T20786] netlink: 'syz.1.4193': attribute type 4 has an invalid length.
[  519.044448][T20786] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4193'.
[  519.064051][T20784] netlink: 1484 bytes leftover after parsing attributes in process `syz.2.4192'.
[  519.076158][T20788] Cannot find del_set index 3 as target
[  519.134292][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.223190][T20794] netlink: 'syz.2.4195': attribute type 2 has an invalid length.
[  519.228297][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.439450][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.562965][T20807] netlink: 'syz.4.4198': attribute type 1 has an invalid length.
[  519.722498][T20814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4201'.
[  519.766846][T20818] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4201'.
[  520.388865][T20807] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  520.689449][T20855] syzkaller0: entered promiscuous mode
[  520.695184][T20855] syzkaller0: entered allmulticast mode
[  521.076934][T20873] sctp: [Deprecated]: syz.1.4220 (pid 20873) Use of int in max_burst socket option.
[  521.076934][T20873] Use struct sctp_assoc_value instead
[  521.599683][   T50] Bluetooth: hci1: command 0x0401 tx timeout
[  521.691952][ T9435] net_ratelimit: 9 callbacks suppressed
[  521.691971][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.705999][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.016672][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.646680][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  522.720313][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.728682][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.768173][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.776582][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.409118][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.818828][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.827299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.275084][T20925] __nla_validate_parse: 5 callbacks suppressed
[  526.275114][T20925] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4233'.
[  526.553755][T20933] syzkaller0: entered promiscuous mode
[  526.560243][T20933] syzkaller0: entered allmulticast mode
[  526.567668][T20932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.618464][T20932] tipc: Resetting bearer <eth:syzkaller0>
[  526.839785][T20945] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4241'.
[  526.884326][    T9] net_ratelimit: 6 callbacks suppressed
[  526.884346][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.898480][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.027404][T20961] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4242'.
[  527.451177][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.934166][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.942674][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.983865][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.992398][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.049574][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.999599][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.008016][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.191259][T20932] tipc: Disabling bearer <eth:syzkaller0>
[  531.255793][T20965] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4244'.
[  531.300724][T20967] netdevsim0: renamed from veth0_to_bond (while UP)
[  531.332383][T20967] netdevsim0: entered promiscuous mode
[  531.339456][   T10] tipc: Node number set to 1000760780
[  531.354266][T20972] netlink: 560 bytes leftover after parsing attributes in process `syz.4.4245'.
[  531.422066][T20973] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4245'.
[  531.541081][T20982] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  531.749530][T20995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4252'.
[  531.784426][T20995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4252'.
[  531.936497][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4253'.
[  532.081722][ T9435] net_ratelimit: 5 callbacks suppressed
[  532.081742][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.095860][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.242827][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.254586][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.549514][T21030] Bluetooth: MGMT ver 1.23
[  532.561350][T21030] Bluetooth: hci1: too big key_count value 29096
[  533.138837][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.147211][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.242506][T21052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4268'.
[  533.344512][T21052] tipc: New replicast peer: 255.255.255.255
[  533.351906][T21052] tipc: Enabled bearer <udp:syz2>, priority 26
[  534.140431][T21048] infiniband syz0: set active
[  534.162901][T21048] infiniband syz0: added bridge_slave_1
[  534.170780][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.179125][T21048] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  534.179335][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.189300][T21048] infiniband syz0: Couldn't open port 1
[  534.202580][T21048] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  534.229542][T21048] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  534.282504][T21048] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  534.466905][T21048] RDS/IB: syz0: added
[  534.480240][T21048] smc: adding ib device syz0 with port count 1
[  534.501366][T21048] smc:    ib device syz0 port 1 has no pnetid
[  534.812323][T21103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4281'.
[  534.936628][T21100] tipc: New replicast peer: 255.255.255.255
[  534.977508][T21100] tipc: Enabled bearer <udp:syz2>, priority 26
[  534.990419][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'.
[  535.146748][T21108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4284'.
[  535.199802][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.208285][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.470336][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'.
[  536.744112][T21173] netlink: 'syz.3.4299': attribute type 11 has an invalid length.
[  537.278533][ T9435] net_ratelimit: 5 callbacks suppressed
[  537.278569][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.292630][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.306524][T21191] syzkaller0: entered promiscuous mode
[  537.316673][T21191] syzkaller0: entered allmulticast mode
[  537.349552][T21196] syzkaller0: entered promiscuous mode
[  537.384402][T21196] syzkaller0: entered allmulticast mode
[  537.502108][T21202] __nla_validate_parse: 1 callbacks suppressed
[  537.502131][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'.
[  537.518912][T21202] netlink: 'syz.0.4309': attribute type 3 has an invalid length.
[  537.861685][T21210] netlink: 'syz.1.4313': attribute type 10 has an invalid length.
[  537.869988][T21210] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4313'.
[  538.320828][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.329045][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.337717][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.587168][T21239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4317'.
[  538.639450][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.371488][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.380116][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.731415][T21267] syzkaller0: entered promiscuous mode
[  539.749891][T21267] syzkaller0: entered allmulticast mode
[  539.779029][T21267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.793008][T21266] tipc: Resetting bearer <eth:syzkaller0>
[  539.856447][T21266] tipc: Disabling bearer <eth:syzkaller0>
[  539.932122][T21275] netlink: 'syz.0.4323': attribute type 4 has an invalid length.
[  540.259988][T21283] netlink: 'syz.1.4326': attribute type 1 has an invalid length.
[  540.408336][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.416721][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.487382][T21293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'.
[  540.498625][T21283] 8021q: adding VLAN 0 to HW filter on device bond8
[  540.516367][T21283] bond7: (slave bond8): making interface the new active one
[  540.530618][T21283] bond7: (slave bond8): Enslaving as an active interface with an up link
[  540.583994][T21293] 8021q: adding VLAN 0 to HW filter on device bond7
[  540.765896][T21302] netlink: 'syz.1.4331': attribute type 8 has an invalid length.
[  540.775699][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4331'.
[  540.785710][T21302] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4331'.
[  540.969656][T21307] veth13: entered promiscuous mode
[  541.451209][T21333] sock: sock_timestamping_bind_phc: sock not bind to device
[  541.671657][T21340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4341'.
[  541.710886][T21340] geneve3: entered promiscuous mode
[  542.167455][T21352] xt_hl: Unknown TTL match mode: 237
[  542.190229][T21352] sctp: [Deprecated]: syz.2.4346 (pid 21352) Use of int in max_burst socket option deprecated.
[  542.190229][T21352] Use struct sctp_assoc_value instead
[  542.482706][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  542.484130][    C0] net_ratelimit: 3 callbacks suppressed
[  542.484149][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.509316][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.519704][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.528691][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.547289][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.555950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.583948][T21370] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  542.601239][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4354'.
[  542.783567][T21382] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.824755][T21382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  542.832107][T21382] IPv6: NLM_F_CREATE should be set when creating new route
[  543.014830][T21390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.598896][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.607321][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.843400][T21409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  543.902692][T21409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  543.931531][T21409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  544.050898][T21422] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  544.141542][T21409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  544.156633][T21409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  544.191332][T21409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  544.251980][T21428] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4367'.
[  544.289542][T21409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  544.316671][T21409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  544.333080][T21409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  544.423198][T21409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  544.453146][T21409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  544.491592][T21409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  544.772784][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 51822 - 0
[  544.786828][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  544.808094][   T12] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  544.865298][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 51822 - 0
[  544.883758][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  544.900207][   T12] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  545.005706][T19598] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 51822 - 0
[  545.033827][T19598] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  545.062995][T19598] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  545.172059][T19603] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 51822 - 0
[  545.207264][T19603] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  545.219822][T19603] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  545.266495][T21450] netlink: 'syz.4.4373': attribute type 1 has an invalid length.
[  545.274824][T21450] netlink: 352 bytes leftover after parsing attributes in process `syz.4.4373'.
[  545.399622][T21457] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  545.437858][T21450] netlink: 'syz.4.4373': attribute type 1 has an invalid length.
[  545.471468][T21450] netlink: 352 bytes leftover after parsing attributes in process `syz.4.4373'.
[  545.504937][T21467] netlink: 'syz.1.4378': attribute type 13 has an invalid length.
[  546.311484][T21473] bond3 (unregistering): Released all slaves
[  546.631229][T21497] netlink: 844 bytes leftover after parsing attributes in process `syz.4.4384'.
[  547.236545][T21535] netlink: 'syz.1.4388': attribute type 9 has an invalid length.
[  547.258640][T21535] netlink: 'syz.1.4388': attribute type 6 has an invalid length.
[  547.321561][T21542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4391'.
[  547.508341][T21558] netlink: 'syz.0.4396': attribute type 1 has an invalid length.
[  547.619524][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4396'.
[  548.238876][ T9433] net_ratelimit: 2 callbacks suppressed
[  548.238895][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.403843][T21558] bond4: entered promiscuous mode
[  550.409425][T21558] 8021q: adding VLAN 0 to HW filter on device bond4
[  550.441315][T21563] vlan3: entered allmulticast mode
[  550.446542][T21563] bond4: entered allmulticast mode
[  550.473636][T21568] bond4: (slave bridge5): making interface the new active one
[  550.481437][T21568] bridge5: entered promiscuous mode
[  550.486865][T21568] bridge5: entered allmulticast mode
[  550.495566][T21568] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  550.893135][T21575] ieee80211 phy55: Failed to add default virtual iface
[  550.901599][T21592] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4406'.
[  551.195122][T21603] ip6tnl3: entered allmulticast mode
[  551.687365][T21625] syzkaller0: entered promiscuous mode
[  551.715956][T21625] syzkaller0: entered allmulticast mode
[  551.721281][T21631] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  551.771693][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'.
[  551.963335][T21648] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4427'.
[  552.081185][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.099368][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.111608][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.126390][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.718096][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.729818][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.740043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.748218][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.756396][T16556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.048732][T21680] netlink: 'syz.0.4436': attribute type 12 has an invalid length.
[  553.062745][T21680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4436'.
[  553.291412][T21682] dvmrp6: entered allmulticast mode
[  553.358656][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  553.502022][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4440'.
[  553.519890][T21692] veth1_to_batadv: entered allmulticast mode
[  553.758139][    C1] net_ratelimit: 6 callbacks suppressed
[  553.758159][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.773410][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.813739][T21704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.826604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.869985][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.940851][T21702] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  554.000182][T21713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  554.038401][T21712] tipc: Disabling bearer <eth:syzkaller0>
[  554.130456][T21720] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  554.226282][T21723] netlink: 'syz.0.4449': attribute type 21 has an invalid length.
[  554.246178][T21722] netlink: 'syz.0.4449': attribute type 21 has an invalid length.
[  554.263468][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  554.284771][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  554.305210][T21723] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  554.328923][T21722] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  554.891751][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.149784][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'.
[  555.189839][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4457'.
[  555.477501][T21766] FAULT_INJECTION: forcing a failure.
[  555.477501][T21766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  555.506348][T21766] CPU: 1 UID: 0 PID: 21766 Comm: syz.4.4459 Not tainted syzkaller #0 PREEMPT(full) 
[  555.506377][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  555.506390][T21766] Call Trace:
[  555.506398][T21766]  <TASK>
[  555.506408][T21766]  dump_stack_lvl+0xe8/0x150
[  555.506444][T21766]  should_fail_ex+0x412/0x560
[  555.506471][T21766]  _copy_from_user+0x2d/0xb0
[  555.506495][T21766]  get_user_ifreq+0x6b/0x180
[  555.506522][T21766]  sock_ioctl+0x704/0x7f0
[  555.506551][T21766]  ? __pfx_sock_ioctl+0x10/0x10
[  555.506578][T21766]  ? __fget_files+0x3a0/0x420
[  555.506599][T21766]  ? __fget_files+0x2a/0x420
[  555.506622][T21766]  ? bpf_lsm_file_ioctl+0x9/0x20
[  555.506648][T21766]  ? __pfx_sock_ioctl+0x10/0x10
[  555.506673][T21766]  __se_sys_ioctl+0xfc/0x170
[  555.506699][T21766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.506720][T21766]  do_syscall_64+0x15f/0xf80
[  555.506741][T21766]  ? trace_irq_disable+0x3b/0x140
[  555.506767][T21766]  ? clear_bhb_loop+0x40/0x90
[  555.506790][T21766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.506808][T21766] RIP: 0033:0x7f36dd99cdd9
[  555.506826][T21766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.506843][T21766] RSP: 002b:00007f36de929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  555.506864][T21766] RAX: ffffffffffffffda RBX: 00007f36ddc15fa0 RCX: 00007f36dd99cdd9
[  555.506878][T21766] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004
[  555.506890][T21766] RBP: 00007f36de929090 R08: 0000000000000000 R09: 0000000000000000
[  555.506902][T21766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  555.506913][T21766] R13: 00007f36ddc16038 R14: 00007f36ddc15fa0 R15: 00007ffca608ecc8
[  555.506944][T21766]  </TASK>
[  555.945768][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.109943][T21779] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  556.139761][T21780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4463'.
[  556.323897][T21786] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  556.488213][   T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  556.521466][   T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  556.655360][   T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  556.681130][   T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  556.715066][T21797] FAULT_INJECTION: forcing a failure.
[  556.715066][T21797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.739816][T21797] CPU: 0 UID: 0 PID: 21797 Comm: syz.3.4470 Not tainted syzkaller #0 PREEMPT(full) 
[  556.739842][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  556.739854][T21797] Call Trace:
[  556.739862][T21797]  <TASK>
[  556.739870][T21797]  dump_stack_lvl+0xe8/0x150
[  556.739897][T21797]  should_fail_ex+0x412/0x560
[  556.739925][T21797]  _copy_from_user+0x2d/0xb0
[  556.739953][T21797]  br_dev_siocdevprivate+0x118/0x1630
[  556.739984][T21797]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  556.740010][T21797]  ? lockdep_hardirqs_on+0x7a/0x110
[  556.740044][T21797]  ? __mutex_lock+0x608/0x1550
[  556.740070][T21797]  ? dev_ioctl+0x83c/0x1150
[  556.740090][T21797]  ? full_name_hash+0x92/0xe0
[  556.740118][T21797]  dev_ifsioc+0xb6b/0x1330
[  556.740141][T21797]  ? dev_load+0x21/0x1f0
[  556.740160][T21797]  dev_ioctl+0x84c/0x1150
[  556.740182][T21797]  sock_ioctl+0x75f/0x7f0
[  556.740209][T21797]  ? __pfx_sock_ioctl+0x10/0x10
[  556.740244][T21797]  ? __fget_files+0x3a0/0x420
[  556.740263][T21797]  ? __fget_files+0x2a/0x420
[  556.740286][T21797]  ? bpf_lsm_file_ioctl+0x9/0x20
[  556.740312][T21797]  ? __pfx_sock_ioctl+0x10/0x10
[  556.740335][T21797]  __se_sys_ioctl+0xfc/0x170
[  556.740359][T21797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.740378][T21797]  do_syscall_64+0x15f/0xf80
[  556.740398][T21797]  ? trace_irq_disable+0x3b/0x140
[  556.740420][T21797]  ? clear_bhb_loop+0x40/0x90
[  556.740447][T21797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.740465][T21797] RIP: 0033:0x7f7416d9cdd9
[  556.740484][T21797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.740499][T21797] RSP: 002b:00007f7417b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  556.740518][T21797] RAX: ffffffffffffffda RBX: 00007f7417015fa0 RCX: 00007f7416d9cdd9
[  556.740531][T21797] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004
[  556.740542][T21797] RBP: 00007f7417b7e090 R08: 0000000000000000 R09: 0000000000000000
[  556.740554][T21797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.740565][T21797] R13: 00007f7417016038 R14: 00007f7417015fa0 R15: 00007ffcb2abd9c8
[  556.740596][T21797]  </TASK>
[  557.055685][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4471'.
[  557.201512][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.338191][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4471'.
[  557.347290][T21802] netlink: 'syz.2.4471': attribute type 8 has an invalid length.
[  557.857300][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.904069][T21818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4475'.
[  558.075087][T21839] FAULT_INJECTION: forcing a failure.
[  558.075087][T21839] name failslab, interval 1, probability 0, space 0, times 0
[  558.103483][T21839] CPU: 1 UID: 0 PID: 21839 Comm: syz.3.4482 Not tainted syzkaller #0 PREEMPT(full) 
[  558.103509][T21839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  558.103519][T21839] Call Trace:
[  558.103526][T21839]  <TASK>
[  558.103534][T21839]  dump_stack_lvl+0xe8/0x150
[  558.103559][T21839]  should_fail_ex+0x412/0x560
[  558.103588][T21839]  should_failslab+0xa8/0x100
[  558.103616][T21839]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  558.103643][T21839]  ? __alloc_skb+0x1d0/0x7d0
[  558.103662][T21839]  ? __local_bh_enable_ip+0xd0/0x130
[  558.103686][T21839]  __alloc_skb+0x1d0/0x7d0
[  558.103706][T21839]  ? br_dev_siocdevprivate+0xddb/0x1630
[  558.103736][T21839]  br_info_notify+0x105/0x280
[  558.103758][T21839]  br_dev_siocdevprivate+0xe10/0x1630
[  558.103789][T21839]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  558.103814][T21839]  ? lockdep_hardirqs_on+0x7a/0x110
[  558.103843][T21839]  ? __mutex_lock+0x608/0x1550
[  558.103867][T21839]  ? dev_ioctl+0x83c/0x1150
[  558.103884][T21839]  ? full_name_hash+0x92/0xe0
[  558.103913][T21839]  dev_ifsioc+0xb6b/0x1330
[  558.103934][T21839]  ? dev_load+0x21/0x1f0
[  558.103954][T21839]  dev_ioctl+0x84c/0x1150
[  558.103976][T21839]  sock_ioctl+0x75f/0x7f0
[  558.104004][T21839]  ? __pfx_sock_ioctl+0x10/0x10
[  558.104029][T21839]  ? __fget_files+0x3a0/0x420
[  558.104049][T21839]  ? __fget_files+0x2a/0x420
[  558.104072][T21839]  ? bpf_lsm_file_ioctl+0x9/0x20
[  558.104099][T21839]  ? __pfx_sock_ioctl+0x10/0x10
[  558.104123][T21839]  __se_sys_ioctl+0xfc/0x170
[  558.104159][T21839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.104178][T21839]  do_syscall_64+0x15f/0xf80
[  558.104198][T21839]  ? trace_irq_disable+0x3b/0x140
[  558.104223][T21839]  ? clear_bhb_loop+0x40/0x90
[  558.104245][T21839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.104261][T21839] RIP: 0033:0x7f7416d9cdd9
[  558.104279][T21839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.104296][T21839] RSP: 002b:00007f7417b7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  558.104316][T21839] RAX: ffffffffffffffda RBX: 00007f7417015fa0 RCX: 00007f7416d9cdd9
[  558.104329][T21839] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000004
[  558.104341][T21839] RBP: 00007f7417b7e090 R08: 0000000000000000 R09: 0000000000000000
[  558.104352][T21839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.104363][T21839] R13: 00007f7417016038 R14: 00007f7417015fa0 R15: 00007ffcb2abd9c8
[  558.104393][T21839]  </TASK>
[  558.565374][T21844] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  558.586372][T21849] netlink: 'syz.4.4486': attribute type 1 has an invalid length.
[  558.626491][T21849] bond6: entered promiscuous mode
[  558.631954][T21849] bond6: entered allmulticast mode
[  558.641573][T21849] 8021q: adding VLAN 0 to HW filter on device bond6
[  558.648296][T21855] __nla_validate_parse: 1 callbacks suppressed
[  558.648318][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4489'.
[  559.518576][   T10] net_ratelimit: 11 callbacks suppressed
[  559.518594][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.565160][T21889] FAULT_INJECTION: forcing a failure.
[  559.565160][T21889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  559.581085][T21890] netlink: 'syz.1.4494': attribute type 21 has an invalid length.
[  559.637669][T21889] CPU: 1 UID: 0 PID: 21889 Comm: syz.4.4496 Not tainted syzkaller #0 PREEMPT(full) 
[  559.637694][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  559.637704][T21889] Call Trace:
[  559.637711][T21889]  <TASK>
[  559.637719][T21889]  dump_stack_lvl+0xe8/0x150
[  559.637749][T21889]  should_fail_ex+0x412/0x560
[  559.637775][T21889]  _copy_from_user+0x2d/0xb0
[  559.637800][T21889]  kstrtouint_from_user+0xd6/0x180
[  559.637822][T21889]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  559.637855][T21889]  proc_fail_nth_write+0x8e/0x210
[  559.637875][T21889]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  559.637899][T21889]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  559.637930][T21889]  vfs_write+0x29a/0xb90
[  559.637966][T21889]  ? __pfx_vfs_write+0x10/0x10
[  559.637989][T21889]  ? __fget_files+0x2a/0x420
[  559.638014][T21889]  ? __fget_files+0x3a0/0x420
[  559.638033][T21889]  ? __fget_files+0x2a/0x420
[  559.638060][T21889]  ksys_write+0x150/0x270
[  559.638083][T21889]  ? __pfx_ksys_write+0x10/0x10
[  559.638107][T21889]  ? __pfx_sock_ioctl+0x10/0x10
[  559.638137][T21889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.638156][T21889]  do_syscall_64+0x15f/0xf80
[  559.638177][T21889]  ? trace_irq_disable+0x3b/0x140
[  559.638208][T21889]  ? clear_bhb_loop+0x40/0x90
[  559.638231][T21889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  559.638249][T21889] RIP: 0033:0x7f36dd95d60e
[  559.638267][T21889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  559.638282][T21889] RSP: 002b:00007f36de928fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  559.638302][T21889] RAX: ffffffffffffffda RBX: 00007f36de9296c0 RCX: 00007f36dd95d60e
[  559.638316][T21889] RDX: 0000000000000001 RSI: 00007f36de9290a0 RDI: 0000000000000005
[  559.638327][T21889] RBP: 00007f36de929090 R08: 0000000000000000 R09: 0000000000000000
[  559.638339][T21889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.638351][T21889] R13: 00007f36ddc16038 R14: 00007f36ddc15fa0 R15: 00007ffca608ecc8
[  559.638382][T21889]  </TASK>
[  559.943685][T21901] netlink: 5492 bytes leftover after parsing attributes in process `syz.2.4498'.
[  559.976865][T21904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4499'.
[  560.509370][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'.
[  560.560253][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.591719][T21940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4510'.
[  560.621936][T21944] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4511'.
[  560.936575][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'.
[  560.941857][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'.
[  560.959493][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'.
[  560.973392][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'.
[  561.100845][T21956] veth1_virt_wifi: left promiscuous mode
[  561.113493][T21956] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  561.612678][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.525793][T22001] sctp: [Deprecated]: syz.2.4528 (pid 22001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  562.525793][T22001] Use struct sctp_sack_info instead
[  562.638346][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  562.890286][T21900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.986494][T15242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.024432][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.059424][ T9422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.145113][T22004] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  563.426874][T22024] syzkaller0: entered promiscuous mode
[  563.439539][T22024] syzkaller0: entered allmulticast mode
[  563.503333][T22029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.515190][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.619595][T22035] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.627301][T22035] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.061249][T22044] pim6reg99999991: entered allmulticast mode
[  564.115549][T22048] ip6gretap0: entered promiscuous mode
[  564.146604][T22048] macsec1: entered promiscuous mode
[  564.181451][T22048] macsec1: entered allmulticast mode
[  564.193583][T22048] ip6gretap0: entered allmulticast mode
[  564.236433][T22048] ip6gretap0: left allmulticast mode
[  564.269035][T22048] ip6gretap0: left promiscuous mode
[  564.373509][T22053] ip6gretap0: entered promiscuous mode
[  564.389329][T22053] macsec1: entered promiscuous mode
[  564.403158][T22053] macsec1: entered allmulticast mode
[  564.430256][T22053] ip6gretap0: entered allmulticast mode
[  564.457080][T22053] ip6gretap0: left allmulticast mode
[  564.475886][T22053] ip6gretap0: left promiscuous mode
[  564.537101][T22076] bridge_slave_0: left allmulticast mode
[  564.543323][T22076] bridge_slave_0: left promiscuous mode
[  564.552713][T22076] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.589213][T22076] bridge_slave_1: left allmulticast mode
[  564.595316][T22076] bridge_slave_1: left promiscuous mode
[  564.603734][T22076] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.719972][ T5738] net_ratelimit: 6 callbacks suppressed
[  564.719993][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.754724][T22076] bond0: (slave bond_slave_0): Releasing backup interface
[  564.768968][T22076] bond0: (slave bond_slave_1): Releasing backup interface
[  564.781060][T22076] team_slave_0: left allmulticast mode
[  564.787321][T22076] team_slave_0: left promiscuous mode
[  564.796349][T22076] team0: Port device team_slave_0 removed
[  564.803708][T22076] team_slave_1: left allmulticast mode
[  564.810707][T22076] team_slave_1: left promiscuous mode
[  564.820165][T22076] team0: Port device team_slave_1 removed
[  564.827073][T22076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.835551][T22076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.844629][T22076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.852645][T22076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.862034][T22076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  565.124763][T15242] tipc: Subscription rejected, illegal request
[  565.304199][T22112] __nla_validate_parse: 48 callbacks suppressed
[  565.304220][T22112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4561'.
[  565.406630][T22112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4561'.
[  565.758694][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.814699][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.440691][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  567.848493][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.881724][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.948841][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.999417][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.010595][ T9422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.038143][ T9422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.046763][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.761977][T22170] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4574'.
[  570.793175][T22174] netlink: 'syz.0.4576': attribute type 1 has an invalid length.
[  570.801148][T22173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4575'.
[  570.816834][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4573'.
[  570.944442][T22174] 8021q: adding VLAN 0 to HW filter on device bond5
[  570.970414][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.169637][T22192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.182081][T22192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.208365][T22192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.377569][T22188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.021471][T22225] netlink: 'syz.1.4586': attribute type 1 has an invalid length.
[  572.255692][T22225] bond9: entered promiscuous mode
[  572.275618][T22225] bond9: entered allmulticast mode
[  572.299699][T22225] 8021q: adding VLAN 0 to HW filter on device bond9
[  572.342195][T22235] macvlan2: entered promiscuous mode
[  572.359838][T22235] macvlan2: entered allmulticast mode
[  572.370694][T22235] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  572.764076][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4593'.
[  572.794041][T22266] netlink: 'syz.1.4595': attribute type 1 has an invalid length.
[  572.811387][T22266] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  572.828229][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'.
[  572.952159][T22271] netlink: 'syz.2.4597': attribute type 1 has an invalid length.
[  573.000633][T22277] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4599'.
[  573.051127][T22276] syzkaller0: entered promiscuous mode
[  573.088260][T22276] syzkaller0: entered allmulticast mode
[  573.190179][T22278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4600'.
[  573.449177][T22299] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  573.449177][T22299] Please contact the netfilter-devel mailing list or update your nftables rules.
[  573.530798][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4606'.
[  573.617296][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4606'.
[  573.684565][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4609'.
[  575.121892][ T5738] net_ratelimit: 7 callbacks suppressed
[  575.121911][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.240613][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.256534][T22358] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.275203][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  575.289403][T22358] batman_adv: batadv0: Removing interface: batadv_slave_1
[  575.523986][T22366] netlink: 'syz.4.4628': attribute type 4 has an invalid length.
[  575.890833][T22381] veth0: entered promiscuous mode
[  575.912640][T22381] bond0: entered promiscuous mode
[  575.924112][T22380] bond0: left promiscuous mode
[  575.938698][T22380] veth0: left promiscuous mode
[  575.999243][   T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  576.163432][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.172395][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.553326][T22393] __nla_validate_parse: 6 callbacks suppressed
[  576.553346][T22393] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4635'.
[  576.573576][T22393] openvswitch: netlink: Missing key (keys=40, expected=100)
[  576.621015][T22393] geneve0: Caught tx_queue_len zero misconfig
[  576.654493][T22395] netlink: 'syz.0.4637': attribute type 1 has an invalid length.
[  576.775040][T22395] bond6: entered promiscuous mode
[  576.803012][T22399] sctp: [Deprecated]: syz.2.4638 (pid 22399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  576.803012][T22399] Use struct sctp_sack_info instead
[  576.810225][T22395] 8021q: adding VLAN 0 to HW filter on device bond6
[  576.862813][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4636'.
[  576.882731][T22400] 8021q: adding VLAN 0 to HW filter on device bond6
[  576.898877][T22400] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  576.928199][T22400] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  576.970169][T22400] bond6: (slave ip6gre1): making interface the new active one
[  576.995958][T22400] ip6gre1: entered promiscuous mode
[  577.011712][T22400] bond6: (slave ip6gre1): Enslaving as an active interface with an up link
[  577.051570][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.069834][T22410] syz_tun: entered promiscuous mode
[  577.070374][T22412] netlink: 'syz.2.4641': attribute type 30 has an invalid length.
[  577.084501][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'.
[  577.088202][T22410] macsec1: entered promiscuous mode
[  577.115239][T22410] syz_tun: left promiscuous mode
[  577.210473][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.731755][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.742640][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.754904][T22439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.768543][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.815421][T22440] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4649'.
[  577.929815][T22445] macsec0: entered promiscuous mode
[  577.954300][T22445] macsec0: left promiscuous mode
[  578.091549][T22447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4652'.
[  578.204955][T22453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4652'.
[  578.418301][T22461] netlink: 'syz.3.4653': attribute type 1 has an invalid length.
[  578.501239][T22461] netlink: 'syz.3.4653': attribute type 2 has an invalid length.
[  579.241904][T22467] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  580.040871][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4661'.
[  580.151004][T22494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4662'.
[  580.312628][T22502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4666'.
[  580.313199][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'.
[  580.342212][   T10] net_ratelimit: 298 callbacks suppressed
[  580.342231][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.618797][T22507] block nbd2: server does not support multiple connections per device.
[  580.732617][T22507] block nbd2: shutting down sockets
[  580.747671][T22514] bridge0: port 1(vlan3) entered blocking state
[  580.868632][T22514] bridge0: port 1(vlan3) entered disabled state
[  580.897601][T22514] vlan3: entered allmulticast mode
[  580.921317][T22514] geneve0: entered allmulticast mode
[  580.956271][T22514] vlan3: entered promiscuous mode
[  580.980616][T22514] geneve0: entered promiscuous mode
[  581.143663][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.193865][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.208479][T22506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.224201][T22509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.268535][T22509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.317620][T22509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.359613][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.374203][T22509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.382067][T22535] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  581.448537][T22509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.299893][T22556] __nla_validate_parse: 2 callbacks suppressed
[  582.299912][T22556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4680'.
[  582.777246][T22572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4683'.
[  582.919914][T22581] netlink: 33004 bytes leftover after parsing attributes in process `syz.2.4683'.
[  582.990156][T22572] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.112008][T22578] 8021q: adding VLAN 0 to HW filter on device bond3
[  583.143399][T22578] bond2: (slave bond3): Enslaving as an active interface with an up link
[  583.201855][T22581] bond2 (unregistering): (slave bond3): Releasing backup interface
[  583.213992][T22581] bond2 (unregistering): Released all slaves
[  583.355392][T22592] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  583.502996][T22596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4690'.
[  583.548644][T22596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4690'.
[  584.088921][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'.
[  584.111485][T22613] x_tables: ip_tables: osf match: only valid for protocol 6
[  584.332869][T22637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'.
[  584.366622][T22637] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4701'.
[  584.856775][T22652] dvmrp6: entered allmulticast mode
[  584.876173][T22652] netlink: 'syz.3.4706': attribute type 21 has an invalid length.
[  584.892362][T22652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4706'.
[  584.935196][T22652] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4706'.
[  585.014664][T22655] netlink: 'syz.2.4707': attribute type 1 has an invalid length.
[  585.039716][T22653] xt_connbytes: Forcing CT accounting to be enabled
[  585.660461][   T10] net_ratelimit: 312 callbacks suppressed
[  585.660481][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.906082][T21528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.942912][T21528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.494224][T22679] netlink: 'syz.3.4713': attribute type 3 has an invalid length.
[  586.647027][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.657008][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.666332][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.677371][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.714189][T22682] syzkaller1: entered promiscuous mode
[  586.721597][T22682] syzkaller1: entered allmulticast mode
[  586.798595][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.989339][   T42] hid-generic 0005:16C0:5505.0003: item fetching failed at offset 0/1
[  587.018832][   T42] hid-generic 0005:16C0:5505.0003: probe with driver hid-generic failed with error -22
[  587.160367][T22715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.169188][T22715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.329717][T22707] 8021q: adding VLAN 0 to HW filter on device bond2
[  587.453361][T22710] bond2: (slave veth5): Enslaving as an active interface with an up link
[  587.609150][T22729] __nla_validate_parse: 7 callbacks suppressed
[  587.609188][T22729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4723'.
[  587.819965][T22734] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4724'.
[  588.154876][T22744] netlink: 'syz.0.4728': attribute type 1 has an invalid length.
[  588.405008][T22744] 8021q: adding VLAN 0 to HW filter on device bond7
[  588.437354][T22761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4732'.
[  588.477387][T22749] bond7: (slave geneve2): making interface the new active one
[  588.490451][T22749] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  588.518424][T22761] ipvlan2: entered allmulticast mode
[  588.528737][T22761] syz_tun: entered allmulticast mode
[  588.595042][ T5792] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  588.620071][ T5792] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  588.663922][ T5792] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  588.684416][ T5792] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  589.111176][T22787] sock: sock_timestamping_bind_phc: sock not bind to device
[  589.178950][T22787] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.205961][T22787] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  589.219578][T22787] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  589.233421][T22787] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  589.290752][T22795] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  589.342147][T22787] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.346678][T22793] netlink: 'syz.0.4741': attribute type 13 has an invalid length.
[  589.353080][T22787] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  589.374589][T22787] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  589.395037][T22787] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  589.940666][T22787] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  589.957897][T22787] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  589.978477][T22787] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  590.001462][T22787] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  590.053301][T22813] 
@0Ù: renamed from bond_slave_1 (while UP)
[  590.133376][T22787] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  590.153575][T22787] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51822 - 0
[  590.181307][T22787] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  590.224256][T22787] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  590.490655][T22817] tipc: Resetting bearer <eth:hsr0>
[  590.552852][T22817] tipc: Resetting bearer <eth:hsr0>
[  591.052906][T16561] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  591.071567][T16561] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 51822 - 0
[  591.091814][T16561] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  591.129427][T16561] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  591.227940][ T5792] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  591.256558][ T5792] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 51822 - 0
[  591.280548][ T5792] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  591.295883][ T5792] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  591.305697][T22867] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4758'.
[  591.428684][ T5792] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  591.443115][ T5792] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 51822 - 0
[  591.454820][ T5792] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  591.466541][ T5792] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  591.476792][T22867] 0·: renamed from hsr0 (while UP)
[  591.484888][T22867] tipc: Disabling bearer <eth:hsr0>
[  591.495826][T22867] 0·: entered allmulticast mode
[  591.503481][T22867] hsr_slave_0: entered allmulticast mode
[  591.511314][T22867] hsr_slave_1: entered allmulticast mode
[  591.517645][T22867] net_ratelimit: 11 callbacks suppressed
[  591.517664][T22867] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  591.634936][ T5792] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  591.666591][ T5792] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 51822 - 0
[  591.699813][ T5792] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  591.726122][ T5792] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  591.762151][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.872787][T22888] bond10: (slave bond_slave_1): Device is not our slave
[  591.898372][T22888] bond10: option active_slave: invalid value (bond_slave_1)
[  591.930321][T22888] bond10 (unregistering): Released all slaves
[  592.004871][T22892] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  592.030635][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.130869][T22893] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  592.161487][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.268555][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.398967][ T5792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.408292][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.417066][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.468472][T22921] netlink: 'syz.2.4766': attribute type 1 has an invalid length.
[  592.564932][T22921] 8021q: adding VLAN 0 to HW filter on device bond4
[  592.621002][T22930] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4764'.
[  592.683349][T22916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4766'.
[  592.878758][T22929] xt_l2tp: wrong L2TP version: 0
[  593.716922][T22952] syz_tun: entered promiscuous mode
[  593.734538][T22952] macsec2: entered promiscuous mode
[  593.756688][T22952] syz_tun: left promiscuous mode
[  593.779190][T22955] 
: renamed from bond0 (while UP)
[  593.969931][T22970] netlink: 'syz.2.4778': attribute type 1 has an invalid length.
[  594.106145][T22970] bond5: entered promiscuous mode
[  594.120702][T22970] 8021q: adding VLAN 0 to HW filter on device bond5
[  594.146671][T22967] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  594.182734][T22973] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  594.831521][T23007] tunl0: Caught tx_queue_len zero misconfig
[  595.251063][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4793'.
[  595.353178][T23026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4793'.
[  595.451080][T23032] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  595.552792][T23030] macsec1: entered promiscuous mode
[  595.580763][T23030] macsec1: entered allmulticast mode
[  596.180291][T23068] xt_hashlimit: size too large, truncated to 1048576
[  596.252798][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4804'.
[  596.536195][T23077] net_ratelimit: 2 callbacks suppressed
[  596.536224][T23077] IPv4: Oversized IP packet from 127.202.26.0
[  596.798067][    C0] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  597.162263][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'.
[  597.192344][T23093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4811'.
[  597.228116][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'.
[  597.294906][T23099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'.
[  597.361168][T23101] x_tables: duplicate underflow at hook 1
[  597.397580][T23104] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4813'.
[  597.460332][T23104] vti0: entered promiscuous mode
[  597.477530][T23104] vti0: entered allmulticast mode
[  597.627593][T23114] netlink: 'syz.0.4814': attribute type 13 has an invalid length.
[  597.656386][T23114] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4814'.
[  597.710042][ T9422] hid-generic 0005:16C0:5505.0004: item fetching failed at offset 0/1
[  597.756698][ T9422] hid-generic 0005:16C0:5505.0004: probe with driver hid-generic failed with error -22
[  597.903653][T23129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4819'.
[  598.153021][T23135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4821'.
[  598.169230][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.178525][T23135] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4821'.
[  598.183288][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.199187][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.267605][T23145] ip6tnl0: Caught tx_queue_len zero misconfig
[  598.282617][T23145] netlink: 'syz.0.4824': attribute type 3 has an invalid length.
[  598.311370][T23143] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4823'.
[  598.324212][T23145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4824'.
[  598.350977][T23145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4824'.
[  598.653921][T23162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4828'.
[  598.798058][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  598.798208][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.820945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.638680][T23158] tipc: Resetting bearer <eth:hsr0>
[  599.653143][T23158] tipc: Resetting bearer <eth:hsr0>
[  599.897459][T23158] bond1: left allmulticast mode
[  599.926541][T23158] bridge1: left promiscuous mode
[  599.982641][T23158] bond2: left allmulticast mode
[  599.994071][T23158] bridge2: left allmulticast mode
[  600.016151][T23158] bridge3: left allmulticast mode
[  600.029394][T23158] macsec1: left promiscuous mode
[  600.054082][T23158] bond4: left promiscuous mode
[  600.058997][T23158] bridge5: left promiscuous mode
[  600.067217][T23158] vlan3: left allmulticast mode
[  600.078769][T23158] bond4: left allmulticast mode
[  600.083689][T23158] bridge5: left allmulticast mode
[  600.116067][T23158] bond6: left promiscuous mode
[  600.125522][T23158] ip6gre1: left promiscuous mode
[  600.165257][T23161] syz_tun: entered promiscuous mode
[  600.171158][T23161] macsec2: entered promiscuous mode
[  600.178729][T23161] syz_tun: left promiscuous mode
[  600.192430][T23167] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  600.323121][T16540] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.363928][T16540] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  600.407680][T16540] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.440096][T16540] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  600.462955][T16540] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.488723][T16540] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  600.515966][T16540] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  600.541206][T16540] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  600.681998][T23198] bond6: option min_links: invalid value (18446744073709551612)
[  600.720341][T23211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  600.727790][T23211] IPv6: NLM_F_CREATE should be set when creating new route
[  600.732692][T23198] bond6: option min_links: allowed values 0 - 2147483647
[  600.735069][T23211] IPv6: NLM_F_CREATE should be set when creating new route
[  600.762355][T23198] bond6 (unregistering): Released all slaves
[  600.861521][T23207] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.080681][T23207] tipc: Resetting bearer <eth:hsr0>
[  601.086608][T23207] tipc: Resetting bearer <eth:hsr0>
[  601.361032][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.408816][T16561] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  601.451070][T16561] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.535819][T16561] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  601.559137][T16561] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.577404][T16561] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  601.630766][T16561] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  601.667878][T16556] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  601.695907][T16556] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  602.058948][T23265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4850'.
[  602.211465][T23269] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  602.318364][T23277] hsr0: MTU too low for tipc bearer
[  602.334830][T23277] tipc: Disabling bearer <eth:hsr0>
[  602.522617][T23280] netlink: 'syz.4.4853': attribute type 1 has an invalid length.
[  602.540184][T23280] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4853'.
[  602.550697][T23280] netlink: 'syz.4.4853': attribute type 1 has an invalid length.
[  602.800933][T23285] syzkaller1: entered promiscuous mode
[  602.822621][T23285] syzkaller1: entered allmulticast mode
[  602.983541][T23295] __nla_validate_parse: 2 callbacks suppressed
[  602.983561][T23295] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4857'.
[  603.029584][T23295] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4857'.
[  603.150102][T23304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4859'.
[  603.249081][T23311] x_tables: ip_tables: icmp match: only valid for protocol 1
[  603.280458][T16540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.292079][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.310533][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.515066][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.526823][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.547150][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.555859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.565290][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.573821][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.584245][T23317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.832706][T23334] nft_compat: unsupported protocol 5
[  604.862423][T23338] syzkaller0: entered promiscuous mode
[  604.875372][T23338] syzkaller0: entered allmulticast mode
[  604.930644][T23341] RDS: rds_bind could not find a transport for ::a00:0:20:0, load rds_tcp or rds_rdma?
[  605.116895][T23350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4874'.
[  605.249322][T23357] SET target dimension over the limit!
[  605.308952][T23360] batman_adv: batadv0: Adding interface: vlan0
[  605.318489][T23360] batman_adv: batadv0: The MTU of interface vlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  605.344731][T23360] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[  605.378706][T23364] netlink: 'syz.0.4879': attribute type 15 has an invalid length.
[  605.593771][T23376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4884'.
[  605.812360][T23386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4888'.
[  605.852956][T23382] syz_tun: entered promiscuous mode
[  605.859186][T23382] macsec2: entered promiscuous mode
[  605.882034][T23382] syz_tun: left promiscuous mode
[  605.924803][T23389] hmac(sh: entered promiscuous mode
[  606.314164][T23402] netlink: 'syz.0.4893': attribute type 2 has an invalid length.
[  606.350724][T23402] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  606.365922][T23402] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4893'.
[  606.723003][T23413] netlink: 'syz.4.4896': attribute type 10 has an invalid length.
[  606.724335][T23415] netlink: 'syz.0.4897': attribute type 1 has an invalid length.
[  606.766429][T23415] netlink: 'syz.0.4897': attribute type 2 has an invalid length.
[  606.777950][T23413] wg2: entered promiscuous mode
[  606.815454][T23413] team0: Device wg2 is of different type
[  606.823000][T23416] netlink: 'syz.0.4897': attribute type 1 has an invalid length.
[  606.851341][T23416] netlink: 'syz.0.4897': attribute type 2 has an invalid length.
[  606.944219][T23420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4899'.
[  607.055886][T23424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4900'.
[  607.157444][T23429] netlink: 'syz.1.4903': attribute type 1 has an invalid length.
[  607.166793][T23429] netlink: 'syz.1.4903': attribute type 2 has an invalid length.
[  607.402440][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4906'.
[  607.719604][T23449] team0: Failed to send options change via netlink (err -105)
[  607.728666][T23449] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  607.759754][T23449] team0: Port device team_slave_0 removed
[  607.941660][T23441] bond0: Unable to set up delay as MII monitoring is disabled
[  607.996567][T23441] bond0 (unregistering): Released all slaves
[  608.039085][T23472] __nla_validate_parse: 9 callbacks suppressed
[  608.039105][T23472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4915'.
[  608.109179][T23444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4908'.
[  608.136668][T23474] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4916'.
[  608.600819][T23495] netlink: 566 bytes leftover after parsing attributes in process `syz.3.4921'.
[  608.845723][T23504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4925'.
[  608.922758][T23508] macsec1: entered promiscuous mode
[  609.041207][T21527] net_ratelimit: 514 callbacks suppressed
[  609.041228][T21527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.059488][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.071975][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  609.360654][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4934'.
[  609.395945][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4934'.
[  609.455890][T23545] netlink: 'syz.4.4937': attribute type 1 has an invalid length.
[  609.464462][T23545] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4937'.
[  609.474785][T23545] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4937'.
[  609.476267][T23546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4939'.
[  609.616100][T23550] syz_tun: entered promiscuous mode
[  609.622017][T23550] macsec2: entered promiscuous mode
[  609.633547][T23550] syz_tun: left promiscuous mode
[  609.713611][T23554] syzkaller0: entered promiscuous mode
[  609.726164][T23554] syzkaller0: entered allmulticast mode
[  609.985030][T23567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.247207][ T9422] IPVS: starting estimator thread 0...
[  610.358672][T23579] IPVS: using max 37 ests per chain, 88800 per kthread
[  610.960663][ T9422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  611.025216][T23600] xt_TCPMSS: Only works on TCP SYN packets
[  611.495869][ T9435] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  611.663095][T23631] netlink: 'syz.0.4961': attribute type 1 has an invalid length.
[  611.725758][T16561] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  612.480063][    T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  612.838682][T15242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  612.874688][T15242] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  613.162983][T23659] nbd: must specify a size in bytes for the device
[  613.196765][T23659] block nbd0: NBD_DISCONNECT
[  613.208868][ T9422] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  613.224516][T23659] block nbd0: Send disconnect failed -32
[  613.249812][T23659] block nbd0: Send disconnect failed -32
[  613.804374][T23685] __nla_validate_parse: 6 callbacks suppressed
[  613.804397][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4976'.
[  613.856142][T23685] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4976'.
[  613.883902][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4980'.
[  613.889052][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'.
[  613.913480][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4980'.
[  613.924672][T23690] netlink: 580 bytes leftover after parsing attributes in process `syz.1.4980'.
[  614.158263][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  614.173178][T16561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.190605][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.202993][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.209169][T23702] netlink: 'syz.2.4982': attribute type 15 has an invalid length.
[  614.258468][T23702] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4982'.
[  614.608297][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4984'.
[  615.126803][T23726] netlink: 'syz.3.4986': attribute type 2 has an invalid length.
[  615.149904][T23732] syzkaller0: entered promiscuous mode
[  615.172474][T23741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4989'.
[  615.173934][T23732] syzkaller0: entered allmulticast mode
[  615.320898][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4991'.
[  615.657465][T23762] ip6tnl3: entered allmulticast mode
[  615.749132][T16540] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  615.781368][ T5751] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  615.790834][T16540] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  615.798587][T23779] netlink: 'syz.2.4994': attribute type 1 has an invalid length.
[  615.905886][T23779] 8021q: adding VLAN 0 to HW filter on device bond6
[  616.078987][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.502518][T23813] netlink: 'syz.2.4996': attribute type 39 has an invalid length.
[  616.660049][T23822] netlink: 'syz.3.5000': attribute type 2 has an invalid length.
[  616.878008][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  616.878027][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  617.116276][T23843] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  617.161637][T23847] syzkaller0: entered promiscuous mode
[  617.179138][T23847] syzkaller0: entered allmulticast mode
[  617.788082][T23864] hsr0: MTU too low for tipc bearer
[  617.793581][T23864] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  617.832049][T23868] netlink: 'syz.3.5016': attribute type 1 has an invalid length.
[  618.051704][T23868] bond0: entered promiscuous mode
[  618.070117][T23868] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.151248][T23874] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.173538][T23874] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  618.209127][T23874] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  618.243500][T23874] bond0: (slave ip6gre2): making interface the new active one
[  618.274584][T23874] ip6gre2: entered promiscuous mode
[  618.295287][T23874] bond0: (slave ip6gre2): Enslaving as an active interface with an up link
[  618.577962][T23886] nbd0: detected capacity change from 0 to 63
[  618.674733][T23899] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  618.916747][ T5633] block nbd0: Receive control failed (result -104)
[  618.970471][T23905] __nla_validate_parse: 12 callbacks suppressed
[  618.970487][T23905] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5026'.
[  619.062447][T23905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5026'.
[  619.081759][T23910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5027'.
[  619.278162][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  619.849452][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5036'.
[  619.864956][T23932] xt_CT: You must specify a L4 protocol and not use inversions on it
[  619.917190][T23932] syzkaller0: entered promiscuous mode
[  619.926569][T23932] syzkaller0: entered allmulticast mode
[  620.158294][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  620.462162][T23940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5038'.
[  620.561676][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.982450][T23949] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5041'.
[  621.369035][T23953] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  621.691867][T23970] bond0: Caught tx_queue_len zero misconfig
[  621.955833][T23979] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  621.978347][T23979] bond10 (unregistering): Released all slaves
[  622.315594][T23993] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5055'.
[  622.449019][T23923] Set syz1 is full, maxelem 65536 reached
[  622.663435][T24012] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  622.730290][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5062'.
[  622.743297][T24012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5059'.
[  623.109179][T24036] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  623.147124][T24036] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  623.147966][T24038] netlink: 'syz.2.5069': attribute type 1 has an invalid length.
[  623.194352][T24038] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5069'.
[  623.211269][T24033] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  623.758355][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.100358][T24071] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  624.331276][T24085] __nla_validate_parse: 4 callbacks suppressed
[  624.331297][T24085] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5086'.
[  624.377180][T24086] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  624.406978][T24079] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5082'.
[  624.522337][T24090] set match dimension is over the limit!
[  624.547246][T24089] set match dimension is over the limit!
[  624.681773][T24096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5089'.
[  624.767332][T24100] netlink: 'syz.4.5090': attribute type 10 has an invalid length.
[  624.798128][T24100] netlink: 'syz.4.5090': attribute type 10 has an invalid length.
[  625.037946][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  625.369176][T24132] netlink: 'syz.2.5097': attribute type 10 has an invalid length.
[  625.473195][T24124] syzkaller1: entered promiscuous mode
[  625.500015][T24124] syzkaller1: entered allmulticast mode
[  625.519211][T24137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5102'.
[  625.716206][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5106'.
[  625.755588][T24152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5106'.
[  626.124528][T24181] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  626.169311][T24184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.967176][T24199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5119'.
[  627.194696][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5122'.
[  627.499142][T24229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5130'.
[  627.542507][T24225] lo: Caught tx_queue_len zero misconfig
[  627.557113][   T29] audit: type=1804 audit(1777821111.685:17): pid=24229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5130" name="/newroot/407/cgroup.controllers" dev="tmpfs" ino=2099 res=1 errno=0
[  627.608979][T24233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5132'.
[  627.628192][   T29] audit: type=1800 audit(1777821111.725:18): pid=24229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5130" name="cgroup.controllers" dev="tmpfs" ino=2099 res=0 errno=0
[  627.634845][T24235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  627.692782][   T29] audit: type=1804 audit(1777821111.735:19): pid=24229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5130" name="/newroot/407/cgroup.controllers" dev="tmpfs" ino=2099 res=1 errno=0
[  627.773180][T24239] syzkaller0: entered promiscuous mode
[  627.792459][T24239] syzkaller0: entered allmulticast mode
[  628.087121][T24247] syzkaller1: entered promiscuous mode
[  628.105604][T24247] syzkaller1: entered allmulticast mode
[  628.669623][T24281] netlink: 'syz.3.5145': attribute type 1 has an invalid length.
[  628.877939][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  628.995823][T24282] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  629.050073][T24282] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  629.148425][T24289] bond3: (slave bridge6): Enslaving as an active interface with a down link
[  629.624914][T24313] hsr0: MTU too low for tipc bearer
[  629.636259][T24313] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  629.759086][T24321] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20001
[  630.189694][T24338] __nla_validate_parse: 7 callbacks suppressed
[  630.189715][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5157'.
[  630.216619][T24337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5158'.
[  630.242467][T24338] x_tables: unsorted entry at hook 3
[  630.424302][T24340] hsr0: MTU too low for tipc bearer
[  630.436614][T24340] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  630.536433][T24352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5160'.
[  630.839368][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5167'.
[  630.849763][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5167'.
[  631.035308][T24370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5170'.
[  631.786095][T21527] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  631.805916][T21527] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  631.825955][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'.
[  631.835735][T21527] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  631.856164][T21527] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  632.300276][T24417] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5183'.
[  632.392593][T24421] netlink: 'syz.0.5186': attribute type 1 has an invalid length.
[  632.466946][T24421] 8021q: adding VLAN 0 to HW filter on device bond10
[  632.593413][T24421] vlan4: entered promiscuous mode
[  632.631844][T24435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5186'.
[  632.693920][T24421] bond10: entered promiscuous mode
[  632.746728][T24421] vlan4: entered allmulticast mode
[  632.772277][T24421] bond10: entered allmulticast mode
[  632.825685][T24445] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5187'.
[  632.863622][T24435] 8021q: adding VLAN 0 to HW filter on device batadv1
[  632.937164][T24435] bond10: (slave batadv1): making interface the new active one
[  632.979027][T24435] batadv1: entered promiscuous mode
[  632.984889][T24435] batadv1: entered allmulticast mode
[  632.992887][T24435] bond10: (slave batadv1): Enslaving as an active interface with an up link
[  633.152840][T24461] netlink: 'syz.1.5194': attribute type 1 has an invalid length.
[  633.198333][   T50] Bluetooth: hci4: command 0x0405 tx timeout
[  633.358746][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.495269][T24464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.508105][T24464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.700935][T24476] netlink: 'syz.1.5198': attribute type 4 has an invalid length.
[  633.745375][T24464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.758430][T24479] netlink: 'syz.1.5198': attribute type 4 has an invalid length.
[  633.759350][T24464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.804152][T24482] sctp: [Deprecated]: syz.0.5202 (pid 24482) Use of struct sctp_assoc_value in delayed_ack socket option.
[  633.804152][T24482] Use struct sctp_sack_info instead
[  633.830804][T24482] netlink: zone id is out of range
[  633.836187][T24482] netlink: zone id is out of range
[  633.842774][T24482] netlink: zone id is out of range
[  633.855746][T24482] netlink: zone id is out of range
[  633.875691][T24483] openvswitch: netlink: IP tunnel dst address not specified
[  633.877638][T24482] netlink: zone id is out of range
[  633.908757][T24482] netlink: zone id is out of range
[  633.917605][T24482] netlink: zone id is out of range
[  633.931228][T24482] netlink: zone id is out of range
[  633.953654][T24464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.966307][T24464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.995875][T24486] netlink: 'syz.1.5203': attribute type 13 has an invalid length.
[  634.193963][T24464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.216895][T24464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.451773][T24502] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  634.776042][   T57] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  634.802113][   T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.866106][   T57] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  634.892585][   T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.946817][   T57] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  634.967932][   T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  635.006094][   T57] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  635.030089][   T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  635.603809][T24525] __nla_validate_parse: 7 callbacks suppressed
[  635.603833][T24525] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5216'.
[  635.719710][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5219'.
[  635.751674][T24533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5219'.
[  635.871473][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5220'.
[  635.895720][T24538] bridge_slave_0: entered promiscuous mode
[  635.925660][T24538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5220'.
[  636.431169][T24550] netlink: 'syz.0.5224': attribute type 8 has an invalid length.
[  636.538912][T24556] block nbd2: Unsupported socket: should be TCP or UNIX.
[  636.765436][T24563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5227'.
[  636.799439][T24561] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  636.861080][T24561] bond7 (unregistering): Released all slaves
[  636.876080][T24570] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5228'.
[  637.406905][T24586] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  637.614383][T24593] macsec2: entered promiscuous mode
[  637.636991][T24593] syz_tun: entered promiscuous mode
[  637.670655][T24593] syz_tun: left promiscuous mode
[  637.732881][T24598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5237'.
[  637.757558][T24600] syzkaller0: entered promiscuous mode
[  637.770536][T24600] syzkaller0: entered allmulticast mode
[  637.798416][T24598] netdevsim0: left promiscuous mode
[  637.804731][T24598] netdevsim0: entered allmulticast mode
[  637.818980][T24598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5237'.
[  637.853841][T24601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5237'.
[  637.943821][T24603] syzkaller1: entered promiscuous mode
[  637.961033][T24603] syzkaller1: entered allmulticast mode
[  638.132942][T24611] erspan0: entered promiscuous mode
[  638.149003][T24611] vlan1: entered promiscuous mode
[  638.202960][T24613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  638.410557][T24622] 8021q: VLANs not supported on ip6_vti0
[  638.453295][T24624] netlink: 'syz.1.5247': attribute type 4 has an invalid length.
[  638.465904][T24622] net_ratelimit: 23 callbacks suppressed
[  638.465926][T24622] TC_ACT_REPEAT abuse ?
[  638.511557][T24625] netlink: 'syz.1.5247': attribute type 4 has an invalid length.
[  638.727378][T24624] netlink: 'syz.1.5247': attribute type 4 has an invalid length.
[  639.069585][T24644] xt_hashlimit: max too large, truncated to 1048576
[  639.093677][T24644] xt_ecn: cannot match TCP bits for non-tcp packets
[  639.746153][T24666] netlink: 'syz.0.5261': attribute type 1 has an invalid length.
[  639.781390][T24666] netlink: 'syz.0.5261': attribute type 2 has an invalid length.
[  640.473583][T24689] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048)
[  640.608635][T24695] __nla_validate_parse: 10 callbacks suppressed
[  640.608656][T24695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5270'.
[  640.723894][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5272'.
[  640.746745][T24704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5275'.
[  640.775893][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5275'.
[  640.828003][T24704] netlink: 'syz.3.5275': attribute type 18 has an invalid length.
[  640.875402][T24707] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5274'.
[  640.904686][T24696] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  641.173302][T24718] macsec1: entered promiscuous mode
[  641.314158][T24721] syzkaller1: entered promiscuous mode
[  641.324871][T24721] syzkaller1: entered allmulticast mode
[  641.423564][T24726] mac80211_hwsim hwsim40 wlan0: Caught tx_queue_len zero misconfig
[  641.435649][T24724] lo speed is unknown, defaulting to 1000
[  641.452018][T24724] lo speed is unknown, defaulting to 1000
[  641.478909][T24724] lo speed is unknown, defaulting to 1000
[  641.501141][T24728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5281'.
[  641.639552][T24733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5284'.
[  641.678013][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  641.969870][T24749] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  642.051002][T24724] infiniband sqz0: set active
[  642.055880][ T5625] lo speed is unknown, defaulting to 1000
[  642.076641][T24724] infiniband sqz0: added lo
[  642.219623][T24724] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  642.301559][T24724] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  642.335944][T24724] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  642.428030][T24766] macsec1: entered promiscuous mode
[  642.471414][T24724] RDS/IB: sqz0: added
[  642.508504][T24724] smc: adding ib device sqz0 with port count 1
[  642.527276][T24724] smc:    ib device sqz0 port 1 has no pnetid
[  642.538722][ T9435] lo speed is unknown, defaulting to 1000
[  642.555161][T24724] lo speed is unknown, defaulting to 1000
[  642.633673][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5296'.
[  642.693762][T24775] bond4: option lp_interval: invalid value (0)
[  642.717654][T24775] bond4: option lp_interval: allowed values 1 - 2147483647
[  642.744205][T24775] bond4 (unregistering): Released all slaves
[  642.873129][T24778] bond4: option lp_interval: invalid value (0)
[  642.879738][T24778] bond4: option lp_interval: allowed values 1 - 2147483647
[  642.890376][T24778] bond4 (unregistering): Released all slaves
[  642.958641][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.262724][T24799] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  643.286822][T24799] bond11 (unregistering): Released all slaves
[  643.345847][T24800] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  643.375818][T24724] lo speed is unknown, defaulting to 1000
[  643.451441][T24798] 8021q: adding VLAN 0 to HW filter on device bond10
[  643.901711][T24835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'.
[  643.958904][   T29] audit: type=1804 audit(1777821128.095:20): pid=24835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5310" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2158 res=1 errno=0
[  644.007634][   T29] audit: type=1800 audit(1777821128.125:21): pid=24835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5310" name="cgroup.controllers" dev="tmpfs" ino=2158 res=0 errno=0
[  644.172512][T24724] lo speed is unknown, defaulting to 1000
[  644.290763][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5315'.
[  644.320543][T24854] netlink: 'syz.0.5315': attribute type 1 has an invalid length.
[  644.432034][T24856] mac80211_hwsim hwsim46 ªªªªª;: renamed from wlan0
[  644.697055][T24724] lo speed is unknown, defaulting to 1000
[  644.763259][T24866] batadv_slave_0: Caught tx_queue_len zero misconfig
[  644.937066][T24868] netlink: 'syz.0.5320': attribute type 10 has an invalid length.
[  645.397373][T24724] lo speed is unknown, defaulting to 1000
[  645.510258][T24895] ip6tnl1: left allmulticast mode
[  645.531770][T24895] team1: left promiscuous mode
[  645.547028][T24895] team1: left allmulticast mode
[  645.553465][T24895] team2: left promiscuous mode
[  645.560517][T24895] team2: left allmulticast mode
[  645.574051][T24895] vlan2: left allmulticast mode
[  645.594032][T24895] bond6: left allmulticast mode
[  645.620130][T24895] bond9: left promiscuous mode
[  645.637998][T24895] bond9: left allmulticast mode
[  645.651608][T24902] netlink: 'syz.1.5329': attribute type 4 has an invalid length.
[  645.663714][T24903] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  645.689021][T24895] macsec1: left promiscuous mode
[  645.694944][T24895] macsec1: left allmulticast mode
[  645.716509][T24908] netlink: 'syz.1.5329': attribute type 4 has an invalid length.
[  645.737013][T24895] vti0: left promiscuous mode
[  645.749411][T24895] vti0: left allmulticast mode
[  645.846290][T24895] __nla_validate_parse: 3 callbacks suppressed
[  645.846311][T24895] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5329'.
[  646.022269][T24724] lo speed is unknown, defaulting to 1000
[  646.158039][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  646.198607][T24920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5334'.
[  646.278469][T24919] team0 (unregistering): Port device team_slave_1 removed
[  646.430384][T24926] syzkaller0: entered promiscuous mode
[  646.444721][T24926] syzkaller0: entered allmulticast mode
[  646.879689][T24948] netlink: 'syz.4.5340': attribute type 8 has an invalid length.
[  650.002147][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  651.525706][T24724] lo speed is unknown, defaulting to 1000
[  651.525787][T24941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5340'.
[  651.745969][T24959] netlink: 'syz.4.5345': attribute type 10 has an invalid length.
[  651.895286][T24962] netlink: 'syz.3.5344': attribute type 39 has an invalid length.
[  652.563131][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.337452][T24953] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  656.345405][T24957] netlink: 'syz.3.5344': attribute type 12 has an invalid length.
[  656.353585][T24957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5344'.
[  656.363647][T24959] team0: left promiscuous mode
[  656.369849][T24959] team_slave_0: left promiscuous mode
[  656.375835][T24959] team_slave_1: left promiscuous mode
[  656.395189][T24959] team0: Cannot enslave team device to itself
[  656.420973][T24724] lo speed is unknown, defaulting to 1000
[  656.835531][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  656.861972][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  656.872060][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  656.881098][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  656.897083][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  657.110187][T24987] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5355'.
[  657.336979][T25001] netlink: 'syz.4.5359': attribute type 4 has an invalid length.
[  657.496694][T24724] lo speed is unknown, defaulting to 1000
[  657.716662][T25013] netlink: 'syz.4.5362': attribute type 1 has an invalid length.
[  657.913188][T25013] 8021q: adding VLAN 0 to HW filter on device bond7
[  658.391393][T24724] lo speed is unknown, defaulting to 1000
[  658.777441][T25050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5367'.
[  658.802601][   T29] audit: type=1804 audit(1777821142.935:22): pid=25050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5367" name="/newroot/454/cgroup.controllers" dev="tmpfs" ino=2340 res=1 errno=0
[  658.886984][   T29] audit: type=1800 audit(1777821142.975:23): pid=25050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5367" name="cgroup.controllers" dev="tmpfs" ino=2340 res=0 errno=0
[  658.963795][   T50] Bluetooth: hci2: command tx timeout
[  659.018377][T25052] bond11: option arp_all_targets: invalid value (18446744073708306561)
[  659.089933][T25065] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.5369'.
[  659.343979][T25052] bond11 (unregistering): Released all slaves
[  659.407411][T24724] lo speed is unknown, defaulting to 1000
[  659.675702][T25067] netlink: 'syz.3.5370': attribute type 13 has an invalid length.
[  659.712835][T25067] netlink: 'syz.3.5370': attribute type 17 has an invalid length.
[  659.824340][T25073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5370'.
[  659.974206][T25067] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  660.101220][T24977] lo speed is unknown, defaulting to 1000
[  660.202643][T25080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5372'.
[  660.370064][T25084] netlink: 'syz.3.5374': attribute type 4 has an invalid length.
[  660.407454][T25084] netlink: 'syz.3.5374': attribute type 4 has an invalid length.
[  660.426504][T25084] netlink: 'syz.3.5374': attribute type 4 has an invalid length.
[  660.532896][T25086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5375'.
[  660.575922][T24724] lo speed is unknown, defaulting to 1000
[  660.885346][T25096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5378'.
[  661.014044][T25079] lo speed is unknown, defaulting to 1000
[  661.038731][   T50] Bluetooth: hci2: command tx timeout
[  661.054843][T25079] lo speed is unknown, defaulting to 1000
[  661.096779][T25079] lo speed is unknown, defaulting to 1000
[  661.118130][T25079] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  661.135570][T25079] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  661.154523][T25079] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  661.179041][T25079] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  661.284420][T25108] netlink: 848 bytes leftover after parsing attributes in process `syz.3.5381'.
[  661.454820][T25079] lo speed is unknown, defaulting to 1000
[  661.561137][T24977] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.573310][T24977] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.581785][T24977] bridge_slave_0: entered allmulticast mode
[  661.596722][T24977] bridge_slave_0: entered promiscuous mode
[  661.635303][T25108] bond2: (slave syz_tun): Removing an active aggregator
[  661.648798][T25108] bond2: (slave syz_tun): Releasing backup interface
[  661.669707][T25108] bridge_slave_0: left allmulticast mode
[  661.675611][T25108] bridge_slave_0: left promiscuous mode
[  661.683531][T25108] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.960728][T25108] bridge_slave_1: left allmulticast mode
[  661.966490][T25108] bridge_slave_1: left promiscuous mode
[  661.972551][T25108] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.987018][T25108] 
: (slave bond_slave_0): Releasing backup interface
[  661.997415][T25108] 
: (slave bond_slave_1): Releasing backup interface
[  662.009915][T25108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  662.017330][T25108] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.027428][T25108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  662.036472][T25108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.045831][T25108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  662.067497][T25079] lo speed is unknown, defaulting to 1000
[  662.101168][T24977] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.108612][T24977] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.116028][T24977] bridge_slave_1: entered allmulticast mode
[  662.124885][T24977] bridge_slave_1: entered promiscuous mode
[  662.133438][T25079] lo speed is unknown, defaulting to 1000
[  662.158801][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.200974][T24977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  662.213359][T25079] lo speed is unknown, defaulting to 1000
[  662.217199][T24977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  662.241070][T25113] netlink: 'syz.3.5382': attribute type 1 has an invalid length.
[  662.257310][T25079] lo speed is unknown, defaulting to 1000
[  662.260889][T24977] team0: Port device team_slave_0 added
[  662.290667][T25113] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  662.292814][T24977] team0: Port device team_slave_1 added
[  662.317419][T25079] lo speed is unknown, defaulting to 1000
[  662.336204][T24977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  662.345810][T24977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.373134][T24977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  662.396803][T25079] lo speed is unknown, defaulting to 1000
[  662.402347][T25119] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  662.409666][T24977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  662.417205][T24977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  662.444261][T24977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.487310][T25079] lo speed is unknown, defaulting to 1000
[  662.537190][T25079] lo speed is unknown, defaulting to 1000
[  662.553438][T25079] lo speed is unknown, defaulting to 1000
[  662.561209][T24977] hsr_slave_0: entered promiscuous mode
[  662.570833][T24977] hsr_slave_1: entered promiscuous mode
[  662.589070][T24977] debugfs: 'hsr0' already exists in 'hsr'
[  662.594998][T24977] Cannot create hsr debugfs directory
[  662.603224][T25079] lo speed is unknown, defaulting to 1000
[  662.649164][T25079] lo speed is unknown, defaulting to 1000
[  663.118433][   T50] Bluetooth: hci2: command tx timeout
[  663.343625][T25124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5385'.
[  663.592508][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5388'.
[  664.191468][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5392'.
[  664.230995][T25163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5392'.
[  664.265924][T25159] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  664.331224][T25167] vlan5: entered allmulticast mode
[  664.348527][T25167] bond0: entered allmulticast mode
[  664.357461][T25167] bond_slave_0: entered allmulticast mode
[  664.372204][T25167] bond_slave_1: entered allmulticast mode
[  664.451956][T25158] syzkaller0: entered promiscuous mode
[  664.457541][T25158] syzkaller0: entered allmulticast mode
[  664.467550][T25180] netlink: 'syz.3.5395': attribute type 4 has an invalid length.
[  664.518218][T25176] netlink: 'syz.3.5395': attribute type 4 has an invalid length.
[  665.199309][   T50] Bluetooth: hci2: command tx timeout
[  667.454089][T25179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  667.526826][T25193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5399'.
[  667.536578][T25193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5399'.
[  669.293282][T24977] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  669.309922][T24977] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  669.355448][T24977] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  669.484076][T24977] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  669.502204][T25198] netlink: 'syz.4.5401': attribute type 10 has an invalid length.
[  669.512806][T24977] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  669.529015][T24977] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  669.546856][T24977] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  669.567262][T24977] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  669.648860][T25204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5403'.
[  669.737173][T25204] bond11: entered promiscuous mode
[  669.743973][T25204] 8021q: adding VLAN 0 to HW filter on device bond11
[  669.835372][T25219] 8021q: adding VLAN 0 to HW filter on device bond11
[  669.892237][T25219] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  669.920024][T25219] bond11: (slave ip6gre2): Error -95 calling set_mac_address
[  670.099268][T24977] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.145890][T24977] 8021q: adding VLAN 0 to HW filter on device team0
[  670.181696][T16556] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.189042][T16556] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.279980][T10494] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.287320][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.546851][T25234] tipc: Enabling of bearer <eth:hsr0> rejected, already enabled
[  671.369943][T25262] netlink: 'syz.1.5415': attribute type 3 has an invalid length.
[  671.561459][T24977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.759199][ T9435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.990779][T25285] netlink: 'syz.4.5421': attribute type 4 has an invalid length.
[  672.013422][T25285] netlink: 'syz.4.5421': attribute type 4 has an invalid length.
[  672.046571][T25285] netlink: 'syz.4.5421': attribute type 4 has an invalid length.
[  672.220919][T25288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5422'.
[  672.246385][T25288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5422'.
[  672.308112][T25290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  672.356841][T24977] veth0_vlan: entered promiscuous mode
[  672.367010][ T5625] lo speed is unknown, defaulting to 1000
[  672.445134][T25288] bond8 (unregistering): Released all slaves
[  672.521266][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5425'.
[  672.630361][T24977] veth1_vlan: entered promiscuous mode
[  672.653156][T25305] sctp: [Deprecated]: syz.1.5427 (pid 25305) Use of int in max_burst socket option.
[  672.653156][T25305] Use struct sctp_assoc_value instead
[  672.780674][T24977] veth0_macvtap: entered promiscuous mode
[  672.815254][T24977] veth1_macvtap: entered promiscuous mode
[  672.838309][T25310] netlink: 'syz.4.5430': attribute type 3 has an invalid length.
[  672.867528][T25310] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5430'.
[  672.882894][T24977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  672.905334][T25317] netlink: 'syz.1.5432': attribute type 4 has an invalid length.
[  672.969520][T25320] netlink: 'syz.1.5432': attribute type 4 has an invalid length.
[  672.970089][T24977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  673.054593][    T9] lo speed is unknown, defaulting to 1000
[  673.062463][ T9435] lo speed is unknown, defaulting to 1000
[  673.070973][T21528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  673.081776][T25325] netlink: 'syz.3.5434': attribute type 10 has an invalid length.
[  673.093847][T25317] netlink: 'syz.1.5432': attribute type 4 has an invalid length.
[  673.113873][T21528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  673.147224][    T9] lo speed is unknown, defaulting to 1000
[  673.154713][    T9] syz2: Port: 1 Link DOWN
[  673.167179][T21528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  673.178696][T25327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5433'.
[  673.208393][T21528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.226853][T25327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5433'.
[  673.341091][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5436'.
[  673.581674][T25341] hsr0: MTU too low for tipc bearer
[  673.597041][T25341] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  673.644886][T16556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.667595][T16556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.907020][T16556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.929853][T25352] syzkaller0: entered promiscuous mode
[  673.939530][T16556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.947861][T25352] syzkaller0: entered allmulticast mode
[  674.059431][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5444'.
[  674.078171][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5444'.
[  674.365470][T25367] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  674.682360][T25387] xt_limit: Overflow, try lower: 324382443/0
[  674.795158][T25390] tipc: Started in network mode
[  674.810048][T25390] tipc: Node identity 06ee8646343, cluster identity 4711
[  674.839767][T25390] tipc: Enabled bearer <eth:hsr0>, priority 10
[  675.318649][T25403] __nla_validate_parse: 4 callbacks suppressed
[  675.318670][T25403] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5458'.
[  675.360688][T25403] openvswitch: netlink: Flow actions attr not present in new flow.
[  675.632094][T25410] bond8: option arp_interval: invalid value (18446744073709551615)
[  675.640775][T25410] bond8: option arp_interval: allowed values 0 - 2147483647
[  675.652837][T25410] bond8 (unregistering): Released all slaves
[  675.729541][T25420] validate_nla: 4 callbacks suppressed
[  675.729560][T25420] netlink: 'syz.1.5462': attribute type 4 has an invalid length.
[  675.783923][T25423] netlink: 'syz.1.5462': attribute type 4 has an invalid length.
[  675.787145][T25409] bond8: option arp_interval: invalid value (18446744073709551615)
[  675.800470][T25409] bond8: option arp_interval: allowed values 0 - 2147483647
[  675.811542][T25409] bond8 (unregistering): Released all slaves
[  675.857620][ T5751] lo speed is unknown, defaulting to 1000
[  675.863648][ T5751] syz2: Port: 1 Link ACTIVE
[  675.870567][T25414] netlink: 'syz.1.5462': attribute type 4 has an invalid length.
[  675.902299][T25427] netlink: 'syz.3.5466': attribute type 1 has an invalid length.
[  675.931935][ T5751] lo speed is unknown, defaulting to 1000
[  675.939243][ T5751] syz2: Port: 1 Link DOWN
[  675.960821][   T10] tipc: Node number set to 853444166
[  676.058896][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5468'.
[  676.094949][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5469'.
[  676.119008][   T29] audit: type=1804 audit(1777821160.255:24): pid=25439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5469" name="/newroot/460/cgroup.controllers" dev="tmpfs" ino=2376 res=1 errno=0
[  676.219139][   T29] audit: type=1800 audit(1777821160.255:25): pid=25439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5469" name="cgroup.controllers" dev="tmpfs" ino=2376 res=0 errno=0
[  676.248019][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  676.417328][T25451] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  676.579357][ T5738] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  676.835860][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5482'.
[  676.841405][T25469] syzkaller1: entered promiscuous mode
[  676.852487][T25469] syzkaller1: entered allmulticast mode
[  676.873231][   T29] audit: type=1804 audit(1777821161.015:26): pid=25471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5482" name="/newroot/7/cgroup.controllers" dev="tmpfs" ino=53 res=1 errno=0
[  676.928573][   T29] audit: type=1800 audit(1777821161.015:27): pid=25471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5482" name="cgroup.controllers" dev="tmpfs" ino=53 res=0 errno=0
[  677.184764][ T5738] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  677.244461][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5485'.
[  677.590909][T25498] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5489'.
[  677.684280][T25504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5492'.
[  677.922827][T25515] IPVS: persistence engine module ip_vs_pe_… not found
[  678.023271][T25521] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5497'.
[  678.315374][T25521] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5497'.
[  678.646434][T25528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.977344][T25550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5506'.
[  679.048293][T25551] block nbd2: server does not support multiple connections per device.
[  679.124505][T25551] block nbd2: shutting down sockets
[  679.470788][T25566] bond8: Unable to set down delay as MII monitoring is disabled
[  679.481096][T25579] netlink: 'syz.1.5513': attribute type 4 has an invalid length.
[  679.502589][T25566] bond8 (unregistering): Released all slaves
[  679.548986][T25583] netlink: 'syz.1.5513': attribute type 4 has an invalid length.
[  679.625723][ T5738] lo speed is unknown, defaulting to 1000
[  679.669015][T25565] netlink: 'syz.1.5513': attribute type 4 has an invalid length.
[  679.674901][ T5738] syz2: Port: 1 Link ACTIVE
[  679.725590][ T5625] lo speed is unknown, defaulting to 1000
[  679.751078][ T5625] syz2: Port: 1 Link DOWN
[  680.027205][T25606] netlink: 'syz.0.5521': attribute type 4 has an invalid length.
[  680.049494][T25606] netlink: 'syz.0.5521': attribute type 4 has an invalid length.
[  680.114626][T25606] netlink: 'syz.0.5521': attribute type 4 has an invalid length.
[  680.180354][T10494] 
[  680.182741][T10494] ======================================================
[  680.189792][T10494] WARNING: possible circular locking dependency detected
[  680.196844][T10494] syzkaller #0 Not tainted
[  680.201271][T10494] ------------------------------------------------------
[  680.208301][T10494] kworker/u8:11/10494 is trying to acquire lock:
[  680.214640][T10494] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  680.224517][T10494] 
[  680.224517][T10494] but task is already holding lock:
[  680.231899][T10494] ffff888051a56a60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  680.241506][T10494] 
[  680.241506][T10494] which lock already depends on the new lock.
[  680.241506][T10494] 
[  680.251948][T10494] 
[  680.251948][T10494] the existing dependency chain (in reverse order) is:
[  680.260983][T10494] 
[  680.260983][T10494] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}:
[  680.268832][T10494]        mptcp_send_ack+0x99/0x1e0
[  680.273969][T10494]        mptcp_check_data_fin+0x50f/0x7d0
[  680.279799][T10494]        mptcp_worker+0x5fd/0x1420
[  680.285001][T10494]        process_scheduled_works+0xb5d/0x1860
[  680.291073][T10494]        worker_thread+0xa53/0xfc0
[  680.296248][T10494]        kthread+0x388/0x470
[  680.300849][T10494]        ret_from_fork+0x514/0xb70
[  680.305976][T10494]        ret_from_fork_asm+0x1a/0x30
[  680.311303][T10494] 
[  680.311303][T10494] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  680.319031][T10494]        lock_sock_nested+0x41/0x100
[  680.324321][T10494]        inet_shutdown+0x6a/0x390
[  680.329356][T10494]        nbd_mark_nsock_dead+0x2e9/0x560
[  680.335270][T10494]        sock_shutdown+0x15e/0x260
[  680.340433][T10494]        nbd_clear_sock+0x24/0x170
[  680.345636][T10494]        nbd_config_put+0x2dd/0x580
[  680.350946][T10494]        nbd_genl_connect+0x19d5/0x1cf0
[  680.356587][T10494]        genl_family_rcv_msg_doit+0x22a/0x330
[  680.362668][T10494]        genl_rcv_msg+0x61c/0x7a0
[  680.367737][T10494]        netlink_rcv_skb+0x232/0x4b0
[  680.373025][T10494]        genl_rcv+0x28/0x40
[  680.377848][T10494]        netlink_unicast+0x75c/0x8e0
[  680.383156][T10494]        netlink_sendmsg+0x813/0xb40
[  680.388451][T10494]        ____sys_sendmsg+0x972/0x9f0
[  680.393739][T10494]        ___sys_sendmsg+0x2a5/0x360
[  680.398945][T10494]        __x64_sys_sendmsg+0x1bd/0x2a0
[  680.404414][T10494]        do_syscall_64+0x15f/0xf80
[  680.409537][T10494]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.415977][T10494] 
[  680.415977][T10494] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  680.423721][T10494]        __mutex_lock+0x1a3/0x1550
[  680.428874][T10494]        nbd_queue_rq+0x37b/0x1100
[  680.433988][T10494]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  680.440061][T10494]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  680.447077][T10494]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  680.453620][T10494]        blk_mq_run_hw_queue+0x348/0x4f0
[  680.459381][T10494]        blk_mq_dispatch_list+0xd16/0xe10
[  680.465127][T10494]        blk_mq_flush_plug_list+0x48d/0x570
[  680.471050][T10494]        __blk_flush_plug+0x3ed/0x4d0
[  680.476452][T10494]        __submit_bio+0x28d/0x580
[  680.481524][T10494]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  680.487710][T10494]        block_read_full_folio+0x7b7/0x830
[  680.493568][T10494]        filemap_read_folio+0x137/0x3b0
[  680.499148][T10494]        do_read_cache_folio+0x358/0x590
[  680.504817][T10494]        read_part_sector+0xb6/0x2b0
[  680.510139][T10494]        adfspart_check_ICS+0xb1/0x960
[  680.515620][T10494]        bdev_disk_changed+0x817/0x1770
[  680.521211][T10494]        blkdev_get_whole+0x380/0x510
[  680.526588][T10494]        bdev_open+0x31e/0xd30
[  680.531358][T10494]        blkdev_open+0x470/0x610
[  680.536299][T10494]        do_dentry_open+0x785/0x14e0
[  680.541601][T10494]        vfs_open+0x3b/0x340
[  680.546190][T10494]        path_openat+0x2e08/0x3860
[  680.551302][T10494]        do_file_open+0x23e/0x4a0
[  680.556345][T10494]        do_sys_openat2+0x113/0x200
[  680.561550][T10494]        __x64_sys_openat+0x138/0x170
[  680.566924][T10494]        do_syscall_64+0x15f/0xf80
[  680.572093][T10494]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.578512][T10494] 
[  680.578512][T10494] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  680.585858][T10494]        __mutex_lock+0x1a3/0x1550
[  680.590973][T10494]        nbd_queue_rq+0xc6/0x1100
[  680.595995][T10494]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  680.602068][T10494]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  680.608919][T10494]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  680.615451][T10494]        blk_mq_run_hw_queue+0x348/0x4f0
[  680.621103][T10494]        blk_mq_dispatch_list+0xd16/0xe10
[  680.626837][T10494]        blk_mq_flush_plug_list+0x48d/0x570
[  680.633186][T10494]        __blk_flush_plug+0x3ed/0x4d0
[  680.638584][T10494]        __submit_bio+0x28d/0x580
[  680.643627][T10494]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  680.649824][T10494]        block_read_full_folio+0x7b7/0x830
[  680.655747][T10494]        filemap_read_folio+0x137/0x3b0
[  680.661299][T10494]        do_read_cache_folio+0x358/0x590
[  680.666963][T10494]        read_part_sector+0xb6/0x2b0
[  680.672253][T10494]        adfspart_check_ICS+0xb1/0x960
[  680.677838][T10494]        bdev_disk_changed+0x817/0x1770
[  680.683580][T10494]        blkdev_get_whole+0x380/0x510
[  680.688964][T10494]        bdev_open+0x31e/0xd30
[  680.693734][T10494]        blkdev_open+0x470/0x610
[  680.698685][T10494]        do_dentry_open+0x785/0x14e0
[  680.703967][T10494]        vfs_open+0x3b/0x340
[  680.708553][T10494]        path_openat+0x2e08/0x3860
[  680.713671][T10494]        do_file_open+0x23e/0x4a0
[  680.718704][T10494]        do_sys_openat2+0x113/0x200
[  680.723905][T10494]        __x64_sys_openat+0x138/0x170
[  680.729379][T10494]        do_syscall_64+0x15f/0xf80
[  680.734519][T10494]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.740958][T10494] 
[  680.740958][T10494] -> #3 (set->srcu){.+.+}-{0:0}:
[  680.748085][T10494]        __synchronize_srcu+0xca/0x300
[  680.753565][T10494]        elevator_switch+0x1e8/0x7a0
[  680.758946][T10494]        elevator_change+0x2cc/0x450
[  680.764247][T10494]        elevator_set_default+0x36c/0x430
[  680.769975][T10494]        blk_register_queue+0x3e9/0x4e0
[  680.775544][T10494]        __add_disk+0x677/0xd50
[  680.780402][T10494]        add_disk_fwnode+0xfb/0x480
[  680.785598][T10494]        nbd_dev_add+0x72c/0xb50
[  680.790538][T10494]        nbd_init+0x168/0x1f0
[  680.795285][T10494]        do_one_initcall+0x250/0x870
[  680.800573][T10494]        do_initcall_level+0x104/0x190
[  680.806035][T10494]        do_initcalls+0x59/0xa0
[  680.810884][T10494]        kernel_init_freeable+0x2a6/0x3e0
[  680.816606][T10494]        kernel_init+0x1d/0x1d0
[  680.821465][T10494]        ret_from_fork+0x514/0xb70
[  680.826580][T10494]        ret_from_fork_asm+0x1a/0x30
[  680.831870][T10494] 
[  680.831870][T10494] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  680.839774][T10494]        __mutex_lock+0x1a3/0x1550
[  680.844891][T10494]        elevator_change+0x1b3/0x450
[  680.850179][T10494]        elevator_set_none+0xb5/0x140
[  680.855562][T10494]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  680.861891][T10494]        nbd_start_device+0x17f/0xb10
[  680.867267][T10494]        nbd_genl_connect+0x165b/0x1cf0
[  680.872846][T10494]        genl_family_rcv_msg_doit+0x22a/0x330
[  680.878924][T10494]        genl_rcv_msg+0x61c/0x7a0
[  680.883977][T10494]        netlink_rcv_skb+0x232/0x4b0
[  680.889275][T10494]        genl_rcv+0x28/0x40
[  680.893873][T10494]        netlink_unicast+0x75c/0x8e0
[  680.899160][T10494]        netlink_sendmsg+0x813/0xb40
[  680.904552][T10494]        ____sys_sendmsg+0x972/0x9f0
[  680.909840][T10494]        ___sys_sendmsg+0x2a5/0x360
[  680.915044][T10494]        __x64_sys_sendmsg+0x1bd/0x2a0
[  680.920586][T10494]        do_syscall_64+0x15f/0xf80
[  680.925700][T10494]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.932125][T10494] 
[  680.932125][T10494] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  680.940842][T10494]        blk_alloc_queue+0x546/0x680
[  680.946134][T10494]        __blk_mq_alloc_disk+0x197/0x390
[  680.951786][T10494]        nbd_dev_add+0x499/0xb50
[  680.956820][T10494]        nbd_init+0x168/0x1f0
[  680.961677][T10494]        do_one_initcall+0x250/0x870
[  680.966966][T10494]        do_initcall_level+0x104/0x190
[  680.972434][T10494]        do_initcalls+0x59/0xa0
[  680.977320][T10494]        kernel_init_freeable+0x2a6/0x3e0
[  680.983144][T10494]        kernel_init+0x1d/0x1d0
[  680.988018][T10494]        ret_from_fork+0x514/0xb70
[  680.993221][T10494]        ret_from_fork_asm+0x1a/0x30
[  680.998511][T10494] 
[  680.998511][T10494] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  681.005712][T10494]        __lock_acquire+0x15a5/0x2cf0
[  681.011086][T10494]        lock_acquire+0x106/0x350
[  681.016109][T10494]        fs_reclaim_acquire+0x71/0x100
[  681.021575][T10494]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  681.027915][T10494]        __alloc_skb+0x1d0/0x7d0
[  681.032909][T10494]        tcp_stream_alloc_skb+0x3f/0x580
[  681.038548][T10494]        tcp_connect+0x1570/0x5400
[  681.043661][T10494]        tcp_v4_connect+0x10f7/0x19b0
[  681.049032][T10494]        __inet_stream_connect+0x25a/0xdd0
[  681.054843][T10494]        inet_stream_connect+0x66/0xa0
[  681.060304][T10494]        kernel_connect+0x141/0x1c0
[  681.065505][T10494]        rds_tcp_conn_path_connect+0x6f6/0x930
[  681.071660][T10494]        rds_connect_worker+0x1d8/0x290
[  681.077229][T10494]        process_scheduled_works+0xb5d/0x1860
[  681.083302][T10494]        worker_thread+0xa53/0xfc0
[  681.088432][T10494]        kthread+0x388/0x470
[  681.093035][T10494]        ret_from_fork+0x514/0xb70
[  681.098146][T10494]        ret_from_fork_asm+0x1a/0x30
[  681.103435][T10494] 
[  681.103435][T10494] other info that might help us debug this:
[  681.103435][T10494] 
[  681.113784][T10494] Chain exists of:
[  681.113784][T10494]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET
[  681.113784][T10494] 
[  681.126651][T10494]  Possible unsafe locking scenario:
[  681.126651][T10494] 
[  681.134108][T10494]        CPU0                    CPU1
[  681.139479][T10494]        ----                    ----
[  681.144842][T10494]   lock(k-sk_lock-AF_INET);
[  681.149434][T10494]                                lock(sk_lock-AF_INET6);
[  681.156465][T10494]                                lock(k-sk_lock-AF_INET);
[  681.163578][T10494]   lock(fs_reclaim);
[  681.167577][T10494] 
[  681.167577][T10494]  *** DEADLOCK ***
[  681.167577][T10494] 
[  681.175768][T10494] 4 locks held by kworker/u8:11/10494:
[  681.181219][T10494]  #0: ffff888033179940 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  681.192912][T10494]  #1: ffffc9001b45fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  681.205738][T10494]  #2: ffff88805cf42780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930
[  681.216899][T10494]  #3: ffff888051a56a60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  681.226899][T10494] 
[  681.226899][T10494] stack backtrace:
[  681.232789][T10494] CPU: 0 UID: 0 PID: 10494 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  681.232805][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  681.232813][T10494] Workqueue: krds_cp_wq#8/0 rds_connect_worker
[  681.232833][T10494] Call Trace:
[  681.232840][T10494]  <TASK>
[  681.232847][T10494]  dump_stack_lvl+0xe8/0x150
[  681.232861][T10494]  print_circular_bug+0x2e1/0x300
[  681.232875][T10494]  check_noncircular+0x12e/0x150
[  681.232889][T10494]  __lock_acquire+0x15a5/0x2cf0
[  681.232903][T10494]  ? __lock_acquire+0x6b5/0x2cf0
[  681.232914][T10494]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  681.232927][T10494]  lock_acquire+0x106/0x350
[  681.232936][T10494]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  681.232949][T10494]  ? check_noncircular+0xda/0x150
[  681.232962][T10494]  fs_reclaim_acquire+0x71/0x100
[  681.232976][T10494]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  681.232988][T10494]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  681.233001][T10494]  ? __alloc_skb+0x1d0/0x7d0
[  681.233012][T10494]  ? ipv4_default_advmss+0x20/0x340
[  681.233027][T10494]  __alloc_skb+0x1d0/0x7d0
[  681.233039][T10494]  tcp_stream_alloc_skb+0x3f/0x580
[  681.233054][T10494]  ? __asan_memset+0x22/0x50
[  681.233066][T10494]  tcp_connect+0x1570/0x5400
[  681.233086][T10494]  ? get_random_u16+0x139/0x910
[  681.233097][T10494]  ? __pfx_tcp_connect+0x10/0x10
[  681.233113][T10494]  ? __asan_memset+0x22/0x50
[  681.233126][T10494]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  681.233136][T10494]  ? secure_tcp_seq_and_ts_off+0xf2/0x1d0
[  681.233150][T10494]  ? sk_setup_caps+0x9ef/0xc40
[  681.233162][T10494]  ? sk_setup_caps+0x29/0xc40
[  681.233174][T10494]  tcp_v4_connect+0x10f7/0x19b0
[  681.233189][T10494]  ? __pfx_tcp_v4_connect+0x10/0x10
[  681.233197][T10494]  ? inet_csk_get_port+0x1178/0x16d0
[  681.233210][T10494]  ? __local_bh_enable_ip+0xd0/0x130
[  681.233222][T10494]  __inet_stream_connect+0x25a/0xdd0
[  681.233238][T10494]  ? do_raw_spin_lock+0x12b/0x2f0
[  681.233251][T10494]  ? lock_sock_nested+0x6a/0x100
[  681.233260][T10494]  ? __pfx___inet_stream_connect+0x10/0x10
[  681.233273][T10494]  ? inet_stream_connect+0x51/0xa0
[  681.233286][T10494]  ? __local_bh_enable_ip+0xd0/0x130
[  681.233297][T10494]  inet_stream_connect+0x66/0xa0
[  681.233310][T10494]  kernel_connect+0x141/0x1c0
[  681.233324][T10494]  ? __pfx_kernel_connect+0x10/0x10
[  681.233348][T10494]  ? __local_bh_enable_ip+0xd0/0x130
[  681.233359][T10494]  rds_tcp_conn_path_connect+0x6f6/0x930
[  681.233373][T10494]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  681.233383][T10494]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  681.233397][T10494]  ? process_scheduled_works+0xa70/0x1860
[  681.233412][T10494]  ? process_scheduled_works+0xa70/0x1860
[  681.233430][T10494]  rds_connect_worker+0x1d8/0x290
[  681.233450][T10494]  ? process_scheduled_works+0xa70/0x1860
[  681.233465][T10494]  process_scheduled_works+0xb5d/0x1860
[  681.233492][T10494]  ? __pfx_process_scheduled_works+0x10/0x10
[  681.233510][T10494]  ? assign_work+0x3d5/0x5e0
[  681.233521][T10494]  worker_thread+0xa53/0xfc0
[  681.233538][T10494]  kthread+0x388/0x470
[  681.233550][T10494]  ? __pfx_worker_thread+0x10/0x10
[  681.233560][T10494]  ? __pfx_kthread+0x10/0x10
[  681.233572][T10494]  ret_from_fork+0x514/0xb70
[  681.233583][T10494]  ? __pfx_ret_from_fork+0x10/0x10
[  681.233595][T10494]  ? __switch_to+0xc79/0x1410
[  681.233610][T10494]  ? __pfx_kthread+0x10/0x10
[  681.233622][T10494]  ret_from_fork_asm+0x1a/0x30
[  681.233637][T10494]  </TASK>
[  681.578054][ T9433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.630151][T25591] lo speed is unknown, defaulting to 1000
[  681.699469][T25591] lo speed is unknown, defaulting to 1000
[  681.938022][T25551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  681.997855][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  685.127930][ T4989] udevd[4989]: worker [22185] /devices/virtual/block/nbd0 is taking a long time