last executing test programs:

35.826652403s ago: executing program 0 (id=2472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x1a4, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x38, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x38, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x30}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE]}]}, 0x1c8}}, 0x0)

35.55203355s ago: executing program 0 (id=2474):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast]}, 0x48)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0xa}, 0x28) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0xa}, 0x28)
r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000300)={0x48, "8c42f6b5c567701dbd422d439a02353537d66530dbc43d3234c61ff4040908fa9f949f0c0831e9c587fe4f12fe958878b3e5396aad500561025a5642eb2a913d91c3604ff15e2bad5e36c438ff58106876d7c0d753e20f5bab5383f013702528039f68e4bcb14aefc5e56992a13abb5e5f58c5c8add336877b79cccb3c7cef11"}) (async)
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000300)={0x48, "8c42f6b5c567701dbd422d439a02353537d66530dbc43d3234c61ff4040908fa9f949f0c0831e9c587fe4f12fe958878b3e5396aad500561025a5642eb2a913d91c3604ff15e2bad5e36c438ff58106876d7c0d753e20f5bab5383f013702528039f68e4bcb14aefc5e56992a13abb5e5f58c5c8add336877b79cccb3c7cef11"})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000480)="f93030f89171695d634f6ef8fce1d8ab0943569bf63da645819bdaa876ae0c25da4839e0a2cc85716dda5753c5bae60c67de73aaf1438a5ebc4821a22db556f7cf59216bc266ba3f14d3780b935411fc29eddf9b8121fd3dd693", &(0x7f0000000540)=""/20}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="ef7cfe04d845b7d79c8d19144f25d96f7d028784173bff7944fa32b990a231be1a1148fe8081efb08e2076eb1e079b55e39167d02b39dbf84c31e9899bd94f3c9d0f0fea3ca27446ab207d2bafd2ea78ea01df87f84b8f055af689e1bfe51fc7f34e37399b300b2d9e730ea7b734b97be1f0dd17c27037c3c3463d22d281c12f7f344fbcd3d05c19a9eaaa79c955e08692cf165047e3448badb37e8dc3430a828e27bd64d416f84f6462cd994934cca912986afe65bcf578b1705cbea73b591e5bf69142d21e03fa17e1f5cb54857a7f20a0108c9fc35f3c128897cb03dc52a5311f565c677cf8cc", 0xe8}, {&(0x7f00000001c0)="3f7cb7224fa10e7cbac754bc9feb10d1e9594a56162252c60cc62fd23b032849ea741ce300bc06401ca757dbda2173726ba0db173cae51113efdb82cd669f9bc592c6bdb04cddbf937990708ade28b821a4fd88ba25af10daf3decd86157d870dcfad358a4a428", 0x67}], 0x2)

35.167564924s ago: executing program 0 (id=2477):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000900)=@newtclass={0xd08, 0x28, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xfff2}, {0x10, 0x7}, {0xfff1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xca8, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x40, 0x1, 0x40, 0xb7d1, 0x4, 0x3}, {0x3, 0x0, 0xfffe, 0x74b7, 0x1c8, 0x4}, 0x6, 0x0, 0xded}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x2, 0xe, 0x9, 0x2, 0x80000001}, {0x98, 0x0, 0x9, 0x439d, 0x400, 0xeaa}, 0xd, 0x6, 0x7, 0x4968, 0x10000}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0xffffff01, 0x9, 0x6, 0x9, 0x401, 0x9, 0xffffffff, 0x7, 0x4, 0x81, 0x1, 0x4, 0x3ce3, 0x8a, 0xa, 0x5, 0x7fffffff, 0x5, 0x7, 0x5, 0xffffffff, 0xb, 0x10, 0x8, 0x276995d7, 0x40, 0x9, 0x7, 0xffffffff, 0xfffffff7, 0x4, 0x2, 0x6, 0x1, 0x3, 0x2, 0x7, 0x4, 0x4, 0x3, 0x0, 0x4, 0xffffbe97, 0xa2f, 0x7fffffff, 0x1, 0xc015, 0x5, 0xfffffff7, 0x0, 0x10000, 0x5, 0xa, 0x2, 0x80000000, 0x738, 0x0, 0x10000, 0x2c0, 0xcad, 0x0, 0x8, 0x8, 0x0, 0x4, 0x8001, 0x4a7, 0x3, 0xca, 0xffffffff, 0x5, 0x80, 0x6, 0x9aa5, 0x7, 0x8, 0x0, 0x8, 0x9, 0x0, 0xfffffffe, 0x8, 0xffff, 0x5, 0x8c67, 0x4, 0x9, 0x8, 0xffff, 0xffb1, 0xfffffff0, 0x7fff, 0x0, 0x9, 0x6, 0x5, 0x58, 0xe6f4, 0xfffffffe, 0xcc06, 0xe, 0xf10, 0x9, 0x1000, 0x6, 0x1, 0xa, 0x0, 0x7ff, 0x131, 0x80000001, 0x1, 0x81, 0x7, 0x7, 0x9, 0x2, 0x9, 0x10001, 0x0, 0x9, 0xd310, 0x8, 0x5, 0x1, 0x1, 0x4, 0x401, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xfff, 0x38, 0x9, 0x0, 0x3, 0x2, 0x4, 0x5, 0x7, 0x9, 0x401, 0x242a, 0x8, 0xfff, 0x3, 0xa7, 0x80, 0x400, 0xa0, 0x6, 0x7ff, 0x9, 0x50, 0x0, 0xa, 0xffff, 0x7, 0xfff, 0x8, 0x4, 0x9, 0x100, 0x2f, 0x1000, 0x10, 0xd, 0x5, 0x9, 0xd, 0x3, 0x0, 0x9, 0x8, 0x0, 0x3, 0xfffffff9, 0x2, 0x9, 0x2, 0x4, 0x10, 0x80000001, 0xfffffff9, 0xfffffffa, 0x3, 0x9, 0x3, 0x6f8, 0xffffff30, 0xdb7e, 0xa, 0x7, 0x6, 0x6, 0x2, 0x4, 0x3ff, 0x0, 0x8, 0x7b1, 0x0, 0x3, 0x100, 0xffffffff, 0x2, 0x8, 0x236, 0x10001, 0x1, 0x2, 0x48, 0xffffbec3, 0x0, 0x5, 0x3, 0x9, 0x9, 0x7, 0x1, 0xff, 0x80000001, 0x4, 0x1, 0xfeb, 0x2, 0x3, 0xe, 0xfffffff9, 0x2, 0x6, 0x3, 0xffffff3f, 0x80000000, 0x1ff, 0x1, 0x8, 0x7, 0x2, 0xd41f, 0x3, 0xd29, 0xab0, 0x2, 0x20000, 0xfffffe01, 0x8000, 0x7, 0xfffffff7, 0x51, 0x7, 0x3]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0xfff, 0xe329, 0x5, 0xfffffffd}, {0x1, 0x0, 0x8000, 0x2, 0x5, 0xfff}, 0x7, 0x5, 0x2, 0x4, 0x400}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x7, 0x1, 0x5ba, 0x0, 0x2, 0x2, 0x5e8, 0x7, 0x1, 0x1, 0x135, 0x6, 0x0, 0x2, 0x3, 0x5, 0xffff, 0x1, 0x3, 0x1, 0x7, 0xf9f, 0x8, 0xc, 0x7, 0x3, 0x6, 0x5000, 0xffff, 0x1ff, 0x4, 0xfff, 0x5d, 0xa0d, 0x3, 0x7, 0x5, 0x80, 0x0, 0x6, 0x1800000, 0xfff, 0xca99, 0x6, 0x10000, 0xfffffffc, 0x0, 0x0, 0x8, 0xd7, 0x7, 0x0, 0x10, 0x40, 0x7, 0x0, 0x8, 0x7, 0x7fffffff, 0xe, 0x8001, 0x6, 0x7, 0x5, 0x7, 0xb, 0x7, 0xa, 0xffffffff, 0x9, 0x8, 0xffff8001, 0x0, 0x8, 0x6, 0x5, 0x8, 0x0, 0x2, 0x3, 0x2, 0x2, 0x0, 0xff, 0x8, 0x1, 0x40b5f670, 0x6, 0xa3, 0x8, 0x7, 0x7f, 0x1, 0x200, 0x4, 0x9, 0x4, 0x2, 0xe, 0x3, 0x9c, 0x54, 0x8, 0x7ff, 0x8, 0x4, 0x1, 0xed3, 0x6, 0x2, 0x4, 0x25, 0x80, 0x5, 0x2, 0x5, 0x10, 0x101, 0x88, 0x0, 0xa88f, 0x7fff, 0x4c2, 0x8, 0xe, 0x10001, 0x7, 0x6, 0x8, 0x4, 0x80000001, 0x8, 0x49, 0x8000, 0x3f, 0x436a, 0x7, 0x9, 0x9, 0x7f, 0x740, 0x2, 0x9, 0x2, 0x3, 0x9, 0x9, 0x949, 0xc, 0x2d, 0xb, 0xffffffff, 0x4, 0x7fff, 0x7, 0x3ff, 0x4, 0x3, 0xa1c, 0xa8c, 0x8, 0x80, 0x5, 0x8, 0x6, 0x40, 0x2, 0x9, 0x6, 0x99, 0x81, 0x7, 0x7, 0x10, 0x0, 0xb99, 0xffffd532, 0x10000, 0x3, 0x8, 0x4, 0xf, 0x4, 0x800, 0x2, 0x1, 0x9, 0x9, 0x8, 0x50eaee2a, 0x3, 0x8, 0x100, 0x401, 0x6, 0x6d, 0x1, 0x3c2, 0x100, 0x84, 0x81a, 0xf77, 0x9, 0x5, 0x1, 0x800, 0xe, 0x0, 0x8, 0x8, 0x80000001, 0x9, 0x1, 0x0, 0x9, 0x8, 0xfffffff3, 0x8, 0x3, 0x5, 0x2, 0xb, 0xffff, 0x3, 0x9, 0x4, 0x8, 0xfffffff9, 0x9, 0x4, 0x9, 0x6, 0x2, 0xbf, 0x3, 0x80000001, 0x200, 0xba8b, 0xcbe4, 0x8, 0x9, 0x7, 0xfffffff8, 0x9, 0x7, 0xfffffffe, 0x3, 0x1, 0x1, 0x8, 0x3, 0x5, 0xfffffffd, 0x7fff, 0x39]}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff9, 0x7, 0x0, 0x9, 0xcc, 0xfffffff5, 0x9, 0x1000, 0x2, 0x5, 0xa, 0x711, 0x1, 0x7fff, 0x8000, 0x0, 0x2, 0x200, 0xef, 0x101, 0x3, 0x7, 0x8000, 0x1, 0x441, 0x1, 0x2000000, 0x3, 0x4, 0x8000, 0x1, 0x8, 0xff, 0x0, 0x1, 0x1, 0x8, 0x2, 0x406, 0x1000, 0x4, 0x5f, 0x4, 0x3, 0x8df, 0x3, 0x5, 0xd8, 0x9, 0x6, 0xffffe253, 0x2, 0x3, 0xf2a2, 0x1609, 0x7, 0x10, 0x7be4, 0xffffffff, 0x8001, 0x8, 0x400, 0x7fffffff, 0x3, 0x650, 0x5, 0xfff, 0x2, 0x8, 0x6, 0x9, 0x8e74, 0x10001, 0x10001, 0x9, 0x2, 0x6e, 0x2ef43447, 0x0, 0x1000, 0x2, 0x4, 0xfffff800, 0x8, 0x0, 0x7, 0x8, 0x9, 0x3, 0x8000, 0x9, 0x5, 0x9, 0x8, 0x5, 0x2, 0x9, 0x10, 0x1, 0xa201, 0xfffffff7, 0x80000000, 0x6, 0x5, 0x6, 0x2, 0xffffffd7, 0x7304, 0x5, 0x1ff, 0x8f4c, 0x3552, 0x0, 0x1, 0x800, 0x0, 0x4, 0x1, 0x556, 0x6, 0x3, 0x6, 0x7, 0x80000001, 0x0, 0xe5, 0x7ff, 0x0, 0xeae, 0xffff7fff, 0x8, 0x9, 0x9, 0x8, 0x3, 0x700, 0x81, 0x765, 0x5, 0xa, 0xfde8, 0x2, 0x10001, 0x10, 0xa1b0, 0x5, 0x7049, 0xffff7fff, 0x4, 0x80, 0x1ff, 0x80000000, 0x5, 0x5, 0xa495, 0x456, 0x2, 0xe2f, 0x1, 0x92, 0x1, 0x7, 0x401, 0xeee, 0xfffffff8, 0x2, 0xfffffff1, 0x9958, 0xd, 0x1, 0xfffffff9, 0xb, 0x50000000, 0x8, 0x8f, 0xfffff39c, 0x337e4b5f, 0x8, 0x6, 0xb, 0xd, 0x2, 0x1000, 0x3, 0xa1, 0x2, 0x4, 0x3, 0x1, 0x80000000, 0x4, 0xd, 0x5, 0x7, 0x3, 0x1, 0x5, 0x10000, 0x7, 0x200, 0x10, 0x1, 0x401, 0x6, 0x4, 0x8, 0x0, 0x52, 0x7fff, 0x7, 0xffff, 0x7fff, 0x2, 0xdc8a, 0x8, 0xff, 0x8b, 0x1, 0xb988, 0x9, 0x400, 0x0, 0x40e, 0x8, 0x609acc88, 0x1f, 0x4, 0x7ff, 0x4, 0x2, 0x6, 0x1, 0x8201, 0x100, 0x3ff, 0x101, 0x7, 0x4, 0x99e, 0x5, 0x1, 0x15, 0x6, 0x34e, 0x200, 0x3, 0x5, 0x4, 0x1, 0x6, 0x10, 0xfff, 0x0, 0x1, 0xe, 0x3]}]}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xd08}}, 0x8004)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040001)
socket(0x400000000010, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x78)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x40045}], 0x1, 0x0)

33.716253322s ago: executing program 2 (id=2488):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000040000000050a11020000000000000000010020000c00024000000000000000010900010073797a310000000014000480080002"], 0xdc}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000301010200000000000000000200000106001240000100000c00018006000340000700000c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x7ffffffe}, 0x8}, 0x94)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0xfffff66c, {{0xa, 0x4e21, 0x8, @remote, 0xc7a}}, 0x0, 0x6, [{{0xa, 0x4e20, 0x9, @remote}}, {{0xa, 0x4e20, 0x7f, @mcast1, 0xb01}}, {{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7a}}, {{0xa, 0x4e21, 0x5, @private2, 0xff}}, {{0xa, 0x4e20, 0x4, @empty, 0x9}}, {{0xa, 0x4e22, 0xd0, @empty, 0x9}}]}, 0x390)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r5=>0x0})
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="b6037ffa812b3ecd8841e207ab6520d213f96743912e748ff531880c75a4f3d593f5e4beeec4d4483d6fd2c76ecf38da35ec336846317c6543a626832bd4c94e37866990c376663ad8cd43517b7079ddc8c7291ef89ea4557c86cd", 0x5b}], 0x1}}], 0x1, 0xc0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000e40)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010100, 0x0, 0x5, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x800, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x8d86}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0xa, @in=@remote, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc0200000000000000000000000000fdfffc0000000200000a00e0801d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$inet(r1, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f741547", 0x23, 0x14008885, 0x0, 0x0)
pipe(&(0x7f0000000580)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000600), 0x4)

32.897543419s ago: executing program 2 (id=2489):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
unshare(0x600)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getpeername(r2, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'virt_wifi0\x00', 0x20})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e0ffffffffffffff000000000000000000000048871edba7dc35ecb03fcf789a0fc52ab053593285f9"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468", @ANYRESOCT, @ANYRESHEX=r1], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0xffff}, {0x7}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

31.748389773s ago: executing program 4 (id=2492):
socket$packet(0x11, 0x3, 0x300)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x814)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$netlink(r3, &(0x7f0000000000), &(0x7f0000000080)=0xc)
r4 = socket(0x2, 0x80805, 0x2)
sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
close(0x3)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x3676b09ea1652010}, 0x40000)
unshare(0x66000080)

28.600425145s ago: executing program 4 (id=2504):
unshare(0x2c020400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000500)={<r2=>r1, 0x8, 0x94, 0x6})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xc0, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0x4, &(0x7f0000000440)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffdc, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000480)='GPL\x00', 0x2751, 0x12, &(0x7f00000004c0)=""/18, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x10, 0x3ff, 0x8d}, 0x10, r3, r1, 0x0, &(0x7f0000000940)=[r4, r1], 0x0, 0x10, 0x80000001}, 0x94)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)

28.499979591s ago: executing program 4 (id=2506):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x7f, 0x4e21, 0x400, 0xa, 0xa0, 0x20, 0x3a, 0x0, r1}, {0x4, 0x0, 0x90, 0xb, 0x0, 0x749, 0x9, 0x4}, {0x10000, 0x5, 0xecc5, 0x10}, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x4, 0x1, 0x2, 0x4, 0x1, 0x8}}, 0xe8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) (async)
accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) (async)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x7f, 0x4e21, 0x400, 0xa, 0xa0, 0x20, 0x3a, 0x0, r1}, {0x4, 0x0, 0x90, 0xb, 0x0, 0x749, 0x9, 0x4}, {0x10000, 0x5, 0xecc5, 0x10}, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@local, 0x4d6, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x4, 0x1, 0x2, 0x4, 0x1, 0x8}}, 0xe8) (async)

28.439501096s ago: executing program 4 (id=2507):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]}, 0x48)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fffc6"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)

28.276034795s ago: executing program 4 (id=2508):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x58}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c0006907864010101ac1414aa00004e2200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c80000090780000030303"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r4, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65", 0x6c}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319a", 0xac}, {&(0x7f0000001400)="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", 0x75e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd", 0x80}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

28.057465504s ago: executing program 0 (id=2510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d70002400028008000140654a00041000038009000100701e1630b7000000080002"], 0x88}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r7, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r9=>r1})
setsockopt$rose(r9, 0x104, 0x1, &(0x7f0000000140)=0x6, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

27.272238399s ago: executing program 4 (id=2514):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
unshare(0x20000400)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_int(r0, 0x1, 0x6c8e185fc83e5d67, 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {0x0, 0x40000}, {}, {}]}, 0x78)

27.158938665s ago: executing program 2 (id=2516):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x102}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r0, r1, 0x0, 0x100000000)

27.040180069s ago: executing program 0 (id=2517):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0xd0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

27.006118581s ago: executing program 2 (id=2519):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

26.899070038s ago: executing program 0 (id=2520):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000900)=@newtclass={0xd08, 0x28, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xfff2}, {0x10, 0x7}, {0xfff1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xca8, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x40, 0x1, 0x40, 0xb7d1, 0x4, 0x3}, {0x3, 0x0, 0xfffe, 0x74b7, 0x1c8, 0x4}, 0x6, 0x0, 0xded}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x2, 0xe, 0x9, 0x2, 0x80000001}, {0x98, 0x0, 0x9, 0x439d, 0x400, 0xeaa}, 0xd, 0x6, 0x7, 0x4968, 0x10000}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0xffffff01, 0x9, 0x6, 0x9, 0x401, 0x9, 0xffffffff, 0x7, 0x4, 0x81, 0x1, 0x4, 0x3ce3, 0x8a, 0xa, 0x5, 0x7fffffff, 0x5, 0x7, 0x5, 0xffffffff, 0xb, 0x10, 0x8, 0x276995d7, 0x40, 0x9, 0x7, 0xffffffff, 0xfffffff7, 0x4, 0x2, 0x6, 0x1, 0x3, 0x2, 0x7, 0x4, 0x4, 0x3, 0x0, 0x4, 0xffffbe97, 0xa2f, 0x7fffffff, 0x1, 0xc015, 0x5, 0xfffffff7, 0x0, 0x10000, 0x5, 0xa, 0x2, 0x80000000, 0x738, 0x0, 0x10000, 0x2c0, 0xcad, 0x0, 0x8, 0x8, 0x0, 0x4, 0x8001, 0x4a7, 0x3, 0xca, 0xffffffff, 0x5, 0x80, 0x6, 0x9aa5, 0x7, 0x8, 0x0, 0x8, 0x9, 0x0, 0xfffffffe, 0x8, 0xffff, 0x5, 0x8c67, 0x4, 0x9, 0x8, 0xffff, 0xffb1, 0xfffffff0, 0x7fff, 0x0, 0x9, 0x6, 0x5, 0x58, 0xe6f4, 0xfffffffe, 0xcc06, 0xe, 0xf10, 0x9, 0x1000, 0x6, 0x1, 0xa, 0x0, 0x7ff, 0x131, 0x80000001, 0x1, 0x81, 0x7, 0x7, 0x9, 0x2, 0x9, 0x10001, 0x0, 0x9, 0xd310, 0x8, 0x5, 0x1, 0x1, 0x4, 0x401, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xfff, 0x38, 0x9, 0x0, 0x3, 0x2, 0x4, 0x5, 0x7, 0x9, 0x401, 0x242a, 0x8, 0xfff, 0x3, 0xa7, 0x80, 0x400, 0xa0, 0x6, 0x7ff, 0x9, 0x50, 0x0, 0xa, 0xffff, 0x7, 0xfff, 0x8, 0x4, 0x9, 0x100, 0x2f, 0x1000, 0x10, 0xd, 0x5, 0x9, 0xd, 0x3, 0x0, 0x9, 0x8, 0x0, 0x3, 0xfffffff9, 0x2, 0x9, 0x2, 0x4, 0x10, 0x80000001, 0xfffffff9, 0xfffffffa, 0x3, 0x9, 0x3, 0x6f8, 0xffffff30, 0xdb7e, 0xa, 0x7, 0x6, 0x6, 0x2, 0x4, 0x3ff, 0x0, 0x8, 0x7b1, 0x0, 0x3, 0x100, 0xffffffff, 0x2, 0x8, 0x236, 0x10001, 0x1, 0x2, 0x48, 0xffffbec3, 0x0, 0x5, 0x3, 0x9, 0x9, 0x7, 0x1, 0xff, 0x80000001, 0x4, 0x1, 0xfeb, 0x2, 0x3, 0xe, 0xfffffff9, 0x2, 0x6, 0x3, 0xffffff3f, 0x80000000, 0x1ff, 0x1, 0x8, 0x7, 0x2, 0xd41f, 0x3, 0xd29, 0xab0, 0x2, 0x20000, 0xfffffe01, 0x8000, 0x7, 0xfffffff7, 0x51, 0x7, 0x3]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0xfff, 0xe329, 0x5, 0xfffffffd}, {0x1, 0x0, 0x8000, 0x2, 0x5, 0xfff}, 0x7, 0x5, 0x2, 0x4, 0x400}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x7, 0x1, 0x5ba, 0x0, 0x2, 0x2, 0x5e8, 0x7, 0x1, 0x1, 0x135, 0x6, 0x0, 0x2, 0x3, 0x5, 0xffff, 0x1, 0x3, 0x1, 0x7, 0xf9f, 0x8, 0xc, 0x7, 0x3, 0x6, 0x5000, 0xffff, 0x1ff, 0x4, 0xfff, 0x5d, 0xa0d, 0x3, 0x7, 0x5, 0x80, 0x0, 0x6, 0x1800000, 0xfff, 0xca99, 0x6, 0x10000, 0xfffffffc, 0x0, 0x0, 0x8, 0xd7, 0x7, 0x0, 0x10, 0x40, 0x7, 0x0, 0x8, 0x7, 0x7fffffff, 0xe, 0x8001, 0x6, 0x7, 0x5, 0x7, 0xb, 0x7, 0xa, 0xffffffff, 0x9, 0x8, 0xffff8001, 0x0, 0x8, 0x6, 0x5, 0x8, 0x0, 0x2, 0x3, 0x2, 0x2, 0x0, 0xff, 0x8, 0x1, 0x40b5f670, 0x6, 0xa3, 0x8, 0x7, 0x7f, 0x1, 0x200, 0x4, 0x9, 0x4, 0x2, 0xe, 0x3, 0x9c, 0x54, 0x8, 0x7ff, 0x8, 0x4, 0x1, 0xed3, 0x6, 0x2, 0x4, 0x25, 0x80, 0x5, 0x2, 0x5, 0x10, 0x101, 0x88, 0x0, 0xa88f, 0x7fff, 0x4c2, 0x8, 0xe, 0x10001, 0x7, 0x6, 0x8, 0x4, 0x80000001, 0x8, 0x49, 0x8000, 0x3f, 0x436a, 0x7, 0x9, 0x9, 0x7f, 0x740, 0x2, 0x9, 0x2, 0x3, 0x9, 0x9, 0x949, 0xc, 0x2d, 0xb, 0xffffffff, 0x4, 0x7fff, 0x7, 0x3ff, 0x4, 0x3, 0xa1c, 0xa8c, 0x8, 0x80, 0x5, 0x8, 0x6, 0x40, 0x2, 0x9, 0x6, 0x99, 0x81, 0x7, 0x7, 0x10, 0x0, 0xb99, 0xffffd532, 0x10000, 0x3, 0x8, 0x4, 0xf, 0x4, 0x800, 0x2, 0x1, 0x9, 0x9, 0x8, 0x50eaee2a, 0x3, 0x8, 0x100, 0x401, 0x6, 0x6d, 0x1, 0x3c2, 0x100, 0x84, 0x81a, 0xf77, 0x9, 0x5, 0x1, 0x800, 0xe, 0x0, 0x8, 0x8, 0x80000001, 0x9, 0x1, 0x0, 0x9, 0x8, 0xfffffff3, 0x8, 0x3, 0x5, 0x2, 0xb, 0xffff, 0x3, 0x9, 0x4, 0x8, 0xfffffff9, 0x9, 0x4, 0x9, 0x6, 0x2, 0xbf, 0x3, 0x80000001, 0x200, 0xba8b, 0xcbe4, 0x8, 0x9, 0x7, 0xfffffff8, 0x9, 0x7, 0xfffffffe, 0x3, 0x1, 0x1, 0x8, 0x3, 0x5, 0xfffffffd, 0x7fff, 0x39]}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff9, 0x7, 0x0, 0x9, 0xcc, 0xfffffff5, 0x9, 0x1000, 0x2, 0x5, 0xa, 0x711, 0x1, 0x7fff, 0x8000, 0x0, 0x2, 0x200, 0xef, 0x101, 0x3, 0x7, 0x8000, 0x1, 0x441, 0x1, 0x2000000, 0x3, 0x4, 0x8000, 0x1, 0x8, 0xff, 0x0, 0x1, 0x1, 0x8, 0x2, 0x406, 0x1000, 0x4, 0x5f, 0x4, 0x3, 0x8df, 0x3, 0x5, 0xd8, 0x9, 0x6, 0xffffe253, 0x2, 0x3, 0xf2a2, 0x1609, 0x7, 0x10, 0x7be4, 0xffffffff, 0x8001, 0x8, 0x400, 0x7fffffff, 0x3, 0x650, 0x5, 0xfff, 0x2, 0x8, 0x6, 0x9, 0x8e74, 0x10001, 0x10001, 0x9, 0x2, 0x6e, 0x2ef43447, 0x0, 0x1000, 0x2, 0x4, 0xfffff800, 0x8, 0x0, 0x7, 0x8, 0x9, 0x3, 0x8000, 0x9, 0x5, 0x9, 0x8, 0x5, 0x2, 0x9, 0x10, 0x1, 0xa201, 0xfffffff7, 0x80000000, 0x6, 0x5, 0x6, 0x2, 0xffffffd7, 0x7304, 0x5, 0x1ff, 0x8f4c, 0x3552, 0x0, 0x1, 0x800, 0x0, 0x4, 0x1, 0x556, 0x6, 0x3, 0x6, 0x7, 0x80000001, 0x0, 0xe5, 0x7ff, 0x0, 0xeae, 0xffff7fff, 0x8, 0x9, 0x9, 0x8, 0x3, 0x700, 0x81, 0x765, 0x5, 0xa, 0xfde8, 0x2, 0x10001, 0x10, 0xa1b0, 0x5, 0x7049, 0xffff7fff, 0x4, 0x80, 0x1ff, 0x80000000, 0x5, 0x5, 0xa495, 0x456, 0x2, 0xe2f, 0x1, 0x92, 0x1, 0x7, 0x401, 0xeee, 0xfffffff8, 0x2, 0xfffffff1, 0x9958, 0xd, 0x1, 0xfffffff9, 0xb, 0x50000000, 0x8, 0x8f, 0xfffff39c, 0x337e4b5f, 0x8, 0x6, 0xb, 0xd, 0x2, 0x1000, 0x3, 0xa1, 0x2, 0x4, 0x3, 0x1, 0x80000000, 0x4, 0xd, 0x5, 0x7, 0x3, 0x1, 0x5, 0x10000, 0x7, 0x200, 0x10, 0x1, 0x401, 0x6, 0x4, 0x8, 0x0, 0x52, 0x7fff, 0x7, 0xffff, 0x7fff, 0x2, 0xdc8a, 0x8, 0xff, 0x8b, 0x1, 0xb988, 0x9, 0x400, 0x0, 0x40e, 0x8, 0x609acc88, 0x1f, 0x4, 0x7ff, 0x4, 0x2, 0x6, 0x1, 0x8201, 0x100, 0x3ff, 0x101, 0x7, 0x4, 0x99e, 0x5, 0x1, 0x15, 0x6, 0x34e, 0x200, 0x3, 0x5, 0x4, 0x1, 0x6, 0x10, 0xfff, 0x0, 0x1, 0xe, 0x3]}]}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xd08}}, 0x8004)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040001)
socket(0x400000000010, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x78)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x40045}], 0x1, 0x0)

26.768138341s ago: executing program 2 (id=2522):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32, @ANYBLOB="010000000000000000000100000008000100000000000400048004000c80080002000100000018000880140007800800050008000600"], 0x44}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$packet(0x11, 0x3, 0x300)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)

26.195912039s ago: executing program 2 (id=2527):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

26.067219216s ago: executing program 1 (id=2530):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x2010000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

25.980427284s ago: executing program 1 (id=2532):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000080)=""/205, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x7, 0x10000, 0x4}, 0x10, 0x2fd70, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000200)=[{0x2, 0x2, 0x8, 0x5}, {0x5, 0x2, 0x9}, {0x2, 0x3, 0x4, 0xb}, {0x1, 0x5, 0x1, 0x5}, {0x0, 0x4, 0x0, 0x8}, {0x4, 0x5, 0xe, 0x4}, {0x5, 0x1, 0xc, 0x6}, {0x0, 0x5, 0x4, 0x1}, {0x0, 0x4, 0xb, 0xb}], 0x10, 0x8000}, 0x94)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000380))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x40000c0)
r3 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000500)={'macvlan1\x00', {0x2, 0x4e21, @multicast2}})
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000540))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-010d \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000640)={'vxcan0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1d, 0x25, 0x9, 0x1ff, 0x2000, r4, 0x5, '\x00', r5, r6, 0x5, 0x3, 0x5}, 0x50)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000740)={0x1f, 0x800, @none, 0x5018, 0x1}, 0xe)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r7, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0xfffffff8, <r10=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x35d6531d52f13e96, 0x24, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @jmp={0x5, 0x1, 0x8, 0xa, 0x4, 0x80}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x38, '\x00', r5, @fallback=0x24, r6, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x1, 0x0, 0x100}, 0x10, r10, r0, 0x0, &(0x7f0000000a00)=[r4, r7, r4], 0x0, 0x10, 0x2}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b80)={'sit0\x00', <r12=>r5, 0x80, 0x40, 0x2, 0xfff, {{0x6, 0x4, 0x3, 0xa, 0x18, 0x67, 0x0, 0x8, 0x29, 0x0, @local, @loopback, {[@generic={0x94, 0x4, "b21a"}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2dc, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x2dc}}, 0x4004000)
ioctl$FICLONE(r8, 0x40049409, r9)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002080)={r6, 0x20, &(0x7f0000002040)={&(0x7f0000001000)=""/59, 0x3b, 0x0, &(0x7f0000001040)=""/4096, 0x1000}}, 0x10)
sendto(r3, &(0x7f00000020c0)="50f2f0c893cf6f49abfaba85a564edf9c96c4a5cedff0776ef94d20c97998ac018c74240543c76eb07e3885b9652d33b2f7406f142a53e276d8148a52cd3bd4459d7d924837e2f4a2eccb11ec9b6fd056b6eef6af8c480cba24410155c7ee02feca9870ce4486b860d7163c6a1f00e709825cefd4990cda18335606a8776eb7ece4a6873227349948915b172a73a634a83318f67b4a7f372725d2bffeac358", 0x9f, 0x4000010, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000002180)={<r14=>0x0, 0x3, 0x3, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002580)={r14, "15410d6db5f0919d5de1ffd8419491aa"})
r15 = accept4(0xffffffffffffffff, &(0x7f0000003580)=@l2tp, &(0x7f0000003600)=0x80, 0x800)
setsockopt$ax25_SO_BINDTODEVICE(r15, 0x101, 0x19, &(0x7f0000003640)=@rose={'rose', 0x0}, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r15, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x53}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

25.903309984s ago: executing program 1 (id=2533):
unshare(0x2c020400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

25.600188673s ago: executing program 1 (id=2534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000", @ANYRES64], 0x54}}, 0x4004854)

25.453514295s ago: executing program 1 (id=2535):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8)
r0 = socket$inet6(0xa, 0x3, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x1)
close(0x3)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r4 = socket(0x2, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xffffffffffffff3c, &(0x7f00000001c0)=[{&(0x7f0000000080)="1303", 0x2}], 0x1}, 0x4051)
recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r8}, 0x18)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x3, 0x1, 0x20000a0de, 0x40000000000086, 0x4, 0x200000003, 0x400}, {0x40000000000005, 0x80000000000000}, 0xc1, 0x6e6bb2, 0x2, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x3506, 0x1, 0x1, 0x0, 0x9075, 0xfffffffe, 0xfffffffd}}, 0xe8)

25.070035437s ago: executing program 3 (id=2536):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000ed2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000002680))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

24.92871092s ago: executing program 3 (id=2537):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32, @ANYBLOB="010000000000000000000100000008000100000000000400048004000c80080002000100000018000880140007800800050008000600"], 0x44}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)

24.588608623s ago: executing program 3 (id=2538):
unshare(0x2c020400)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0)

24.474789863s ago: executing program 1 (id=2539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
shutdown(0xffffffffffffffff, 0x1) (rerun: 32)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @multicast1}, <r6=>0x0}, &(0x7f0000000180)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x124, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9ca1489be1e15692}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async, rerun: 64)
recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async, rerun: 64)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 64)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmmsg$sock(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90)

24.44884492s ago: executing program 3 (id=2540):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd7d, &(0x7f0000000740)={@multicast, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "b54b11", 0xd47, 0x6, 0x1, @local, @remote, {[@dstopts={0x21, 0x184, '\x00', [@ra={0x5, 0x2, 0x5}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @pad1, @ra, @generic={0x4, 0xc0b, "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"}]}, @hopopts={0x2f}, @dstopts={0x3b}], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x9, 0x0, 0x81, {[@exp_fastopen={0xfe, 0x8, 0xf989, "cb805c28"}]}}, {"1cc0f18e0bc089ad96eed8e9467bd43f85b0227b72003f49dd4d3c4adea39da14e3ea46d8079fdfed603694ff026b84803c96656d1607ca8cc594755e7e081f38d674598dc7554bc30371080597a73e2679d100d8cd17f7f07f1eb37aa58c6ad5bd61dd5699bfc77ff6d88971bf1c001b8bace11da2e283053cbeec2c26ed9e9b969f7a813147c938a4083cd3195fcd1b4d93f270a09ffdba099c92625e8d4a6fff5c810a074467d0ccaa93a86e559f545c18b9145e18256def39a9f3e649341f749f4bfdbb3ffec3a2ffb4a7be35d0e1721c83944ebf8f3418b83088f6449be3568867e0ecd63bae08518"}}}}}}}, 0x0)

19.461651554s ago: executing program 3 (id=2541):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000)

16.004650896s ago: executing program 3 (id=2542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000bebc813e8478c8ac8c62b5f6e6e89825bf5d15f95e4ea8e9bf330198cfdb926ef2b99f176713806f9208f00a97c5ff6c5b4278405a6edc74f14864", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x50000)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xf62}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0003000002000000000000000000"], 0x14}}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r11], 0x20}}, 0x2000c004)
close(r8)

11.203355299s ago: executing program 32 (id=2514):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
unshare(0x20000400)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_int(r0, 0x1, 0x6c8e185fc83e5d67, 0x0, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {0x0, 0x40000}, {}, {}]}, 0x78)

10.303033967s ago: executing program 33 (id=2520):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000900)=@newtclass={0xd08, 0x28, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0xfff2}, {0x10, 0x7}, {0xfff1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xca8, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x40, 0x1, 0x40, 0xb7d1, 0x4, 0x3}, {0x3, 0x0, 0xfffe, 0x74b7, 0x1c8, 0x4}, 0x6, 0x0, 0xded}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x2, 0xe, 0x9, 0x2, 0x80000001}, {0x98, 0x0, 0x9, 0x439d, 0x400, 0xeaa}, 0xd, 0x6, 0x7, 0x4968, 0x10000}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0xffffff01, 0x9, 0x6, 0x9, 0x401, 0x9, 0xffffffff, 0x7, 0x4, 0x81, 0x1, 0x4, 0x3ce3, 0x8a, 0xa, 0x5, 0x7fffffff, 0x5, 0x7, 0x5, 0xffffffff, 0xb, 0x10, 0x8, 0x276995d7, 0x40, 0x9, 0x7, 0xffffffff, 0xfffffff7, 0x4, 0x2, 0x6, 0x1, 0x3, 0x2, 0x7, 0x4, 0x4, 0x3, 0x0, 0x4, 0xffffbe97, 0xa2f, 0x7fffffff, 0x1, 0xc015, 0x5, 0xfffffff7, 0x0, 0x10000, 0x5, 0xa, 0x2, 0x80000000, 0x738, 0x0, 0x10000, 0x2c0, 0xcad, 0x0, 0x8, 0x8, 0x0, 0x4, 0x8001, 0x4a7, 0x3, 0xca, 0xffffffff, 0x5, 0x80, 0x6, 0x9aa5, 0x7, 0x8, 0x0, 0x8, 0x9, 0x0, 0xfffffffe, 0x8, 0xffff, 0x5, 0x8c67, 0x4, 0x9, 0x8, 0xffff, 0xffb1, 0xfffffff0, 0x7fff, 0x0, 0x9, 0x6, 0x5, 0x58, 0xe6f4, 0xfffffffe, 0xcc06, 0xe, 0xf10, 0x9, 0x1000, 0x6, 0x1, 0xa, 0x0, 0x7ff, 0x131, 0x80000001, 0x1, 0x81, 0x7, 0x7, 0x9, 0x2, 0x9, 0x10001, 0x0, 0x9, 0xd310, 0x8, 0x5, 0x1, 0x1, 0x4, 0x401, 0x8, 0x3, 0x9, 0x1, 0x3, 0x4, 0xfff, 0x38, 0x9, 0x0, 0x3, 0x2, 0x4, 0x5, 0x7, 0x9, 0x401, 0x242a, 0x8, 0xfff, 0x3, 0xa7, 0x80, 0x400, 0xa0, 0x6, 0x7ff, 0x9, 0x50, 0x0, 0xa, 0xffff, 0x7, 0xfff, 0x8, 0x4, 0x9, 0x100, 0x2f, 0x1000, 0x10, 0xd, 0x5, 0x9, 0xd, 0x3, 0x0, 0x9, 0x8, 0x0, 0x3, 0xfffffff9, 0x2, 0x9, 0x2, 0x4, 0x10, 0x80000001, 0xfffffff9, 0xfffffffa, 0x3, 0x9, 0x3, 0x6f8, 0xffffff30, 0xdb7e, 0xa, 0x7, 0x6, 0x6, 0x2, 0x4, 0x3ff, 0x0, 0x8, 0x7b1, 0x0, 0x3, 0x100, 0xffffffff, 0x2, 0x8, 0x236, 0x10001, 0x1, 0x2, 0x48, 0xffffbec3, 0x0, 0x5, 0x3, 0x9, 0x9, 0x7, 0x1, 0xff, 0x80000001, 0x4, 0x1, 0xfeb, 0x2, 0x3, 0xe, 0xfffffff9, 0x2, 0x6, 0x3, 0xffffff3f, 0x80000000, 0x1ff, 0x1, 0x8, 0x7, 0x2, 0xd41f, 0x3, 0xd29, 0xab0, 0x2, 0x20000, 0xfffffe01, 0x8000, 0x7, 0xfffffff7, 0x51, 0x7, 0x3]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x1, 0xfff, 0xe329, 0x5, 0xfffffffd}, {0x1, 0x0, 0x8000, 0x2, 0x5, 0xfff}, 0x7, 0x5, 0x2, 0x4, 0x400}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x7, 0x1, 0x5ba, 0x0, 0x2, 0x2, 0x5e8, 0x7, 0x1, 0x1, 0x135, 0x6, 0x0, 0x2, 0x3, 0x5, 0xffff, 0x1, 0x3, 0x1, 0x7, 0xf9f, 0x8, 0xc, 0x7, 0x3, 0x6, 0x5000, 0xffff, 0x1ff, 0x4, 0xfff, 0x5d, 0xa0d, 0x3, 0x7, 0x5, 0x80, 0x0, 0x6, 0x1800000, 0xfff, 0xca99, 0x6, 0x10000, 0xfffffffc, 0x0, 0x0, 0x8, 0xd7, 0x7, 0x0, 0x10, 0x40, 0x7, 0x0, 0x8, 0x7, 0x7fffffff, 0xe, 0x8001, 0x6, 0x7, 0x5, 0x7, 0xb, 0x7, 0xa, 0xffffffff, 0x9, 0x8, 0xffff8001, 0x0, 0x8, 0x6, 0x5, 0x8, 0x0, 0x2, 0x3, 0x2, 0x2, 0x0, 0xff, 0x8, 0x1, 0x40b5f670, 0x6, 0xa3, 0x8, 0x7, 0x7f, 0x1, 0x200, 0x4, 0x9, 0x4, 0x2, 0xe, 0x3, 0x9c, 0x54, 0x8, 0x7ff, 0x8, 0x4, 0x1, 0xed3, 0x6, 0x2, 0x4, 0x25, 0x80, 0x5, 0x2, 0x5, 0x10, 0x101, 0x88, 0x0, 0xa88f, 0x7fff, 0x4c2, 0x8, 0xe, 0x10001, 0x7, 0x6, 0x8, 0x4, 0x80000001, 0x8, 0x49, 0x8000, 0x3f, 0x436a, 0x7, 0x9, 0x9, 0x7f, 0x740, 0x2, 0x9, 0x2, 0x3, 0x9, 0x9, 0x949, 0xc, 0x2d, 0xb, 0xffffffff, 0x4, 0x7fff, 0x7, 0x3ff, 0x4, 0x3, 0xa1c, 0xa8c, 0x8, 0x80, 0x5, 0x8, 0x6, 0x40, 0x2, 0x9, 0x6, 0x99, 0x81, 0x7, 0x7, 0x10, 0x0, 0xb99, 0xffffd532, 0x10000, 0x3, 0x8, 0x4, 0xf, 0x4, 0x800, 0x2, 0x1, 0x9, 0x9, 0x8, 0x50eaee2a, 0x3, 0x8, 0x100, 0x401, 0x6, 0x6d, 0x1, 0x3c2, 0x100, 0x84, 0x81a, 0xf77, 0x9, 0x5, 0x1, 0x800, 0xe, 0x0, 0x8, 0x8, 0x80000001, 0x9, 0x1, 0x0, 0x9, 0x8, 0xfffffff3, 0x8, 0x3, 0x5, 0x2, 0xb, 0xffff, 0x3, 0x9, 0x4, 0x8, 0xfffffff9, 0x9, 0x4, 0x9, 0x6, 0x2, 0xbf, 0x3, 0x80000001, 0x200, 0xba8b, 0xcbe4, 0x8, 0x9, 0x7, 0xfffffff8, 0x9, 0x7, 0xfffffffe, 0x3, 0x1, 0x1, 0x8, 0x3, 0x5, 0xfffffffd, 0x7fff, 0x39]}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff9, 0x7, 0x0, 0x9, 0xcc, 0xfffffff5, 0x9, 0x1000, 0x2, 0x5, 0xa, 0x711, 0x1, 0x7fff, 0x8000, 0x0, 0x2, 0x200, 0xef, 0x101, 0x3, 0x7, 0x8000, 0x1, 0x441, 0x1, 0x2000000, 0x3, 0x4, 0x8000, 0x1, 0x8, 0xff, 0x0, 0x1, 0x1, 0x8, 0x2, 0x406, 0x1000, 0x4, 0x5f, 0x4, 0x3, 0x8df, 0x3, 0x5, 0xd8, 0x9, 0x6, 0xffffe253, 0x2, 0x3, 0xf2a2, 0x1609, 0x7, 0x10, 0x7be4, 0xffffffff, 0x8001, 0x8, 0x400, 0x7fffffff, 0x3, 0x650, 0x5, 0xfff, 0x2, 0x8, 0x6, 0x9, 0x8e74, 0x10001, 0x10001, 0x9, 0x2, 0x6e, 0x2ef43447, 0x0, 0x1000, 0x2, 0x4, 0xfffff800, 0x8, 0x0, 0x7, 0x8, 0x9, 0x3, 0x8000, 0x9, 0x5, 0x9, 0x8, 0x5, 0x2, 0x9, 0x10, 0x1, 0xa201, 0xfffffff7, 0x80000000, 0x6, 0x5, 0x6, 0x2, 0xffffffd7, 0x7304, 0x5, 0x1ff, 0x8f4c, 0x3552, 0x0, 0x1, 0x800, 0x0, 0x4, 0x1, 0x556, 0x6, 0x3, 0x6, 0x7, 0x80000001, 0x0, 0xe5, 0x7ff, 0x0, 0xeae, 0xffff7fff, 0x8, 0x9, 0x9, 0x8, 0x3, 0x700, 0x81, 0x765, 0x5, 0xa, 0xfde8, 0x2, 0x10001, 0x10, 0xa1b0, 0x5, 0x7049, 0xffff7fff, 0x4, 0x80, 0x1ff, 0x80000000, 0x5, 0x5, 0xa495, 0x456, 0x2, 0xe2f, 0x1, 0x92, 0x1, 0x7, 0x401, 0xeee, 0xfffffff8, 0x2, 0xfffffff1, 0x9958, 0xd, 0x1, 0xfffffff9, 0xb, 0x50000000, 0x8, 0x8f, 0xfffff39c, 0x337e4b5f, 0x8, 0x6, 0xb, 0xd, 0x2, 0x1000, 0x3, 0xa1, 0x2, 0x4, 0x3, 0x1, 0x80000000, 0x4, 0xd, 0x5, 0x7, 0x3, 0x1, 0x5, 0x10000, 0x7, 0x200, 0x10, 0x1, 0x401, 0x6, 0x4, 0x8, 0x0, 0x52, 0x7fff, 0x7, 0xffff, 0x7fff, 0x2, 0xdc8a, 0x8, 0xff, 0x8b, 0x1, 0xb988, 0x9, 0x400, 0x0, 0x40e, 0x8, 0x609acc88, 0x1f, 0x4, 0x7ff, 0x4, 0x2, 0x6, 0x1, 0x8201, 0x100, 0x3ff, 0x101, 0x7, 0x4, 0x99e, 0x5, 0x1, 0x15, 0x6, 0x34e, 0x200, 0x3, 0x5, 0x4, 0x1, 0x6, 0x10, 0xfff, 0x0, 0x1, 0xe, 0x3]}]}}, @tclass_kind_options=@c_tbf={0x8}]}, 0xd08}}, 0x8004)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20040001)
socket(0x400000000010, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x78)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$alg(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x40045}], 0x1, 0x0)

9.34619517s ago: executing program 34 (id=2527):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

8.489539514s ago: executing program 35 (id=2539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
unshare(0x62040200) (rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
shutdown(0xffffffffffffffff, 0x1) (rerun: 32)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @multicast1}, <r6=>0x0}, &(0x7f0000000180)=0x14)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x124, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9ca1489be1e15692}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x4044080}, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) (async, rerun: 64)
recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async, rerun: 64)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64)
ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async, rerun: 64)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmmsg$sock(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90)

0s ago: executing program 36 (id=2542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000bebc813e8478c8ac8c62b5f6e6e89825bf5d15f95e4ea8e9bf330198cfdb926ef2b99f176713806f9208f00a97c5ff6c5b4278405a6edc74f14864", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x50000)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xf62}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0003000002000000000000000000"], 0x14}}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r11], 0x20}}, 0x2000c004)
close(r8)

kernel console output (not intermixed with test programs):

ET target dimension over the limit!
[  249.611557][T10911] netlink: 'syz.4.1410': attribute type 3 has an invalid length.
[  249.809443][T10918] wg1 speed is unknown, defaulting to 1000
[  249.827022][T10918] ip6_vti0 speed is unknown, defaulting to 1000
[  249.967166][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'.
[  249.979025][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1415'.
[  250.084912][ T6904] wlan0: Trigger new scan to find an IBSS to join
[  250.542134][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.608506][T10931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.645211][T10931] veth0_to_hsr: left allmulticast mode
[  250.690995][T10931] hsr1: left promiscuous mode
[  250.699272][T10931] syzkaller1: left promiscuous mode
[  250.705187][T10931] syzkaller1: left allmulticast mode
[  250.714052][T10931] bridge0: left allmulticast mode
[  250.726652][T10931] bond2: left promiscuous mode
[  250.739129][T10931] bridge3: left promiscuous mode
[  250.751031][T10931] bond2: left allmulticast mode
[  250.765584][T10931] bridge3: left allmulticast mode
[  250.781282][T10931] gretap2: left promiscuous mode
[  250.786694][T10931] gretap2: left allmulticast mode
[  250.854518][ T6904] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.863047][ T6904] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.967964][ T6904] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.978967][ T6904] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.193197][T10961] netlink: 'syz.0.1424': attribute type 4 has an invalid length.
[  251.320213][T10958] wg1 speed is unknown, defaulting to 1000
[  251.328684][T10958] ip6_vti0 speed is unknown, defaulting to 1000
[  251.709195][T10969] wg1 speed is unknown, defaulting to 1000
[  251.888529][T10969] ip6_vti0 speed is unknown, defaulting to 1000
[  252.189194][T10981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1432'.
[  252.692970][T10986] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  252.774601][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1435'.
[  252.942171][T10992] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1437'.
[  252.951771][T10992] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  253.049515][ T6904] wlan0: Trigger new scan to find an IBSS to join
[  253.366920][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 120 seconds
[  253.378110][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 120 seconds
[  253.389494][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 120 seconds
[  253.400944][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 120 seconds
[  253.547647][T11006] batadv1: entered promiscuous mode
[  253.554894][T11006] batadv1: entered allmulticast mode
[  253.896096][T11011] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  253.985160][ T6904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.079739][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'.
[  254.129336][T11017] bridge0: port 1(veth7) entered blocking state
[  254.141067][T11017] bridge0: port 1(veth7) entered disabled state
[  254.159048][T11017] veth7: entered allmulticast mode
[  254.180117][T11017] veth7: entered promiscuous mode
[  254.359784][T11023] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1450'.
[  254.370558][T11023] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  254.791538][T11028] wg1 speed is unknown, defaulting to 1000
[  254.876169][T11028] ip6_vti0 speed is unknown, defaulting to 1000
[  255.100313][T11042] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  255.220687][T11046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1456'.
[  255.810705][T11053] dvmrp0: entered allmulticast mode
[  255.931939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.939803][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  256.049547][T11061] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1461'.
[  256.058977][T11061] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  256.185894][T11066] netlink: 'syz.1.1463': attribute type 32 has an invalid length.
[  256.204282][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'.
[  256.263730][T11066] bond4: option coupled_control: invalid value (48)
[  256.283807][T11066] bond4 (unregistering): Released all slaves
[  256.503805][T11073] netlink: 'syz.4.1466': attribute type 1 has an invalid length.
[  256.622846][T11073] bond4: entered promiscuous mode
[  256.640608][T11073] 8021q: adding VLAN 0 to HW filter on device bond4
[  256.703471][T11080] 8021q: adding VLAN 0 to HW filter on device bond5
[  256.716558][T11080] bond4: (slave bond5): making interface the new active one
[  256.735432][T11080] bond5: entered promiscuous mode
[  256.746156][T11080] bond4: (slave bond5): Enslaving as an active interface with an up link
[  256.756600][T11075] wg1 speed is unknown, defaulting to 1000
[  256.800545][T11075] ip6_vti0 speed is unknown, defaulting to 1000
[  256.822424][T11078] wg1 speed is unknown, defaulting to 1000
[  256.840906][T11084] wg1 speed is unknown, defaulting to 1000
[  256.894837][T11087] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1467'.
[  257.371248][T11078] ip6_vti0 speed is unknown, defaulting to 1000
[  257.611509][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1471'.
[  257.744719][T11084] ip6_vti0 speed is unknown, defaulting to 1000
[  259.017248][T11152] IPVS: Scheduler module ip_vs_sip not found
[  259.026597][T11157] tipc: Can't bind to reserved service type 1
[  259.046478][T11157] netlink: 'syz.0.1491': attribute type 39 has an invalid length.
[  259.065082][T11157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1491'.
[  259.074940][T11157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1491'.
[  259.084094][T11157] netlink: 'syz.0.1491': attribute type 5 has an invalid length.
[  259.102808][T11157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1491'.
[  259.145195][T11157] vlan0: entered allmulticast mode
[  259.150558][T11157] bridge_slave_0: entered allmulticast mode
[  259.209364][T11163] sctp: [Deprecated]: syz.2.1493 (pid 11163) Use of struct sctp_assoc_value in delayed_ack socket option.
[  259.209364][T11163] Use struct sctp_sack_info instead
[  259.785486][T11172] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  260.270564][T11195] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1501'.
[  260.295732][T11195] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1501'.
[  260.356718][T11195] bond4 (unregistering): Released all slaves
[  260.415100][T11199] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1502'.
[  260.424885][T11199] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  261.049974][T11211] syzkaller0: entered promiscuous mode
[  261.075648][T11211] syzkaller0: entered allmulticast mode
[  261.096935][T11206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.372867][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'.
[  262.218601][ T7931] tipc: Node number set to 4164937606
[  263.510766][T11213] wg1 speed is unknown, defaulting to 1000
[  263.525152][T11206] tipc: Resetting bearer <eth:syzkaller0>
[  263.542088][T11201] tipc: Resetting bearer <eth:syzkaller0>
[  263.562479][T11201] tipc: Disabling bearer <eth:syzkaller0>
[  263.579350][T11213] ip6_vti0 speed is unknown, defaulting to 1000
[  263.579381][T11216] wg1 speed is unknown, defaulting to 1000
[  263.829051][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'.
[  263.854341][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1511'.
[  264.178321][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'.
[  264.236299][T11216] ip6_vti0 speed is unknown, defaulting to 1000
[  264.306680][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'.
[  264.316171][T11246] netlink: 'syz.3.1515': attribute type 21 has an invalid length.
[  264.324605][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'.
[  264.471503][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'.
[  264.491942][ T6905] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.514375][ T6905] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.522973][T11246] netlink: 'syz.3.1515': attribute type 21 has an invalid length.
[  264.538591][T11249] syzkaller1: entered promiscuous mode
[  264.547080][T11249] syzkaller1: entered allmulticast mode
[  264.553315][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'.
[  264.563173][ T6905] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.582938][ T6905] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.877487][T11263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.890846][T11263] tipc: Resetting bearer <eth:syzkaller0>
[  264.954982][T11262] tipc: Disabling bearer <eth:syzkaller0>
[  265.153409][T11268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1521'.
[  265.192960][T11268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1521'.
[  265.326419][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'.
[  265.987894][T11292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1531'.
[  266.020996][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'.
[  266.081957][ T7931] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0
[  266.109847][ T7931] hid-generic 0005:0007:0008.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  266.814360][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  267.301885][T11292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.366265][T11292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.398592][T11292] bond0 (unregistering): Released all slaves
[  267.753674][T11321] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  267.919070][T11328] netlink: 'syz.1.1541': attribute type 23 has an invalid length.
[  268.128257][T11340] syzkaller0: entered promiscuous mode
[  268.134482][T11340] syzkaller0: entered allmulticast mode
[  268.692421][T11353] macsec1: entered promiscuous mode
[  268.713031][T11353] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  268.723528][T11353] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  268.819538][T11352] wg1 speed is unknown, defaulting to 1000
[  268.843324][T11352] ip6_vti0 speed is unknown, defaulting to 1000
[  269.027020][T11362] syzkaller0: left promiscuous mode
[  269.032536][T11362] syzkaller0: left allmulticast mode
[  269.345870][T11376] syzkaller0: entered promiscuous mode
[  269.368709][T11376] syzkaller0: entered allmulticast mode
[  269.754336][T11393] Cannot find del_set index 4 as target
[  269.793740][T11393] bridge5: entered promiscuous mode
[  269.805862][T11393] bridge5: entered allmulticast mode
[  269.828191][T11393] team0: Port device bridge5 added
[  269.841029][T11394] bridge0: port 2(team0) entered blocking state
[  269.855729][T11394] bridge0: port 2(team0) entered disabled state
[  269.869073][T11394] team0: entered allmulticast mode
[  269.882319][T11394] team_slave_0: entered allmulticast mode
[  269.893201][T11393] __nla_validate_parse: 10 callbacks suppressed
[  269.893229][T11393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1566'.
[  269.913923][T11394] team_slave_1: entered allmulticast mode
[  269.932942][T11394] team0: entered promiscuous mode
[  269.947620][T11394] team_slave_0: entered promiscuous mode
[  269.960734][T11394] team_slave_1: entered promiscuous mode
[  270.509147][T11403] veth0_to_bridge: entered promiscuous mode
[  270.595375][T11402] veth0_to_bridge: left promiscuous mode
[  270.603449][T11411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  270.611783][T11411] IPv6: NLM_F_CREATE should be set when creating new route
[  270.619455][T11411] IPv6: NLM_F_CREATE should be set when creating new route
[  270.626790][T11411] IPv6: NLM_F_CREATE should be set when creating new route
[  270.792471][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'.
[  270.805019][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  271.094576][T11434] wg1 speed is unknown, defaulting to 1000
[  271.102575][T11434] ip6_vti0 speed is unknown, defaulting to 1000
[  271.432731][T11449] wg1 speed is unknown, defaulting to 1000
[  271.523403][T11449] ip6_vti0 speed is unknown, defaulting to 1000
[  271.740359][T11456] netlink: 'syz.1.1583': attribute type 13 has an invalid length.
[  272.160072][ T6905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.185708][ T6905] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  272.229931][ T6905] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.273679][ T6905] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  272.324359][ T6905] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.352642][ T6905] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  272.362612][ T6905] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.385392][ T6905] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  272.511108][T11468] wg1 speed is unknown, defaulting to 1000
[  272.555248][T11468] ip6_vti0 speed is unknown, defaulting to 1000
[  272.672358][T11469] wg1 speed is unknown, defaulting to 1000
[  272.969857][T11469] ip6_vti0 speed is unknown, defaulting to 1000
[  273.582731][T11484] netlink: zone id is out of range
[  273.588799][T11484] netlink: zone id is out of range
[  273.594019][T11484] netlink: zone id is out of range
[  273.599736][T11484] netlink: zone id is out of range
[  273.605682][T11484] netlink: zone id is out of range
[  273.610900][T11484] netlink: zone id is out of range
[  273.624855][T11484] netlink: zone id is out of range
[  273.630013][T11484] netlink: zone id is out of range
[  273.643606][T11484] netlink: zone id is out of range
[  273.677730][T11484] netlink: zone id is out of range
[  274.425213][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'.
[  274.465650][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1598'.
[  274.893512][T11510] x_tables: duplicate underflow at hook 1
[  275.668431][ T5200] udevd[5200]: worker [6379] /devices/virtual/block/nbd0 is taking a long time
[  275.940402][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'.
[  276.025106][T11527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'.
[  276.049517][T11527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1609'.
[  276.074389][T11527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'.
[  276.086284][T11527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1609'.
[  277.096205][T11541] syzkaller0: entered promiscuous mode
[  277.102820][T11541] syzkaller0: entered allmulticast mode
[  277.154374][T11543] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1613'.
[  277.659011][T11556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.712030][T11556] syzkaller0: entered promiscuous mode
[  277.726275][T11559] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1619'.
[  277.729331][T11556] syzkaller0: entered allmulticast mode
[  277.784819][T11561] netlink: 'syz.4.1621': attribute type 25 has an invalid length.
[  277.872255][T11559] batadv1: entered promiscuous mode
[  277.899276][T11559] batadv1: entered allmulticast mode
[  278.506754][T11586] netlink: 'syz.0.1627': attribute type 1 has an invalid length.
[  278.524741][T11584] netlink: 'syz.4.1626': attribute type 12 has an invalid length.
[  278.528529][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1627'.
[  278.573012][T11586] veth0: entered promiscuous mode
[  278.620528][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'.
[  278.753358][T11586] veth0 (unregistering): left promiscuous mode
[  278.899785][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'.
[  278.967981][T11607] netlink: 'syz.2.1630': attribute type 5 has an invalid length.
[  278.989554][T11600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.020078][T11592] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.038470][T11592] xt_l2tp: missing protocol rule (udp|l2tpip)
[  279.068531][T11592] syzkaller0: entered promiscuous mode
[  279.080970][T11592] syzkaller0: entered allmulticast mode
[  279.211572][T11592] tipc: Resetting bearer <eth:syzkaller0>
[  279.267644][T11590] tipc: Resetting bearer <eth:syzkaller0>
[  279.352027][T11590] tipc: Disabling bearer <eth:syzkaller0>
[  279.394291][T11601] wg1 speed is unknown, defaulting to 1000
[  279.468788][T11601] ip6_vti0 speed is unknown, defaulting to 1000
[  279.501029][T11624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.661997][T11624] syzkaller0: entered promiscuous mode
[  279.669751][T11624] syzkaller0: entered allmulticast mode
[  280.327334][    C0] net_ratelimit: 2 callbacks suppressed
[  280.327355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.636932][ T7930] tipc: Node number set to 1025488972
[  280.945629][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.233415][T11663] __nla_validate_parse: 1 callbacks suppressed
[  281.233434][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'.
[  281.966511][T11624] tipc: Resetting bearer <eth:syzkaller0>
[  281.981640][ T5495] veth0_vlan: left promiscuous mode
[  282.010634][ T5495] veth0_vlan: entered promiscuous mode
[  282.027111][T11623] tipc: Resetting bearer <eth:syzkaller0>
[  282.052340][T11623] tipc: Disabling bearer <eth:syzkaller0>
[  282.085630][T11660] bond4: left promiscuous mode
[  282.095425][T11660] bond5: left promiscuous mode
[  282.155328][T11663] hsr_slave_0: left promiscuous mode
[  282.165692][T11663] hsr_slave_1: left promiscuous mode
[  282.483477][T11670] wg1 speed is unknown, defaulting to 1000
[  282.536767][T11670] ip6_vti0 speed is unknown, defaulting to 1000
[  282.556291][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  282.567289][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'.
[  282.580882][T11679] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  282.975634][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.985406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.993849][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.162605][T11704] syzkaller0: entered promiscuous mode
[  283.175029][T11704] syzkaller0: entered allmulticast mode
[  283.429488][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'.
[  283.448735][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 150 seconds
[  283.464150][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 150 seconds
[  283.478933][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 150 seconds
[  283.492858][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 150 seconds
[  283.719262][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.728034][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.851893][T11719] FAULT_INJECTION: forcing a failure.
[  283.851893][T11719] name failslab, interval 1, probability 0, space 0, times 0
[  283.891006][T11719] CPU: 1 UID: 0 PID: 11719 Comm: syz.4.1655 Not tainted syzkaller #0 PREEMPT(full) 
[  283.891033][T11719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  283.891055][T11719] Call Trace:
[  283.891063][T11719]  <TASK>
[  283.891071][T11719]  dump_stack_lvl+0x189/0x250
[  283.891099][T11719]  ? __pfx____ratelimit+0x10/0x10
[  283.891118][T11719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.891138][T11719]  ? __pfx__printk+0x10/0x10
[  283.891159][T11719]  ? __pfx___might_resched+0x10/0x10
[  283.891175][T11719]  ? fs_reclaim_acquire+0x7d/0x100
[  283.891203][T11719]  should_fail_ex+0x414/0x560
[  283.891232][T11719]  should_failslab+0xa8/0x100
[  283.891256][T11719]  __kmalloc_noprof+0xcb/0x7f0
[  283.891277][T11719]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  283.891306][T11719]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  283.891332][T11719]  genl_family_rcv_msg_doit+0xb8/0x300
[  283.891366][T11719]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  283.891390][T11719]  ? __pfx_genl_get_cmd+0x10/0x10
[  283.891407][T11719]  ? __pfx_ovs_dp_cmd_get+0x10/0x10
[  283.891426][T11719]  ? __pfx_ovs_dp_cmd_dump+0x10/0x10
[  283.891448][T11719]  ? stack_trace_save+0x9c/0xe0
[  283.891475][T11719]  genl_rcv_msg+0x60e/0x790
[  283.891499][T11719]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.891517][T11719]  ? __pfx_ovs_dp_cmd_get+0x10/0x10
[  283.891549][T11719]  netlink_rcv_skb+0x208/0x470
[  283.891572][T11719]  ? __lock_acquire+0xab9/0xd20
[  283.891589][T11719]  ? __pfx_genl_rcv_msg+0x10/0x10
[  283.891615][T11719]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  283.891659][T11719]  ? down_read+0x1ad/0x2e0
[  283.891683][T11719]  genl_rcv+0x28/0x40
[  283.891700][T11719]  netlink_unicast+0x82f/0x9e0
[  283.891732][T11719]  ? __pfx_netlink_unicast+0x10/0x10
[  283.891757][T11719]  ? netlink_sendmsg+0x642/0xb30
[  283.891770][T11719]  ? skb_put+0x11b/0x210
[  283.891797][T11719]  netlink_sendmsg+0x805/0xb30
[  283.891821][T11719]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.891840][T11719]  ? aa_sock_msg_perm+0xf1/0x1d0
[  283.891866][T11719]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.891883][T11719]  ? __pfx_netlink_sendmsg+0x10/0x10
[  283.891901][T11719]  __sock_sendmsg+0x21c/0x270
[  283.891927][T11719]  ____sys_sendmsg+0x505/0x830
[  283.891951][T11719]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.891978][T11719]  ? import_iovec+0x74/0xa0
[  283.892003][T11719]  ___sys_sendmsg+0x21f/0x2a0
[  283.892025][T11719]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.892080][T11719]  ? __fget_files+0x2a/0x420
[  283.892096][T11719]  ? __fget_files+0x3a0/0x420
[  283.892122][T11719]  __x64_sys_sendmsg+0x19b/0x260
[  283.892143][T11719]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  283.892171][T11719]  ? __pfx_ksys_write+0x10/0x10
[  283.892198][T11719]  ? do_syscall_64+0xbe/0xfa0
[  283.892223][T11719]  do_syscall_64+0xfa/0xfa0
[  283.892242][T11719]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.892262][T11719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.892279][T11719]  ? clear_bhb_loop+0x60/0xb0
[  283.892300][T11719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.892317][T11719] RIP: 0033:0x7fd21f78efc9
[  283.892333][T11719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.892348][T11719] RSP: 002b:00007fd2205fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  283.892375][T11719] RAX: ffffffffffffffda RBX: 00007fd21f9e5fa0 RCX: 00007fd21f78efc9
[  283.892388][T11719] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003
[  283.892399][T11719] RBP: 00007fd2205fc090 R08: 0000000000000000 R09: 0000000000000000
[  283.892410][T11719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.892420][T11719] R13: 00007fd21f9e6038 R14: 00007fd21f9e5fa0 R15: 00007fff1554b9d8
[  283.892450][T11719]  </TASK>
[  284.484298][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.546077][T11731] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  284.586129][T11726] wg1 speed is unknown, defaulting to 1000
[  284.754908][T11726] ip6_vti0 speed is unknown, defaulting to 1000
[  284.925838][T11742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  285.305615][T11751] wg1 speed is unknown, defaulting to 1000
[  285.780752][T11768] IPVS: fo: FWM 3 0x00000003 - no destination available
[  285.909097][T11751] ip6_vti0 speed is unknown, defaulting to 1000
[  286.046512][T11772] ipvlan2: entered promiscuous mode
[  286.723789][T11795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1675'.
[  286.831573][T11789] wg1 speed is unknown, defaulting to 1000
[  286.908201][T11789] ip6_vti0 speed is unknown, defaulting to 1000
[  287.160811][T11791] syzkaller1: entered promiscuous mode
[  287.209654][T11791] syzkaller1: entered allmulticast mode
[  287.346597][T11810] netlink: 'syz.0.1676': attribute type 10 has an invalid length.
[  287.381289][T11810] netlink: 'syz.0.1676': attribute type 2 has an invalid length.
[  287.414830][T11810] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1676'.
[  288.641002][T11838] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001
[  288.904456][T11850] netlink: 'syz.4.1682': attribute type 1 has an invalid length.
[  289.062726][   T30] audit: type=1107 audit(1761620195.924:3): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  289.261175][T11854] bond6: (slave vcan0): The slave device specified does not support setting the MAC address
[  289.379456][T11854] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  289.418853][T11854] bond6: (slave vcan0): making interface the new active one
[  289.438697][T11854] bond6: (slave vcan0): Enslaving as an active interface with an up link
[  289.472565][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'.
[  289.485399][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'.
[  290.307883][T11876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.329348][T11876] syzkaller0: entered promiscuous mode
[  290.354931][T11876] syzkaller0: entered allmulticast mode
[  290.436630][T11876] tipc: Resetting bearer <eth:syzkaller0>
[  290.442730][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.451317][T11876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.496224][T11875] tipc: Resetting bearer <eth:syzkaller0>
[  290.563764][T11875] tipc: Disabling bearer <eth:syzkaller0>
[  290.788700][T11887] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1690'.
[  291.126135][T11894] wg1 speed is unknown, defaulting to 1000
[  291.174835][T11894] ip6_vti0 speed is unknown, defaulting to 1000
[  292.020034][T11921] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1703'.
[  292.069019][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.089822][T11921] batadv1: entered promiscuous mode
[  292.111198][T11921] batadv1: entered allmulticast mode
[  292.132535][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.169319][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.233521][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.250049][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.264342][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.276216][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.286374][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.316966][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1704'.
[  292.351100][T11931] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.693818][T11947] xt_hashlimit: size too large, truncated to 1048576
[  293.420599][T11987] netlink: 'syz.1.1723': attribute type 5 has an invalid length.
[  294.066990][T11998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.394612][T12001] wg1 speed is unknown, defaulting to 1000
[  294.447604][T12010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.647235][T12010] syzkaller0: entered promiscuous mode
[  294.661823][T12010] syzkaller0: entered allmulticast mode
[  294.701404][T12001] ip6_vti0 speed is unknown, defaulting to 1000
[  295.145675][T12034] nbd: socks must be embedded in a SOCK_ITEM attr
[  295.564265][  T982] tipc: Node number set to 1942659894
[  295.607148][T12042] netlink: 'syz.4.1736': attribute type 10 has an invalid length.
[  297.679110][T12020] tipc: Resetting bearer <eth:syzkaller0>
[  297.689059][T12009] tipc: Resetting bearer <eth:syzkaller0>
[  297.707936][T12009] tipc: Disabling bearer <eth:syzkaller0>
[  297.721403][T12042] 8021q: adding VLAN 0 to HW filter on device `
[  297.731490][T12042] bond0: (slave `): Enslaving as an active interface with an up link
[  297.979448][T12056] bond7: option downdelay: invalid value (18446744073709551615)
[  297.987530][T12056] bond7: option downdelay: allowed values 0 - 2147483647
[  297.996895][T12056] bond7 (unregistering): Released all slaves
[  298.893985][T12096] netlink: 'syz.1.1746': attribute type 1 has an invalid length.
[  299.013099][T12100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.032640][T12100] syzkaller0: entered promiscuous mode
[  299.040284][T12100] syzkaller0: entered allmulticast mode
[  299.081784][T12100] tipc: Resetting bearer <eth:syzkaller0>
[  299.115032][T12099] tipc: Resetting bearer <eth:syzkaller0>
[  299.271675][T12099] tipc: Disabling bearer <eth:syzkaller0>
[  299.458867][T12113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.276241][T12152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.305042][T12152] syzkaller0: entered promiscuous mode
[  300.326215][T12152] syzkaller0: entered allmulticast mode
[  300.368045][T12152] tipc: Resetting bearer <eth:syzkaller0>
[  300.401594][T12149] tipc: Resetting bearer <eth:syzkaller0>
[  300.469422][T12159] __nla_validate_parse: 27 callbacks suppressed
[  300.469442][T12159] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.1764'.
[  300.588487][T12162] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1764'.
[  300.665496][T12162] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  300.682444][T12149] tipc: Disabling bearer <eth:syzkaller0>
[  300.890389][T12168] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  301.101443][T12175] wg1 speed is unknown, defaulting to 1000
[  301.148399][T12175] ip6_vti0 speed is unknown, defaulting to 1000
[  302.002563][T12204] FAULT_INJECTION: forcing a failure.
[  302.002563][T12204] name failslab, interval 1, probability 0, space 0, times 0
[  302.040734][T12204] CPU: 0 UID: 0 PID: 12204 Comm: syz.2.1778 Not tainted syzkaller #0 PREEMPT(full) 
[  302.040761][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  302.040773][T12204] Call Trace:
[  302.040780][T12204]  <TASK>
[  302.040788][T12204]  dump_stack_lvl+0x189/0x250
[  302.040816][T12204]  ? __pfx____ratelimit+0x10/0x10
[  302.040837][T12204]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.040876][T12204]  ? __pfx__printk+0x10/0x10
[  302.040900][T12204]  ? __pfx___might_resched+0x10/0x10
[  302.040917][T12204]  ? fs_reclaim_acquire+0x7d/0x100
[  302.040948][T12204]  should_fail_ex+0x414/0x560
[  302.040977][T12204]  should_failslab+0xa8/0x100
[  302.040994][T12204]  kmem_cache_alloc_node_noprof+0x77/0x710
[  302.041015][T12204]  ? __alloc_skb+0x112/0x2d0
[  302.041042][T12204]  __alloc_skb+0x112/0x2d0
[  302.041066][T12204]  tcp_stream_alloc_skb+0x3d/0x350
[  302.041093][T12204]  tcp_sendmsg_locked+0x1c7f/0x5540
[  302.041162][T12204]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  302.041185][T12204]  ? __local_bh_enable_ip+0x12d/0x1c0
[  302.041209][T12204]  ? __local_bh_enable_ip+0x12d/0x1c0
[  302.041238][T12204]  tcp_sendmsg+0x2f/0x50
[  302.041260][T12204]  __sock_sendmsg+0x19c/0x270
[  302.041283][T12204]  ____sys_sendmsg+0x52d/0x830
[  302.041305][T12204]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.041329][T12204]  ? import_iovec+0x74/0xa0
[  302.041354][T12204]  ___sys_sendmsg+0x21f/0x2a0
[  302.041375][T12204]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.041427][T12204]  ? __fget_files+0x2a/0x420
[  302.041440][T12204]  ? __fget_files+0x3a0/0x420
[  302.041465][T12204]  __sys_sendmmsg+0x227/0x430
[  302.041487][T12204]  ? __pfx___sys_sendmmsg+0x10/0x10
[  302.041513][T12204]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  302.041549][T12204]  ? ksys_write+0x22a/0x250
[  302.041574][T12204]  ? __pfx_ksys_write+0x10/0x10
[  302.041612][T12204]  __x64_sys_sendmmsg+0xa0/0xc0
[  302.041631][T12204]  do_syscall_64+0xfa/0xfa0
[  302.041663][T12204]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.041683][T12204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.041699][T12204]  ? clear_bhb_loop+0x60/0xb0
[  302.041721][T12204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.041736][T12204] RIP: 0033:0x7feff658efc9
[  302.041752][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.041766][T12204] RSP: 002b:00007feff7409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  302.041786][T12204] RAX: ffffffffffffffda RBX: 00007feff67e5fa0 RCX: 00007feff658efc9
[  302.041802][T12204] RDX: 000000000000005f RSI: 0000200000000d00 RDI: 0000000000000005
[  302.041811][T12204] RBP: 00007feff7409090 R08: 0000000000000000 R09: 0000000000000000
[  302.041822][T12204] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  302.041831][T12204] R13: 00007feff67e6038 R14: 00007feff67e5fa0 R15: 00007ffcf85433a8
[  302.041860][T12204]  </TASK>
[  302.424679][T12207] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  302.487708][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1779'.
[  302.739503][T12222] FAULT_INJECTION: forcing a failure.
[  302.739503][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.749661][T12217] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  302.761758][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.1.1782 Not tainted syzkaller #0 PREEMPT(full) 
[  302.761784][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  302.761798][T12222] Call Trace:
[  302.761806][T12222]  <TASK>
[  302.761813][T12222]  dump_stack_lvl+0x189/0x250
[  302.761842][T12222]  ? __pfx____ratelimit+0x10/0x10
[  302.761866][T12222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.761888][T12222]  ? __pfx__printk+0x10/0x10
[  302.761906][T12222]  ? __might_fault+0xb0/0x130
[  302.761940][T12222]  should_fail_ex+0x414/0x560
[  302.761969][T12222]  _copy_from_user+0x2d/0xb0
[  302.761992][T12222]  ___sys_sendmsg+0x158/0x2a0
[  302.762013][T12222]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.762065][T12222]  ? __fget_files+0x2a/0x420
[  302.762081][T12222]  ? __fget_files+0x3a0/0x420
[  302.762106][T12222]  __x64_sys_sendmsg+0x19b/0x260
[  302.762126][T12222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  302.762153][T12222]  ? __pfx_ksys_write+0x10/0x10
[  302.762191][T12222]  ? do_syscall_64+0xbe/0xfa0
[  302.762215][T12222]  do_syscall_64+0xfa/0xfa0
[  302.762234][T12222]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.762254][T12222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.762271][T12222]  ? clear_bhb_loop+0x60/0xb0
[  302.762292][T12222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.762309][T12222] RIP: 0033:0x7f66b9d8efc9
[  302.762324][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.762339][T12222] RSP: 002b:00007f66baba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.762358][T12222] RAX: ffffffffffffffda RBX: 00007f66b9fe5fa0 RCX: 00007f66b9d8efc9
[  302.762371][T12222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  302.762382][T12222] RBP: 00007f66baba6090 R08: 0000000000000000 R09: 0000000000000000
[  302.762393][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.762403][T12222] R13: 00007f66b9fe6038 R14: 00007f66b9fe5fa0 R15: 00007ffd40998198
[  302.762434][T12222]  </TASK>
[  302.994834][T12217] bond7 (unregistering): Released all slaves
[  303.028782][T12220] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1784'.
[  303.050545][T12220] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1784'.
[  303.134775][T12226] netlink: 'syz.1.1786': attribute type 30 has an invalid length.
[  303.244710][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1789'.
[  303.493281][T12246] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1793'.
[  303.523278][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'.
[  303.545744][T12244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.553214][T12244] syzkaller0: entered promiscuous mode
[  303.559775][T12244] syzkaller0: entered allmulticast mode
[  303.781075][T12252] tipc: Resetting bearer <eth:syzkaller0>
[  303.832789][T12243] tipc: Resetting bearer <eth:syzkaller0>
[  303.896820][T12243] tipc: Disabling bearer <eth:syzkaller0>
[  303.914904][T12260] FAULT_INJECTION: forcing a failure.
[  303.914904][T12260] name failslab, interval 1, probability 0, space 0, times 0
[  303.929196][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.1.1795 Not tainted syzkaller #0 PREEMPT(full) 
[  303.929221][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  303.929232][T12260] Call Trace:
[  303.929240][T12260]  <TASK>
[  303.929247][T12260]  dump_stack_lvl+0x189/0x250
[  303.929276][T12260]  ? __pfx____ratelimit+0x10/0x10
[  303.929297][T12260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  303.929320][T12260]  ? __pfx__printk+0x10/0x10
[  303.929343][T12260]  ? __pfx___might_resched+0x10/0x10
[  303.929362][T12260]  ? fs_reclaim_acquire+0x7d/0x100
[  303.929394][T12260]  should_fail_ex+0x414/0x560
[  303.929424][T12260]  should_failslab+0xa8/0x100
[  303.929443][T12260]  kmem_cache_alloc_node_noprof+0x77/0x710
[  303.929466][T12260]  ? __alloc_skb+0x112/0x2d0
[  303.929489][T12260]  ? netlink_autobind+0xdb/0x300
[  303.929510][T12260]  __alloc_skb+0x112/0x2d0
[  303.929538][T12260]  netlink_sendmsg+0x5c6/0xb30
[  303.929562][T12260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.929579][T12260]  ? aa_sock_msg_perm+0xf1/0x1d0
[  303.929606][T12260]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.929623][T12260]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.929639][T12260]  __sock_sendmsg+0x21c/0x270
[  303.929663][T12260]  ____sys_sendmsg+0x505/0x830
[  303.929686][T12260]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.929712][T12260]  ? import_iovec+0x74/0xa0
[  303.929744][T12260]  ___sys_sendmsg+0x21f/0x2a0
[  303.929765][T12260]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.929819][T12260]  ? __fget_files+0x2a/0x420
[  303.929835][T12260]  ? __fget_files+0x3a0/0x420
[  303.929869][T12260]  __x64_sys_sendmsg+0x19b/0x260
[  303.929890][T12260]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.929918][T12260]  ? __pfx_ksys_write+0x10/0x10
[  303.929945][T12260]  ? do_syscall_64+0xbe/0xfa0
[  303.929969][T12260]  do_syscall_64+0xfa/0xfa0
[  303.929991][T12260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.930008][T12260]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  303.930025][T12260]  ? clear_bhb_loop+0x60/0xb0
[  303.930047][T12260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.930064][T12260] RIP: 0033:0x7f66b9d8efc9
[  303.930080][T12260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  303.930096][T12260] RSP: 002b:00007f66baba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.930117][T12260] RAX: ffffffffffffffda RBX: 00007f66b9fe5fa0 RCX: 00007f66b9d8efc9
[  303.930130][T12260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  303.930142][T12260] RBP: 00007f66baba6090 R08: 0000000000000000 R09: 0000000000000000
[  303.930153][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  303.930163][T12260] R13: 00007f66b9fe6038 R14: 00007f66b9fe5fa0 R15: 00007ffd40998198
[  303.930195][T12260]  </TASK>
[  304.462944][T12269] vlan0: entered promiscuous mode
[  304.576591][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'.
[  304.654984][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'.
[  305.096209][T12297] syzkaller0: entered promiscuous mode
[  305.124875][T12297] syzkaller0: entered allmulticast mode
[  305.502321][T12316] __nla_validate_parse: 1 callbacks suppressed
[  305.502340][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1818'.
[  305.800622][T12325] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1820'.
[  305.837930][T12325] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1820'.
[  306.318577][T12342] netlink: 'syz.1.1825': attribute type 1 has an invalid length.
[  306.438270][T12343] bond4: (slave bridge6): making interface the new active one
[  306.447752][T12343] bond4: (slave bridge6): Enslaving as an active interface with an up link
[  306.511457][T12356] wg1 speed is unknown, defaulting to 1000
[  306.519931][T12356] ip6_vti0 speed is unknown, defaulting to 1000
[  306.916733][T12366] vxcan3: entered allmulticast mode
[  307.755326][T12399] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  308.022717][T12404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.063592][T12404] syzkaller0: entered promiscuous mode
[  308.071741][T12404] syzkaller0: entered allmulticast mode
[  308.119081][T12404] tipc: Resetting bearer <eth:syzkaller0>
[  308.147214][T12402] tipc: Resetting bearer <eth:syzkaller0>
[  308.207269][T12402] tipc: Disabling bearer <eth:syzkaller0>
[  308.240384][T12405] wg1 speed is unknown, defaulting to 1000
[  308.250147][T12414] SET target dimension over the limit!
[  308.273339][T12405] ip6_vti0 speed is unknown, defaulting to 1000
[  308.722124][T12428] vxcan5: entered allmulticast mode
[  309.796272][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'.
[  309.995016][T12445] syz_tun: mtu less than device minimum
[  310.360333][T12456] wg1 speed is unknown, defaulting to 1000
[  310.497867][T12458] xt_CT: No such helper "netbios-ns"
[  310.556356][T12469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1858'.
[  310.652323][T12456] ip6_vti0 speed is unknown, defaulting to 1000
[  310.983526][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'.
[  311.684946][T12506] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  312.352179][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'.
[  312.383881][T12530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'.
[  312.509646][T12530] vlan2: entered allmulticast mode
[  312.535147][T12530] dummy0: entered allmulticast mode
[  312.556686][T12531] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1874'.
[  312.604793][T12531] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1874'.
[  313.014920][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'.
[  313.529955][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 180 seconds
[  313.544077][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 180 seconds
[  313.557460][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 180 seconds
[  313.569569][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 180 seconds
[  314.951276][T12538] wg1 speed is unknown, defaulting to 1000
[  314.999832][T12538] ip6_vti0 speed is unknown, defaulting to 1000
[  315.104373][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'.
[  315.219041][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  315.229973][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  315.666791][T12567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  315.859084][T12570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.898033][T12570] syzkaller0: entered promiscuous mode
[  315.903643][T12570] syzkaller0: entered allmulticast mode
[  316.177305][T12574] IPVS: Scheduler module ip_vs_sip not found
[  316.243767][T12582] ip6t_rpfilter: unknown options
[  316.259605][T12582] x_tables: duplicate underflow at hook 4
[  316.332937][T12569] tipc: Resetting bearer <eth:syzkaller0>
[  316.428853][T12569] tipc: Disabling bearer <eth:syzkaller0>
[  316.689784][T12592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.874673][T12598] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  316.884171][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.202073][T12610] __nla_validate_parse: 2 callbacks suppressed
[  317.202092][T12610] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1901'.
[  317.249561][T12608] wg1 speed is unknown, defaulting to 1000
[  317.249632][T12613] netlink: 'syz.3.1901': attribute type 29 has an invalid length.
[  317.286114][T12608] ip6_vti0 speed is unknown, defaulting to 1000
[  317.308472][T12610] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1901'.
[  317.372234][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.379472][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.408027][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1902'.
[  317.473857][T12615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1902'.
[  317.758925][T12620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.788731][T12624] syzkaller0: entered promiscuous mode
[  317.798339][T12624] syzkaller0: entered allmulticast mode
[  317.891198][T12629] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.917718][T12631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1907'.
[  317.927567][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.964587][T12631] netlink: 'syz.0.1907': attribute type 21 has an invalid length.
[  317.991831][T12631] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1907'.
[  318.031270][T12631] netlink: 'syz.0.1907': attribute type 4 has an invalid length.
[  318.058598][T12631] netlink: 'syz.0.1907': attribute type 3 has an invalid length.
[  318.070368][T12631] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1907'.
[  318.341960][T12642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.353777][T12642] syzkaller0: entered promiscuous mode
[  318.360282][T12642] syzkaller0: entered allmulticast mode
[  318.396642][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[  318.439862][T12619] tipc: Resetting bearer <eth:syzkaller0>
[  318.545164][T12619] tipc: Disabling bearer <eth:syzkaller0>
[  318.793408][T12641] tipc: Resetting bearer <eth:syzkaller0>
[  318.862699][T12641] tipc: Disabling bearer <eth:syzkaller0>
[  318.913020][T12671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'.
[  318.932012][T12671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'.
[  318.964221][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.972495][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.003087][T12674] syz_tun: entered promiscuous mode
[  319.011694][T12674] syz_tun: left promiscuous mode
[  319.150916][T12683] team_slave_1: Caught tx_queue_len zero misconfig
[  319.577478][T12661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  320.004197][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.012886][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.312006][T12728] netlink: 'syz.4.1932': attribute type 13 has an invalid length.
[  320.325315][T12728] netlink: 'syz.4.1932': attribute type 17 has an invalid length.
[  320.562248][T12728] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.590143][T12728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.661594][T12739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.674754][T12742] syzkaller0: entered promiscuous mode
[  320.687354][T12741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.693515][T12742] syzkaller0: entered allmulticast mode
[  320.707400][T12732] wg1 speed is unknown, defaulting to 1000
[  320.784551][T12732] ip6_vti0 speed is unknown, defaulting to 1000
[  320.794425][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.803664][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.813699][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  320.821786][T12729] tipc: Resetting bearer <eth:syzkaller0>
[  320.846207][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.918376][T12726] tipc: Resetting bearer <eth:syzkaller0>
[  321.033539][T12726] tipc: Disabling bearer <eth:syzkaller0>
[  321.720833][T12771] wg1 speed is unknown, defaulting to 1000
[  321.747630][T12771] ip6_vti0 speed is unknown, defaulting to 1000
[  321.900430][T12785] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  322.084264][    C0] net_ratelimit: 2 callbacks suppressed
[  322.084285][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.307825][T12793] syzkaller1: entered promiscuous mode
[  322.314651][T12793] syzkaller1: entered allmulticast mode
[  323.124284][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.134666][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.674244][   T30] audit: type=1804 audit(1761620230.504:4): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1957" name="/newroot/387/cgroup.controllers" dev="tmpfs" ino=2009 res=1 errno=0
[  323.708818][   T30] audit: type=1800 audit(1761620230.504:5): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1957" name="cgroup.controllers" dev="tmpfs" ino=2009 res=0 errno=0
[  323.740201][   T30] audit: type=1800 audit(1761620230.504:6): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1957" name="cgroup.controllers" dev="tmpfs" ino=2009 res=0 errno=0
[  323.829814][T12818] __nla_validate_parse: 7 callbacks suppressed
[  323.829834][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  324.164226][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.481150][T12836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'.
[  324.483717][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1965'.
[  324.639395][T12836] nbd: socks must be embedded in a SOCK_ITEM attr
[  325.185523][T12854] openvswitch: netlink: Message has 8 unknown bytes.
[  325.204217][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.204409][T12854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.213750][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.306220][T12858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.322135][T12858] syzkaller0: entered promiscuous mode
[  325.344315][T12858] syzkaller0: entered allmulticast mode
[  325.386263][T12858] tipc: Resetting bearer <eth:syzkaller0>
[  325.401344][T12857] tipc: Resetting bearer <eth:syzkaller0>
[  325.431107][T12857] tipc: Disabling bearer <eth:syzkaller0>
[  325.523272][T12869] netlink: 'syz.1.1973': attribute type 1 has an invalid length.
[  325.550944][T12869] netlink: 'syz.1.1973': attribute type 1 has an invalid length.
[  325.559538][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'.
[  325.586192][T12869] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  325.618740][T12869] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  325.649113][T12869] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  325.658327][T12869] netlink: 'syz.1.1973': attribute type 1 has an invalid length.
[  325.667892][T12869] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  326.227835][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1984'.
[  326.243205][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'.
[  326.252671][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.252915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.291395][T12909] 8021q: adding VLAN 0 to HW filter on device bond7
[  326.357682][T12914] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1984'.
[  326.527543][T12921] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1987'.
[  326.537243][T12921] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1987'.
[  326.932871][T12940] netlink: 'syz.1.1993': attribute type 1 has an invalid length.
[  326.947047][T12941] netlink: 'syz.1.1993': attribute type 1 has an invalid length.
[  327.284270][    C0] net_ratelimit: 2 callbacks suppressed
[  327.284288][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.311544][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'.
[  327.356322][T12968] wg1 speed is unknown, defaulting to 1000
[  327.369952][T12968] ip6_vti0 speed is unknown, defaulting to 1000
[  327.555853][T12974] syzkaller0: entered promiscuous mode
[  327.572298][T12974] syzkaller0: entered allmulticast mode
[  327.585099][T12974] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  327.857378][T12986] netlink: 'syz.3.2006': attribute type 1 has an invalid length.
[  327.932806][T12986] 8021q: adding VLAN 0 to HW filter on device bond3
[  327.955724][T12989] bond3: (slave wlan0): Opening slave failed
[  328.007605][T12987] wg1 speed is unknown, defaulting to 1000
[  328.025336][T12986] vlan2: entered allmulticast mode
[  328.031612][T12986] veth1: entered allmulticast mode
[  328.043922][T12986] bond3: (slave vlan2): making interface the new active one
[  328.056939][T12986] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  328.066859][T12987] ip6_vti0 speed is unknown, defaulting to 1000
[  328.324481][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.333829][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.510430][T12999] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.588535][T13003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.601468][T12999] 8021q: adding VLAN 0 to HW filter on device team0
[  328.693970][T12999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.752128][  T982] ip6_vti0 speed is unknown, defaulting to 1000
[  328.765555][  T982] syz2: Port: 1 Link ACTIVE
[  328.779208][ T6926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  328.823475][    T9] ip6_vti0 speed is unknown, defaulting to 1000
[  328.862431][T13014] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2013'.
[  328.878015][T13014] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2013'.
[  328.920670][T13000] wg1 speed is unknown, defaulting to 1000
[  328.937449][T13000] ip6_vti0 speed is unknown, defaulting to 1000
[  328.938142][T13013] wg1 speed is unknown, defaulting to 1000
[  329.364226][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.394167][T13013] ip6_vti0 speed is unknown, defaulting to 1000
[  330.268724][T13024] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  330.404242][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.412713][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.444435][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.453604][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.550089][T13033] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  331.713600][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  331.817116][T13035] wg1 speed is unknown, defaulting to 1000
[  331.870234][T13035] ip6_vti0 speed is unknown, defaulting to 1000
[  332.130285][T13044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.147060][T13044] syzkaller0: entered promiscuous mode
[  332.164920][T13044] syzkaller0: entered allmulticast mode
[  332.232608][T13044] tipc: Resetting bearer <eth:syzkaller0>
[  332.259958][T13043] tipc: Resetting bearer <eth:syzkaller0>
[  332.325453][T13043] tipc: Disabling bearer <eth:syzkaller0>
[  332.409062][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2023'.
[  332.484476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.629533][T13052] syzkaller0: entered promiscuous mode
[  332.635446][T13052] syzkaller0: entered allmulticast mode
[  332.807747][T13034] wg1 speed is unknown, defaulting to 1000
[  332.842080][T13057] xt_CT: No such helper "netbios-ns"
[  332.842295][T13034] ip6_vti0 speed is unknown, defaulting to 1000
[  332.851449][T13054] wg1 speed is unknown, defaulting to 1000
[  333.030031][T13066] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  333.112555][T13067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.126063][T13067] syzkaller0: entered promiscuous mode
[  333.139952][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'.
[  333.140629][T13067] syzkaller0: entered allmulticast mode
[  333.204434][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  333.323390][T13073] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2031'.
[  333.341093][T13073] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2031'.
[  333.382072][T13065] tipc: Resetting bearer <eth:syzkaller0>
[  333.461319][T13065] tipc: Disabling bearer <eth:syzkaller0>
[  333.519692][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'.
[  333.529268][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.529341][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.558690][T13054] ip6_vti0 speed is unknown, defaulting to 1000
[  333.761298][T13084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.786674][T13084] syzkaller0: entered promiscuous mode
[  333.792472][T13084] syzkaller0: entered allmulticast mode
[  333.875013][T13084] tipc: Resetting bearer <eth:syzkaller0>
[  333.913291][T13083] tipc: Resetting bearer <eth:syzkaller0>
[  333.943375][T13090] netlink: zone id is out of range
[  333.950226][T13090] netlink: zone id is out of range
[  333.957373][T13083] tipc: Disabling bearer <eth:syzkaller0>
[  333.996601][T13090] tipc: New replicast peer: 255.255.255.255
[  334.007252][T13090] tipc: Enabled bearer <udp:syz2>, priority 10
[  334.133191][T13095] batadv_slave_1: entered promiscuous mode
[  334.325362][T13099] wg1 speed is unknown, defaulting to 1000
[  334.333773][T13101] IPVS: Error joining to the multicast group
[  334.349156][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'.
[  334.478083][T13099] ip6_vti0 speed is unknown, defaulting to 1000
[  334.564196][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.758195][T13087] batadv_slave_1: left promiscuous mode
[  335.521364][T13110] sctp: [Deprecated]: syz.0.2042 (pid 13110) Use of int in max_burst socket option.
[  335.521364][T13110] Use struct sctp_assoc_value instead
[  335.604297][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.613285][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.749646][T13112] pimreg: entered allmulticast mode
[  336.411199][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  336.644206][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.653165][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.910007][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  337.684477][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.772824][T13136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.973365][T13140] syzkaller0: entered promiscuous mode
[  337.995436][T13140] syzkaller0: entered allmulticast mode
[  338.062494][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  338.203936][T13135] tipc: Resetting bearer <eth:syzkaller0>
[  338.235495][T13135] tipc: Disabling bearer <eth:syzkaller0>
[  338.530227][T13149] validate_nla: 2 callbacks suppressed
[  338.530251][T13149] netlink: 'syz.4.2054': attribute type 1 has an invalid length.
[  338.649979][T13147] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2053'.
[  338.667793][T13147] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2053'.
[  338.730663][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.739564][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.553715][T13172] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2061'.
[  339.764892][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.898401][T13183] wg1 speed is unknown, defaulting to 1000
[  339.980107][T13183] ip6_vti0 speed is unknown, defaulting to 1000
[  340.001525][T13185] wg1 speed is unknown, defaulting to 1000
[  340.127467][T13191] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2066'.
[  340.174276][T13191] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2066'.
[  340.233778][T13193] syzkaller0: entered promiscuous mode
[  340.282541][T13193] syzkaller0: entered allmulticast mode
[  340.412294][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'.
[  340.699388][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'.
[  340.756804][T13186] netlink: 'syz.1.2063': attribute type 17 has an invalid length.
[  340.788795][T13186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  340.809340][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.809404][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.880316][T13185] ip6_vti0 speed is unknown, defaulting to 1000
[  341.321837][T13223] wg1 speed is unknown, defaulting to 1000
[  341.361830][T13226] FAULT_INJECTION: forcing a failure.
[  341.361830][T13226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  341.367355][T13223] ip6_vti0 speed is unknown, defaulting to 1000
[  341.404336][T13226] CPU: 1 UID: 0 PID: 13226 Comm: syz.2.2075 Not tainted syzkaller #0 PREEMPT(full) 
[  341.404388][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  341.404412][T13226] Call Trace:
[  341.404420][T13226]  <TASK>
[  341.404429][T13226]  dump_stack_lvl+0x189/0x250
[  341.404459][T13226]  ? __pfx____ratelimit+0x10/0x10
[  341.404486][T13226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  341.404508][T13226]  ? __pfx__printk+0x10/0x10
[  341.404527][T13226]  ? __might_fault+0xb0/0x130
[  341.404562][T13226]  should_fail_ex+0x414/0x560
[  341.404593][T13226]  _copy_from_user+0x2d/0xb0
[  341.404616][T13226]  ___sys_recvmsg+0x12e/0x510
[  341.404642][T13226]  ? __pfx____sys_recvmsg+0x10/0x10
[  341.404687][T13226]  ? __fget_files+0x3a0/0x420
[  341.404716][T13226]  do_recvmmsg+0x307/0x770
[  341.404743][T13226]  ? __pfx_do_recvmmsg+0x10/0x10
[  341.404770][T13226]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  341.404803][T13226]  __x64_sys_recvmmsg+0x190/0x240
[  341.404822][T13226]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  341.404842][T13226]  ? do_syscall_64+0xbe/0xfa0
[  341.404864][T13226]  do_syscall_64+0xfa/0xfa0
[  341.404946][T13226]  ? lockdep_hardirqs_on+0x9c/0x150
[  341.404964][T13226]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.404981][T13226]  ? clear_bhb_loop+0x60/0xb0
[  341.404998][T13226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.405007][T13226] RIP: 0033:0x7feff658efc9
[  341.405019][T13226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.405028][T13226] RSP: 002b:00007feff73e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  341.405040][T13226] RAX: ffffffffffffffda RBX: 00007feff67e6090 RCX: 00007feff658efc9
[  341.405048][T13226] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000003
[  341.405054][T13226] RBP: 00007feff73e8090 R08: 0000000000000000 R09: 0000000000000000
[  341.405060][T13226] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  341.405066][T13226] R13: 00007feff67e6128 R14: 00007feff67e6090 R15: 00007ffcf85433a8
[  341.405083][T13226]  </TASK>
[  341.844249][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.854006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.324322][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.364751][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2081'.
[  342.367589][T13241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.482433][T13241] tipc: Resetting bearer <eth:syzkaller0>
[  342.565923][T13240] tipc: Disabling bearer <eth:syzkaller0>
[  342.844912][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'.
[  342.864479][T13250] syzkaller0: entered promiscuous mode
[  342.872349][T13250] syzkaller0: entered allmulticast mode
[  342.884278][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.606007][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 210 seconds
[  343.620107][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 210 seconds
[  343.632509][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 210 seconds
[  343.654956][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 210 seconds
[  343.927685][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.937421][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.964325][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.901288][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'.
[  346.004256][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.014860][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.454830][T13277] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.488148][T13277] syzkaller0: entered promiscuous mode
[  346.504726][T13277] syzkaller0: entered allmulticast mode
[  346.758220][T13282] tipc: Resetting bearer <eth:syzkaller0>
[  346.827531][T13276] tipc: Resetting bearer <eth:syzkaller0>
[  346.885881][T13276] tipc: Disabling bearer <eth:syzkaller0>
[  346.959239][T13287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.970580][T13284] tipc: Resetting bearer <eth:syzkaller0>
[  347.023976][T13283] tipc: Disabling bearer <eth:syzkaller0>
[  347.044192][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.052902][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.677489][T13300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.085977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.256473][T13327] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2108'.
[  348.288094][T13327] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2108'.
[  348.367364][T13331] IPVS: stopping backup sync thread 10690 ...
[  348.952529][T13348] x_tables: duplicate underflow at hook 1
[  349.124279][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.133765][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.266782][T13365] wg1 speed is unknown, defaulting to 1000
[  349.297754][T13365] ip6_vti0 speed is unknown, defaulting to 1000
[  349.320159][T13374] macvtap1: entered promiscuous mode
[  349.415282][T13374] veth1_to_hsr: entered promiscuous mode
[  349.440687][T13374] macvtap1: entered allmulticast mode
[  349.454666][T13374] veth1_to_hsr: entered allmulticast mode
[  349.599875][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'.
[  350.164277][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.248487][T13393] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.455898][T13396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  350.911925][T13408] wg1 speed is unknown, defaulting to 1000
[  350.949434][T13408] ip6_vti0 speed is unknown, defaulting to 1000
[  350.972284][T13409] wg1 speed is unknown, defaulting to 1000
[  351.288607][T13428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.315402][T13428] syzkaller0: entered promiscuous mode
[  351.321277][T13428] syzkaller0: entered allmulticast mode
[  351.393790][T13427] tipc: Resetting bearer <eth:syzkaller0>
[  351.445696][T13427] tipc: Disabling bearer <eth:syzkaller0>
[  351.485594][T13409] ip6_vti0 speed is unknown, defaulting to 1000
[  351.667779][T13432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.755853][T13434] syzkaller0: entered promiscuous mode
[  351.761545][T13434] syzkaller0: entered allmulticast mode
[  351.775343][T13436] openvswitch: netlink: Message has -2 unknown bytes.
[  352.144938][T13439] tipc: Resetting bearer <eth:syzkaller0>
[  352.238002][T13431] tipc: Resetting bearer <eth:syzkaller0>
[  352.315644][T13431] tipc: Disabling bearer <eth:syzkaller0>
[  352.450643][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'.
[  352.709391][T13463] wg1 speed is unknown, defaulting to 1000
[  352.769525][T13469] wg1 speed is unknown, defaulting to 1000
[  352.816009][T13463] ip6_vti0 speed is unknown, defaulting to 1000
[  352.892276][T13471] bond6: option xmit_hash_policy: invalid value (6)
[  352.941542][T13471] bond6 (unregistering): Released all slaves
[  353.759675][T13485] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2151'.
[  353.769965][T13485] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2151'.
[  353.908123][T13469] ip6_vti0 speed is unknown, defaulting to 1000
[  355.057666][T13501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.085017][T13501] syzkaller0: entered promiscuous mode
[  355.095511][T13501] syzkaller0: entered allmulticast mode
[  355.134207][T13501] FAULT_INJECTION: forcing a failure.
[  355.134207][T13501] name failslab, interval 1, probability 0, space 0, times 0
[  355.154782][T13501] CPU: 0 UID: 0 PID: 13501 Comm: syz.2.2157 Not tainted syzkaller #0 PREEMPT(full) 
[  355.154840][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  355.154851][T13501] Call Trace:
[  355.154911][T13501]  <TASK>
[  355.154919][T13501]  dump_stack_lvl+0x189/0x250
[  355.154954][T13501]  ? __pfx____ratelimit+0x10/0x10
[  355.154975][T13501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.154999][T13501]  ? __pfx__printk+0x10/0x10
[  355.155023][T13501]  ? __pfx___might_resched+0x10/0x10
[  355.155048][T13501]  should_fail_ex+0x414/0x560
[  355.155080][T13501]  should_failslab+0xa8/0x100
[  355.155100][T13501]  __kmalloc_noprof+0xcb/0x7f0
[  355.155122][T13501]  ? kfree+0x4d/0x6d0
[  355.155140][T13501]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  355.155172][T13501]  tomoyo_realpath_from_path+0xe3/0x5d0
[  355.155199][T13501]  ? tomoyo_domain+0xd9/0x130
[  355.155229][T13501]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  355.155251][T13501]  tomoyo_path_number_perm+0x1e8/0x5a0
[  355.155277][T13501]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  355.155340][T13501]  ? __fget_files+0x2a/0x420
[  355.155362][T13501]  ? __fget_files+0x3a0/0x420
[  355.155376][T13501]  ? __fget_files+0x2a/0x420
[  355.155398][T13501]  security_file_ioctl+0xcb/0x2d0
[  355.155421][T13501]  __se_sys_ioctl+0x47/0x170
[  355.155446][T13501]  do_syscall_64+0xfa/0xfa0
[  355.155466][T13501]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.155487][T13501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.155509][T13501]  ? clear_bhb_loop+0x60/0xb0
[  355.155531][T13501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.155549][T13501] RIP: 0033:0x7feff658efc9
[  355.155565][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.155580][T13501] RSP: 002b:00007feff7409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.155599][T13501] RAX: ffffffffffffffda RBX: 00007feff67e5fa0 RCX: 00007feff658efc9
[  355.155613][T13501] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005
[  355.155625][T13501] RBP: 00007feff7409090 R08: 0000000000000000 R09: 0000000000000000
[  355.155636][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.155651][T13501] R13: 00007feff67e6038 R14: 00007feff67e5fa0 R15: 00007ffcf85433a8
[  355.155683][T13501]  </TASK>
[  355.155704][T13501] ERROR: Out of memory at tomoyo_realpath_from_path.
[  355.245634][T13503] wg1 speed is unknown, defaulting to 1000
[  355.297959][T13501] tipc: Resetting bearer <eth:syzkaller0>
[  355.472236][T13500] tipc: Resetting bearer <eth:syzkaller0>
[  355.558074][T13500] tipc: Disabling bearer <eth:syzkaller0>
[  356.057931][T13503] ip6_vti0 speed is unknown, defaulting to 1000
[  356.372746][T13517] syzkaller0: entered promiscuous mode
[  356.378600][T13517] syzkaller0: entered allmulticast mode
[  356.713280][T13527] bond0: (slave rose0): Releasing backup interface
[  356.770467][T13527] pimreg: entered allmulticast mode
[  356.917004][T13529] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  356.945002][T13529] bond9 (unregistering): Released all slaves
[  357.295713][T13543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.305474][T13543] syzkaller0: entered promiscuous mode
[  357.313149][T13543] syzkaller0: entered allmulticast mode
[  357.583556][T13538] wg1 speed is unknown, defaulting to 1000
[  357.599063][T13545] tipc: Resetting bearer <eth:syzkaller0>
[  357.613268][T13542] tipc: Resetting bearer <eth:syzkaller0>
[  357.652429][T13542] tipc: Disabling bearer <eth:syzkaller0>
[  357.775276][T13538] ip6_vti0 speed is unknown, defaulting to 1000
[  357.906493][T13546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2168'.
[  358.964387][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.820635][T13566] wg1 speed is unknown, defaulting to 1000
[  359.849902][T13566] ip6_vti0 speed is unknown, defaulting to 1000
[  361.418070][T13604] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.431414][T13604] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2189'.
[  363.261165][T13641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2201'.
[  363.586479][T13649] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  363.695785][T13655] tipc: New replicast peer: 0.0.0.0
[  363.701397][T13655] tipc: Enabled bearer <udp:syz2>, priority 10
[  363.709976][T13655] tipc: New replicast peer: 255.255.255.255
[  364.551179][T13658] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2207'.
[  364.594813][T13658] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2207'.
[  364.631284][T13661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  364.663278][T13661] syzkaller0: entered promiscuous mode
[  364.672691][T13661] syzkaller0: entered allmulticast mode
[  364.683071][T13672] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2211'.
[  364.747241][T13661] tipc: Resetting bearer <eth:syzkaller0>
[  364.768828][T13660] tipc: Resetting bearer <eth:syzkaller0>
[  364.814279][  T982] tipc: Node number set to 1568483810
[  364.841348][T13660] tipc: Disabling bearer <eth:syzkaller0>
[  364.956386][T13685] pimreg: entered allmulticast mode
[  364.962334][T13686] netlink: 'syz.1.2216': attribute type 12 has an invalid length.
[  364.998374][T13686] netlink: 'syz.1.2216': attribute type 4 has an invalid length.
[  365.189441][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'.
[  365.215830][T13699] netlink: 'syz.3.2222': attribute type 20 has an invalid length.
[  365.290733][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'.
[  365.303054][T13706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.312646][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2224'.
[  365.314758][T13699] netlink: 'syz.3.2222': attribute type 20 has an invalid length.
[  365.325741][T13706] syzkaller0: entered promiscuous mode
[  365.337293][T13706] syzkaller0: entered allmulticast mode
[  365.378604][T13706] syzkaller0: mtu greater than device maximum
[  365.389777][T13705] tipc: Resetting bearer <eth:syzkaller0>
[  365.449080][T13705] tipc: Disabling bearer <eth:syzkaller0>
[  365.707463][T13715] syzkaller0: entered promiscuous mode
[  365.760642][T13715] syzkaller0: entered allmulticast mode
[  365.830192][T13722] pimreg: entered allmulticast mode
[  366.171893][T13736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.207351][T13736] syzkaller0: entered promiscuous mode
[  366.213410][T13736] syzkaller0: entered allmulticast mode
[  366.224787][T13718] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2228'.
[  366.336190][T13752] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2237'.
[  367.460137][T13763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.571380][T13778] FAULT_INJECTION: forcing a failure.
[  367.571380][T13778] name failslab, interval 1, probability 0, space 0, times 0
[  367.586927][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.0.2245 Not tainted syzkaller #0 PREEMPT(full) 
[  367.586954][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  367.586968][T13778] Call Trace:
[  367.586974][T13778]  <TASK>
[  367.586981][T13778]  dump_stack_lvl+0x189/0x250
[  367.587007][T13778]  ? __pfx____ratelimit+0x10/0x10
[  367.587025][T13778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.587045][T13778]  ? __pfx__printk+0x10/0x10
[  367.587066][T13778]  ? __pfx___might_resched+0x10/0x10
[  367.587083][T13778]  ? fs_reclaim_acquire+0x7d/0x100
[  367.587113][T13778]  should_fail_ex+0x414/0x560
[  367.587142][T13778]  should_failslab+0xa8/0x100
[  367.587160][T13778]  kmem_cache_alloc_node_noprof+0x77/0x710
[  367.587184][T13778]  ? __alloc_skb+0x112/0x2d0
[  367.587207][T13778]  ? netlink_autobind+0xdb/0x300
[  367.587228][T13778]  __alloc_skb+0x112/0x2d0
[  367.587254][T13778]  netlink_sendmsg+0x5c6/0xb30
[  367.587279][T13778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.587298][T13778]  ? aa_sock_msg_perm+0xf1/0x1d0
[  367.587325][T13778]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  367.587342][T13778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.587358][T13778]  __sock_sendmsg+0x21c/0x270
[  367.587381][T13778]  ____sys_sendmsg+0x505/0x830
[  367.587404][T13778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  367.587428][T13778]  ? import_iovec+0x74/0xa0
[  367.587452][T13778]  ___sys_sendmsg+0x21f/0x2a0
[  367.587471][T13778]  ? __pfx____sys_sendmsg+0x10/0x10
[  367.587520][T13778]  ? __fget_files+0x2a/0x420
[  367.587537][T13778]  ? __fget_files+0x3a0/0x420
[  367.587563][T13778]  __x64_sys_sendmsg+0x19b/0x260
[  367.587584][T13778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  367.587618][T13778]  ? __pfx_ksys_write+0x10/0x10
[  367.587645][T13778]  ? do_syscall_64+0xbe/0xfa0
[  367.587668][T13778]  do_syscall_64+0xfa/0xfa0
[  367.587687][T13778]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.587708][T13778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.587725][T13778]  ? clear_bhb_loop+0x60/0xb0
[  367.587744][T13778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.587767][T13778] RIP: 0033:0x7f542a58efc9
[  367.587784][T13778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.587800][T13778] RSP: 002b:00007f542b3f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.587820][T13778] RAX: ffffffffffffffda RBX: 00007f542a7e5fa0 RCX: 00007f542a58efc9
[  367.587832][T13778] RDX: 0000000024044880 RSI: 0000200000000540 RDI: 0000000000000004
[  367.587843][T13778] RBP: 00007f542b3f2090 R08: 0000000000000000 R09: 0000000000000000
[  367.587854][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.587864][T13778] R13: 00007f542a7e6038 R14: 00007f542a7e5fa0 R15: 00007fff15686fd8
[  367.587897][T13778]  </TASK>
[  368.012248][T13783] netlink: 'syz.0.2247': attribute type 13 has an invalid length.
[  368.021986][T13783] netlink: 'syz.0.2247': attribute type 17 has an invalid length.
[  368.067268][T13733] tipc: Resetting bearer <eth:syzkaller0>
[  368.176417][T13786] netlink: zone id is out of range
[  369.106361][T13733] tipc: Disabling bearer <eth:syzkaller0>
[  369.601808][T13808] æÿîÿ: entered promiscuous mode
[  369.627637][T13809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  369.770534][T13820] wg1 speed is unknown, defaulting to 1000
[  369.806154][T13820] ip6_vti0 speed is unknown, defaulting to 1000
[  369.827775][T13818] Cannot find set identified by id 65534 to match
[  369.842435][T13826] syzkaller0: entered promiscuous mode
[  369.849729][T13826] syzkaller0: entered allmulticast mode
[  370.435215][T13850] bond0: option mode: invalid value (254)
[  370.444256][T13850] bond0 (unregistering): Released all slaves
[  370.477624][T13853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.800656][T13872] FAULT_INJECTION: forcing a failure.
[  370.800656][T13872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.823503][T13872] CPU: 1 UID: 0 PID: 13872 Comm: syz.3.2277 Not tainted syzkaller #0 PREEMPT(full) 
[  370.823531][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  370.823542][T13872] Call Trace:
[  370.823549][T13872]  <TASK>
[  370.823558][T13872]  dump_stack_lvl+0x189/0x250
[  370.823586][T13872]  ? __pfx____ratelimit+0x10/0x10
[  370.823607][T13872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.823630][T13872]  ? __pfx__printk+0x10/0x10
[  370.823649][T13872]  ? __might_fault+0xb0/0x130
[  370.823683][T13872]  should_fail_ex+0x414/0x560
[  370.823713][T13872]  _copy_from_iter+0x1de/0x1790
[  370.823739][T13872]  ? rcu_is_watching+0x15/0xb0
[  370.823763][T13872]  ? kmalloc_reserve+0xbd/0x290
[  370.823789][T13872]  ? __pfx__copy_from_iter+0x10/0x10
[  370.823810][T13872]  ? __build_skb_around+0x262/0x3f0
[  370.823838][T13872]  ? netlink_sendmsg+0x642/0xb30
[  370.823853][T13872]  ? skb_put+0x11b/0x210
[  370.823881][T13872]  netlink_sendmsg+0x6b2/0xb30
[  370.823907][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.823927][T13872]  ? aa_sock_msg_perm+0xf1/0x1d0
[  370.823953][T13872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  370.823970][T13872]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.823988][T13872]  __sock_sendmsg+0x21c/0x270
[  370.824014][T13872]  ____sys_sendmsg+0x505/0x830
[  370.824038][T13872]  ? __pfx_____sys_sendmsg+0x10/0x10
[  370.824068][T13872]  ? import_iovec+0x74/0xa0
[  370.824096][T13872]  ___sys_sendmsg+0x21f/0x2a0
[  370.824114][T13872]  ? __pfx____sys_sendmsg+0x10/0x10
[  370.824164][T13872]  ? __fget_files+0x2a/0x420
[  370.824180][T13872]  ? __fget_files+0x3a0/0x420
[  370.824207][T13872]  __x64_sys_sendmsg+0x19b/0x260
[  370.824229][T13872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  370.824257][T13872]  ? __pfx_ksys_write+0x10/0x10
[  370.824284][T13872]  ? do_syscall_64+0xbe/0xfa0
[  370.824308][T13872]  do_syscall_64+0xfa/0xfa0
[  370.824326][T13872]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.824347][T13872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.824364][T13872]  ? clear_bhb_loop+0x60/0xb0
[  370.824385][T13872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.824402][T13872] RIP: 0033:0x7f957778efc9
[  370.824419][T13872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.824434][T13872] RSP: 002b:00007f95759f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  370.824454][T13872] RAX: ffffffffffffffda RBX: 00007f95779e6090 RCX: 00007f957778efc9
[  370.824465][T13872] RDX: 0000000024044880 RSI: 0000200000000540 RDI: 0000000000000004
[  370.824477][T13872] RBP: 00007f95759f6090 R08: 0000000000000000 R09: 0000000000000000
[  370.824488][T13872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.824499][T13872] R13: 00007f95779e6128 R14: 00007f95779e6090 R15: 00007ffc7bfdb388
[  370.824530][T13872]  </TASK>
[  371.724685][T13896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.763359][T13896] syzkaller0: entered promiscuous mode
[  371.781042][T13896] syzkaller0: entered allmulticast mode
[  371.793842][T13897] wg1 speed is unknown, defaulting to 1000
[  371.811782][T13896] tipc: Resetting bearer <eth:syzkaller0>
[  371.827622][T13889] tipc: Resetting bearer <eth:syzkaller0>
[  371.858565][T13889] tipc: Disabling bearer <eth:syzkaller0>
[  371.890590][T13897] ip6_vti0 speed is unknown, defaulting to 1000
[  373.200330][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'.
[  373.226503][T13928] wg1 speed is unknown, defaulting to 1000
[  373.252718][T13928] ip6_vti0 speed is unknown, defaulting to 1000
[  373.318883][T13936] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2297'.
[  373.557847][T13941] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2301'.
[  373.585517][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2301'.
[  373.647660][T13945] wg1 speed is unknown, defaulting to 1000
[  373.675083][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2301'.
[  373.695139][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 240 seconds
[  373.707730][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 240 seconds
[  373.720955][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 240 seconds
[  373.734359][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 240 seconds
[  374.475186][T13945] ip6_vti0 speed is unknown, defaulting to 1000
[  374.740652][T13966] FAULT_INJECTION: forcing a failure.
[  374.740652][T13966] name failslab, interval 1, probability 0, space 0, times 0
[  374.769816][T13966] CPU: 0 UID: 0 PID: 13966 Comm: syz.3.2308 Not tainted syzkaller #0 PREEMPT(full) 
[  374.769843][T13966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  374.769855][T13966] Call Trace:
[  374.769862][T13966]  <TASK>
[  374.769870][T13966]  dump_stack_lvl+0x189/0x250
[  374.769900][T13966]  ? __pfx____ratelimit+0x10/0x10
[  374.769922][T13966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.769945][T13966]  ? __pfx__printk+0x10/0x10
[  374.769970][T13966]  ? __pfx___might_resched+0x10/0x10
[  374.769988][T13966]  ? fs_reclaim_acquire+0x7d/0x100
[  374.770020][T13966]  should_fail_ex+0x414/0x560
[  374.770051][T13966]  should_failslab+0xa8/0x100
[  374.770071][T13966]  __kmalloc_noprof+0xcb/0x7f0
[  374.770098][T13966]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  374.770121][T13966]  ? rcu_is_watching+0x15/0xb0
[  374.770144][T13966]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  374.770172][T13966]  genl_family_rcv_msg_doit+0xb8/0x300
[  374.770199][T13966]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  374.770229][T13966]  ? apparmor_capable+0x137/0x1b0
[  374.770250][T13966]  ? bpf_lsm_capable+0x9/0x20
[  374.770275][T13966]  ? security_capable+0x7e/0x2e0
[  374.770305][T13966]  genl_rcv_msg+0x60e/0x790
[  374.770345][T13966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.770364][T13966]  ? __pfx_team_nl_options_set_doit+0x10/0x10
[  374.770389][T13966]  ? __asan_memcpy+0x40/0x70
[  374.770409][T13966]  ? __pfx_ref_tracker_free+0x10/0x10
[  374.770435][T13966]  netlink_rcv_skb+0x208/0x470
[  374.770459][T13966]  ? __lock_acquire+0xab9/0xd20
[  374.770477][T13966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  374.770499][T13966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  374.770542][T13966]  ? down_read+0x1ad/0x2e0
[  374.770569][T13966]  genl_rcv+0x28/0x40
[  374.770587][T13966]  netlink_unicast+0x82f/0x9e0
[  374.770620][T13966]  ? __pfx_netlink_unicast+0x10/0x10
[  374.770656][T13966]  ? netlink_sendmsg+0x642/0xb30
[  374.770670][T13966]  ? skb_put+0x11b/0x210
[  374.770698][T13966]  netlink_sendmsg+0x805/0xb30
[  374.770727][T13966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.770747][T13966]  ? aa_sock_msg_perm+0xf1/0x1d0
[  374.770774][T13966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  374.770791][T13966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  374.770808][T13966]  __sock_sendmsg+0x21c/0x270
[  374.770835][T13966]  ____sys_sendmsg+0x505/0x830
[  374.770861][T13966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  374.770888][T13966]  ? import_iovec+0x74/0xa0
[  374.770914][T13966]  ___sys_sendmsg+0x21f/0x2a0
[  374.770935][T13966]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.770993][T13966]  ? __fget_files+0x2a/0x420
[  374.771010][T13966]  ? __fget_files+0x3a0/0x420
[  374.771038][T13966]  __x64_sys_sendmsg+0x19b/0x260
[  374.771060][T13966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  374.771089][T13966]  ? __pfx_ksys_write+0x10/0x10
[  374.771118][T13966]  ? do_syscall_64+0xbe/0xfa0
[  374.771143][T13966]  do_syscall_64+0xfa/0xfa0
[  374.771164][T13966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.771181][T13966]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  374.771198][T13966]  ? clear_bhb_loop+0x60/0xb0
[  374.771220][T13966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.771236][T13966] RIP: 0033:0x7f957778efc9
[  374.771251][T13966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.771266][T13966] RSP: 002b:00007f957854a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  374.771284][T13966] RAX: ffffffffffffffda RBX: 00007f95779e5fa0 RCX: 00007f957778efc9
[  374.771296][T13966] RDX: 0000000024044880 RSI: 0000200000000540 RDI: 0000000000000004
[  374.771307][T13966] RBP: 00007f957854a090 R08: 0000000000000000 R09: 0000000000000000
[  374.771318][T13966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.771328][T13966] R13: 00007f95779e6038 R14: 00007f95779e5fa0 R15: 00007ffc7bfdb388
[  374.771361][T13966]  </TASK>
[  375.578275][T13975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.626386][T13975] syzkaller0: entered promiscuous mode
[  375.648362][T13975] syzkaller0: entered allmulticast mode
[  375.743287][T13975] tipc: Resetting bearer <eth:syzkaller0>
[  375.780374][T13972] tipc: Resetting bearer <eth:syzkaller0>
[  375.819314][T13972] tipc: Disabling bearer <eth:syzkaller0>
[  376.317667][T13993] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2318'.
[  376.361558][T13993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.217962][T14010] wg1 speed is unknown, defaulting to 1000
[  377.255697][T14010] ip6_vti0 speed is unknown, defaulting to 1000
[  378.066064][T14028] pimreg: entered allmulticast mode
[  378.559675][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2333'.
[  378.812939][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.821677][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  379.165488][T14051] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2338'.
[  379.233157][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'.
[  379.299501][T14055] netlink: 'syz.2.2340': attribute type 8 has an invalid length.
[  379.662908][T14070] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2347'.
[  379.673784][T14070] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2347'.
[  379.695699][T14071] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  379.735003][T14072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2345'.
[  379.790653][T14075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2345'.
[  380.025622][T14084] netlink: 'syz.2.2351': attribute type 1 has an invalid length.
[  380.064793][T14084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2351'.
[  380.879583][T14111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2359'.
[  381.101255][T14114] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.289910][T14116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.499763][T14116] syzkaller0: entered promiscuous mode
[  381.554203][T14116] syzkaller0: entered allmulticast mode
[  384.093639][T14116] tipc: Resetting bearer <eth:syzkaller0>
[  384.101892][T14115] tipc: Resetting bearer <eth:syzkaller0>
[  384.155915][T14115] tipc: Disabling bearer <eth:syzkaller0>
[  384.351033][T14152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.434719][T14159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.449556][T14158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.470771][T14159] syzkaller0: entered promiscuous mode
[  384.483526][T14159] syzkaller0: entered allmulticast mode
[  384.492441][T14158] syzkaller0: entered promiscuous mode
[  384.503239][T14158] syzkaller0: entered allmulticast mode
[  384.519537][T14158] tipc: Resetting bearer <eth:syzkaller0>
[  384.528849][T14155] tipc: Resetting bearer <eth:syzkaller0>
[  384.552124][T14155] tipc: Disabling bearer <eth:syzkaller0>
[  384.902816][T14159] tipc: Resetting bearer <eth:syzkaller0>
[  384.926338][T14192] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2384'.
[  384.972098][T14156] tipc: Resetting bearer <eth:syzkaller0>
[  384.983476][T14195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2384'.
[  385.029505][T14156] tipc: Disabling bearer <eth:syzkaller0>
[  385.198509][T14204] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  385.580304][T14221] FAULT_INJECTION: forcing a failure.
[  385.580304][T14221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  385.615075][T14221] CPU: 0 UID: 0 PID: 14221 Comm: syz.2.2395 Not tainted syzkaller #0 PREEMPT(full) 
[  385.615106][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  385.615118][T14221] Call Trace:
[  385.615125][T14221]  <TASK>
[  385.615134][T14221]  dump_stack_lvl+0x189/0x250
[  385.615161][T14221]  ? __pfx____ratelimit+0x10/0x10
[  385.615182][T14221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  385.615204][T14221]  ? __pfx__printk+0x10/0x10
[  385.615223][T14221]  ? __might_fault+0xb0/0x130
[  385.615258][T14221]  should_fail_ex+0x414/0x560
[  385.615289][T14221]  _copy_from_user+0x2d/0xb0
[  385.615312][T14221]  do_arpt_set_ctl+0x6c3/0xf10
[  385.615343][T14221]  ? __pfx___mutex_trylock_common+0x10/0x10
[  385.615363][T14221]  ? __local_bh_enable_ip+0x12d/0x1c0
[  385.615383][T14221]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  385.615406][T14221]  ? rcu_is_watching+0x15/0xb0
[  385.615426][T14221]  ? trace_contention_end+0x39/0x120
[  385.615464][T14221]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  385.615493][T14221]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  385.615525][T14221]  ? __pfx_aa_sk_perm+0x10/0x10
[  385.615545][T14221]  ? do_sys_openat2+0x154/0x1c0
[  385.615571][T14221]  nf_setsockopt+0x26f/0x290
[  385.615594][T14221]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  385.615619][T14221]  do_sock_setsockopt+0x17c/0x1b0
[  385.615639][T14221]  __x64_sys_setsockopt+0x13f/0x1b0
[  385.615668][T14221]  do_syscall_64+0xfa/0xfa0
[  385.615687][T14221]  ? lockdep_hardirqs_on+0x9c/0x150
[  385.615706][T14221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.615723][T14221]  ? clear_bhb_loop+0x60/0xb0
[  385.615745][T14221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.615761][T14221] RIP: 0033:0x7feff658efc9
[  385.615777][T14221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  385.615793][T14221] RSP: 002b:00007feff7409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  385.615810][T14221] RAX: ffffffffffffffda RBX: 00007feff67e5fa0 RCX: 00007feff658efc9
[  385.615823][T14221] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003
[  385.615833][T14221] RBP: 00007feff7409090 R08: 0000000000000408 R09: 0000000000000000
[  385.615844][T14221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.615855][T14221] R13: 00007feff67e6038 R14: 00007feff67e5fa0 R15: 00007ffcf85433a8
[  385.615886][T14221]  </TASK>
[  386.649823][T14276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2414'.
[  386.674013][T14266] wg1 speed is unknown, defaulting to 1000
[  386.716762][T14266] ip6_vti0 speed is unknown, defaulting to 1000
[  386.753259][T14280] FAULT_INJECTION: forcing a failure.
[  386.753259][T14280] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  386.794650][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.0.2416 Not tainted syzkaller #0 PREEMPT(full) 
[  386.794675][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  386.794685][T14280] Call Trace:
[  386.794691][T14280]  <TASK>
[  386.794698][T14280]  dump_stack_lvl+0x189/0x250
[  386.794724][T14280]  ? __pfx____ratelimit+0x10/0x10
[  386.794743][T14280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.794765][T14280]  ? __pfx__printk+0x10/0x10
[  386.794803][T14280]  should_fail_ex+0x414/0x560
[  386.794833][T14280]  _copy_to_user+0x31/0xb0
[  386.794856][T14280]  simple_read_from_buffer+0xe1/0x170
[  386.794885][T14280]  proc_fail_nth_read+0x1b3/0x220
[  386.794908][T14280]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  386.794931][T14280]  ? rw_verify_area+0x2a6/0x4d0
[  386.794952][T14280]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  386.794974][T14280]  vfs_read+0x200/0xa30
[  386.795014][T14280]  ? __pfx_vfs_read+0x10/0x10
[  386.795043][T14280]  ? __pfx_aa_sk_perm+0x10/0x10
[  386.795065][T14280]  ? do_sock_setsockopt+0x185/0x1b0
[  386.795089][T14280]  ksys_read+0x145/0x250
[  386.795114][T14280]  ? __pfx_ksys_read+0x10/0x10
[  386.795139][T14280]  ? do_syscall_64+0xbe/0xfa0
[  386.795162][T14280]  do_syscall_64+0xfa/0xfa0
[  386.795180][T14280]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.795200][T14280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.795217][T14280]  ? clear_bhb_loop+0x60/0xb0
[  386.795238][T14280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.795253][T14280] RIP: 0033:0x7f542a58d9dc
[  386.795270][T14280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  386.795284][T14280] RSP: 002b:00007f542b3f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  386.795303][T14280] RAX: ffffffffffffffda RBX: 00007f542a7e5fa0 RCX: 00007f542a58d9dc
[  386.795316][T14280] RDX: 000000000000000f RSI: 00007f542b3f20a0 RDI: 0000000000000005
[  386.795327][T14280] RBP: 00007f542b3f2090 R08: 0000000000000000 R09: 0000000000000000
[  386.795339][T14280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.795350][T14280] R13: 00007f542a7e6038 R14: 00007f542a7e5fa0 R15: 00007fff15686fd8
[  386.795381][T14280]  </TASK>
[  387.371000][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2409'.
[  387.408532][T14292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2418'.
[  388.285361][T14317] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2426'.
[  388.678724][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'.
[  389.277644][T14344] wg1 speed is unknown, defaulting to 1000
[  389.304038][T14350] syz.3.2435 (14350) used obsolete PPPIOCDETACH ioctl
[  389.415832][T14344] ip6_vti0 speed is unknown, defaulting to 1000
[  389.491928][T14358] wg1 speed is unknown, defaulting to 1000
[  389.933974][T14367] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  390.044900][T14371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'.
[  390.119574][T14376] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  390.172879][T14358] ip6_vti0 speed is unknown, defaulting to 1000
[  390.278027][T14383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2450'.
[  390.356369][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2436'.
[  390.480456][T14386] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2451'.
[  390.529068][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2451'.
[  390.964387][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  391.060937][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'.
[  391.089600][T14402] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  391.250803][T14406] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.310366][T14409] netlink: 'syz.0.2460': attribute type 8 has an invalid length.
[  391.320316][T14409] netlink: 'syz.0.2460': attribute type 9 has an invalid length.
[  391.344908][T14409] netlink: 'syz.0.2460': attribute type 10 has an invalid length.
[  391.364459][T14409] netlink: 'syz.0.2460': attribute type 11 has an invalid length.
[  391.383879][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'.
[  391.753624][T14419] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  392.274340][T14437] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2472'.
[  392.295401][T14437] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2472'.
[  392.344635][T14440] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.570855][T14433] wg1 speed is unknown, defaulting to 1000
[  392.607048][T14433] ip6_vti0 speed is unknown, defaulting to 1000
[  393.309686][T14470] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2479'.
[  393.322366][T14470] bridge_slave_1: entered promiscuous mode
[  393.330135][T14470] bridge_slave_1: entered allmulticast mode
[  393.453702][T14459] wg1 speed is unknown, defaulting to 1000
[  393.463740][T14466] wg1 speed is unknown, defaulting to 1000
[  393.473219][T14466] ip6_vti0 speed is unknown, defaulting to 1000
[  393.786556][T14459] ip6_vti0 speed is unknown, defaulting to 1000
[  393.856707][T14479] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  394.078318][T14483] sctp: [Deprecated]: syz.2.2485 (pid 14483) Use of int in max_burst socket option deprecated.
[  394.078318][T14483] Use struct sctp_assoc_value instead
[  395.493632][T14496] wg1 speed is unknown, defaulting to 1000
[  395.537195][T14496] ip6_vti0 speed is unknown, defaulting to 1000
[  395.713899][T14498] __nla_validate_parse: 1 callbacks suppressed
[  395.713919][T14498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2489'.
[  396.229436][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'.
[  396.265019][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'.
[  396.289705][T14505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.321278][T14508] netlink: 'syz.4.2492': attribute type 6 has an invalid length.
[  396.409359][T14505] netlink: 'syz.3.2491': attribute type 4 has an invalid length.
[  396.447848][T14505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2491'.
[  396.562553][T14511] wg1 speed is unknown, defaulting to 1000
[  396.602234][T14511] ip6_vti0 speed is unknown, defaulting to 1000
[  399.323020][T14541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.610709][   T30] audit: type=1800 audit(1761620306.484:7): pid=14546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2505" name=CB dev="tmpfs" ino=2741 res=0 errno=0
[  400.189744][T14570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.068872][T14589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.089067][T14581] wg1 speed is unknown, defaulting to 1000
[  401.097199][T14591] syzkaller0: entered promiscuous mode
[  401.127519][T14591] syzkaller0: entered allmulticast mode
[  401.182670][T14581] ip6_vti0 speed is unknown, defaulting to 1000
[  401.197298][T14586] tipc: Resetting bearer <eth:syzkaller0>
[  401.249693][T14583] tipc: Resetting bearer <eth:syzkaller0>
[  401.341608][T14583] tipc: Disabling bearer <eth:syzkaller0>
[  401.531503][T14598] wg1 speed is unknown, defaulting to 1000
[  401.702676][T14608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.969913][T14621] wg1 speed is unknown, defaulting to 1000
[  401.995958][T14617] Cannot find set identified by id 65534 to match
[  402.113135][T14598] ip6_vti0 speed is unknown, defaulting to 1000
[  402.730421][T14621] ip6_vti0 speed is unknown, defaulting to 1000
[  403.792479][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 270 seconds
[  403.812474][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 270 seconds
[  403.831870][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 270 seconds
[  403.849131][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 270 seconds
[  408.423769][T14653] wg1 speed is unknown, defaulting to 1000
[  409.060269][T14653] ip6_vti0 speed is unknown, defaulting to 1000
[  430.550713][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  430.669317][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  430.760322][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  430.810961][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  430.892445][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  431.010889][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  431.441949][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  431.501977][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  431.683545][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  431.843224][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  432.013586][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  432.240132][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  432.430781][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  432.943066][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  433.112541][ T5849] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  433.171607][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  433.311011][ T5849] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  433.382914][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  433.591887][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  433.830493][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  433.902814][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 300 seconds
[  433.920872][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 300 seconds
[  433.943388][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 300 seconds
[  434.141793][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 300 seconds
[  434.653776][ T5834] Bluetooth: hci6: command tx timeout
[  434.740973][ T5848] Bluetooth: hci5: command tx timeout
[  435.853979][ T5848] Bluetooth: hci7: command tx timeout
[  436.243247][T14660] wg1 speed is unknown, defaulting to 1000
[  436.500732][T14670] wg1 speed is unknown, defaulting to 1000
[  436.622660][T14669] wg1 speed is unknown, defaulting to 1000
[  436.650530][ T5848] Bluetooth: hci8: command tx timeout
[  436.741779][ T5848] Bluetooth: hci6: command tx timeout
[  436.780186][T14675] wg1 speed is unknown, defaulting to 1000
[  436.811382][ T5848] Bluetooth: hci5: command tx timeout
[  437.081777][T14673] wg1 speed is unknown, defaulting to 1000
[  437.953053][ T5848] Bluetooth: hci7: command tx timeout
[  438.733263][ T5848] Bluetooth: hci8: command tx timeout
[  438.812679][ T5848] Bluetooth: hci6: command tx timeout
[  438.890206][ T5848] Bluetooth: hci5: command tx timeout
[  439.340404][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  439.411456][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  439.483250][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  439.673913][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  439.913176][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  440.013163][ T5834] Bluetooth: hci7: command tx timeout
[  440.277808][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  440.293860][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.819599][ T5834] Bluetooth: hci8: command tx timeout
[  440.900275][ T5834] Bluetooth: hci6: command tx timeout
[  440.972384][ T5834] Bluetooth: hci5: command tx timeout
[  442.093202][ T5834] Bluetooth: hci7: command tx timeout
[  442.730427][ T5834] Bluetooth: hci9: command tx timeout
[  442.913736][ T5834] Bluetooth: hci8: command tx timeout
[  444.833190][ T5834] Bluetooth: hci9: command tx timeout
[  446.913976][ T5834] Bluetooth: hci9: command tx timeout
[  448.980021][ T5834] Bluetooth: hci9: command tx timeout
[  452.580312][ T5848] Bluetooth: hci4: command 0x0406 tx timeout
[  455.609400][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  462.681437][T14669] ip6_vti0 speed is unknown, defaulting to 1000
[  462.701783][T14677] wg1 speed is unknown, defaulting to 1000
[  464.143113][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 330 seconds
[  464.220858][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 330 seconds
[  464.241608][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 330 seconds
[  464.261659][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 330 seconds
[  477.112933][T14673] ip6_vti0 speed is unknown, defaulting to 1000
[  484.520573][T14675] ip6_vti0 speed is unknown, defaulting to 1000
[  490.851319][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  491.022820][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  491.143848][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  491.373947][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  491.520685][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  493.141004][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  493.162075][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  493.250290][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  493.340886][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  493.360431][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  493.463845][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  493.663872][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  493.971365][ T5849] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  494.019891][ T5849] Bluetooth: hci3: command tx timeout
[  494.162621][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  494.240288][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  494.439617][ T5848] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  494.452852][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  494.603378][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  494.703160][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 360 seconds
[  494.721581][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 360 seconds
[  494.777211][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 360 seconds
[  494.799412][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 360 seconds
[  495.070594][ T5847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  495.371282][ T5848] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  496.102973][ T5848] Bluetooth: hci3: command tx timeout
[  496.971055][ T5848] Bluetooth: hci10: command tx timeout
[  498.171416][ T5848] Bluetooth: hci3: command tx timeout
[  498.250744][ T5848] Bluetooth: hci11: command tx timeout
[  498.656705][ T5848] Bluetooth: hci12: command tx timeout
[  498.972935][ T6926] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.049572][ T5848] Bluetooth: hci10: command tx timeout
[  499.132865][ T6913] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.497340][T14660] ip6_vti0 speed is unknown, defaulting to 1000
[  500.260899][ T5848] Bluetooth: hci3: command tx timeout
[  500.333517][ T5848] Bluetooth: hci11: command tx timeout
[  500.739909][ T5848] Bluetooth: hci12: command tx timeout
[  500.882399][ T6926] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.023721][ T6904] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  501.133001][ T5848] Bluetooth: hci10: command tx timeout
[  501.792009][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  501.833907][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  502.433842][ T5848] Bluetooth: hci11: command tx timeout
[  502.810807][ T5848] Bluetooth: hci12: command tx timeout
[  503.212546][ T5848] Bluetooth: hci10: command tx timeout
[  504.501595][ T5849] Bluetooth: hci11: command tx timeout
[  504.701826][ T5849] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  504.800168][ T5849] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  504.862260][ T5849] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  504.890206][ T5834] Bluetooth: hci12: command tx timeout
[  505.220617][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  505.343779][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  507.772233][ T5834] Bluetooth: hci13: command tx timeout
[  509.850006][ T5834] Bluetooth: hci13: command tx timeout
[  511.940378][ T5834] Bluetooth: hci13: command tx timeout
[  514.013122][ T5834] Bluetooth: hci13: command tx timeout
[  524.790016][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 390 seconds
[  524.890233][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 390 seconds
[  524.911954][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 390 seconds
[  524.932033][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 390 seconds
[  542.220890][ T3591] bond0 (unregistering): (slave `): Releasing backup interface
[  543.253257][ T3591] bond0 (unregistering): Released all slaves
[  550.710928][ T3591] bond1 (unregistering): Released all slaves
[  551.103912][ T3591] bond2 (unregistering): Released all slaves
[  552.252322][ T5849] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  552.273797][ T5849] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  552.381339][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  552.510996][ T5847] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  552.563345][ T5849] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  552.712254][ T5847] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  553.482485][T14707] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  553.632873][T14707] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  553.661300][T14707] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  553.733296][T14707] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  553.813068][T14707] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  554.120660][T14710] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  554.182414][T14708] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  554.200961][T14710] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  554.521650][T14710] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  555.531640][ T5847] Bluetooth: hci5: command 0x0406 tx timeout
[  555.611006][ T5847] Bluetooth: hci6: command 0x0406 tx timeout
[  555.781252][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 420 seconds
[  555.803251][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 420 seconds
[  555.822462][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 420 seconds
[  555.841039][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 420 seconds
[  557.451895][ T5150] Bluetooth: hci14: command tx timeout
[  557.913492][ T5849] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  558.178868][ T5847] Bluetooth: hci15: command tx timeout
[  558.191988][ T5847] Bluetooth: hci16: command tx timeout
[  558.220977][T14710] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  558.390095][T14710] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  558.781196][T14710] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  558.881139][T14710] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  559.553563][T14710] Bluetooth: hci14: command tx timeout
[  560.123307][T14710] Bluetooth: hci8: command 0x0406 tx timeout
[  560.142748][ T5150] Bluetooth: hci7: command 0x0406 tx timeout
[  560.271527][T14710] Bluetooth: hci15: command tx timeout
[  560.321216][ T5150] Bluetooth: hci16: command tx timeout
[  561.303100][ T5849] Bluetooth: hci17: command tx timeout
[  561.381558][ T3591] bond3 (unregistering): Released all slaves
[  561.620782][ T5849] Bluetooth: hci14: command tx timeout
[  562.431853][ T5849] Bluetooth: hci16: command tx timeout
[  562.433915][ T5848] Bluetooth: hci15: command tx timeout
[  563.041219][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  563.121079][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  563.231016][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  563.281152][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  563.377340][ T5150] Bluetooth: hci17: command tx timeout
[  563.481166][ T5150] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  563.687299][ T5150] Bluetooth: hci14: command tx timeout
[  563.760422][T14710] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  563.923502][T14710] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  564.493091][T14710] Bluetooth: hci16: command tx timeout
[  564.501511][ T5848] Bluetooth: hci15: command tx timeout
[  565.211832][T14710] Bluetooth: hci9: command 0x0406 tx timeout
[  565.452707][ T5849] Bluetooth: hci17: command tx timeout
[  566.253610][ T5849] Bluetooth: hci18: command tx timeout
[  566.932951][ T3591] bond4 (unregistering): (slave bond5): Releasing backup interface
[  567.230866][ T3591] bond4 (unregistering): Released all slaves
[  567.540874][ T5849] Bluetooth: hci17: command tx timeout
[  568.340698][ T5849] Bluetooth: hci18: command tx timeout
[  570.422760][ T5849] Bluetooth: hci18: command tx timeout
[  571.682432][ T3591] bond5 (unregistering): Released all slaves
[  572.360354][ T3591] bond6 (unregistering): (slave vcan0): Releasing backup interface
[  572.490441][ T5849] Bluetooth: hci18: command tx timeout
[  572.682739][ T3591] bond6 (unregistering): Released all slaves
[  577.641856][ T3591] bond7 (unregistering): Released all slaves
[  577.902936][ T3591] bond8 (unregistering): Released all slaves
[  578.499025][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  578.723137][T14670] ip6_vti0 speed is unknown, defaulting to 1000
[  581.563183][ T3591] tipc: Disabling bearer <udp:syz2>
[  581.643789][ T3591] tipc: Left network mode
[  586.269815][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 450 seconds
[  586.292117][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 450 seconds
[  586.311222][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 450 seconds
[  586.330341][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 450 seconds
[  596.432099][T14677] ip6_vti0 speed is unknown, defaulting to 1000
[  596.632465][T14715] wg1 speed is unknown, defaulting to 1000
[  597.070588][T14689] wg1 speed is unknown, defaulting to 1000
[  597.493011][T14692] wg1 speed is unknown, defaulting to 1000
[  597.940553][T14702] wg1 speed is unknown, defaulting to 1000
[  598.212885][T14712] wg1 speed is unknown, defaulting to 1000
[  598.763339][T14700] wg1 speed is unknown, defaulting to 1000
[  599.251588][T14705] wg1 speed is unknown, defaulting to 1000
[  600.171598][T14686] wg1 speed is unknown, defaulting to 1000
[  600.742113][T14688] wg1 speed is unknown, defaulting to 1000
[  610.883250][T14710] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  610.962304][T14710] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  611.052821][T14710] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  611.340504][T14710] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  611.611147][T14710] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  613.333600][ T5849] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  613.569751][ T5849] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  613.692959][ T5849] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  613.930219][ T5849] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  614.030158][ T5848] Bluetooth: hci13: command tx timeout
[  614.081583][ T5848] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  614.801866][ T5849] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  614.873245][ T5849] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  615.051239][ T5834] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  615.123328][ T5834] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  615.143336][ T5150] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  615.351943][ T5834] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  615.423335][ T5834] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  615.493604][ T5834] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  615.663036][ T5834] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  615.932110][ T5834] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  616.103778][ T5849] Bluetooth: hci13: command tx timeout
[  616.410721][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  616.731172][ T5849] Bluetooth: hci19: command tx timeout
[  617.112286][   T56] block nbd0: Possible stuck request ffff8880250d0000: control (read@0,1024B). Runtime 480 seconds
[  617.143207][   T56] block nbd0: Possible stuck request ffff8880250d01c0: control (read@1024,1024B). Runtime 480 seconds
[  617.169818][   T56] block nbd0: Possible stuck request ffff8880250d0380: control (read@2048,1024B). Runtime 480 seconds
[  617.200306][   T56] block nbd0: Possible stuck request ffff8880250d0540: control (read@3072,1024B). Runtime 480 seconds
[  618.170725][ T5848] Bluetooth: hci13: command tx timeout
[  618.181331][ T5848] Bluetooth: hci20: command tx timeout
[  618.262017][ T5849] Bluetooth: hci21: command tx timeout
[  618.823847][ T5849] Bluetooth: hci19: command tx timeout
[  620.249871][ T5150] Bluetooth: hci20: command tx timeout
[  620.262341][ T5834] Bluetooth: hci13: command tx timeout
[  620.332522][ T5834] Bluetooth: hci21: command tx timeout
[  620.893303][ T5834] Bluetooth: hci19: command tx timeout
[  621.389765][   T31] INFO: task syz.2.2527:14621 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  621.532663][ T5834] Bluetooth: hci10: command 0x0406 tx timeout
[  621.549454][ T5847] Bluetooth: hci12: command 0x0406 tx timeout
[  621.561843][ T5150] Bluetooth: hci11: command 0x0406 tx timeout
[  621.623639][   T31]       Not tainted syzkaller #0
[  621.663935][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  621.750955][   T31] task:syz.2.2527      state:D stack:23712 pid:14621 tgid:14616 ppid:5845   task_flags:0x400140 flags:0x00080003
[  621.850830][   T31] Call Trace:
[  621.903738][   T31]  <TASK>
[  621.943342][   T31]  __schedule+0x1798/0x4cc0
[  621.993070][   T31]  ? __lock_acquire+0xab9/0xd20
[  622.123326][   T31]  ? __lock_acquire+0xab9/0xd20
[  622.202079][   T31]  ? __pfx___schedule+0x10/0x10
[  622.300947][   T31]  ? schedule+0x91/0x360
[  622.340753][ T5150] Bluetooth: hci20: command tx timeout
[  622.413269][ T5150] Bluetooth: hci21: command tx timeout
[  622.530097][   T31]  schedule+0x165/0x360
[  622.623189][   T31]  schedule_preempt_disabled+0x13/0x30
[  622.762328][   T31]  rwsem_down_write_slowpath+0x872/0xfe0
[  622.831837][ T5847] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  622.880807][   T31]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  622.913558][ T5847] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  622.972708][ T5847] Bluetooth: hci19: command tx timeout
[  623.019602][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  623.031157][   T31]  ? __lock_acquire+0xab9/0xd20
[  623.039012][   T31]  ? rdma_dev_exit_net+0x8c/0x340
[  623.061769][ T5847] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  623.112055][   T31]  down_write+0x1ab/0x1f0
[  623.193384][   T31]  ? __pfx_down_write+0x10/0x10
[  623.243572][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  623.293478][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  623.310997][   T31]  ? rdma_net_to_dev_net+0x1ed/0x240
[  623.381241][   T31]  rdma_dev_exit_net+0x8c/0x340
[  623.419659][ T5847] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  623.492873][   T31]  ? __pfx___might_resched+0x10/0x10
[  623.599843][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  623.612867][ T5847] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  623.992540][   T31]  ? net_generic+0x1e/0x240
[  624.122386][   T31]  ? mutex_is_locked+0x17/0x50
[  624.278933][   T31]  ? rtnl_is_locked+0x15/0x20
[  624.283852][   T31]  ops_undo_list+0x49a/0x990
[  624.409901][ T5847] Bluetooth: hci20: command tx timeout
[  624.481591][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  624.492441][ T5847] Bluetooth: hci21: command tx timeout
[  624.552814][   T31]  ? ops_init+0x469/0x5c0
[  624.603226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  624.610109][   T31]  setup_net+0x2d6/0x320
[  624.610156][   T31]  ? __pfx_setup_net+0x10/0x10
[  624.610185][   T31]  ? copy_net_ns+0x337/0x4e0
[  624.610210][   T31]  ? down_read_killable+0x1d1/0x350
[  624.610236][   T31]  ? preinit_net+0x47d/0x780
[  624.610264][   T31]  copy_net_ns+0x34e/0x4e0
[  624.610293][   T31]  create_new_namespaces+0x3f3/0x720
[  624.610321][   T31]  ? security_capable+0x7e/0x2e0
[  624.610355][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  624.610380][   T31]  ksys_unshare+0x4c8/0x8c0
[  624.610413][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  624.610453][   T31]  __x64_sys_unshare+0x38/0x50
[  624.610477][   T31]  do_syscall_64+0xfa/0xfa0
[  624.610500][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  624.610523][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.610542][   T31]  ? clear_bhb_loop+0x60/0xb0
[  624.610567][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.610588][   T31] RIP: 0033:0x7feff658efc9
[  624.610606][   T31] RSP: 002b:00007feff73e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  624.610634][   T31] RAX: ffffffffffffffda RBX: 00007feff67e6090 RCX: 00007feff658efc9
[  624.610650][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  624.610673][   T31] RBP: 00007feff6611f91 R08: 0000000000000000 R09: 0000000000000000
[  624.610686][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  624.610700][   T31] R13: 00007feff67e6128 R14: 00007feff67e6090 R15: 00007ffcf85433a8
[  624.610735][   T31]  </TASK>
[  624.610807][   T31] 
[  624.610807][   T31] Showing all locks held in the system:
[  624.610820][   T31] 1 lock held by khungtaskd/31:
[  624.610833][   T31]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  624.610907][   T31] 6 locks held by aoe_tx0/1300:
[  624.610932][   T31] 4 locks held by kworker/u8:9/3591:
[  624.610944][   T31]  #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  624.610997][   T31]  #1: ffffc9000c6e7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  624.611049][   T31]  #2: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  624.611106][   T31]  #3: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340
[  624.611158][   T31] 4 locks held by kworker/u9:1/5150:
[  624.611170][   T31]  #0: ffff88804a0a8148 ((wq_completion)hci22#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  624.611228][   T31]  #1: ffffc9000efafba0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  624.611281][   T31]  #2: ffff88802f9c00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  624.611334][   T31]  #3: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  624.611397][   T31] 2 locks held by getty/5598:
[  624.611406][   T31]  #0: ffff88814dcad0a0 (&tty->ldisc_sem
[  624.640356][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  624.992043][   T31] ){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  625.129770][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  625.253059][   T31] 2 locks held by sshd-session/5816:
[  625.320428][   T31] 5 locks held by kworker/u9:8/5848:
[  625.401818][   T31]  #0: ffff888027c29948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  625.531901][   T31]  #1: ffffc900044afba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  625.730341][   T31]  #2: ffff8880308e4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  625.860119][   T31]  #3: ffff8880308e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  625.923758][   T31]  #4: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  626.021226][   T31] 7 locks held by kworker/u9:9/5849:
[  626.081092][   T31]  #0: ffff88807d053948 ((wq_completion)hci12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  626.192761][   T31]  #1: ffffc900044cfba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  626.349879][   T31]  #2: ffff88804e2c4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  626.451585][   T31]  #3: ffff88804e2c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  626.533541][   T31]  #4: ffffffff8f434a28 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310
[  626.623840][   T31]  #5: ffff8880730c7338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  626.650616][   T31]  #6: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  626.669982][   T31] 1 lock held by udevd/6379:
[  626.677509][   T31]  #0: ffff888024f36358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  626.689157][   T31] 6 locks held by kworker/u8:27/6927:
[  626.697008][   T31] 2 locks held by syz.0.2520/14598:
[  626.702231][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  626.723774][   T31]  #1: ffff88801c6a8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130
[  626.743934][   T31] 2 locks held by syz.2.2527/14621:
[  626.843594][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  626.913200][   T31]  #1: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340
[  626.979855][   T31] 2 locks held by syz.1.2539/14653:
[  627.021021][   T31] 5 locks held by syz.3.2542/14660:
[  627.102691][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  627.193932][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  627.281943][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  627.412768][   T31]  #3: ffff8880726dcf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[  627.572908][   T31]  #4: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  627.659166][   T31] 3 locks held by syz-executor/14669:
[  627.723378][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  627.839451][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  627.952932][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  628.029167][   T31] 3 locks held by syz-executor/14670:
[  628.071381][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  628.139296][   T31]  #1: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990
[  628.231249][   T31]  #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  628.300249][   T31] 4 locks held by syz-executor/14673:
[  628.351152][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  628.432628][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  628.521881][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  628.619866][   T31]  #3: ffff8880726dcf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[  628.721929][   T31] 4 locks held by syz-executor/14675:
[  628.781742][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  628.841869][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  628.961780][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  629.072960][   T31]  #3: ffff8880726dcf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0
[  629.189817][   T31] 3 locks held by syz-executor/14677:
[  629.263301][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  629.342785][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  629.449259][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  629.533227][   T31] 3 locks held by syz-executor/14686:
[  629.590266][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  629.711789][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  629.809162][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  629.903847][   T31] 3 locks held by syz-executor/14688:
[  629.951255][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  630.080960][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  630.143610][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  630.230198][   T31] 3 locks held by syz-executor/14689:
[  630.322292][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  630.433439][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  630.451668][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  630.466592][   T31] 3 locks held by syz-executor/14692:
[  630.472401][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  630.503516][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  630.619423][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  630.693439][   T31] 3 locks held by syz-executor/14700:
[  630.729100][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  630.792215][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  630.862719][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  630.951244][   T31] 3 locks held by syz-executor/14702:
[  630.999528][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  631.041522][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270
[  631.101286][   T31]  #2: ffffffff8f037270 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270
[  631.199083][   T31] 3 locks held by syz-executor/14705:
[  631.272584][   T31]  #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  631.342652][   T31]  #1: ffffffff8f0370b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270